b1752797701bc4cd1cf0e75046df2eb6838751e386a24a3e608d05d3a7d2b800

Sharing

Copy URL Twitter E-mail

General

Target
ALECRIN BYPASS GRÁTIS.exe
Size 2.7MB
Sample260717-l32e1sct61
SHA256 b1752797701bc4cd1cf0e75046df2eb6838751e386a24a3e608d05d3a7d2b800
MD5 2d9d99ff64b0f58753f207a50a6ac912
SHA1 6334d58746ff831d3033cefdc702aa3ee1067c56
SHA512 e6eea5a3dbc791272e0779e9f6ee3c4e668f8af0a2efd1f748e7e12636ed9458b58522bc1504fe94b400120b9a5d12715dae5cab64bdca6877623bd93c200c67
SSDEEP 49152:ggroXH43JXLVqkpUBBvp7pAHCa7anKy1S9/aOHRnmRw+W7SClEJiu+M+iVOEhQf:HMXY3JhNqPyia7im/aOBlu+M+4c
TLSH
T14BD53380F6F90939E7BF1D7C1C79409A8B72B683DA42EB8A8C25519C1E47781C577B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ALECRIN BYPASS GRÁTIS.exe
- Size 2.7MB
- SHA256 b1752797701bc4cd1cf0e75046df2eb6838751e386a24a3e608d05d3a7d2b800
- MD5 2d9d99ff64b0f58753f207a50a6ac912
- SHA1 6334d58746ff831d3033cefdc702aa3ee1067c56
- SHA512 e6eea5a3dbc791272e0779e9f6ee3c4e668f8af0a2efd1f748e7e12636ed9458b58522bc1504fe94b400120b9a5d12715dae5cab64bdca6877623bd93c200c67
- SSDEEP 49152:ggroXH43JXLVqkpUBBvp7pAHCa7anKy1S9/aOHRnmRw+W7SClEJiu+M+iVOEhQf:HMXY3JhNqPyia7im/aOBlu+M+4c
- TLSH
  T14BD53380F6F90939E7BF1D7C1C79409A8B72B683DA42EB8A8C25519C1E47781C577B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Downloads MZ/PE file
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1
- Target
  costura.dll
- Size 5KB
- SHA256 7a9e767ad824afa2c1b0aed513fe1cf2b8dac6d40f24e7c4075af32b1cf23a20
- MD5 109bd38d2107f41573c48544992ead99
- SHA1 028e9832f421f11f9497c610f1734e0f3d868037
- SHA512 459945f338679c77acca8f1192907cd3ce8e19f270589d34ce8227b8eaf0c7c8c9922e52b8310d037c4d5c0c639de42a6e3b0f7d44d493fc50644b6fcf7cd4e5
- SSDEEP 48:6gMX2nhx3BTjtRiaAVLEP4iZ6iMtTg70uElaQ40JFuUPtomCH9gWk1qyFVA2IbS:HHtRYVLEmYZEZ9ruUPqJmW/2
- TLSH
  T10BB1FB2867B8573BEF7B4BB65863534257B4B950CC279B1F0985B3166C223544931732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  costura.pdb
- Size 7KB
- SHA256 fbb47bfd057253e9461bc7fe661eb8ad273451782f3e227b8db8f88b54cea186
- MD5 dd3394a0ba6f7158d029e1c3a31b7a85
- SHA1 806f4c19b2d7fd9e3b836269ec07647019a29e95
- SHA512 2fbedae58d16bfe20954094e5c7541e1b25310107571e94f7bea35b2217aa634197ef147afb9ffbd9c59aa0f7e209cf2a97349c3503077758502bf7a776e2575
- SSDEEP 192:yMD/wix+PI6jMai+NLy5nj4SCBg5MRkCIFQkC8g7AHOuXk/N/8Hu04:y8YPI6jMai+NLy5nj4SCm5Mz6QkOAHO/
- TLSH
  T1A4F1B33F5748C463C89959720521C49CB6B343202670ED78F3DB2608EDAF69AC7B5772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  guna.ui2.dll
- Size 2.1MB
- SHA256 2130c7489f5a5e21812c1eab37dc4903b901861a2d545aa607555be269091afd
- MD5 b464fc896b14bfa34f608da53856e999
- SHA1 55568eecc97895cad49a42bffe757e3588c5313c
- SHA512 1b310b16b0973c9100c9d220338ffc9340b4085d7a095cc601998b5cbcb67b927d8665070bd8b6e2af2a29d13762f404a794b79dbe223b48751894a4bf47c5ca
- SSDEEP 24576:ITL3GQ2wuP82+lTVG+3VvkPMb4yk8z1xcfeGwrSe+a/gZmxVsFdHQ/jzaM5PT:U5+dSRzIZ8VsFWN
- TLSH
  T124A5FA147ED4EB27D16BCE33D6E25011E2F1E5A32AB1EB0E72D35768184234578863BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  microsoft.bcl.hashcode.dll
- Size 26KB
- SHA256 3a4e851ee5fc0f6182aa5a3d65dc56fcd6979b65334b5c3b92fbdc791457c0ab
- MD5 64f530f8ddbc93262732071b4db864c5
- SHA1 7c2f349da43199522756e3c8a1d9ec94780888ca
- SHA512 f7f3375ed6325bfaad82ff1817ad434c0ffd113b1175fbc4bdb1507e745f3a9fdec12cff9b2100c7ae96350c91e6e0b0ec24a1c569eb9bfc6b6774d7460fa223
- SSDEEP 384:B0/kajL92ajiAOeRqwDpPIwcAakgj22WVr4WNYA6VFHRN7WszxIPaR9zeN:B0792ajnFRqwpPI4DFClWszxOW9zO
- TLSH
  T192C24A1E829886C3EFAB0D7025F5EB5B3D3853B59C1293B612CAE9181C437C5D621F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  newtonsoft.json.dll
- Size 685KB
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- TLSH
  T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  shayanui.dll
- Size 63KB
- SHA256 da8a5fda31dba6a55b1f53439d793552fc4d56566c6cad2cd2c26941b2b7b231
- MD5 096288bfeb366b445cd1efa19e424737
- SHA1 4a5e449a5b787150c76c9c7485fcc4a56380938b
- SHA512 3fb7aa96082f2d024c73d8b1dfa76a27d6551212791da30d53bd13610304a884e6ccac685690669268a6d87c6c3d694ca98da3e5f379e66fe6a32d3ae587e32c
- SSDEEP 1536:gp/fchrrkGkgzg/Cz48541S06U5MxtBKI5WX:gp/fchrhkgzg/yw0C6xiI5Y
- TLSH
  T1BA535B0877ACC73FCABF4BBD54A265520377AB62B163F7550ED6A2AC1907B14071838B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  system.buffers.dll
- Size 23KB
- SHA256 2d78d770c9cb997199154ae8c018b9f1d1efbc86729f7264dde6dbad2a12cac3
- MD5 902760412abffbd10be14842e83f0c09
- SHA1 d87680e1a96549cf45506d17566ec08c27a770d8
- SHA512 016a283723e32eedaa3b3c6d92bbd0d4c4d2663ab0f0b74bda56d6d2d742632ea0005b3c0c982ca77dd152b839deed0af07228172f059c9e0840e31b530bd0f2
- SSDEEP 384:7RJyzxhqFAB5n55560IZplFuA6ccxReXWd2WkRnfLXmztvGHRN7LgFA9bFs0R9zJ:FJyYkx60InTuP0njQtaUFQZs49zUS
- TLSH
  T187B27C11D79C422ADE7F1A716AF9DA862E3983C16102E66F144CF5040EE37C9DB31BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  system.collections.immutable.dll
- Size 247KB
- SHA256 961da735a24dc0fe4edc922712c4601c5dbcd1a671103714ff7ba3e7fe1d69e1
- MD5 281ed371bb16249fecf8fe5bc52137d5
- SHA1 302935c66369e5b5c15ef265bcad1512bc84bddb
- SHA512 07c0c66bc1d74f21de2e84e7a98293e30946bcafe098364b02213c9e36a424b6b2550868a5c751298f3c47edb2287b10eb01c750c0a70e1bb5d5fc67901dace5
- SSDEEP 3072:uqWFCj166bM6aJAw3DtDbmTX+/iFE1DN6n7vEuKy/TAw9HRuaUha8VE7BBJsqibl:uqqY66/sqVEUEudE6xu/V+s1R
- TLSH
  T1BE344B21BB9C9B32EABF4C73B9B094AA4A31C517A19EF39A25DEF7F018E33145C54054
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  system.formats.nrbf.dll
- Size 69KB
- SHA256 50daa20596fa0f3a84600397f3967bc982136742e52a782ca016375849a59d42
- MD5 d880e68964a01548fd6b5d15259273dc
- SHA1 9fa63eff8c201acf3245e684765cc6c2fd6dad31
- SHA512 c7f5bd4a6a1f7ac6d4508410b862c368285c9ef3b4129a7d0e41e71db279182680eaee01a62f3f736296baacec270049c27db227d5dd23cb62a9ae4cc39d05b2
- SSDEEP 1536:6fefdoRvZ2oYoKiuQO6axEPc7ij8UTNzX96hkzt:6fefiRAQ0Q1PclwzykR
- TLSH
  T12C638D1D27EC4B6BDFBF0E79B4B4E1150736D64A2002E38D1DC0B9DA195BBC85A2077A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  system.memory.dll
- Size 141KB
- SHA256 d5e8e4866f9cfa66f7765660f84b210198893e55335487afe5ebda342c0e913d
- MD5 bd7f42207f4fdb9c7eafb0013abd7334
- SHA1 96c87b7148805a0adcd4b9e23162deb06d7a4702
- SHA512 a903fda3c5585af8978918c6fa5dd7649e84bee41d0dfa09667e151819d74e16cff626595eb9760588bec12c0b8ec31f527e7dc84800378683156309c3247240
- SSDEEP 3072:IPgSRYPuMbrhcabqwwwUumu36xNOIRJAW:OuPaaWwww4u2HX
- TLSH
  T161E35CBC67C6DD12CB5F8C70A028621A5A31873FAD43F7E615C8E4F425A37A936193D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  system.numerics.vectors.dll
- Size 107KB
- SHA256 20c2fa81b8c70d651099d762954f285fd4f942e63b2d7217c145dab8d4b2f4c9
- MD5 a57f205ce75d4e4a19020e8b627469c4
- SHA1 c5583c3257cf193ff4736671445f8da64366a6a1
- SHA512 6b5985cb7ae4daecd1be3d6dbc709171ec94b89c0671aec1dc7288e08f5fe172900be75da1c43b75fff37504a33e7f8992c66581e562397f47e2ef2cefb46b54
- SSDEEP 1536:2uIaashZlF/cLecJE3+DWG/E2NstmOz+IAKvR7NQcmzF9:2zaashZzWeca3+DWG/E2itDf9NQ7J9
- TLSH
  T147B3DFE22F6C655AD7CF9F7B20E64E120B331963C403D2E160DC67A227A776729421E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  system.reflection.metadata.dll
- Size 503KB
- SHA256 d4ead3158c3bc301696b7b66d759ef276772b74093aa9fa325401a3fbce13b89
- MD5 0ead105d5eca42eb255ca02910b74108
- SHA1 8faa0d3ea6ab3da4fa4154769e7fc91666141abc
- SHA512 258ad3f46c3b7d6a9eebe90b363120a6b1b67d0a15d8ea87e0800ee6a2bdbfd121e5a54cf6f722c8a2b7c5e2ae74ab05386a62558284de7f17f06b663e3acbc6
- SSDEEP 6144:XjyrbeSP7DOQnA4OV6xB/E7nRDctMGEBlhOz/+3Ey:XjyWkVJCnhGEBPQ+3x
- TLSH
  T1E3B4595433BC673BC6AF4BB4F0B108294771E846BB17F75E9948A26A0C93B59CC107A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  system.resources.extensions.dll
- Size 113KB
- SHA256 5ad6e9c9859b1c22c12550e4ddfa3ce462b331223a6c0524a3924191d596753b
- MD5 3369bf676675116c4366d9f6cf160530
- SHA1 73b0297c1cc93eb6222ebf855a9fbc129ca615fa
- SHA512 609b84c7efb839f9786a5a7a11f7e7238ae16d1370b9d7ff15e421335ef74b1de4c00f6b3d983544df8163f8a1c08dcfe3cdf5a9393195dcccf123b95c70c73b
- SSDEEP 1536:xlEGrd+4ykkst1GWByViHRpCSVIx91TbUcQ6gNVt0Cz7+:xlNx+dkk0sgyip846uPe
- TLSH
  T1B4B3070273FC565AF6FB1F75A9B450604F367EA2A936D75D488010EE09F2B80CA70B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  system.runtime.compilerservices.unsafe.dll
- Size 18KB
- SHA256 08cbd7278b66f1e68425a82d4b97181a4130d93e3dd91831407aba7212ccdacf
- MD5 cb5b861883d2bddd9833c9fe956406f7
- SHA1 43290cd4aaf80df5d1cf9f242486ef8e646fddda
- SHA512 79de2065d8af3713662afb2a10e0a62c0821920608cc63cc2a47a09dc7bb6baf1fa71612da3ebe22d410ddc92fe52c0261faa019839d241fe9252d1663f4f4c1
- SSDEEP 384:RGbUedrbbxT4WT2WCwnHRN7bEpGR9z04yy:RGpd1R3XbEY9z
- TLSH
  T1F0827C24C7E44503FE627F3485ACE543BE3893960902D72B2582F57A0C973D8AE35A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Loads dropped DLL

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15