ac0daea218bac334641e72e43f98147c9feb6cce180d57dc19d8b051b33bd43c

General

Target
kova.rar
Size 2.6MB
Sample260802-s6cpdscb53
SHA256 ac0daea218bac334641e72e43f98147c9feb6cce180d57dc19d8b051b33bd43c
MD5 5248cdbb7f1bd864002c0fad2c7f59a7
SHA1 bc4f050089ba9991fc6a4451ad908c4264489fdc
SHA512 9a1b515ef35cac2a636b8a4a90831867415ae092174d19f24613a56fc772c12aae820e7c066be9ad7af34646d763ac34e09052d1aea72e55ed389e1c463cbac1
SSDEEP 49152:4VglBxoBcjangaLm3+tqpPYlvdzZJFDNAjUs4AhLD+8vyN0DzaDNWhdRPeeAWMLn:Uw9jag/+tQwlvdbAYsFJD+YyN0DzKN80
TLSH
T13CC5339DF0E988B5D972C519E7A9C8FCAC5A0A517E8D903F6830D54818C8BCF07897DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

defense_evasion execution

Malware Config

Targets

- Target
  VMProtectSDK64.dll
- Size 115KB
- SHA256 ec3235136a4daee2a6f72c0f2994a8365ca8427c8068d068130b74c9fa64cd02
- MD5 c0ce8c981bda19d2be17aca0774d9df1
- SHA1 895052a42efa50043f473f072578bee69be8d2f8
- SHA512 1578948dba2492263c0b174816451218c70df89e6b4440981db9513c664d97f6253fc1c0dab4164c620b9cb7794f4789677a0c38e0a5ac9636aee1dbc3d16062
- SSDEEP 3072:0RcqYHq7Aiytzg2ScpvgJcLYsqYX6UDdyBo:K0Hq7AiyegZgJoZXBa
- TLSH
  T171C35B47B3E540BBD1B6C679CD234A56D3B678150B249BAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  kova.exe
- Size 12.2MB
- SHA256 64c9b9f60b54d0b5c67e36b93c77e11c90dfe252d2de8bedea20f931a6303ca2
- MD5 5721fcf11495ad9ba982f7723915c510
- SHA1 8855537ce81c6c237b1e32690018d46e30174202
- SHA512 9b63bee133c20203c3835cdba115bc4ccd08113e0a621433c15c9f2959cfa80fba4d86126693287a4cd26b552a2b6353706c23bd02898db7a9ffd2227eb1efd5
- SSDEEP 98304:8Q0GSk1TNP1WB9kZBEgE0RORaBx6Zfw2teg0:F0GnNPQwGgE0RORaBx6R8J
- TLSH
  T182D684D4F1262BA4E437FD35641D7579839A5900FB39E03788FEEF2226B4DB408253A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion execution
behavioral3 behavioral4
- Target
  lua53-64.dll
- Size 1.1MB
- SHA256 436f6bf9ac414e7e7259bef4f6e287702a41e1fddbdd9af7d43350d47539a3c9
- MD5 b2d53e47d838cf917f90a9a6977c31e0
- SHA1 7189c2dc9aa6136ca5f210b5ebd242d3491a91fe
- SHA512 1efe3b14d7eac03ad7f2286ca42fbe235481195fa5906b3068dd97d4b4f5b2f9517cdcd78b6907794f6d2979944899ec97dcaae495077282b791260c41aaffe4
- SSDEEP 24576:Px5ACjuRUvIY5cfisR23K16TpoJol/nj30sIcqqD7FE5sF8+:PgCYUG2uCFwsT
- TLSH
  T1EC45493432A810A6D17AC17DC84B4BA6DDB0300A573C55FB5195C6E4AF237EC2B7EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6