4ec412a6db30447e7e732517be24a93c4fc77278718b1f82f1854d6a2f6ad89e

Sharing

Copy URL Twitter E-mail

General

Target
out.zip
Size 1.1MB
Sample260727-ppb5rasxax
SHA256 4ec412a6db30447e7e732517be24a93c4fc77278718b1f82f1854d6a2f6ad89e
MD5 42e13acf3d013a65b8257ea3c6105fba
SHA1 b767c086696244015389fca94654c0322e5becbe
SHA512 dda397e007dc31d17d2d43a0adb979453b1198f333f26220edceb06d8c46ef2542db850d3b242cfa4632288c62287b4ad6aa5c7dd4631fb0377b2e901647ef81
SSDEEP 24576:OEvtIEADAptGrZcJYZVj0J6VAfkMszNCxvvqhnpJ:OG6EupcMdzUxvK7
TLSH
T133353333E7345A5CA4D17830DC1A5C606EDA5C14E29BA467EEE67362A47DF7EA30F400
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  out.zip
- Size 1.1MB
- SHA256 4ec412a6db30447e7e732517be24a93c4fc77278718b1f82f1854d6a2f6ad89e
- MD5 42e13acf3d013a65b8257ea3c6105fba
- SHA1 b767c086696244015389fca94654c0322e5becbe
- SHA512 dda397e007dc31d17d2d43a0adb979453b1198f333f26220edceb06d8c46ef2542db850d3b242cfa4632288c62287b4ad6aa5c7dd4631fb0377b2e901647ef81
- SSDEEP 24576:OEvtIEADAptGrZcJYZVj0J6VAfkMszNCxvvqhnpJ:OG6EupcMdzUxvK7
- TLSH
  T133353333E7345A5CA4D17830DC1A5C606EDA5C14E29BA467EEE67362A47DF7EA30F400
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  out/libvlc.dll
- Size 15KB
- SHA256 4b79e9865140e210afea6b2ad95e5d95760ce309dd41e02ea52e438f351679a8
- MD5 fca947d53208f48bc20d37e59fe794a7
- SHA1 1ede9f124cbe2fdbde0419692e8b63f58cf046a1
- SHA512 205631e33059a2f3665b6a04ca085a98b62ba7f062a92e875626c4bfaa457545ee686317ed95c24e27c3513ff2bc8d71cccb68f8598ae76fbd1ea5d731ba12d8
- SSDEEP 192:LwzRT6qvpmjzpf8WoKSgYQ/fEWFrZIy3y5+36:LwzRT6qhgfNoLc/OKy5+q
- TLSH
  T1BF62E789BB4194F3C1B78EB14DCBDFF69EA43A528443EAB1FB9ED20D78317026448449
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  out/vlc
- Size 741KB
- SHA256 782f999684f33104a22919440cb2327f4f3adffb7cd1a5dd4e8ff407e5864030
- MD5 dc72ec29bf7bd40c48100240d5e5094a
- SHA1 51e372f428e7ca53ee062eca09dab499a94bed16
- SHA512 a3b9782af454b4f7ff22ffe4ceddc2e80edab31df760abdc99044ec7ed70ae9a2fa20debdd0a47548db7d2eb110d68322e73f915944ff6704b16c2fd9300d326
- SSDEEP 12288:kVzOMQNTYJ9KdeJnmrWUu/AExzndWvycceAgQtGrZToDJYW6VjxGJ5YVA4UkMos8:UvtIEADAptGrZcJYZVj0J6VAfkMu
- TLSH
  T123F4236192105B5D94E1BC71EC3A7C702AEF5C15C20FE06ACFA6E3667939ABED70B404
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
- Loads dropped DLL
behavioral5 behavioral6
- Target
  out/vlc.exe
- Size 943KB
- SHA256 2727f2739579932c4319feb3e484cb9be3b0e0d0ca36ab773ea19ead06c8db3a
- MD5 0f403fbfe09131e82cf5222bf6cd29c2
- SHA1 c24c9bd3e6f7ed82b8143bce59954bf81e91cc32
- SHA512 287ad20576b48e4f2639ebbae5b35a5dd31cf0cf6988793ffeb4ed3f759143a97059995c5537486869353ad2cc42f55cf24a24abc0a7c11825a0d8549f1269ff
- SSDEEP 24576:qJ5BOnKF/GBXXPj460HvjdF8rhaRUON0tITU5E:qhOnKuEPN0tZa
- TLSH
  T111255A66EA4384F0DE5705F1550BFBFBA9349F198020CD6FE288DE94FBB2C532469225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8