978e44abeeb7546c92d76629ad38fee6f1cbf998eaf01e8a68405835a3879efd

Sharing

Copy URL Twitter E-mail

General

Target
Release_CSNZ_22.11.24_FINAL.tar
Size 4.6MB
Sample260802-qt6etsag75
SHA256 978e44abeeb7546c92d76629ad38fee6f1cbf998eaf01e8a68405835a3879efd
MD5 da1a9791055f394be25c7b678b2fe61f
SHA1 89ff13d9f564758d593803995f65728d968281ca
SHA512 cf6b501ba706e666031c4f07aeb17a79509f2dacef1c57393a85ee356ab0cf6212ab869912b075e79a5dda5b964446109f9af9e47e082ec177bdabe0e4eca3d1
SSDEEP 49152:kwOOekkUDP3lcctJwAI+/WYGgWPk02xe0tWQxKas7dopyzIaEId8Yu:zrDvFen+/WhPk0pQsdo
TLSH
T1E6264A33278C83E3D5D607F0427DBAA259B4E253B720A4DBB7B51A4FDE189D3153260A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Release_CSNZ_22.11.24_FINAL.tar
- Size 4.6MB
- SHA256 978e44abeeb7546c92d76629ad38fee6f1cbf998eaf01e8a68405835a3879efd
- MD5 da1a9791055f394be25c7b678b2fe61f
- SHA1 89ff13d9f564758d593803995f65728d968281ca
- SHA512 cf6b501ba706e666031c4f07aeb17a79509f2dacef1c57393a85ee356ab0cf6212ab869912b075e79a5dda5b964446109f9af9e47e082ec177bdabe0e4eca3d1
- SSDEEP 49152:kwOOekkUDP3lcctJwAI+/WYGgWPk02xe0tWQxKas7dopyzIaEId8Yu:zrDvFen+/WhPk0pQsdo
- TLSH
  T1E6264A33278C83E3D5D607F0427DBAA259B4E253B720A4DBB7B51A4FDE189D3153260A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral1
- Target
  ChangeLog.txt
- Size 373B
- SHA256 32949445e325ce4723f24c47200838cfe529a580aa45d2eaffbd223470f2f1ac
- MD5 e4f5f33020c3e74dc81d35098de0108e
- SHA1 037f3a838edc33ca44a810684ea441db1b42868a
- SHA512 43b30cc6942ab879dc2ed954dbdc0c8b86e293c2498c4ee19c96a18a4c3b1e36945770d295812fe96ad00ddfaead7494296bb8312974febe76b87744d1604131
- TLSH
  T1C2E068AB280351B759B3629B857CB0E69B3F807037B232257C1D804911218C4A37F16C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral2
- Target
  Data/ClientTable.csv
- Size 379B
- SHA256 34241c3a4d5f9a43118407571290ebf45c38d036c6a48f586c185e871b99ca53
- MD5 d2b653ff3f6901c1baba43c654ac1150
- SHA1 1da1ecf50beaa7342a3188be932e715099b90dfb
- SHA512 16a5017eac6bcafec317ac0458ef4c7bf925aecd28b1b02450435b0401fb3fde81d550b2047e94bc0b5412878b94edabf380244851c5485b263247a7eba1ac7b
- TLSH
  T11FE048110DD9B38980E50986B3CE3431B15DBA35D594DCDF71734191BD4DBC028966CB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3
- Target
  Data/CodisData.csv
- Size 20KB
- SHA256 6fc60f5be9bb0903afbdcd0eaefbc87e4b7982a858394dd754a5f6d3210fef2e
- MD5 e30b0b0a28f719ed91f7211d2efac1c9
- SHA1 2cead8cac7df29583c78bc5cf3b5b9efcfaaaac2
- SHA512 21e5d174cb3c90f7e3c2acfe7b6dec7a0a1057fb6efcf63ea7fa65262d4b4ad45187dbe474e718b1ed22a34776b7164760a1e80abeff21a0d4419bb50b41752a
- SSDEEP 384:iCDCKCEuTvQKUTIGzvRzRd+hhobr/kzuaw9XXRr:iaCEDKqI0vkybr/kzUrr
- TLSH
  T165A20A9A00ED06D2B884BC90FB28795806EAB6EBFDC4DC51A470F345DEE9DC05C96763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Data/EpicPieceShop.csv
- Size 4KB
- SHA256 fccae1387f5f2ac23b193697b52300fb42569868219dfa961d20f18959b42f1c
- MD5 08c7389deeddb5e2ec79449dd029e561
- SHA1 7a688ce640c50f21de629309d99aec4b4000db3f
- SHA512 08774e8bb74874e8bba34e61cd65edcc430ae2c0cffef6457444be9cc97c4075acede82b62be2c9b75e3edaae4b102c06cca76b97614bf0abc8e68bbf1036ff2
- SSDEEP 48:Nt+YdoiqJq1n8ZtCtLkHtkJV8LQ0WyeFpeQbi/BsnbuRjETjG8DEnNqCsqC58+QK:Nt54qrh6W0nsnjr31
- TLSH
  T18F815C7905C1A402E04CE770DA289EE411F4BF5B3824985C87716E9ECEA8D9B6C7CB0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Data/EventShop.csv
- Size 4KB
- SHA256 9accc147fd85987a38f965de0845f446f21ee18475042099c8b3ee7fd2339663
- MD5 729ac81f4424bc9ddd9af05e67719718
- SHA1 7a2ce89b09b4bf9f99d6015c6f69dda4b9ac1297
- SHA512 65554252d5252a5cb7a5d99625a2a42d8608845041e090958168a59da9127e3b15a47a32dfc0d13610259bab20792828854b08d8007345b838a0e56ce8e4e2c8
- SSDEEP 48:jRL7J3+YdoUj6NjER8fvlN1iSNaIhmJjqjSEnjesVDQoqR3IXK7cysbcEpcIDpmU:jRZ5oF1BV4KsYP
- TLSH
  T1BDA1923B1F694DE2B4878B20B33D11F956A4D6DB342544583761EECE8E43A2B2D346D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Data/FamilyTotalWar.json
- Size 2KB
- SHA256 abdb6b3276144668dd30429aced89eb66ccff6687cf36824fc3cd6fca8d241c2
- MD5 381c42df4b856bc7fd10fdd078c9d7f4
- SHA1 130d5ef790ca89a9f0cd59e1f7ed6178ae2a8472
- SHA512 34401989724dd1de0531fd6b57a7756d66bed29c644ed7ef1924e2ddb5df208fe689135cfa002a5e73839b226d8ca0ec56aaf0e5aaea784f062b0aa9502b9786
- TLSH
  T157416762C6711D9BB07E72A075391795E2A2EB1B0049CE8F76BD090C0FBA9131709F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  Data/FamilyTotalWarMap.csv
- Size 962B
- SHA256 671185864e099796b0d1d53ba8844646566347427b968e9323a839bde4440e47
- MD5 307bc6a15a2dde1dbe8b89a32b3a661f
- SHA1 39d330b78f228315f5090744957d185e56a5e838
- SHA512 c884702c5eea305596345fee3590fb4835d293813b942aab86acc943d0ef46bf1e90a9f225ad3564a0d282552ccff1b5911b3928d9c1e5522b0fd51282d290a9
- TLSH
  T15C1117D6F40D9B89C6DC0C74539E30B7B7CE95A421ADB5946FA6D060D05CF8191262D4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral8
- Target
  Data/GameModeList.csv
- Size 6KB
- SHA256 690b1bf4cdf819d89bb29a21e487d4177932e89288476ed95746d18c4fe3b184
- MD5 31d66e3a0a871615ae200f07a60917e2
- SHA1 29362663d9878b4c720e39b6aeedfffb234ebce5
- SHA512 83a9ec51f949fadb1f096eef7830546926f71d830ec3564b48f518770667610e5d97463ee52a778cf62f45b1603c5815d0859c755b12dbfabcbb110e0779510d
- SSDEEP 96:gRDHKuEfzbCP3LEsCFnyIXSHx9qe1A2SutBPEUnuaCxwVMnBd8fPLu:gBHKuWvo7GhycSHxAeQuAUnuPxnBI6
- TLSH
  T19BC13C45061C57D707E55D882B6F397923B48AA3BC642417DF9C9A6EEA8E7E0E073033
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Data/HonorMoneyShop.csv
- Size 6KB
- SHA256 0f53b53dd2c028a29d2f64d4d0ac111d6147227551c7d540887cccc97b671157
- MD5 7dfb44243e9ee54fd27c9bd790576a9a
- SHA1 ebd310d36a6c3eed3d4fc090c0547d873b09dfa0
- SHA512 5327d998b69185af2cb8c45343c0330c99f33d31f6a89c9a379ecbec5acdf0456adcf9625cfa39fbd43bc4a4b5a34eeeb7e2aef8c3dad425f8c1a1c493382845
- SSDEEP 48:TU1ZKLPidxq7Sotv8e0WJFy9VMPu2f3rqZM3AvFEsvOJePqh4TGJkg47iwvT8NuK:oNc/0WfWOBTr9vvL
- TLSH
  T161E147BE05820A13D6A0C310A75DB4A8A4C4F1973A41DC5C67A3CBCF7EA8D9725353EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Data/Item.csv
- Size 426KB
- SHA256 fd3d3cc1013e0a982eb8a659dee7fc87f15ad5ecacaccb0dc412f87915b3ae6b
- MD5 94ebce2616ad9d99672d847a86a61bb9
- SHA1 41d73c0fde1220dd7345182e9e06a1a62e75853c
- SHA512 1501ceebf806dac6727a4417b287e311a41afdb9333f734c5b2f9dffbf9e8406e44c7669094e233ceb2fde4fcc4068ac25104c931b076dd9fbcb8164c15f9de7
- SSDEEP 6144:V79VrQtIuwQ4EBbc6flxIU/4z9IczAO1cP52G5L4b:RefrI9
- TLSH
  T1FA94233B5F8C43E7E2E55BD4C2AE741B56A6C18A385089EE7B76479BEC1C8D3543020B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Data/ItemExpireTime.csv
- Size 3KB
- SHA256 5470c675cb014ea996685ddf3b75b1cf4070c428fcedc99b8ce932fb2c4b37b2
- MD5 b3f40cc26a0cb676116b3a1168fca113
- SHA1 2e8d2b9238022c94938312b7428aefc24f9c486c
- SHA512 f7de8d44efd56f101208f5b1966a65d127764e9dad525057602dd1731b8f4dae5a230f37da54ab0e4a18a3b8632c03f3678f9b8692d1654df0c1806224818bcc
- TLSH
  T186814883DF714C747009D28A332D37BE0422C7560551EAF6B730AA81E92B4ABEC52A97
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  Data/MapList.csv
- Size 75KB
- SHA256 4aec174bafeb108c18eaa9972a496104b209ee0320273bab363ceaa6f1579bb0
- MD5 cc2f37fd3c23a21984215dc98dd497f2
- SHA1 374d9f8f10eb530551c67501ac8992a75872fa73
- SHA512 8e496d6d655fe84c0ce29768ac34d10677681e9576bf7c99bbb8beac0dc3567078c616705ed7a26010b006829f221e8144a67ce46a1e3b0eae3fe64499306c70
- SSDEEP 384:yu54FbTD8FF+QF93/KKKK0+h///gV5dOl4Oz/uNmyVBTC62KmttlsaGygWQLineV:fCFT8FHgFbwluj2K+3nx9KT
- TLSH
  T1E873447B0A1C8BE7C1C9C7D8C28D751A00B5E19AB0A5AC5DAB710F8BED19CE39074767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Data/MatchOption.csv
- Size 6KB
- SHA256 a7c252ba5f61a5b71e57eba2c3f0202cdfdd3478d84e5ed77f0160bc336fe562
- MD5 29ac84eca04eb543662e811d2959546c
- SHA1 e652c3a303e37c5b24436071f8c0f3a04ab7cfad
- SHA512 1906dea1e246f9740be554eb293cba2692f5b30f17ca5306ef26d4f6652315560ef6057aaf2d945a8601666408e3235cea793752df8a2139304d77d8051f53e0
- SSDEEP 48:yI/svIMijl8ZvwX9wN9wMl9Zp9wr89w6rUircZuE/HBAcPZvj1IOMZf9wpZbZP:B+IMO854q9qPUVcAOFUMpZB
- TLSH
  T18BD1E8721B4D037BA3E04ED8A39D7C5A10F0D71A385A652DBBA3A6CBF41CD81D139625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Data/Metadata_ReinforceItemsExp.bin
- Size 258B
- SHA256 5d103b39926b06805e13ebf80d1562ee413a69fb14f042a7a8b14617caefbaf6
- MD5 fe5db7b2adb265ccbd2c91622f308ef8
- SHA1 2c560840ad4e426ca121c2467f70c2106c4db5e8
- SHA512 11b1e68ce288a9f4f6bf4016ed335009e1e099bd2f78850783bbe87960c9399ca12b0930087fbb40e0e3eb0d7ee290a3e7ddccf0c82c3a3251a34e866343d608
- TLSH
  T16FD0A9BB0AEB26EAC005933AC09E84403F448F120D102246D1C4032C7DB65977CD3DA0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  Data/Metadata_Unk20.bin
- Size 3KB
- SHA256 ff9292f58f86876736b4d14ec2f0a62b0a3aee584fa6c434b7fd87487adbd1af
- MD5 53db5e016f591eb4f2cd65c46b7b4810
- SHA1 b3188c684a53670355da6cb60bd7f91979eefb42
- SHA512 6e34a8c12277fb532b9474498114bbf3728905b5ea8b245cc3137e85554800a1c29e896d4623f78f3bbaddd060e82d9111d9cd94db3e4bb6f7ea915888444cd8
- TLSH
  T17E714D6FBF520860C812D3F7923A1F9663A1D3CE5926C79314DDB7E59E160747C211A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  Data/Metadata_Unk3.bin
- Size 4KB
- SHA256 467f339baf429dcaf0a0fbd2a23550ff1332e2d4126ebfe3b27565a4cf0f404f
- MD5 3919ebeddbbac2b6d8520161f9f74751
- SHA1 f90419e0ee09aeeb191c3f661dfb9762f2c9684e
- SHA512 340f7abdfaaa3d34a319ab0f43ed186b207ba6b6b133c773a5881fe17614632a4d75a51a04779af1fca2d9de02ba3e930ba0fbbe4b96dff90306dd049ca7fd45
- SSDEEP 96:E+lvOlplml4lmlsLm4glQAahdt6XyZI6XBI6XkI6XgI6XvI6Xk8Jy:8M21R101w1/1U8Jy
- TLSH
  T11381ABDC70F5CF47D62719BF49D409296A1AEE0A27D3D3738AF217276904BE44F89022
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Data/Metadata_Unk31.bin
- Size 112B
- SHA256 273e650a590af271b56f708de8a652bfd13d786f3f4377c50b4f8d5bb1d09c5d
- MD5 67bb8e763a31784043c7e38c9186ef0e
- SHA1 e9bfe6ba4a2243c23626706dbce10332a6ec1c5e
- SHA512 5961f9e3cfcbefe789622d627903689b9f2fd1bf2383d1bf9ff7d5001ad5cc13cbb943f034c90cde41b02f9c259365d75f36046c173c5772f6ba7a36c2c5cfe3
- TLSH
  T146B012740B11664AC168A03341100384042000065051409274C4000B8DD1371A831800
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  Data/Metadata_Unk43.bin
- Size 20B
- SHA256 b892d56c91482c72786d060b7734a0256ac1fd9cc001617fe44c4487c3b1ed91
- MD5 defa101d17082bcb3fb9e3cf70360a62
- SHA1 5992f5d87aac1b9e4323aac8486f4609c156d74f
- SHA512 7b25a0680478fea2d4afb2872765d73339bc95882c7377e461448c09a9a6417f6e2183fe2860a6ff2882c29649c591da94214aa1be5d6486737bd70e76a69120
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral19
- Target
  Data/Metadata_Unk49.bin
- Size 659B
- SHA256 51de7736ad78fb0f64ed0c5323bb9d2b4b3f30042a381ae68f9dbacd309a49d8
- MD5 24b8798691a8be3602d7bc7f350dd40a
- SHA1 b733d89f56c1fa665f0c4d375d6ec4b86d564245
- SHA512 c1c921cabe4171bd5be72c2d94448c9a161988bfe8917052eceb3424b43b6069b1e78016c37864d29fda7cd0aeda135674eb9f989eb63d4221b8375bda39d1d9
- TLSH
  T1E5010218E0C4645F3402374A572B21DE9B606024BA79E744F73C106A05D897F51F70FD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  Data/Metadata_Unk54.bin
- Size 150B
- SHA256 236b6d8c3c1ee654c4e7bd0b866674ad85a996218b4012e188194d0561656fc6
- MD5 8fd4c3e2e2f24eb03ac57408f57b6ad8
- SHA1 5afd640fb8f8317d0b1560aecb979284d7b7289b
- SHA512 42452d42b1c0be82f234e9e012155a106b33659e74308ef957f69ad600ff476afbce666d2a5bb13527fe4439902243ffe3ed1ca54a8dcdb27d753b3cb50b1354
- TLSH
  T179C02B25B30881B859DA200C929777D53F96FE42D9B1030F1241254388133B87312A4E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  Data/Metadata_Unk55.bin
- Size 546B
- SHA256 00d11504a321cab3b0b60de364e4504b21eb35742206ecf68e70cda3e75910c4
- MD5 e17f4fcfeeea95872d1a7a2328fd4676
- SHA1 7027190d3f2f8a9d6ed63ca50afc30f9b908ada1
- SHA512 3913cfa786d619d1915a0e5705e0566ef10e6cad615157652a3c8c60c0d89b7617fd00ed7f3e888affb64a7338b1202dd3606f3f99055e2e363bb8be682776c2
- TLSH
  T1F4F0543ACFCB1808CE60E240DD680C67E7015251E9E4FAC78B259D00A275A949DE3A3B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  Data/Metadata_Unk8.bin
- Size 22KB
- SHA256 b8c3f6350ede06d70d9b108858a54199940ecb871afd8b5a5f1985d5e67028f2
- MD5 b2d750c7394863c367dfeef323a420d4
- SHA1 e2cd2c2f29789d4ae73c5208ee875bdcb79066fc
- SHA512 d06567e9c423de6c708750d0deb20d0e323dcf65c5789669ec346f34c7a9427e72c202811922cb786aa6bf264b36c4e1587e49c9b08a7ec6aaa785a51a743aa9
- SSDEEP 384:jNL4GdKNHqLoX3swcmT17buyiYYLeJUfitY6NCyLpAKY:hL4mNoX/ckbtiYYLeJUfitY6Iy3Y
- TLSH
  T16BA252844AE73923E6FF12B915261323F233E416AA5BA2C3594DF539EC3D7846F27014
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  Data/MileageShop.csv
- Size 1KB
- SHA256 25d32981a50790bb8fa571bc16eba0b97ecbd1cd5276c04ce57265e3ac5b815f
- MD5 d96e627d0f94e64f22fd158b026be1c4
- SHA1 1e176cc3a01faf8db6d8b5a3e9c51bf9075a7ebd
- SHA512 dc46d2386c783b3eaf534385b71cd3dc9b4dab0049e338e60c4d9032d2e5b16e95a5cf01826cfc2adb367e358d5183293bc25bda4a7175fd072977b7bfb8091e
- TLSH
  T1994128BBC86D074BE4C8CB60930C35579624F9877C5938A06725938E4C1AEA7D5BCA21
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral24
- Target
  Data/ModeEvent.csv
- Size 7KB
- SHA256 13c7348403e9a8dbfdb6946cdcd10ab1ea44d11499a0ff4f5f42cec45e8ee1da
- MD5 70926f8b37d44ee758ed42bd8b97682e
- SHA1 4b1fb35fc0f413d43e8d38186d457c0f3f1f4b7a
- SHA512 0679451fc7c6d95605a946583447ac9d7e9323906da558d6105030ee4146780e1ab7631f9ef2b98cf0e966bbec9c73a4452e9966cd7aee8dfdbb7d8a39ff1b2c
- SSDEEP 96:OKM0OMAFluMzM36MZ5FIPzFGZDAzxGcz3GyyHy0BFshrym6B00lwJwlRQioaCrO0:OKM0OMiMqMm0m3MHbBSJ+B0/yMlh
- TLSH
  T19CF1199FF58B6A41C5EF6A5CA7D21008F670B382541A2F8DE4506EC6F02D8E1F639F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Data/ReinforceMaxEXP.csv
- Size 337B
- SHA256 11eeb85f6c5bbce0d42bcef0db2c7b13971a63fb043f705b86e687bfd0d64465
- MD5 c4d7facada3976b74dfc06b65ee4cde2
- SHA1 5ebe2b5751e2ac031af20c542bc9d4fda098dd47
- SHA512 390bf3ab843e00e164da2d45980c79831ffa3811d5f673b975b0101c2e29d7914269338470f18cfb69323e66df385c67054d9c144a3ca930ef4932e055b78236
- TLSH
  T139E08C7103D921A8E1A99BC4E771356A1AFFC0C73908989C4BBF2B83FA51F0009B7126
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral26
- Target
  Data/ReinforceMaxLv.csv
- Size 2KB
- SHA256 b7b01bbb9c2c78ecf206f3b391ab6be90e7c40ac129181f11b15c85612320d48
- MD5 e62ea58be1109fa9cb51784dfaae7518
- SHA1 c7e7c99a921705fffb26449095dedab085aa0c98
- SHA512 ee8d11f2238fdd75e26cf82e58eacafa4b5f68fb1b85a66f698cd45c4d1814415cbbb6d8b5abda6e6bef61e51df898549ad666b26faf717a78016f90831f7c5b
- TLSH
  T13F51983506105EE7A14C133052D92D8D3AF94EDFBD782285EF32A9AFAC6D14F4076AC2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27
- Target
  Data/SQL/HoldBingoEvent.sql
- Size 107B
- SHA256 0c1b63eb9a04a606dc4b2c7d2c09e0a5d75b932783138f522c6b353f5992a0a9
- MD5 e6df5a39ec400700d366852a18dad4bd
- SHA1 b6506156359c9eace0ae221080658877c15e3cda
- SHA512 f090374e2e0a0a2495ded9459007de6c713c9026af8186447ec4cd4c1ad5481b293c7a01f46629ac303a6c4a4a4c6fe32aef5dce24217acb4022725772735f36
- TLSH
  T19DB00BB13C1F24F375A5A5547C5B537D21B595575D741001353005275547DDC0A35150
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  Data/SQL/HoldWeaponReleaseEvent.sql
- Size 100B
- SHA256 b705150cf90bb31511234edf9139bb0003c98ea73c49e43fcee9dd237d341008
- MD5 6ecdbac61d2d2b44417c2110e1e3c835
- SHA1 acc72bc41c231232e522780ce8a276c48ae56518
- SHA512 b47355ecbc174c4b8c18e9aa048f2c001696981bcc4ae074b1cce43c2a4e405dcab2351793d6f7bd966e0bc142a9a79a4c859a68fef5b61bfe78d3737b0c5cb9
- TLSH
  T10FB092C62C8B68B3A8476981A4441B146464E6826A76631630200426E803AD01832190
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  Data/SQL/Update_2.sql
- Size 348B
- SHA256 06c56bc3eb8239e73ebfc583d5791a48a9ae08370b8315675cf0383a36236b89
- MD5 754aebdc3262203620175575c11968e1
- SHA1 7c7ecf3b4e7e6dc6290a76ef00956f58b81b3f85
- SHA512 6cc42a7a23b318657db58f6c0abf5a38249c295e3b32e8b1ba118a4cf980447c93ad397a3b451f7c139eb79ec0214a34ad526cf5a12db057ba44f392f15ba938
- TLSH
  T1B8E0D80DBCCE0B242D13928981225166BFFD74EB9E024243B130ED55C5A49915164137
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  Data/SQL/Update_3.sql
- Size 218B
- SHA256 24b15f4d0abf86dec2e6483fc4e9fa2081117b5afcd095f1d236af99372b2e51
- MD5 dcca1721cb9dd6e4c93f75be3ff191de
- SHA1 8e19c279381fbed12ea539029ce13f9eacf34ed9
- SHA512 4ac4f8db44316f2075834b2094f885f8af47c04a6a4c750e1d6d0556aa38fe00f491a9843e7c70c81c4cf4d3a7bf4af0084e5c31984f63d38bdad0ef2b66352a
- TLSH
  T10FD0A71A30C53B601501424F51E2F43AF33DF007450D0280B07418A2E0FDD83D5B5843
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  Data/SQL/Update_4.sql
- Size 63B
- SHA256 35e4759ec4ddfb9d5c72a23949cfe03da9969a863796bdba1082bac562bb655e
- MD5 ffd56bc8995c2f82351e61cc8c86c33c
- SHA1 2ba62db5b6b85f5e837f41a8b4035607c039140c
- SHA512 fd8d54190aead3bc12f5c37e428ad95f47274c5b18ff0da3a200491ed8d7f3a2042fb96299bf773ee564f12349d28a45f82362d7783eedb6f1de8cd74333236c
- TLSH
  T1C3A0021E35DE53301416414F5523E56EEA6DF14A5519011C713864F0E0B9EC684B1C96
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32