a7b3604098480d8cbdc721a36f0de6110b6cefc336f6a3293b0407a57c6febae

Sharing

Copy URL Twitter E-mail

General

Target
AddGallery.xap.zip
Size 386KB
Sample260722-n3d1tstgrg
SHA256 a7b3604098480d8cbdc721a36f0de6110b6cefc336f6a3293b0407a57c6febae
MD5 dc80f4af730026765cea38e8750239c3
SHA1 554230a534705a5143268e39d1e949e151cb0005
SHA512 e525698323a553a6639480e65a2c84d4134f236d95b080d91a9e691977c9808a9f541743021962f556d1046ab57844b8ba8db03ba6a7bcdd2bb49f6dec3a2b10
SSDEEP 12288:Ddqk2j0SBdhK6gl4JVh+N0b/z+HhCrip1kRutt:xV2j0UYl4JSu7+HwripLt
TLSH
T13B84233BDA1D09097DB2ACAAED4372E6C1C343C9CD2A075D2F12B9479D1CCA926FD452
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  AddGallery.xap.zip
- Size 386KB
- SHA256 a7b3604098480d8cbdc721a36f0de6110b6cefc336f6a3293b0407a57c6febae
- MD5 dc80f4af730026765cea38e8750239c3
- SHA1 554230a534705a5143268e39d1e949e151cb0005
- SHA512 e525698323a553a6639480e65a2c84d4134f236d95b080d91a9e691977c9808a9f541743021962f556d1046ab57844b8ba8db03ba6a7bcdd2bb49f6dec3a2b10
- SSDEEP 12288:Ddqk2j0SBdhK6gl4JVh+N0b/z+HhCrip1kRutt:xV2j0UYl4JSu7+HwripLt
- TLSH
  T13B84233BDA1D09097DB2ACAAED4372E6C1C343C9CD2A075D2F12B9479D1CCA926FD452
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AVSamples.zip
- Size 386KB
- SHA256 3b45794a0d96793697f6ff4a9ddd40e0c0d02986d50135607998f23f45676986
- MD5 fda33efa78c043c2f55ee904dd3e8920
- SHA1 5121778244109d0885ee5f53e35df9a504d30dc0
- SHA512 046ffac7be30cd41d842b1f8e4f11252fdcff9d1c41a54212bc14ad5d092ed79761eb4ef10ec24e0d4ad1f5e47ab8171568e13acc2ee5fa119d127f33d9c6390
- SSDEEP 12288:2dqk2j0SBdhK6gl4JVh+N0b/z+HhCrip1kRut6:SV2j0UYl4JSu7+HwripL6
- TLSH
  T1D384233BDA1D09093DF2ACAAED4272F6C1C343C9CD2A175C2F12A9479D1CCA926FD452
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  AddGallery.xap
- Size 394KB
- SHA256 650c5f3a61d7c667899a82f5c850aca30a0669e594e19cf7c40470180b4279cd
- MD5 46ea2be871ebfc3bf170254686f11754
- SHA1 af67f7bb1e8dc8b27087c80a5b5117fa58fdc8b8
- SHA512 a508d8baf7ee9dd8e119408d3dc2206c5aa6a8335a890626b713cacc73f20ce34fe24ff29e5b4870da0f9d43a3cccdea994f1f82b034b076ff2ddaff7300a18f
- SSDEEP 6144:1vP/bC8PmXdadNSlFAsGZw+gvH0HokVbsJz8OfWd7TGIPKe4Lafa4o0GkpZJ:NXbC8OXiNQFuEIUzhfWd7qIRTl73
- TLSH
  T10D84237FBB9AD693EC4565F066ECC21FFD7B47998208C0A50146B8DA29233CD4B6384D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  AppManifest.xaml
- Size 995B
- SHA256 b4e9ce9b5846a81bff960fc4b4c40848430ac3c4a37f615f463cc2fd28ed06e8
- MD5 132543e581f301958bd7108e4614586e
- SHA1 7cadbee7c8f13a811f919e85318ffd2f4b792b7b
- SHA512 405a5093d9480f8f202946946844637fa8a2e1504fbe2be5257e0fd355fa304efd6a4b787c48aba046e65288113d7cc9c85fed236891e4fd864dcbfabb1f5e71
- TLSH
  T164110BAFA0428E390F6D774678C3A888766E539B01845438F0DA740F563F6F105BBA1B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware persistence ransomware
behavioral7 behavioral8
- Target
  Arrow.png
- Size 181B
- SHA256 2638b4a1099ddbc69b22a3acc0649cb3ad9293ce27b34c6e1b80164139ff7810
- MD5 0bbd205c507ca2e23c7aa10e2038a62c
- SHA1 91312538ad817a0fb82243f3cdd3bfd6a7c4c658
- SHA512 3aee615d86ab9d36e70eee53620b6198f19075636eb53d3382876211fa22fdb4050e0263ed9c0e0ac49acb7d34b66cf500dad68866b5f4ce2e1d1d1011f3ffac
- TLSH
  T1AFC0C0E279304D28C05B027302498132C8CB0FC20615821E3849C93CAB6251C91C8631
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  BASE_Library.png
- Size 641B
- SHA256 a18abb7d0540b13d34a305e6bf96b167932af480f9d3b235837e362a4de9872a
- MD5 1f4fbc3e0612119cc477e2ec80e52847
- SHA1 610b334b898ba7b0b0d22ef01dae54dd8f70d760
- SHA512 77de661f906fe30c24c54800f42648b3633eed28fd2b32334b87aa04afab0cadaa4f8a1589d2f97595d8d355fd7795ae70d6d5e62dde91b96cc6dab560091f95
- TLSH
  T1C8F023A8A5319DC1803D469A51107040E47B7459AF188AD16FC9A51A91AA44698C0B55
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  BASE_List.png
- Size 822B
- SHA256 ff0baff5a9211fefe0a6cd73b32848d0e46d584ca2b07dc4f95f9ca16845dbe5
- MD5 c396c6f3c90ee0d6a22d0da806699e3c
- SHA1 08cb806b42ede8bca5bc130c550d0c3ea245c5e3
- SHA512 6543043c8f4543df79991e75d01b5cb2f57f962e1a62202b17132bdd38fba206fac882dd00113b89c2344883eb3364e6a536d2edf7bf0a11e6d6c424911a8789
- TLSH
  T1040186EB738AADEDA711B8D3A2550906E6E364D4402489C69D03A039DAF0A44C8F0E33
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  BASE_Page.png
- Size 524B
- SHA256 75ef93a7a5a843c8bc04f6585b24acee8643155d20a671f01c76593a6a55bc0d
- MD5 571e92aea595a5b27685849a7352e095
- SHA1 a58aa1e299fda14d3bcb422de5f3054f3be70300
- SHA512 4cdf4d04e58a88e1fee801ac68235c158c04d3f08138aac4348c71df667e3778cc6a0a52637162db8fc6fcb0abec79156f05ef0f92577641f192c88947dacfa0
- TLSH
  T1FAF0C0D2F623D02BD56762752100405DB733B9524E04184CD83758B6B76522A47E8696
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  BASE_Site.png
- Size 725B
- SHA256 c1ced13bd60f7f8b4ad8e0f91c47f3a78f7bcf569cb9a0092f5a1f2fccbb9d63
- MD5 d7f703fffb0637ae67a1a248efb94d96
- SHA1 514b3f1c2593ddd27e0a672e933c61c9daab8d4a
- SHA512 4f27fa93576e86785c2e5cb9f4436729740ca280dc89daeedc2c625d928c4ca208bb94a6f52dc4affea69612b0f0286c3e4a03e34573d44ead227e07352eb56f
- TLSH
  T1F90165F0B7E674D457315430A0890E30DE335BC2690DD1FC49DC90951825BCACCC6EE2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Default.png
- Size 1KB
- SHA256 3cc1ebc9cb1c85a02f7489bc636371947de98e726a9f854ff51c5dbe7d14cc2d
- MD5 1a5953d67795b67845f538b710a3ec01
- SHA1 cce744da288f65b67861882d086878d238c53417
- SHA512 fa37d0b3ef06e70dadb84d06570a8a857bbee4761023cbf9da391e24ddca769feef3d5ab4dab998abf1e67fc707ce10d62f6c9077cb3b2555b28ba224ca84343
- TLSH
  T13D312BD7EB181AE37D62C523C6D532C6ECE324451056C36069C51B8E332E64C2323ACF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Default_LibraryTemplate.png
- Size 1KB
- SHA256 23ef1ac299e945b6a3d3832b43886aefd64f8b1ff158a1d49739f481cf0d56e9
- MD5 0a44e4a9f536b2c7da975b8ae8e9643f
- SHA1 42a77d498369bda78b653ed4f4ad7c8ab4f92482
- SHA512 ce1d4a6a44934b2f4edf07442a5fa7c7d06fd0fa6c9d6e328cee09b9ee8c259fed3f64b72b7d9b96e26e7c84f90d4b781bf7c06be66d5718120c59f0cbc9ae00
- TLSH
  T16031061123555A89823C13C935DE3837C232A6ECBD018BE5696BD2DE0331ACD8A336C0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Default_ListTemplate.png
- Size 1KB
- SHA256 8f4601b856d3d0dc42142fe174c0381a3141abd353d182afb5615c17aae3595e
- MD5 e94b40b74e09268a4d254966e88215e8
- SHA1 1b4fc773537c7d05d2a26996e2940b8e9879c65d
- SHA512 d6ac52bc10d3be2f4e72ed37e0f5b48bb6ffbceb640a53a46a98323d07276ffa8f63228d1d1f924d3135b7ac01fb1bc9411ce0da7d4b443e69a6b37a81bd1c54
- TLSH
  T1CF310ADF5AC3077EAACE40D5104C093DE0380D7542BA8BC94804299AE5238F5707BAF0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Default_SiteTemplate.png
- Size 1KB
- SHA256 980f2773ef82fdcb366358cd974a69347fecd869c5122ce3d2cf91e1acb0cf8d
- MD5 5bcdd4afb15c15c421f98d31c151c42a
- SHA1 4bdaf9c0b4e104314286068ecef37fb236b18ab0
- SHA512 5077dfa67db2dfde6e79d724e77c54d73a56110c5cf0f0102253ef798c6d34bc442874041e5bf8c35739bf49e93146fd45e1dffae2a82b254844f371a8df75f1
- TLSH
  T1F62198EB2DA9CC34EB4B90B407076C2C84141AA77F50C5D9859078A4C4742F956DD561
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Default_Solution.png
- Size 1KB
- SHA256 5f2dbe7ba2a9a16c3768257c340f37a11782054c4c9974a44eddd2d2b94efd6b
- MD5 e34a0ea14558de7700965d36af70be23
- SHA1 c37603b928dfecd6a6bfb99db295cc214528053f
- SHA512 d338433fef2e958d3042ae6d38ae0c9534afc1cc0de4828cbae9794b496d9b731a4f25fcb9516e42be7a2d278a87060a1fad94aab568dff7549efe3fcec21883
- TLSH
  T156312C77ABF54D92559615FA7DB2F11F313278D4460BC28C44347002B93E199B4A3DB3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  OfficeOnlineIcon.png
- Size 12KB
- SHA256 28141bcb58c9b5665394212b469499a0f5dadedbadd7157cfaf8aa1ed6959512
- MD5 55d77cc2d4578745c04caaf4c3cada71
- SHA1 9ca81f846ff0e3e5d1268efac3024df4ce6fffb5
- SHA512 cbe5faf367f6a51fa8fdb989c5e85adf87f6491227e44615e3881e7241dd700ce7c1be271898c569f822fa0470eff20038b6e23e41fcee1a614d905e79b65185
- SSDEEP 384:ug/B/sI4GJLfyF6vTdNkRUfLr0qNbQjqe/5ZaEI:uIB0INLpgUfLr0qSvTaX
- TLSH
  T14442C04147277AEEF84D59E500A5ADE922CD5A5A897B23286392F30B34BD41390D7223
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  SearchMagnifyingGlassHS.png
- Size 688B
- SHA256 6e60641a78a5ef494913e0bfbe61c6835aae41f51c0a0b38834e951a3c9b8b5c
- MD5 a5956160745c7ba0eb68bac0faeb0b36
- SHA1 092f8dd41e921cb5e2be6b1f02018ee62030af03
- SHA512 7867dc74bd8b415c4a59e674a7c4449d345903299b2d65d1b70eb039775544c14c5f93b30c0611971eec8fac5512767c6be9e6a4ec7d5116d35c8f064e8eed2d
- TLSH
  T1F00144D7B1D14E119CE18C14D829D0541EB89B54609FCBDE3C0F5A2099F64184078AF8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32