6e0913860544fff971f504b0079a6d93e22d0b86837eb20cfa5a5b6eeb3db1ad

Sharing

Copy URL Twitter E-mail

General

Target
SeroC2-main.zip
Size 12.2MB
Sample260717-ph5hqaax3r
SHA256 6e0913860544fff971f504b0079a6d93e22d0b86837eb20cfa5a5b6eeb3db1ad
MD5 984695aff61d5807b3492c434f78cc6c
SHA1 f9b68572fd43c11bcb024e4f843e0b513ccf01dc
SHA512 1ad3aa6aacdabc264be06d536d29caba7db21ebab66733783ed0750a0ddeaccf442726374650699610d6450e6718d1761abc32794a497c82b86033e2db3d644f
SSDEEP 393216:chmhcLbJ8dpvlvJmbk5MEpvu7lKcLkwOBHz:cMhvpRmzEcgTwOpz
TLSH
T165D63304C6385C79C1D1E2323F4EBA1999D5D86755AEAE0906377A7818C622C7F33BEC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  SeroC2-main/build.bat
- Size 74B
- SHA256 46f9e68cdc062dadf6207b4a804eabb73aada135b91830d077a485dab3b1be1c
- MD5 47dd5bfdb17b770c5ef38d6e9290c55c
- SHA1 6b5aa4caadac15e51108bc2db32a0dc579c3e734
- SHA512 a4feb2dfbe674bea78576f7d9278635449903ad10626eaa07aee6a076c9731c9e3a3bbe317a83d80bd1d894d143397f0ea290a6bd12ac6f41e3fd9d0f07e527e
- TLSH
  T10FA01122A2200B082A83882A00EA82308C2C2282A2208A83B03002323C08228CA2828A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  SeroC2-main/build.ps1
- Size 9KB
- SHA256 6a1342e6b1d2a1d44840ca011b921e78be544782e72219b8e35e5a7306812b0a
- MD5 6b25e138e348d5d9167dd0402c1ed2ae
- SHA1 d292cff6abae5e5c1929945505162441688a0118
- SHA512 f5ece53ecb4a500cd51c3c8c37efaa0314a65544e8838c76f00d8335b1c1b8d28d17018895931e27968190c61ab8b455ca4d4eb5c758a6e505ad774c7031ae5b
- SSDEEP 192:NM68L9XOO1qbTGoB/SCRyiQFwFKRlFk5btgS5GOlCyb4PO9:YL9XOvBbCjmgu629
- TLSH
  T11E12A434D155218AB0CBC53D95CB9248B78EB12B620D6E84B59CB6E23FF993CC7316B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  SeroC2-main/docs/index.html
- Size 20KB
- SHA256 35b805ed006363a7455847f701353c2230df7249a6085d7e631a9b826d6d01f4
- MD5 0eb491a4d6015779fe3247a51c158510
- SHA1 cff22b01069e3ffb5b60bc533caf58e3bd5acd17
- SHA512 49393ddfd6f06630cc5cf7e2d84a44b98fe9d065e918408e836ec1b1fbe82463cc8cf4b7dbdf296c7aed7de18f6c7e521d766a060d9844831d57312e0df2770c
- SSDEEP 384:vrW/Mq4k/7p/5xhbYEtYadmN90m8OmPzqXw7rQvgVStLfeL:yUofUP8OmPEw7rQvgVGeL
- TLSH
  T10692B5A1E0F9527B40B780D3E567AB2A3DE1D10BD24D210076FE47A89FEAC96BC1351D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  SeroC2-main/docs/og-image.html
- Size 3KB
- SHA256 c137dd49448202eaef04b03e521fbb6cf523bbad0a044e1accfe6e4974708b62
- MD5 0942a74ec6c9833ca81cd44a38bdc243
- SHA1 1057eb7ea5f012a7c006ec46ce7b04cb4c34503c
- SHA512 3f3fe9d36067bb0d7ff58b56b9d0e84a5a58680cce61ef0ebb6e17b810f9644d4141b69083b4e38f9ddcb0069bcaf0311ee1a0714b130e8f347b65a927172d96
- TLSH
  T17D613462926B10177173D4C53B776B9A639CD007C05AB6383BEC2A88CFDEC55EE23658
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  SeroC2-main/docs/script.js
- Size 47KB
- SHA256 b0611cad648e169e7157bdb6a7898324ee7d7e52d6ffba1d940e86d31fc1ecef
- MD5 65c3a909ea2cbf51872bddd3214ace51
- SHA1 68acbba665b01b1234c390d3b3bacc3d43d45cf5
- SHA512 bd544a21c3828b2ffa47e180d48c02ccc509b01e3d8f43ba40ec5e01052a44b6a92dad46f3539efd41e75ef9bd044da87d6c197e3b40531e96542201cbc9e3a6
- SSDEEP 768:EVillxDA6oeuDBA2l3PoJfF9nVT78LYH7z3FjAJnAnGt5gdF8hMNh3r+wHdWUD5b:EVillxDA6oeqBAU3PoJfLnVT78Lu33FL
- TLSH
  T11E23C63B106B017900B24E7FB2AE6F0969507483FA15AC59782CE6846FFD43CD5BACB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  SeroC2-main/hook/Detours/samples/comeasy/Makefile
- Size 3KB
- SHA256 218cd907c15e2b6cbc0bf65e56f55d696aedf8c75e44d0fe71bb21b8771fc56f
- MD5 2083397015042898ada70d88bb2a1b71
- SHA1 ef0ee588cc90aa24692203d51387678d0dc1430f
- SHA512 6a662aa0067a1c2efeedf7abbb5d45113343c82572e7183d3ec00c075799439fd4a9f08c31f8019bfa8dc8b74d79b1c0fed2ca1f6dba72cd342ea14d1fcbf0d7
- TLSH
  T19C81CE24BC8A2E990790C271950395CDD81576BF2C735754BADD8CAC2F9374CA3ECCA6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  SeroC2-main/hook/Detours/samples/echo/Makefile
- Size 3KB
- SHA256 7f5e83a4bb1ce75aa0b6808ea161ab464782c33548322c06c46f083877c62ea0
- MD5 b439e0174fccf8b55098b500883ecd00
- SHA1 8e5ca21a4aefe6089496087c2dfa71045a80aa36
- SHA512 da76b329ef3640bfdb0dc41f6993bef7b951e3b5df716596b95d220d1271499cd6143f127cbd3f3ddf5b85cf70c681625c2d91701bea4354e96a2b30e01425b0
- TLSH
  T1EB61AB30BD891B484725C676561630CCD82439639D33EF6C3ADFCA9C6B1234EA2ACD65
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  SeroC2-main/hook/Detours/samples/findfunc/Makefile
- Size 6KB
- SHA256 a3fed02da9d6cb434be7a676591964276f6ab3956b4aa6826e0621e60bcc34bc
- MD5 2d110369cc441404fc1d25758a7f7607
- SHA1 57782c7fc03ee0cf5def73333129c18fae8c7502
- SHA512 cd25d876411bc7183699caa0d92f1fff0767540798bf0814d8dedd618ecd84698582d2dc3af25c5883f122fbc744bde71f35e13de4abfc7e3d59a129cd5ac02f
- SSDEEP 96:QXHDkZ6wPEC21iD9q7EhszQ784Tt7T3j9DQDKDyDw6wr:3cQE7Sv44Tt7T3jZgSKnwr
- TLSH
  T17AD1AC24BCC35EDA4391C6619A0211CDD4293AD72D739B187BCD88983B6535C63ECDAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  SeroC2-main/hook/Detours/samples/opengl/Makefile
- Size 3KB
- SHA256 3805c6cb526f924a9e3d64c866381f052482191fc4fc9c2c05978539a3401860
- MD5 06c3f6be71b213315f1b6e91c080c90b
- SHA1 7b12e89530d05289ac5cda0e183f127a2ca2ddfc
- SHA512 7e66541bd9469ede3079219a9642d1b069e8d23fade0ec7da3e393e6dd21862bc95cd16e00461b63ad76feb4bd2b41fc15ad42cdda7ee4abc8d671a8a16c55e0
- TLSH
  T106713324FC836F9E4352C664960204CEC626359B2F33A7247BCD495C3B5268DA3FCD9A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  SeroC2-main/hook/Detours/samples/setdll/Makefile
- Size 1KB
- SHA256 7ade2b9ffc59a9641d26b78de980f95a73105936cf8177d783728db28d96e074
- MD5 8dd167acae46d7f0c61faca6f8bf4a27
- SHA1 f33d3e6b2c5a58c36af1e237768f8d3accaf0ae5
- SHA512 1effcc0930ad089781d8d7eedee2fbb488fd3f381331602ba96313abca5c2866500080c5181d17a5b3095b16681e67e8b369449e21bae52b3650ef64172549fc
- TLSH
  T18341A9546C836B5D8792C379AC8268CEEC2675772E23961872CC1DC82B1225CD3ACCF6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  SeroC2-main/hook/Detours/samples/simple/Makefile
- Size 3KB
- SHA256 ab8e243ee87a0f7e15fb8d25f9d950916e9261ccb492193a6dc8c16a372a78c4
- MD5 c678e2ddf408d24327616f860f88844c
- SHA1 ae4bfa5c5c122ad4296ff76b3fcd1b7dfceef772
- SHA512 fc12b15d9237b181f02ca5c4d5e1292d9901f5824c92652d104048a62e5695af03a971bb69119471888934e8ae471f08ba0cd48b3e169d0bd03eb663804eb2c7
- TLSH
  T1C981AA28BCC7DA8CC759CA609A1350DDE82537672F33566477CD59C82B6132C92ACCEE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  SeroC2-main/hook/Detours/samples/simple_safe/Makefile
- Size 3KB
- SHA256 ab570af9e1ec650ebc92dd360cd5202cf647f9ac8ea78f8df41bb9f63f73eae3
- MD5 6cbcd0ffb6756c130cc63afdd262321a
- SHA1 f21c30a44763d0fe424d226237ffa767b60dc3df
- SHA512 b1f412f206e03a555f6e5b317c1f16a0c7511ab12a80a7e32767954b294df321449bd7ac47017987cfe796a0c18c0e202b3debd5fa63d6bdbd37121f6bc3fd9d
- TLSH
  T1E3815C247CC3DA8C476CC6A96D13609DD435266B5E335668BBCD4ED82B2131C537CC9A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  SeroC2-main/hook/Detours/samples/slept/Makefile
- Size 6KB
- SHA256 c13d75d95e018b6869b327696384b8e502ddf67182bda032f3581558cfe2fc13
- MD5 547f86155aaff1d7bb5b05190fbbf4c7
- SHA1 3de0c43a9ff3bf16bbe7f2638d6006f5519a5936
- SHA512 45f01a98e192ceeb38e4d04f5aab71e9bc8c5669ac44d8fb1f3eed620564f015d93e30a95732d68ece05ca2518055f75dbc4824b35657784d825673c9729fec9
- SSDEEP 96:DOHDq6VFJiR21iBhZQ/k3xDAQ+pftY2hTOEpddD0DoDsDyGeAwr:DpgQCMuhFtY4TOcd50o8yGVwr
- TLSH
  T149E13324BC83DACD4750C761DE02108DF91529B76E335AA47ADE4DC82BA531CA3ECDE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  SeroC2-main/hook/Detours/samples/traceapi/Makefile
- Size 5KB
- SHA256 e8c31b810f8f8db94899a27f92d99d83a7746c8886e39dbef592a39f6cf62f37
- MD5 1fd957b61919d7c8e164e4d52448dd55
- SHA1 2d89366d3b084fb81f9848a3ab3687ec153fb685
- SHA512 5ddc32cc40de95b010d740a6329e24ffa834c85c2aed61160d3ce780a64651ca0cf93052ebc1f4df3feeb242d75a6b8ddb940e016756f7b68fd322b021da134d
- SSDEEP 96:sSHDEP6YVA21ihzM7hMoVyDyDM2xPf2WP/KKNpKENtK7NZKWN+KIhNmwr:snXQOtFVKKnewr
- TLSH
  T193B1BD256CC75E8C8391D371590321CDF13AB9AF2C238A6476CD489C2FA226C52ECDF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  SeroC2-main/hook/Detours/samples/tracebld/Makefile
- Size 4KB
- SHA256 acb34d1014063ebf841bf66cbce51c087e9a4625b73cfe7de3df24e6804b323f
- MD5 75c6b05b739272b72a7f5eab1b062bd1
- SHA1 9ff2d413f92402b7e49673e7f10af7d9444afbfb
- SHA512 29d90cab3f83681500ebeb5f7351dd508ed8f30521f8886494e6e925f908497ab7269b9180a545f04432a90c8a79924b96826b1ee39d0f37afd7db9453d99f27
- SSDEEP 96:HHDA6Qw621itQ7sJTD9Lt3DSD1vIslizwNegdwr:E0Qt5ZD9LtTqfiENewwr
- TLSH
  T171A1DF586CCFDF05C782C2761D41748DE0B5792F0EA7E9B477CC997C2B50228A1ECA9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  SeroC2-main/hook/Detours/samples/tracelnk/Makefile
- Size 3KB
- SHA256 379af23f6c164ab41763aeddadffdafa0b7a3e50e5cf02f11bac8aff7d8f85a7
- MD5 7f40759ceb5f5ec50aa66e7df5cb2dd4
- SHA1 74e8e8795416c9943c0fb015a8d221c2d9521ad0
- SHA512 517f5703dcba126f334d5d999989387ca4c8030cbf596f3f8455be432abfe629a64bb10d699c2c46bb98622ce9bbe1ba9e5bd61184106832f7326c256ed2c121
- TLSH
  T1C861AF34BDAB6F488395CB706A02108EE125A54F2C23FA5576CD49AC3F5125C52BCDE5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32