2dcd158d8c3c32e6d2d53678ee3b63c94a4c6ee65b30bed2246b8a7e62da8620

Sharing

Copy URL Twitter E-mail

General

Target
LuaTools-win-Portable.zip
Size 6.6MB
Sample260723-xgdmlscf84
SHA256 2dcd158d8c3c32e6d2d53678ee3b63c94a4c6ee65b30bed2246b8a7e62da8620
MD5 117a604c03b0b0a9640bec3ee5b1cdc3
SHA1 74ea71528f9e4a77a721650ab97d049ee2c70b78
SHA512 300549e075004b2ec4296610faef5f14f73b069bf10b050216d36172a1d53c3ca719e71054ba11b2303d319ee98d87c27979d42e76c40fa0be3c70582549e287
SSDEEP 196608:5VjPnN4Sw6qHE9X002mQF57Zy9rILn03t+6E4URmv:njfN4SwFy4myJZCI70bUC
TLSH
T16C66330A075C67B6C21AD6F1513C09FBC682772F63D2379D412873C26ECABBDD658286
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  LuaTools.exe
- Size 489KB
- SHA256 04a20aeece10da43b6f13b71e4f74d2ab52cb2f433741e4de563fcce2b85158c
- MD5 ea11d5f5a0a4bb355c6b784c6d768a65
- SHA1 da27e0c8ff28f7ef17e8c4bfb2a96bf707210969
- SHA512 ec8853cdf104194180621526d65957de376b4b29bbaaa713983d407f24423983a4223fa7da7af00e402cf7f53ffa5a750ec1fdf1a27b51b9bd0c9b980b0ca613
- SSDEEP 12288:eSJJkYLauS67aQ2UWIgXgCtgLz1uXe+OuhKDxiKgMZBF:9uuS6eeQXe+XTM
- TLSH
  T141B49D327B41C0B2E04770B19E3CD72DCB5AAF111716CAF36E9735BCCDB82914A62699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1
- Target
  Update.exe
- Size 3.8MB
- SHA256 b716430004afd2c1d2b8f191332541759f30d49fe19c49f671a241f68c3a468c
- MD5 9c559eb649f6aae84517e8311ce0478d
- SHA1 eb5735184f13c237c28c9b4e4deb8e3b8104e615
- SHA512 80a19e3b298ae7c1c6ff3ba01d5e770b584a782b9f818f8cd86321ebb26a93a98f46cbcaf2db5da31890e37357d40ff4e5a6a61eff163ed1cea06850f03fd0a6
- SSDEEP 49152:V0z1f+viTnGsRHs8jVrr3TZlzW1qmHVpFkSZC:S+v0ntHsOnaH
- TLSH
  T1E506BF62FF42D0F7C48A0175E42DF37D8636AE558B2A85C396A97C5CACF0270885739E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  current/CommunityToolkit.Mvvm.dll
- Size 143KB
- SHA256 19b2144fed9600d58a742a5a4a5fd7b10d4d0d2c2e79f5d8019307cf5657044f
- MD5 c5aba3e739e682a6727f33e7c89f1f3b
- SHA1 2c656c3c24e66aea61bda770f146d8ccff5c868f
- SHA512 fd7269021e7064742b1bd2b361d90ba5f848ba9f275f1b1b7a1459b231d4f012fa1bfe37cb0c01f524356e6bbc8a91f7eaddc91202b7fd498b6fa016b3a8659c
- SSDEEP 3072:TSieaCkJBmT1YhqlgBE6KZogn10iAj+QPuzO/:TRVxmYe6+n10iV2
- TLSH
  T1AFE39E1273E85A33E6FF1B75B4F0808A8F72D707ED26E34D958D82920963BC059517BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  current/LuaTools.dll
- Size 922KB
- SHA256 510cd340bf44c328c8d86a99dfc6e465ad6a43b328fd56e3f85812358d143f73
- MD5 2988170bfaaa2a26e1c8c1b1b360a6e9
- SHA1 664540373485bfe02bdd1f59d5f8623b8f03bd47
- SHA512 ebf26f896cbd78e8324fe958ce78f25dae872c44cfdcd24977d612dd3b35d86558ae8b8135b9c8d8729e3fb99a5709609aa5c180e4935496bf36f577992bde9b
- SSDEEP 12288:jxLm3sbn91tMPuYANxhRGsRJIWSKoBQmivZJ:tqo/ZIWXou5Z
- TLSH
  T13E153A2162A54635E4DF7BB5702644188AB9EF42654AE7FE0E5B78FCDCFA3038841273
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  current/LuaTools.exe
- Size 254KB
- SHA256 d3d142cddc3775b74d685cc9a00697fb1fe718cdc5316d98b06c7bc43292febd
- MD5 7af64f905d69c8d0c73ba385e190850f
- SHA1 398acbfc8a7245d08cad166a153ac6321408f753
- SHA512 47b03edff2f8f914e50bdb6de63a70e0a63001f2893a56b833a5ddf4ac5659388be63f2ffb698bda50e5c9229a62748110556b85da27c127744dac58b5306257
- SSDEEP 3072:FqeXA/4yIg9vkNPNu6H6xCYOiVUE265RJ6nIyBT:FvgvkNFNaxmNExJ6Ig
- TLSH
  T1D4442A37928541B9F097F1B4CA610845EBF17F605322A3FB1E0379BFCAF92819A69741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral5
- Target
  current/Markdig.Wpf.dll
- Size 36KB
- SHA256 b3054e4698878b89fb7e6244edd62b047be82aace0b1e506ff0271ab663a95da
- MD5 36516367616a3339e7f9a8440b926d83
- SHA1 186c8bb31a6479cbf868cc83d1a67106e8d3b212
- SHA512 1cd6d37e7bef1c6a9871472cbe5dc3046c1b4f41bdd91a44398c0a41b2604a5131b80800a6b7a6935aae84a1e65d30edad3b75b17d60ab866fac21658175ff5d
- SSDEEP 768:4rwjdE8a+zfLQUowohKV41fnPX9ZmsLAMK5qJTa:Ow5E8a+DLQUowOMYnP9ZmsLda
- TLSH
  T169F22C50BBDA812CE1FD4635B8B29A50B1B7B98E1206DE5F1D8150BF0CABB424611FF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  current/Markdig.dll
- Size 397KB
- SHA256 17b19e9d32487968d5b55ec1d2d83800534985fc67151cbb6b82f42aaf232f30
- MD5 9df1a79d00d43baa73de4a11c5e1db6f
- SHA1 eb71d0ebb49f105ab733940ef5de364a41d363ec
- SHA512 85f01b9cb614f70baffffd0c7426797ce97d71f45806edf2b7429cf70790800e9f16110881b6c47af1f7fd06e4161843133979b703e7d00fc46c336c6cc8f881
- SSDEEP 6144:n3iVRvQuyp+zNvN8433eabMz+KECAqJGv3uh4bpQOGuV1PIYryeiJEtyBg:n3iVRvQuN863emMz4CqqvZBg
- TLSH
  T1218472B413F451E8F2EBFE37E8A21A20D6F2794BAD41ED5E0484244D8CB57419CA736B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  current/Microsoft.Extensions.Configuration.Abstractions.dll
- Size 26KB
- SHA256 3700bf75d75ceef47ebd6df7df9bafb9f7b7dcf22fc537f227db72ccf74c476d
- MD5 6f48fbe8c1d66121fb930d01cee4cc95
- SHA1 1cc8d8afaec01f6e967818a484fd7aa509624ecd
- SHA512 3fe0dba909f19ea448ccf6e3874db0b6709737b215107f7b86fe35c3b911b200ca37dde2f1377f258fd265caa09f93af49ea5b239b05db5c3442f48c5571942d
- SSDEEP 384:o9WZMDYtid3v9TaTG/FwEzRjz6rMwTbFmDWsjINWJlNgoR9zFiXS:0WZMDYk5pdO/09zl
- TLSH
  T19BC25B1653AC9333DDFB2F71F9A1C4952E3997E6A801DA19689E700809777C09B3372E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  current/Microsoft.Extensions.Configuration.Binder.dll
- Size 41KB
- SHA256 efc13893ebfa02cc7e49ac13cfef68517c4441a33210d67956e7488b8e6b277d
- MD5 2290f7d234bcbf93459adb8bb0745275
- SHA1 e5f4067e40be7685d35d7cad76ef7768e53b078d
- SHA512 7ffbedde32c75599a7c9f5ffda297f5a7f58699b05f7b42248ef28b0bafbf33ec9bd4fa27afbd6dc8f97b7d4ad61fb43cacc19e96fdc536429efd0a494c01baa
- SSDEEP 768:DsjeqKLvg51cjLTwE6ry/v1rt4m37oX9z/5Y8:DsqxL451qUE6ry1Wm37+zhY8
- TLSH
  T1B1134C1793EC872AE9FF0B707471A4224FB6BB917926D6195C89A05C1D377C08A3236F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  current/Microsoft.Extensions.Configuration.CommandLine.dll
- Size 23KB
- SHA256 a1c8c9728b0dc64dcd975f82d013a1b7bc0c0133e46a94f29044f16cad6072b6
- MD5 584eda713ab7795fac1645ef6f3352dc
- SHA1 231d179d15e5caac7de89cb8ad71b9d0db1f82f5
- SHA512 07f7baa9912b3e17239a601e33d40b329788c3cfc47d03626a0ea0c4f1766a3a9184f4c354715136878ea444287d1ffa6ff97e5cdb11020019babfb5dd9e1db2
- SSDEEP 384:/fym2RBaP8ckJt+KAW9BmnWElNhtIscmeR9zlQQR:/amEEYRAvtI7N9zh
- TLSH
  T110B24B6693FC8317FDFB0E71A6F1D5512E39ABD76811E62A145EA0080D737C08B72729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  current/Microsoft.Extensions.Configuration.EnvironmentVariables.dll
- Size 21KB
- SHA256 bbb26aacd4ba67351d3740106bbcc5544827d98d91b48109362988147ae7963e
- MD5 177dcffd43ac45b58a0c42b2c7b99c0c
- SHA1 f61334d03d1050174a90c300c19fa29c39517e64
- SHA512 3ef3aac0bdd86d7401d363f8d4d4771e79402c1459c9c5e5f1f178b4300cc9fc67b18d8af2c2d1f742f3a22f556efe5f554336db2e6126ab536344d1cbe65581
- SSDEEP 384:v/dUEK0NrbQObCWU+JeWDlNBki+R9zd17/:v/UmfNxE9zj7/
- TLSH
  T181A24B8197FCD106F9F77FB4D9F9C9662C35F7D21862953A006DA00B0867B848B91B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  current/Microsoft.Extensions.Configuration.FileExtensions.dll
- Size 26KB
- SHA256 1830c601c1b155c54fbd3a6844453dae87af14eafe763942939d06905035130f
- MD5 ee6d71766d2811851d8dd808384b5d83
- SHA1 dc1a15ffbe9e406484572c21a2e94052099b1461
- SHA512 bbf23f5c8c1059d48e04b965fba41921fb5346117c46792b218e07ed123be5ff1397781a8ddc68bfac44a0a9333442015dec3e67385a9a65633a6fb93f207dfb
- SSDEEP 384:SNHfs86q0/ALi2iTFwLsdYyOiaXAzpkLqWqKl6WYlNorgFbR9zBTV9:Sk92/VyOOpkL3/A9zD9
- TLSH
  T1E5C25C62C7BC4213C9BB1E71A9F0E5022E35A7975C10E66B59DDE00D1DB73C08E62B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  current/Microsoft.Extensions.Configuration.Json.dll
- Size 25KB
- SHA256 e106f8bc13df7168294b95a6cdbceaba47b8eb7e562940eb4ef038db6fb1f2d0
- MD5 e0a403e5af381beb4a47945fb5155ca7
- SHA1 31b3051b7622207f803333e799461f9182319fb3
- SHA512 0828841a0305e043f2df522b8d34c822d13964d870f08e1af0c461dd22a957088b0c44e2a24e877e87aff91a3dcf09f71b225e3e83982fcd0c80473606babaac
- SSDEEP 384:5iemM0/vv+cFsbTRo9ge1lgzWkWR2W4lN4eFbR9zBOViT:5iMCzFsjfGG9zCW
- TLSH
  T117C25B6257FC4213E9BF1F319AF5C9412E39E796A811E71E15ADB00808B77C48E7272A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  current/Microsoft.Extensions.Configuration.UserSecrets.dll
- Size 24KB
- SHA256 a310bcdd868dafc0efce5b03a68cd7af5d4fa0d06509ed4b5c51ddc1758e9791
- MD5 249b5a3d38956616eb522a7c7214d0cc
- SHA1 1b39211cf7978386ce9589eb88983deee137c3e4
- SHA512 03d7b1eceadca05b35a14a3183ddb406d971fe61c217ffddd9d2ac9c187f9ad2cc6cece04c9332096b1396397e0b2398002ea4d3e8d0ec26e8e6a4d5246b3bf0
- SSDEEP 384:o88CyOBc4Rm15FApdE1wEDW9ytCWjlNy2jR9zGGhyL:o8ByURi40uw9zwL
- TLSH
  T1C4B24C52D7FC4332FABA0E73F9B5E4452E38BBD65C11A61D109DA009187BBC48B32769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  current/Microsoft.Extensions.Configuration.dll
- Size 42KB
- SHA256 7a883c57d00808ca9b5d11bfaa2c5d21f714ed7560e781d7313d65b09b88b6c9
- MD5 3970d9bf37ecb6cff7a394bdd25ee78f
- SHA1 054b4622b962ae25446888ddf5ec823e340ff662
- SHA512 950d50379cf9fe0fc8216a1f786b4c0322eecdeb390098e8bf855dc40c6901de1da110ddd48650ade001f009a815e8151ba72872381a16c6b2e96167d7fc427e
- SSDEEP 768:LnxYrISYXrpu4dAn9RY5Pd9Lgg4vScADpDgOlfe9zb:LnxYrISQpu4v5/cANDKzb
- TLSH
  T153135B52536C8B17D6BE1B73F8E4992A2F71D2476815F30D9C9EB09908AB7C04B12737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  current/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 63KB
- SHA256 c2a34d5259e6d6c0af43d9b926454105e80e7657dfed901d845100db254de89b
- MD5 8db369e1139ba14a6208ea8df983ad0a
- SHA1 62e77416f1f25a91c3a5140e3635414af1b8202e
- SHA512 ef872d41c7775a81bb2dcbde47637cca29b4b810f2671826de042129e9907aeb2dff02a1ab684425cfaf7b2f48abc6e9a4f2261a4bb4c15bab70eba556f93633
- SSDEEP 768:z0dv145TiKK8sfK8wUcrioA085JW14e2KSpYzRTzPdH9zJ:z0P45TiK3sfK81c52W+eHSpYztzldzJ
- TLSH
  T127533CDD37FCD373FBAE5B722A7390C09A35BA531401E70EA98550EA0892BC88551DB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  current/Microsoft.Extensions.DependencyInjection.dll
- Size 92KB
- SHA256 4d7fb7b6a171047984a8316b1a355c65e33350c343f4e0ea2f1233be457eb7e5
- MD5 7835c72d7fd691ebda152797eaf1bcec
- SHA1 8816449c02b9424b7058842f161772fc489cbd86
- SHA512 aad53dfdc5ee860b2a6d23c961005609f2ebb02fe3913750a08f31c81d9526e2dead96d4f233c12764e8bf51b6449ada833bca9129e6b77b3cdae6c3b6f86fd7
- SSDEEP 1536:hrzFViiQfeQJFi5+2H2SOETeFRdRV6ZTzzIYn1Y6zQ:xFUiQfeQe/9eT6Tzzx+6U
- TLSH
  T159935C3963FC8F21EAFF1A75947141054BB6AB4A3403E31E1E94A0AD1AE3FC547713A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  current/Microsoft.Extensions.Diagnostics.Abstractions.dll
- Size 29KB
- SHA256 0a9e51f2d4861367908fa058da82b4a0deb6f85f6ba11d3c90b01c848b1fcdac
- MD5 436f31765e8a25707ef3770a4880cd5e
- SHA1 a0d63c5d8cc9f1644d85667136c73d7c337872b1
- SHA512 9d5c163d8453e5784a79f8708d67f9304f0183a61b7ec2e54e0d4d772aa79c5f7afc726dfadec753e24be4a7743380a4bdfb39f01ad1f2a22edce64386c34243
- SSDEEP 384:MLdH4vpxJv3H1yPNdc+bXimUVG+KWOXcRWVlNq1wGjR9zGGW:4dH4v9/yVurn159z2
- TLSH
  T132D26D41A7BC9325DEBB1E31BAA1C4023B36C3576811E7664EC8910D1977BD49A33B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  current/Microsoft.Extensions.Diagnostics.dll
- Size 34KB
- SHA256 0842e20c25240aca53809e005776eb88f53a61128c632c4c6fa8685b9f66c4b7
- MD5 f14e4787e1accf6c01d433eaa0e30dfd
- SHA1 3cc40e3e4c0645cbc8fec59e9bf59673f458029b
- SHA512 f0d6cc32446f4cda8cbec48e8e5413ed3b8ec7bcdb8fb710013993feade52317438c44cb180394a6f71eb6164b9cbe170d6d284ae61a71a1d5da3ab5ec50b373
- SSDEEP 768:lY4wbeDJl88xZZcfqnfBTdqdgWO7N9zal:lsClF/e+yOWyvzal
- TLSH
  T15CF24A56A7EC9322D9BF1E75AEF086061F39C7836411FB692DEC90990D777C08722329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  current/Microsoft.Extensions.FileProviders.Abstractions.dll
- Size 21KB
- SHA256 02f38beb848fa01fcc55f0cf3982ca01e1a5aeba95933131a197ef602a130763
- MD5 3aa27844975c473aa34256bf9bcc8b6d
- SHA1 16f9a31d79dd248c034ed092d40dc6c385ebee65
- SHA512 95ae823dd74af65dd3c9ba60e676d8110a6293297a0a6cf53aeafc5faeb12431538d83d46adb0abab8833b12458eca29f3dd9a3314d72c3a72f99928bdb9f442
- SSDEEP 384:N3tt2JeSlo+MVdUJtFEWsHMhWGalNFGoR9zFiJn/oq:Ne5GQfr09zQ/1
- TLSH
  T164A27D26D7BC8363CEFA5E3069A4C9476D3DD3DB4C05E51A1589E1081AF3BC48732B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  current/Microsoft.Extensions.FileProviders.Physical.dll
- Size 43KB
- SHA256 e6073f96262a3c468c5024564fa02df0f36234242b392c8b658b81bb1b9d968a
- MD5 887259a796ae6590749fa3f0d78b0cd9
- SHA1 6ab7d026ff5fc8fc0d92b51f29e492d8b33f8c5c
- SHA512 41e7ba5f26060b03430f3da154ca8cd691bb287008e78661706cb449bfa3d3310342dd6e408a213df7c1366ecf89e8d0598d4dbfcd8c1d54039957e8a5c2edaa
- SSDEEP 768:+kjPlCVm7Ej8zP5usGppdtUqISA3SngVE419z4Qt:+kJCVm7EihusMpdtUxSqSgVE4Hz4+
- TLSH
  T181137D2193BC4307CDEE4BB16DF0E4460734F3D72502F75A0D98B19A29A77C84B626BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  current/Microsoft.Extensions.FileSystemGlobbing.dll
- Size 45KB
- SHA256 965a5347b125d232361dd08027ab263ed1d042b0240ec4a4f29b7a0bfd74bb28
- MD5 39743aeab0c21850ec0a8e7830ad4370
- SHA1 c897d4dcf3bf039cf766f940f117701a0c5b1eab
- SHA512 a79f377a64bea1c532aed4ce33abe17af9e888a4c89434a2310af7e6e3845333fd5116f0b1475db06f9c09d243f09b50ac5245d10dcac0e99a56a48a68f832a5
- SSDEEP 768:7rw185npIg65BZLzI1Vp3aPolwgYakfn8OmVSfem0TgvJKMd9zH:7r/pkB58LaP4wgYaOYVSWpgvJKM/zH
- TLSH
  T108234A8066AC8223CABE17B8B8F4D4524B75C6B7B412FB474ECDA9481CB37C41A61777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  current/Microsoft.Extensions.Hosting.Abstractions.dll
- Size 51KB
- SHA256 57c2528e1f2b3872976661686af9bcbd0612de7ee6b4ef4cfe92b746b27aa1b7
- MD5 c32f6f4402d1c5a9fcd2fff1e20a859b
- SHA1 3732c98212eec17ff92759599fe91cafd1a8d711
- SHA512 4bd18b34de2e0135a8e00616384033609fbb25804457cbd6cf3d363d7f2e3c7d4aec0e9f99e4a75b3abc87b8dde5ee0e6903dcf3afab80d962cfef02c7532a32
- SSDEEP 768:3dfIvk8cUbjKbhY6Om4e+X9CzJ65Mo7tKoV2nwsyQQZt164yCmi3FbFi/Up2cK5J:5+k7UbjKbhY1TbUcKo+bozqrH
- TLSH
  T12933B14163F81615FAFB3F34ADF891258A3ABE66B834F62C064945DD09B2B80C971737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  current/Microsoft.Extensions.Hosting.dll
- Size 69KB
- SHA256 ca135e4b48abc2effdb6fdf085837966c35f3a8a305744429009dde946d633c8
- MD5 14ffa2d36a6d50f71e904f5d0deef146
- SHA1 63c60db8fd1a63be05ecafe119d61fe6d86bcb1f
- SHA512 09d1ca0be3b43235f97f5739bb5e443adb04c0d34ad6499f7c50dbc64eff351e0b803ab0f8968bbe9589a88eb41765597b9b9b3fa623f6841ab98b6e4d66f9ab
- SSDEEP 768:mHcMciLWJeEHq8SMj9db9KKjoDpxdDozzCF95dnbOCify7MYzWUAKCf9zPcx:mHTfEKjkdbMK6PM8nbOKVWUAKozPQ
- TLSH
  T15A634B8363AC4713DAEF1AB9E8B465691A35DB576414F70E5C8CB0D90CE3BC44E2272B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  current/Microsoft.Extensions.Logging.Abstractions.dll
- Size 64KB
- SHA256 4ad4a3b2bed7f5f293f83cc2c46169b93a9863b89428f693a4f17863704f47aa
- MD5 a5cab35625e1f365a9181f4e059023b5
- SHA1 1f8fcaaf8a0c512e3d33aa7caa0b452227459eed
- SHA512 1fb963e563d774df6ad87fe5b7a09fcf0eae1413c270d4b01022e94a00057fc917919b3f4f6e03bb45ac47286dafe763d40ecd50d3ecc2ae91ba122c5579531a
- SSDEEP 768:vRU98PjrdTukvp6wV1XxMyVYB0wwbru2OkJB7ix+WTqoU8/Aj29zg4Q:JTTxvcwTWBkbru2b7OZTNU8/2Cz9Q
- TLSH
  T1C4537D05ABEC4377CBBE4EB9F89096410F35C2472547E79B2CCCD125A92BBD44E213A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  current/Microsoft.Extensions.Logging.Configuration.dll
- Size 26KB
- SHA256 ed0a70f939dc8779ee85802e926f138e284828ac14d44831ca68fdcd14450b5b
- MD5 477d8b5d7ab4c9b2bc918ef5daa8b45e
- SHA1 7486ff87665335aa215bd589d19b98f546215eb4
- SHA512 2ece4726195ea57acef015ee2b10435a50af5eb39d7d2af01d13f74cb9c6b6d1ceef4a232f81914bcb115ef52bb47641e833aabe4d19c8933cc286f2312f0883
- SSDEEP 384:SPntTUFG4562BbpdL62S5p2X/ckWxsmzU7RWJlNdki+R9zdq:YtTJQj220gkU7H9zU
- TLSH
  T13CC25C6697A88326E9FB0F71EDF0D9453E35D7925811FB1D189EB00804BB3C4872273A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  current/Microsoft.Extensions.Logging.Console.dll
- Size 73KB
- SHA256 84ca5528a45074f18ae4234956de55d238a65be39f914f88293732dfd3889a35
- MD5 cace87a409706f20b3ee8060cb9f0a16
- SHA1 e7c60278a72a6ad5cfdd80191c09d91abeaadbbf
- SHA512 ed21c6547c2df2cdf61c3070254bd6439a30d5674523823d303a0a96e40cdb64a91c887ab4133ead3d8a48716f7679bb6b2c67b22461d9ffef48249a5e5e0019
- SSDEEP 1536:31SU9VTLpoGSWZdHPIcKPmUwzF9U8o/T//+Fv/HENqyvzM:lSU9VfpoX+JFKPmUZT/WFv/kkso
- TLSH
  T135736B1A5BEC831AD9BF5FB8FC7091015B35EB53B803EBAB5D88A0AC08677C54512763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  current/Microsoft.Extensions.Logging.Debug.dll
- Size 19KB
- SHA256 ec47584ec7344dbe9b3ec5740cf493a8dbf346e467d6855e24be33555db11983
- MD5 b1d351bf2b284e0969f1bcf9d6be1b58
- SHA1 64fab26c768c8b610df90baad8e03e7759309f6e
- SHA512 98df861cf32cf09a00688626d706b36ea9a4c3b5bcf76f3675039e43268a82cb6632c05066b361440c5f88806cfad0955af1bd4f9d0373dd796b369084a6c385
- SSDEEP 192:zVfPfwSGE5QJusuqgQJ9j578mDAqWJIxVMW0WF+GBTBWseaAWDiz5j4HsX01k9zM:Rfafu42mDAqWJIxVMWJlNVIR9zeZ
- TLSH
  T149924D528BB84206DDAA5F30EFA5DA42793DD3979511DA2B05D8D1090C93BC4973262E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  current/Microsoft.Extensions.Logging.EventLog.dll
- Size 24KB
- SHA256 f70b8392447817a4d44acd5785e0bc029a2844d5445e05b98d95b237443339db
- MD5 8210308568d5ef15f758ad21fee0517e
- SHA1 e0fdd76a63aff7195b38976882e88701bb6fda57
- SHA512 5decf964bfe472c2083bf093709da87a4577fffa9a22f9db757a9c3beaa83005a26599cf2297c9619522b3b7682af8a279dd5dcd5168808722b3d78c71814644
- SSDEEP 384:0cqdNcIPJ51NsMsOBZgmVfVej+yUvW2rgFW0lN4tR9zj4O:VqPPUEZ9kUEAP9zMO
- TLSH
  T19EB25E429A6C431BDCAD4A71EFB5CD42397CE7C76812DA260E9CF1490C637D48B21B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  current/Microsoft.Extensions.Logging.EventSource.dll
- Size 33KB
- SHA256 665d5316f601ed6dd9daa6d7534610ca3a7aa40e4d117c079ffb118ea2179b2d
- MD5 b251f77d47b8ae95b7e6c48caec4921d
- SHA1 e04dfe931564d2b0bd967dcadb4d0f807743775f
- SHA512 a1e85b95d9e65f4274a6b6dee8c5fac60a0890f8b521c271458c515d0860e48dc96a91bde318e0c89a080e12a29d690ee7ab99c8a3242dd3ed6b10b7c5b1bd43
- SSDEEP 384:YJ3OpOC26rT++tIwa7Pmq8JKUNFUDeHQiXA40zKeGIGJyF7fg12Pahfv0mvoW3gU:YIV2mqJUNFoOXpycpvmQlfe9zq
- TLSH
  T128F25C71D39C830BDCDD1E34A6B8D982153BC79B7921EB4E5E88E0880973785972376E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  current/Microsoft.Extensions.Logging.dll
- Size 49KB
- SHA256 48bd4a0d323e0ae85fa0469779bb13e92c4600b0a49dad6bcb891047c5e17caf
- MD5 eaf823ed830e1f448cbe8e1ad95a76e1
- SHA1 6539c17f608ad3691e96c23bbc3bb3b55ae34b37
- SHA512 67a3d77da957aaa0fe4f4434c054f51886528640603d4e027d5f298e322964ca1061d40f99ac9169df45f9a4f656d050f4d3dd2c0b0c4a7ffb5d20d84bda2735
- SSDEEP 1536:uwkwf/Pqv0KvNDmBRZlDl9PQ8izqu0PpKzZ:Dkg/WCXiz0BKF
- TLSH
  T1D9335C6147EC8763DAAE0E38F5E4D5545B76D76B6012EB536ECCB0A90C7378087202BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  current/Microsoft.Extensions.Options.ConfigurationExtensions.dll
- Size 21KB
- SHA256 3057894505e37852ac77ba70007a6b075980be4da9c3afcdb7a37e62750bda1b
- MD5 8ed48fb1ee04b8180c8a021b8c9289d8
- SHA1 4e4be474d90b13edf1365307809edab6ddfb066d
- SHA512 ec0f2d7c3b75698fea8bbfb3c38771a358934a69aa25739ffe52939ecc25309c741aceade75c3b96eca4f778c7edaa33bda4180de993f3dc99b5ebef27548273
- SSDEEP 384:ty1JDVIqRW7eGpX7SOxYWV4lEdzWzAr0WClNetR9zjrT:tnBR4lEdv1P9zfT
- TLSH
  T14CA23A528B5C4223DDFB5E71DEE585923D34E78A5911DE2A02DEE1480CA3BC8DE3172E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32