cd2670e6880a8d6bc7be924fd77ea426cc7dc87519940bad69ff354e237d54ec

Sharing

Copy URL Twitter E-mail

General

Target
TH-BYPASS-PROTECTED.EXE
Size 42.9MB
Sample260730-bk2b7awfkg
SHA256 cd2670e6880a8d6bc7be924fd77ea426cc7dc87519940bad69ff354e237d54ec
MD5 584fc458048d876ea9d83d3edfca8c18
SHA1 530085b2b983069e6e25a593ec2972ecf12e25f4
SHA512 0463bc89c12a6d770f44bb9b9e5410028facf4bec8924f950f0e0bf56f01e6c3cadfeab227ae6170bfb19ef2d664ab3ea54977c4a29d2c166358673583c5b7b3
SSDEEP 786432:m4o3Y3y14K/6wMOPFsi/xiCjGPMRrZQuTlDAQP+dTTt:mb32tK/dMONp9pZSulDAi
TLSH
T1FEA7239D8BCA4522D91C01B1AC03DF315E925EFB9CA4B917A0C3BC5F72F6C27AB15489
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  TH-BYPASS-PROTECTED.EXE
- Size 42.9MB
- SHA256 cd2670e6880a8d6bc7be924fd77ea426cc7dc87519940bad69ff354e237d54ec
- MD5 584fc458048d876ea9d83d3edfca8c18
- SHA1 530085b2b983069e6e25a593ec2972ecf12e25f4
- SHA512 0463bc89c12a6d770f44bb9b9e5410028facf4bec8924f950f0e0bf56f01e6c3cadfeab227ae6170bfb19ef2d664ab3ea54977c4a29d2c166358673583c5b7b3
- SSDEEP 786432:m4o3Y3y14K/6wMOPFsi/xiCjGPMRrZQuTlDAQP+dTTt:mb32tK/dMONp9pZSulDAi
- TLSH
  T1FEA7239D8BCA4522D91C01B1AC03DF315E925EFB9CA4B917A0C3BC5F72F6C27AB15489
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral1 behavioral2
- Target
  costura.dll
- Size 4KB
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- TLSH
  T1F791A51097A8477BE9BB0FB6ACB3534A4275FA61DC27CB2F19C562172C123180A31F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  costura.pdb
- Size 2KB
- SHA256 89b13aa6efbc0b04745a00bb5fcf05b7a4e3537095bde974ed3490a9cf582d17
- MD5 34b42a5776a3ad022b429124d55e576d
- SHA1 6c6000a5eaf8579850ab82a89bd6268776eb51ad
- SHA512 c24bf10e1d95a07fcd65c1f7841d2d4bdf25c5db02f5f4912286c8d6c077fe8bd3fc564cb249cb4ae01aed10889f25cc22a48bd9698499ed556560d0621a64f4
- TLSH
  T1F35193776F04C291ED9884B28513DA492B3047127602EE7AE9E51B05CCFFDF8077286B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  discordrpc.dll
- Size 81KB
- SHA256 a2ab51edaeab1d1a51f974ffac49fae83b8b1564cdfbf5f12cc141bc47c63ba8
- MD5 70d74b8dc3697128cb5725333a438616
- SHA1 0a9bee3f6079ebd230f3697f67a0674563661763
- SHA512 b6b4e760a13e519bc0bb7c65e8d1406ae3cc8ab5af2aef57be96f1ac0ec95f16ddf5bf885cc9b98578aaf6367204c1b67abd8d9bb3ee2521d5fd229b0d3eecdc
- SSDEEP 1536:raYfdPDrj2TV1zd2+t8eOW1PI6ZSyYRzhGF+PMTr+mnxXS4d:mYftDrj2TVG+t8fW1A6AyFfTr+mvd
- TLSH
  T18983F93023FC4A1BE5BF2B74B474611107F6BA663D31E38F4A44509E6E537868862BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  guna.ui2.dll
- Size 1.4MB
- SHA256 bf72939922afa2cd17071f5170b4a82d05bceb1fc33ce29cdfbc68dbb97f0277
- MD5 acec68d05e0b9b6c34a24da530dc07b2
- SHA1 015eb32aad6f5309296c3a88f0c5ab1ba451d41e
- SHA512 d68d3ac62319178d3bc27a0f1e1762fc814a4da65156db90ae17284a99e5d9909e9e6348a4ff9ef0b92a46ba2033b838b75313307b46ab72dc0aab9641e4f700
- SSDEEP 24576:0EYgGsL29WxSrDIFlabtrA8UCf4haho7pcHxvHOVSAF:0dgucgciQj
- TLSH
  T182655C8433E1DE97C40EA33DE0660668A775D154BB87E793427821BD2DF532B8D06B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  newtonsoft.json.dll
- Size 683KB
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- TLSH
  T138E44A41A7F88F27D19E6379B430890A47F6F80BA2B5EF4F5908E9A91C937508D40B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12