172ca405f8aa3fca2eb9346c29bf98a609243ef80b94a1b75a3078da96de5f92

Sharing

Copy URL Twitter E-mail

General

Target
budak2.zip
Size 4.2MB
Sample260729-xbb7ladm3s
SHA256 172ca405f8aa3fca2eb9346c29bf98a609243ef80b94a1b75a3078da96de5f92
MD5 09f61681143ffaa6c64c377e52336fdf
SHA1 9f514a10d0461ccfbd7f1544bc9841520888ab41
SHA512 009284e8500f47f87f003854e3f4c7ebaa56211e7d5bd92de7ba15467289453059985734701842d7bb7965fe0058024f548c6c6a0dde78821dd3d83c330e555e
SSDEEP 98304:rHju6ihBpjQm2E1MUjzjBQ1XwRWdLC35sz2iLJnVrESu:mZhBOmD1MSx0+WRC30BOSu
TLSH
T16B2623D08E98C11EF40EE6B799052BFE9B9CE217E50DA00B0440A1E55EB3CB64F5A75F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  budakkakak/BuDaK.exe
- Size 1.1MB
- SHA256 4a835ee4bea914b2ead9f31b12b83dcab80e75a79125a0017f4cd354ff8ca3d0
- MD5 777dfa01ec8d66f8f9fa3914bd6affbd
- SHA1 c8ca67cac24f24e79a22ea70e2a4be6f9b696e4d
- SHA512 78a3b1abdeb6045ddde8bb73c8714e2dc71b00605251568131bb0099ca536bd47ba341e1e34e5073f12a2d4659889ef987bbbe9f5895503a55d64f57e903d76f
- SSDEEP 12288:dzuSsYc3IlQ44QSOPkET1ZM/Z2EmnC7A0A3F003D5n1RX:RuSsPIlyQZ8m1ZM/MxC7lAZL
- TLSH
  T164357D11C2D04831FCA017310DB127B13AB9BF15673AADEA12B8B9651EF2A415F6D72F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  budakkakak/MiRc.dll
- Size 4KB
- SHA256 d5818a7a53bdc86923cb6b23a15d0c3ec29579643bd9733e59c73c48c2999606
- MD5 e10d9a1685fc149a1e20373f79621204
- SHA1 b7e4f36c8c0c1c5e252def825dcbcdbf7b509183
- SHA512 96cfb1e11fc4c8f1075283a5ff40464bdebf9901602a403f12df64ef7c51d8bcae2ec858f4be3a4f744611b9fed6f8a4c0d7ddb26eeba1777fcf11fcf01a21e2
- SSDEEP 96:Kq5jGdJivX3ryrirLMSKfiLWY45oiFBTN9INT4sgn3wXJ3j:KSjGdkcYlGiZ46WGNTEg53j
- TLSH
  T1C9B1377E9D42090F8901F794602004E9E4E9EB9EB60379412BE61B9AFD78877517CB3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  budakkakak/events1.dll
- Size 26KB
- SHA256 76c347dedd263884a28ded9585cf12a62fb93be40c6d0333468f26054fedeafe
- MD5 ef4adbbd280c8ec035bf8e67c7aac720
- SHA1 a3a43007cc16a794f6d31c4b0ac4222634577793
- SHA512 a0102b61bead36d85756cd61875a9f5402961619632032b36eef6073f50ce8272e229eb6f3f1b5137fe115578e984fc933551468ba1b272acaa23260a152a706
- SSDEEP 768:m49l3jsUGpJAVMDO6p6pQAxbwNM5eZtw5eZ45eZhyWDtjT1gY:m49l3jsUGpJAVMDO6p6pQAxbwNM5eZtD
- TLSH
  T1CEC2100EA055279B00F39236EAC27779FB3B455BD10C819A381CB4B47FB4561B2F8E98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  budakkakak/mlink32.exe
- Size 76KB
- SHA256 d3bbaf713264d8455272fdaf5315d40dbcf3ee7d614bcf17dcee4dd8895cc0cc
- MD5 5e7606df59e9bf73534a486713f6354a
- SHA1 974613b84a67198b3638d30d702afe4c78d8af6a
- SHA512 93cbae41ae6395ed8e34db5691f9d6efe699971cd834922f40b67febdde7b6407d4c2805d6f8f7806e40902c6b422a9d55f234eae6466e48b5fca1bc8722ede3
- SSDEEP 1536:n5rOJsWXo7zHUHku4oPQUqbQGcG+e/dV1oYV9PjE:n5rHHUHR4ore/dV1oA9
- TLSH
  T130736B13B3D08131F49983B159B05B76EFBEFC609B7A839E8750A49E4DA0220DE1536F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  budakkakak/system.dll
- Size 52B
- SHA256 f59ec495b1bc7356a996d6779818ff887cc3b86c4967c8cc8a1995424cbc0fe7
- MD5 394b4e65db82f3e186033ea12cf728f5
- SHA1 9e83b655bd7f7f1f69f0ac05f6b7aef5ba7c2c7e
- SHA512 35ae4cc9a22d87892fbbf6e68e387a44b8f48b0d0700feca7622a91f042506ca957af1ac48b9eaf9228788f3a7d975ab918cabbfeb4751708cefb420561b425c
- TLSH
  T11390027C040542582C644455FCD50408B05156552292F6948A18481B1A8437975159BD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  budakkakak/system/icmail.dll
- Size 766B
- SHA256 2ee6462953747de1b7c074406b313f0ed16bb2df60915de3023ee04bee111b47
- MD5 d8976d3bcb18986c13675211706e45df
- SHA1 7f6119d0cc8e4ee5fe3b12430f31d0275e07c7d0
- SHA512 6cc0451469869f2b87e65caeb056c9476983d2b166a32840450ef1b39111cac4497e060e4a77c72e23ad53c8dbc19afe7c01c1a31beb594c3e212aa908057339
- TLSH
  T19E0122A2D08570DDC41E8E3468874FD59A622C654C10C4F755A0BDEF2E712D9AF131EF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  budakkakak/system/icps.dll
- Size 766B
- SHA256 acc4ec609c7b3d0d052be62fa9a7420a39c6b2b497d1b5418acc2ba96b35a578
- MD5 18968b410e0599f8c9a73ed75c0457d5
- SHA1 598bb3fea560958a79319f38cab998ffe05b5fc1
- SHA512 6309aaf24bf60d2405edf2f5f0a725fc5651047c5c5bd54d537cc492d7b5d78a43448bad2971d1e6713eefad0a446bca39e41765b54c976e09721bd03c07da2f
- TLSH
  T1E101924A7128571DF313247CC61B86A807548D07AB10ACDB39A2BE4D6E703C2E663398
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  budakkakak/system/icpsd.dll
- Size 4KB
- SHA256 42ef977bd6e0e5d92679543ca601e7f6966a6a6ce7d5d355606436f8a1d314ad
- MD5 2326b4a42b5e1934a1716f12e1aec113
- SHA1 a05496aea47f172a673a2bf64d9295d55a64c11d
- SHA512 6103300a359ef03f37e326cc741c75b9b143a95609b9a2082a37ace351ab8bc0003b68234ea76d7bb5d4c3f3efe852317c35f43d4de1e42b234e18edacf1d85d
- SSDEEP 24:R6lKtpjgugugutitguIewRTuief0Ilqauqqq+jSHqqHqqdRgALSdEtuQQ5F96Mr:AEB
- TLSH
  T1749110023C2ECDE0C80004348E4F9FA80934AE93F8009147E7B6BFAEE8BD301E14A21C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  budakkakak/system/sysps.dll
- Size 2KB
- SHA256 c1f34cfdad47b26d4b5ef8e8bcc29250744ab4ca9923e96898e99adae5d03b8c
- MD5 41b88d773b215180e2c1b182b79b2dd0
- SHA1 be3e916c50e2533ba0e51f0c41b4bf86f8ce072e
- SHA512 47fdde77468c57e9dcc5e374e3b629e984d8477e9bfaae0ee697a7e2b7f5e5aad4ea2c0337b8bd15bfdd59e2449ce9c7c3c78514b2798680a50c61ba4a483aee
- TLSH
  T1E85152F38A5CDB45D2BA060625ECB77B00A3FB97BD1C7A5236B805BE904519203F5637
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  budakkakak/system/system.dll
- Size 52B
- SHA256 f59ec495b1bc7356a996d6779818ff887cc3b86c4967c8cc8a1995424cbc0fe7
- MD5 394b4e65db82f3e186033ea12cf728f5
- SHA1 9e83b655bd7f7f1f69f0ac05f6b7aef5ba7c2c7e
- SHA512 35ae4cc9a22d87892fbbf6e68e387a44b8f48b0d0700feca7622a91f042506ca957af1ac48b9eaf9228788f3a7d975ab918cabbfeb4751708cefb420561b425c
- TLSH
  T11390027C040542582C644455FCD50408B05156552292F6948A18481B1A8437975159BD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  budakkakak/system/tip.dll
- Size 766B
- SHA256 be0e5351fa9a7d4e4ba65f8fd861e67db882fdeaf5020d199cbc91851ba92b1c
- MD5 98f750cca33576d054f93135da25740b
- SHA1 f5c2034c242d794606611831dd50cbae2b606868
- SHA512 9899f8457428818ee75d1853e7e061c6a5b6bc0d450d4cc9ea0b5e834fc960c80e069b789307d06047bb3dba65736a1caf1d9ead29773cab3f777857ffb2e512
- TLSH
  T132015E413134A11CC1486A320C87D5B06EA41DCB8A3452A2B2D47A8E3FA0730F203FFC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  budakkakak/system/users.dll
- Size 904B
- SHA256 5e9b61088579ad914129a9de0e65985a61b31a199bd76de845701320dfd7e3ac
- MD5 fa51bebbb4f6461b473fe2f0567b9cfc
- SHA1 45354a2a20a9e3e92cb06bb3c09c06a96aeb3f14
- SHA512 bb3965379177f6fa3922778b70c53ccc6f197a6d79ea763d571fadd4fcd359feaec6ef26d324e1bf344af9179ae3e9ba0a91974d729e23866051870d8c9a2275
- TLSH
  T1F011ABC1751164CE9C09B79391805596889E7321C95C3495851F7B34C1247C6DF77FAF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  budakkakak/system/variab.dll
- Size 8KB
- SHA256 7395f6df7d7bc1a1e00b8d854ad0f2aab267b9d8b200d88e2d256ec3f0a8a076
- MD5 892a1d9d9c1fd9f72b6efd784fe6f633
- SHA1 690ba69e488c0e3eefeaede998091f1e5bb8597d
- SHA512 83126fa7b2df67de2433d484930d7ffcf65ef78a0a067fb666364e9581f0607ae2c08e906a714eaba5250a28af23ab8836bf65669261a3156db98c2daf445c2e
- SSDEEP 96:lmDR4Gym8fgIpK7HGQnla9aF5Tvr7rg77RY2B6RrJT+wM7h9rV3VwtgNPGsJfWuj:UmdUIpK7HQ9aF5j3refN+IEgru4
- TLSH
  T1E4025F0ECF8B4D4A8201D79EE9981899EB9C7701469745E1F3EE1E9C0890B7B778CCB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26