86a8677955b3645f9141a517c8579cd4caac1fe333bb5146615f7e358494079d

Sharing

Copy URL Twitter E-mail

General

Target
net8.0-windows.zip
Size 4.5MB
Sample260718-eejfzaax4t
SHA256 86a8677955b3645f9141a517c8579cd4caac1fe333bb5146615f7e358494079d
MD5 51ff0633ca36a8389cd09a69570869d6
SHA1 48e96818ce659207f4ee02524246f63d23e3ee3b
SHA512 4a88a8b5dd7be33087b306e048017ec46b85083213c8daccfc8f4ea7b80828a35f7bab607baa56188ba303c7bd19683afed7099eed958269c1b2815da7762ee3
SSDEEP 98304:kODfOaQIHAanqzLNJMCj7YPZaVHCgYYbACbofptReOq1XdgccinGebQxDNd6YrUk:kOjOaRAyqzQCjUPcdCgHAKofQOwtgc3E
TLSH
T13F26338754AE31F0C3DF14E109DECFD72DE9E6404D04A8CD54AA4E6AB99792BD202BF1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  net8.0-windows.zip
- Size 4.5MB
- SHA256 86a8677955b3645f9141a517c8579cd4caac1fe333bb5146615f7e358494079d
- MD5 51ff0633ca36a8389cd09a69570869d6
- SHA1 48e96818ce659207f4ee02524246f63d23e3ee3b
- SHA512 4a88a8b5dd7be33087b306e048017ec46b85083213c8daccfc8f4ea7b80828a35f7bab607baa56188ba303c7bd19683afed7099eed958269c1b2815da7762ee3
- SSDEEP 98304:kODfOaQIHAanqzLNJMCj7YPZaVHCgYYbACbofptReOq1XdgccinGebQxDNd6YrUk:kOjOaRAyqzQCjUPcdCgHAKofQOwtgc3E
- TLSH
  T13F26338754AE31F0C3DF14E109DECFD72DE9E6404D04A8CD54AA4E6AB99792BD202BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  net8.0-windows/Relay.dll
- Size 1.5MB
- SHA256 d476c3134377155bca3654fdd659dd8afe36005abc53a1bae328f2ce5fb5da88
- MD5 506dc40d4c4ea306a551eb6402283549
- SHA1 5c075c5ff83612bc1a72853eb7ac77edbfdece12
- SHA512 ce78f17338753a98aea9b4927288aa103e3bc1751f5418f2bb8938be569f7eaddcf118281d28ac0506308f9b649e7eebfae336a2d15876913144cbabd13635fe
- SSDEEP 24576:P1X9PphWwl5AYizMn6Dgk7ixHNZ88bopOD+f60Rc6qm2nqchYS0bGIooG2:PlhWw3AYizMnMgQOHNZ88buOqfzRc60
- TLSH
  T14E752361A3B84565C67F47B804B583414FF6A7066680DF8E48CD68ED6CD6B138B233BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  net8.0-windows/Relay.exe
- Size 174KB
- SHA256 e577086c632b5bde94dba29483af279ad8662189b7900f6912b9547de015fa14
- MD5 8758a0624f2b0825551e3435b1dc0f56
- SHA1 393e6073379d3a16e34c1259bd84a7bf9d55a78a
- SHA512 f648f073dd071ffbaaec777e32623374a78888778d5fc73d4ff74c6228da9840091ba0436cbe97f5cab00f59b6c77f85c554ffd5c45c243bc4f4b3e5dff2817a
- SSDEEP 3072:dqeXA/4yIbHkNPN+6H6xCYOigUE265vJJkZ8oF3okXu:dvdHkNFdaxmMEPJJktokX
- TLSH
  T1FA045B07E6A851BEE1B6C679C9924C41FB7278598B71A7CF03504AB61E73BD09F39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6
- Target
  net8.0-windows/win-x64/Relay.dll
- Size 1.5MB
- SHA256 6f66df9f16e32f8a8c546094095855432b0f6a9f6dc6b027a52b992266b56dc7
- MD5 2b0abf0411483ed3766445dd0b76e231
- SHA1 73fd0ef9e6bb3ce26f89ccdd95e2bf91848c63b8
- SHA512 ce40ec347bbcdc16a94a57c5f82f19492723fbd2f83b1560036064b91b6d8f3db5508aa4098b39930afac5398cd1375ac4b6aaafa578cdfe801f4df9e124e4fd
- SSDEEP 24576:8uexoNsX9PphWwl5AYizMn6Dgk7ixHNZ88bopOD+f60Rc6qm2nqchYS0bGIooGS:gochWw3AYizMnMgQOHNZ88buOqfzRc6z
- TLSH
  T15975239173B80694C67F06B9447156510FF5EB066A81DF8D04CE68EEACD6B238B23377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  net8.0-windows/win-x64/Relay.exe
- Size 174KB
- SHA256 e577086c632b5bde94dba29483af279ad8662189b7900f6912b9547de015fa14
- MD5 8758a0624f2b0825551e3435b1dc0f56
- SHA1 393e6073379d3a16e34c1259bd84a7bf9d55a78a
- SHA512 f648f073dd071ffbaaec777e32623374a78888778d5fc73d4ff74c6228da9840091ba0436cbe97f5cab00f59b6c77f85c554ffd5c45c243bc4f4b3e5dff2817a
- SSDEEP 3072:dqeXA/4yIbHkNPN+6H6xCYOigUE265vJJkZ8oF3okXu:dvdHkNFdaxmMEPJJktokX
- TLSH
  T1FA045B07E6A851BEE1B6C679C9924C41FB7278598B71A7CF03504AB61E73BD09F39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  net8.0-windows/win-x64/publish/Relay.exe
- Size 1.7MB
- SHA256 78d359d2158ce4e28b73960adeb3b3fadff117edd70e6e5278fdba1358f3b71a
- MD5 137dc3cf1110ff6f9d2affa3adad69d1
- SHA1 76589f3884b7ea6cdc044b76ff317a6747bf7783
- SHA512 4dea2c7fc6ba3a012c5156d461915a344a03708abd82abad44c4ceab38bd93b62ea241378eaaa9f5ba8d4dadb29003f0c6c0ca6a8751932745f024df9b1d43d1
- SSDEEP 49152:7ochWw3AYizMnMgQOHNZ88buOqfzRc60duSOGIp:zZHMgQOz8wrqftNbSOxp
- TLSH
  T178851212B3B801A9D2BF4678C8B14941DFB1B9095B90DBCF078558FE5DA6B918F36323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12