53634b3693efe5f876dde82718ace07c606162a64bbdd995a0020dbf3594bc5f

Sharing

Copy URL Twitter E-mail

General

Target
update.zip
Size 1.5MB
Sample260726-2vc1fsel9z
SHA256 53634b3693efe5f876dde82718ace07c606162a64bbdd995a0020dbf3594bc5f
MD5 848af171ec33c378b87e11f5ef9735d9
SHA1 105b2b3af56a8ff0926988fa07fec1e289ce1947
SHA512 6685d1012f8817925baf0f72f8f2d9882011c1157f89c6b82d3f6ef8f50a9d3d5ea457b2cc99e5712161365d1d4397eeefb03143515d163bf89debf685354572
SSDEEP 49152:aQ6inh1USs3aG1XKWMclpGxO8Eny6oUQhTE:D6inFUd1ByEnQUmE
TLSH
T1677533925E2D8C02DF0350F55AAD829588E2C82F2CC5FD05A26553FEBC9C4DA143FBAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  update/t7compiler/DebugCompiler.exe
- Size 34KB
- SHA256 2498f9fb991526eef64097c0da35c0ce0b6e2e1c267ad503ba71d1c9c88764ad
- MD5 d74ef5cf42bfa074f804de85f2f97aa3
- SHA1 0afc9ed3a32097be40d5d524190aa97fff2cfd49
- SHA512 84bd739f1a495c50b2bf997659cbeec4706426a71b6e5ae4407720bc149f48675334e5f71de409e54e077c663b00be4d3e68f83654f50c13358290180b121556
- SSDEEP 768:dzHmB9hOp48ohXDewFkZpDCgmz5opJf1n:9Hmzs4NDemkDCgyYfV
- TLSH
  T17DF218547BEC5717F1FF1FBAA97200404A79F957B932E78E0CC920895D22B908E64B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1
- Target
  update/t7compiler/External.dll
- Size 153KB
- SHA256 194dae49eb0b29aea93937328f78949023dbd11427a1a8d4b5c172b7d5b1b14b
- MD5 c584999cbc61e03935d1c45bdb31e73f
- SHA1 6e63a21cbce85fe83ebb52345a0636f9cc2b8575
- SHA512 0eb947f0645dd4aff01a50ae6bfe659b13c464b475dcb6a9a9aa41a4dcadf018793f4cb4d4eb1b6065db886a7a78dae9a7d95a4176c163abbc3ea3a29c7a6f60
- SSDEEP 3072:S+DMbRjHMoOBT0juq755y62nhT3wZZ4BW9lFMxH2wKBuVWDh6zzXmHlNaHZmmNoK:y5VuT36ZrlqHYX
- TLSH
  T136E38D5D676CEF7AC5EE0B71A02060060BF1D6573922E7BE4D8899ED2B4B7C107125E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  update/t7compiler/Ionic.Zip.dll
- Size 451KB
- SHA256 3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
- MD5 6ded8fcbf5f1d9e422b327ca51625e24
- SHA1 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
- SHA512 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
- SSDEEP 6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9
- TLSH
  T155A4BE0023DC4A6AE2FE5775D4B782A5C3F2B815793ECB8F9D8464EF191A780D6107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  update/t7compiler/Irony.dll
- Size 140KB
- SHA256 478bbd56ca1763ac23938919d7c680d7ce734320da83e9147a3a9de324a1b999
- MD5 e74deec0306d97c58fe5e101e3601961
- SHA1 49a53b77c9506ae0e15b6696fb327b60e9f3089c
- SHA512 5065c2fae91cafa3cba19edcf460acbad94fe0fd7c0e39f17ebc749f536118e6793c909dccde755ca65eb51e2aa61f51d66c4725bb87a2e5570e2ccdda0d73e4
- SSDEEP 3072:iwvPLWyndImyuycon0qcCn5kQRNUQ2aCkvW:iCdfyuyc1qcq5QUv
- TLSH
  T1CEE33A3927E4173BFA9F03B8F4691588C7B9A646725FE35D5C04F1EA08237A19A52333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  update/t7compiler/System.Buffers.dll
- Size 20KB
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH
  T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  update/t7compiler/System.Collections.Immutable.dll
- Size 189KB
- SHA256 69e57ac412200e47fe7b5f933a30c594e1fc1517498c88920aabc702f5ea00a7
- MD5 d96470eec1462cdc385bfcd024a5d91b
- SHA1 9adeafc9c76e29c275f2070cde10e6f7597cace0
- SHA512 99737518ea853669e06691bce59fd6bd12668a07949ac8c77a2b062c3dc4077c3ff47c3a621b117e0fa7d0426aef5e5b663f1db7991381f9b1ad178946e39eec
- SSDEEP 3072:1kp/Ua6cZb8uX1SLlcYK/fcWKKzqfjWSbjEQsHdwGuQTyovdk/vR:1kiapb8uX1SiJ/EWpzEzjYmWkh
- TLSH
  T171141905738CAB36DEBF4D73B561949A4A32C153E096B79E52DDFAF650E33208CD8098
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  update/t7compiler/System.Memory.dll
- Size 138KB
- SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
- MD5 f09441a1ee47fb3e6571a3a448e05baf
- SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
- SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
- SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
- TLSH
  T1BAD37D6857C6DE56DB5FEC70E02052016631C52F5742BBEE5DC8B8F026923EA28193FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  update/t7compiler/System.Numerics.Vectors.dll
- Size 113KB
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- TLSH
  T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  update/t7compiler/System.Reflection.Metadata.dll
- Size 451KB
- SHA256 46451e1168dd11d450aa9b6119f17cec9a70928a40ac3c752abf61ce809cba6f
- MD5 c4ea65bd802f1ccd3ea2ad1841fd85c2
- SHA1 2364d6dd5dd3b566e06e6b1dc960533d2b3017b7
- SHA512 fc4c18ea6a6f38d8c4b4f2e02d3d077cc729b531ca08cf9602c65e22aadc0be770e441660cc980cbfed3b27bd783e65f793838532673e2845276390b4b22d730
- SSDEEP 6144:6GQpCbBfTdCUG6Af0AQu/uePT78Wz3g8V51G3tTkd72ipc5/cSAy/B:6GhBK0AQuueVLm9g7iky5
- TLSH
  T17FA46C4273FCAF2BC68F47B9F065091D43B1E4A66247F75F44A8E6390C93B988C416A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  update/t7compiler/System.Runtime.CompilerServices.Unsafe.dll
- Size 17KB
- SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
- MD5 c610e828b54001574d86dd2ed730e392
- SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
- SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
- SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
- TLSH
  T1A8824A21CFD84503FE627B344568D183FE38E38A6806A36A2586F57A1CD63C57B31E38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  update/t7compiler/T7CompilerLib.dll
- Size 79KB
- SHA256 69a05f23af4c976db9c1b27468b88385f2889604012199bbeff3dd4d509999a5
- MD5 0771927020798ebea2e54085e6406564
- SHA1 7a90f6d8b57361227eb854edc0f9700abc3c5732
- SHA512 9c18eb504dfffa4eadaf1c7cb280ae0ee965394938f74caa6694374df5202e339c56a34daa9673554eb515ffed934555538a92ac3726557b8c1311c663c5b3cd
- SSDEEP 1536:RHgLPMUTAsdegN9p0jpTsYADFIj5y1AJ6Hdd5RjvlZc8BafX9jLu:RHgU8Ldeg3gpTtdJ6H5RjvlZLIX9jLu
- TLSH
  T194834A3CA3ACCBEAD3AE4A38F0B1802847B1A4657661E79ECE0475DE7A533444913773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  update/t7compiler/T89CompilerLib.dll
- Size 64KB
- SHA256 edd6dcfc6fd1e774169bb9cf09526431be8ce7abfcd40be73de8f07d7fb913a7
- MD5 c1f3b56dfe7589b255d8d9836646c9f0
- SHA1 24fb904351405c9c9ed935fe321d0491fc13ea79
- SHA512 a9f45501756b5e8e6d4065c9be998bcd7c226a66a51430dbd58954e6646908eda6cab276345784787524576d2ad851fd076f35c0d44583084cb63ea9ae00c66c
- SSDEEP 768:drgzP7mB6kuHkOYyB78Lv14g7OdxG2hMKMYN/MpO3MkLu5sLvlwYWt0YlXXVkGG7:drgzAAsO5dxfMKMlppmvlwDbX2t2w
- TLSH
  T157536B38239D9253C6FE2778A83141185BF6D4647A32DBA8CCC4B5CF7923B81496376B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  update/t7compiler/TreyarchCompiler.dll
- Size 206KB
- SHA256 4472c29a6d0b88d0c14ac42f26efe2a4ee371873220f799be3ff35a60aa3f35a
- MD5 d645aec26396cecc9e1b698ef77f9a87
- SHA1 cba5f252cbc8c2370dc995a958e5847abe3f3931
- SHA512 ec2ef0e5c7837ff76ed416eddae307f7d68668ee486c0c7693dc836082dc906ca74e67e5f3f3d66f0036c5d1ef7d864b80fb18b4f5deb644d8c99a4e0bb34dc7
- SSDEEP 3072:RTiAHmRznELJdphytokOGCD6gIZNk5IIz:RTiA8znwyehmkN
- TLSH
  T18124F82C63ACA937C67F5FB68470185902B499033AD1D75E9DC8F4C66B8A782C749CE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  update/t7compiler/t7c_installer.exe
- Size 47KB
- SHA256 ac18aedbfdd16af767f20771adeec57dcf91519a3b1929c0816727627050bdbf
- MD5 e17c1b9bcf6b275682bdb3cd3faaf9aa
- SHA1 180a29feb16410235073f65b0e408385309e208e
- SHA512 5ed81206490bcf8b8c04ce5d8a4e26b97639399e16821de102ee086fbf1e0df5f9c8a92b6143f9073b8d518c2b50aa4471fc70cdd64760a9ee31c6374f82e22b
- SSDEEP 768:FTr12gT+b2tAWzSmRdk8MqLK8FeLnS2FQk0pFuhUmMQ2uFmtYcFwVc6K:FT88MqLmLnSPFEdF6wVcl
- TLSH
  T1CA23F74033AC5637D6FE4AFE6931614007B2FA662126E6CE7CC865DE1EF3B404A92753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral14
- Target
  update/t7compiler/t7cinternal.dll
- Size 173KB
- SHA256 195e5a01d0a800377b3a6b7a3f031208ca5e39a35bdf9bf4d848cbf69ddbdcf7
- MD5 4e4277ead8f7a64b00a5fd8e642ba873
- SHA1 7b04643c0db2cca3a8b631aba6a0f77c4c965bd8
- SHA512 a412150a0dd57a9c29c316d9198a6604c0b3ca1d7d577a8622ecac3d27c1a5862c3e3edb44351b9e36d785495a7246ca0011d585a132a1b76539ce21514b8bb6
- SSDEEP 3072:Hm5uccAzw5vE/hS3n6pmYaxXKRCEmILx5zbQX5x:HmUAzw5c/EX687+uILi
- TLSH
  T184047E4AB7B500BAE9738238C9931646E773781507609BDF03A04376AF3B7E55A3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  update/t7compiler/t8cinternal.dll
- Size 147KB
- SHA256 6f59f9a6661277e47029229f5a85ebddb6ac8187bd72e282090be2c1b92ef971
- MD5 dda3bd9856e57461e384006965db6b45
- SHA1 133b232ea349dc27066d57c2e52273d1c546d14c
- SHA512 02966228edfe5cf979fef818bec1e5c049dd0eb051c0f5529aa6e4cf6ea76e8b5699a445f1235cdcb4fc50408165f33c74649c01969b26febfb6951dbde33da8
- SSDEEP 3072:TenOLQ/1WcgAVBXeILA4TiJYos/9qB06SOi+5:CUQ/1l/7uUAJ/s1/8
- TLSH
  T178E36D1BB7A540BBE1778279C9A30A46E772781517109BDF03A0437A2F237D19E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  update/t7compiler/xdevkit.dll
- Size 48KB
- SHA256 ed179133a0259fcca1b4f2387fedd31388f1911cd0bd184c10f6b174f3573257
- MD5 95e443fe23b5655f8d67f504c95e3446
- SHA1 9dfa77ada215d87386a4b8b729ebb455f81a5caa
- SHA512 f1721350e4e8ff2bd24c447de1cbf2c3ce935cd44bbc2c222933711553c39ca69a2aa0eda2146ef515f49c7ec97af7624c926e60492f4d4e1e8ff24f4054a367
- SSDEEP 768:nQG2KXjMSlsQaBrknnz3tVEoxrnnFMe9m/s3D7dOl/Z5:nQGljsQaBInz3tVEI34Ay
- TLSH
  T18423188BB35DE00EC5BFCBBD86A306661371C6912322DF2B384D539D1F9A56C0C66279
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  update/t7compiler/xdrpc.dll
- Size 76KB
- SHA256 2bbb460175327ba116c729ea46626c86c56281d1add58fcfa664f092df08fa0f
- MD5 c72aa77cc2bf6b879ba7178fc4338a98
- SHA1 36c4d808a39056824b18910017bd95176eb48fb7
- SHA512 0b65b40dd358be197e2293395323b56bab4389a1979a93bb710c3efba25e466657eafc718172a33920f9d4e812ceb12356f461f130fabdd37f1ca83ab8cc696f
- SSDEEP 768:YSSo2xipE0ZJICQ/SJdULuWPGmeTxlis+OLz9iIW2kla6ZlBy11CK4viNquVPXY6:YzipfIC0SwjI2gLz0/ZFyDOiRVd
- TLSH
  T19B730914ABFC8752E3FE2332A4F012190776FD566572E34D798464EF1D91B8289D0BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  extension/generator/defGenerator.js
- Size 1KB
- SHA256 c0fc2421d1938ab3bd25dbc3ec27377fff030eeb8904abe6950e653569e8a068
- MD5 350506c6349433ed5cc19519c77950af
- SHA1 4c7d77e60393a9af6da72f0935264b0a9660a951
- SHA512 cab24c68153b0533c2f9fa55cd23c2d73f0f45167fd02df867c5fda8a6d4577352fbd8c9efae165a94c3c0cf4e9d29c9b5b730c02c6fe53c605f3334c0c696c1
- TLSH
  T1B631565E326BE22DE063BF68C27E6009E932C2162576557AFDD413D82C20C0D11DAFEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  extension/native/deprecated/parser/bin/test.sh
- Size 165B
- SHA256 bcb6f61df28f0a17d7cbf9f15c6856e4b0f3731ce78a39b29cddcac70bb8cac8
- MD5 08d0fb76d3b4a19e9099fcb26898926b
- SHA1 d7b78e5a1c5d774c3cfd1367ade6c44221251950
- SHA512 ae9ac50af73c7a4beb11bbdf8a7a07765668cebd6938708fd802e5e2fbc3fae9b35183ead0a936ed6f6422eed6b0e21ff4c37f0582ab9c73f184142948a50a7b
- TLSH
  T1BFC08C92CC57A3A00E0FCC29A40170E2B0B009843C3E9312204B03B179133C93823AC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  extension/native/deprecated/parser/src/cpp/symbols/function.cpp
- Size 2KB
- SHA256 8116f1f7dcf4950a6a1b2f09aad0fab5a1854a5089b6b2ee5dde050bb461bbc0
- MD5 28dd0d5dc54b323a903eff495fb58639
- SHA1 a3d3cd5937478b30d726576bfc7a5e9c2efafc11
- SHA512 37e458cf116ed4aba137b4d2473cd621fa2e2595951416c5139de62bb2a7003da53fee5a7a3d15bee32f7581bc96cff3549b0fe6cbcfdf3480c1fed90ae6c503
- TLSH
  T12D41DECF32C62BD43F8720CAEF7BD02455B6705BA2A235A230CA925CA52431C471F6F8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  extension/node_modules/vscode-jsonrpc/README.md
- Size 2KB
- SHA256 e110d2abb6fb454c7612488ccc2de7d7841deb4ad6dcb65cdd2384baf1d74b78
- MD5 708ddd9c6d276c20d33b3aa254d3a72d
- SHA1 ae11ffda3a8b16d97af2b48b125363fac8c3067f
- SHA512 baeb053a9758bac73054ddde1a71f9d8e55cf2e694ba17088ddd4d260e9180226d5b7e209ab1877b021c8a915620e8417693cee358ae9dfe9d6a46c9a8d3ee36
- TLSH
  T1BF41888B214379D85FD73093B05772E0ABAB94ED1D82B021B796C1B8D1912D4E3A73D9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  extension/node_modules/vscode-jsonrpc/lib/cancellation.js
- Size 3KB
- SHA256 29321412b00a2a86fbbea1ba8a8de431ee609de57b0345ca620c55d8ae5ce10b
- MD5 a520c2ea8df49156499a7ee7aaf85f6d
- SHA1 cf7abfe0a5a6e3fd815c3e8156767a82b1779baf
- SHA512 71f362ed2d8d4639ac30c65bfc7866f1ec98d83438fd235a0c683493b420ea3f1f067ed3d362ef20b4c3457ad77074d1054478e7c10911e21fd453014bb9eea6
- TLSH
  T19B615AE9DE25B2045936F7B68AD77013F9325493900B447C391D95C91F3B86142EFEE1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  extension/node_modules/vscode-jsonrpc/lib/events.js
- Size 4KB
- SHA256 2dee4a3a4809f09b61dccf315d263f7209f59fe95e8c43e08d691bc8fa2ae256
- MD5 159ecacfaf855872d41845f897d5e778
- SHA1 ff7ea5c64bf92d9fe6c20422dc9d2b24de4de21d
- SHA512 57ab27b7cf2cd191e5a3f04b90523cd633beb5e560c6b3e8c51450a690fd16df763890b01cb0541efb268665ab836dc9a9a2fc2c3cf6d09d8051d30b1c187964
- SSDEEP 96:8DSIsPYrR6v299C3MU5F5FaFL2P6hwrvwD3bb7xF5U:2sPYt6v299CcUqdphwrvwD3bb7a
- TLSH
  T1AB91996C4F5A509796B2F3BB8F2B5206F939D1670A19402A7C0C97DC1FF442092ECFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  extension/node_modules/vscode-jsonrpc/lib/socketSupport.js
- Size 1KB
- SHA256 934816185fcd46890c00b9caba18e9025c233a89c37a2c6f7fec0b3315d99578
- MD5 11d723e6776da3f8377d4c515ee32215
- SHA1 964dafa4670f67b43a949e12547cd612cead7940
- SHA512 6526d17c67c923da2707f58d675f990c512728a703c1d7c390c5cf4a87a51f5a35b8a2b984011d7e8bd094103453e7d1f9ba64ccf82a14aff61f24da9d482cac
- TLSH
  T186318F5AFCA0BCAD5373D693F607D405F215A8236200585ABF1C499A4FB378CD38E6E5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  extension/node_modules/vscode-languageserver-types/lib/esm/main.js
- Size 53KB
- SHA256 d08d62ed4118ed0fdbec9d9077896749ee7c5de4b777ffaae047ddf8b0680743
- MD5 b67ead0e7c4c1ac0c68bf7e748a3dd6c
- SHA1 c0f66207e5604caf2a99d03eb0fdec5d6ceeaefb
- SHA512 4e476d094cfab0a2772c96803d08752d36387a8456cf8455e800f8e2990eb519d34465c82303cd3653390095ff40db649123e62ce084858dcc803e6b55e36417
- SSDEEP 1536:qo1IH1MY4mitFtW0MqBGBu3+HninzoIHmEM/rzPCzmyRWCRg1wlGUB+B8BSBy:qo1IH1MY4mitFMkzoIHxMjzKnR5RgKgM
- TLSH
  T1D93320A66C8123120133733593EB8504FDB552EF76C6A1827DACD5A42F71EA502AFFD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  extension/node_modules/vscode-languageserver-types/lib/umd/main.js
- Size 60KB
- SHA256 66162e16a3037311c57c34bb13f36215199abde0648a32256c5d71c5b84a2de3
- MD5 2f4175967cbac4c162d658e0c8de8d30
- SHA1 07315ea910389221d7286143d2dd1cf10428b743
- SHA512 9574c3837d7460f9a40317ecb9f66468ed39e5439ba5fad7b09c6673157f25659bb50fbaa414a4f84543e8e106210ecf66d5e426d3f237c1df1c962da45fb6fe
- SSDEEP 1536:goHWJjciB/+dKBmBeXvnonQ4oiE88zuABaZ2il2lBuBsBSBm:goHWJjciB/+dm6Q4oiE88zuABaZ2iQd
- TLSH
  T1AD5310AA6CC1225201337335D3EB9101FD7582AF62C691927DACD6B41F71EA402AFFD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  extension/out/defs/defs.js
- Size 208KB
- SHA256 117be7b01ec50217027b0a8ae0c85c81458c899af9827b45ba0441cd2de879c0
- MD5 0f56605d9b812cc72ac7decee077dca7
- SHA1 07c3414f7d77ebfe49597af2d4dd6e0525f97df7
- SHA512 d286335ac7f88979506c0c3de7f3b34ed6d18cd1ea026c225995abd803b399f2fa02392f26aef2fad10c9047a8c2853837a1a7f4bd418df0595dbf4d5c3ac594
- SSDEEP 6144:pJopVV0d9XDsOpTCWraSItU1M6NEvNGxAt/7XygqvUQWWUGzj37Tz+fbJMYHre/i:QsgeRCEG
- TLSH
  T19F24CB1EA92AD469A51AFFFF92295040ACB1016D338FD1F1E36486DC1B8FC5EC6864DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  extension/out/defs/field.js
- Size 8KB
- SHA256 3464346c75dbf419c763152ba7af6791625bfcecd85e6997cfb685ed22d16aea
- MD5 225e45ad780ebc871fa1154fd3058432
- SHA1 f399ff45b3e05ca77a065942a102029d3bc70d62
- SHA512 7ad7292a8a4a390bbc7b8f6fb16619d10d65c58c8f677ecaf96dc50cd0f802bb6fbe20bd78ba2c4c21dbd0ac10d55743387a1f8d79b9515c1a771238613ee384
- SSDEEP 192:LCiai8d/SRKLirr+4XRqBjh/YdT0D/nVhHr7JgPN91O9:Wi7g/SRKLirr+4BqBjh/YdT0fJgPN91C
- TLSH
  T10A12182FEDA5CC110AB28187A071D611FA60F39FA262E91FB1FA52DC9F303945E46C35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  extension/out/extension.js
- Size 722B
- SHA256 08ec232841213004177fefbece96b0aead5a0bdfba152e3e1caf83465ff76141
- MD5 9a5b8fe984fff6e8315241136456bbbd
- SHA1 04fe973eb5fd5a49d672a6821f9ac3602ebcf04a
- SHA512 95198a10837d8be25345eb1174a05505603571ec65255127003c5e3b0b5add982e40b017cb1832c2efa2a16a4a8a5078a94f7fff926856299530acd7c5ddc110
- TLSH
  T18D01151EB2C6A1734B172AA49B070142FD7560C332214414B385C7E441C68CCC97D8F1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  extension/out/features/completionItemProvider.js
- Size 2KB
- SHA256 064955480ec98f997497cd5c887a85e75c356e6f44071916b6db9ceeb4679761
- MD5 9e6d0e5fdce51ee1d32e5227b3bb7346
- SHA1 fc6069921a6cadeea501c16872ad7bddc06d6fcd
- SHA512 15250b59bb62b6505e740d7dac75e2a7208b3388fdc40c404317bbd99eb6faa6a8826fd4122b7200e4be613ea42f2ed1437b4a7eeade69e937ecf3a41954aee1
- TLSH
  T15351E22457497632863BBB78DF875045FA7C117B721291057DCE43A41FB2AA842B7EF0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  extension/out/request.js
- Size 2KB
- SHA256 c5ea6a1bf1e6991c20240291a7d09ad9c162b078a5a86c3284267619dff498e8
- MD5 0fa2be196de66f64687fa6e9f2375e33
- SHA1 5e2c2b5361a0636646c70343c863f7b7e1f8aebb
- SHA512 8a12a7cc8deff4626c9258d892c1acc22ef3c0164d35f5b353a43966fd1bfc457d81ccaf72bb03d30427b6cce8fba409231ffb773ede76fc93ddc0a491e07b42
- TLSH
  T1D9413C0B954D3EB8E226E152EE07F271655A515F318C25377A9C47B32FF2B00857398B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32