98a4f569285ea5f2dd1c5dc189ee552093e6ac24e83f9a36e11fc9e9c835aee6

Sharing

Copy URL Twitter E-mail

General

Target
brownie_executor.zip
Size 4.2MB
Sample260802-x94phafj7s
SHA256 98a4f569285ea5f2dd1c5dc189ee552093e6ac24e83f9a36e11fc9e9c835aee6
MD5 4bfdd50c7309a5cb505b38bfa24e3e16
SHA1 eb46049b1733acb067de5b30ca31341ec9a4a574
SHA512 1445d47e69234632ccf67540fa73f34fbd3b4b23694e71562f8dc65a6738423c88ad4d4c9c5bf0911afa93f1e5b87d8c81a5d196bb13cb6163bdab21b933e3d8
SSDEEP 98304:isXESyvpg5sqbMlQqGVhei66FbQRlh7uh5fbv8EFs4:isUS1Elk668b7uh5fzlFR
TLSH
T13C1633D651A83DF70B897FBC71416992032D69A7B3D56C33831B0A4EAE67047AD3C29C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Bin/Loader.exe
- Size 298KB
- SHA256 2b61296fafa08458e1e3e3d131b20634fcebbac1be8b71374cb3c03303612638
- MD5 f39ad06b7b82f0470e34d3652dd38c80
- SHA1 329b712c1117727f2d8709d4b720569144784430
- SHA512 a5eb7d9c5ddd44f30c4af1f0a12076c3864f000fae5614710bb908176441a183f76f791961a9add516380beb06fdf3d2b602157c0c1c107f3b1e5ab4fb25e348
- SSDEEP 6144:TVePbDuA1Ie3dWmwc3KrLoCrtuXw8Taa3p1NjiU40i/QqkUSutYFrjW0DzQiROJJ:TVePbDuAT3dWmwc3KrLoCrtuXw8Ta99f
- TLSH
  T15354EA17E18AB07DD21896F8D395CE75C638B43D8328DDEB1BA18D6119329D36FB1A03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Bin/Madium-Module.dll
- Size 7.8MB
- SHA256 074dd48a356a8f78475cf594a3ff3ea211e42441c19f8a0286d20d7275ac3c4b
- MD5 2cfbfe0a0ceae7880b66878992b0b59f
- SHA1 fc4d3015aa4470a26c29efe207ce93688e148736
- SHA512 789df3c3d520bbd648a14ef5b777be1efac734becd2fc06060ca6a33de713d2fdaf4bfd80520e0bfb1557ce7552902f558609b3cc9f8b73b3ac1e98822808824
- SSDEEP 49152:E41Do7oHGjKE5MZPd0KOyTWn7lDdjoUTuZtK61xPXb0O/4nqx/PfQMwai5FKRQMo:3oAdqK3r+51AH6K/aOrimuEmCLTqtyY
- TLSH
  T1C4869D56B7A400ACD47BD13CCAA78613E7B2B8552731ABCF16A456B91F23BE0173E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  FastColoredTextBox.dll
- Size 323KB
- SHA256 ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9
- MD5 8610f4d3cdc6cc50022feddced9fdaeb
- SHA1 4b60b87fd696b02d7fce38325c7adfc9e806f650
- SHA512 693d1af1f89470eab659b4747fe344836affa0af8485b0c0635e2519815e5a498f4618ea08db9dcf421aac1069a04616046207ee05b9ed66c0a1c4a8f0bddd09
- SSDEEP 6144:0R0J4lx4/7BA4xvNdcwCOg04j0y5mwZkdmsqmLDi5eNH+Dl1SIP0:0R0J48lAovNd7CO34D4b4eNO
- TLSH
  T16564391012F84659F27F47BDD4B9C01CC3FAB566A99FEB0E89A560DA2EF37409905233
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  FastColoredTextBox.xml
- Size 132KB
- SHA256 f3f2e537065317b6ce66dac64042e925bbcea65f00561f9860b7172c9ca07027
- MD5 70d49dec6a333f1d94fb1e77c663525c
- SHA1 184b544e672f4c4cb9ed9cf010da568eed16623d
- SHA512 b78a3c4418a7c5014eb16e72f2113f00353e9e566942f7160067c826c47f1ec2752ae7ede796fc159fb9bae499d347f822401fbc4446e2556cbd680cd595c2e2
- SSDEEP 1536:45SVw7sekyF7o//t3zEzacGE5xa5lIV1/P5:45Sm7sekyxo//xzEz3GlM
- TLSH
  T151D30459F6E29D041C73101A5F60B48AFE2F5EB39149582AB48D3E773F72ACE51AF420
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral4
- Target
  QuorumAPI.dll
- Size 697KB
- SHA256 43fa775811e6e55d7c6fb56a27cd3a3f884e5230d6fa9ccab2a4971e19a914e9
- MD5 880da67d47a2be134b5d831fcf4b87bc
- SHA1 d59c7be69813977427d116643a4a6ed3ec1f54a0
- SHA512 96bd5f9507d8821715668d33ed3acbfe9ddb668b718869d0bbd80d6af04ae963849a82b0e08862f3ff5c7d39e24f61b3b5ec5daa1a56c0c29799a54276c4e09e
- SSDEEP 12288:PVy0q6tESeavUDYO+bpQ9NFQqLwvO6z0MZttB70:PVy0q6tE7avU1f/QUMD
- TLSH
  T159E43002AB44DB01C96C353A92FB296C63E1F9CB0371D90FCF55FA961DD22B69D8C246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  brownie_executor.exe
- Size 21KB
- SHA256 d0f8af5f6d8a012d0ad0c6537034ad949753933fb5b5bc1b83e682ab54c511fd
- MD5 037975b2029608bcd644beae3b76053d
- SHA1 835f24430c652791821fba6ce959c36892f7a90d
- SHA512 6c58d2279e46f4308076bf586aeec5f987ab870c12a510b619060d73995efcb162356e72f63d9afcebfd64c3f22899994c7f19954269dc262ad5fc1a7fc3655b
- SSDEEP 384:T2H5eAy0Xe8xQRxYXxOkTfZ+I5+UERZq1rpywgCCCCCu+RuCptYcF0Vc03K:45rUYXtjB+/UrOmtYcF0Vc6K
- TLSH
  T1BFA20800A3AC4B37DA3E0BFA55A25182C3B7A6269052EE5E7DCC60DE2B637444312793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral6
- Target
  brownie_executor.exe.config
- Size 187B
- SHA256 f82338e8e9c746b5d95cd2ccc7bf94dd5de2b9b8982fffddf2118e475de50e15
- MD5 15c8c4ba1aa574c0c00fd45bb9cce1ab
- SHA1 0dad65a3d4e9080fa29c42aa485c6102d2fa8bc8
- SHA512 52baac63399340427b94bfdeb7a42186d5359ce439c3d775497f347089edfbf72a6637b23bb008ab55b8d4dd3b79a7b2eb7c7ef922ea23d0716d5c3536b359d4
- TLSH
  T1B4C08C4940A8BD278E334B235752C52AEFB073A3A424140CF02FBA660F3128D865737B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  brownie_executor.pdb
- Size 39KB
- SHA256 2ffae0902bf8f7f9c87a775b42ddc7e2e63934be606ac4c0c3169fce5427a6f7
- MD5 b3434cd87674fb221cdbce4f49e48bbd
- SHA1 a1decec344fe6e70dfea1723525b2a73bc248d8e
- SHA512 2125c3e2a1669377fb506ba105f4869cc7fd7754c10297ad3c7c80fe0c94a177e718dbf7b6575d625817ef60ac9e804d34e1aa59626c93f5c6053e63c77be945
- SSDEEP 384:1ULnuHJnuHkosi3m7ECzn8ECzuXP4MVUPuaX4cbTm2JosdAT9fL:1SnuHJnuHkosamLL4wUPPPbdosdA
- TLSH
  T132031213B744CA33C80E05F0A6D38B6B9335EC558B49A78BB398752D6EF178C0E847A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8