59b90813fc9414b874667cdf00b3c237236f5d8a8b5235d4409855421d64b9ac

Sharing

Copy URL Twitter E-mail

General

Target
net8.0-windows.rar
Size 273KB
Sample260715-nsd8vabs7n
SHA256 59b90813fc9414b874667cdf00b3c237236f5d8a8b5235d4409855421d64b9ac
MD5 51df2e317b60770a2146600037856a10
SHA1 8f220ebfb75e6d166ef0a5103454bdd8cf70d76b
SHA512 38e95989a5f845565e1c619db9f6182c5338fdbd408df6864b6888ae7285eabfe0f7c8dcd6fedd0ced7348db65f9a7eb3a7dd1bd68989466bbd7d15ec1271623
SSDEEP 6144:H0LPoWEcgDsqONeEsyDBeI5bafuhspK7eHoKcFGTU0Vct:BWEc/3IJKxMmhsp6KccVU
TLSH
T1805422C4B2DDBEE10BBB15E09336E301D34F1A16A7FEAD21E6B6822574E405DD083A57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  net8.0-windows/RemoteDesk.Host.deps.json
- Size 1KB
- SHA256 0a40fbb783e2083cfede5b54c7d9daaaff83806c64727b78ec42b8d0b3bd41f1
- MD5 ee2cb762ab0777e49875ec751547118b
- SHA1 767e04273b35709dc7203bcae40adf58afd0ca77
- SHA512 940c4bec1a9325b335c1f88028163f0b2aeb74458310dead3ac0932966864ee8855273c3a1adbd11ba8c6ab196383ea2bdc7da21923d1b7eb0d0fd3e04d1bfab
- TLSH
  T17431F42DD5804D6B08756BBA143B8282F676572B1000480E78FD601D8F77967A199F7E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  net8.0-windows/RemoteDesk.Host.dll
- Size 36KB
- SHA256 99ad3617c9926578df8aca6f304a59ff51c2f6f2949fbc87d86c57a4e7a08390
- MD5 0baa216450eae877a68fd0441333207f
- SHA1 878b5d8eea15b3859cc8c90094ff15a9b2c01984
- SHA512 7ad85d120f98a3096418debff6a403950d5ee36f4cda805fed3bd776494556b95546a71ad38bfef49633ecd15e609d259a63694723fbc895e4ae1375bd0b3fbb
- SSDEEP 768:8ec0KcO0c0zb16rxQelAcgmD4zwFuu0+gfpbKXubkU49:8+16rxP7v0+gRn4Z
- TLSH
  T1ABF23A4453AC8E17DA6F0BBE6471525297B687577942FB8E1CCC70DA2D823426B007FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  net8.0-windows/RemoteDesk.Host.exe
- Size 148KB
- SHA256 9a6c791925b4ee9c8f4e90ccbfe9412d04511f06f007c0908c6513e533de0245
- MD5 245a8af6a123a35463ef43394d855eb0
- SHA1 d589ddc6afadae5bc31d0167c4c018dc020ae1f3
- SHA512 c54e5a243bc04d37954dbadff6428e4214f55dbeca5927c3acbf0b21833b77dab659faf18ff3d6a78919a0bea267909b24b36c3c8ae74b10a0f8e71c08bafa63
- SSDEEP 3072:sqeXA/4yIg9vkNPNu6H6xCYOiVUE265nJG:svgvkNFNaxmNEHJ
- TLSH
  T1BBE33B07A2A851BDE1B7D679CD924C41FB7378598B71A7CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  net8.0-windows/RemoteDesk.Host.pdb
- Size 18KB
- SHA256 e07e03ea16a78338cfa19cde478a2900f990deca7329180a844b2da17acb10c2
- MD5 a5c8ca7430ac83f640c7c27cd9773902
- SHA1 0489c3d697a88060dc8494d71555cbec18d4f82d
- SHA512 8c24b96cb1a27524c3914b287204688db5bd92baf34e527a31c8f7f59524b2bd964e826c6f6f760419aa7630e2d61ee31cb95365097a09aeebbf17a396d74b99
- SSDEEP 384:/SsoXfWFjDkekw6l4D7aIXzsZ1cBa1WG7KQqrywN0aDj+0exHTfyv8G7ldfPo1c3:/SsoXfWBknWCS7NFff
- TLSH
  T16992F87B935CDB21C5462076A93AC28C3734C3246705EF79F2D47A09EEAF38907B6265
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  net8.0-windows/RemoteDesk.Host.runtimeconfig.json
- Size 429B
- SHA256 73b37384bb001e78db2014d328750eb2990393712fd63cd00c0f41965b3dbe96
- MD5 1043e1e5e960609d014e56f638202c24
- SHA1 aaa1583e8c9809a39a52c73efff1e5e439cfd3df
- SHA512 5fe61affcddd7b6235270cc3f0e7fa7f2e890852de6f5c7759234870d244ee1b32f95dfd7efb5e2f410d12557593491c53a5323b68966918f92a545c1f10d66e
- TLSH
  T1BEE02A3ACA206DB714F02BBEC02AC187FA3023AB00040D16BAFC180C2F361A22001F88
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  net8.0-windows/RemoteDesk.Shared.dll
- Size 16KB
- SHA256 3d3a22e14e3a2b7498355a1116027779553cd5060787c22da81d2ae2ad8506fa
- MD5 384190ee4af12dc69279048f5ba43567
- SHA1 021cf889013da12cec92c4f7b592009c75803293
- SHA512 1560ebc65b55d106fd143698d59bed64d1fe5947d83948b9c20d8835ba838fb4a8e7aa46ea8c495d0074e3394bedaf81118f9166ad9c84bbb9009005b211d30c
- SSDEEP 192:3MTCPFiVfszo+heQiMi7M5fny8SfSNlDB+6uSqvpbSx7dNtiAHEIDaymdH83Trgf:8FfsBheQeg5/jIGlD0JK7Vi1IidH8i
- TLSH
  T1FE721A2863A8C33EDD3E1738E43143630275A2CA6413DEAE5B8C658F3C57B541961BF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral11 behavioral12
- Target
  net8.0-windows/RemoteDesk.Shared.pdb
- Size 13KB
- SHA256 770272f1379a91542620fdac6ee1001cbed1401c835e4d0e560396aebbf82a12
- MD5 e2c747833c68adb95113b0fa676abed2
- SHA1 4481c177e6d1bcf0f232b65c38c963fac939a1a2
- SHA512 d9bcfd2a63eb88224a8feb1006cdc4578ebd584f47f2887c326072cbc3ee2708a3e247df6e63453ceba721e291963349cd3b2ccb38f7da10c3ef6aae1d1bfe2d
- SSDEEP 384:7MvikYOw6l4D7aIXzsZ1ca1R7TqiycD0aD9+exHTfyv8G7ldfKucT0f2Bho:77NMThrD+fG0fCho
- TLSH
  T11552927B9348D220C58657BA19BBC0AD3735A3203706FC74F2C87526EDAF68907B61B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral13 behavioral14
- Target
  net8.0-windows/System.Drawing.Common.dll
- Size 596KB
- SHA256 1d8745d1deadeba6c08bd370270b56faed78fb8366d3db2420411463b818984b
- MD5 53cf8290b1cdb2bb2b8ae8bc59b0e83d
- SHA1 13997704c31bdfa6f3cd18d0cb649b797119384b
- SHA512 b5d69bef61c16cb4e14930a4715fe424d18f64cc8789515f582cff3e9cb8b2d26fc281c883180841be19f13b9b64657d4e095fdc5899a20fb145f4bd90629f08
- SSDEEP 6144:Uu9ekTdYwj3M9jcmW1T3PVEJ2wnU5jYaqygl7mirTBMZW+XYDOMefxPX6Ohq1IvF:Uu9dOeqe0mGl8W+XkOJxPq32mSfTS2
- TLSH
  T1BFD43B2273E4A82BD29F0F34D0B5990CA779CB15DB07AB8B1B95A76C0D83B91CD411DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Share Discovery

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16