5de284d91641e1040440b15cf0448ed610e92ee5aaa97fb03bf13c3e8f6788a8

Sharing

Copy URL Twitter E-mail

General

Target
26.3239.26_b60_26.3239.26.7z
Size 13.2MB
Sample260722-j618bafl91
SHA256 5de284d91641e1040440b15cf0448ed610e92ee5aaa97fb03bf13c3e8f6788a8
MD5 b81f98dcb52625d67cf29526440d08cb
SHA1 de0241cd9b46f67ef1ead3e2560d629013ffcc75
SHA512 161c04f5e0d78f614533c3cea926ecdbaea05c2baba923141fd9a5ca2acf4e5c09b772d31f06ec27f5733757be8f3fd78c66cfed5fee00ed476f03e04e070af2
SSDEEP 196608:yt9+mbuqtaOB6mwoCAkv3x9A3hhJsUmAY8zBYxQBHQcSFWixFn4c6FeXgLz:ytlb19zCAYxy3vJ3mquxiHQcSFLFZo
TLSH
T1A9D63341869BE051ED5F372298F299433044F9651A18B8DBBFF75A78DE2B1FC0B86930
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  service/components-registrator.exe
- Size 493KB
- SHA256 21cf3f351ebf941075a7a3a6d57692d475e8f15403ce6620b9fe74f8a25ec964
- MD5 8e33bb1f46ba31f2803d65dcc2c2681e
- SHA1 3477a9b3f3b77541e193df37935658f8df9c21d6
- SHA512 e45296a7c4ea678179788bd5c40cd5008378c9f2af3a19bd49f2514d3ba0e5cef6a0fbdb39d749db41723da223ea0b689583f3762e3cacd7c7dec3cae6e02109
- SSDEEP 6144:CWLLlzzayhmDdTNsGBqODcbIaSw76oxj9nOsOxJEx7dHXJN6/MGk+p5WqlZoeBcj:CWc+Udhq+S0WQilJXJN6/c2rB0ofv9i
- TLSH
  T118B4F7073790E4F6F8A342F5295D877D643AA804AB224DDB83D09E9C69F17D21C3277A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  service/modules/AppLanguageStorage/app-language-storage.dll
- Size 164KB
- SHA256 081d2d8c5c4b1031766e4f61e8dfaa05b25c1df39ed35e35474d0169222f28fe
- MD5 6b78ce203d2bec6c928442c9fc28a37e
- SHA1 cd9cfc502ec4f674a46f2d05b855770a4ee99953
- SHA512 3525c27e69b3bd34b72ff6ee3b5bb66324e9597c609c7df8e22ec5167c5c0cd7411473dac19ce10d0071b57527ef2d8f7adb54cebd3365bd95c432bd60ddf8cd
- SSDEEP 1536:z8BXUhXxfrcqqUH78zApFrS8HFHklkE2LkDF5vg9AVOlFgjQKoUdjwG:z3hXxAUH78zA3m2LkDFu4LoUdjwG
- TLSH
  T1FDF308037741C2B6D14F13FD256C977E933A9A85AFA286C787599EE809F23C12C321E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  service/modules/Apps Info Provider/apps-info-provider.dll
- Size 141KB
- SHA256 f313813434991b8283eb359d86f0c5f1a71a147aa152b097a6296994e2bd5a9e
- MD5 3d85dba02488f44a51a9841b093df837
- SHA1 7df08c6a5ad746ad753be8bfa75fdc0a28adfa7f
- SHA512 f087d0ac8384e624c542fb3ae9d1ffda359c7e3d6086dd920ebd5b86528d1b3b3e1152ecb813ec49688b3f9152009623b14528fe791eacc7c38ac3663294ea6f
- SSDEEP 3072:HW9vSbtzHH+Z9SvHNJsO2ml40DWT2++oF1tQ5rcusUd7wU:20b5HH+Z9x2+7FAK3Ud7b
- TLSH
  T118E32A033780D2B6E45F13FC256CA33A4B369A54DFE14AC79B558EA90AF17C12E311B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  service/modules/Basic Nanomsg Entry Point/basic-nanomsg-entry-point.dll
- Size 100KB
- SHA256 7d3e749c815baaa5e7fc578c2b729e11656f2af1b84afa9a41bb95694f69354a
- MD5 fdbf584fb00cec7fd5a2067ddaa18a91
- SHA1 7c473d24ec5b809aab7d9bbed1df400ffe4be4a7
- SHA512 4cb19bc6104550ba191b6cc94f769b8599cb8f1d26ea7d5df9042c9ac0f22f63a05d6c130c7276ad8c2f4504ad3faf62556ab801d52500665d264c9607c1ce21
- SSDEEP 1536:LeTxidIy7zg+Ad+Vfj+hkoLXF6tJ63F3pJ+i6NJca7VPhSyeJkRQbUd/w1:LeTxqIy7zg+Ao9EkohmYeV4DJ5bUd/w1
- TLSH
  T11AA32A037740C2B2F44A83FC649E933DD73AAA809FE24AC39795DF9819B13D56D720A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  service/modules/Basic Offline Entry Point/basic-offline-entry-point.dll
- Size 240KB
- SHA256 6e5f008cc22df9eb1608a30e37c080baaf948b803a3a7d238efdf5aed067551f
- MD5 020db4df5cd47ba96ca5914f2e162e06
- SHA1 33afaff32356c3388050222a8d281cb0b4940188
- SHA512 117405b3ec720aaf6088afe0b34e0e2c1b1cff28f9c55f83dc72dfa858f32aec6fea09df9a9f2fd2a3f4f3f43f2d1a28a9c22550b276bbafb5bc332f25ad6762
- SSDEEP 6144:hywMzKtYScLfmV2LxazdA2VD9FAnClUUdo1:6ccLeAxaxuChA
- TLSH
  T170341A037741D6B7E49B83F4651E923DA635AA816B62CAC3D384DFA818F37C12D321B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  service/modules/Basic Websocket Entry Point/basic-websocket-entry-point.dll
- Size 222KB
- SHA256 ef8b61693a412424d4094551b25dee1db27b8223f40272c64d2a691d29963c07
- MD5 8af626fb10861b3a8347e4d2f5324411
- SHA1 512008833d2b0356993264090d4072e7b93d21e0
- SHA512 ffa2ab5b246389ef144f2915523b9628fecf8ed8dfd7f7107340bc2589c1d3e489242242ff37502feaeade4c41af786c6c7b835297713faf7ceb3252dcf25bb6
- SSDEEP 3072:uBiDqBH2vXQPpJJU44DlfxuBm4eJ9pW9wVVVHvYkSizepGWFVV3af4N6UOTUd/wT:jmgXQO44DGo4ezgOoFVde4QbTUd/Y
- TLSH
  T1AE240803B741C2B6E55F53F8258E933EA23599409BD2C6C79799DFD80AF23D42C320A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  service/modules/Basic Websocket Entry Point/certificate/private.key
- Size 1KB
- SHA256 ae48d6e7f1666a5169eb22148d01a08f319f8f08949ef72380a3803aafee35a7
- MD5 4284c1b111d60d2ce7cf49425c284ede
- SHA1 2b2a433c71fcc4471031e1631ca6eb7d9d08c573
- SHA512 654308b2ee23ff3d2efe5ad306a5fd270108a95ce637d2908e6629606f2ca35385b63fcc2691008f7e69dc1bd753186e7043ab66c16a988e70d4e80c7387fbd7
- TLSH
  T17C31F6AB36C89C34A4F372BB0C6F1EA18771422214E8A0E18EB4584B46DA1F2C879815
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13
- Target
  service/modules/Basic Websocket Entry Point/certificate/private2.key
- Size 1KB
- SHA256 7bbc3136e39710b80ce59b40bc90392dbcde4a782740026031a6f88f7eadb7ae
- MD5 832c01f6157ba9732f4a0a4ba31c4d72
- SHA1 8a170db571d79fd1a0490dc043a627500c7d347e
- SHA512 718b9264a73082ecb58999236a0ed66cba7e32e7111f6a27db0c24eb90d020b155c1840e72b48248d1c01fd11208d840ff343f41eb2d2e606cfdae055ea80012
- TLSH
  T1BE313B6A7D914B53C716B076CC93BB2036637506430484F084F43BC7F93148DD26DD6A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral14
- Target
  service/modules/Basic Websocket Entry Point/private.key
- Size 1KB
- SHA256 ae48d6e7f1666a5169eb22148d01a08f319f8f08949ef72380a3803aafee35a7
- MD5 4284c1b111d60d2ce7cf49425c284ede
- SHA1 2b2a433c71fcc4471031e1631ca6eb7d9d08c573
- SHA512 654308b2ee23ff3d2efe5ad306a5fd270108a95ce637d2908e6629606f2ca35385b63fcc2691008f7e69dc1bd753186e7043ab66c16a988e70d4e80c7387fbd7
- TLSH
  T17C31F6AB36C89C34A4F372BB0C6F1EA18771422214E8A0E18EB4584B46DA1F2C879815
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15
- Target
  service/modules/Basic Websocket Entry Point/private2.key
- Size 1KB
- SHA256 7bbc3136e39710b80ce59b40bc90392dbcde4a782740026031a6f88f7eadb7ae
- MD5 832c01f6157ba9732f4a0a4ba31c4d72
- SHA1 8a170db571d79fd1a0490dc043a627500c7d347e
- SHA512 718b9264a73082ecb58999236a0ed66cba7e32e7111f6a27db0c24eb90d020b155c1840e72b48248d1c01fd11208d840ff343f41eb2d2e606cfdae055ea80012
- TLSH
  T1BE313B6A7D914B53C716B076CC93BB2036637506430484F084F43BC7F93148DD26DD6A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  service/modules/Berkeley DB/sbis-berkeley300.dll
- Size 1.5MB
- SHA256 0b4b7cf1e34b28129a29e2531d60a3c835014e381655e73499e966ee398ff2cc
- MD5 b01172a646e730569053d469fc286416
- SHA1 3b5d372900221158622f21fc3abd76ac19655cd4
- SHA512 934c94d0b99177a9e94cf8679de9fcdf4ad45225ada80f0269ca3c51af4c4fb86ca579875663f32c235d647280a3aa5f8497bca8e0c44a866d48e3b64bd9dee4
- SSDEEP 24576:nnd25tW9bq4u2tmeXlve2ZyMzyUGZW+/j/iYCAX3+pkKP7uXdbo6HwtNXY+5FJAj:nndMtWNzzS7ZKPUZwFJjK5f8A
- TLSH
  T141756B42E7D390F5FD861271222EE33F2E22931ADB29CDC7CAD49D9454916E2263F364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  service/modules/Berkeley Storage/sbis-berkeley-storage.dll
- Size 46KB
- SHA256 6d21110b32b4656f03cbf2215d21d5f0fe2199275d49f9e1763df0c9d97e80f9
- MD5 276ac4b8f53a72649c76f8587e7516ba
- SHA1 196f7c23fa52e0136c88269339e9bf47e82113d5
- SHA512 c662ec0370b5171122bde937e2574502f3399bbcaccd69877722a3247390fd33f872d6fa32d9ecc1840aabebb35fb5efd3ae50c23358653753860a14e90bce88
- SSDEEP 768:OSVHKM8JFxJcYEhnfRagFPihiFU1OgGhG6BgfrFTAGUZyHpTV+w3+:OSIM8JeYEhnXihiFU1OgGhG6BgBUdOWB
- TLSH
  T10C232A032B0582B3E58F53F8358A972AAA75A6816FF151C3DB978BDD0D613C07F310A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  service/modules/CryptoWorkspaceDiagnostics/sbis-crypto-workspace-diagnostics.dll
- Size 125KB
- SHA256 7b5a27699fd9aaef30804565e2d0828804e49513009b182350105a8549a70175
- MD5 df6e56e443624d03f1f490f390b2b9bb
- SHA1 63a1282e9ae1d19066ffb19b349eeacee2c192ed
- SHA512 8f0076d7a7c8bb33bf47d82f142ff3a16115a3d7d9cdf91edcb091dc11616fa14dde999e696cf7692c2ea56f33c22ceeccd55cc3f70fc541437a932d1ba6bf75
- SSDEEP 3072:IXYLJ0mK8757hnY4brU52BSMFKeW+Udpw+:WYJ0la7hY482BPFKeW+Udp9
- TLSH
  T148C308033741C2B6E44B63FD225C933D973AA985EFA196C387959EE809F27C56C320B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  service/modules/DesktopPoolInfoProvider/sbis-pool-info-provider.dll
- Size 97KB
- SHA256 f6b779983304b3f0e56311b16cb5abd31a25f02876cccf2976c758c5cd50698b
- MD5 e7e038b8e1201acaea12d954acad92f5
- SHA1 244c556d35ff6a47a39362f37e4705b52ebc40e6
- SHA512 bbbf6e002c1548f272ea38255230b7d3e66aff28b268c829098fbcdfbdef2985dd176434b03fd5cc3082e69341df1ff05df4febd2a97d6b163d36dab5e36db50
- SSDEEP 3072:kaeuiY73yzhSZSGikGRnJvBhwXgMSyAyUdqwR:SYSGOyAyUdqW
- TLSH
  T136A339033741C0FAE44E41FC258DA73E97358A45AFD26AD7DF569F6A28E23C11D310A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  service/modules/DesktopRequest/sbis-desktop-request.dll
- Size 106KB
- SHA256 ed979cacb2c6603e3831664d76ae972b1b311c21c3be733d254b9f8d6d13cee0
- MD5 4e1b40d1f3247aac2966fbf42b5578d0
- SHA1 e3d4dcaaaa4db43b52a843129a745d90f53926da
- SHA512 4c17fbecc5ad95a56d9b013dfe430b84fedaf9cb17ff3dbe59e2dc16d44307fc23eaa6b47d5500691242b94f475ff5dde59af931b151057ce397a16d2ca1be3c
- SSDEEP 1536:GpUSfws7rLeeZ+3thTft9DgLUCTLxp/O2ZDSFl21SDpXiUdiGwQr:GpZws7Pq3tNft9kHO2ZDSF+MpyUddwa
- TLSH
  T1F9B3F7073740C2F7D48F92FC155A92399736AA89EFA146C3DB989F9849F67C12C312E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  service/modules/Executable Runner/sbis-executable-runner.dll
- Size 126KB
- SHA256 9c1f8e7081c1a50343825e7e005f91e7dc7e243b8112494d73717413d5b9ee1d
- MD5 3d1d3f0dac119559500e712f63bcc341
- SHA1 46965ec39692a03bbeb5b4679d09d3378194bb0d
- SHA512 52771d75aede1fb7e171b344cc5ec624ffc2a744104f008f071e6f6e026755eb269a62c061afc5e3443755fa4645deb58b4b3771cf8be7a25d3af421928464a1
- SSDEEP 3072:G4ObhU0717vYwmdGwPzvR9B2V2zuFH7OxtUdpwOt:EdAfYmvA2zuFH7O3UdpFt
- TLSH
  T1DFD3E7033741D3B2E44B63FC264D933A9736AA45EF6157C39799DA980AF23C92C321E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  service/modules/From Feature To Config/from-feature-to-config.dll
- Size 94KB
- SHA256 676c4402fd084c6bafd4b0882a9b3abdac84cd809ac87c37f3ae02e072dd881e
- MD5 d57ab0f55a6f6fc056dda2c558704aae
- SHA1 d3c5c96ad2e38aaa7e1b211f388c39fb11fcf4bd
- SHA512 6ebd0cee9c9d566da629d68f6d15667497e0bfc6ca2f6a508a7fa56404d6af347833c9d0f8a656ca5428141bb1131d5aefabd37ce992f9c5154c3e0d17aaee80
- SSDEEP 1536:PFjajK+kRwodakbtujeHS8TxOHr+IwLlWyzUd/wN:PlajK+kuK9bQjeHMHr+IyEcUd/wN
- TLSH
  T1BF933B033785D2B2F84B63FE259C963E973696429FA296C7D345CF9909F17C12C322A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  service/modules/NanomsgTransport/nanomsg-transport.dll
- Size 156KB
- SHA256 763d4da9212566c5df78946c6ec1a7c5638860bac66e3c090293833281a20db4
- MD5 8464520b7e5345425f6f0f2ad4fecd9e
- SHA1 78938f417c0953c7afcab31b84e48f8bda23dc45
- SHA512 13885bab72bc109f484495038e275148e33a96834020ce3043c7cfc70efeb7610357fc68bf2c36376598ef1330b26cbe16ffb0cc16dc19c8039d271c2a603c63
- SSDEEP 3072:2AX3o6MUzkVCCyR8tjsE3XLp8BNTBkTK+wBKIOhFD4UdlwU:y6MUIVI8tYUXLp8BNTBkThFD4UdlP
- TLSH
  T18DF319037744C2B6E41F13FD251D933DA63BDA449B628AC79355CEA829F23D12D322B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32