17c9ed6f3d41b572ededf8faf00c616659c0f472c1abbf104a899a53f184e815

Sharing

Copy URL Twitter E-mail

General

Target
mitch.zip
Size 6.6MB
Sample260727-w79x3ayemf
SHA256 17c9ed6f3d41b572ededf8faf00c616659c0f472c1abbf104a899a53f184e815
MD5 2a07d25db0988e2d5eced967b57c64c5
SHA1 4f22989ec5a8c4b865cd9ef74b892963d0970aba
SHA512 1deb0245aa262407dc6ef3a42c434f9f3992bd7331204e5902e38876d3e93cdf433542feecf7775b4ef2ac1846320a728b6d09ef82404bcaaea7633f6be3658e
SSDEEP 196608:ZADR4sDv7sFzPDTdPnft9qCnsCw9KfSRa5XInl:ZAisDv7OzPDTdPtw9KAYYnl
TLSH
T19066336EE4AA4872DEEDF2FFB49F65C450F6226940E4068BCC7A61D0FCD7794CA12112
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  mitch/BouncyCastle.Crypto.dll
- Size 2.1MB
- SHA256 c89db447549cf2c3464fb908411bde3da1faaa807115547412f2154f7f376281
- MD5 e2d7d9a3850cd3cf0c77c5a285d61cbc
- SHA1 6c60b0ecae01834e74a2d65864bfdaec4c2a007b
- SHA512 0ccb044f3f8ac28d06f525cc566c8f96aee070eb5f787de448a787b20edb40e467a56143f133c42951f9281dc36311f45141f41d3e1653f031cb646dadf82390
- SSDEEP 24576:PtQuTgg/5fVblQR1Z5h3Fu8DRl2UHKc337HTkbYzynjR4ap/:1qgxtblQR1Z5h3FRlrKc337HTkbYzp
- TLSH
  T19CA54A187BF80B37E2AED7B285F2405162F0E85E7363EB5F19C292A50D13B515C816BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  mitch/Castle.Core.dll
- Size 272KB
- SHA256 caf0cc25b6aacd86785e22fff8b48306c1316557cd1e8ebff8519f5724ba30a3
- MD5 8b08ea9fe6349360ba20ae7902e7b08b
- SHA1 1bc85e1586c83345a16a73c1fcaddf631c24b823
- SHA512 7097607ad99468468a038433c3fbaf38b908a9696584d580a7270111299327c836e63e16f213519430c1462ee65f3a6891687c526c090866035ab42bbd340056
- SSDEEP 6144:inqvx6VySvfpxyzg7dbA/96R0TMAwhcS+:t6VySvfp/x3R0lQ+
- TLSH
  T1D754392127EC4732DAFF5A74F4B019254AB1E95BE87BD71A69A0B5FA0C13B008D90377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  mitch/Google.Protobuf.dll
- Size 354KB
- SHA256 972350f13b851588f3da6435355e7487115862e8f8e23d31e375e5af163875ba
- MD5 6c59d1a3b138a0dd213a0354ca3926c9
- SHA1 b94965bd0de90d9a682a855591bfb69e781aac65
- SHA512 464b6fa9c27b49c75ce89473e65821da59957156e74d762981664f2a2eec6835dc01329d2bdbba6e7d0d2d693914f8e86ea5da03af912699fd3108aa4a40c4e2
- SSDEEP 3072:fEXDQDsylAIRkWfweiYxjnXMRuK9yhXOo1vUyXRhAiX7EyfmolzhucP8R8sSRXHZ:0IPfv/JZ9UyBVJhZXHDmthNKH0jvAeC
- TLSH
  T14E744A102AEC16B4F1AF6B7AE4A764659BF4AB87321EE75E684075F70C037909C80377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  mitch/K4os.Compression.LZ4.Streams.dll
- Size 17KB
- SHA256 91230afe0f275f7e8375aeeb0a2276b0462e4d2b6026f0f7ec4adb5cdc4f8c81
- MD5 d87a5de03041a1148b46727f1b212ab2
- SHA1 7e115004b0926b2d4f067c91808d3550a68fb30f
- SHA512 ba1385340b71654a7109fca4022daf2db595f5eee53acba66e7a39bfb59ab9ca49460e7c1b81e42cec44c9a8a7116fdf0d0b13f0aa606d9af1144352efe90528
- SSDEEP 384:BcP5+w8AaUU+zPZAlqMF9dJM7Em+r7Y1Wo:85+hAslqMF2Em+r7Yh
- TLSH
  T18E7229109BFC813BDAAD0779A9B6874503BDB5517A13CBCE6D1CA0C16C137C58E227AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  mitch/K4os.Compression.LZ4.dll
- Size 39KB
- SHA256 d08588b58819ac629e0c9e921173ad9ad22ad3c831e22099df955a25afb95eba
- MD5 3ae894f38dbc30e4f84c9b9c77f7543a
- SHA1 614cf6d08eae2511eb5a02c1b43317b30a24c6ea
- SHA512 98e5fa726617250e2cc7da59be765151e668b395f82e51d7265301486ca5ed129e63b3e4db0294498032c6f43970a1bf83a6b900184a5fdba215db8149064ec1
- SSDEEP 768:+0qc4ymv0Y4qEaHSchLZkKJ/S2dHGWHWnUaQ86Y0l9KsShySmBty:7qcm8nQVLvJVHVHWneCyS6A
- TLSH
  T192034CA9ABC8CA37DF1D0EF41490428D5372D27BF603DB5F7A8808716E163D44A067AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  mitch/K4os.Hash.xxHash.dll
- Size 12KB
- SHA256 999c632c467df0ec47dc68f75845266cd1a3704536aac16e3d5a02086f8292ab
- MD5 ed559f870fc1166b8aac6fcbc3e3117d
- SHA1 21519874f037ba9903ac056fd8ef0f1e80491e56
- SHA512 86eab4e1ad8421f1ff60ec12cbbb9748193a3694cad3dabb29f071ae3e5525e21fe3650abd07bdcbeefbe6b821f1f33be1e8c6ce9b3f39e12c9d6ddb1d442037
- SSDEEP 192:ZoJBljPRg+UhziaScDO7QjPtlprfnBlTv6GvRt/6Aq/cyWu:2ljZ2j6QjVl9fnX76O0Wu
- TLSH
  T15A42F9199BAC8127DCB70B7A5C68530B8178E2794E11DB2D719CA5757C073C08AE3BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  mitch/Microsoft.AspNetCore.Authentication.JwtBearer.dll
- Size 36KB
- SHA256 a20b16626a8e51f3b70e5964c1308a172a8ccd791756d7d49550d6b07b6e28d7
- MD5 e0d81f38453353b0cda4b91594ef3432
- SHA1 b6240ca265e10715b165f40a6364fc36ca2f55c0
- SHA512 15fc9e9f48402a8572b81784a0df53f1e9a61a6264c94c6ee386f0cb30243a030eb877862794da7518dd3a37939e27d433afb78bac8b68e6ce4c769bb70a8236
- SSDEEP 384:38RC5DFRs9go9Wo9C7dnRmU3z4KPLBxyx9If8A/mT+U5f9BZF9NEni6CAtBsUQiH:3N5hRs979nCZnY2B6Tuzgipn5dcT7LM
- TLSH
  T1C2F25C51CBBC8217D7AB2EB1E670C1061BBAA38A1051EB6C8C88F5DE1D677C1D2117A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  mitch/Microsoft.Bcl.AsyncInterfaces.dll
- Size 14KB
- SHA256 11c0e8fc6419910ace4f55ddd2330f1373704f996c32ae4336c3f11d589d2c34
- MD5 70d5e04957ca93f7db2a9a2f3a09ec53
- SHA1 885973b3cea40a9acebd90e8947ebe49ee4b1b54
- SHA512 44ab898ed2a7432b605c237735bbd9df6f2471d74680f23f85b978495e26e5c61b3a401cbf6ad55cfe8bcdf450810f1cefd2a3a70c2cc8007b0ba4a62a76fd95
- SSDEEP 384:bk8O0uMWep4oWfcyHRN7WEXFRS4lr2eLC:b/+1vzC
- TLSH
  T179624A51CBA85203ED73BEB0A2AAD8037C3DB7E35D61852E0455F6951C93BC5CB20A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  mitch/Microsoft.Bcl.HashCode.dll
- Size 14KB
- SHA256 cb9f8ef871353cd8129f44f03e8de11f862386ec25b52de060892b4930f640eb
- MD5 613ab56061adf2284e047025207467e0
- SHA1 f09e6253c5427e3fe1516c877c36065b721ac8ca
- SHA512 401dc22182f46430b645f3876417a731e7b8c5c68a902b4e9fa329822bc3ebe087735193f0a04d97dfca61342afe258d6efe4d07ca03c0ceed2b958e86d01898
- SSDEEP 192:g8KN42WV09fWIW65FdQHnhWgN7acWYXOyQrfdiqnajBCIWZh+b:1P2WV09fWSQHRN7lErol9bWOb
- TLSH
  T16D526A92C7B84603EDA33DB056E5DD673C3CA3D36810826A0959F5991C83BC2EF24A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  mitch/Microsoft.EntityFrameworkCore.Abstractions.dll
- Size 20KB
- SHA256 d761f4bb4c4b6825ed5f3b0514a0b28fe297f4e657a125f1632904b9ab7d9aad
- MD5 7a50363d9c12d207b07fe469e0202d09
- SHA1 1e1daeaeb0f47f023e8ad1c2ce149d64cbb3bfbe
- SHA512 5b05c6639d594181c92b85891e1437c4f6185c43bdade564b712f247c79bb32613003fd2706e3785639ab55c454f72a4356d96d7d2ac26ac47607bc7bf6e3451
- SSDEEP 384:v/sUQDUB4fKek+gXCAJKvGWxIdWWdHRN7EmT1IlGsde:FQpKTPXXDrrxJ
- TLSH
  T173925B55D76C8773CDBE0970A1B6E482693AF3CA7811E67B0106E15D1C63BC68B21B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  mitch/Microsoft.EntityFrameworkCore.Proxies.dll
- Size 65KB
- SHA256 a142098536c8e1c39226fddf8b951c7e10e474332c61711510eaf5695c142f70
- MD5 3c3960d00f508e125fd27742fefc6bdd
- SHA1 ebc30b68fbb66288af25121ef8a8f5c8af1033bd
- SHA512 08cc35460fb1b2e1d90ab3b0045073d4e1ae90236f1bfceaf5499fdd3bf77c37e5f73b0da78a39b1398ea731fa1813b92cd43da8bb7885119326d0f6ba5ed525
- SSDEEP 768:VKhk7Kdor/4Uemqncx2KIfeE5eZvkxURgvSy0R3VhPNC/DYhyTEv:shk7Rz4Uemdx2KEeE5eZYSNqDQyg
- TLSH
  T135633962B3DCC333C3DE4D7924649A0056B7E7972100EB8A2D95A1EE2A5BFC53650BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  mitch/Microsoft.EntityFrameworkCore.Relational.dll
- Size 839KB
- SHA256 aa7b7bf1a3299ac4a7faec4a0e3ef90f53c6b374edcbd52e703e2995b0aa5253
- MD5 bdf9dfc5c6866eff8ea90c53d495137e
- SHA1 3537c8f0a90b10de04187f56f7b1388dde39e86d
- SHA512 873919c6d11d79b866c54e7c274bb8ffafdc62c097a56235e73aab01f07c75733d235a3ee948ce24ecc4d55d57c7b00264b5e94d27266327e63b50fbd9a7f9d4
- SSDEEP 12288:OPYTaEhF73zMhg7FATMyaUOYkmswppHpp+pVp:dTaEU67FATzaUOYkmswppHpp+pVp
- TLSH
  T1E7055B5073A88733C06F327EA060C50C66F5E936E6A2AB7B77986DDB5D437C09D02267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  mitch/Microsoft.EntityFrameworkCore.dll
- Size 1.5MB
- SHA256 bda4d935d3caa1dee2b573c6067541ea642f32dea5c397720b820c8bd19af113
- MD5 2a15a27f4f1e7b9f882d2ce0d5fea5b9
- SHA1 d06909e7f80feb42a48b19a59090bb0a6ba96ad8
- SHA512 6e020a9fd97e40e9864c26f9757a19672df3efc1a38b8dd9f980dbbd7b90226a2cabbd87101d7720432f8ae138e85a6bf78c5abeb2f4f52c5b7a789097a1e482
- SSDEEP 12288:sDeRVZwavSA8XOycW6ieYxbRQU0DvUOqYea1uFE+g/kSTN9ahdoOQVElxGr4w67:SsqafFW+8OYFE+gZ9ahdo3VsxGcw67
- TLSH
  T1B0756D9173FCA72BCEFF4635A03004869AFADB5A1736E75824486BF56C977804D402EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  mitch/Microsoft.Exchange.WebServices.Auth.dll
- Size 42KB
- SHA256 10c7d1d96a7a5c6c0bc627de649927b1ae4caa2e58dcc89e24b1b7716307139c
- MD5 8d9cb15996a50a2b709d151712de707a
- SHA1 0cae5e971cf6adbea6736893d9c597658226d212
- SHA512 9567a9c9a4590d2e207eb65764cf439bfa715bf5511bc76ae9fdd5c4271f7fe02a2808f300de754ce3a64757d803ee3e7110e78334e1ecd3640d101470b54436
- SSDEEP 384:rsqtkCa+Aw8bc3d3NBR/j1WEuckK+m43vp5LEbbFKKQBKiJ/sCaJcZSB/EznJder:rhta+Wp5QbJtQQJc+wUhb8ikGHHlHMG
- TLSH
  T17F136B8197EC8263EEDB1AB0A5F4C4571EBAF3C75C11DB4A0C58E4E919937C09721A2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  mitch/Microsoft.Exchange.WebServices.dll
- Size 1.1MB
- SHA256 0fe8025b9a6e6907d0be4810fbfbc61f1aee3ba14e855bbf5c35f0f3b8b913ce
- MD5 98cb0ef1ecbb683d0da19a17b5739f25
- SHA1 3980b5ea292e6cd17e6717475ac1485960f5a6f2
- SHA512 4eda7ad281b80b05af16191dd4f27de9b9295fe7f5d015892ce2c0ff0d50a7382a5519ef15b7594d51d61092deb73d4bb4e522c74f6f0c352f4bfa8ff4e8c209
- SSDEEP 12288:2FF7rv+JctLcSrPdB99kaWT8Emd1OeMh8fISSRPtybnFBR2nMmep:xJOFcbg7dkeQ8wSSJtszR2nMhp
- TLSH
  T1B335171537EC171EE1FF1F79A2340411A6F9F92A7B12D72E0A05A69E2C62B40CC62777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  mitch/Microsoft.Extensions.Caching.Abstractions.dll
- Size 26KB
- SHA256 94e2eae8042487847ca3901f1223a8d8f6635e76da9ee8b1b3b5870597de7ff0
- MD5 1583c9a41d08644be8dfd88412dc3aa1
- SHA1 f7d2601865ec047f8bd1765686ef4915c2223417
- SHA512 3cd28f5d170d899e34bddfaeca94abdc430b9ae578c27b3cffeefcb8ccd648c6b0fe927c18e17f3a144d24cf5a28062bc7116c8b464e7a9293dc3745d83caf06
- SSDEEP 384:1NY+NykpvUjK0NHVWFeB0fKNr8KQZ9O0rBeTFzErbWi0SW+zdHRN72h/hl312bG2:D5UV9V0e4K1gZ9OKITFzErsSh25obrj
- TLSH
  T18CC26C258FF8C347DCBE2B75E6B0C4855D35E78A3822D71B1A4DE1D80C03B919E66A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32