904d676f646f84dbc30dd9a2caeea0f3929b2b36dbad3608b9e25217875acefe

Sharing

Copy URL Twitter E-mail

General

Target
Tealex.zip
Size 40.6MB
Sample260801-vds7sa1epa
SHA256 904d676f646f84dbc30dd9a2caeea0f3929b2b36dbad3608b9e25217875acefe
MD5 e37f1120f76d77d3d31649e05f21db28
SHA1 acc5d451d031d66c0ada24632181fc2d85c16afd
SHA512 2de01f847dfd49520eb2d9e612baf06c0876fc758e829fe1f11fa5087fbc6aba2be6b2781a14ee152c8eb87c2d256a7a6a98bd0d74b2b0cadd73d7a76280c470
SSDEEP 786432:/2SY0siIWnvRXwkqPCXVRq5gBhiyacNEEuOnqVjpafbjwFDeTLx3qgmOueKm:+j0si1dwkJq5gS3y7ujpaHpfRqgmO6m
TLSH
T10197339C411FD4989C6FB8A2C18F25DB9C3B1E1522C6D88EF87C1AFD9046DC4F16BA85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Tealex/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Tealex/Tealex.exe
- Size 652KB
- SHA256 7b802dd96a0515a5770027ede7982b91ac923634c9f5b9c52df49b4d3585d74f
- MD5 8351ba748cebcb42fef157e6ebe257fd
- SHA1 30c1d9e9dfae8d38204bb36be9da153ae4290909
- SHA512 e704e250e3364c849e23ffe345fc49c3fcf14011bc917a0cf2979b5a1978ce1679357749a156c5870cc3cb84480d0f73f9a65001d78ddae627b6f4eac4aa7de7
- SSDEEP 3072:fwazAjvuMeUwZPRyYzK4IHcUIcLXYhepK2N:oaMjvuUwZpxUhL3p
- TLSH
  T1ACE4C42769AB30E9F568C238C57D49019718FC1A035C66EF7A2F05A26EF6E018DD7E1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Tealex/Tealex_Data/Managed/Assembly-CSharp.dll
- Size 22KB
- SHA256 3e11dd2e4e65aff29a590fb904e1713ea4068e37e2ba8f8f3f3e1c8fc57e2d73
- MD5 b1d3573a8891469d8f010727c5172b99
- SHA1 4ff75b9a514329f80802cfc6e95ba182e5fa0c4b
- SHA512 39ffd15b66e79e3620106c2beff681b24084db12b0f65f5bbc74298ade66876e66bbd26cca9c3397df179e15344ccc0fecd66df1611bc1de0d3345e82f7cd5c5
- SSDEEP 384:a/nU78zACpcD+hFwTMnrGFsPRlFKKFJHzjElz6mNejhNZLxdnGKz6kRFba:MnUgzACThFwMrVKKDcynGKzlW
- TLSH
  T19AA2096136B88677DDEF0BFEA9B5190563B0C6676432EBC91DC4A09D28633900B167E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Tealex/Tealex_Data/Managed/Autodesk.Fbx.BuildTestAssets.dll
- Size 4KB
- SHA256 04ba7018560f483c05a5aa0c66e052424aad88e6e9d5c9a33735afa348c690b5
- MD5 f107e1443f8f51e9da9b1583762d1e2c
- SHA1 69027bb5682202c7dc1b66b708ba622186d2a705
- SHA512 c22e83da14fedbe8cb4a86234e38441aecf410fd10bdce41238836ed5105ab60c5eba8dde3e37a9a31d2c40ed9420076bd1ad5da85207937c16f94958bf86d5a
- SSDEEP 48:6M+lGNK77Se2TRAP3dtn2bHtmfTZ+IM81qYJQLMt34/UKhkxkobMx2hbT/r5f1up:SnCe4Al92bHY8eIi3GU0kxkdo/5QTE
- TLSH
  T1B091A62B6BE41727F9BA4B725EF383622270E805CE52C73E15840659AD253500D31F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Tealex/Tealex_Data/Managed/Autodesk.Fbx.dll
- Size 4KB
- SHA256 54c9f153cbf2dd9e59a79ee846237446c85ff9e1781744123434f19354a2426b
- MD5 cfcb514f4fdf74d4f07a327c3ccd9d46
- SHA1 1803c7d5c1c7320961e63aa01aa4ed46e2db6cd2
- SHA512 e8f4d1b856e934ceedc43f6d42c87e10e396e63c4a090b2ca3f6db485239841d95bb0a1c4d77419ea707c4d2e91cfdcf666430ee3e8a676eca639819110f3d71
- TLSH
  T19E8141664BE84666E9B253B14EF3832262B0F810CE63C77F19841679AC122944F36F78
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Tealex/Tealex_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 618009319dbf3ae374f9b5dc0d0522e1e1bdd172200c120a5471747b7991a584
- MD5 7def7ed5d6858fc30d186418769b3721
- SHA1 8d69bfbef1a2d90cc5745409d7a817ca6f72421d
- SHA512 e4327d25e1f6f5026c4d023639044c2416140128dcfa656ebf25bfc54d58a16bedb54eb86f11f975a121bbbf827f5782d2d99bf2650ff63195032d5a848f8937
- SSDEEP 6144:rUjTQ70cnf8MoVRxS9iJdBF119RJXG2yW+Q:qEiH119RJX53
- TLSH
  T12F344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Tealex/Tealex_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 0c3e81771a5fe9657bea02887996de72606c3cb247e4fbe413f743f40e2af244
- MD5 40f620a74d28e56f8649a6d9bb25610a
- SHA1 300d4092035c43e0f43c2548bc58da93c0ba54f6
- SHA512 35df297a5c98a7f5e77c9b8eadeb55ad94e55c5e7a574889d6b9b8f86a4b4626d8d7ceb460bb9847e92b1535e6dfbeb65df443a0e0ab6e40b50dbffcda10a0d3
- SSDEEP 6144:tkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:tkwkYfx8ZNCxL
- TLSH
  T10A44281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Tealex/Tealex_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 04907729e87a101e62d3a5c93cfa16688bee745d05440d6daa0c541964be27ab
- MD5 66df027efa647f9ee850c5c6906fac3a
- SHA1 e6c852bcf82cd3db7d6427dc84ff07d4b57f6fba
- SHA512 23560090376e4be8fff6d36e09133298c8a0d642b8665e68337aa7414f5e08541f823f44132b5d8a15a18bf148862f6296b8b8597e4b0e5fe935c7234311289e
- SSDEEP 3072:7GHTFkizuGCOE/htnREcacWown5WJGL0MIe4gNe:7GHT5+H/33vJm
- TLSH
  T125C3F92563EC872BE2EE177EF8B515110FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Tealex/Tealex_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 a5e7d47313da0eca0b92a901a30498f5e970916faf63b70b74dd62b09760ed72
- MD5 d9b55597f3cd95e489c7e78648bfc630
- SHA1 0f77396d5112c253197edb6f768da159d8ce7199
- SHA512 e334cf4b537eba5bc70187344f6f6c86a617002d05f163defc473f4af9e44259f667562149e0e1f36657a549974e9ca37a16536b2151606958175ab7b8c2be4f
- SSDEEP 12288:+WK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+LxHzR:0l/umv0Z15PyC9vMNV1+LF
- TLSH
  T120354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Tealex/Tealex_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 498f14c37d83f946a47a79e01de777e62f269ee9c3820f2026b59ab1c1b9222f
- MD5 8c2c067820f8a65bc2ce9083d67c85a7
- SHA1 e3fd15a78ccf82a64dce5be2504751b1301e3bbf
- SHA512 776c193a2b103262255ec2a8e875fe8729bb915671ce60c8e32177ed94593730c0467a22701c6a5f6ab3051504cfaa0d2b9abea0068abeb70757cbfd3df99909
- SSDEEP 384:BEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxxsnRbli3ESmMadMkrVr5UhH:BcZC8Ll4LiMXkv2Y2Mcdrsj5Q
- TLSH
  T1BCD2C915D3EC4311E3B727B57CF951868AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Tealex/Tealex_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 427478545ce66b632414ca838088ea073f250ed16b21c70005f48cb571350e47
- MD5 2d303cc63c1eb12b0812489917224a26
- SHA1 bc68b585cd7cafa64000a9a1a2eece9c6ad95e44
- SHA512 e7601709ff16578a817c3f93a383df13a888e897514524af1002fac0cf750b1e4fc93b2f11905aa07c3d3681597b86a3ca24a344dceada644024b42da322624e
- SSDEEP 24576:iTy8NQuznGO4TiWB1V0Nt8OZUuhHwjpj5zuctRoOB4MbQ4cggyT:Yykz74VHV0MOZUsgoOB4Mbi
- TLSH
  T1A9A5185077FC5A16E5FF2B31A871101567FAFC16EB72D38E6508A17E1C62B508CA23A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Tealex/Tealex_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 e182e688223acedb8135227e8fbff17d5ed22f47f81141aa9cb96ef1ab9926fc
- MD5 a36cf6a05a337efcaf1c2e331dd108a6
- SHA1 69a93e6d652e4eb76ac9d7b2accd48f98db3fc80
- SHA512 5a3fabbae442beadb72c8d435b59cdf76b0827a4bf945eb7a504f1d95155625913a306e730a742168a4d73963da15c3dea09ff6f97ba4e1ad7cb48500780b925
- SSDEEP 6144:WHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NY7c/nENZ4k7cheeEh:WOtOmVsXjt/PicgEN/MGq4k
- TLSH
  T152A44A1077B4592BD5EF2B38E0B24968A631FC076B26E75F4681B62D1CF2B809D417E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Tealex/Tealex_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 84af394ad863e31407eb2b9555ca7e96a9f1966630f5d7f0eec54f0011f6babc
- MD5 7a2e074d4014bb474d80f5a7da025b35
- SHA1 85ea5a84dffafa4ff7752e9e9c2bd940d8ba2b14
- SHA512 b5ec6e322b0457911aae5b79ff7705753898dd5ef88fc70193abddf72b1522c0271b07d91429e3a37c42af40d61adaf04a4c945a519db0a723ece3fe3daeb28d
- SSDEEP 768:WT7LlB8tFJutlA/kUTr8yI32JVmugdQfwGHZgm5S:I7BBk8tlA/kVy7JVmugufwGHZgm5S
- TLSH
  T17C13D51043D48B7ACAFB4BBAFCB342264676BB026F37D3EF2605D2994E4374C4412666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Tealex/Tealex_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 2730d2a27f9362259a406ea14727e5f0a71bc21a6825be94f8623a84bd9f9c79
- MD5 942bdd2d2c33a816701aae86ec82c8a3
- SHA1 9b448861ff71c5fed9a2bf6720bfd6f601dda3d8
- SHA512 ca38f875392035fcdaf15f06eeb118b05d34f1595c481161706ce26cdc60150fa798e602d59456c49267c033c42859c006898d8373af48900b45736fc0659845
- SSDEEP 384:/PQA4DgKGRwrtLsWZRbli3ESmMadM1vz2a:/oA4D/J8q
- TLSH
  T15482602493E44315F6FB4BB4ACF7428686727D13AE36C79D298A135E0C227884D63B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Tealex/Tealex_Data/Managed/System.IO.Compression.dll
- Size 112KB
- SHA256 80421a67b4162a5f1b4aad6a8327c6d1fb4b04dedd39dae14a770b812594fae2
- MD5 7730f4f7ef9ea3a55d57d1358eb27e46
- SHA1 8b2d237010dd154174a03d5ccf650b4f48910a2f
- SHA512 18fed3d00271c0664854de9576d27b897f0abff80969962c3bf8754a259f56640c5cf4a8d89c29238339de7ab488bd17d049963550b30682805ae9f9a68ed0f5
- SSDEEP 3072:0/J3w/nNoiAvsJ0c4gY4gbcRiuT/+HuVB:0x3wPOffq
- TLSH
  T1EDB3391863F80757F2FB6BB4A87506510B72BD43AA3ED78D394459EE1C62B808CA1773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Tealex/Tealex_Data/Managed/System.IO.Hashing.dll
- Size 49KB
- SHA256 ac7ac3e83805b0b621c48b90543dc733c9a89106835278618357d6187e3da74e
- MD5 7964e7ba1ebab8f4ff1e4d26c0d9b83e
- SHA1 1d080de9c4471a931218c8ce345d72693b01b862
- SHA512 242799126b9d54774a54458fed5b1486324e08b53d2b23bd9a428a7a8c84f9b6213f53b60c2d8e81a16b75aceddecbd579495571d4c836d6da86d5a30319d38a
- SSDEEP 768:O4OmDRTgI8Px8K6efD7SBJxq08CY2KCu2F3xppbOJ5tj/1igFdPBWS18R9zN:dNBfq0ZKCRBppwR/1dPBWXzN
- TLSH
  T18F337D0673988337CAAE49396075A5164F75D3A73602EB5974C994752D033CD8A323FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32