3cb52d352b56d43bfed5ce4432b96e6650ff4d1483c15b0d7bde3f102985a69e

Sharing

Copy URL Twitter E-mail

General

Target
3cb52d352b56d43bfed5ce4432b96e6650ff4d1483c15b0d7bde3f102985a69e
Size 7.8MB
Sample260729-vv34bayclb
SHA256 3cb52d352b56d43bfed5ce4432b96e6650ff4d1483c15b0d7bde3f102985a69e
MD5 415322f6e788136595ce7ff12a720646
SHA1 9842f27c3720c7121ccd1c32dbdca89273575ca3
SHA512 8fb2b60a56b510f5cdfe5a9c14cb9e319e39e5246be0a81d8c59bc19d565fd24bcd5fc24fe1b640046f64ab8bf638dd1224668a12582401dd6afaeb4adc4305d
SSDEEP 196608:TcskY6QjUMQuraxD+kdecHayzBNJTyTCJBH7+ui9RzxgKNSG:TLkY6kfraxKkE8B3xyT+R7+uiHd
TLSH
T1B586337EEB403417D43F2134AB2B711F8E48069D8D145725795CEA2DEE2C284AD7CBEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Launcher — копия/Launcher.exe
- Size 50KB
- SHA256 536b02fb694b09649cdc6a83b01c3bb7a1f2d980d15b879c0939020fc4d78428
- MD5 4de2d1a3529526b8dbddee589f03ae2e
- SHA1 2db94929f26b45e389ca86dfe7680c8c3815fb5c
- SHA512 1249e04750353354223aa01f706fab731cb33ed4b49a4dd843f83c483d5c660c7503cedec4097d3f2ce82f41414ee1b8de0ad1cb1b4e6c880126167fa21e69eb
- SSDEEP 384:jJYx0p8ZF0ZUNm4B8dNX2AgPWllD/YSQeeGpbVSi8bDdEZIYU+yOBKi+7Y:Y0KrBcCalDQSQeeWC6eYLzKiF
- TLSH
  T1C933F8608B0D7808FE012EBA87DBCAEF92F5F4119C6646E8F54531485C71292B5BAF3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution persistence
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  Launcher — копия/bin/clibs/git/core.dll
- Size 19KB
- SHA256 588ebe90b58e89c164833f1b041c3faf79186f0be24c1b5f04ec63ffe2e06d5e
- MD5 5ff0908631d2a6c1ce26078019d284c5
- SHA1 c54445437357bba513c426519844f3b8e8e591db
- SHA512 35a97497aeae33d646a2d9a7c7676cb734e6520225192dc5835fbe6cb3c0ba865b28e3edd2cf159624dc30ace9300ca45a35535cce67d500871546634d7911b3
- SSDEEP 384:vuBc7SR0tAgN5/ZVbB/79/iek3ZcvlrgWCG/Bjl:HqaAgNT/79/Xkpc9/5jl
- TLSH
  T1C1923C4DE52A84BFE8A74634548DE22F39E76803C87A4F68EF8D624DCF9264012787C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Launcher — копия/bin/clibs/lexlpeg.dll
- Size 149KB
- SHA256 74544e0b06afa1452a82b7def951dc3488a5d7acfa674ee4b23b8e9344a0e401
- MD5 8abfe07ee81b0196e620e5f5e42610f8
- SHA1 a26b5bafe4da50222e7996c3db3ce6249067d15b
- SHA512 217b4257c717bd0a4847948d6574d27af2842d0685d84b4fe9c17151be6215bbf379c15eeaf38c4552d8bc486dfe4eaf8932fd2c0e1249fb115f83c5f79527a0
- SSDEEP 1536:FHGzjIgMbBr6L/qMQi5b4bZLTBy4PtG4stuk5zSZHECd/rqKMhxV3Rw9brSZGXuI:pSIgUt6IFVvBHP8uJERxV3ISsUsf
- TLSH
  T190E35B58EB0310F1FD2746B0416BF7BFB62655018B3A8EAED788CD81EDB2D931458B48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Launcher — копия/bin/clibs/lfs.dll
- Size 25KB
- SHA256 bdca5a47117d13c9cfbfc0e985aa9b67451714360dcc8ca213cbc44c572b3ac5
- MD5 79283d9392ca488442ee49aac7f9c69e
- SHA1 adf2e779e39d308bc21df6f294964e16fd7475ae
- SHA512 1abd00aa435e6c502c571a54a0f707f943c15c22cc81d57cad609de94da3f887db32b9fa1bc0d44145d344f7e6395e89a35c98f479ab979291669e8a0c09d03b
- SSDEEP 384:ehOzimwpE7n0QqdW62bbGknoBL7t2PpeKQehdUgEW:/mmmstryh2IKQCUgEW
- TLSH
  T17DB2FA0DF60294F7E6A3E074859AEB3F93985C27C13B5B7BFF0A864C75276A1641C142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Launcher — копия/bin/clibs/liblua.dll
- Size 6KB
- SHA256 589d931d2c443b24a6b0d59cb42939a52beca1019f8d12292f7db5c1f21b8ef3
- MD5 cdc2c8d18271695294c2805400809834
- SHA1 91bb2b238de045485f0599e5ed13eb72af2fcd62
- SHA512 50ebcaee3c8141a4c3d29d5b7ea8ded1cf389e3736a9dfc5abedae62e1f893a0399ca938382c4c635fd928997512f8365dff34bb95dfa70e2fa5667fbe333f66
- SSDEEP 192:WjtNgBjyG7Q+MmUlHXtz5I6+MfRZyJdDvnK23HYrcjD90A5O2Q:GNiyGzDvnK231D90A5O2Q
- TLSH
  T161D1530FA69230DFC97BA5F845A87105481C9442E353E9D8ABEDBCF3C74C019F4AE49A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Launcher — копия/bin/clibs/libzlib.dll
- Size 65KB
- SHA256 d482e05428d726057e49e385c2a0cd25dd94b07109cc288277bd9d159b57da31
- MD5 1596588c8b1ba3293d158365c056b05f
- SHA1 aac16819180e74bcc82357f50acf9d8ccbaa6d72
- SHA512 47fc06da5464097582bf276c3cc4918b81ef901f3b6b12ea2ca81a58bb60facc3f3ee0cdd97c978cda333169a8b549f78cea8da9d083051c87e0db05879b8c19
- SSDEEP 1536:aqaazr+BmCz1BRF4GXmXgqKilaVBFQ4nToIfzIOuIOUnML:aeiZz154GXm7KilaVUcTBfVcUnML
- TLSH
  T174538D55EF8746F3C8B946B384D3E67E8F71B0008C95DEE7C68C7658492732196582CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Launcher — копия/bin/clibs/lpeg.dll
- Size 34KB
- SHA256 9e42dc8a2dad79bdc3eb8690e05e5e28178a358354efe686de1e30ce8a398e6e
- MD5 31fc35ae942a03e104cd8e6a4491481c
- SHA1 49e317c16dd53fa936b8bb3560809d1df7fdc370
- SHA512 446cd2dbb95eecd2446107adecac7d6efdf1fa1cd465a5d445e49251184b5e5ea9e6554bdd0fa336a4deedd446852188e71a0eda61d0e479238ff4ff3b6a87a1
- SSDEEP 768:eQI7e18YjYWpeErNa4Z3xr5AFlsuUGMmlPSpDBki:m7DF1ErNa4Z3xryFlFMmlKEi
- TLSH
  T1CBF2D789EA1311F2F4534AB451DAF77F4B75D4014832CDB8DBAFA85AEE37EE08109149
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Launcher — копия/bin/clibs/mime/core.dll
- Size 22KB
- SHA256 909937d876e2a3da1366587e3dcb400c3fb5bbaaa9accafd16fa02145a83ebda
- MD5 79d10872fdf40b886a9fca773ab98c22
- SHA1 3aa1290269deefbc11c01c38967a9386eb7734ea
- SHA512 01d05ae64205247d663b6131eb5102b20c80aa39617ee7736c1c79bc42d55729934ff21a7344478bdc359c4abe1c88cee724bcaa6cccbb4a55e097edf7515482
- SSDEEP 384:/dhuukpugVjferKHwlOM7yrT32t6QvrZef5vDU5O:/md7SK6OsQit6PRvB
- TLSH
  T150A2E91EF30690F5DAF3E870854BE7BBD15C3C3285679776BF85B648E436A99680C402
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Launcher — копия/bin/clibs/socket/core.dll
- Size 55KB
- SHA256 79d3f231891738c6c8c01274d9f5492bb4e012f4e91814ae22261c5dcb943fac
- MD5 442cb08fe0d7e5195234432db7d93de8
- SHA1 129c0963f69a19a2cf2c06920ba5d4fa6d26e470
- SHA512 de13552917df015a92c6df6a9e936df77f00d74266a0a995e62f54e289e8ce1f11b2dd08aeb8e399fdcc144476105cdce090a9402f101f1a2cf0820afb3b7876
- SSDEEP 768:pRlxSHMU6nFFRq/38egRQjTsafa+pS8z+SEU1hD:bfvU6nP4UvRQH7oU1B
- TLSH
  T1DC43C90DF60280E5D973E130908BFB7FC66568258633DD6BFF5B0B0AEA27691981D247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Launcher — копия/bin/clibs/ssl.dll
- Size 52KB
- SHA256 614a8568c0a318464005e6810605f9265892a6ec302dd00ea2724e1c3f4789b8
- MD5 0b8536f069d607337678f9a9c1a23ec1
- SHA1 35189d3b726f73405197fabcdaf8fcdfa29a7723
- SHA512 901631807081b36a5f726fc826a90c20648e8d8e5988712ed3e9b0eabba3b5903d2a2804186f84d1f3c794fc6bc36c88d9dba7436d2fc1d27e2ac4fe5cab199d
- SSDEEP 768:DDwVuGe4c7HmICBXOdkujhPbE2bya+f8IUC43Vh1qvMUcZbwivK0pQ:wk3qlBXOdrtPkacU13DG4ZbnpQ
- TLSH
  T13533B488FF03E1FDEA678DB45097FF6F673916029C308C65CF48894ADF6A9E50108A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Launcher — копия/bin/clibs/winapi.dll
- Size 51KB
- SHA256 ca379f811b8aad64794b7083eb36c868c60e9350846f11dfb60af7b8c863dc85
- MD5 152c253395b206fb840240ab1e0a82db
- SHA1 46cfcfaa82afa71f7d24d5319098ec05ceb6a990
- SHA512 80922ef8e2e59a0efd7cb1af50bc95678de1c24b7300394fc6d30919ef93814053262ac0a46dadc54062399341a83be4d2b742aefbf0fcce4cada219bd3ec301
- SSDEEP 768:NYD/IttpTqFfgIHdjejSIEyKiJi/mcsXMSZS+OCaUFYXComr4YClF4x8ME95:NYKWKEyKisscSZk+IyCrt95
- TLSH
  T15D33B38CFB07E5F9EF53C53649BBF23F469A69058824AE70FF8D0249EE3355A1004696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Launcher — копия/bin/clibs/wx.dll
- Size 11.2MB
- SHA256 ca84fd36afa2bcabe60a3b68675eb2035553151efd6bc103481cc862b2055e34
- MD5 d94b478cc23c521ca797be7bdd9d41b5
- SHA1 9262db8d468ec71fcee0de68b9450ad0935fa8c8
- SHA512 0234a0d0ce41d58b0c4f907abf1d2a9878bf990cb5899ded6b5956e5cc3b69b14daf706521271d636725bc51538530e4f15a2858e6d2d9f66d438d07c516dcda
- SSDEEP 196608:87tgyQ/DCNgda9BLRyAshY/Kjts1WGTxKn4ZT3crkewFat8JtVHHmV4ZhjNs1slg:GMnjO245LtVBjcslteeqt
- TLSH
  T182C62C0DFA024472E973D27184DFE77F86286D398633895BFE0B1D187927A626C0D297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  Launcher — копия/bin/clibs52/lfs.dll
- Size 25KB
- SHA256 f42e38e55b170155697e3195463b371cd3b4f4eb2ab730a92d965afc21b337bd
- MD5 209bef5ccb0dab41a457df8632c48cf0
- SHA1 5a5cc617f480ed127b8ada3c958940a319614e8a
- SHA512 654858002a89834dacc4a02b072d5a05e77cc7e961727f3de2d00e7647d7c4d8d6e400850cb6b2e681cb64120c9887590d649de5ab1f7ba83f8f1a44a1576b55
- SSDEEP 384:+Rhb4EKfHqCG2WhtBLBUXh0vaeKQehKJgiv:khoKpBBO0PKQlJgiv
- TLSH
  T155B2D80EF60144E3EA73F074C5DAEB3BC2A85862C53B9B76FF0B965879366A1141C702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  Launcher — копия/bin/clibs52/liblua.dll
- Size 8KB
- SHA256 3d878a81e9512aee2ff44a3d9e250716fa562db807fcb6adb88f6fc3f9042c0a
- MD5 75d01b05da8ad77483d625cb67925cdb
- SHA1 0ca626d6eae3e80923e939787a68da1b7a29a153
- SHA512 5f505b8907ac54179c82c43e1e3200a5a7245dd14ec31fa00aaf7b2e788aa1531d71a7497f1df3be40adfa2a46c500308d998f1e9312fc8785ecbaa5c80803b8
- SSDEEP 192:bPGwezWiA2+BmJlmXYzEIL+BfgNu/6Z2SnA5nTloHY5cOD9015NJoGPWUQN:Cw1SnA5nTlo2D9015NJoGFQN
- TLSH
  T1F202730F6EF632EFF82A69F905A87105CD10AD42F352E8D8FBED4D37D440058A4AE499
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  Launcher — копия/bin/clibs52/lpeg.dll
- Size 34KB
- SHA256 b94be655cf24302d558198cc02c3603bc988054d8326b457b103162074e79f8b
- MD5 bbc7b806554b83a3d6f5c41529e361bf
- SHA1 c314aabd47172311bd0ee2059e71ecdcc924b834
- SHA512 8b456d7d0d47f2f09d3ad93306f3ac7af1335d53ced5e0901e08f2f5afbaaf9af640d4caad284f2fe3cb924a7d3cd9f5c8157bfc81f4935aa3a829b184d22166
- SSDEEP 768:rgS/AHJ3uCyg0D1q8k/ggCTSsum6i2emIAq0L5BgNzK:UxJu5g0D1q8ogHTS7BemIAq0L0K
- TLSH
  T103F2C789FB4314F7E95351B5558AFB7F5B7984019831CDF8CBA8A86ADD33EE0800D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  Launcher — копия/bin/clibs52/mime/core.dll
- Size 22KB
- SHA256 61d6faf5a38ac957b39338427ea022a59bdd88d4023cefd704c081c1cf24cc28
- MD5 6fc50320efa40dc7124444088367ae9e
- SHA1 3519c4b50d61b8bb8739385b5b9910987f3795e3
- SHA512 b2276f5dc311a5cdf58283fe63c5902df5566d74bb66fe3bf86a25607698e345b9c8675b0ab4fb85c2fa6efd5f39e55d26c1fed1ad65f040f7c1537f7029f279
- SSDEEP 192:whJbGMMDUNwKuKuUVTuwLdz+8U1KftwbJYY2O2m2s2D8NoElYbeZDJeDkkups:whJLMnKpuUVTuwLs8JHPB8NPyefeokEs
- TLSH
  T17DA2F71EF70690F1DA939030D45ACBFBD5687C32806B97B2FF89B718E976691A84C503
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Persistence

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32