Overview

overview

7

Static

static

5

Primavera....02.vbs

windows10-ltsc_2021-x64

1

Primavera....03.vbs

windows10-ltsc_2021-x64

1

Primavera....04.vbs

windows10-ltsc_2021-x64

1

Primavera....05.vbs

windows10-ltsc_2021-x64

1

Primavera....5a.vbs

windows10-ltsc_2021-x64

1

Primavera....5b.vbs

windows10-ltsc_2021-x64

1

Primavera....5c.vbs

windows10-ltsc_2021-x64

1

Primavera....81.vbs

windows10-ltsc_2021-x64

1

Primavera....p1.vbs

windows10-ltsc_2021-x64

1

Primavera....82.vbs

windows10-ltsc_2021-x64

1

Primavera....p1.vbs

windows10-ltsc_2021-x64

1

Primavera....p3.vbs

windows10-ltsc_2021-x64

1

Primavera....p5.vbs

windows10-ltsc_2021-x64

1

Primavera....83.vbs

windows10-ltsc_2021-x64

1

Primavera....p2.vbs

windows10-ltsc_2021-x64

1

Primavera....p3.vbs

windows10-ltsc_2021-x64

1

Primavera....p4.vbs

windows10-ltsc_2021-x64

1

Primavera....p6.vbs

windows10-ltsc_2021-x64

1

Primavera....84.vbs

windows10-ltsc_2021-x64

1

Primavera....41.vbs

windows10-ltsc_2021-x64

1

Primavera....43.vbs

windows10-ltsc_2021-x64

1

Primavera....te.bat

windows10-ltsc_2021-x64

1

Primavera....ate.sh

windows10-ltsc_2021-x64

3

Primavera....ge.jar

windows10-ltsc_2021-x64

1

Primavera...._4.jar

windows10-ltsc_2021-x64

1

Primavera....up.bat

windows10-ltsc_2021-x64

1

Primavera....gs.bat

windows10-ltsc_2021-x64

7

Primavera....up.exe

windows10-ltsc_2021-x64

7

Primavera....ip.exe

windows10-ltsc_2021-x64

3

Primavera....tl.jar

windows10-ltsc_2021-x64

1

Primavera....ms1.sh

windows10-ltsc_2021-x64

3

Primavera....iR.url

windows10-ltsc_2021-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    Primavera.P6.Pro.Project.Management.22.12.x64.rar
  • Size 296.6MB
  • Sample260706-fdn6hadw7k
  • SHA256 dfb4c90a1f2732dc861110b9298e29d9b1f714ea08664e38d8032bd97ced7720
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_P2202.sql
    • Size 3KB
    • SHA256 f8b7c19bf37118dfd6eaabc33a9b761bf497f1ef4350fc841df4007228db2031
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral1
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_P2203.sql
    • Size 3KB
    • SHA256 ab4b261cbb1cb36b9598f644056f6b2d12f6031287aa099bd4a9e2d29708b575
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral2
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_P2204.sql
    • Size 3KB
    • SHA256 ab4b261cbb1cb36b9598f644056f6b2d12f6031287aa099bd4a9e2d29708b575
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_P2205.sql
    • Size 3KB
    • SHA256 ab4b261cbb1cb36b9598f644056f6b2d12f6031287aa099bd4a9e2d29708b575
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral4
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_P2205a.sql
    • Size 3KB
    • SHA256 ab4b261cbb1cb36b9598f644056f6b2d12f6031287aa099bd4a9e2d29708b575
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_P2205b.sql
    • Size 3KB
    • SHA256 ab4b261cbb1cb36b9598f644056f6b2d12f6031287aa099bd4a9e2d29708b575
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral6
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_P2205c.sql
    • Size 3KB
    • SHA256 ab4b261cbb1cb36b9598f644056f6b2d12f6031287aa099bd4a9e2d29708b575
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral7
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p81.sql
    • Size 68KB
    • SHA256 f3512cb9dcb3c251836007c1ff83431cb2a1d599c323b030d186b4597825943d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p81sp1.sql
    • Size 68KB
    • SHA256 f3512cb9dcb3c251836007c1ff83431cb2a1d599c323b030d186b4597825943d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral9
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p82.sql
    • Size 56KB
    • SHA256 b8bad2f4df5ff4c3ceed3006abac1622d99d1a320e8ba8072695d14d4713cd07
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p82sp1.sql
    • Size 56KB
    • SHA256 9c1cc76050f292216474eee84172d61341a2706d1c182c98c82394427ede82eb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p82sp3.sql
    • Size 56KB
    • SHA256 3a1089a491e8bbff647eab7f602170e6c1945ad410a1fade3c7281bcdd22a733
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral12
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p82sp5.sql
    • Size 55KB
    • SHA256 2d555c9f164da89864fd4bbe1df9cb55360e77f09db5d0d74fcfb35a5f2a096e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p83.sql
    • Size 50KB
    • SHA256 683fdf9abfb1a83e98839c746e3d4ba17f011fd89b1c475369f368aa4007a65e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral14
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p83sp2.sql
    • Size 50KB
    • SHA256 cb6365eec854fc8b113636d7b6ea71a9fc660b86d0779a7627400b2ad74786db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p83sp3.sql
    • Size 49KB
    • SHA256 4c20051a6b2ce9f8099e58871ca32bc74a910dacb880ed9a68494d5e5dc33539
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral16
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p83sp4.sql
    • Size 49KB
    • SHA256 ca59d51e374b45e3a8e0e0b341f51fa3f6d272a10cbc389c140de3008831fbbc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p83sp6.sql
    • Size 49KB
    • SHA256 ca59d51e374b45e3a8e0e0b341f51fa3f6d272a10cbc389c140de3008831fbbc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral18
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p84.sql
    • Size 48KB
    • SHA256 be0a7a2aa022738237f3eb96a0f6d0c60a534f7433b4c9c37ef32b824e5fc596
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p841.sql
    • Size 48KB
    • SHA256 be0a7a2aa022738237f3eb96a0f6d0c60a534f7433b4c9c37ef32b824e5fc596
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral20
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/scripts/upgrade/PPM_22_12_00/SSPPM_p843.sql
    • Size 48KB
    • SHA256 be0a7a2aa022738237f3eb96a0f6d0c60a534f7433b4c9c37ef32b824e5fc596
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral21
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/validate.bat
    • Size 1KB
    • SHA256 782fa5600d660ce4426e3301e2ec81adb9029e22d235be036785ef428af1c5f9
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral22
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Database/validate.sh
    • Size 1KB
    • SHA256 8dc5518a75cc0186d755c7c3ff51623cdadd1d981605e993b1950d4b8906fbab
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral23
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Integration_API/Disk1/install/access/jdk/jre/lib/ext/access-bridge.jar
    • Size 47KB
    • SHA256 f8b80c66d6703abf21afb1ee746a1170dfee6d8939ef28d022d9dc9cb24eba6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral24
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Integration_API/Disk1/install/access/jdk/jre/lib/ext/jaccess-1_4.jar
    • Size 46KB
    • SHA256 a19f8504666144a6d955fff1f9a13cb12e62ad03831e5a1f93fafced8187e20b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral25
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Integration_API/Disk1/install/access_setup.bat
    • Size 411B
    • SHA256 a6ad03e59d3af730509c400bf49bac40d56286ab47078c001cf0b163bf51555f
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral26
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Integration_API/Disk1/install/addLangs.bat
    • Size 26B
    • SHA256 ed0866858910e78f9f5b8ffb7efa9a747f0e3619056fde333153076fa0532220
    • MD5 SHA1 SHA512
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral27
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Integration_API/Disk1/install/setup.exe
    • Size 148KB
    • SHA256 9a89d3146304e0136b2ed4a2f4d856c5357e883a4f884698ef5c40a3824f3a02
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral28
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Integration_API/Disk1/install/unzip.exe
    • Size 164KB
    • SHA256 8d9b5190aace52a1db1ac73a65ee9999c329157c8e88f61a772433323d6b7a4a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral29
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Integration_API/Disk1/stage/ext/jlib/emocmutl.jar
    • Size 2.4MB
    • SHA256 4296721c62b0682c201f1393ae32e4172bd56b69e19f548a2803df1154a20f93
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral30
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/P6_R2212_Integration_API/Disk1/stage/fastcopy/setperms1.sh
    • Size 133B
    • SHA256 1bd81c81fffab1b50a8a0594af2c0a21d0e39117934f5c3f2a27572185278ad5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral31
    • Target
      Primavera.P6.Pro.Project.Management.22.12.x64/Soft98.iR.url
    • Size 202B
    • SHA256 cd49c8c8a991a045e07e301c17735760a6c0c4ef533882c48a7f1d9af6fc8582
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
3/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
7/10

behavioral29

discovery
Score
3/10

behavioral30

Score
1/10

behavioral31

Score
3/10

behavioral32

discovery
Score
4/10