0eab192ccc70020a77236463f637b604cb7d72eeccbebfad4934eb4b2142425b

Sharing

Copy URL Twitter E-mail

General

Target
Lumen.zip
Size 7.9MB
Sample260802-q4q3wsbl61
SHA256 0eab192ccc70020a77236463f637b604cb7d72eeccbebfad4934eb4b2142425b
MD5 403ad56db2b9a564c37c79575f2661c8
SHA1 2bae861dfe9ad3ecf9619ebdfab1308e7746a3f1
SHA512 cbc27a52111ac8c21f2cff18b26734e0d0c3240be3331318f0cfcc7839f7294226d8d4c5df223a287e40dcea1749d86c33a4c941616b0e61977d953f96e6903b
SSDEEP 196608:0mt5DOsZqtivhpMZ5LPS/B9ZlqXLwk8eyCCK:0m/DHqtivhpMLLPSrzywHe5CK
TLSH
T16D863323C09DD808D3AEEFB74E32E6EDDEF80289B0551CDD841DC6C169BEDA00799656
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Lumen.zip
- Size 7.9MB
- SHA256 0eab192ccc70020a77236463f637b604cb7d72eeccbebfad4934eb4b2142425b
- MD5 403ad56db2b9a564c37c79575f2661c8
- SHA1 2bae861dfe9ad3ecf9619ebdfab1308e7746a3f1
- SHA512 cbc27a52111ac8c21f2cff18b26734e0d0c3240be3331318f0cfcc7839f7294226d8d4c5df223a287e40dcea1749d86c33a4c941616b0e61977d953f96e6903b
- SSDEEP 196608:0mt5DOsZqtivhpMZ5LPS/B9ZlqXLwk8eyCCK:0m/DHqtivhpMLLPSrzywHe5CK
- TLSH
  T16D863323C09DD808D3AEEFB74E32E6EDDEF80289B0551CDD841DC6C169BEDA00799656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery persistence
behavioral1
- Target
  Source/1.sln
- Size 1KB
- SHA256 1eaf34435485fb5938a5ccaeae8e9a8479512232afb0ff699f9281409a82aaa0
- MD5 af3f14296ad61cd91461a4db1a84714c
- SHA1 b8f0174e9a9dffda5d486a85e6b450584097a092
- SHA512 bc9007a47a1ef173d784680d4d08ab258776d375de8cb4cda32085f134561bf2659d2621d0f2646cb6f0deb4e3c0f2fa6409fc530bb8b1e7afa3e8d144c5967d
- TLSH
  T178118BAD605D98D0F08A033FE9F01C893AB3439890DD1E3C518B5058FB57E0591AF46B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  Source/1/1.vcxproj
- Size 14KB
- SHA256 a944d7d4f4d615b4ff4e4e53effb33470c471397b333d2274af2ded92147e6aa
- MD5 1edbce17bdd1e3389a55bdc81943f0e9
- SHA1 5f31c905c9a76d54bc10617807d8283579fb53c7
- SHA512 2976a9252f044b14a278d1887ac59930d1d2cb404716d40d54b9165de09ddc564b78469476f5f6fd417541133985ee47ad17182255f3fcd103ab8daa31627c03
- SSDEEP 192:BmwcTeWIVAq41/yPcg/hPch/KPco2p/ZPclFL8e4q25ne73ATPf:Bmdq41/q5/V8/i1O/tMFLd8f
- TLSH
  T1F552DC25E1FC9EAD815202B7E6D1E9064F65B3C34E46842CFA4E9796FFC700C5223765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Source/1/1.vcxproj.filters
- Size 11KB
- SHA256 d338b7b2d545c627a933f624eed4371900389b9c0220be2a01484fd3c77bf4e6
- MD5 8e66292730f745c698b2a1036bffa9ef
- SHA1 4e4401120c2a465ce6615ad3e580bec2b84e6d7d
- SHA512 af056a8b6b609e69000c5fda5e59da7ec2230e77e7e7ff4e2fc499af6de771e7c742e51e6230d9c751eb5fac6a27ce7e2dc534488787860979545ac317fc2358
- SSDEEP 96:AWd9hZgh9PAPDNllWqh95ddvScieX08hI1aVI+t+6EmFw+6IcKxpSahSdpwtAQHM:NhZgQ8dNaI9N/
- TLSH
  T17B326D35D4EC6E8C61332593F758ED46EF2C72E78105411A7AA8F28BAFF3458C2175A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  Source/1/1.vcxproj.user
- Size 225B
- SHA256 a0c24e8908c9bcc5eb33cdd38762da3a86013fe87f0c681238ec4bcee56d15e1
- MD5 5e35e02fcaa092f2943bf7b04b02b687
- SHA1 8f7f5c5e803d06ef30739734391f8d4d0c7a1fc6
- SHA512 7a1edc418f72acde0d7d087c04604d7dddb672835c0529e38b15ed5977bba1bde67d3d4d0f41c99cbd37f83e3b50a1fd1a06f981cd6b7b42e5201e2ac7bf83ac
- TLSH
  T156D0A7104140B42071B417349358D834E2E1E6E314B04898F3D0E50D111605950167B3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  Source/1/ext/Clipper2Lib/src/clipper.offset.cpp
- Size 21KB
- SHA256 55a22d2db04ac81b11ed4194fa553606f344f47c2c63ff1afec37befc5f83c9b
- MD5 7e1e2199bc0beae798fbbe6f150d9d49
- SHA1 b3dd20de9c9aa42152c755649fce076ac6b296f6
- SHA512 4e520c887dc4fd234303eef048f493655257559e8270ec85df0725bf98cd7f2e75cbed9788a1a8f7a59dbe0119c45850d31789db311bdef5df94cc4ccf8c4a50
- SSDEEP 384:55rprTIHY7o3/axxPRWKBWyWKBiORVCpwVodBnxcdgVQB/+aWaqkS8S8+olix2+i:TpaY7oCpAOD5/zLqOhZFZ
- TLSH
  T1D8A2B81A3C99692A85D2F3C7913301C1D93DC0C1BAB259B7B58C65586F1E82F893DBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  Source/1/src/features/config/config.cpp
- Size 39KB
- SHA256 f1cfd6085712c141f2a3f5fa31ffc7d82012379263e23ea1a1c2cdcf964dde70
- MD5 2c1361584698d8c84b60c6bb8c1492c5
- SHA1 6cd55804ffdabd5e7dd4d750428d5cb81f50244d
- SHA512 7b753da82922a69b5b06bcf826f338971e44e896065bcb431199bc4056c1915ea4d14fca224c62fcfb1eeda12d06966eddd4a821a7d5f3e4b13e934003d6e8d7
- SSDEEP 768:PMM4n3f0wu0w3OtlNmqrLG6FxrpJZe7XvOfUq5hkyiHdMJl/es+jN1n:PMME3cw9wFz
- TLSH
  T18B03A082EF1C786C113B073AD85B03666765512E3237CCF2E975EE18266D8DE20468FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Source/1/src/features/meshparser/meshparser.cpp
- Size 36KB
- SHA256 9ca8adc15d1cf84fb03d3e6ee6a104be6050ee973967498a38c12269a641adb7
- MD5 867f260db6edf9c4a93923321fa8b8c1
- SHA1 7458b7b323163ebb21b432a4056cfba2af874d8c
- SHA512 300e685cb3bf7f2dd40a9f3cd9401e23dac61792d8a39d7ea088e11df2107406fac798b8babe84eaacfad866673684a6e38347be7bc49bc0fa71b2263a609202
- SSDEEP 768:Vek6RScLn9mC9xCIujuB9z5Iqhwqh8zeNF/+dytMc+hxCBwrIuju59LT5IqhwqhF:Vek6RScLn9mC9xCXqB9z5Iqhwqh8zeNL
- TLSH
  T1400355CAFFDCDD1E1630658D44154092D26CF4B366A9CDE2FDA98224B6D88DFF2B4850
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  Source/1/src/features/movement/movement.cpp
- Size 12KB
- SHA256 36e7ef045095871dde581d4a41ef8a612723df4eb20271e3266434d602818d29
- MD5 3eebbca577bff5e68e5fbed3a9d1b6c3
- SHA1 e53050e6467cfb4e1879a75c9becac07bb58aa5c
- SHA512 3ea143ec327a6298e576e3a046ff77812170d6c2a38d829c5babd41f8e4d31ae526fb204e7f5da4510755c775ef683197db86b6e04e39e713123deb396491b36
- SSDEEP 384:89IP/MMqlTjAv4/1gE+t+/nc77jaE7HprGERehK/Jfr:89qq+v49gE+t+/nc77jaE7HpLRekhfr
- TLSH
  T16C4273E1B73C681A4432351FDA1240691C3D80F1AF698DB1FCA9434CAAE886F475EC6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Source/1/src/features/silentaim/silentaim.cpp
- Size 15KB
- SHA256 9193199477cd114299842f974fecd80b9d63ca145233bc7875637eb1ee6a320e
- MD5 50540324f1846d32f28cfa3695f21176
- SHA1 adb56d78551381cc9774a2540b9dca6de506c4d6
- SHA512 bdbeddd3b9e3f910af6647863a875b0f45fa3b084a9bebad88316703807be9dffa5882e75707eae658641ee9dd3e5ab059a1312db9923fed30d4da4e54232976
- SSDEEP 192:NgbOiHH9jZf4xIGD4XySLwN+1tGo9ocI8D2suJzTJR+:+CiHHRZbGD4XySLwIDGohIEhuP0
- TLSH
  T157623F998F7D50DB155723588D6AE2AF623DB0F58B424CD2FC28B15432A804F83DE5AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10