c3c63829ce9eefcdf4db99f132039c1cc8229d9d1e90853e6ff6793f0dfe4883

General

Target
khonneymann_io_github_1.1.zip
Size 570KB
Sample260718-gxmx8aas9q
SHA256 c3c63829ce9eefcdf4db99f132039c1cc8229d9d1e90853e6ff6793f0dfe4883
MD5 aac20668721aad51b2731ee7db55cfbd
SHA1 0b783e18d05215c3396ba1a6283252b11eb4de51
SHA512 507ab899fe4733f6b4a91fe6ad8932560d458ec5eb23c5441bdc86b14741f6713be8efd6fb3556f0d5458ce7f959127b527ceaa638be1bacfe66b468044bd969
SSDEEP 12288:D6wlOMWROC/FTeHo22Qm7NzofOr68mMeA924EwCG:74MQOC/gHozN7NzomW8SA9R
TLSH
T178C42304340641D5839A2B1EAEC4E6E0FEB560DBFA1CF940AADE7ED06DE52A177C1437
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence

Malware Config

Targets

- Target
  Application.cmd
- Size 29B
- SHA256 7e8bd9ba64fcbd1cb753baa2f7bc8d5d7f3e91552bcdc9ec1ec04edd4916ff33
- MD5 5422fc71d463c77d30bcda71798a74db
- SHA1 26b77b33954bac81d5f0bab8d045f5489f622f2f
- SHA512 d3d94edc59e609ea97bd5162e823fd28ac2a5bc4cb920ab93107bf9855d44a6a1cf3046f9b154d9d1c1c0651bd751a95a9a0ffeec89d3d8776b56e946d65c246
- MD5 SHA1 SHA512
Score

7^/10

execution persistence
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  compiler.exe
- Size 852KB
- SHA256 8b42ca9d05badf0e7327d816a56e5516431ae34627da68e12ae9347f365b2668
- MD5 5ec6ab89dd62ba41e2a491ad40e60133
- SHA1 721acedcebcdc53f5993172e39b5dd58a7b5103a
- SHA512 283e86a03e14d67326ea57df79909909275b1fec55f3c6951d71699380c0e7b51bff8a007aa04737ea0834f7f5eaf057d17befda56a3615e6be829b59688a96e
- SSDEEP 12288:6628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZom:v2HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH
  T151058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  dynasm.txt
- Size 301KB
- SHA256 f9436ccb986760ca379d6cd2f00726e032a1d9c250a9bd261d40d98b914e7ef9
- MD5 e482d9f2f0cdcd1b388e10c105f66502
- SHA1 5b7f6e5802ffd5895185da01d8a24fa16eba186b
- SHA512 637849ebc8c25e3a19ac3b6e91484cbe98ad20b1f9f465e9ef26ed20b25be3c1733e23b23fd35fea759890744ed4ff6ff49f297f4654c36d2a5e3b2ab33b3d09
- SSDEEP 3072:u2pEiyVKiCDl9Qyb+vdWehYx74R30h2wZ4WszR+fA0hnAU3OQePKkAX2SlY0UMm3:TzWvwq0hdJO+oA7aNs5s+AninIkN6ZR5
- TLSH
  T14F64E8F0108408D6D6ABC695DF6759BA51772CF0978B2A8E0E1CF4F036AF591DA8DF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6