9d1867a9e7317b48212f5be95f0885a50986b22472ccb6710ffa5089eb968c93

Sharing

Copy URL Twitter E-mail

General

Target
IotfiAcqEngine_win64_v7.31.0.zip
Size 47.1MB
Sample260730-ppb5raxfnh
SHA256 9d1867a9e7317b48212f5be95f0885a50986b22472ccb6710ffa5089eb968c93
MD5 70af642299b06d73eda803aef0e0a9dd
SHA1 8c52fada338b8ece226589a9c61d95ca42ec0fa2
SHA512 542451d46c00b51c3eb31862f2e8cbf5a2ad8940b736584f89ce10214f024dce775f161c03fef214565a9dd96e4b79534ac69ee9826924c4e870e23074bd58f0
SSDEEP 786432:EF2kfVjnDxGLs3Z+tDHYTlzl6srOM8N5vLSb6jnXNg2xI6CnbcPdm5KwCLaJPJUD:K2qdnDxx3Z+tDHYTNlHqBS6jnd1C6Cn0
TLSH
T1D7B7337799960C5FD163D33C98D1AB83489220A706C3FC7A58AA17973CD21FA7A5E70C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

pyinstaller

Malware Config

Targets

- Target
  acq_engine\_internal\81d243bd2c585b0f4821__mypyc.cp314-win_amd64.pyd
- Size 211KB
- SHA256 ab64835b63093c31975df2692756c8008e7ec190e4aa86f15a713bcc62e1d432
- MD5 2ff9d894ba5e8f7880f0031866203995
- SHA1 dd594003fb744f4b2b944e1b10b78a7026e72104
- SHA512 461ad7a749cc6131a77883de4108f20922d85618030f5f640da22e95df7db61fe358790e955204bd71efc873b726c130d71f9fb5193e91ec82718d8d19b43a1b
- SSDEEP 6144:B8O7Q321soEr5HXN1GY8DNExkP8VXaVHaT8fyFmiGJZMzIfAf1+mrlpL:BT7Q3ZH98LnYlpL
- TLSH
  T15324173951580061ECB74275CD67E453EAB2F222473192CF09E0CA761F2B7E5BE79B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  acq_engine\_internal\Crypto\Cipher\_ARC4.pyd
- Size 11KB
- SHA256 efea361311923189ecbe3240111efba329752d30457e0dbe9628a82905cd4bdb
- MD5 6176101b7c377a32c01ae3edb7fd4de6
- SHA1 5f1cb443f9d677f313bec07c5241aeab57502f5e
- SHA512 3e7373b71ae0834e96a99595cfef2e96c0f5230429adc0b5512f4089d1ed0d7f7f0e32a40584dfb13c41d257712a9c4e9722366f0a21b907798ae79d8cedcf30
- SSDEEP 96:nDzb9VD9daQ2iTrqT+6Zdp/Q0I1uLfcC75JiC4Rs89EcYyGDV90OcX6gY/7ECFV:Dzz9damqTrpYTst0E5DVPcqgY/79X
- TLSH
  T15332294DFE5499FBD9644234CA674E4AB076B2121B1223CF4370962E2F277D33A39786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  acq_engine\_internal\Crypto\Cipher\_Salsa20.pyd
- Size 13KB
- SHA256 15257e96d1ca8480b8cb98f4c79b6e365fe38a1ba9638fc8c9ab7ffea79c4762
- MD5 371776a7e26baeb3f75c93a8364c9ae0
- SHA1 bf60b2177171ba1c6b4351e6178529d4b082bda9
- SHA512 c23548fbcd1713c4d8348917ff2ab623c404fb0e9566ab93d147c62e06f51e63bdaa347f2d203fe4f046ce49943b38e3e9fa1433f6455c97379f2bc641ae7ce9
- SSDEEP 96:JF3TgNlF/1Nt5aSd4+1ijg0NLfFNJSCqsstXHTeH5ht47qMbxbfDqbwYH/kcX6gT:WF/1nb2mhQtkXHTeZ87VDqrMcqgYvEp
- TLSH
  T13E52191EEAE541F9FA2B81B588A3161EE5B9B40037A137D74320876A0D233D1377E799
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  acq_engine\_internal\Crypto\Cipher\_chacha20.pyd
- Size 13KB
- SHA256 a8d3bb9cd6a78ebdb4f18693e68b659080d08cb537f9630d279ec9f26772efc7
- MD5 cb5238e2d4149636377f9a1e2af6dc57
- SHA1 038253babc9e652ba4a20116886209e2bccf35ac
- SHA512 b1e6ab509cf1e5ecc6a60455d6900a76514f8df43f3abc3b8d36af59a3df8a868b489ed0b145d0d799aac8672cbf5827c503f383d3f38069abf6056eccd87b21
- SSDEEP 192:ldF/1nb2mhQtkXn0t/WS60YYDEiqvdvGyv9lkVcqgYvEMo:v2f6XSZ6XYD6vdvGyv9MgYvEMo
- TLSH
  T1B2521809EAAA45EDE9AA40B982B31E4D99F47504374177CB8371D56B0E233D2333ABC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  acq_engine\_internal\Crypto\Cipher\_pkcs1_decode.pyd
- Size 13KB
- SHA256 38e423d3bcc32ee6730941b19b7d5d8872c0d30d3dd8f9aae1442cb052c599ad
- MD5 d9e7218460aee693bea07da7c2b40177
- SHA1 9264d749748d8c98d35b27befe6247da23ff103d
- SHA512 ddb579e2dea9d266254c0d9e23038274d9ae33f0756419fd53ec6dc1a27d1540828ee8f4ad421a5cffd9b805f1a68f26e70bdc1bab69834e8acd6d7bb7bdb0db
- SSDEEP 192:/siHXqpoUol3xZhRyQX5lDnRDFYav+tcqgRvE:h6D+XBDgDgRvE
- TLSH
  T12952074BEAAA41A5E95B80B4C8734A1AA7BDB5042350E7CB0335D69E1E633C1333B7C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_aes.pyd
- Size 35KB
- SHA256 9524d1dadcd2f2b0190c1b8ede8e5199706f3d6c19d3fb005809ed4febf3e8b5
- MD5 f751792df10cdeed391d361e82daf596
- SHA1 3440738af3c88a4255506b55a673398838b4ceac
- SHA512 6159f245418ab7ad897b02f1aadf1079608e533b9c75006efaf24717917eaa159846ee5dfc0e85c6cff8810319efecba80c1d51d1f115f00ec1aff253e312c00
- SSDEEP 384:Dz2P+7nYpPMedFDlDchrVX1mEVmT9ZgkoD/PKDkGuF0U390QOo8VdbKBWmuCLg46:DzeqWB7YJlmLJ3oD/S4j990th9VCsC
- TLSH
  T1CAF22711B9A90B56EE910F72FB138C4BD6B1B821F396F17762A1025C340B1FEE5BB194
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_aesni.pyd
- Size 15KB
- SHA256 1f4288a098da3aac2add54e83c8c9f2041ec895263f20576417a92e1e5b421c1
- MD5 bbea5ffae18bf0b5679d5c5bcd762d5a
- SHA1 d7c2721795113370377a1c60e5cef393473f0cc5
- SHA512 0932ec5e69696d6dd559c30c19fc5a481befa38539013b9541d84499f2b6834a2ffe64a1008a1724e456ff15dda6268b7b0ad8ba14918e2333567277b3716cc4
- SSDEEP 192:wJBjJHEkEPYi3Xd+dc26E4++yuqAyXW9wifD4jqccqgwYUMvEW:ikRwi3wO26Ef+yuIm9PfD7wgwYUMvE
- TLSH
  T19F621A4DF69A40B9F69A80F4C8630646E479B910236177CF1364D2AE1F237C6367DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_arc2.pyd
- Size 16KB
- SHA256 94556934e3f9ee73c77552d2f3fc369c02d62a4c9e7143e472f8e3ee8c00aee1
- MD5 d2175300e065347d13211f5bf7581602
- SHA1 3ae92c0b0ecda1f6b240096a4e68d16d3db1ffb0
- SHA512 6156d744800206a431dee418a1c561ffb45d726dc75467a91d26ee98503b280c6595cdea02bda6a023235bd010835ea1fc9cb843e9fec3501980b47b6b490af7
- SSDEEP 192:vd9VkyQ5f8vjVaCHpKpTTjaNe7oca2DW3Q2dhmdcqgwNeecBih:JkP5cjIGpKlqD2D4kzgwNeE
- TLSH
  T132721B89FA6558E4ED6AC03881D2DB4EF274B55A175A4BDF1350023A2E36EE81F3C741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_blowfish.pyd
- Size 20KB
- SHA256 f348db1843b8f38a23aee09dd52fb50d3771361c0d529c9c9e142a251cc1d1ec
- MD5 45616b10abe82d5bb18b9c3ab446e113
- SHA1 91b2c0b0f690ae3abfd9b0b92a9ea6167049b818
- SHA512 acea8c1a3a1fa19034fd913c8be93d5e273b7719d76cb71c36f510042918ea1d9b44ac84d849570f9508d635b4829d3e10c36a461ec63825ba178f5ac1de85fb
- SSDEEP 384:bUv5cJMOZA0nmwBD+XpJgLa0Mp8Qpg4P2llyM:0K1XBD+DgLa1yTi
- TLSH
  T14C922B4CDC984599EE20863CC5878E6FE11FF5246739E7CF57712A890D06AE60F743A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_cast.pyd
- Size 24KB
- SHA256 1261783f8881642c3466b96fa5879a492ea9e0dab41284ed9e4a82e8bcf00c80
- MD5 cf3c2f35c37aa066fa06113839c8a857
- SHA1 39f3b0aefb771d871a93681b780da3bd85a6edd0
- SHA512 1c36b80aae49fd5e826e95d83297ae153fdb2bc652a47d853df31449e99d5c29f42ed82671e2996af60dcfb862ec5536bb0a68635d4e33d33f8901711c0c8be6
- SSDEEP 384:oc6HLZiMDFuGu+XHZXmrfXA+UA10ol31tuXy4IYgLWi:B6H1TZXX5XmrXA+NNxWiFdLWi
- TLSH
  T1B0B27C09F3A589DAE952C538D4178EADE075BC253321C3E78F9211AA2E173F5E8397C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_cbc.pyd
- Size 12KB
- SHA256 11dd1b49f70db23617e84e08e709d4a9c86759d911a24ebddfb91c414cc7f375
- MD5 20708935fdd89b3eddeea27d4d0ea52a
- SHA1 85a9fe2c7c5d97fd02b47327e431d88a1dc865f7
- SHA512 f28c31b425dc38b5e9ad87b95e8071997e4a6f444608e57867016178cd0ca3e9f73a4b7f2a0a704e45f75b7dcff54490510c6bf8461f3261f676e9294506d09b
- SSDEEP 192:0F/1nb2mhQtkr+juOxKbDbnHcqgYvEkrK:u2f6iuOsbDtgYvEmK
- TLSH
  T1F7421A4AE9A585F9F96B4178C4330A49E5B6B900374177CF0332425A1E33BD1373A7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_cfb.pyd
- Size 13KB
- SHA256 faa41385d0db8d4ee2ee74ee540bc879cf2e884bee87655ff3c89c8c517eed45
- MD5 43bbe5d04460bd5847000804234321a6
- SHA1 3cae8c4982bbd73af26eb8c6413671425828dbb7
- SHA512 dbc60f1d11d63bebbab3c742fb827efbde6dff3c563ae1703892d5643d5906751db3815b97cbfb7da5fcd306017e4a1cdcc0cdd0e61adf20e0816f9c88fe2c9b
- SSDEEP 192:NRgPX8lvI+KnwSDTPUDEhKWPXcqgzQkvEd:2og9rUD9mpgzQkvE
- TLSH
  T12B520708F7D404B8F96B41B9C9371A5E96B97548272167DF032051AD2DA3BC23B3EBD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_ctr.pyd
- Size 14KB
- SHA256 61c7a532e108f67874ef2e17244358df19158f6142680f5b21032ba4889ac5d8
- MD5 c6b20332b4814799e643badffd8df2cd
- SHA1 e7da1c1f09f6ec9a84af0ab0616afea55a58e984
- SHA512 d50c7f67d2dfb268ad4cf18e16159604b6e8a50ea4f0c9137e26619fd7835faad323b5f6a2b8e3ec1c023e0678bcbe5d0f867cd711c5cd405bd207212228b2b4
- SSDEEP 192:j0J1gSHxKkwv0i8XSi3Sm57NEEE/qexUEtDrdkrRcqgUF6+6vEX:jM01si8XSi3SACqe7tDeDgUUjvE
- TLSH
  T1AE620A0AEA9045B9F767427888724E0EE6FE74042352BBDF137592692E137C4333EB94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_des.pyd
- Size 56KB
- SHA256 c4769d3e6eb2a2fecb5dec602d45d3e785c63bb96297268e3ed069cc4a019b1a
- MD5 0b538205388fdd99a043ee3afaa074e4
- SHA1 e0dd9306f1dbe78f7f45a94834783e7e886eb70f
- SHA512 2f4109e42db7bc72eb50bccc21eb200095312ea00763a255a38a4e35a77c04607e1db7bb69a11e1d80532767b20baa4860c05f52f32bf1c81fe61a7ecceb35ed
- SSDEEP 384:9XUqVT1dZ/GHkJnYcZiGKdZHDLtiduprZNZY0JAIg+v:99HGHfJidSK
- TLSH
  T12543B517F76401E9E03E4B3404DB4B65AAA7A0E5227347A71F1566AC6EF33E13D72E80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_des3.pyd
- Size 57KB
- SHA256 238cdb6b8fb611db4626e6d202e125e2c174c8f73ae8a3273b45a0fc18dea70c
- MD5 6c3e976ab9f47825a5bd9f73e8dba74e
- SHA1 4c6eb447fe8f195cf7f4b594ce7eaf928f52b23a
- SHA512 b19516f00cc0484d9cda82a482bbfe41635cdbbe19c13f1e63f033c9a68dd36798c44f04d6bd8bae6523a845e852d81acadd0d5dd86af62cc9d081b803f8df7b
- SSDEEP 384:9jUqho9weF5/eHkRnYcZiGKdZHDL7idErZjZYXGg:9RCneH//id42
- TLSH
  T1F843B617F76401E9D03E8B3404DB4B65AAA7A0E5227347A71F19666C6EF33E13D72E80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  acq_engine\_internal\Crypto\Cipher\_raw_ecb.pyd
- Size 10KB
- SHA256 3e0d07bbf93e0748b42b1c2550f48f0d81597486038c22548224584ae178a543
- MD5 fee13d4fb947835dbb62aca7eaff44ef
- SHA1 7cc088ab68f90c563d1fe22d5e3c3f9e414efc04
- SHA512 dea92f935bc710df6866e89cc6eb5b53fc7adf0f14f3d381b89d7869590a1b0b1f98f347664f7a19c6078e7aa3eb0f773ffcb711cc4275d0ecd54030d6cf5cb2
- SSDEEP 96:R0qVVdJvbrqTu6ZdpvY0IluLfcC75JiCKs89EpmFWLOXDwo2Pj15XkcX6gbW6z:DVddiT7pgTctEEI4qXDo11kcqgbW6
- TLSH
  T13522F98DFE9149EFEA2581B985630E4AE079BB10175273CF1370962E1F663C7357A381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32