e2d55170e777024f0847c625a9d90520e90e31128fa8525c67bc5daacaeb55ed

Sharing

Copy URL Twitter E-mail

General

Target
v0.5.3.zip
Size 2.5MB
Sample260715-g1mrmags91
SHA256 e2d55170e777024f0847c625a9d90520e90e31128fa8525c67bc5daacaeb55ed
MD5 1153fe2a951909b02bfc6d033b5f9716
SHA1 3f395a3eb5d410b48093920da0285daca92ad1d0
SHA512 23113474038603e65101ab69088edaeeba69b9e399c369bdf7ffaab13f7fd2b06b7a3f5615341b6b4d2dd38a69607d216c9b007d541217d19a9926ffbf1adf76
SSDEEP 49152:8P7G6LRc7dlKYEpuUt2tzHHA/V4XOZmSm7hi2BtE8tvI20/b+AdUfwgiG:8P7G5lK/1t2tzH7XOwViqtvey5fwO
TLSH
T1B6C523C13CDDC5B9C6A941305AAB7702090AC9814806F49F4F94B68ED6B88E7DF93DF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  golang.zx2c4.com/wireguard/[email protected]/build.bat
- Size 4KB
- SHA256 002cdef351369a312e95ee1b563133ce210d51fce532215b592c4a10a7cd60ae
- MD5 3a7cf4131d08f0bf887246d84680d624
- SHA1 c59497703bd9013bb6c24572c33a3344349db631
- SHA512 47b1ba396efd0d6f9e139a21cc3ad06cb06cbc4b0b528a5ae48b0d88041cec51e6cb8da48ce62dbfa6d32e76e1420016260415de797b0f58398ca9c97c094245
- SSDEEP 96:HwZbZmfkkUzeCGmGofFfTGtCQk9pKME4f7IjbI8A:QZbZmfnUz/xPlTeaz8bI8A
- TLSH
  T1CFA1C6EB5848E67B2A414ED167207348B3D7CE2371EC836D67611B8C95990A3E8FE1C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  golang.zx2c4.com/wireguard/[email protected]/conf/dpapi/test.exe
- Size 3.5MB
- SHA256 190524f3a860cd82f4312c0c786f72321e111625487dcd014f4e4503b91c1eff
- MD5 0176717ca6eca162e854cdc9f0135840
- SHA1 1407a1001fb704221399aec7403e71f6d950130f
- SHA512 2a01b236af8e026c729f34f656fe84e590d23199f80875067d2bfa97253b25a0a022274e38dd3bc268a783235fd67bb37fd49bae9e10f8399f17fc76cb24f697
- SSDEEP 49152:1YJmmjxG6sf31Mv7H0Qg8ldnwabQSS5TY5ONz4e02576GhvT8/nvWGG7:1tyVsP1r8ldwaV5OV4e0UhvT8W
- TLSH
  T1B8F57C06FCE614F6CABEF23085A262227AB1746943313FD31F94957A1A66FD46E3D304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  golang.zx2c4.com/wireguard/[email protected]/conf/storewatcher.go
- Size 438B
- SHA256 cd0aabd5dbb2bf2cb12f3c43e23566f619f9932d27fefd16a111a7e31a4a0a09
- MD5 985a1d8212633162f9ca3d6c70d30036
- SHA1 5f314ce673d0d44e549e199fbf25765009c79ee5
- SHA512 024e3a167d245d300973c081c374784827ffda607ace5fa4e323e16a5efd9d86c205687c6b731098fc67f0756a63a0c8beee61b5fab079a7c8b2c73ca7e95048
- TLSH
  T1A7F022E864B727239EFDEB67DE225F1C204DAB85FC4D51CB619D23EA24220DA132501E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  golang.zx2c4.com/wireguard/[email protected]/docs/buildrun.md
- Size 3KB
- SHA256 07a6f8acf058cb5bcd846bc2041a1cb60e9af0f29248811d7885a804d2302596
- MD5 7394547ed2cc2a67a6261e925b030365
- SHA1 c6c378ec673bec328572c2471b4e442f6b8009a6
- SHA512 c2a55cca337224681e9f636d8ad9a72f26dc5ed4976be4bb515922c3f54521583fe20869eceeec9ae67887d7aa0bf1d0b46164800bc02bcc88ffd4033f3ee8ca
- TLSH
  T13781E79733E5B37D17710191A77E76D2F702C62664AEB47B03AE404821430BBC2BA1B2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  golang.zx2c4.com/wireguard/[email protected]/driver/memmod/memmod_windows.go
- Size 24KB
- SHA256 237f59828aecbef5784a11fe20d11e01cf445f42599d7d196fd32590ae32231b
- MD5 341cd9044727c0916aefd8a242753723
- SHA1 3f468e9fb2b5b5211bcf3df471ddd963b00e3596
- SHA512 60930905f226143dcca97da95f16bbd6de4d480c49535cc1bfe78a89b534013d7d7d81ab29345b7e81da090670c72de5b414297858c00d4f28526b7e98ebce7b
- SSDEEP 384:AmL5DSKEUNlyq6+kEcFc8zhScIAAOlDvA/SFCs7w+eJeiCduKhx8vi:Aw5DSKEUOLcj+hSH+iJeiCUKn8vi
- TLSH
  T172B2960A6AAD35071E831026FA4A950149F9E0A608B840167DBCC6DB3FB147FDEB75DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  golang.zx2c4.com/wireguard/[email protected]/embeddable-dll-service/build.bat
- Size 1KB
- SHA256 4f6474fdf327c40589e6d754f4afe3d28449ae39d88918979eed990982549492
- MD5 ffedc89c83da6383d214b3305015c57c
- SHA1 9459aa6ac810f5902157d2c41989e84e5f765917
- SHA512 d6f0c81504de433febe9e870f564fb96725def78c5842b4704aec08e556eb5c4c52f2ccd5853c574d199159ec71b671f84cb70eb16b60560f9176d9f138af342
- TLSH
  T1621123B57D00F5273EC2CA263BA29B8DF2FDC033317C464D260597580D9B18A18EC043
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  golang.zx2c4.com/wireguard/[email protected]/embeddable-dll-service/csharp/DemoUI/MainWindow.cs
- Size 7KB
- SHA256 90a3debb59ba9321b32cb61cd88df05c421d0422265473f3a57af2a0b74398ee
- MD5 38bddb38ead760b130078daa1de73882
- SHA1 e23deb00abc21b19a2e813086c4559c6d7f7a022
- SHA512 f064c71e3721947aceaec87225627fc2ee9f016504ea21b4f894743e39f1f0920b8b639d64ee8a21f94cd2f06d73e67cef70ca62ccc5d2aaeb23dc326f5a7021
- SSDEEP 192:t7wrJN77/7R52aUCqjenRS0yiSf8Dt1Xiq1CkUC81caZi/avzTr7+RTDY2qIC3L:t7wFN7L7R52rjeRC8D/9225Y5
- TLSH
  T15DF162951DAF04B55623203ACB9F8143AE76810B070EEC647F8CD261DF5841C8AFDBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  golang.zx2c4.com/wireguard/[email protected]/embeddable-dll-service/csharp/DemoUI/Program.cs
- Size 1KB
- SHA256 e13a14025a9007cae0270fd64b50c7cefa3128ad021fd8913c3cc8f90cb01c45
- MD5 9188a3f0c28c41ae081da8cfcdcecc66
- SHA1 2890f8ae3aad4b5265083ce7f711f44fd87cb65e
- SHA512 0d569483eb8674cf998fb0b85d95d7960a97e83734406d3cb835926bd54d642de7b3ad8e579de1b1a2bd04703607ebdc64ea288d441f98469702c246ea946a3e
- TLSH
  T1A421CEA871FF64A0A6B754BF1F16998525B2112B357EF820B9ADC050EF068294278988
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  golang.zx2c4.com/wireguard/[email protected]/embeddable-dll-service/csharp/TunnelDll/Driver.cs
- Size 10KB
- SHA256 c28fefbb359e35d5f47dc42455788020624354bc2d533ee252fd5f032d9588a1
- MD5 cb9148ca37221784cd959573620c2638
- SHA1 06b1b6112a87c6f7eb018f4c6ac63d8aeb3fac94
- SHA512 c9918429e089e2edc6061251361f69f3a6edfb710aadea246855e44cf9309163cc6bdc1cd33e52a6f3b06491efa6cb3830f07ce07f1ae5d74659e5283a4943ff
- SSDEEP 192:PcqMfFpkKU3voSB2vgyRVX2tenSqtSBJPSnqS+SP7SFSczfTp6PjCIPrIfrsFyL:Pcqa/ATTkKv
- TLSH
  T1B722868882A368A4125750357FF181A23363E28716EEDD247D7E65045F4B624CBB0FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  golang.zx2c4.com/wireguard/[email protected]/embeddable-dll-service/csharp/TunnelDll/Keypair.cs
- Size 949B
- SHA256 8369f55c1f06f7847365679ef8d210154d9dd35dcff30674cb81c3867e653d48
- MD5 baa6912dea9fcf7f00bd7999c5c9e307
- SHA1 4b0d34c525df14e2a973b2309cf9c99875bd823f
- SHA512 0aa9d632c6480f48122333b43be65fbf78dd661f9ea89fcdf61dfb134f03d6f79687e80e68c2459b6f01d7ec220d41597abd5c40b6d45e90aeee1ba9424199a6
- TLSH
  T13B11C092D4F28C6805538033DF60C1C7B967900FA36FAD34B54E06116F0A05056BDD6E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  golang.zx2c4.com/wireguard/[email protected]/embeddable-dll-service/csharp/TunnelDll/Ringlogger.cs
- Size 7KB
- SHA256 3e15cf6f4aec057d1a15ece3d7475464f631104da62d7bed3796e578543d105f
- MD5 1ca725932409f15c0bab625647356f0f
- SHA1 bf19338d02a754effac5a34a614510688c976687
- SHA512 d224ff3fdef492fdd1265c03d961423d77c8d8457896fbe9fed6bb1155bf6042ff02e174ae96aa4faac79dd583de0a48257cbb26db210d111a9e473068982a2f
- SSDEEP 96:ojPIK4YVvVCCp6SyOYBKMRgRLy+pxyt1Q5rDzbysTC9tR8xHsnZiL:909CCcSyOjWY++nysv1TC9z8xMZiL
- TLSH
  T188F1200478BB49116A03812CBB4EE0863B65E11F4D4EDA617EED22111F4D86CA9BDFF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  golang.zx2c4.com/wireguard/[email protected]/embeddable-dll-service/csharp/TunnelDll/Service.cs
- Size 4KB
- SHA256 336bede1ec5adaccd1d332e5dfe96bb60a32bec0375f8080d61eb85041726bf6
- MD5 beac4ea0f4414c34a6785cf8a801edb0
- SHA1 09dfdb847efbb62ff7fd38f4a1fba968e06f26c6
- SHA512 e82ce0846dbafbe30355ab9675023c07c743c5b1c5c193c850648ae7778e487d14309200d2ae17e9cc8bdcb6fa80cf3c49b109fb11f3c3746984aaa18c197a01
- SSDEEP 96:ojPWM4GNVSozabApxswMkNuLR/CLrXiJtaLUR/CLyL:JsSoebMxswMkNuLR/CLry/aLUR/CLyL
- TLSH
  T17AA12154A88315EA54331C508EBFD085AA650527241DF426FFEDF210FFE086A9AA9BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  golang.zx2c4.com/wireguard/[email protected]/installer/build.bat
- Size 3KB
- SHA256 ecfebfff1af99e3d140e96739f507650e408569d038b911c4890697b9eecd105
- MD5 2ef6bed2e467e0814229fc3cb38f5e70
- SHA1 f480767357e5761c80c391b58778e24ddbf62f28
- SHA512 dc0a9d5b6e6e77783ca9ccf5899b5105ca5b13065dd0d73daf5b1241c2590f8adaf99befc94235fe9d38e8efd75a72feb7b33252aa1f2346e2b8bb09fcbfe039
- TLSH
  T1C361738FA4402B733D02DDF50712568A776ACD3332AD0F6E25A1279C04C61A62DBF1E3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  golang.zx2c4.com/wireguard/[email protected]/installer/fetcher/icon.svg
- Size 85KB
- SHA256 cac2e9401bd8074712aa4f60d1858524a571da1192c1eb4ff4df17bd6e790e02
- MD5 b44d044da4595b3598217b518dc523f3
- SHA1 f9fa1f750fda5e9dd82daefb70cf16df7467afec
- SHA512 091dac6a478fb3ea9d6255d79013f269981720788667132a7989a764c87303bc4a2e8b7f3315168e77e5cdd6b2d0cbb598808477c4167409dc6d21b97671eabd
- SSDEEP 1536:mdpfKgTEJYGguPHJdJcIoqK1YuKuVD+muw9rrkB3oGyhaY+STLwFspWhHZTbdQ:q1E2UHdcILK1GyD++kxoGyp+STEAWZtW
- TLSH
  T1E48302049AB85DA4F718B10936D33B6D137820B2845E9E62F91F24C54BB81E9B3DDF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  golang.zx2c4.com/wireguard/[email protected]/main.go
- Size 8KB
- SHA256 2cad31fcd1ce459024df527abdaf36bb829cd6f391e6d57b2345226bdba18489
- MD5 d688db8bf951eb7002bc645f91087a73
- SHA1 4a0281ade40ecc7fb2dc7042ee328e874a6e2ff0
- SHA512 0fcce6bb96e2e4130f071cf474040abee8ddeda384b476ea3b1c7631fb0909c2554a8931a14fb550e0ff5184b2ad181812bb23426f19467554c6012f2cab18c4
- SSDEEP 192:AXtJyQKL2Ob8CpCD/4h7Ch7bhckcuzodBq:Amb81D/67A7FcTK
- TLSH
  T17D02A642DFBC01595558041B6C65AACB068DCC330A7E50F6BDE8F1F0B4D4427AABD9FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  golang.zx2c4.com/wireguard/[email protected]/manager/ipc_client.go
- Size 9KB
- SHA256 09425c43723bab08aa2cf160cb506b008fd0bc5ccfd4204e56b9af7e618ae25f
- MD5 8dcb3f74acb879de0825c0ab3ddd0346
- SHA1 29c2a8db8ae617d02674bb9104bb0736e0e68a8b
- SHA512 473f3af996a4403ab0acd5a0b4d9fc9d7cd1241b365a36f51762b6aa55ad696336e90ddf933ecbf0bf4472ded31431e42803fe33c5f97eaf856f16e26524acfd
- SSDEEP 192:W+mqjbStlA8cimxyMXvrqsiTupbZ/zzGG:9StlAfvrqI
- TLSH
  T1C912FEE86FEF8522CDA05D1F98055B4204CC9C71AC3FA8617D99B3FAA0610DE973D5D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32