83300663c04ba579963fc0604ff4559b9d2146d4fcf15d26e1c9a3135d8c6d80

Sharing

Copy URL Twitter E-mail

General

Target
uberlogger-v1.3.1.zip
Size 23.3MB
Sample260727-clgjvavakb
SHA256 83300663c04ba579963fc0604ff4559b9d2146d4fcf15d26e1c9a3135d8c6d80
MD5 59dca41e9b59e00180ca054f483eb300
SHA1 fba98e3c809394872ac72b786abc61995a6fcff2
SHA512 13b1e0d63d5a2e137ad79d15378f149eed1eb3c834767dc7f7b83755afb0ff858e6d17f1c49c1a9b1f6691092783cb0da9da1fd92a1cc597d5f29e000fa9f496
SSDEEP 393216:US0pDO6+2waGCmwSoNZABAj8cL2fdAMLPfuJGmqNopP9qMLPfuJGmqNopPC2:US0pDOX24CmwSo0Kj8zdAgP0ZFLqgP0j
TLSH
T1263733DC38406320EC44F53ED235AEE9595A2C5EF9535A2F20089107F9F26EBE72D693
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Converter-tool/convert_raw.exe
- Size 8.0MB
- SHA256 970e32daa1ce3a2bb8deb7dc1779df58391031c12ee5ddcfcf9b5908fa51c1c6
- MD5 09699886fef6cd2fdf284b8023b12550
- SHA1 39ee0444c83c2f4baa07e0f4ef4c375ebcb317b8
- SHA512 66c1e158afac0ce4c14d5cccbf97325ff5bb40b4c79091f20de4f06055b1e8576c2b0a1788b6a645c4082edaf19741cbe7ee13fb68f88ad685c8c1b70b6bc537
- SSDEEP 196608:c2Vq9x1dy5XOSxIJEO2tpkQmJueAWNFaNx/RhETSEGhcWNje5SPMR:S9x1dVSSJEVwbsWNF4xYOdhe59
- TLSH
  T166863395626009E0FCBCC43F8105C92AD6B67C7BA364D98B13E8C6571F635F6293EE81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  Converter-tool/convert_raw.py
- Size 21KB
- SHA256 c8505516d1787bcbd52a8c20294c0226cefee10d04d1af3e2ecadbe7ee2a727e
- MD5 2971ede5e1931f78db7fcb3955811c3c
- SHA1 436967e0f5f9b720a8a2d81329fffb39f4a3967b
- SHA512 67d847e945ae2f9c82b777393f4f7be7948c78ebd287acf1746b461c80383482810f5edbf71784de2eaa9fa4b6025a7a1aa9c8287e593a50acc3c42e30fd610e
- SSDEEP 384:k5pyoPlmd6SaLxYFirYvhWG5891fy5oeP89LkghyGlGiJ3pHPDyA86aBrGBZeekb:k5F9G+F9rYvhWG5891fyLP89LkghyGl2
- TLSH
  T1ABA27381395B19EDC3437D4889DB4803F738720F4A0CA5A9B6AC69957F08E75F1FAAC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Wired/esptool.exe
- Size 6.3MB
- SHA256 62185730ea23a0fcf9d550692ae8203d8f130e7605507d20c45309e6904aa7df
- MD5 c47aac98ae3cfff1c3d825a44cf18576
- SHA1 a4736a0b13aa698f76fe7fb8c274141ec7d65811
- SHA512 6aca87cc3005b9958a83aa2e7876ccf1b5d5b0ce31e1ad7443ab82b4180ad2a26c1dbd2ca5017ff52db922c7d88fe8a7b5f48de9de358468fe06d9b450ba627b
- SSDEEP 196608:U9zjOCsXDjDyf/dJolpPgToa10/IUFOnJSi5IoWf:WzjOCEDCJ83a10QUs0gN+
- TLSH
  T1E7663347A58119E9E9F3653E88518702F6A67C37C712874F06A45237EE2B2B19F3B703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10
behavioral5 behavioral6
- Target
  Wired/update_firmware.bat
- Size 2KB
- SHA256 9018d9dd9cbceebf989ca4c496fc039390b5ff63d4136ce613fdb7bdf239451d
- MD5 1ce782f513ca857dac4dd090eadf3c71
- SHA1 6876ecdf6fcfd65dd95e773574849a9308e5f3d7
- SHA512 342d1f8c7ef1ac88f28f428134ce0e789d7bcbfd11144f0ce19f7bd0d8890a0d6c6fd95e05702eb6a81e55b5ce3d6e5cb64dbb024a6da1cf01aae53de8d8a89f
- TLSH
  T196417562B105AA3543764441A8364BB4B33850D7D3229D4CA0DB703C39597E6B7BD0EE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Wired/update_firmware.sh
- Size 1KB
- SHA256 c5f0c3aa1eb5db4de07d4027989f3c66bfa6509efb3ee20b7bf1c47ea8c90d5b
- MD5 be9c0ec6c1f0584c2cbf1ddaf227d283
- SHA1 28d4981fa2dfa89fdebe75d14c24a246ae76bdf8
- SHA512 b027dce59bb5a91306dbe288f04259369ef88003b3ffe345348c414bbb5c4e01a02a4defe5effb2dbcf8b60a574a721836661d86d25a2aa8fc591a3203869d9a
- TLSH
  T1DE211EDBB268AB3517270030EC2717B47119448796A40E2C64CBB0BA36293D5FADD0FE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  calib_uber.py
- Size 4KB
- SHA256 595b0a13d7a78b23caaa6a8012b686434ff2b634f9d920a7b4df86a9fb8786b1
- MD5 2ad1ece51e69bf8104d89771eb82f118
- SHA1 bc88d1d9d60d8790afdc1fb501a77826e5746dbe
- SHA512 c41f6ab2366a0c992d725e59b4abd7fcfdce84753e3606ce018f25d88dc2482fd2b2116dce540c6978f539dc89c3a9386ebc49a38a54dea79a11c378892b0260
- SSDEEP 96:lVIBJmydjkZGa/NBUdBlt43yWQUdlmQgWQU8X2ZTfmAy:auACfny
- TLSH
  T19A812F03DD58281593331818AA02E260FAA60217176365BEB5EC837D2F791A1D1EF9EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  esptool.exe
- Size 6.3MB
- SHA256 62185730ea23a0fcf9d550692ae8203d8f130e7605507d20c45309e6904aa7df
- MD5 c47aac98ae3cfff1c3d825a44cf18576
- SHA1 a4736a0b13aa698f76fe7fb8c274141ec7d65811
- SHA512 6aca87cc3005b9958a83aa2e7876ccf1b5d5b0ce31e1ad7443ab82b4180ad2a26c1dbd2ca5017ff52db922c7d88fe8a7b5f48de9de358468fe06d9b450ba627b
- SSDEEP 196608:U9zjOCsXDjDyf/dJolpPgToa10/IUFOnJSi5IoWf:WzjOCEDCJ83a10QUs0gN+
- TLSH
  T1E7663347A58119E9E9F3653E88518702F6A67C37C712874F06A45237EE2B2B19F3B703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10
behavioral15 behavioral16
- Target
  uberlogger-prog.bat
- Size 1KB
- SHA256 fb63aec649c519fdf04c631fc5bcbb2d8811ad7d1af233d37efd2cbf1df0e26e
- MD5 f438136ab97cc18112437c9c42b246d6
- SHA1 857660a36febb9805ea1d1c313636a2055f19c4a
- SHA512 8d2b44b1978ea540baaf61303b7c3f819e6fef4afef0fb3bae2f7426030fab53ccfdd6f7f0e72c48d43193d4963036f89f40e2b46d77e7e427d5b0a41d9b2278
- TLSH
  T1C5214581E105C5B9B34602027D192DEDF259A15FCB81580E24CB67AC63A5FB0E97F1E5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18