e7add59ff2a09d6e26275ada637b050a5773f8abe2211907cd58ad86dcc75644

Sharing

Copy URL Twitter E-mail

General

Target
Meccha-Chameleon-Tools-master.zip
Size 2.2MB
Sample260728-we4wca1gnh
SHA256 e7add59ff2a09d6e26275ada637b050a5773f8abe2211907cd58ad86dcc75644
MD5 73fa650e6fea4bc1515ae4158c752292
SHA1 f4aa7699da5a4cb1001adf95de4e98aba5ca5111
SHA512 7e3615950c076ee26083f3ecedaf19dd0c74d1dbfd340ff3ccff7bf7728efe74922baf0102a0ef0bc8697f30e45f9418e127375c23daa412f1fdd76036d7882f
SSDEEP 49152:JcYcIGYFP5G9H4f2Xudpfzl5VOYcIGYFT5G9H4f2Xudpfzt5VlFA2:KIG0I9HK2X4L0IGUI9HK2X4LrW2
TLSH
T128B533293E63C848D582A9FB740C8FC25661ED51F0A17981A9D5FF2A347B3C01D9EEC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Meccha-Chameleon-Tools-master/camouflage-lighter/build.bat
- Size 331B
- SHA256 a270045faa488c23e7b5267c4ce9168f808266b77eb7b7acfdf33ee3cf927586
- MD5 f7e3b2d3dd38d93acfb6425e3af49772
- SHA1 ea0d72f01ea7c8d3537118018ebf13b8d6740159
- SHA512 229752051a635897d6d7b1dd36b80d376fbbff09de6d52f75b0bdad7a3e24e217df821fa3141e8cee315d9a1749d30c336add2b81dfb66b63cbf5e0f302e34a3
- TLSH
  T1D8E02637B3861134B8943AD87EF123937102B0A323582D15A5AB10ACAA428D172792BB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  Meccha-Chameleon-Tools-master/camouflage-lighter/main.py
- Size 22KB
- SHA256 dce1981f27216a3586cfd0d0b21723aabd7f1f697d181cade8176fe7fc792ac3
- MD5 2623ace4d06a69bb8c539bdc677687a9
- SHA1 d18997c492a49cf72807804210b3fab4dd186820
- SHA512 18172ccd1ed1cf85da68d7354d4f762e1ae9e3c9cd754a6933beea7d61b5cf36e02cc6c6d78fc621b0d1e4fc83606a5585b98c2a45758404e5a1abe2149b79f2
- SSDEEP 384:kwgCp9UpPEGBTFVzbnF8h7+a4ih4M2UrlB4tTUQCSXebHC80BVZdxTisaALZqO:kO9GEoFVVs7+aTJro53ub3+YM
- TLSH
  T117A28566E9294CA68383C82A5D57F403671E3C07A90C1678F97C81A82F1D539C2F6EED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  Meccha-Chameleon-Tools-master/camouflage-lighter/native/runtime-bridge.dll
- Size 1.6MB
- SHA256 eee2599aec4c41fc6ee8f21decd1b400c483fa16b6dc124d8d74c312cdd5cd3f
- MD5 f7ba4a50030795bc9b23bfaf6003857f
- SHA1 19201a4913df0bfd605c3f66ae67286be04b3c97
- SHA512 b8dd29f667d79bab46c2f4cb464f46d11714be29391e22c267c0de70e54e7b1467a6b41c86c9086afdf3a42f4e01f5a900f2f2426688c31a02e780bf24258666
- SSDEEP 24576:RvFN4hHtiLMwRPTS8iPUX4Mf2y5zk0I7LGa3y5r3E/97lBxg:72hHtsBtX0UIMfXzkt3y5ruhw
- TLSH
  T113855B3A9689016CE0F6D279CF475C53D776340903B2A9FF0E9109A60D5BBE49B3BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Meccha-Chameleon-Tools-master/camouflage-lighter/native/runtime-injector.exe
- Size 277KB
- SHA256 6c6ab73e20e89025cda124fb185839935bb0f6ae1671560214d5860f8b6c494b
- MD5 69970f0ecd434e9fb7a7bf71b836b5cf
- SHA1 a2a926a2256986a15fc1d7abd6ad2ed221249605
- SHA512 700c6b9b50abd139f4dded3152cf8407c28839c4d4df886b1e0775a0047891575e1cbf9a9fda4982eda0dc403e8345ecb6034c9e292c55f8e762264af771c3b5
- SSDEEP 3072:Y6yvHX7q0ihVFfAhsdgig/zaJyK9grasD8POuoAXdVBh43CzLJRsxp7WU1NtA4Cn:dWIfAmOw2uXNV/CCxaNtANHGE+OR
- TLSH
  T1A0546D15F39518F9E967C13CC9528905FB72BC4647A1E6CF03A04AA72F276E09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Meccha-Chameleon-Tools-master/camouflage-lighter/update.bat
- Size 2KB
- SHA256 986d811cae9869d7b42382c21b21a7fb4c95d04435779655b4fd4c76cc6ff14a
- MD5 3ac5f221b65cbd3c2963c83d5cb00b32
- SHA1 9fcd1df68e73b1364077f820fdfef01a9f891a18
- SHA512 5ae23b06180ac707db3b01119c8acb4192839b227192ef2261ff675506d6e8d8085cae072f8204de2f214f5352624e61b9677de3bf5a59b4d618b572235cc99e
- TLSH
  T1BB41FD2B7A8C443224686FD77DA561C9770D90DB9254AE3CE853006CBA067E0A6F97E3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/__init__.py
- Size 1KB
- SHA256 1b28bfa334fb885915700bb2c7f1677cd151523012fca8ac87de11868f22d4f3
- MD5 a5244eea519f1b183d7aa0efa70b9f7f
- SHA1 87a6be68ca0a6f7a8f5dc4df0d538f7a6d640ae0
- SHA512 a9b6781d18205c3ae1d2da7dfce62ed57504a028bae26f66a8f295e33cd8092d4a58018259413c53795c3b07063028a04f7d35517ecf0f3561773a7f2f8cd7c3
- TLSH
  T127313603A85CA863D657D84AE192E0550F336BC77F216D28B2DCB3690FD41B484A1B59
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/__main__.py
- Size 79B
- SHA256 015d167cf0110d51e757d72f37e4cf97625259e735cac82f7b7768a03101a741
- MD5 14416f86d6568c7eb1272214cb0e0ce5
- SHA1 9de15a7a7fd2faa993013f37d30a38e8b7578e2a
- SHA512 eaad01e598a6c180b2bcad3ba379d0f459b973498a44b25ef6e097debe13da08fc559659ed03f08b3cb163ef9fcf43fd91a52ed971e2e7c122b7cf70f3b00e8e
- TLSH
  T1FCA02202082280828CE0F20EB0E0E08032B28EA32E20E230302008EF228B0332C00E8E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/camo_entry.py
- Size 1KB
- SHA256 e0ce87932a0a2787c5072309842e90dcceddddb840fb176d2b6386af47251dd4
- MD5 996c735a7991e15f5ca9b7262dc19401
- SHA1 b9825b3c9f530db163e9af7d9944894975beae4f
- SHA512 89082ebfebea3dece766f4a998e5ac7038881115e1f2d95f2cc4f80d269e2aa9cc6c766d5c46cbf13e50f2bc40a0613c910fc2c6a2f24aea7f3101d11bc6c2e6
- TLSH
  T16D212017842A68A36A87C96AB095F0940F633BC32F322474F8DC92281F88178C4A1AC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/camouflage.py
- Size 15KB
- SHA256 ef1e20cde0f63661ab756617a8f00d47c4326d69a2ef5fbcf576c7912b53dc72
- MD5 c65a5550f239b47741386148451e1daa
- SHA1 7a80947de1d9753ea3630251e7e070313ef97c19
- SHA512 2be4e093dcaab4051aa738291f7650916afe1e9bfc930f5c500dbe43468872ffb6cd8a66bfe1b28bd69df944eca990829d3e116487fb8ade9bc514b99ab7d812
- SSDEEP 384:9vIETdpNwV7Oga4Bh4LCROgGkr854Ta4iKVQA/4Lm:hVOV7zacAGOLkrz59/4Lm
- TLSH
  T163728657ECADD8978393881DAD52A4429F093D4398182D78FE6C81783F1A63CC2F279D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/cli_main.py
- Size 4KB
- SHA256 1b7ede1d9fc1565e275e5f8639b6d8a704fe8a360953b3f12a59cff6fbecfc72
- MD5 69a3348fd1f2eab657393fb3baf76d3e
- SHA1 ee7f423c266b6ed6ac2870289e5a453394177f02
- SHA512 d02af3def252436351a797196c342c8d780d352d6877aa67ee53ee6d256c276ff28645a5cf103b83bd9b37b419cf255d615f574d486bd7ea81f44f384fd4bff7
- SSDEEP 96:BaEnpNr9N8g6KCFbCESCqML6JM8tclg+0+gNJewmJewi/cS9:BVZtCFGUKSw9w69
- TLSH
  T111A11123682C1C6382938C9DCDD6D0115B672EC39ED53930F85CB66C9F9C13585B5BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/config.py
- Size 5KB
- SHA256 bbeca3e3089937cad0919f6b285ece81bc0be4e781acc77c238f47feb94c2e22
- MD5 c58fbdb72151a959c66f61dc5ff42cae
- SHA1 51b8b6ad294584266e135ba6fe8d12571756dfbb
- SHA512 7920fe610ae519242eaa9f4937f65541a856c0588b0e71aa094326751618a2f31c239254454444a8c950994f553737cb90f6d9d2d6a63b8ef2857859d0ca1ab4
- SSDEEP 96:DAvtrkq5CRjVze4+jQiQwCQXQa3pE1jCxk495gzTek5IHe2JDKz:DAhr5CR47bXh32ZCu4ngzNIbJDKz
- TLSH
  T1A9C17318CA48085B5EFBC4AF6C6AC5127F1526D393D12938F91DD2789F4E32981AC2DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/native/runtime-bridge.dll
- Size 1.6MB
- SHA256 eee2599aec4c41fc6ee8f21decd1b400c483fa16b6dc124d8d74c312cdd5cd3f
- MD5 f7ba4a50030795bc9b23bfaf6003857f
- SHA1 19201a4913df0bfd605c3f66ae67286be04b3c97
- SHA512 b8dd29f667d79bab46c2f4cb464f46d11714be29391e22c267c0de70e54e7b1467a6b41c86c9086afdf3a42f4e01f5a900f2f2426688c31a02e780bf24258666
- SSDEEP 24576:RvFN4hHtiLMwRPTS8iPUX4Mf2y5zk0I7LGa3y5r3E/97lBxg:72hHtsBtX0UIMfXzkt3y5ruhw
- TLSH
  T113855B3A9689016CE0F6D279CF475C53D776340903B2A9FF0E9109A60D5BBE49B3BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/native/runtime-injector.exe
- Size 277KB
- SHA256 6c6ab73e20e89025cda124fb185839935bb0f6ae1671560214d5860f8b6c494b
- MD5 69970f0ecd434e9fb7a7bf71b836b5cf
- SHA1 a2a926a2256986a15fc1d7abd6ad2ed221249605
- SHA512 700c6b9b50abd139f4dded3152cf8407c28839c4d4df886b1e0775a0047891575e1cbf9a9fda4982eda0dc403e8345ecb6034c9e292c55f8e762264af771c3b5
- SSDEEP 3072:Y6yvHX7q0ihVFfAhsdgig/zaJyK9grasD8POuoAXdVBh43CzLJRsxp7WU1NtA4Cn:dWIfAmOw2uXNV/CCxaNtANHGE+OR
- TLSH
  T1A0546D15F39518F9E967C13CC9528905FB72BC4647A1E6CF03A04AA72F276E09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/translations.py
- Size 33KB
- SHA256 18cedf3a7be00ad24020b463b295eef83bbf0aa155d277e75daf14bd51c5d8bb
- MD5 5c67bbef103011f8aa6ad0d9fe022e62
- SHA1 a3f09534bf93ae547a437348789226185bcf0a41
- SHA512 b5c54fa20a735a10833c9ab4e15b18d7e375f811d8cddf92e211fe424ef5ce7e710678ba3ba357082ea8ae76b463d20dd8ae0630a27c5c8a46914415e62725b6
- SSDEEP 768:++UzeZst24g7HFB+K9EoRtx7mweDegCsl71M31NCeDFk/pdr1YGam3otn8IKz8:dUcL4MfPEox7m8gC+RoTCeD6/nr1YjXf
- TLSH
  T1CDE2621E91244EFF04A7A0A5AC7F3BF7B7E604F3DA44B925E9BC106A2F5E464603251C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/ui.py
- Size 75KB
- SHA256 3d00fc0145abd76ad5063ba2dc3c2da49751715c46b19ec618054d4caad67928
- MD5 8b43bc61c14db6b050db93c73a2c6de9
- SHA1 7e29831c7501143b04347601dce7f6ac69e89646
- SHA512 f483b42e60210ba56f53357558c3e9b53e52e5b98b9a081b5fa91a51858036394561151b523e8c14fff94a55e71ddac2eacd7c5a57a15e34ecf28e7ce61fd753
- SSDEEP 768:KlNzoFZWzAYcj7uQNCMa26mOPLT5NxuPwvfLnJK3IqyUly66:KlNz2acFCkI3HTnJK4xUc66
- TLSH
  T1EB73D9774D1A9C539353C92A985BB903EF1B1D83480C28387EBC91685F9827591ECFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Meccha-Chameleon-Tools-master/meccha_chameleon_tools/updater.py
- Size 4KB
- SHA256 00b9b16cdbfa659adace0704caeecb7b8451a89bf560c0b9a60bcf136e2e6dec
- MD5 ce9241fff6c55f8a041b6ce432aac101
- SHA1 9a27eb9c4182b9930e5bc72255c13cbced5e70a0
- SHA512 c77fb85194e36d5964d72cbb297c3e609424e8aa54c3d026868d5e8b5407909eb024101423eccce2bc76a19f8713e9c94b4af409c4adfc72758520869c8ad882
- SSDEEP 96:icRXxDsUG0+mrzdjR3sEqCiNhlJjRiURmmmRA9UjClz+m:jRjzLzRR3sEqCiNjJVRmmwGUo+m
- TLSH
  T1F8A1A52BD4159A57C3429E795C0BA111B31AE90B1741DD383DEE822C7F5CA36C2B32EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  Meccha-Chameleon-Tools-master/runtime/scripts/build.ps1
- Size 4KB
- SHA256 a1346ef2254d38210eb3e70bdc7f363e892d3eef2d90d0820531463d73aa5eb4
- MD5 b2231b814e6bd5b2c33bd233b00bdf06
- SHA1 478f0a16018250b6d7616fd59887544aa6ee5646
- SHA512 d5a5df593f80f13faff36ac6a3492522e25924b57406d01417efad2ed170e33d4c9a935185e2b25847f4438c849fd1d841cda39a73095d753b0a79c4ad82e3a5
- SSDEEP 96:PclMAnQ8Y+wW+Qwc3ny3yEaqTQV8ZBk9yJhKjViDDt8QGTP:PiMAnQ7w+Qwc3ny5a6QCO9yJhoifqQU
- TLSH
  T175918518F8A5799325C161BDAD8A08D4784E005FC8081F11FA9C7D187FBA2BC4FB6B4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Meccha-Chameleon-Tools-master/runtime/src/controller.cpp
- Size 55KB
- SHA256 1d79d13c820a3d95e516fb04209c0d68812b64aa2508ab72ce15e5b43d126f8e
- MD5 37a9ca887b53adfbd3aebd9074c73982
- SHA1 1f023fb7e5ec2e6bf8548aa731ce302e9152f68d
- SHA512 607269d63f7070a5ec49360ada777ea7b32f0c78fce3bc1a5a2f1f3ea140e743a2528161a09b1732feb98d211cac8c285227fdb97d642b627d9c2e057235533b
- SSDEEP 768:6lNeE6AkFqeuMhUdf64z73C+lEUzfu+2ZC/EWZ5R6rjR33Bs:6lMAkkeuMhUdz7BlEEF2ZC/EWRAW
- TLSH
  T1D543A800E4F77C17169354B5EFA7050768918A43E3ACDEF0FE8F82A85F11224D5B26EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  Meccha-Chameleon-Tools-master/scripts/auto_fix.py
- Size 1KB
- SHA256 c21ea3f6ab99d150a5ccd66b902c04410c8cd4e79f2540136b99f7ac92fbe674
- MD5 049e918bc4020c61f3da5eb2a4264112
- SHA1 ac5f83c66bb1f13f199a561bf1c931e79ff6388a
- SHA512 59ef36a24190321ca4f8021a33347a916aac1671d0367e0d423ede488ff376967fde4ef17b9eafb2749fb11c4b1a437c5662104530dbe19932f2a45e83c9292f
- TLSH
  T1A04128E78B8C9D16F333430B1D8A735641822CC2165CD99C3AF9D84FA606EF566D78B2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  Meccha-Chameleon-Tools-master/scripts/issue_standards_check.py
- Size 1KB
- SHA256 454a8a60c1bde6fa7d3d1451cc60a41852b2f54a8569fd00170a377a944b4be4
- MD5 78ab35f33861a474e61fb88ec4b835a6
- SHA1 bff972048ce3c9c992fd069e7ad5b1f8ee897940
- SHA512 1175c961fb9b04e18d739a1d2a95d50964b12b79277cde99a551e15038b98ef565b8caac39ee46f5a2c1ab879c38496824cebde5fa7bb88f653df8cb5c476272
- TLSH
  T1E14142FED81C09AA475B41E0560840DB733092916F80E07D79D60B66B7CE936DC677AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20