General

  • Target
    Pivotal.zip
  • Size 83.4MB
  • Sample260704-ldgdjsdw6t
  • SHA256 ad54b1d38fbd3ab08810191de0c9fb4211f2d8752cc73e8a9f63c277f89e7f6a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      A3DLIBS.dll
    • Size 846KB
    • SHA256 945ee95d7da31d4184572c33a3eb6cf34cbde403db968fb11719ea32c0d55af1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      AIDE.dll
    • Size 3.6MB
    • SHA256 4875766a587e6dc7f1da6deca5890bd597fb46227e16e7c2036e8cc73ce6c602
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      AXE8SharedExpat.dll
    • Size 144KB
    • SHA256 d08f9350d8b19d22c0679ab1a8fa2a32c7f158f15420219c6d0560f693aba0f8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      AdobeLinguistic.dll
    • Size 5.3MB
    • SHA256 71d2e683df924e480e961fea8614890ca2669da6e9d5edc873fe250123ea883c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Launcher.exe
    • Size 969KB
    • SHA256 5d695d8a0bb1d919cc77a2aa2488a61797bfa065238160278ee458120630aaf9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Photoshop.dll
    • Size 1.1MB
    • SHA256 0a8beb62437807541fb55d5cd5f240711aacb67645c68ef8ead57a820731f43a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Secant.dll
    • Size 72.7MB
    • SHA256 eba0d04d9c43149771c2ddb63e6f0af212312204e08179f710fb8a9263fddd7b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      ZXPSignLib-minimal.dll
    • Size 1.9MB
    • SHA256 ed6166d46626ee793dbe5ed4ab73c71fb64c15868236a558aef6b8f3a9cc7e6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      api-ms-win-crt-process-l1-1-0.dll
    • Size 12KB
    • SHA256 3af38920e767bd9ebc08f88eaf2d08c748a267c7ec60eab41c49b3f282a4cf65
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      dnssd.dll
    • Size 44KB
    • SHA256 4e8665eecbf1bc0c5e2d8114eecac636ac06f9bfb80d4eae5c0f173a95fd32e4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      libvlc.dll
    • Size 6.3MB
    • SHA256 4609e83ce5d45bae3d39794933e15841b2ca0819200d8907d55fac3232ce7c00
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      shared/AdobeXMPScript.dll
    • Size 136KB
    • SHA256 d3fdfef5bb32e1a0a71f769e53c700042914300f23daf2f9f6086965a8ed85c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      shared/PlugPlugExternalObject.dll
    • Size 35KB
    • SHA256 c660d84e3c2a016be8d5002ac69c80f13dbc809db9660a6fb87d9fee345dcfc4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      shared/libsqlite3-0.dll
    • Size 1.0MB
    • SHA256 6e220d30894e6253fa5961ce6161d884998f739bbf1ca89c09d4fb0f9c027edd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

adwarepersistenceransomwarespyware
Score
6/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

adwarepersistenceransomwarespyware
Score
6/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

adwarepersistenceransomwarespyware
Score
8/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

adwarepersistenceransomwarespyware
Score
6/10

behavioral20

Score
1/10

behavioral21

adwarepersistenceransomwarespyware
Score
8/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10