6617cbf570bd545418a5d25cf5bc3f3823752c5e61230864647e7eb472243e2a

Sharing

Copy URL Twitter E-mail

General

Target
6617cbf570bd545418a5d25cf5bc3f3823752c5e61230864647e7eb472243e2a
Size 4.5MB
Sample260714-m8zztabs8l
SHA256 6617cbf570bd545418a5d25cf5bc3f3823752c5e61230864647e7eb472243e2a
MD5 7ffc6f7dc96614265b75d8e846eea6c1
SHA1 c7dadf8413a6799a75bd9b4fd89176464e0076b2
SHA512 bc26946581cde54a5e18ab597354b6d104e0702b4f18ae2eadd7ff289830ebcb8059a0627ebd3197e73da91a53df0a840a3f51d67d58212dc3de4ab5e85bd943
SSDEEP 98304:FGOVZxPFzC0jMHRXSA6viug9sQB5jopM/+8NDITEsC:FRZxdRjMx5miug9rB5KM9DVsC
TLSH
T16926336367602E3BE287C7D6C085A01881FFE485AE3CBDC69643A521BF2EEC6357154D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  win64/dnscrypt-proxy.exe
- Size 11.5MB
- SHA256 6f9561bda6d7bc9ed36dd3fa9e0a6f01e5b4c7c9d8a890e10578dd64d95dddaf
- MD5 d6161628df1f4ac04ccf0dba52cab4ee
- SHA1 24cf7065f61cd7ebcbe5417f2719a1a83a9a7490
- SHA512 e9bd3baa38a7bc74e35ae7203f71af07b962f691de4fb1200cc07882086f4c0e42eded1f252107ac3925eb0fdc0f471fcb3f3cbe3cfec589451d24cc24d5e016
- SSDEEP 49152:CxG8Jt8ZlkyOn8BMm/A7zKCZnhB9D0XHNDHC8WEqiTqNlaOJkLD114Ry2RMfN8RL:CxxD8XUdpkLDURRG8RVhTAGPB9xmE
- TLSH
  T1FCC65A03ECA504E9C5ADD631C963A122BB71BC491B2123D72B60F6247F37BE46EB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  win64/service-install.bat
- Size 992B
- SHA256 04c1ac6ed9eea7c56c82bb78013f5f5d8ed1dd84c8b9cab8234fca552402662a
- MD5 ab87d533c77929b32f332fb797d0a1c2
- SHA1 c28e6ef1a1bf2aab4216a277e7dfb87e44021a11
- SHA512 22521a504f1a7248367911faf27a08ace2250ac8b6044c34b95e686670bc841cdee45433fc0e1652d4590a69d94d9a69e522595455b79f8156dda0c74283c3f4
- TLSH
  T187116148FCD5E791827A91C21CBAC19AB2ADC1163A84EED0B579C56013002DC3FB4CAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  win64/service-restart.bat
- Size 1009B
- SHA256 ce3eb0df48ab86c88d26fc0cb9f953fdef7b3ecd8be07faf402e6635a4ffb6d6
- MD5 48d5d506079190f17336d7965b7f8f64
- SHA1 abfbae588044a7ed5fb86f0fead5a22016a6156c
- SHA512 e3ca33d3d59341fdfdbdfb0756ad6d9cf191df1b422e006d2fc86590d116408a2c57053c9d0632f2ed0cf41a70c33aff5f7a32944b1905c1ecc7516df09c16cc
- TLSH
  T1D9117E45FCC9E796827A95C20CBAD19AB2ADC1023684EED0B174C6602200ADC3FB0CAC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  win64/service-uninstall.bat
- Size 993B
- SHA256 85da9d303859dafd6a3cac3fee506df24020361b75ab235279a0f4dc91aa2fb5
- MD5 a33a3b2d780b0e1b418a0151fb7defe6
- SHA1 26112ef19b25c2e4a10222ca67f89e5803abf72b
- SHA512 330f98a9f736649d41c8507633f42c01f6920ddde1b6becbeb89a772d6fc75565e1c8804521d9fc669eb609fc8149f09c9e8e756c79f572db894ad3663cfad99
- TLSH
  T123116149FCD5E3A5827A95C21CBAD19AB2ADC1153684EFD0B579C66013002DC3FB4CAC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8