c68ba9ebbfe08c0a17182272d7572d03496728178d06bced8c1207acb9bf2ac6

Sharing

Copy URL Twitter E-mail

General

Target
Phantom_KeyTool.zip
Size 4.4MB
Sample260722-zv1emsvcrd
SHA256 c68ba9ebbfe08c0a17182272d7572d03496728178d06bced8c1207acb9bf2ac6
MD5 177f2987e7e03163d19febee017deaab
SHA1 27e8c9a1f5bc5856f30dd52fc288460eed73b35b
SHA512 06f5f0da15e0ccb2a8e471fdbbef01413ce51637eb253547c0dc6f25a50c639ebd6cdb24ff801f20d9d6ee66c55ef1509d4fcbeb2bb616ff5ab62f9c4b119eca
SSDEEP 98304:aWRKoSNb5uGVibZJW8L53aOxvDpC53tKxe95ZmDrS:aWRKhebZJWqs8DYpIW5ZmPS
TLSH
T1FD26334FCF049DA843E1F9C4655EA142036D0C2A2E49EC6E4CB42CB1B533DFAEA5976D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Phantom_KeyTool.zip
- Size 4.4MB
- SHA256 c68ba9ebbfe08c0a17182272d7572d03496728178d06bced8c1207acb9bf2ac6
- MD5 177f2987e7e03163d19febee017deaab
- SHA1 27e8c9a1f5bc5856f30dd52fc288460eed73b35b
- SHA512 06f5f0da15e0ccb2a8e471fdbbef01413ce51637eb253547c0dc6f25a50c639ebd6cdb24ff801f20d9d6ee66c55ef1509d4fcbeb2bb616ff5ab62f9c4b119eca
- SSDEEP 98304:aWRKoSNb5uGVibZJW8L53aOxvDpC53tKxe95ZmDrS:aWRKhebZJWqs8DYpIW5ZmPS
- TLSH
  T1FD26334FCF049DA843E1F9C4655EA142036D0C2A2E49EC6E4CB42CB1B533DFAEA5976D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Phantom_KeyTool.exe
- Size 6.3MB
- SHA256 ac032a694d6f16022189129ea2635460510407044dfdc01547b0e98a3fb4ac26
- MD5 d6964dabfc1b21a23eac9ee4d2983bf7
- SHA1 fd8c75eb43966be1b5b14d139ec4d437c3ce0c59
- SHA512 aeac1895c6e6c95806fe5ea8090ab32ebd4490263dabd09e5f16120ab009c06b2d3a3242c9430cf5220ca1fc5f97f8cee5a1871e923bf84f00daba2ecb75d290
- SSDEEP 49152:HHKQyy9sC131rhTEzs/0vMSkYxk7bXH41nC/H:HHhzYBC/H
- TLSH
  T10F66E7EBE25D416BD91B837AC0968B8094FB72F4673382D713E603D85A414FC4EFA925
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  backup_119.dll
- Size 728KB
- SHA256 54e13bb51627de012340672706585a17a4da0387b6e71242047a29afff4b0f81
- MD5 7e1469e8c78c8102f7e566778fc7adff
- SHA1 424885ff67c42ab7c92427137626505b9a090883
- SHA512 24b46aa072d1b13efb4db88cfe0b18cef598213d4e56ec56e65d3d7037ce18e13a936cf9eff25940ec351ba3d379877dc62b43107342207929052ac8d2a77675
- SSDEEP 12288:iIpm+K5mWtSqv1j7smTU4bygHtAh9NF7vmqNOLe51N2diGIKra/rGibKe:f+5b4G1j75wMyKtE9NF7vmqcLe8irLbZ
- TLSH
  T1EFF433BD42D24334629FA7C8DC24B6A61EC44C2013F524AF4861D8B6F476F6DAC77897
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  backup_126.sdat
- Size 739KB
- SHA256 6411419e9a797270fab0aa15837e646f7332a5ae1bd9c909d43761c36c0bf7e7
- MD5 afca7476e222dc4a1cd68e6d7a84aeae
- SHA1 e25fa7db474077538c8ff6bdb1e578bedb7b15a6
- SHA512 c85c43556d9aae55517bd1cdc006e8c137bb4e49463e794e1b50c7af00716d9e4982a21bb8ce4a9407fa88a72233402e0ec3a526734f4daf60930355d2f9253f
- SSDEEP 12288:kkPK1uUJGTZcbmNRi+uwVZOVyAPJCxIR1onARugm11Fe3c8aa0xfWpIrxaXHQ:kSK2FcWi+uiZWPRol0s8IApIdaXw
- TLSH
  T1DFF423A4EC9898B7D720AB447FC9C69917E70DFC8592C7FD011CAC508CAA965BF26C1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  base_19.002
- Size 865KB
- SHA256 d2c5269caa5fbaa6b10bea43f5edbf521449000a8abdd5d679ef3d6a7f018160
- MD5 7d969a59d7364a175ad20d3ac9a32a4c
- SHA1 c754eb6374fed2b623cba6630ddb12be4e9709a8
- SHA512 68661cc96e443b1abba98f6ab99f871d96078f867e02580f54b19cc58401e19507d65ea6c4a6be6e2597ed06fe809293d544bfb81c3875313c20afd644bf7b28
- SSDEEP 24576:KmAzwTJXAYosPslU9dWgd9HlDTPJpyRpKNuoVKQaIqbwG7:RjXAYosbRdTP6RpKVMuqUI
- TLSH
  T19D153352022D0EDDA4D3C19533983071465E38293E4ADCEFE2CD3D7266251A62ACEF7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  base_3.dlm
- Size 856KB
- SHA256 cebd2b93ce6a25e21ec1f3c9bf7d3c53b1acd11833b7f4fcb6409e53d683dca6
- MD5 726e55605b63e057e0792a0f15b75fe9
- SHA1 6e8547392feb019783962ffa7003d145c995d3f8
- SHA512 9fed356d459d69b0657ee08657acb413b8b624bb36f366801d09dcd5441c6f6e804f10b6696ee63225f15b182222d7c7a66ad412939b209a265834158ae7f741
- SSDEEP 24576:PgKUStwsVJcH5qW3Sn6YWJ+C58CemBzISq:PXiHY6H+kd+
- TLSH
  T161153303472BA6B884493C9EB6FD26C5071F4E067B548802FCB26641F166D9CB777BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12