3b1fa4d6b9318b717472753772fdbff5d8d7ec43d1e67f80d479ae15e62f66ff

Sharing

Copy URL Twitter E-mail

General

Target
DrawBot.zip
Size 32.2MB
Sample260801-xjs53stfph
SHA256 3b1fa4d6b9318b717472753772fdbff5d8d7ec43d1e67f80d479ae15e62f66ff
MD5 569762e92960d9a2406cdbad56e88b91
SHA1 f7852978d15205c2a3ee5279d3d4fca30c7b2ddd
SHA512 dcf26b714a699c6ff970d61346a9668b42a8f5c43c6639084b4f081b8bf1d77bf734d22385a2d4909e6b6d73cc0287b9e546a9fb3c05c1cdc351313df6f3b10e
SSDEEP 786432:DodHRxV2siPErOtGe6VsQZg6Hdvu67QSnabx8wkk:D2/V2sgOOp6VsQZg6Hdp7QSnayXk
TLSH
T1917733C1A6A25F97FC26F2BD806A8D08066C62376B45D107F90CC35A3F877D46F3994A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  DrawBot/DrawBot.exe
- Size 3.3MB
- SHA256 27ae2d5ceb6572f729f0d400155c5f9694ae479a8cb8d12f8708023fa55ae4c3
- MD5 64f9b8cce741f88b1e0d88cfdee49017
- SHA1 33edee5f698459c5bf5689299fe47003fc80c0af
- SHA512 424c24bff808caad3339c4bfa6e7c2fed51f1138889b72e77e03c1ce8d9531e677852c6d2f1e3b1118078d68575f45948d01b36edc5bddb82a4095abbf9ac5ba
- SSDEEP 98304:meNThtg1YtYav08quQw53bM1itjo2D89E4Q0:9hhcqepwN/tMo89b1
- TLSH
  T1BCF523317801D423C0F5063149B9C9B92C29FC766F3154AFA79D337F4A729E27A39AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  DrawBot/Include/pyconfig.h
- Size 20KB
- SHA256 7707b813418b72efd31dc52d2e4c0f541242799959a1ef72d7a24931ce3edf9e
- MD5 d0c477f63bd3a0b2d60ffbb6ce4be37e
- SHA1 ab51df267a97e95da36f7a4c8cefd7ceecf52119
- SHA512 9ffa156a26ba4f3a1388aaa8b47870c87070e1f316a73a3d05dcf0e736d3769d5fc77690958a59b4271a4da0c3def4775fd4e807e22bab3ccbf4c99bf1560a57
- SSDEEP 384:rG3tApdkHRMYURInMk/8BsRV4ig8as8Ji2MgsdgsXgDV:rG3tApWaSE+aPfZpV
- TLSH
  T14592212A8DCB32F64077D151620D2656D686EEFB425131EC381C9D0C3F35A8A96FE6EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  DrawBot/MSVCP140.dll
- Size 443KB
- SHA256 265591a709a5db413d73c95b538da321edeacb40059bdceb142f997a3d458b49
- MD5 eceff9c92e14b580ea84365f3d60f7de
- SHA1 00699126456379fa48cb122e21b7f4731a72c57c
- SHA512 fd325d77eb2c30e1cd1b2d871986e057318c1be911793521c7bf79fb2c5dc359cb7db90c6d6c5711fedd734b6b03117b8baf241dfbd78585cf55a25983ec8727
- SSDEEP 12288:y9vcHNFaPZ2Jj/gMvpbUUtQgTCZuGre6gIo1hUgiW6QR7t5s03Ooc8dHkC2esrVx:ytcHNa2Jj/g4bUUtQgTn6g003Ooc8dHE
- TLSH
  T162A42932BB424DB1F49E13B571C5472197FAFC2103A1E3C3A7DAE1292F656C26633A91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  DrawBot/MSVCP140_1.dll
- Size 28KB
- SHA256 b8cafc52b903ed0824882365b0a0d438460260b4ddf2487849eb3bd2241f7e8d
- MD5 7f71f19f30be3942ee0efddc145d459e
- SHA1 863048cf8a9692bf43317326c5aa918389546282
- SHA512 4fdfbc7524445eb443e189f64d9732c5c28ace689c9556b67c8f3647ba7f18b02521deeae4fb8138f5f550ee34efdb2ab2b6ffea3a43d184a26bdfce700b2dd5
- SSDEEP 384:ipMyA7o+HvwTgljud5u+NWc95gWWzc+pBj0HRN7LxlT3cyHRN7/Ujp9fl980:IU0AJsd5uceWncFv
- TLSH
  T12BD25B86FE684A53ED9B187022B8E943BC3DE7D22FD051D72A91E7590C923C2EB3451D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  DrawBot/PyQt5/QtCore.pyd
- Size 1.8MB
- SHA256 cc1c74b4022db036318fc45cecf3e1bacabca7c842d1bc1e57f877ace6a934ad
- MD5 fe92a42e4e55bacdb06b1d872001f61f
- SHA1 9c4266e31fa962e2c542dcace4ae008c29369370
- SHA512 a519a29781348a8a336d7d44549b5386cfb19dccb2eaf15c63ddbf4a3ffd5d09ce2bfdc8b6e831fcc1604f285c8a709804160d7e1198dc037aade7973ca8c9d8
- SSDEEP 24576:HxCZ0dFSwaQky7L+HVMulmPfj/2NYI7BzvwF8bO0+k22YjMuZH0yCqO0lh2/IKeR:FwRoxwDsD/QfZM
- TLSH
  T1B995D8C2D34724A7E8EC81B647538A2DC7258C48EB2D15F7E66AAD01D825EFB55383C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  DrawBot/PyQt5/QtGui.pyd
- Size 1.9MB
- SHA256 b72ab0481261d732c6740aca74ed75132a81fd58d8e6541c24d1ed4aa624d549
- MD5 87d27e2bc7883ec43cb5ad421c81f550
- SHA1 d37e48b6114390c3f1210232a5b0a8c06bf964c4
- SHA512 3e810fadc895c35b15240b1038331048b11af254b6ddc26b13d7afecdb8011466a8e1351c7e12a0c5eae5729b3982642e49d9054b9ad3c2b35bd93e4056e9c56
- SSDEEP 24576:XPPBLWeOwB2pHSXWsSptNT6DsuSCz1+TFVD1w:exTyjSCzkFs
- TLSH
  T1149529C2D366D467C8CE03F80B976A6B91359C9C7BEE62D396576A05D830DFB0634382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  DrawBot/PyQt5/QtWidgets.pyd
- Size 3.7MB
- SHA256 45552b94f45d38c17fcd6236b5562acf2a4021b02e3faaf870a3e14c3d39d02a
- MD5 d24aed6e42f8b4a664c11dcf7e1549c8
- SHA1 9390b6378e4e805c733ca03dc567731b7299d59d
- SHA512 26d87309f4d7ead2e0e0e58d50a84145a3707f4c380d6c0a281d606af5c799609d878fcb5f5c77e9c7bc94e97bd98dc70495da60ced2ca2fbe0bcdab6e715b58
- SSDEEP 24576:Sma+d8WJbCrTshTV2JFxtBCJTRsdCEsmM2IaUowpvdod7kAiulW/CAt2uk5QXRd:7JKPVssAvQ5gEP9r
- TLSH
  T1C006A6C28311A1F5E7ED807807A2A56A8D31DC88EB9C86C3562F5A25B535DFF493D3B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  DrawBot/PyQt5/QtWinExtras.pyd
- Size 85KB
- SHA256 97aa337055b87688b8ba16f799b7aac53a2c6f0a6fa2146f52193bad69c9683d
- MD5 5a742e43fa5a5f2d69a3ce9e1a80a477
- SHA1 e6d115938c870430eff29509a4c3f5ff0831aa5a
- SHA512 d93f92f0945add88d8f9f432d4f36705f23e709bf1bf72fd5c317ffa9f370b12178c8ad87948b81f34ed0945a2d275e2b0fa8c69d5ca4bcb1459cb830560c734
- SSDEEP 1536:Hnco6T/H7w0UymXQCSIJO6eEd17NwSsNbx5sU418K8TI82G8SGrfq:Hnco6rT3mXUoO677ebx5s18K8Tfp8SGe
- TLSH
  T11583E7C6A26741E2D2C980B46B925B69C616FC78FFCC11D34F179960DE72DF78838292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  DrawBot/PyQt5/sip.cp38-win32.pyd
- Size 101KB
- SHA256 5f64752ce9d321020383788a3005d31e8d7190eeb9a044b4b31ce8b249a401bd
- MD5 65b9c781582f42c743b63cf0c5f48a6f
- SHA1 f58affbda61bd7e83c1667df1ef7a493440f8609
- SHA512 95be2d186388c6f6583a4f2bb1be48bd3d23f6a9f57a2639526ab5504664486c27edb0ea448594478e8049daf5fc9593804051256d15db4097c59760dc9f654b
- SSDEEP 1536:oG/JCHdTDpZCsCYY7zcei9RiBu1J0cCtgSwECAz2EOfK2MPZeNpjgn1K6bEI7Fu/:HJxYY7Aei2Bi0y6bBpugZ4MIi0bDzGI
- TLSH
  T156A34A02BF9C51B1D4C984BD66A3473B6E2F25244F6269CB99EC748496701F3AF3E342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  DrawBot/Qt5Core.dll
- Size 5.1MB
- SHA256 4f8dc460162407cfccb1be6ef9cce45c4449de838aeffa3fd33378f01a3f9cc4
- MD5 7d180286e9c071c7bc3a6bc2ace792ac
- SHA1 f5947d69aeaacc8a378721f3750b049cc41dddef
- SHA512 9b30d5dd48e736da770e71622b79da294829621565cfc4d995ca31c8cfbbbe2d577677f4240e0ff2d995deeeb5f894018412596c141e8360dd77bf12596ce167
- SSDEEP 49152:q1AH+7g4QrRpvOK8Bbl+Gy+/LZsxRFNHlZTlJsv6tWKFdu9C/cPk4VHEYI9CV4eO:E5gje5lCjzJsv6tWKFdu9CtvDhgwcY
- TLSH
  T18746AFA17B57857AE5A2D270C8BA632F0539AD124B1385C7D39C370A4A746E23F3B707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  DrawBot/Qt5DBus.dll
- Size 336KB
- SHA256 b9bca43f52d5bfbf014d1c2643516b54eebb5b07d1dfca8f4c266628ef9d121a
- MD5 431e75dd83b3b2ff1954300cc7f43060
- SHA1 44857528ceea89420ffcca97558a655b0b10849c
- SHA512 d299b08393c5dd2064cf53ca52f2754ef16d075bf3c549a3ee212908f7537287c0abe464ea54528b370b554993981dc2ba7c47ca300d6aa8ceb21bc847069b84
- SSDEEP 6144:p7/XsDKD1OjnMFTZNgWoVEC8FMVU+SBF5h10xwSfdGX+Asf5YVJ:p7/XsDKROjQN5oVEvcU+SBvh1C5UJ
- TLSH
  T1BB746B96F5C200F6F08146B768AE8BF7D4BDB10047D187C3EF195E5AA8912F39A39346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  DrawBot/Qt5Gui.dll
- Size 5.6MB
- SHA256 80016776efea2b2a838c3ffa4c82e5f146baff68c36073c0c34668809d1c4297
- MD5 5b0f3d5b1b29b5e650375093c7afa243
- SHA1 1920cbc98bd46a3a72bcfb45caefcfa2649a92e6
- SHA512 9db9a90ab5a1a768e079cf9b10f1da868ac7dae774e90e139ee047c9c8fb43cc5b3e01ae3724ea74efd64409eeeafbcda4f04da3e86265575a3831a4fc69cc8c
- SSDEEP 49152:FKUDGaBVW3sDAPNaiCZPcSnt8KQ6oOtA/tiG7WwjrAxLXwQ98vd+hc0WM66fL5cQ:wUKssPdOy/tZWnXThVc5tnB6NDrd
- TLSH
  T15B562BD1F18671B3C962D2BB270F623FA076A956C30483C3C6996E9558743FA0F7B906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  DrawBot/Qt5Network.dll
- Size 1.0MB
- SHA256 37275f3ea79d15a2792bf21f71f1df825f201cf8b33aa1f94ca93d62d76b216c
- MD5 2e3db1cd1ec59d08706438258e86ea30
- SHA1 bc20b1e40049386e6bea3f448a6852bc879a8821
- SHA512 0c0e0e02ccadc3f2b3f6c8cbf2c162fb73734b0b244c80048968a6fe268450a270a3f92b155daf6268fef246d26ad417e6cec224133fd66e6ffb3a5394b04358
- SSDEEP 24576:Aul0ktv339DOBVXaIFP698DWk7PVmr0qwjb:A8sJVWAcwnH
- TLSH
  T1BD256C92B786C0B2E84481F5455EEB67E53DB1388B0666E3E34C6FE2D151ED21E3F182
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  DrawBot/Qt5Qml.dll
- Size 2.8MB
- SHA256 e45f26ebbc2b0499e0e90f1666fd13f1bb2bed1073e828d30b6a3a70599d4bc9
- MD5 7cda5037206a57cadd50b5f032876a8e
- SHA1 314b671b27e9602a66396ec37bdd6e70bb180d92
- SHA512 1450a79b017b4809c83c2fc4ef53df926e3a725959b6e378c5a55c853d2151a2ba70272848962931c58596fb4174601e3defedb120fd0a211d57be9d1908ee3e
- SSDEEP 49152:grHpbRcgtgEgnLDYZeQok3e3QiBMKbjcbKYI1YLTFXrwWGw6cTWptNrSdSG779LZ:ARcgOnLDYZeQokwuT5E7NrSdSG779LL9
- TLSH
  T1BBD58D83F2C304FBDC429274589E6B379932B51903659BD3E788FA8EB6316E1593F181
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  DrawBot/Qt5QmlModels.dll
- Size 341KB
- SHA256 065c8d687dc74964123f4bb06319565b163b164ab09dadc1eb6929ee19755735
- MD5 78e8091feb2e6ce5646459db0ea9e465
- SHA1 1731d2d47cfe21394f208f7baff7ea1f2e702546
- SHA512 b3fdf745336c7473b9afa57432379ff32ca5105eb956779da16de3cd55453af54e1420e5f514a1bd9f78107dad4ef719089640cfd0f144d8b7a36e3e39e319d5
- SSDEEP 6144:hX6wb2uBTVgttAC/trZYzAZpebGUvteg0NYMr7XPqfQ3G/7fOTvFmqi9:3BVgXt9EAUGUQg/MfXQ0m/9
- TLSH
  T1DD747E82F26280F2E8C547B994596637D67DF10287D1DBC3D788AE8961A12E31D3D3CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  DrawBot/Qt5Quick.dll
- Size 3.3MB
- SHA256 5f246016691ff883243ee9b3c9215eb16b859b12aefc5f4bbd2fbda3911883de
- MD5 07266e7d049ac4499f34ce281f3a50d7
- SHA1 257968090b95fae67f92f82db9cab1f7613d75e3
- SHA512 d7f9ce2fb11de178d6d38a5580c503c21fed6777067b8a8259f9fe35b44047040b705903db4ed3fbac821806cbd5ca1db0f5fcbec68cdc49282dc0e63a3257c3
- SSDEEP 24576:wLAgn4tj+U6JL9iji/2LzruK/bEdKUEAWzeauejEM5OmTi/bIi6+LPt1rt83FCbW:zT1HZEHr7OCsKbKzVZPXMC0FEUO71
- TLSH
  T172F57C54F2D381B2D881A279186ED7239539B0904F0956DBF3787F4A66322F21EFB385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  DrawBot/Qt5Svg.dll
- Size 257KB
- SHA256 ade28d4cbac1e033468cb48f380352f0df7fbbce03261c48827b8a5ed7a1548e
- MD5 ef0d5a2dc1d7a921f2bb0eb3eef2e481
- SHA1 cb167ec49221ec5245fd9bff7e7eed6c7cf38d51
- SHA512 ecb41cb9bc4a4470f039d02441a0c0e8c596ffd55deb924e516c4c8fc880357d5d2d1ef36e63b1303faa7dac5c921679a0f405c39f6e0b32b3746c972653b789
- SSDEEP 6144:71lj55OgW5ODJ+bXhE4o+K08LJw8Rk8bOvR1yGaucmSJyUIEDv8ma4y4GeO43iUM:7bJ+bXK4o+K08ROvR8ucmSun5h
- TLSH
  T105443B52B2430DA1D08AD378295F2A2B9D3BA146037DC7EBC3CD9D2998253F15DBB346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  DrawBot/Qt5WebSockets.dll
- Size 119KB
- SHA256 b8f83f5e56622afcc257fa6883ad2ddc24934f21619037ddc637c691acb80f33
- MD5 60bf6b69fb580b6f719394aa8277503c
- SHA1 cb37baf5b1648b805a07e0dea59c3a0a65345835
- SHA512 64ced39966851953b5acb6769da72ad6ab19e2d42515b6abd0f6f1edc621137e0451604e5ef95c228065c54463d2ad4ba0707984aa516fef6f8c72d04dcb94d9
- SSDEEP 3072:v2w9BY91mB0E7PH4r+/yr5Cmwk7FyM0DO2:v2wPPHwhwk7FqJ
- TLSH
  T130C33902B29152E3F0E182BC0989DA77F737F1288F4186F3B715AEAE54527D69C3D681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  DrawBot/Qt5Widgets.dll
- Size 4.3MB
- SHA256 600285754e7eee7239b9d252dbed5c9d2c9c4c432751b8953dcb2e8b45e0408a
- MD5 da70580648a398ab1c5336ee9ec631ca
- SHA1 fa67a8a2d7f7930a45974dcb7a12e56914bf0a57
- SHA512 83d85df1717a5b1dd5b31f5ab33e73d1442027a719af7fdcd20d578598f436d63e7cf58287cbe34dbee8d5b0464a68dfd471d8ec6a95a3168eb8639864a7adfc
- SSDEEP 49152:ypo1FNXS+dh75PMvZZNNt+iIo5uL5Sdbtye6cEu0n:oIPqZZUfwusae6ju0n
- TLSH
  T1BD26AE82F3C240F9D889E1790D5EEB63C575F1098B0992C7A7DCAE4665683E01E7F287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  DrawBot/Qt5WinExtras.dll
- Size 197KB
- SHA256 3db3e1e9a3bda8302aa6f177591feca2e04dc9a336459a25f160c3105c9a03fb
- MD5 87c5dfc5b38eccd303abc7880fa92123
- SHA1 aabd6e39defd9aed5986f90c079869df9a977306
- SHA512 9a536d69ed7ae83825b87960c710507e117694e7fc2867675be982e047094cfa5d2efd4fcbd6704606f6cf12c1fd745661dc9824d05eae7fd83c3aa6d49b3770
- SSDEEP 3072:W7B3LXHsaM6URaWba7e6NZtFC2Hvhductw+aZXoxtqXGeot+e:WtTsP6URaURQZjCcvVtw+aZXwwre
- TLSH
  T14C14CD5670E998BAF04174BB9F88E2AEC71BB1F04BC3699B77369B0F51588B01732471
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  DrawBot/VCRUNTIME140.dll
- Size 84KB
- SHA256 1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1
- MD5 ae96651cfbd18991d186a029cbecb30c
- SHA1 18df8af1022b5cb188e3ee98ac5b4da24ac9c526
- SHA512 42a58c17f63cf0d404896d3b4bb16b2c9270cc2192aa4c9be265ed3970dfc2a4115e1db08f35c39e403b4c918be4ed7d19d2e2e015cb06b33d26a6c6521556e7
- SSDEEP 1536:RPwKQRaeU5QsPWFP/wPENm2eK7oJnoUSgpAY8ODcDcm7cIs+4ecbV6iVBoA2r:RwKQRbU5P4XwPENm2eK7mnoUSgpAY8Oa
- TLSH
  T17A837D11B1C040B1E15608B612E99B23FA7DA3734FD94DCF5FAA5C8C1AB93D2A73425B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  DrawBot/_asyncio.pyd
- Size 54KB
- SHA256 47998cdec5d134dd351947d94ad5ca5a234130d22dff7dae1a12b8c06daf2891
- MD5 4e406cbfbfb77d6155b814e9f344165c
- SHA1 8eddac97fe2e3dccc9d466c5d70d572ddeccd4ae
- SHA512 9519d3d729cb49bbf9b6889a096b2b6e2871a4ddb767b946f426871d89031aeb9bb993eff4add27909620a2647293dd59c4fba0e245e62eb62de04eb1615ddf7
- SSDEEP 1536:whUoUIrl9ulDGSop9ghO27PmKxtMRIQsnERyaz:whjprzsjmKxtMRIQsnEpz
- TLSH
  T1C0432B04B65062B2EBD560B872A86BB6BF7874600BF450F3EABB4CE35D601D3D279711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  DrawBot/_bz2.pyd
- Size 72KB
- SHA256 bbc7f102b547180ea8ca5ff496f1bd419bfefd360be15610ae6b08837076f5dc
- MD5 1c7f3f37a067019b7926c0f92f3a3aa7
- SHA1 ab6562aaa8cfa2dd49c1779a6374cecaf0e0d151
- SHA512 840b095cdbb09b20f5d6db9962f4769734e0be425c9f094571df0df2d28888708072952792faded660c3e8f3db2513b6b42032e18cc681d909993fc6500b3e6e
- SSDEEP 1536:uHi3lVNW+yen/syxiC8b2dUL75IQ4VSgxyc:TlnJ6t1b2dUL75IQ4VSI
- TLSH
  T13B739E01B1C2417ADDE600B062D8E63A5478E632A7F481F76B7B0D685F54FE32A3925B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  DrawBot/_cffi_backend.cp38-win32.pyd
- Size 143KB
- SHA256 c6fb5d45ed3787e5a55b5662552f3c140a0be56991ba722a193107fdc8de0fc9
- MD5 a84c081338ab64d03b7e07cc3afe4b6f
- SHA1 25ec8dd6a76c02493459055c1306b3d9fd3a21b2
- SHA512 02793c00579a0e44fa9d8a2496cd7016d54d1671221d8434f95e3817bf67149bfbeacc088de85663fb03e912a6021cecc1aff8c1fc2a3575e1e7a8a3d62a6275
- SSDEEP 3072:VM2qdNT8pNe55piIuvP5V/Fr+0g/s+LTR2XfU2o1yTLzqnFJtS/BBbmrg:e2qdNr6vHQ0CVKU2o1yTLGnFLS/erg
- TLSH
  T14CE38D02B74912B5F0DA14BD625A9FFFAA6F55640FD284C39DA428F100245F36E3FB86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  DrawBot/_ctypes.pyd
- Size 109KB
- SHA256 2695a7635fa2bebb6bd720146916f21676e846ea5f39288886bbb27ce2af92f4
- MD5 adad459a275b619f700d52a0f9470131
- SHA1 632ef3a58fdfe15856a7102b3c3cf96ad9b17334
- SHA512 3f87d84adf3caaf37df30ec4acbaa0b15d9693fe445d31164c81e423ffec51a6263c7a5801e718168be928ab5b1ee689b4932a83c1876ecd97e7544d08c07fa8
- SSDEEP 3072:bFKTmYASyfgFw50D/8Zbwweh1FIQVPDBitG:Sm0e+/8Zb7eh1vIY
- TLSH
  T162B36D01BA55A039FAD204FF9E655E627D3F78264F7024E36E5C09850AB43E3AF39346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  DrawBot/_decimal.pyd
- Size 220KB
- SHA256 14a59911e349064e4be60dcbf3a0e60dc0f4c0eee2a406b69c9a24ddee3b60ab
- MD5 7bc3e402069caa8afb04f966e6f2b1cf
- SHA1 8c0f9a0f189ff2f5a6a6c6a1ac8c2cf72afcb3ae
- SHA512 bd74e6ecbda0e77c3665eb5dbd64a7f6194bcdcff838b9bb1bbeb1367c53491d41c0971602a14d2b4e615b6822f71382b9fe051c3be17464befa8dcf0f884ddd
- SSDEEP 6144:rgBtVQ7Al2yG6kOuq6xV3XMW5gOZGwVd8v:rgBtVKDJ6SJGWd8v
- TLSH
  T1A7245B21FA42E176E8E501B5A6FF9CFF257C203053AA86D3B2D52DD02A904E3723E745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  DrawBot/_hashlib.pyd
- Size 36KB
- SHA256 b118b6ef5486a65c41fdf049ef3c30d90f39097b5ef4c0b9f61824acfde50b6a
- MD5 aaa99ffb90ec5985be0face4f0a40892
- SHA1 0ad00c83ff86d7cd4694f2786034282386a39c38
- SHA512 e9df4a5480910172ec18e6de2f09eb83152db968dd974bf2e552de2349caa8e66f82110fdf511c7f3dd8436c03212f66d6720bb71306bb811392baed92c78b7d
- SSDEEP 768:6VKNA5Ae3iOei9FK5Y8TjII0uJO2voRIQsIoSzWDG4yxK:+KNA5A2iOeivK5YmNdJtwRIQsIcyxK
- TLSH
  T196F24BD5E91441E2EBE308B4B9F0CF67A828A7714BA490D3F7DB80C94AB55D3613631B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  DrawBot/_lzma.pyd
- Size 181KB
- SHA256 c6e30f1139d4f2b1ec7a5aca8563d6f946ee6ffa6a90a4eb066cd867d3384c39
- MD5 280c3a7c8c5e5282ec8e746ae685ff54
- SHA1 5d25f3bb03fa434d35b7b047892f4849e0596542
- SHA512 f4185ec91a2e51b703263a6c9796ad589349434a82170370efacef55fde8a885c0c7cf10eff20b61910c569583887ac2e0384847cd724aabc052be2861fafb69
- SSDEEP 3072:Tez7m1+Dj2ykm6e+gyd1uBSsPc5S/BPkG23pS17tvtjVNgGoY+7l1/3gOi7atzHJ:SzDj2ykm6e+hd1uB1D+7zg5s1YO2RR0l
- TLSH
  T10104E5109940F0BAF6E60CFAD9675A7B8BF85625433115CB04CC1BACA70F7E6A931B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  DrawBot/_multiprocessing.pyd
- Size 24KB
- SHA256 bc2e196bfb21a3f57ca86e96127b1246d47cdaeeb99f6239af38165bf42b5117
- MD5 f5bb0b71862c1011de7660e5e5721846
- SHA1 4a3101719fa36f5b9165ef56af41208dfe3dc0e9
- SHA512 c794681be1da1acd87555c4b9550cc5f2cefa1b8458becb084aee034c2d7be90a44a4aeb0c0778560d16c80bb6c1e05c91fff208e0e550b06c7d7f46902b9e8c
- SSDEEP 384:Oj54CDspiPeJexiqJI/BidEYWPqgYciaZhIQkBLjCwhjnYPLxDG4y8dnWjt:cDqOiq26Wy3JwhIQkt7NWDG4yT
- TLSH
  T1F9B24C42BF2050F2EBA2087134F09E569E79F6214BE0C8E76B6BC2440F646C37E77625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  DrawBot/_overlapped.pyd
- Size 37KB
- SHA256 44d896e8aa8887bad398b03dfdb8cf72aa3c0d87730a2ac0d92763722a426a7f
- MD5 54c6149ab1c0a621b22be4f4046386b6
- SHA1 1d2e8da6a76e6d2ba0b8fb70954d06fdef1ebc1e
- SHA512 61e0c6571f90856baca950e9aac0835a0726e41e516fc3728c81117d9ee248cf0ab3d47c70b34906cbfd9e37583049b7307d53a8981361bdea1095e3f9271896
- SSDEEP 768:P7xuQeN43zIRCJ7no8IYXp0qEbNA1B59IQJtB4WDG4yhzry:TBG43zIqLhWqEbNUB59IQJtTyNy
- TLSH
  T1BE032AC0A50D00A3FFE60574B9B15F229A2CB7E00BE495E7A7AF825D4E745C3BA35316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  DrawBot/_queue.pyd
- Size 24KB
- SHA256 7f43dfb5ba9f4afa82630cd3e234ede0596abe3584f107b9855747ef1cde9acc
- MD5 8a21a5ccb136e6c265975ce1e91cb870
- SHA1 c6b1ec3deac2e8e091679beda44f896e9fabea06
- SHA512 a215f1674a0ce89324e82e88245201ce5c0bb56193b732527a8f8ca72377dce8b2f1dead380fcab070182eb58c43cf55c2b4c26588e856c1f390a953dbc9de0b
- SSDEEP 384:OjJU/wTEESvp2JyeVesLTpJEMo6rDhnuO5xWhFIQqUMz0nYPLxDG4y89nh:OlUuy2Dhu16rDkOuhFIQqUMQWDG4ys
- TLSH
  T11DB26C41BF2040F3E7E548B439F18A63A939B7104BA498D37B5AC1012F956D3BC76A2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  DrawBot/_ssl.pyd
- Size 108KB
- SHA256 5ad15dbc726d002d356bfd7e6a077f8568fee463b7ce5f71c33a04b2e11558f1
- MD5 8a2eb91cbd839da8813bb6dc5bd48178
- SHA1 f4a2aabcd226385e92ee78db753544bb9287556e
- SHA512 dce0c6cf347516f989d3292d9f9541f585b6f04e04fb8a83bef6b6195310033c01588c129db006677ed2f0971634c84d79a5627db51b21de4e1b6e4f75a32a41
- SSDEEP 3072:3JB2fQmq/cNhdp/bzM0LRycD+vGYEDu5IQ47No:3JB2fSY/bAeRCGYEDu3
- TLSH
  T19EB37C30B931A5E2E6E984FC32A487B32F6D912073EC59D356A329945F384E35E3D742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32