51905f957576aef1b53b387db5637ba3aa8b42d1fd107254a7cbbb331f5e8854

Sharing

Copy URL Twitter E-mail

General

Target
ControleDeAcesso-v1.0.0.zip
Size 10.7MB
Sample260709-aksvdaby5v
SHA256 51905f957576aef1b53b387db5637ba3aa8b42d1fd107254a7cbbb331f5e8854
MD5 d8c8f073fa20b76b0642282b6d13f887
SHA1 9593e2e40c21ec3c601cec4af53d19b64275bd19
SHA512 22891ff7def9464ee1f4cf3e31b0d7997efd4022ad7000dd954d7505cb998b2d35a6a5721f29fcc1db5256ca55ff06b0f22442e5654266a13f9c4b157d85dbbf
SSDEEP 196608:QoUEHU5icU/edW+Df7iYE9Ee8EXIRROtnyReBc/5XwFNyhy3g2qqohCW84ufIfxb:QonU5icDw+Dz3E9sEYzRLwkQohfufQwQ
TLSH
T1CCB633E49A801BB9D496F51BF365FD281D0E9B43AD97C411F8AA0FE408F30BDAC24D65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ControleDeAcesso-v1.0.0\ControleDeAcesso.exe
- Size 10.9MB
- SHA256 008cce1240d69a369da14bdfa4a2c954ed79cc38d35842969cbd484a2e4f4ad4
- MD5 b2af677100925270df617422b3ccd445
- SHA1 0822683f8ece2861657db181f224311e6462569a
- SHA512 236530d0a4ae7eeb73cdce8dd47c02bb4c834beafd2939e2040ad1e8c02e2037b995c0f1b7dd42357d71f3f6f7b438decd7f198e45092cc001e1647ed7569e69
- SSDEEP 196608:gQ90W8UAgNTwhLzvurH0D9BKG+5fc2S/ErXKEtw+J4Jkz9Rwpr2Zwl6Bk0ax84oZ:glW8JLzvuQDvV+53SM8+JLwqFax5kDV
- TLSH
  T140B633847BC009A8E897F33E94D18C2A97A5751257A5C9C75BF50EB20CB72E8FD70B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  ControleDeAcesso-v1.0.0\install_dependencies.bat
- Size 447B
- SHA256 2db5ae99049e1df8873df954f42aadc7e4a89c0810bbeec18392a4d02deafc0e
- MD5 cb5083053006cbbe923bdc4f6a4d099a
- SHA1 51ec2f338189987c3bfe6596260eb33e1400d90c
- SHA512 508fa4b6944490b02bc097c56fc852f3bf5faa405184278f0b7bf0901161016f336088d7bfb1af293875ad62e7e2d25b5f35472f88817235c7e2137d0678dbf8
- TLSH
  T1D8F0A30B39A49139F5E8404F871FD0526C03B0A70181CDCE74FBD09C1E4A820A7E5322
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  ControleDeAcesso-v1.0.0\launcher.py
- Size 11KB
- SHA256 0a01ba4bb0bb47814d3f6f9c9fe6f6f8e17d6ff8ddae2e853191a8f32d5f0767
- MD5 366775ee1a6e806bd58732eb206223b0
- SHA1 9c4881e0a635f7253589b0bbd947e6dc474a9ec0
- SHA512 ad8ee1525e22f0bd423d1a5b76fe72ff0a4e5c6aea44259091cba799e40652f96d61bb6221966006e171718e9afaad1d3a1f096fad19186f5071b6f8a85e24b1
- SSDEEP 192:vbL/eTeXPRmiNf2TH8jBAgW0/TS9XyYMsjS0XQatWyi:vXeT82THxluTOMeSwE
- TLSH
  T131322002C5399655E793CC3A6447B817BA8A9E03260D2835BDFC92C41F8847591FADFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  ControleDeAcesso-v1.0.0\main.py
- Size 16KB
- SHA256 612ddb1cb358d053995ffc11c83a37080ec368fda3ea9ebb6cc09b10c566ddb4
- MD5 51a9a4f410f758ccbcf8b4b1476fe353
- SHA1 249e4e9240314e2344a5791ed11d60a3bc6fdacb
- SHA512 82e38e5a8cfc850d572c13120c5a8242456498fa66706267c20b482592bb0272f83926c3b45e8d7b5ae2e880e7a1ec386acfbf209bd74788202fe3e2a6cd7b30
- SSDEEP 192:0g9zLDgTGjwhdX2X5lS58WHhrGZySqhwkziiJtaXXpGlgssz1uaAi8DKLZ5vRyBR:/aGW693WzjY94
- TLSH
  T147727755A5563C53C397861C4C634886362BFD432C4C67F87EAC82681FAC8ABD5B13EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  ControleDeAcesso-v1.0.0\run_prod.py
- Size 314B
- SHA256 3a105a45a83247c9ef0d74a3e6e0367d1cd6bdfa8762785ac44d0265e846e098
- MD5 1567fab015ca6dfbdd7730fee269c8cf
- SHA1 1009709149e40e041e8462b5ff625a8c6b4eb7da
- SHA512 ef8522c0e6be7b5b88493386ef04c171f0ec598dff603c40df9a6d3f298a6f230d14eb0ce560463505607c9f7fd8c3fcf3716dabe063c42246658c4fdd7e88cd
- TLSH
  T116E02B438CA996A7CA46DD4D50079022331FCB8B0BA03000F320CEFA87D993BE9405B8
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  ControleDeAcesso-v1.0.0\templates\configuracoes.html
- Size 7KB
- SHA256 fdfc422859a63594141651bb5c7172632910cfa60c071ea56d19293b31ecb566
- MD5 751a8c5dc305fac007a71132c71b929c
- SHA1 0adac6c99371a536fa052ccb2aa7d24b550a70d8
- SHA512 39e59cc0677bf1ee605b365b98d5fe0e2ff0ff150cb3a5fae3aac8b642f55baaecb3599b4e60ad986b5b9f583f7721291672fa9fabf771f96ce47bde492502e7
- SSDEEP 48:/3QNSNXVNXj2WJXm8FHLfrqDY+2EksIkEayBhsjywUPiH36LEQtEjQS/67nWZwOU:BrXLJXm4Pqk+2pPBhHwNH36htC65Tg4
- TLSH
  T16FF1943200F06DE59297A1E19ED512129E53CE97ED9910E0FAEC07907F62DC0C36F26D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  ControleDeAcesso-v1.0.0\templates\erro.html
- Size 4KB
- SHA256 ef66529a61566ad02368565dbb96dbdf6b50a1cbee6df4bb14e0678e20d19aa4
- MD5 31ca0515331c648f8e2eea5679efa890
- SHA1 5d7644674ce7e399e2aec5526f9e6417c7feb834
- SHA512 e7f692d4da3990a8c914e566dec02b31fea50c92c64ed31381418211ddd6b8f5831a4b4ade5b439b3306a475074c9b05f677fd30efd35ebc41c7c0bb54e706d1
- SSDEEP 48:PRJ3QNSNXwHj2pPHRthju8a9nje9SRxiWRWBKPZOdtIp4ZXE9I3HeCmHj:PRHogvpq8WaSRxiWMBsOdtI6cOHeCU
- TLSH
  T137A1302011F21023029392C02FB12B0BAD92EA57EA5B894533ED8BE89FD2DC0CDA7058
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  ControleDeAcesso-v1.0.0\templates\index.html
- Size 5KB
- SHA256 2c9f3ca1a2a0cddbbb13dcfebda835e7c855eb2d2e5ec31901657e52d7b6b857
- MD5 be31637bcfee839ac4c4c20c02968137
- SHA1 0257c4a785575df06a5630f2b45bf3ca63eb58d8
- SHA512 0b946d850566982a94bb9a5e0ee1ffa88edfe40d78f8e5dcc3180e1580daf0c25d6a6f3575499eb016728e781ef10beb91d4a42e1ba0ce6ac6e0ed7a94c51d3c
- SSDEEP 48:cyWt3QNSNXVNqj2WPwXE1XEpmP4Q+ZP8PMLJVX8wZRhE9In23CmWe6j:TWDrqVIXE1PPZ+dnL/RiH3CvV
- TLSH
  T163B1852110F32876036352D33BE32319BDA2D593D98AD85133EC0B94DF92D81D0AF699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  ControleDeAcesso-v1.0.0\templates\login.html
- Size 2KB
- SHA256 49594097a30ea0f5f45c45d99212cb0b6724c3c97523ea0e1c4efac6a842f88e
- MD5 8916518bd1cd4c34b4c90b7438b31420
- SHA1 395f051085a2deb4b51ebd778046a51345582bbf
- SHA512 36705cba694090302811d91199935caf9ccf5a5af9efc67047919245246b0ac226333a6121fc9644d30b276a1b1652be0f27c30edb83a33048a8e76461d17766
- TLSH
  T1D341649104F95D5B130282D47BD53619FCC2C5238B8A7C6076EC0AADEFE2D92C1AB28D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  ControleDeAcesso-v1.0.0\templates\setup.html
- Size 2KB
- SHA256 85cc4269a92806bb18d45d53d48a90a9ee8229136646e8db594543502e0d4e36
- MD5 77396815386596b30cdcc641f5814144
- SHA1 213a64fe22347ee9965ee1dd0f64b8af19b2edea
- SHA512 6e601bf36eabe96a5873e4b9eddb802c545b7165f565ecb6fe4aca2647782aa58eab436905ddbf129fd11546448b898b6d744d23f63d8be12f81a71655bbdfbd
- TLSH
  T15D51459104E91D9B130282D47AD23525BD92C523874A681077ED4F9DEFA1DC1C6BB28E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral19 behavioral20
- Target
  ControleDeAcesso-v1.0.0\templates\sucesso.html
- Size 3KB
- SHA256 05bf78b7327a852216cfd6a16d8888bee355bf338f0cb38510654fcf4d2ff700
- MD5 1d199ce8a0073163e6ebd5404d420e0b
- SHA1 bf079e35eb7a4f220494d7e35b95ccb5db91aa7d
- SHA512 80bb295e464349c7f2e042b709ac507d43fe51972ba42aeae067dfe985f7a5b9fff113334fa1e235eada3f468e6b4f210a9a6cda733b8560e4b4ac937ea98f6d
- TLSH
  T15D71742111F3545A572342C25FE36B2A2CA19517E547C91437EF4BACCFE6D80F09B298
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Connections Discovery

T1049

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22