c7a393ac669d02c16828706521833df06b690554368049545e47a1420fa8f04f

Sharing

Copy URL Twitter E-mail

General

Target
Ripcord_Win_0.4.29.zip
Size 16.2MB
Sample260730-vh8s2ace75
SHA256 c7a393ac669d02c16828706521833df06b690554368049545e47a1420fa8f04f
MD5 4363c9efd70e1233babc052d4dc79dbe
SHA1 e98328dbfb8c38a81a57d0614bae48f7ac6cce59
SHA512 d4d6a9434d3c38022d03ee5147b8cda93ad8bfcecf60168b34ace505512bd451f28c8c1986af3434609a1a8317cc1f8011f536bb392e0c07a5e2ea242675743f
SSDEEP 393216:i5rNIgrdAENXvKcUFj3xAGG7xu5V8/GNuOMf2r9keX8:itmgrTNXCcUFunxu5V8/GoOM+rbs
TLSH
T1EB0733BC597F312FA3371F395A926EBE70220DC695D28C68981FC2470BD1B9548A6D3C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  Qt5Concurrent.dll
- Size 34KB
- SHA256 a6bce08a881c445dc14a61fc3eae7e03ea84acbdba550093f6b4c70c870dfa6a
- MD5 6695dadced70ec673fba20ae0f8fa2b4
- SHA1 d695654aa5dfc633dcbe64229665b53fc1070c3f
- SHA512 3657db4d15558086cfd733c7d443b6e7a1886e65e6809774523de550c0dd8d10c1cd6109962250d1715348aebf9886f27d90c712375cfe6d1ee8eda90c0e6af2
- SSDEEP 384:wmdLqSkSa278FBHdB8j5gyL2NURfuJwVSg7j+TCkdHFR9M8LhZ3ZsHLEIYPnh1:wmhqID7GzW2SsgXvw9Fc0h1
- TLSH
  T1DCF26B8DAB580CA1E523C63598F10A1EE573B5906F72C7CF6249D12E4E277D1783A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Qt5Core.dll
- Size 5.6MB
- SHA256 f34a84ca66280fa26e10224b507389b5f4acf0984df7a2c4fd4d5a2927c4666c
- MD5 05a0cd2b60a85e24bc70ff9f8a4ae445
- SHA1 64d0444ee5d9a8ca4485885458e4fa6c52cfac6d
- SHA512 cdcab0c4398be912e341f206f406da2a10a945ddd9411fb654dac2d9dcd712b20c54e55a5b9cf8f9afb8cdce95906f1f17fd66df2ea64f85e55549aef21195fc
- SSDEEP 98304:d6yLwAtHE+lrjnJsv6tWKFdu9C3lkT74R7Hf5M:dTLlk+l3Jsv6tWKFdu9C1k7U7Hfu
- TLSH
  T12F468B6776A640A1D076C23C89DBC256F6B3B8111F228BDF225963295E337F0693F316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Qt5Gui.dll
- Size 5.8MB
- SHA256 593a74b1609fb30d684517d71d8a7512b4ff24aaf0b50a3baf6421c14cfee34a
- MD5 d0d79ecd435cd5062520039fd70e13fe
- SHA1 07d7295ff5de60bded3b3d8f561e9aa76786d4db
- SHA512 5697806c40ec8f1695be1bdbb29c85b877c69d15829bb4ea7cca9455fd514b95da63a50c1b2239e838cbd9aaf85185cc3a5f8f63870aaa47688e14b0178898e5
- SSDEEP 49152:Frqqq1h4SyiCOt4ka4CmkV5PDmrLB2bhFgzapGdQKLuaAzpq5228VJbu6n1zdYYv:FrqqtSyiCOt4k2nYW50uahIHc/g
- TLSH
  T1A4561886625A6262C977E27E875F052EE1F37852C3428BC348159B480F737EA1B7FE05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Qt5Multimedia.dll
- Size 702KB
- SHA256 87a6ab14e4246cec8e8dd50b24be9a9007560897c04b4b6f41996a33946668dc
- MD5 debabe511142ee6b7ffd561485c8cbf2
- SHA1 31bc074c37940694727fa7b94f127c72380ae1a5
- SHA512 8d6a254812eefce67500e0e207d11a9cba67229838ecb7333184d7304e618b44d5fc570fff6b69fabd758abb399e45df5d7ab76364aa34ad3a1ce2a037ee6471
- SSDEEP 6144:sp4aFL3Ihor2jVHc0X1zTuwLf+rRNR/sxL3+PBrCnBiblfo2icG/xwS47WRgmSSL:sPFLproV8inRb+FNR3x2zu6df
- TLSH
  T15CE43A667B258682C1A6D23D9987CA01E2B3F4404713CBCB6256EB2E1F677C57E3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Qt5Network.dll
- Size 1.2MB
- SHA256 26f09a3c47a235707730ace46c0f199fe6e62ff424e3e734764094bc2ba8d9d1
- MD5 cee61029aa5bc95b86c4efc0346c1bd7
- SHA1 91fdd002861dca41dd7bfe440b0fe33743632575
- SHA512 b005251e7e4e100c425cfb2c665112772f31d8cddb48a0b0e05cfd4064a40d40c3f22ca1eb3ca07c2c4ff926ac918a432f5c248cfcf5fe88fdc6bdee70bd2fa9
- SSDEEP 24576:W8FX4fJpETQ/gKG0g2YoSyju1z62Tw5KIAz14mWI5V+K80:W8FM4Q/g1f2YoSKu1O2Tw5rAz14mWI5d
- TLSH
  T107457B67B3654290D23AC23CCB46C607E6727001A766AFEB5229CF593F236E2763D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Qt5Svg.dll
- Size 329KB
- SHA256 ebb2bd7ca82b8a237931fabd932e31e4eb60c0c431cf9c411ce9a8bb47abc7a6
- MD5 db844e5b317082de2d660722e4114e48
- SHA1 c7ee1a3b2a23aaa2abdefd1d9cb28c3ad80efc76
- SHA512 734c05ea437f2a364ee61e0c960e29d89e818162a6a6d4f675a6a77cb33ce4efadd87dc3ac5ac9d935551466150f6a33cc266e7bda0f637416181b43e1f7bd96
- SSDEEP 6144:iqCO3c1c1zq7lu7WhkySGhrb6WsPrC/pppBQ6+SdEH/AsALQhPaaTlsnPyZ:+qqEbySsX6WwrhZ
- TLSH
  T1B8640897F3520986E567D23CC98B8906E5B3341043B3DBEF06268A563F136E2BA7D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Qt5WebSockets.dll
- Size 152KB
- SHA256 09cbc46589fa45c36883eaa793a3db38697e8d750c6316924c4874431fa6627d
- MD5 b5a883905368d547a554d6cabf5f3187
- SHA1 6f20b8696882b75a3961bc1ec7ff479cde1e5255
- SHA512 d833e5e3ba28877d7db1cf3282422356458817ef801d05afb416253bff508732b22dfcb918fdd89cc76412ebb0dc1abb293dfcb9267737cc03103a2ceb35b901
- SSDEEP 1536:A8gyyGrfNN76bE8orNDY/ilUzMEPBBIzFyEnS6QPRi2qMCMV7QWS60dQ7q+mY:wGag8YtYiEtPBaYE3dQ7qnY
- TLSH
  T1E2E3E55377A602C6E065C278C59A8242F77374449B229BDF532ACB3A1F336D2BD3E245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Qt5Widgets.dll
- Size 5.3MB
- SHA256 a5eb20e5f4dadc670e7670e0a7b2ed50f8dbae9624a1e5e17a15395c50933114
- MD5 62eff985393657453614b540bbac168e
- SHA1 94974ab63ecf566f0cfc818735c98156cf5fb668
- SHA512 96a24df542f21df58d59d8f16b2378afda5eff3b144f300786d0d23822e12e2901940d8f636b08fa97bf0559abd985cd3cde03746697fb596cabbece8d742047
- SSDEEP 49152:F/97GqvlDmA0uQEQjgH/iZptPin2+oXkJA0rB04v23xj2getW1Q76Bu506AlYQOJ:+qvlS06BWl0F1Q76Bu50TlIpVNhtf
- TLSH
  T139466C47B3A50281C16BD23DCE8A8617D6B270444B638BDF21DACE592F732E12E7E745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Ripcord.exe
- Size 5.3MB
- SHA256 12d62abb9ad4db43c2b9b1398acae66857eb6e64205364631a3d3bda0ff17e2e
- MD5 9ac4955766e14acc3fccf0c13ca260a0
- SHA1 44b31585bc375efdae13fa332c478a9dbdfdacbd
- SHA512 f8a38e461139f8cd0bfd7735f1c36f22c0dda41fc169255b2562e75422ffcdcb6bc3fd7702daa5049316aff7227cc3fe4f72ec46512d3f0c0cc98383a2de5189
- SSDEEP 49152:4fSMhaKQ8jCKeOEI3sPn82Du1HEyMBGX7+rVRxKJYv7ut1mQlihnIcRAaZG7ikNy:2FcgSZQXZwQ3VYrhD9EMCEwiARs
- TLSH
  T1A6468D9B73A501E9C17BC039CE4A4A1BE772B05547606BEB15A4CB991F33AE13E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  audio/qtaudio_wasapi.dll
- Size 96KB
- SHA256 a00674c78d6c62b5caefe95d737e78f356106cfd77a851a66e20954743adf9f5
- MD5 4006ce6f997782786374475f773bcc7b
- SHA1 6e04431cec3e5df37645b592c265122ad2ccad7a
- SHA512 850e889428bcf0e93c32b7b03ebfeb5a5c10c70d7a4387a039fe63ebaa71ea2f6c04dee340901005918557fd3be2870b76e25c8d4d91736bdaf4e8a2bf955432
- SSDEEP 1536:iyFkYUqxiPLPcAlodLC/9jrInVBkmvyy+Mdo53rDLXb27CQnj7MMyhqH4gRNn:iZBqxiPY9C/dmkS8MdohrDn2GaBRNn
- TLSH
  T161A3187A73B50484D427D278D9A68E5BD372B1A05B228BDF2326CA1D0F333C51E79E52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  audio/qtaudio_windows.dll
- Size 64KB
- SHA256 6a5e2d96ad3313e139ab0e541222703836a53d37c417f5e8d824a93711321a24
- MD5 1826280111f77361f3c6abeb3f818a7a
- SHA1 da72f5ca0e64232228b389a94878d75d82d00c1a
- SHA512 485295f76da896d1cbe801dd4228f08172d29c670f05d45dc4e38621d36f77e2d68b4add5d5a34e32c82a5a207530b42cd21c0cb007a83247bb6e433c9830d61
- SSDEEP 768:CaVFdw+V0rz0r9USifas78GN2LCCdd8SVPltcD/aRMvihDa33e3JrVWJgbmmhKJ:RFdwc0E94is7n6fJghGVGMyJ
- TLSH
  T172535B62B7A60495C0ABD278D5A70E16E232F4901722CBCF0375CB6E1F237D16A7C769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  iconengines/qsvgicon.dll
- Size 42KB
- SHA256 637f6bbe8b4f6627b624847d834f23bc8a61c123ef7128a051cf5f0812d5f79d
- MD5 0a61fd354d336cc8026810722cbe4dc7
- SHA1 614e9806c32729a7e8497c97600c9fec980894b6
- SHA512 61fcf94d4ebee3e177e2413da0271f909b3492fefe949e0b51a329bb0f21f69c6ba42ec60b71709eb400b214b71ccaa93df36ae3878218ca33ce89e2ce4f8ceb
- SSDEEP 768:CvRlyRceVy52ArhnsioE8lD62cTlchmgD:CXyWeVyMAFnsioE8lD61fgD
- TLSH
  T159136CA3A7570586D47A9738D8A94A1AD972B4110B72C3EF421CCA342F777E23CBC758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  imageformats/qgif.dll
- Size 38KB
- SHA256 24197b4b50b1014b23ef64f683dd74f50ed2c0e0ea36540d6b00325c79ecce1b
- MD5 60004ed6dac8ad7db8f29c0a2342aea3
- SHA1 489c35d77c6544ac8673b734ec7a0ab80411cb79
- SHA512 aa91c79d94437fc122410eb0bbca697957471926b0df4413d87d24405d8d4f7d92f7c23618c19b84c8a85cb7b5f0447d8a1866cd65951cc656a6a05f2539ddf0
- SSDEEP 384:771iG4vX88tlWxQvCHYtcCv7VReXfEAV6de2qyNPSy+l53Npw88rt0hZ3ZsHLEcU:0v88gYtV701yNt231eTp6hH
- TLSH
  T11E037B159BAD0492E4638234D5728E1FDA72F5609B61E7CF4352822A0F33BD13E3A76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  imageformats/qicns.dll
- Size 47KB
- SHA256 c57d25c64e53e5db28e879d7ceb1651f690e39471f349966df6b8a0c093b9794
- MD5 10603a764dfb9172738dc3ea6b5981aa
- SHA1 2c1cd2b33fc472d890584bb1e6165c9ee0cea426
- SHA512 0fcc63f53462ed8f34a6e66fd21d9e64254f175c90bc728bb941c191e73812629e0e4fbeedb2f8bdce542d01a97c056c1946bb7202475a3aa1cca392125be3ad
- SSDEEP 768:ANwGJl9pGnHNzo+taNENt8okXdv8EM+NWnkUZLJeLEbjht:MvzpmHa+t/soI8EM+KkUZLJew7
- TLSH
  T146237C13E7AA06C1D467C134D8A5466BEA32F8529B92C7DF0265C62D2F337C2387DB49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  imageformats/qico.dll
- Size 39KB
- SHA256 6a7a4a99e8241b658c327543920a6bdc3b0b6f6103494bdf861945ffd883e626
- MD5 1945cdb6106a5f8e9edde81ca31a84d4
- SHA1 f2d8ad87176a6d8366dfc1f9c83f6cc0dbaaa352
- SHA512 a04da76d1f58486127aa9a01d08c4377e4a53eb6c5ddcdefc174a9e0de24023feec38fcc771853861266f25b42e875cbea75cfd196eca55ddacc30f8fe4b34da
- SSDEEP 768:08vXf6bCJh9UitjZKGN0dDlonsyK8WjnuXIwIDuUXhp:0JGdr4M0dDlons9hbuXIwIRv
- TLSH
  T1F0036B66E7AA01D5E537C738E4928E1BEAB2F0519B92C7CF0261C25A1F237C27C39754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  imageformats/qjpeg.dll
- Size 237KB
- SHA256 3e9add5527fe943c2dc25e09a6b5c5edae1a4f7ad9ca3eca12e7930f30442534
- MD5 0a59ad431fbc0f306b72c227d01fe0a8
- SHA1 745f54da40fd0194f0e4e14f1afddd0fcf3274bc
- SHA512 248c3067a0274fb665b65b7d35a0d04a0aa8e509cb09547829642221581e021b1267e9eebad396f04456711ed4274a0141ae6859a3ec2454ab57545b280ecc94
- SSDEEP 6144:KAMNxNmCfIIoy8cdNvRNjgE/eRGFeOCh12+0ocAxWMPy2YxRGaI:9wlR8cT7v2RGzlY
- TLSH
  T1F2345B4277B02CC4DD7BC0BC86AA8A5AEB6174120718DBEB479086676F13FE12D7E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32