d5aae3ecdaff4718cc4f2037f02f13484d0813db1904a6405b2923f748819481

Sharing

Copy URL Twitter E-mail

General

Target
d5aae3ecdaff4718cc4f2037f02f13484d0813db1904a6405b2923f748819481
Size 218KB
Sample260716-xftmfafw4t
SHA256 d5aae3ecdaff4718cc4f2037f02f13484d0813db1904a6405b2923f748819481
MD5 cf16f030ca632cd25196ad09fa6347df
SHA1 422adf33b107f9c6afac6ff7e0621ff16cbbb61e
SHA512 6da85a79c187d9c38fc552e4a909b8dca0c6b0b93d69f8b4ded161e839b00458c7c343c48bf6f65a274c6e343b9833eacfc31912531867fe924330fd0c8b15c6
SSDEEP 3072:i6aCitVGUopKIEh99nN98fDqKRBV+6zxmzyZVURcUCwUJeTNc+rCzEE0Jp2vEdlX:ZaNTCkH98LLR6yZVFayeTpyb0H2vWZ
TLSH
T148241267F8211310CC8F553BA91E86CA192AD1F194083A157DDC9EE16DCE8F33B22B76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  PublishFolder/SensorMonitorWinForms.dll
- Size 26KB
- SHA256 23093c496543552bc03b7f62b2699c0304cdfaef1b909fb35ed368eb7d4aa908
- MD5 e0115e3c63fcb49be34d38dc612ae4a5
- SHA1 5426f5c4e5b58be5de406f9f2d836df630368529
- SHA512 f8d37d1b1cf9d2d9250a334be107b67bc1b49a33ac46065ab4a275bce2b93fc78a9e3c02da88ebe55a47c29d6be97dddee2cb3cd0c5a06a635a79366dc77bd4c
- SSDEEP 384:Om3OCdK4OPvbAaaDkfTZ8tyQnT+hZMm2PMUCD/fKjPPl0AMkbZ2HNISTa79Qu474:tiKgj/SYkbADxuuUzc
- TLSH
  T18BC23B0472BC4A3BC1FD9BFD98B221150B75D26A2422E7C93CD978EA99D2BC20551FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  PublishFolder/SensorMonitorWinForms.exe
- Size 158KB
- SHA256 025c22af7c6ed2845cb3b8e3f9a6598596d724261b12eb1b4691f8bbbd16c99d
- MD5 fdef69f916ff4a64935ff08767888b3f
- SHA1 a14d1c93ab597609d1fa11f70ebfd1d8b86b41fc
- SHA512 10494eca67277b940af6520de69c80519929707d274cb2dd34c12a29089d015efac24eadb83d927411a482d912c90fdc5269ef02b8688834a59ca56d5701a75d
- SSDEEP 3072:BlDJk88wN1QI7sxrYL1peQ3lOY9SkHNwG7NzaAT5CR:/AIwxrI14Q3kYBTMV
- TLSH
  T153F33B13A6A811BEE1B3D678C9924941FB7278594B71A7CF07504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral3 behavioral4
- Target
  PublishFolder/System.IO.Ports.dll
- Size 35KB
- SHA256 f8deeb6f2210d4bbe1984c6b2ddd6bb9784132807878672ff33b5058dd71c335
- MD5 a35dc6d428772befc4cbc6e27718dea7
- SHA1 04ecc609a8b49e5e873ec7f86ff22b0d6c470ef2
- SHA512 32d5158c3a5660708ba0db1ed65413ca847b8481b63477b7932a1b2ef2177c4d819d9fe83ed17cffe3ff6032948a68da8844ab965570817dd33837297d78729f
- SSDEEP 768:gtPxEAL25BzCwdCgn19fg/tlofICM9zY0:TALiBzhNn1a/QfI5zN
- TLSH
  T1E6F26B41A3F8122EFBEB5B70B5B883568A35BAD23E13D55F0416508E0967BC043F2BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  PublishFolder/runtimes/linux-arm/native/libSystem.IO.Ports.Native.so
- Size 14KB
- SHA256 42577187bf92186c64c86fcb683b58dd3283fae3d743b22ceebb3b589e4cd056
- MD5 acd19086e2b5f44cb5518f9a46eee9c5
- SHA1 dca900b4e5bfc0410a0544fd12a9fad55ca9b44d
- SHA512 5d6257f59ef6c406ed4577d72dcac4c0bab49ada42c34cc811a69f4722604e0d64ea31fd38d32619727edf7552472719726549824e762a3f88c168effe394e72
- SSDEEP 192:OsA8cDlgGCOF7f5tkRP2fNQn2VLP3xtDJWMP:OlDdLtMP2fnL5tDk6
- TLSH
  T14162A653B700C8F7CCEC7B35216343E11A75D8C0573A8E2B018CAAD35E4665E5B386DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  PublishFolder/runtimes/linux-arm64/native/libSystem.IO.Ports.Native.so
- Size 195KB
- SHA256 bd97f7f0e8cda4a1b711bdb6f10a9a889bee2f73c9dbd0cdf31d2a6ccfa2cd2f
- MD5 6010d4af0251e03fbc220b538e373f15
- SHA1 85447735564cf9cfca8c4f2c44aba0bd0ceca3c9
- SHA512 ee862c3ea742b9d8c8ce1b1a37985b168c3bf774cc210e2676998b852b2cbf9b0ec08336f1cfbc063fa7a7e21fc2d5f8463f046a006029334059a951f48e309a
- SSDEEP 192:SuPA8cDlgcGOFKiy1ZPqTNoC/Qr6OytTGJt6iYJ/UmspbKlRtK+dbTJlwJWM:SukDtn8YS6/7spbKrVJCk
- TLSH
  T10B14609EFB10D95FC8DCD23816F30FE13335E80563618BA75154A272ED2569C2F29E8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral8 behavioral9
- Target
  PublishFolder/runtimes/linux-x64/native/libSystem.IO.Ports.Native.so
- Size 23KB
- SHA256 a4db79242af53adea1f7f142ede6b6db9d594d08ee5435b373aac461287b90aa
- MD5 2752b6847553cf11f29a1013eddcb377
- SHA1 ac0bfa2295b59230f749b551773bf0dd54a88f0a
- SHA512 6a37ace09c251f86cc0078dec71b50dbf73d92a34409b8cb1fd21c820c9409f3d8a552b0a57e510b54df0d1b47eb22adf805515173d64831f9c6bc0a31480b8e
- SSDEEP 192:RIcA8cDEgc6PfllH0pOFxAviQnx804sRysV/BatIOscuysTV3ewJWMFXdS:OVD46PtF0MPCRx8hBFscuXTV3NkmX
- TLSH
  T19CB2A497FB60E38EC4DE663410B7C3F01575AD82530796AF6618A5B03E407983FEE58A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  PublishFolder/runtimes/osx-arm64/native/libSystem.IO.Ports.Native.dylib
- Size 68KB
- SHA256 316285ae03a0aad4eb9678d4230ad8aff28aa6243e1d18428355cffff8c7797d
- MD5 c0feca4c2b95da8ea6889811d07a18b2
- SHA1 579874f23e2bf7ec61654e5c5635b5c5f2f38623
- SHA512 1138b051a764372511e0ed257a37118a007c6916226d4088138483ca7c7ab5789e79ff694ebd42d056300f1fe9985698cbb82e2faf83faf9c7d1de5603a91cc9
- SSDEEP 192:RcvgEAVoCxIGtCu5m5BgdGLL2/xtTQiPvbf4adNHQ4BWfwW:RkEIL6GvLLshvMadnWj
- TLSH
  T1A563D3CD7B44D92AC0CCD538A0E5CF907412F5560729C3E7B290C2CAEDBAB612629EC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  PublishFolder/runtimes/osx-x64/native/libSystem.IO.Ports.Native.dylib
- Size 52KB
- SHA256 112fe2a6bf1c10705da7bed97284060e0ce1e6b152c651459772d7a9708b3dda
- MD5 b1a539ffc7241b6979956b1bba2b1763
- SHA1 8d25d1109c017ae17e072407352683c6a7b44ad1
- SHA512 833586104a0bdd5feaa83d3d0992db630315c78bca550fc89e74d8e6f969e017780bde621cd99e13a6d697c5beec22d8f29102fd416d7a988601b0e27f986122
- SSDEEP 192:uS9SfYykywHkBAl4cyJb3s/NleOAjx7dP/s4BWfw42:uiFiAl4bJb3CHydtW3
- TLSH
  T1BC3381D273C4C709C84C157421FA9BF14533FD000E14B727A6A4BA791FAAAE17B859CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  PublishFolder/runtimes/unix/lib/net7.0/System.IO.Ports.dll
- Size 74KB
- SHA256 e2011a7339f414e3f702554cde78415edeb13914de3f70f8767b756681fd0634
- MD5 2cf52d6beade6a5c407ed68a88108707
- SHA1 3561c8ff0e71a1e627a495d9207f5028e04fdbce
- SHA512 2aae61cd8915e441d2850a48beafb2f3adc1565a7e8a43cd8f9b71dd46b981b54f7819725bf76ba87710e719a0de553b0e56e7b9ec9a993e6b11595b21ea50fe
- SSDEEP 1536:Em2m0dkG+XPQgvhgFtkBz5o8n1aqRf6nXz7:H0dkHXdEt8nkqgXH
- TLSH
  T129737D17B7E8838FE7EE1EB46171E0054F35F9A63603E79D5891A4181C53B908B50BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  PublishFolder/runtimes/win/lib/net7.0/System.IO.Ports.dll
- Size 85KB
- SHA256 c4e66c991e23dd4b615cf141e5d5ad7a670f891d16f9face108671e9612dca50
- MD5 8cd01a4d3924055d8587d390e577fc2c
- SHA1 a02cd3dc1b4879e5e23be00721e0625d58d6eecd
- SHA512 51afc460668ac6343584bccebdcd3cc63d7ad4b41f7f2b3b3b04646aca855bca0e8637e263171b73652e7c5d19414fbc828aecde09f9ed00ce945891e6483728
- SSDEEP 1536:ByTuf0b0xq2N55jZbO4QRBzlhUG2iIn1aQ9o0bze:Byae08Kb5Q0fnkQ9bi
- TLSH
  T1E8837C19B3DC471FEB9F9AF5A53491120B31F6B7B903EF5E0898A1990C63BC08E11667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18