f9e627333b4b414eca16c8393b4911d60196d809a7a80f47206abd39eab3383f

Sharing

Copy URL Twitter E-mail

General

Target
Spy.pet-Info-main.zip
Size 3.3MB
Sample260712-qbkemsat8k
SHA256 f9e627333b4b414eca16c8393b4911d60196d809a7a80f47206abd39eab3383f
MD5 f53c21d9d0182e61b9b7d3ec3f861c51
SHA1 7f607cd597cb288d0a8bb68b2dd9d8a34f26f7ab
SHA512 2518c2622995f9fdb5a3c27a4a2447af9e0623f630424f1cd36c678edea76c392cb31a29c383953e94ae6178800a587031f65a8d27f2c8e6f11f7bd322e966e6
SSDEEP 98304:U8bVHcAkSZceZaEcVJOmVQObwkAggG9+9nP:fpkSZmJOmVQ2wkAC+9P
TLSH
T1C8F533AED7D433BEC21847341C67809B3DA471DE92142FE73B28E194A5FD637A2C6258
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Spy.pet-Info-main.zip
- Size 3.3MB
- SHA256 f9e627333b4b414eca16c8393b4911d60196d809a7a80f47206abd39eab3383f
- MD5 f53c21d9d0182e61b9b7d3ec3f861c51
- SHA1 7f607cd597cb288d0a8bb68b2dd9d8a34f26f7ab
- SHA512 2518c2622995f9fdb5a3c27a4a2447af9e0623f630424f1cd36c678edea76c392cb31a29c383953e94ae6178800a587031f65a8d27f2c8e6f11f7bd322e966e6
- SSDEEP 98304:U8bVHcAkSZceZaEcVJOmVQObwkAggG9+9nP:fpkSZmJOmVQ2wkAC+9P
- TLSH
  T1C8F533AED7D433BEC21847341C67809B3DA471DE92142FE73B28E194A5FD637A2C6258
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Spy.pet-Info-main/.gitattributes
- Size 66B
- SHA256 1a1dbe176bc233b499d35a57db7513f2941c99ab9759f177830c9149be99005b
- MD5 05bdb783ee6514c8c072e47680af8ff7
- SHA1 ba3dfe345280bdcc5e817bb02cf49b8b8d8e1c4c
- SHA512 9e820d6126d62c0b89e380c69685f6668b2f131283f57e524f59492fa6df22844dda1b90d244d4a1f8aea78a84e65d47b1a878168c4e41001459a947ef275ffe
- TLSH
  T1EFA022028C0233CCA0C8B3022088E0800338838E2000800A00880C0822C3022C0A2F30
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  Spy.pet-Info-main/.github/FUNDING.yml
- Size 41B
- SHA256 ab9c9a744a063307297b22081698aa9923410fa0bd73b571788031109272fc3d
- MD5 072756b42b929e577efb1144dd7ee085
- SHA1 02bd41218b6acae9d1093330c115510175460bf3
- SHA512 251b92ae08e90e883d95b5e141524f423579e8b756752b4600d6e28607bbbfababf39b7f21fda5f4584cd18a801755e5a8ae3f0aa1fa15df23698620f13722ea
- MD5 SHA1 SHA512
Score

3^/10
behavioral5 behavioral6
- Target
  Spy.pet-Info-main/.github/ISSUE_TEMPLATE/bug_report.md
- Size 834B
- SHA256 0c8d64f29fb4536513653bf8c97da30f3340e2041b91c8952db1515d6b23a7b3
- MD5 e468801d29e6b66b0d496136e22e8b34
- SHA1 83d211c67c12e8c1f6e9f796cfd0cecbf5160e15
- SHA512 764dd839b31e1a112eed1a9f61bb215b276af1975b15335054e591942445826d3924c73bf7d1ae968c5c93b1cdeb0bdd2ba0db4b02c599ecc35a6d1f7527485b
- TLSH
  T1930112B7C91FB1135271214F5967C3F97B7917644288C226BCA2D22806CD2EC9B3B2C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Spy.pet-Info-main/.github/ISSUE_TEMPLATE/feature_request.md
- Size 595B
- SHA256 1f48c52f209a971b8e7eae4120144d28fcf8ee38a7778a7b4d8cf1ab356617d2
- MD5 174545e1d9daff8020525fdd1e020411
- SHA1 f6867a2f0417fe89a0f2008730ee19dd38422021
- SHA512 b18005cfe7409fde541b934131c32c2eecdc4a8fd62cd558f274a25262c0e6b0b8fd27674ee55d6d4e4c435d49d580a077181fe8b15b095c39736b01ff4ee537
- TLSH
  T132F0E1AB8EA563075DA703841EE3DE4DA5269B612504C62499C1C4BC33CF75CC73B4E1
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery persistence ransomware
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral10 behavioral9
- Target
  Spy.pet-Info-main/.gitignore
- Size 2KB
- SHA256 306fcf60f32ba0497ca56ad546ab6e22ca9377e19685281189a489b128e28c3e
- MD5 7ad2272ee04fc7e17e1480888d770ed1
- SHA1 b30347c4d988b5a3d1f4f63909dffd0b5745b778
- SHA512 328a373e7f2f53f16cb1c3f843351ad79477bab04fcc88e6e1a5f6dc09ba41ac170b384a457336a5bae04a4c2941ec6d379806a697ec3709a1696be81804a413
- TLSH
  T1675199794229D37553E3209EEADF79E0E339555DB7481C5A54E7584C230ABC103B336E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  Spy.pet-Info-main/CODE_OF_CONDUCT.md
- Size 4KB
- SHA256 e45ba4f25ad7e531af87675fed1c532ccfc3fb53ec16df92ed24395e72ffd33f
- MD5 3bd93eb79915597ffec7d4fbefd9ef27
- SHA1 57254138b38a8a031285bbf366d6817e11da219f
- SHA512 88d325caeb4a89525d8cc4926d340684bec0dc387a8d4eb86fd43df483d588cb5cd7e8184b850857d07309171b5dc38d4fa544e0aeb2dc35ae32895ba788d10d
- SSDEEP 96:LM1A1YYLeNKWIbPWFCH30sIfNsw13wqTsY7rOKIjFwoqHoPFTORFq/FQv5C5S5Z:OTYLeNKWWWcH3G1V/INjFwToPFTUFq/8
- TLSH
  T1CBA1B6136BD823661B8301E4A71771C5F7384D88374F55A4946C826C839AEE0D73BEEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  Spy.pet-Info-main/CONTRIBUTING.md
- Size 7KB
- SHA256 de2e4b509f48208f8d66fdeefa4a21d9a5e4c90fa9232fffe98f492f4fe8d171
- MD5 1f3a6dc6fde47d204c76ce5dfe18692f
- SHA1 0599216f9c2922915158df0a68d371b3cca707df
- SHA512 9328baa5a765fa1aa41cc1511702014be9e1327d14d4fd20e8cd6734a550986922bffbf694a608d9d68931411f2b407a023ccedc64e8788f46690b50358635ea
- SSDEEP 192:GZNU7AayszgNoel70+Qecmd4CfQH2WhUVqbeL5xRGuWffgpRz7YXtRlRwe+w8D:6yD3Eoo7VOuD6eVq6zcrlIw8D
- TLSH
  T100F1D72FDF9443741F4610E0A19E79DFFB36917C6351F87A986ED14863A8BA2423B0D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  Spy.pet-Info-main/LICENSE
- Size 1KB
- SHA256 b7ab5ca83a6c7dd0035f6bc488e4df86fee00b67913053b67328366e91dc639c
- MD5 8e72668fffd002f776d703e3b67ce67e
- SHA1 899822394296392e405c96f148288d36265c7f03
- SHA512 e05f79aa53ce35554bbe481cbdafc11cc1de099ad8f48510e7330b170e0540f1d967b38eef77ba29992bd64e97fde0df6f33609306fb61dcf260fcf2d16d8b2e
- TLSH
  T1E111751EB25107B2289B13A05978ACD5F23BB25F7A5F2A84246EF345633A06CC5FF840
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Spy.pet-Info-main/README.md
- Size 36KB
- SHA256 93b9bf967f8f2a47b7dd4dc0cdfd661cc63cade77b8ea6ba80af081b29118a5e
- MD5 cd5037fb83aa96986f24d979cec4e8bc
- SHA1 70ee19d4d2f55627a4b6bde759e0455ca8f7f3b2
- SHA512 eabc8194486bf15e567b66d5f6ea3a9576a53700b42f028eb4bd1afc64fc9af5496b0a7bafdd4c44f8828761d085c20d71e17ef91e3380570b4f490dab894048
- SSDEEP 768:adPmPqPAKPxPr7llqDwVkCH+KHuDdlmlrhM7TBpfEOV61hwFEvAcQvBsKVFBYgXM:adPmPqPAKPxPFD2AVHDiYrl
- TLSH
  T148F20DD30D584D23067EED8FB8967178F95E98DD06874D87B85C0E2BA30E35772B890A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  Spy.pet-Info-main/SECURITY.md
- Size 753B
- SHA256 4e2a62550a7829ca86fd2b84b40bb524cb45beba31ca4cdc90ee915a8efac471
- MD5 287521e3ccb8c04c22da1d681b10470f
- SHA1 523fa71b48eb44c017633e56410e37f0b81f94a6
- SHA512 240bb948db539fd578cde090f7e53bee8b26800899911770dbd736e10e977450ccf3156167af1d02088860819c024b7761515e073242f20c8e9e4c5b31dfad9c
- TLSH
  T19601106B971C313286A114D7137D4FDAE3EB5108533382AE0CE652D0F368BAE5233589
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  Spy.pet-Info-main/data/all_known_servers_22042024.json
- Size 582KB
- SHA256 2757e309bf8522a251f592880368c7b315b12e9da2402a238b8a1ab413deb0a6
- MD5 7043412b62f7537b7bcce4335fa03074
- SHA1 260dc27a138eba29d12cf4bb4675c478de35d5c6
- SHA512 80a0ae8155bb45ce479876ba798a071b9bda995a2ec3c2f911be6e20f799df5e957cdb7825adf1bd1a372243c868e71323e36a22ac04dbcf040bde43ab4b01d8
- SSDEEP 1536:6IAp5O6ImLUVQsU2CI9gK2Ix2KZpBjTJz0QVMLdvoMX/iaCAqiAHXXfCyKWE66TY:N
- TLSH
  T1BBC450F1E7086CD53A4CCA4A31581968154026379C8A3D8F33A25B8E1F9D68F6AFDD4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  Spy.pet-Info-main/data/all_tracked_servers_22042024.json
- Size 319KB
- SHA256 1f26a9a5f93ebbc565d0e2640e47db98721a2fda86f9d071554af57d397a1bf7
- MD5 d89c863ffa75e0115b5a7dd6c90999df
- SHA1 653c5c7910c04bff8a9e99e60aebc3cb594a64b6
- SHA512 cca0aaf9c34f8970a4ddfef7c6a954adde12522549d7d8be66f42225da8686584a0e1a8161c4dcefce5615a902bff55781a6549552afdcd7a7bb2db0e44f7083
- SSDEEP 1536:wMOzs+SmydWqzl/1dSdVdEyG1T0pnYhM+WfXO7APjUQX3hazd5lDR6yvpR48ss+J:Ij
- TLSH
  T1706495F0E7086CD63A4CCA463058596415402637AC4A3C8E33A65B8E1F9E68F6F7DE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  Spy.pet-Info-main/data/crawler_output.json
- Size 14KB
- SHA256 6ba6966a70999cf5ecd07bc962469ca34ded36bc236d279ff7123153e93fe703
- MD5 6d8b7c1d020547fd3b801bb7c32a3bf7
- SHA1 91197ac35fd3f320c36568e872cb47f6b2bd7606
- SHA512 c710ba80b932b3791ac3bce0dffde4d9cb3f90e405fca494142d6422ea7f0b90f70d03eb8d9b3a403680f5239ef7d7ed076c8f2237178536c176fb986031ee86
- SSDEEP 384:cKlAxYsxY4qxLCu9Wg6YVMHt6qu+3INQ64pXFCdkqNMrucDvXtWw7LZZZjAMPEX6:cKlAxYsxY4qxLp9W/YVMH8qu+3INQ64F
- TLSH
  T17862F0C6D1AE0C57433D94F6BCAE4B24B4616A674E9CB84B7761C09C5F0D82F29F8A1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  Spy.pet-Info-main/data/detailed_all_known_servers_22042024.json
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Score

3^/10
behavioral29 behavioral30
- Target
  Spy.pet-Info-main/data/detailed_all_tracked_servers_22042024.json
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32