bc42bc60281f093a881a4c63c3a1c9cc37afae5f29b830175d3b714f6e6afc8c

Sharing

Copy URL Twitter E-mail

General

Target
chameleon.vision.v1.2.5.zip
Size 135.6MB
Sample260705-1m17msbw7k
SHA256 bc42bc60281f093a881a4c63c3a1c9cc37afae5f29b830175d3b714f6e6afc8c
MD5 3f54606a50bf4724335f164adc36df18
SHA1 b4943e51ebabcddf93faa0f2eb6fa9b33cdc21cc
SHA512 b48c451bfa67e43e6d97e2434ae83fb60c779f2ed62c0b7a77d246593275160bb4ee97f235b40d8828cb159ea9a81663dca799a9307d2eaaaf7077484f129d5f
SSDEEP 3145728:9eZgL4MX5z5cXajX6p5p8pw/XGpv/XkpL/XRD:MCsa5z5cXoEcKF
TLSH
T18D6833ADDD682079F553493E95482BE4FEF845C4F0214800197E67E8692BBFC9322F6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  chameleon vision v1.2.5/chameleon vision v1.2.5.exe
- Size 93.3MB
- SHA256 b9cb7d044a3065c134a1f411b7add88fc6c804f2a4c45075f3b3db82c268c330
- MD5 998622408ac43f20d15d2194c9d0b511
- SHA1 2001595babb43f05a0c91285b6c229132e025179
- SHA512 855167cf96ed9d366312596e6fed367c0c9036c353423af7de08f4987489e4845b6c669b3afda58b95466858f5a3e866a7d9b586baa40c5c748c6854821672c4
- SSDEEP 1572864:9Za7hmguP2nG0/Vyv7UhgxIabc/x7Awby:9Za7hmguP2nUOnAwby
- TLSH
  T166286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1
- Target
  chameleon vision v1.2.5/file/Exporter/Blender/gpmesh_export_v2.py
- Size 10KB
- SHA256 ed0d251a8d6dc5085a9893e002576007fee495970fd068a7b4d9af0299e3ef83
- MD5 84d63aa0b3fd58fa19026cede26bbfc1
- SHA1 85cd062789074699e7f8383cf5fafd78aa8fca7c
- SHA512 5cd375d83a8db735d8b3616345c2a169fc61c8852a7850a96c73240ffecd466dfcb0b0fa7c3f0a4e9ce69b6dfa1f2dd8a5beea265b363295ef0fcd6916f2676a
- SSDEEP 192:DVqH4sASIZUeFG3P0WVFL2nKv6WEC79JUMAinSF47THzMsX6HwS1HXs5QzUDUiJ7:DVU4sASIZUeYf0cV24PWqDZJqlhlS
- TLSH
  T12832A516D902686ED78315A84DCBFD40AB28C8EB4524AA7675DC511C2F81C3DB8FA7EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral2
- Target
  chameleon vision v1.2.5/file/External/GLEW/lib/mac/libGLEW.2.1.0.dylib
- Size 439KB
- SHA256 d6d3246bd543ab92eeea43533f295530163ecdfd8c9125069a9016b2b1053f0e
- MD5 e1eee14400a123f28dd930fa11ac4319
- SHA1 1368c18f820017da7ac45fd16183e52255b029aa
- SHA512 c1c91da06732017e417e546758c3c4701e433c6788b6909405b2027da2057198d27bd7708fc21ce495778d64e9d1d3666ddf032378ea8535580a8a8242f8219d
- SSDEEP 12288:+Nj4EhrLJolojcFEjcOw+/ucFGAz7hyCLrMy:+zhrtl+qcOwqbHtJLrX
- TLSH
  T1EFA4A452A7205CB5EC7A9835C5A44ACAF3389E94E05ED3833ED0E07A03C3B6775647E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  chameleon vision v1.2.5/file/External/GLEW/lib/win/x86/glew32.dll
- Size 380KB
- SHA256 8c7805a05a321fab37a31822ea2d2a6997ddfd130cf0a09a54a428d6e6995700
- MD5 0c32aa13b369bdc2bf801748d9a2f8d6
- SHA1 509c4b90f0aab7a8a29eea44617c2ebe5ed5efb4
- SHA512 42f4f656b003fc2ed5afeeccbfeb318c902916a8bc25c562d898f0ad40c793c5d14f9af00b0e1b3ba6f1765bb2902229aea8b4d9291ccec10a79fa071ed22827
- SSDEEP 6144:fva9ipeGilAy+ATZDkE7GAoypE2jkbTtVJvJG4Aq016Y1GeE3BhQoIaOnnYEd+RW:uipeGilfEucJLEd+pmoe
- TLSH
  T1C6845169F41C9462FA13201A95545FABC22DD943F25E97CBB847A14B83CCBC2776C32E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral4
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL.h
- Size 5KB
- SHA256 7d472b0b062f4a57a901016dd0f62116221d6ad4eaaf8fabf34d86c238ed3f3d
- MD5 85d6c37c483d369252894d5e761b66c4
- SHA1 5754166834a5d27026d2f118b63f57037b2f82b9
- SHA512 26bb1425e3bc3460d152f180a09a899df4e893c61bb219ee80d00a896d94e796e3d2f214d094b5c1adc74394a121ea02f4285a95e48e63bc41dc2e69d4313d6b
- SSDEEP 96:/VbIK3ruhCSOzAm7lOnvZSzCg68bj9tfIzFMC:db2+zAoaZhg68bj3oFZ
- TLSH
  T1C9B18519D79F0633A06700B4364AD4970A1B7867239D24CE389E539CAB161E82777FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_assert.h
- Size 10KB
- SHA256 4af5f46ebe34753ae9ffb0b932a1397ac0ec37cedc3845a03fa3a154dae52737
- MD5 a83d98567f639ca37d978d205e8c911c
- SHA1 03e8a3d2bb717467e4ee073c47ab38f64fc9499e
- SHA512 67e1cb91a570f84c358c6c7f5935f506d4e9ec9b0ba055472fbce6635cccb0b3f65bb030473497cf4bbcf26179d8cdea82080f790cdadcf76b43f161ff8df1b6
- SSDEEP 192:dbYGk8Unel8n5gvK+8uTfD4u709mS2R95JYjWxxVx:dbk8Unel8n5gvK+9F0I5IWj
- TLSH
  T1542285363B9B0A6241277174548CC541DA62BFAB331A88D83CAF576C2F0105127BFFB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral6
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_atomic.h
- Size 8KB
- SHA256 34b842c343abadb1e91da02a7fd30ef1da577c90bb370c54c385f4e44413804d
- MD5 cd6611f46ecf4b5578e633e9b217dc9a
- SHA1 665c26a133d16e3c84cc9ab3e999c8f0ee7cd1b3
- SHA512 9ecf5f867f96eedc9d724ca36a67ae8b8684fd960517c3aee61a835aa0a08428cb7e433ed2a2752ce18a5eaaa07432175f6985249f98ee6833b7e9da461fa606
- SSDEEP 192:dbkAjKzaGGQk/8/X/GeF/8nbz8BfkzGMfHFbC3rM24:doAWOtQY8/Xn8nbz8BfkzGMfHFbC3rMh
- TLSH
  T13D1295557BBB2343426B01F0AD5CC1E29E55E86A332826ED3C4B84F82E154AD1375EEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_audio.h
- Size 19KB
- SHA256 e3eb3603cda57deebb57947b5cabf91c7e06d0bc051b0628d76c34521d971382
- MD5 275b3b39bb825b07f7f04f02a7d18357
- SHA1 15cf7236f4646a4ca9813e0e6484de428d2c0714
- SHA512 9cd41a49982c84f333a19502124dcfa215a1f8c7d75f648ba6e3fdb02b669f85c8fc3f08e844ed7922915e98c04e8f89876cf8255435ba2b8fde6dcb8f1a956c
- SSDEEP 384:dzFu0nMzCXHoGnnJxJzc+WrkroSl8Lmp8jZbr:tFueMAHoGnnrFBWgroZjF
- TLSH
  T13192A64A3A461353803350F17A5DE2DF4F11D26B21A5408D3C4FA1B95F6B8F993B5F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_bits.h
- Size 2KB
- SHA256 fe36055e391e68e80922ae40209cb86e8db57f01fac896933e791dae53436912
- MD5 1678ae5aa1c7ac4dc58aa7d86bf55178
- SHA1 5213ea9c48e2942ac5f2cd073863fbc3934b9d29
- SHA512 8534fec6089e4225f7bb53cd305abaec0dbc994319b40011c6159a5809cf0cc9d90ec2ccbb7124997774fbbd5e75d6878b8eb133ea46716896d259a0559ac2ba
- TLSH
  T1C251A70D77EE4332109700B9368F89C4B219C81BA399D1C8B45DC1D4BF46B7E6279B99
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_blendmode.h
- Size 2KB
- SHA256 3eb806b1eb223d0fea8bd757501c2ee9217a6835fb1b911e78e307ac5e98dbe0
- MD5 1de129753fa364aacd55630c3f01661c
- SHA1 b29881cf66c25c81d025c2f7343b3af2401b740e
- SHA512 5446cfcfe7434be7f72be53a027e7fdfdb897f2060fdc5f9f24ee2ae58f891cd4fb9e1cba7ef612efeb79f37327e618f268b947522e85c8c8a2d8954d6ae9664
- TLSH
  T137418A513BDE539394D300F6368AB4C47727B56263C9028E385E91C4770E3741334B6D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_clipboard.h
- Size 1KB
- SHA256 24d5841490e8de30dd132572ec4862bb8a459396ee3e0a70a17f02469808b073
- MD5 910cce0dd5c5c2f12cecdbbaeaeffe34
- SHA1 373141ce5215743c1ee8147a02a5c3891d584f3e
- SHA512 88edabf2e1b350484ec9f18516044c214987c8a59b88c74e3bd5fbe132a47d04da2dc281a72409c2480ba0f75ec5d246fd6fc2383f3e76e8b80274e72a13bd78
- TLSH
  T10B41330672DF4363F0D740B9244BC4C3660DA652770D96CC6C8FE4D82B9A259133EE96
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_cpuinfo.h
- Size 3KB
- SHA256 ca825459e9b362b3718f81e8a43f911b9c7595f4a5032c9e90fdc75569fcfc0d
- MD5 062d161d5282cdb0d83a42094d8e8a1b
- SHA1 8f7f75645f0b71a31fcb3175517ae5760f1aee1a
- SHA512 e5d47f94707adbd6eb691946215285277b6803209983df687a75156b42051938d3c2ba28010cc705d0647a6824918cbf9c547c060b5f44e923bd3a762f2d15d1
- TLSH
  T19981751DB8FBE361407701B7421FC5A6AD84FD8262615059BCD7E0C81B9B598133EE9E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_endian.h
- Size 5KB
- SHA256 a40ba1b6184619f1e7671c42fe47a3db125cbdf0959dfd2aa3a6eb138eef5c27
- MD5 43f9f8035c572157df47c5f5f758fb22
- SHA1 a7df632270e451d4706ea79ce7d78ea7f190e2b5
- SHA512 c9d913bf2e80974805b70f7fc8f417b3b5943f608d38bc72a7c07bafc1d588a5a3b6c86b3d1c5f27f3b8268109ff84839b669ac4b155898bb50a848f90161aec
- SSDEEP 96:/VbIK3LEFo3Q6qk7Xau8BQw+p8BBwep8nbQRq8naGxgLN+W8BJW4p8BAVp8nbLzo:dbrQo3Q6qk7Xau8BQvp8BBPp8nbQRq83
- TLSH
  T18EC12FE12EF36601503F1074424ED11A7A09ECFF92CD2AD4385FAD592F8A92E11F459F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_error.h
- Size 2KB
- SHA256 453a03f7d08632f599dd8e5615db895633e527c762db75a29580143b955d7ed6
- MD5 60eb1ec34f2e3bb08c0844f39f5727d2
- SHA1 6a0e9ffc79bed7742b47da74edc8eee576cabd21
- SHA512 b133322ba9dbefc992b3108f6e7909773896246af343aecd248e9aa9eae6848251d2e0aa0fda510151f934db6dafdbde16481dbe1ffe6e85d33cf0d99b7eef56
- TLSH
  T1A441636B33EF532300E701B53406C846AA5AF4627319548C3C8B65D92F5B59E5E34BBB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral14
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_events.h
- Size 25KB
- SHA256 115a6bdc78e80326d37e3a9809ab5b11dcaee19fbcd3e069a4695398addaf441
- MD5 71daf38e1634496b7afd616de8e91de3
- SHA1 d24efd5db0c6097ef2c4a8bf9adcbef3af466c87
- SHA512 791e574c15f6b266d954ac7ffaf801b01b476c53263fa1359c2e1df65c7b31c47f3d8acedf1a965f17518367023b1cb7d6bd0dd0bf41851d7aec146a38494bac
- SSDEEP 192:dbbGgUZe4MM0tHsNfTMkIrkMxRUk6ENuMRI3MkSQMkx9o9w1iB8rmPocSPMkx4MG:ds25JNTYVPyHY/uvqU43g
- TLSH
  T11CC243853B971793123E01BAB74DF0AA1B26D6FB6785A4827C7D0DF81F600A90271F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_filesystem.h
- Size 5KB
- SHA256 cd623e145ef93e26aa53592e78f25ceb144c583ab332ee4a623670415ce93f91
- MD5 a3f80e4bf6064c5904c396f3e4059c8e
- SHA1 df04f89496952a96ec35688ce3855b3f3f161ede
- SHA512 d81849c5fa902e37b631c7a3067519288bbf930bd1d9b5413e60dbef0ee7d0ecbe7fe6773f0a1cf9de42b730911b757216c264b6f26ef2b02532155c3c573b86
- SSDEEP 96:/VbIK3UmZiXUdJZXXKSTXsKzgv1UdwFm1Gg:db0m8XUJlXsKz4UOG
- TLSH
  T119B1851A77CA532241C303B5238FD5C1571AA5AB327A1958389E80947F26BFE0337FA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_gamecontroller.h
- Size 10KB
- SHA256 17547ddd82539d05dd45700bc210482b149fb767a881431f04f7f4287497ea97
- MD5 b6bf217ccd64bcabe1b994fa8d2625bd
- SHA1 17efdcb5fb3a4591af2c7990212f6c9a67345e29
- SHA512 eacdebb4ed8cbb892448fc6ec260a870a8154f7982d302d1900cf0f0c6f5262cd9dbae646e5038d7772a8a6df4c0d024e4c7af595d65ca5bc54ba93dc0986563
- SSDEEP 192:dbECrVKNnzWT9mm9gbWe1BNKJn9VKNPzZTOKNKvM1:d3kp6T9mZbo9Q7TJmI
- TLSH
  T18422EC89A23713B203A500FCF20BDA7C4D95B1F2B12564473E4E2DD61BDA1ED41BBA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_gesture.h
- Size 2KB
- SHA256 b49861ea93c5e9c482fff9b9463885513712ed00fc7dfaeeae924d7aac4add41
- MD5 7fa7a584e370d75f2db4edc88e87d37a
- SHA1 f30893a9d2b7e6c694a84ae33af9578af4e25d59
- SHA512 1492b4873979b6799d8efaa2bec89e21ee192b4cc049afd3c717d5942258ea55def65a7903ff2d3e6ab8b7ac226a1a2dfd81a0ab83de12f8e605747d50629c5b
- TLSH
  T1F3416759B5AF83E225F700FD740AC952D10FA996F30950CC748F41E83BA62E81639F62
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral18
- Target
  chameleon vision v1.2.5/file/External/SDL/include/SDL/SDL_haptic.h
- Size 37KB
- SHA256 1152810cfa04fb80c2b02b241c204ff1af0f6aea78ad1344c99aabc65fc1b06d
- MD5 569a1e6966074e354b985c1bc560512b
- SHA1 a1aebc15684d96213b176b73dcde61250cd4c595
- SHA512 8f4e1d7836efa9ce48d36c5fd750cabf21ba3c5c73f1b24ac977f912b67cd01a94ed7a774ec50410771fe4e66392c6a27f5a064e1490fc96568400b8c447cea4
- SSDEEP 768:IRjmlqYy8vg73FI1LFnsbOXm/ONYmmr/MSLOuqbXsUp23UtnmFJMgcFRcBFO2:opYRg73FI1psCXo/MSLOueXsU03Utnmh
- TLSH
  T10C03205765A70333007700B62D5EA987BB34D0AB226290563CDF42BA6FDE4D0DA76EC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  chameleon vision v1.2.5/file/External/rapidjson/include/rapidjson/internal/regex.h
- Size 25KB
- SHA256 5b63551752ec1638240082c8ee0a7f7023b3a060268ac45c8c2106d78176b9c9
- MD5 e3007f4e8b0d40dd16df2e966707f35d
- SHA1 17be399a14a82f7e471402131dec59946170c0de
- SHA512 67595f2954529cae5606ac6eb8282f331b819c48efe9a909ecf675773003e2ef522a5c616e4f453de39ae023c2ec259ddc11dc2fda4e6c7ab25cdda0fb09ccb9
- SSDEEP 384:K8mbLZN6UbIb/mA77FOZqFaGxjv66FK4Szoe2xGhLTpGpge9DxsaPc6mPUz:Kh+WIqA214Szoe2xGoie926mM
- TLSH
  T14AC2B32014E38227C6376239FBDF80426AAE745377A8AE517E8C6704BF4057987BD3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  chameleon vision v1.2.5/file/External/rapidjson/include/rapidjson/schema.h
- Size 101KB
- SHA256 5198c2811e11723cdc7a698f525dacbfa34bac6c5f57c79c42a4404ff834555b
- MD5 4a02e7dffb1f50bd3eb5b45d9b1f81ea
- SHA1 5a97d385df059390894271d150c2e1af6367af7a
- SHA512 27117bfb7356c0887e08b8e89deef894fb7cd7f37786048364f3cf351ca2bf2856dae43b6d6ddbe278a3a9b671a67eb9aaf8f8e8ebab9bc246228ef397fbe424
- SSDEEP 3072:oIKB+zN1TiFZsPlz/n1kZFl64oT352KD3+l4JDh:W2nWKD3f
- TLSH
  T1E4A3C605B9AB4417A76321F9DBC78001BB685103B634DCBAF98C37086FC2569CBF5B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  chameleon vision v1.2.5/file/python/Sweetviz.ipynb
- Size 1.8MB
- SHA256 262013910af9c27a5923255182dec7a5b942e1d620a9d362b58d318b4d49450d
- MD5 d60b9987f338e1c45966ecda6108e86b
- SHA1 9a6e9b11ab44d947862d55b742aa212a74c8fd44
- SHA512 ff84a24fafaced08c99ff3d5647966092c25090b3b5c80fd9dda70259d716c0087e6d900b0169c2fcddf6283e1be21f6f8273e89eb6ac6cee5534a30092f7b95
- SSDEEP 24576:WQTdjnPmHT+mTfTic8hTX+VuTdjnPmHT+mTfzIynj/2C:WQTd618wuTdQaC
- TLSH
  T107950772E5096C6696A2C85B06240B5EFD325B478C27B519B79CC6AC0FCEC1FDD3B908
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  chameleon vision v1.2.5/file/python/hyperparameter_tuning.ipynb
- Size 63KB
- SHA256 751d66889b524e9406679a450708b965cbb669a2436528cabd2646cd1f2ac2c1
- MD5 f774295cec3e4affa4b9e12310c75c06
- SHA1 a7f9939232cf3d3b6dde9eacd1d8e3a708f91e52
- SHA512 304b3da86bbc0d75f35ca64b5154103de4833f15a44afa91ca6409332fd7a23bc4b0a3e5f2d21398b85d86c529fe08bc1ba286fca223a6f29ece072bf263631d
- SSDEEP 768:eIx98QnPhvTos4SeHZh263UIJxu2Pn6e9zuC4x0LSIlKSP+Zh263UIJxu2Pn6e9r:eIx9zbXah263dJxDl6h263dJxh
- TLSH
  T162531F14D0961D23638BD02912AA4BADFEB652434E40FD197E5F4CAC4F4F86E4DB628F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  chameleon vision v1.2.5/file/src/allocation/adapters/notifications.py
- Size 811B
- SHA256 de860f9fbba094e0d3bd92f51cebfd57283f82fee9771e672713db8670d19791
- MD5 1c754ddc12f2606a532bd8dcfd658797
- SHA1 89777e82153f3a22c3d1bee03e31269a7c4506b2
- SHA512 a24692a87175b99362ed8adbb73fd89888c51bda94ee22a5a056816736ff1889eba1ba3a3191e93976c140ec135a08ad911b04b36eeaa74b229f346ce1bb1e38
- TLSH
  T16D01C99B6B928B9892D74AF73037252A163F6647EE1828083BFD23954B6092F9302074
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral24
- Target
  chameleon vision v1.2.5/file/src/allocation/adapters/orm.py
- Size 1KB
- SHA256 16f0fdcf422e05749abebf507598dbe2d054ac6e76da489a0cc70862a979bd6d
- MD5 fb527032c6877a64de8475b398bef929
- SHA1 a9bef58f1e0180a99a539abb1f2045a23b45faa3
- SHA512 c1338ec012389270b6c071051e36f073522db0aae06bb12bed4dbf73a4668301d9f593e2d7265dd0abf383de8bec2fee703709c496a904414664292308e2c93e
- TLSH
  T184414BE6F2356B4041DB992C58D11EA52C3697BB2E807495BBDDCB291F1C90E5272A08
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25
- Target
  chameleon vision v1.2.5/file/src/allocation/adapters/redis_eventpublisher.py
- Size 394B
- SHA256 cb3c9291b3ecc822e08a3f3b97b467f32953f4f2cbff7c5c6a05418e3a4ac85c
- MD5 170b1dbb1fb6153b2ea568b55e03f833
- SHA1 ab8e575c6621da167e83561679a25f72f8302e11
- SHA512 f97ecab4701078b06f0c05af8d039288533828587192d77d8aab2185e77937425302e67fb51a8b298b2d43beccf701167e8fd3219cd80f1ac73656b0e695f765
- TLSH
  T16AE02BC3B2BB4013249E19AA81456238277793C5FF00C074429C3EB4021421D1C032B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral26
- Target
  chameleon vision v1.2.5/file/src/allocation/adapters/repository.py
- Size 1KB
- SHA256 55a926e9b78c2c44b589bc84c823042b83e93ac90a95790a4ecc203c4cfad2cb
- MD5 5972c6763eb3b8aa39621b35e1aa8198
- SHA1 4980d47e0544080924ec6ce47e3139e7ff285bdc
- SHA512 33075c9d595d38c8045c1873e62515bce13aa5c136c7bcf59ec0bf090a3ddd4c2c923789ba951ca96455d6aefe14c468f3086c0b66d6152db8ac2c304409ad9b
- TLSH
  T1693129D5E273D969A15BC0BB9564A8C27D0FA8535E4C6846747D32541F23A3047E0CEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral27
- Target
  chameleon vision v1.2.5/file/src/allocation/bootstrap.py
- Size 1KB
- SHA256 322e93ac0fd1a5066bc2d665b09c7af69304e046aa45b15e5b1c9063560441f5
- MD5 40e8c281c684d11faa36e9a4c4fc0310
- SHA1 c7f9c6c1f99315104bf45be28fa0dc77e3ef90a4
- SHA512 70dd4eefe257866ef756f4d39b2e9479e09fb8c0164fc5443ad46b25706cc8062356ef1a8e6fbed32ef172d1b46bb611cce5bde6747c96492f5b03a786f164fd
- TLSH
  T1D231F08E1668F25837DB85FA6A4E9061A263C35B1D0C24D13BDD1B2C1F0CB5ED3AB314
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral28
- Target
  chameleon vision v1.2.5/file/src/allocation/config.py
- Size 885B
- SHA256 774f5058ca28c728773bc6bda633423ca9c453285ed6cba354691716745f22b4
- MD5 0b824a7a48f24c36835b726b3b5eba95
- SHA1 a6d35b11ac4c84f58634f368a016c9dba9ac3a24
- SHA512 fd56c1409852634529395f48ea77b85715b5aaee640fa09dc82b949f7fc65b4fc60dd8ec80ca421d7c4c50ffd6f54720c91698794a366faaac2108efa709bae0
- TLSH
  T1AA11ABD08EA3E50403BAF7A4D920811A1626C44774092C7C7F3013972F177BF68E086C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29
- Target
  chameleon vision v1.2.5/file/src/allocation/domain/commands.py
- Size 422B
- SHA256 1abdcb9b20d4f56f2aaef6d3863a105304e1dbbece2920f5e5fce0bc34a0de3b
- MD5 d485d3d6bf6d72e10b9c93b524b557f3
- SHA1 278fafcc1672357785443511d4fe7d7fd630ca6f
- SHA512 aa8b9527eda1c822e3df7eb484c49e908848bb7316d6aba59a2faf1999241b2f2dbff3a509358632b44027381acf9c39bf021e3d2a530b306e6d74b2d6188bc2
- TLSH
  T104E02B0260B224F66597C5EAC569E170A1D3B613CF4C092EA2FC2F380F4319E2DA4499
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral30
- Target
  chameleon vision v1.2.5/file/src/allocation/domain/events.py
- Size 330B
- SHA256 19d08303848cd0533133cdf6dc7147c7b7ddb5b5bb6a07394b290423abb79c6c
- MD5 977d1d9814a409470cd4fd05b4fa0342
- SHA1 10ddcdc46467b291f1cf2842d84d34d354b99f9f
- SHA512 1840cf2beda0275ce09702c45c07e064f4a511b285912b6c7d602329d5b271c51c650994cf0330f97622d421b09ce14dc8d0d4d24069348b41bd3c6d10dfb4b3
- TLSH
  T154E08610F0A16C766993979BD325D6B221C7B453EF18186CE3F80F380F0765F2E24864
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31
- Target
  chameleon vision v1.2.5/file/src/allocation/domain/model.py
- Size 2KB
- SHA256 b409028234365a60fb30089796bb3f6563f130320c9834c3af9280de6288a857
- MD5 fc0d3cf3e2ff27949ef2664558b5042c
- SHA1 228b9c5f859e1dbac2f7f46cbf94a6a7da930259
- SHA512 ddeeafc8c3d5cf0cf7e2eb930157bcce4ded4562c14d2f93576498c8ef2bc9a0de39d4d7179e2974e586f41d7c51a9531fe3e23ed71ddf0b0f81c0293e9ea8e5
- TLSH
  T19D51D0A22596F461D297C1AAC502FA53532FD877BB1C1420B5FC24380F53B7C82E5CE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

Maps connected drives based on registry

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32