d320a15a8700a7ff4fb69c3108fd3a4b324a7cc5de2cd04faf039b524cbcbda6

Sharing

Copy URL Twitter E-mail

General

Target
AgentOS-Beta-v0.3.1.zip
Size 21.2MB
Sample260731-cjg3laba87
SHA256 d320a15a8700a7ff4fb69c3108fd3a4b324a7cc5de2cd04faf039b524cbcbda6
MD5 cc6a5afa73c960300a694fc74a0318f0
SHA1 31ef1bc2fd0980c379129ca781519b09327ae3cf
SHA512 4d6f87b8e67fdec60b835ad6d04cff0c5d65a0b02810a8a934825bedde829ed18d6413f031d36ab69f99bf0368e627f8de71c5cc8c2d8caa8ef0cc007e741885
SSDEEP 393216:HIm9GU5YKKS2LFA6n6Hy9GEAHFJ/uEgGIp5Dmxv1+TtIioZK0VPgqwx3jaiSGK1s:HfoUt2LFAS2y9nVXmd1QtINJPjI
TLSH
T1D42733A191B744CB599F703D06DA0FE5B2C49BCB1922B4BFB7902294284F153F7E4A39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery execution

Malware Config

Extracted

Language

Source

URLs

exe.dropper
https://api.example.com/v1/chat/completions

Targets

- Target
  AgentOS-Beta-v0.3.1/Adapters/UI/LiveDashboard/AgentOS_Dashboard.html
- Size 16KB
- SHA256 a6b7a359ef3be201eb99df386bad182fec8f9aa5554b84ca7778fda717a7e388
- MD5 cf644df2ffcfa96443a1ad2dc50f5a14
- SHA1 d7b1b685a6faf7fc9223dbb6d829d059dbcd479a
- SHA512 1568203c0717a83b317809353074f0d2bec46dc453fd10a635d9de45fe2940490980626be8f1b0def838ff23717b76e9d733df16d80018c387c104b32a9f3427
- SSDEEP 384:vr45x9jh0jajcYkbSQTbhuP5k8Md4sye8Gp21pB0IahO3Fju4d28MGeWbGf:8xj0jajsrUMrp21pBPa2FaO2Pf
- TLSH
  T1E072C770B1B430779027D9C73E99478FB994D61BCC1B4391FAAD92908FC7DC6AE22948
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  AgentOS-Beta-v0.3.1/Adapters/UI/LiveDashboard/Launch-Dashboard.ps1
- Size 6KB
- SHA256 9d43d63c4889f8197bd58e6ff29934a59686985020b7925fe3b05031325f861b
- MD5 10aeaf6c51fdf0577a91c7a4a712fef6
- SHA1 37af47298ecff00300c30c8b59d79114c302fc1b
- SHA512 3514af14e710832e90a3f790b3a012fcfaed5217eed7a54bbde9b0255d48733deb1ecb80d357aa83a1549bcb34c02058350a28bb3b5eb47b63dde34164af7aac
- SSDEEP 192:SaPsAzAAGYJoxKKTMaqtiVKXVh6GF6OdTjzqgVg16BIO18qb9By5r4CdO8cnhhr:SCOUtdI6r+9dSnhhr
- TLSH
  T141E17549A585343BCBCF452F54C92325BF8A81A8E04D0ECCFEADC3906B7283D47AA5D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  AgentOS-Beta-v0.3.1/Install Mix of Agents.bat
- Size 326B
- SHA256 642fc991f30717df68999fb6b6bbce883f3a574468e7e126d9b32856dbf7397e
- MD5 504721403d6cf409c11f1f60f6bc27aa
- SHA1 7351d813340dc3ffcc29eb75c690b705b5d86de6
- SHA512 56e35ce329a6a42344f76bbd8924ac66d9c5aafe518aec7efaee6905c45a58c4005280b2838312bb8cc2af74dc1e58624a774a205759c7316a53b94f418f34ba
- TLSH
  T162E026133604B2A63A634B4B1AAF5D90582C61529A018E1870BF55B9A90E867D93B68F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  _asyncio.pyd
- Size 69KB
- SHA256 5bebeb765ab9ef045bc5515166360d6f53890d3ad6fc360c20222d61841410b6
- MD5 477dba4d6e059ea3d61fad7b6a7da10e
- SHA1 1f23549e60016eeed508a30479886331b22f7a8b
- SHA512 8119362c2793a4c5da25a63ca68aa3b144db7e4c08c80cbe8c8e7e8a875f1bd0c30e497208ce20961ddb38d3363d164b6e1651d3e030ed7b8ee5f386faf809d2
- SSDEEP 1536:VoxWFyB9uENvvAdAkc0TTILNPIasWxtISOno7Sysxg:ViWFyRNv4drc0TTILNPfsgtISOnoN
- TLSH
  T131638E83A3A0459ECD57A278D5632F67DBB1F2520A01478F62A8C14F2F6375247FE722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  _bz2.pyd
- Size 83KB
- SHA256 3ed0e5058d370fb14aa5469d81f96c5685559c054917c7280dd4125f21d25f62
- MD5 5bebc32957922fe20e927d5c4637f100
- SHA1 a94ea93ee3c3d154f4f90b5c2fe072cc273376b3
- SHA512 afbe80a73ee9bd63d9ffa4628273019400a75f75454667440f43beb253091584bf9128cbb78ae7b659ce67a5faefdba726edb37987a4fe92f082d009d523d5d6
- SSDEEP 1536:i2sz7yc51BVo1QX/FPI11IK1cDm015ssO687sjkD1ISCV087Syyxt+:dsz2c5eQXB4am05spd7MkD1ISCVzL
- TLSH
  T1D8839E92E3956AF5F81F81BD56C1036AE771B954075083EFF348C25A2F02F816DAC36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  _ctypes.pyd
- Size 122KB
- SHA256 74e0e8384f6c2503215f4cf64c92efe7257f1aec44f72d67ad37dc8ba2530bc1
- MD5 fb454c5e74582a805bc5e9f3da8edc7b
- SHA1 782c3fa39393112275120eaf62fc6579c36b5cf8
- SHA512 727ada80098f07849102c76b484e9a61fb0f7da328c0276d82c6ee08213682c89deeb8459139a3fbd7f561bffaca91650a429e1b3a1ff8f341cebdf0bfa9b65d
- SSDEEP 3072:CXw32spTVYgFoj6N2xE9sb7VFf/EkZBq5syCtYPU9pISLPTj:CgGEOgFoj68ksTf/ENs7
- TLSH
  T138C36C0B339400AAEBA34179C8B36E07D7F1B41B175183CF1294C69A2F637A76E6E315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  _decimal.pyd
- Size 251KB
- SHA256 b8221d1c9e2c892dd6227a6042d1e49200cd5cb82adbd998e4a77f4ee0e9abf1
- MD5 492c0c36d8ed1b6ca2117869a09214da
- SHA1 b741cae3e2c9954e726890292fa35034509ef0f6
- SHA512 b8f1c64ad94db0252d96082e73a8632412d1d73fb8095541ee423df6f00bc417a2b42c76f15d7e014e27baae0ef50311c3f768b1560db005a522373f442e4be0
- SSDEEP 6144:vnXBJvhy8AJOMg4hmRWw710z4ez9qWM53pLW1AW/ZJJJWtCk1mGc:ByJJOMiRW+10EHFpNc
- TLSH
  T11E446C17A2490CA4DE73807488979B57E7B278960360D7CF43B48AA76F573A323BE744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  _elementtree.pyd
- Size 130KB
- SHA256 4869325e5cffbd13d3cc02dc78226478adfb51a802b52ff65b5adfacff3511f1
- MD5 f89c26a967569f393e8e958c9127d4d7
- SHA1 ea09407004b2b279f9424c20ba555cfc8909f154
- SHA512 eb2090ed5e00ea1a1b7b0c21f27bab45ec271dfb8e16c2df07be16df12ceaa1f8d0e0430b0ed65e4945e443aeb5248b42a6448decfc4157a39fa2c3dea20f5c2
- SSDEEP 3072:z1VIT1f8995bcC5WgfQfd/N1/G+m4/V2CwaOlIS6fKd0:fIT1E1bcC5TqV320ICwFc
- TLSH
  T191D35B6B7261D4AFE4A2407896674F56D7F2F8620E0183CF6284F66D9F333423EA9315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  _hashlib.pyd
- Size 64KB
- SHA256 fd77a5756a17ec0788989f73222b0e7334dd4494b8c8647b43fe554cf3cfb354
- MD5 da02cefd8151ecb83f697e3bd5280775
- SHA1 1c5d0437eb7e87842fde55241a5f0ca7f0fc25e7
- SHA512 a13bc5c481730f48808905f872d92cb8729cc52cfb4d5345153ce361e7d6586603a58b964a1ebfd77dd6222b074e5dcca176eaaefecc39f75496b1f8387a2283
- SSDEEP 1536:JgHpgE4Z27b4ZWZnEmIAtISOIx7SyZUxN:i14ZeEmIAtISOIx7+
- TLSH
  T1D9538D09A69544E8C96781B8C8A35F57FAF2F1511B10A7DF0368C18D2F237C3A7BA752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  _lzma.pyd
- Size 156KB
- SHA256 7bf9ff61babebd90c499a8ed9b62141f947f90d87e0bbd41a12e99d20e06954a
- MD5 195defe58a7549117e06a57029079702
- SHA1 3795b02803ca37f399d8883d30c0aa38ad77b5f2
- SHA512 c47a9b1066dd9744c51ed80215bd9645aab6cc9d6a3f9df99f618e3dd784f6c7ce6f53eabe222cf134ee649250834193d5973e6e88f8a93151886537c62e2e2b
- SSDEEP 3072:Bsvkxuqgo7e2uONqG+hi+CSznfF9mNopXnmnu1ISZ1Vk:BnuFo7Jg1NYOp2uO
- TLSH
  T1ADF33992A394F0D5F6728C78D6624F17D7F6780A0320929A02CCD37D2B1FB759A2A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  _msi.pyd
- Size 44KB
- SHA256 54ab4e525854b0b802c3d303a0fed06e1d69e1139b62931278e2198133025f28
- MD5 0e8ae5a219f8cf03359f1ee4a02de69f
- SHA1 02b25046021b0f23846a06233178655f5301991a
- SHA512 d1ad21133aa033b43f65ce46f482349f8fb1f4445663c73719d31723cde67d54d840ff99207fd95f6f54a29be2b014cde8f78197e643e4e0e73f150fb9e9fd3b
- SSDEEP 768:KjO12AJvIskT9d2ErfPxoUAIZdeoLuM3mdYVCRnU5RJCuj71ISCG4o5YiSyvBAMi:KjEuT2OfpmGVCRnsRhj71ISCG4a7Syhi
- TLSH
  T1AA138D416B480455EA2785B9C8938F35E635F0D2476083DF23B0C29E0F62BC3B67E796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  _multiprocessing.pyd
- Size 34KB
- SHA256 3c34031b464e7881d8f9d182f7387a86b883581fd020280ec56c1e3ec6f4cc2d
- MD5 2bd43e8973882e32c9325ef81898ae62
- SHA1 1e47b0420a2a1c1d910897a96440f1aeef5fa383
- SHA512 9d51bbd25c836f4f5d1fb9b42853476e13576126b8b521851948bdf08d53b8d4b4f66d2c8071843b01aa5631abdf13dc53c708dba195656a30f262dce30a88ca
- SSDEEP 768:W1Rp7eiajKCQnAxQ0zdudISWtl5YiSyvUAMxkEk:CRteiauAxQ0zIdISWtr7SyaxA
- TLSH
  T185F27D53E6A40856D823C9B5E8935F2AE571F7460B21C6CF2394C14E0F323426BFE79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  _overlapped.pyd
- Size 54KB
- SHA256 d5f89859609371393d379b5ffd98e5b552078050e8b02a8e2900fa9b4ee8ff91
- MD5 7e4553ca5c269e102eb205585cc3f6b4
- SHA1 73a60dbc7478877689c96c37107e66b574ba59c9
- SHA512 65b72bc603e633596d359089c260ee3d8093727c4781bff1ec0b81c8244af68f69ff3141424c5de12355c668ae3366b4385a0db7455486c536a13529c47b54ef
- SSDEEP 1536:Zinr44gaZPXxCJ/+yZdDDrhISXtl7SyVxy:ZXJ/+yZdDDrhISXtlM
- TLSH
  T122437C06679004D9ED37C17DE4A70E1BEBB0B1965650931F62A8C64A2F737836BAF3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  _queue.pyd
- Size 31KB
- SHA256 dbdabb5fe0ccbc8b951a2c6ec033551836b072cab756aaa56b6f22730080d173
- MD5 b7e5fbd7ef3eefff8f502290c0e2b259
- SHA1 9decba47b1cdb0d511b58c3146d81644e56e3611
- SHA512 b7568b9df191347d1a8d305bd8ddd27cbfa064121c785fa2e6afef89ec330b60cafc366be2b22409d15c9434f5e46e36c5cbfb10783523fdcac82c30360d36f7
- SSDEEP 768:xOz+R6rbVKMoNpISQUA5YiSyv86lAMxkEzc:xjgbVJoNpISQUS7SyU6dxPc
- TLSH
  T1AAE28D83AE545C56C473C97198A35E35F972B7924B0183EF2224C15E1F323837BBA769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  _sqlite3.pyd
- Size 122KB
- SHA256 ee0e9b0a0af6a98d5e8ad5b9878688d2089f35978756196222b9d45f49168a9d
- MD5 c3a41d98c86cdf7101f8671d6cebefda
- SHA1 a06fce1ac0aab9f2fe6047642c90b1dd210fe837
- SHA512 c088372afcfe4d014821b728e106234e556e00e5a6605f616745b93f345f9da3d8b3f69af20e94dbadfd19d3aa9991eb3c7466db5648ea452356af462203706c
- SSDEEP 3072:D2dTrLbXVx7Qt+HEG1CO4w5yWrrPrrrrrrbEOyfgD/pWwb8tISOQAZ:qNVxMt7ZC5zrWgbos8S
- TLSH
  T153C35B67235400AAE9B751B8C1630B17DBB5F422573083CF42A0C68A2F777C76E7AB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  _ssl.pyd
- Size 174KB
- SHA256 a5d361707f7a2a2d726b20770e8a6fc25d753be30bcbcbbb683ffee7959557c2
- MD5 c87c5890039c3bdb55a8bc189256315f
- SHA1 84ef3c2678314b7f31246471b3300da65cb7e9de
- SHA512 e750dc36ae00249ed6da1c9d816f1bd7f8bc84ddea326c0cd0410dbcfb1a945aac8c130665bfacdccd1ee2b7ac097c6ff241bfc6cc39017c9d1cde205f460c44
- SSDEEP 3072:AHtmUArl7bOGLbfbmeq2wfq6XDQJsY2GvMe1ba+VRJNI7IM/H9o/PCrXuI51ISCQ:Ym5lfOGLbjBOq6XD4MejTGl
- TLSH
  T102046D47B5842EBBD813E4BAC1230913DBF1F015331257DE48D6D6460F17B4AAEAAB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32