cffb1f7cd678ac09edc3245b7428d587307451dfbe973292241e2313a4f3b75a

Sharing

Copy URL Twitter E-mail

General

Target
Vape-v4.10-main.zip
Size 18.3MB
Sample260706-vfp8xady4j
SHA256 cffb1f7cd678ac09edc3245b7428d587307451dfbe973292241e2313a4f3b75a
MD5 9f8af182fe5de4e882b37c1cb4b2c23e
SHA1 648c113331967432c25b5e7c530016412e94ae9e
SHA512 f0f183ca1fa1b7cd6a611f01b85451fc6ad27960fad5a3a99c5361c7a1a7b1fe1419ca10fd7981b6921bc43c3cc80b02cc1e7014e2a4fb8b1226f1442ce1f349
SSDEEP 393216:mfSwV+Mpmby/U2e6VS2V0dJu0viYFiMFlQr8nvbOEhg0a:mfSVMYeFVS//uVYFiMFWr8nSEC0a
TLSH
T1A117338CAFB17C0ED1987437506217223A06BBF545A1CE6CA308B66C94B65DCB5B8FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Vape-v4.10-main.zip
- Size 18.3MB
- SHA256 cffb1f7cd678ac09edc3245b7428d587307451dfbe973292241e2313a4f3b75a
- MD5 9f8af182fe5de4e882b37c1cb4b2c23e
- SHA1 648c113331967432c25b5e7c530016412e94ae9e
- SHA512 f0f183ca1fa1b7cd6a611f01b85451fc6ad27960fad5a3a99c5361c7a1a7b1fe1419ca10fd7981b6921bc43c3cc80b02cc1e7014e2a4fb8b1226f1442ce1f349
- SSDEEP 393216:mfSwV+Mpmby/U2e6VS2V0dJu0viYFiMFlQr8nvbOEhg0a:mfSVMYeFVS//uVYFiMFWr8nSEC0a
- TLSH
  T1A117338CAFB17C0ED1987437506217223A06BBF545A1CE6CA308B66C94B65DCB5B8FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Vape-v4.10-main/Vape v4.10/Vape v4.10.bat
- Size 207B
- SHA256 dda15634876ef456f6d7f5a5dc5e4c19e5f89ed2d1654e91b4dd497e21d040ce
- MD5 1d1b9afb4e5c38b4e2b2ee89bf1e9d6c
- SHA1 739960ad34f767d14f61e0a02287191f6541de11
- SHA512 6db4be8e2e4e203a3403e44944c6ef85dd2b64613bafe5005be3daba18f890d0f88131d2a4985bfec9ed8c9c96145dd76eb491f6acc6cddb898f87f81fd514a5
- TLSH
  T1EDD0A732A5D495551756014257A052A2784FA025464E2727018E609CD04599AB6F602E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Vape-v4.10-main/Vape v4.10/mappings/forge_1.12.2.xsrg
- Size 3.5MB
- SHA256 891e73162cd0efacff095a72465de262f62af0d59ff779aba4d96ec37928bf6d
- MD5 3b38fab3d89c53bc54f36f4c51b5c335
- SHA1 fb664725f9ba795fc4019d942a059f2cf84e84b8
- SHA512 9ca5f382a2037931c8c3012f26b47b2da1c6d99e7cc123889d9822d8c3fe5bb2de48f5112d80c570e5eeec3f1371deeffa071d875f8562c6c9df282c6bf2870d
- SSDEEP 24576:QObwwGpBU5ko2UhrmCwSHVg/FAzanGPALp6Yed8R8JL:QOkwGpBU5ko2UhRwSHVg/FAznPALpGJL
- TLSH
  T183F55242D0DBBAD6BE3EFB9788A08552D531D3B76E1D63EDB2304915FFE44C8218A850
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Vape-v4.10-main/Vape v4.10/mappings/forge_1.8.9.xsrg
- Size 2.6MB
- SHA256 263410fcbf2a56296a60f300cfef3b61f06b0c3112cab767e7deeb8034194cfb
- MD5 4316f149be56b65ada2a3609e67eb1da
- SHA1 923263e733557ed12384eeb33fe6412b1eb64594
- SHA512 9df6949dea63c9ac5d16eecb4a7550c771a4458caac404023788ff4683e63010a29ee2c75f96980c42fe65f7f20f92c7e9386cdeee9fa30e24d476d8f991a81f
- SSDEEP 6144:gR3Kcp+xqPjQd5NXdNGZ3nsp4+GYXegpPpM/4Td1NbX+A18yuju108CsuSIXTLi2:qp+xOs7dD+A1F+JqnQ7dX
- TLSH
  T13CC54242D09FBAD67D3AFB8788A0C562D131D3B7AE1E63EDB2354815FFE41C82186950
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  Vape-v4.10-main/Vape v4.10/mappings/forged_1.7.10.xsrg
- Size 1.9MB
- SHA256 43d4376110b2638213d3096f80f8395c076eb05b58d6c0dbd22c0d999b37a357
- MD5 129818c54625345891dc22c2352fff8b
- SHA1 4a4a35013981466596f82938099bb0882a415371
- SHA512 9f2aeec773a1923a0c8aa1f18469f12e02382655c0f1504b2c5bc15a40bc8593d269fdd68ca5f8531587698789a2a99532485e738a92537e3b648164fadea6c1
- SSDEEP 6144:UZHs1PbyB2EoBbWAXWBvm5U7sci7S8ho/0CKa9rcj5mAKtt8IoXsdBiY8GgZn/4U:nty2vK4ci7dqnwYBq5/1
- TLSH
  T118953042D0CBBAD67E3AFB8788E1C5A2D130D3B76E1D67DDB2344815FBE41C92286950
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Vape-v4.10-main/Vape v4.10/mappings/lunar_named_b2_1.12.2.xsrg
- Size 3.7MB
- SHA256 db0edd99ed89943e62de479b128de97cf2e7dc7bc8799c31e410d0e18165fcaf
- MD5 416522a2f2ec8a18081a150e6a8adef2
- SHA1 d3b082dd994390e5dcde9bc15d60e019a9fd7d7f
- SHA512 43fea9931bcaaa1f95a54d9fdf21860731118435e57ff9b2d0e7afd13b9b2729e4dd5549c0cf79d08da7c2a99087f192f235acc678d37163e710aae1f6d92b7c
- SSDEEP 49152:DQQRraMDBFSD8PAzQ/93XxGezlVVcomNzMZ6FoXl8I1R8:RU
- TLSH
  T14A066106D0DBBAEA7E3FF35384A08512D631C2B71D1E62EE75A58819FFD84C421DB990
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  Vape-v4.10-main/Vape v4.10/mappings/lunar_named_b2_1.7.10.xsrg
- Size 2.0MB
- SHA256 8f2dfc20f8e7581d0ab9a76d6168ebad6cf03b75de826c29953b9f1987579df0
- MD5 2b2043857e05ce8cbc74fda674dedfab
- SHA1 42fadbe94650a151da0f140de22ef716e17053d4
- SHA512 abf2a989e2fdc1e468029fd6c14d878bdb98d5c56b00b6074949d46c0d3adfeab35e9d674673d30fbe75547e3e480155f238c9e1c80a82a67174aea545f0d101
- SSDEEP 49152:BYeL/9HfeD7tP6OsivhzmkUfL4Ntn+MxVm2gETMNE:k
- TLSH
  T17EA56302E0DBBAE6793BF34788E08561D230C3B71D5E63EE75B5981AFBE41C42197A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  Vape-v4.10-main/Vape v4.10/mappings/lunar_named_b2_1.8.9.xsrg
- Size 2.7MB
- SHA256 f7acf746ac993cb18bd272e812e1493e5686e36645865a6707f3548b960f6341
- MD5 317abe727bf1f4ab3ddaeff361d9ea92
- SHA1 b0137db1daca4ceb65674f18a4df711dbdbddbfb
- SHA512 c9eff8fe3db44e8fc178dc6b1590717eae996ebced8bf433aebbf0f4ec55fccf48305007cc7cf1faf708153498e1b34769dd86f4a9b31797e0c56e47494abf43
- SSDEEP 12288:lAWwhMndoQ0x5y327oR3FHLRl1vq9AFUgGc7JoQZR9SXVvA2Kx8H4ABL:l9wandoQ0x5o2q3FHWvA2Kx8H4AF
- TLSH
  T1A7D55102D0DBBAEA793FF30784A08561D630D2B71D5E62EE75B5881AFFD81C421D7A90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  Vape-v4.10-main/Vape v4.10/newassets/allowedicon.png
- Size 462B
- SHA256 1fd5cdf070a24ae5236d870f862ab538721cbd5ec03f6179ec107ef04a3a68fb
- MD5 6bc02a4ae069ac6e0fa8121866a1b99e
- SHA1 366c7eaccf6d5601b8a54d68d795ee8ebddc0762
- SHA512 f6bf89c43a6a0273083837d1d3453489876e90e1e9963471643a33092ea58267d39a8069424c6083d7ff824a4b444c07a67d6a65864ff915f266eaf55f4370ad
- TLSH
  T12EF0239273F58C92D51BBBFBEEB69141B1921C60441EEA04B3E134BD412B301579B39F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Vape-v4.10-main/Vape v4.10/newassets/altening-1.png
- Size 644B
- SHA256 7a553cce4dde95b68798deaafe55f56e27a0c7d9fa6ca08fbbac9f9b75398d6d
- MD5 43b9237f7e121ec544a727dce5784cd9
- SHA1 7876cf96099b168e348147da1a8c769b8ec8b130
- SHA512 1efdc0e7f9a449e96c6e5fab3de7914ef48bee857dbf58159d784baa66ed41c1e78651c67dc1f6ee4e576fb09dd94bdaed7235a46f7666bfc6ad94b9e27b2bd6
- TLSH
  T121F0689D4B5770BED9578173F35659D366AE4CD3C2D2901E0353104E81B38C95EE1171
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Vape-v4.10-main/Vape v4.10/newassets/altening-2.png
- Size 895B
- SHA256 699799e976ebad67508382374fb2024e4f8c2de9e6c70c2918b0082d292151d6
- MD5 e96bfa9fec90b961eeb9dc57645c088d
- SHA1 82c03ed581bd0809a87306debe7713370cca40ff
- SHA512 28ca78b864a1e8223a728b85c6f5daae967bf600aac19f7900ae0799aae47a2dc7ddf62cc93170def0f39c042ea0b481430d02c1bdf051ebb84e6f614f07b2b5
- TLSH
  T1A8116305B33AEE72D5C59A3B5E329AA47BF4D8B65269D92E11A0EF2117A018208C21C2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Vape-v4.10-main/Vape v4.10/newassets/altening-3.png
- Size 775B
- SHA256 2c9d56782fddd825b4c62cfa711e697c50a4aa2777c80e9eda694fd7a24230d6
- MD5 9d69568325aaaa3ebdda28d80cdd1dd3
- SHA1 d07178b81d8fd609d5e12ceee5710b55541052a4
- SHA512 111d373f5591aa44dd2a79cfcbd149adc1a7e7fdaaa2a42e813d75630f651548cabffe373367ecde224cd8a8a66dd8d57c0dfb8123dbff393b4c89ceda8a4125
- TLSH
  T137017549A09969D5BF0C661B703365D4DFA3C0B88F2DD2C81013B4BBDB94E1364E3A59
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Vape-v4.10-main/Vape v4.10/newassets/armor.png
- Size 1013B
- SHA256 41878fb3eedfe8b158db89db97f611d8bb105bcd2030642992843ac12f4283eb
- MD5 b733b9f7ae3b3378877910eb54267f21
- SHA1 56c4f0fd7e7012f0042e92d08c9f757cb092053c
- SHA512 d8a06fe8e4047b9aff677239e04eeaf118a32e6076a87262c78e170faa1622c201329132a5903fbab3fb59e811e49c02ea7a95a23be97e5e89b9ef44549b720e
- TLSH
  T13B1135FE32449568476F4DB602936200AD74166844E1C1B774F2C92035E5CE281AA396
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Vape-v4.10-main/Vape v4.10/newassets/armor_status.png
- Size 398B
- SHA256 f1da0fbbfa7677692ecba6ec957d1da609fe2f98d75ede77325401a3cf498f97
- MD5 b2a4dde7b2df050540933dd10b935033
- SHA1 045a7b46131fcf90894be1cfd2575ef2502fb829
- SHA512 0f0b361894516f4add5dd8d2dbbd327f4eb6c3a69eed45c01ea85c3e29db7cc08f65155614a854bc55519c32a6f1d4ca801f6396852848e700b57ce388e2796f
- TLSH
  T1BAE0F15033357DB99ABF4F35D3625253C06D61C009F6DFDD122A6B03154804A41B6EC5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Vape-v4.10-main/Vape v4.10/newassets/arrow_new.png
- Size 1KB
- SHA256 f2aab22358a71f85bc4159a3cc67681e0b58c5e3c3add88bead36a22632e9608
- MD5 3350a3522bbc2d2fee6b5532414787d1
- SHA1 d1e623990ebae6ace5dd8c47c2cd43d2b8d7987e
- SHA512 4959ee36500abc53ace8b4c8a8d68028a6d860e82e03eebe3e66d525c706486dce006502cb85864207f1409d75101b82dcbeb6d021ed1214887dfaade87fbd51
- TLSH
  T14221F94F94311815C6E7B9C1C8173B555463B09E42702F09DE1BAC3DF38F4E80C9D662
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Vape-v4.10-main/Vape v4.10/newassets/arrow_new_in.png
- Size 1KB
- SHA256 7102a96172f8fc0796a33d306c39f896d81d418359577825a3b0f052eda539ea
- MD5 37af3ae7fa2eb67902346e0354a37454
- SHA1 0dfdd1a344067700666b36375c6041fe8a428afe
- SHA512 1fc5cddf5b123409311abee387c45042dfccfadc6a19956544fe54efe8192a9e5902dd035fbd3e260111bdab7bf83f7af7f507e2dd923b0f164cbc9949ef0765
- TLSH
  T1B4312AA0B23644B084AC3FA12E414A8838573A406C5CA3A898CC5F477303A8F7D4CC9E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32