2d6d7e6902afa78c95e770234596cf66ffd678d8d745bb746d6ebd26be3e7973

Sharing

Copy URL Twitter E-mail

General

Target
RecivaServer-Win.zip
Size 1.7MB
Sample260721-pj4mtahd43
SHA256 2d6d7e6902afa78c95e770234596cf66ffd678d8d745bb746d6ebd26be3e7973
MD5 98acbbf401b73a7ad085a5c63dc2d2d8
SHA1 37628db47bb89728e11d0ffa19c6f762f1243835
SHA512 03cac1700bf621314d9ad034bacffeb2bb64fdb610bdcf04c2a5a56fb064c08f9a4d3adbf66b5bcd4dd523a41187a0cb4fc144adf44bf66c23a422466c89a03f
SSDEEP 49152:V2x3c0BOEsDcv0uNp7hfXLy3pah8cDUvN0:ox3c7pcvF7JXu3p08KEN0
TLSH
T10F8533279DED188FB05EE32E41215D8DF00F86894834BFAAF680DD051F864BDF65BA49
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  RecivaServer/libeay32.dll
- Size 1.3MB
- SHA256 05ba6d1ef9ada95a0c7ee98c1777068d0683471d1f69222342e8064a8a4f255f
- MD5 294b1cbe3f96478c8fbdc3469ca8cbd3
- SHA1 be25d0575530aab50b0bb96571ea52124bdaaf77
- SHA512 6213edf7fb71c223269f671533041bea7514d720deb08614bf63b2995bd21672b4ae5e1718ec740714ffb4e9c8482d4562f3621d39ea0d3ebda2aff6c1f6e7c5
- SSDEEP 24576:6rrQ+KpPVxRtaYFqtQIzJrg6Ka4P1poYt/qn6AZF+Q7:Lz6gqtQIzJrgdP1pogq6AZF+Q7
- TLSH
  T12355BE07B792C9B2E48941BE61B7977F4B3796114329CAC38BA12D529D325F1A33E3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  patch/install-me
- Size 922B
- SHA256 b88a28fde3d9609e2bb22a4504ccc66da28ae2a83262a1ba7ad1b5ae06d37a9f
- MD5 b403c62a26ba5f9b7249a3230fc3e48b
- SHA1 b00d24f234487f9c7d005cb2503667f8581c8202
- SHA512 bf7fa2bf181cdc9318ec7339efdf74f6ed63d6bae8a1de5be4f6f46b67b06c072bd183d2ffd797b076748aa94bd50aeeadc51d774dde91b4c3bdda29d2485c50
- TLSH
  T17C11105C1041C7775EC01BD6660F93DBF2176A52F3AA5811000DD369920A7BB17F28D8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  patch/lcdprint
- Size 38KB
- SHA256 c86b5065aee1ec56748e200bb2420a147e43f1b8c3699be2e6a07a56351bf2ec
- MD5 a6a82db96febc2c8a70f13bad2737465
- SHA1 828e187d90b5e3168a31f577e628c32ca9276658
- SHA512 d5266f4fb16351ed0899b733e6ddba02c783df66715f05e0507704d982a69ac56b8a38d21844200f1d73149963787b7ac404c8dd7b673cb7371e840dce0f2b11
- SSDEEP 768:yAtXbqQ9mUkBcJOr191U9FFwrd45vXFvp/e/CuXoPTa0iXVyEcdAS:b9mUkBfjU0evVvp/e/CuXoPTadUEcf
- TLSH
  T19A038849F768536EC3E1BBFAD60E078E71775BABA7972226493880603BC0F547E39510
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  RecivaServer/server.der.key
- Size 610B
- SHA256 1209de643ced39b85cc2e12ab9ddbdcaab1da18e1f0c300173054037429bedd2
- MD5 0097dbfb4c978ce25157920b912699c7
- SHA1 25d568652dae9d6a17129c071edf3f144623e848
- SHA512 54168d9fe6bd38935754d6333f07fb1b625560e06e3cbabfe2db23e7305191217adabe7e27c2f85b58ceadeaac411dccb30b474c7746ab1a39ca25aba9a66150
- TLSH
  T116F0DD895C81003E6B4DD30532F9FE242F10CB25F713DC78822A513DE9A40A6AD46A07
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral8
- Target
  RecivaServer/server.exe
- Size 2.1MB
- SHA256 5d1d98fa270d8ef5477b5cd513e61fbbd8471912d89d2f906f9ea8ee46967377
- MD5 117a99bfca8df7471d21838af6c741e6
- SHA1 cc79451733fd76bc1ef34390299598c41ca0f316
- SHA512 a15d3f897f95df13b8f40c3e536d7efbcc4693a6b04c137f5ea2fe67275c12e36420c31c08b20934850e54642f14656075dcd7d16dcb9032b21e89555a1400dd
- SSDEEP 49152:7uL+HbaMYQYae0TjcEvKvui7MYr3dUjcK5mZmKcHo:7uL+HbaMDtBC3dUHB
- TLSH
  T1BCA55C62B642C277E17339B48955C5C45A20FD302A7A859B33EF2F0F9FB1A807D69706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  RecivaServer/ssleay32.dll
- Size 328KB
- SHA256 23045a2207721b2b7152216f82dbc25ac9fb33bb9d87d1d820c70f5c4dc2beab
- MD5 03bda5eec58777cb1cf6b620553e1aa5
- SHA1 61f6e4c18415a86e152d4f6453b513111866b505
- SHA512 86912681215f3b91f53232b6d22861b0edd890490b16a6a606bc4b74f07fa126c73d93e79e4a2105576e605ce6586755474a0c663015d45b8a8c8f2a271fa952
- SSDEEP 6144:YZFTLwRwqqOTI97bcwxo1/jrMXu0M7GScPJx08KZ0apE/MtxHiY/HmcPXCTcUHzl:QFTLwRwqqOTI97bDxo1/jrMXuxyScxuy
- TLSH
  T1AF647D42F79180F2D4829771647B6BBA7E3E6601435B89C3EB341E784F113D49A3D2AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12