f1c80c38a6c4e55fe2b8787de9119ee52313b900a05873be9d0084102344666a

Sharing

Copy URL Twitter E-mail

General

Target
sqlpackage-win-x64-en-170.4.83.3.zip
Size 45.5MB
Sample260722-vqcesshh28
SHA256 f1c80c38a6c4e55fe2b8787de9119ee52313b900a05873be9d0084102344666a
MD5 83cb6b2806bc254ac295906d49e9f0e3
SHA1 daabb6986dc33c270ba28e873671af565c2c658e
SHA512 9eb0958d84c2e5f91a73068fa4a4de35d6059e4c2b8d0d69cb6928ab270088ece629c6c5cf570c522f0b56bdde8d6ee4c961affec90fd46eddf7c0503a2f1c31
SSDEEP 786432:fJm/vAKdMVvvNOqtrFfalRTNxws5hsF3QX2hxlh9zcYLH+ac/urdNhWT0upc3iPJ:hgvF6NAqtrFfwTvi2X2hf7YYLHFc2ET7
TLSH
T193A733EFECFC4DA2DC51B0B4507839891565AB6CF9C2841485A822608CCFCBB57B59BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Targets

- Target
  Azure.Core.dll
- Size 428KB
- SHA256 24d86769f3f748fb718364f2c1f96ac92af4277f42504885e7991736ee9ca09c
- MD5 f66dbe45e3617fdc6faf6a056411e224
- SHA1 2e65892f84426144969bc035bf59c79b0b90f22a
- SHA512 363248135ace7cf7b5b28d4022522ca193904399127af88a68a7df16af41344eb159d46db29d9c2015afb5dceed8f66e7f3f4009e4509866b485d721030420fd
- SSDEEP 6144:MQRdAWBfqCO3rS/1zvBD7jAkg3v8GdYsEOWJAL3P:TRdXqCirw5HcbYsEZALf
- TLSH
  T195946B2163F88725EADF37F4F8709DA487B2E40BA96AE34D1948A5FD1D827418D10F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Azure.Identity.dll
- Size 356KB
- SHA256 4d1a6c5d2119e005b042fb924e076a629dce0de89ebbb92927930f8e8e95effe
- MD5 69c6a9e189fa94220a0de8cbeca0cf09
- SHA1 d6a0384ee5a7dce3c9ef37e83c7c09f55ef2edc4
- SHA512 72d5e7e2a8f5c02786bb780d803ccadae96399ac247bacfb4fd572d6319f4b3928f776fff4f7fe94cc6d3f145803572f845f235a61ae625a8e0a9fc504b0f1dd
- SSDEEP 6144:XR58kDvU6BajhSdzWyntrUfaLGkCWCuiRZgWBIuRJAT3dJh5OTZfh0pGFalbRVnV:XXBa4YDZJAGFObRVnw0mU6a3oqC4
- TLSH
  T1E174294063F88B29E6FF6B79F5B05A548AB3F84AD9B5E39C855C90DE1816B81CC50333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Azure.Security.KeyVault.Keys.dll
- Size 357KB
- SHA256 53392ef73c97cf1c84de8e7acfd55f96ef9b0d3a946002014d460fd12796a1eb
- MD5 16846b0b21a4d4dfd54e486bc3daac9e
- SHA1 638e2fcff6ebb77e5e86d14a24b526a306b91d23
- SHA512 f7e0955bfdd627695e8a48600f1e2c7b16fd420ebc37a7a67faa2959d27bc8bd032deabd8e5925e8c3eebc74a32814c91b07e96b97e55b69bb3159644d2f0bcf
- SSDEEP 6144:4YDs1jk6lngbgMcmBjVYswwqJr5V7iJBf8tjPOSYjAaZ5zM:DkbM3YswNJTIVQjGS6TzM
- TLSH
  T10F746D24E3D99B35EACF937BF03145A5C779D5069267E79D27CC9AE82842781AE00333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Azure.Storage.Blobs.dll
- Size 1.2MB
- SHA256 01c596d17d71e1c492aead2c62a536890c4e437a356436f819242dadd4b52cd4
- MD5 615a239c02772485d081141f2fcd2e54
- SHA1 b50c479498adf2dd7a6f544d8352759be9a191da
- SHA512 4b71a85a35ebc13a906c9e85c215fb98dc257f620e87160a47bac7954e70224aba9f4669871032932c746e123cf9b38c3d74f4a8c02398420450ef113f5e3af3
- SSDEEP 24576:113DGl6aFgKBqjWR0UapdSt4lfrMgIst4+1KIc+KfEaTr1WE:iEWaUapdSt4lfrMgIst4+1KIc3fEaTrv
- TLSH
  T1A9554A1AB3FC9769C0CF573EE8705227C7B1E614FA93D32F1608A6E92D963964D44223
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Azure.Storage.Common.dll
- Size 234KB
- SHA256 91910275d5e4ce33da94025ee4193d31464e1c25ff60d6d94addaa50ef9277ad
- MD5 a4d08cbe49c0de7c26a54053ae032502
- SHA1 9b889647f0cde9f5197745bf743ad79677ddf5b1
- SHA512 3d43c3ac9396369109c07abfe7ea4acaf7a39ef5cc57acaf3ea60e208af56dad31e33543477558dee2a02825f9b17bc2effd104a4e7a6faaa4fdb3b0cec9fd41
- SSDEEP 3072:UNhMUOravzMoUaUBrybdNRCX1OA578gUAIcBZYlypbbD6kFrlGi6DnHyeNozRA/s:VaBU5BgPg4gDNBRlrlGvH3NAvxZ0M7
- TLSH
  T16F348D0163EC5726E6BF5BBDE57050598B37E506E8E3FB8C6A4CA5DC1883B40AD60363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Microsoft.ApplicationInsights.dll
- Size 376KB
- SHA256 0e3f719fb7bde74f970d1c722d541af0bbe96a6751196affa836eac7ab02a1d7
- MD5 4d6e62ea0db6cd5987dfbb21a7270215
- SHA1 811ddd019f39e111fbf0abcbaecb5d3eac076ec1
- SHA512 33ac6e40105715a9a11b106640b3f4ded0875b7b3be14b9f67a201ad00a1f25da2a2d2558168423473a1a985a494cf2226bd5a2696836a2bab317a9cc58bbbb5
- SSDEEP 6144:36XfH0185xumkcIR7pevHWp34so8m8LEdOSBiG0GfF3f:36Xv7ER7pe/WpWEZw3f
- TLSH
  T1FF843A0063FCC21AE5FF6B31E43424074AF2F9877A69EB9D5688A5DC1C46781CA2177B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Microsoft.Bcl.AsyncInterfaces.dll
- Size 18KB
- SHA256 c683ed8157fd02ab0be450c6abe43c2614d5e0ccc36e30bc4c9e81b8420cc403
- MD5 cd25ee9fe6f82c486a13d299a6487087
- SHA1 4c2809f427f0decbb581085f872e07f8724ae745
- SHA512 37882fb7bf6a7783314ff8a5ec9604b2160671ce4e808e79ebde91c58b88a4110de0fdab55bb3ec80ffe167112bd16a290ab7b76eabd4e2e011ca31c2a74fc28
- SSDEEP 384:mbZwqhkB49n5q1WeP/Wl9gclNchFR9zUdtp5F:ikBTu9GhX9zo3
- TLSH
  T1D0824C52D7AC8217DCA63FB09975C9622D35FBD25C22E9AE0188E0451CA7BC5CB3173D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Microsoft.Build.Framework.dll
- Size 63KB
- SHA256 b554db60af417faf73332e7e4a6b422a8757272513b3c9e3b3a801aa0e1d0bc2
- MD5 6c8a65d26529e626e2f4a63f82c563a5
- SHA1 60c710338f25644a1f3ee4439966faabf1001752
- SHA512 f876850fbde97e8e9072e8f98a1dc4fb1d6cbcc9b5b8b09df614196e8d824f3f4be8ab3fc8696e431113b23200348c3e6f9c54cebc59e7ca8169abdcf75adc83
- SSDEEP 1536:VgxwcaX6rTQ7XH36LK3oc67aryYRPdzT7:VgSorTQT3Ro8mYRPdv7
- TLSH
  T124534B7917EC4B97DB9D1978F97025163376F38E306BE72A0E40E8682E237C564112AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Microsoft.CSharp.dll
- Size 957KB
- SHA256 1f55040eaaa0dcd46a5fbee6ef42f2a9eb24609e11a4e3700a2b138a6cf700ca
- MD5 a623bf783dc3c31642f1b23433649e95
- SHA1 fd18be50e6e9e6cf0ab588aba5c7325fa9bdf2fa
- SHA512 b89deb15781ea424dc9d9aac68c901e03dff119093cb6d8567764486c1f95eb25c74c174e463dcae5df2103dc609c4453568d5e2bc1f46abd9a542549a81dc1b
- SSDEEP 12288:k0m1linUIuyzr7fvhRzRvhDkVv4+X6MR7Eh3Vu9yHxgVWS9NE9YtdB6f:vm1lOzrrhRHkVr6Wu3Vu9yHuVWST46dY
- TLSH
  T1DA257E1493D80E16C26E837CC1538A12D5F6A4433367D6CB48ACED742F877CA9A77A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider.dll
- Size 40KB
- SHA256 0cb1579387f18a5c1975a222bddd035cf89d3bca4a840ce678b6a25528d3e3dd
- MD5 53ef341fb164f1e08245e2abdd427b74
- SHA1 563b08cc8f2dc9c1814f52e2414c78e9904da00a
- SHA512 2a8e3f423532b16ef7228c7d481e3c4fc72bf849a75c8faa8494df3f68f6c82255eb111330fc5249ce6e32e2b7954475930ff9540bc4fc76a226b37acdf19065
- SSDEEP 768:E5uHXzgfti+1MRR58ZAbFkqj3f6SMwz9zHd5:E5+UfwZ8ZAbFk83f6SMwZzH/
- TLSH
  T16F133C47B7E88106FEFB2EB62A70D8051F76F79A2522DB4C2844A18D0837BC15B23735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Microsoft.Data.SqlClient.SNI.dll
- Size 553KB
- SHA256 0f6bd2f249a5ede34e61908bcf842bb8adef5cf70d2d74a8136f8855acdc122a
- MD5 2a1d2806623d8eef063e3c2a2d5fa57a
- SHA1 7fad5be7d655a828f8edb5175a20d5ce707e0621
- SHA512 b27b3e3ac1610c2b80a81098f30186327f43d8afbc3e68647675f159a31a60d92c2955bcdc5fe99190a8c5840c11a87a7097f44614b1fab50d37e0a32b381f01
- SSDEEP 6144:9YjQfdTHa2+KBYoQuu3SqqabIMI38iV5tRPnV7LAc8:CjQd3cuuiebIMs8i/dfAF
- TLSH
  T105C439BCBDE221F8D03FAA75587B5995FEB07C640A79119F16D949C00EBE360613EB08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Microsoft.Data.SqlClient.dll
- Size 2.1MB
- SHA256 a6df2a60b9283aec5359b557a64ab8dbfff439c53082d4e8a964b2b7d814cadf
- MD5 8beb239f1a61422622a75a5aa03cf6c8
- SHA1 7f678209ce4ba2e9ec90b6e561e5210b2c47f133
- SHA512 20a3f1c4ef6461bb8bc55ad6bc3079d70232c0e39911f28a9ef3d6a128d7987dbfdc6f1c5b3a17dd722f525d2aeb95918aeab7feafa8f37e7b4b1b8ef569a3af
- SSDEEP 49152:P/PW4lKaP6ACiBg7g5EJeGlYeRCEEuaVvp7gmn6GjiLnD4L81yVQQhOdg6GafHg4:XPW4lKabRI
- TLSH
  T1B2A5C24177FC5709F5BB2B30697900244A7ABDAAAB76D75E3908605F0A72F508CB2733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Microsoft.Data.Tools.Schema.Sql.dll
- Size 14.8MB
- SHA256 2f2137b7bb072b9cbb6ddaba3a31c6b76b2f11f50f632777005e94205484f371
- MD5 f599d2973b1c990baf89f0af21102634
- SHA1 585a2193f50de2c891191235d05f1d5bb85f71c5
- SHA512 8f3599b1c6e4e7b10a66b2f002c3fe81e3063ed65c50bd0c83704fe9baebdd1b57e19289e4aefdb63d4ac14376c8e3a5843fa20177483a138d9ceb16f175f52a
- SSDEEP 98304:8fK7foGMzuXqmNrxU+bBPPgLQ7/cKWvK33kJq:qSRMzuXBNFU+bBPPgLQ7/cKWvKnOq
- TLSH
  T130F6730167E91B05E9B61B39DE716869BE63B997423AC25C758C720F2FB3F014923372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Microsoft.Data.Tools.Utilities.dll
- Size 253KB
- SHA256 3437d9a81b3a16d2c3daca730ef1f1239a00c466fa07ea1ff7870d3e343b66d2
- MD5 fbda44d2cde5baebf99314c83656be76
- SHA1 ede91fc44dc100dd23ee8e0f9ec6a4f98e1219be
- SHA512 bd3c0dc8e8ea83aa2feae2fc777868d4dbb3d94dda656f75eaf18b7327d182d4cdef79238023d754809470ead3c6e82a168d00d2a11f7d309c8fae0837074aaf
- SSDEEP 6144:tAlPnsWTS13airaHetUz/KNzl2hBK3POZpaL/R76H:tsi13Ge2mz4BKjL57U
- TLSH
  T14C44190237FC461DF2FB2F39BB75A0108A7BBE965922D61D2844644F1076B84EE61B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Microsoft.DiaSymReader.Native.amd64.dll
- Size 2.1MB
- SHA256 1e34e40670c8242c65bbe2d596c9035f00ce705b51444cbdc8c8be217ca48c7d
- MD5 c02379f81eeeabb3ce9ed9ba3ff10019
- SHA1 224dc4868f0fad5f55cf44a72ab634736320b211
- SHA512 7e9a373ea291cf4c75ed07ee42bae9c2aa71c3af79c4b96daa964d387b068b47180c82df45d7bab738c7afcec6af96fd68719db9e621086fcf7c819b4cc79045
- SSDEEP 49152:qoJlAZFbi/H3LzED3pattTg4nm1OPriyH:2ZFbiPcEHg4mUPH
- TLSH
  T1DDA58D97A3AC41E4C47AD178D66B460BE7F238050321A7DF02A0863E7F67BE15A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Microsoft.Extensions.Caching.Abstractions.dll
- Size 35KB
- SHA256 e58c884a57524a307fdcdf7eadd8fe52dd8050e7a79981308ec5a76cc7b445ed
- MD5 e4c899f3511677a8428ec7100fd4ba7b
- SHA1 f2918fe606f3b50f47c6769dbfd0ac787ccf9872
- SHA512 efb722a44f2b83081e1d215dacbddc85eb3a4717729e80e94de499554f9e51abd88cd54318efaca75f10457820841d08d4bc2c5cfb65a33f25e926e91604db10
- SSDEEP 768:hOYLsb+Z/0f8eMrnKIJ8TQ9nMQk+6co+PO59zUY:hO1bnf8eMrnKfTQ9nMQk+6coA4zUY
- TLSH
  T132F25B4047BCC323DDEE2A79FDF185824A7AEB472421EB261D5CD0DA0D1778986B0B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32