cde30c2351bf30bcfb571a5397984227ba9dce4b9d536c340180834ed29e4a5e

Sharing

Copy URL Twitter E-mail

General

Target
Douga.zip
Size 1.7MB
Sample260803-gzf8fszdmc
SHA256 cde30c2351bf30bcfb571a5397984227ba9dce4b9d536c340180834ed29e4a5e
MD5 664e8fa08eee5b4a6bc32eb242518e36
SHA1 d1111e0614f4d3deecfbca8d6e605d4d8a773f44
SHA512 a7718e4f83ee2be0abc42c57029292ed1acfcaa22d7b848fde53326a4ec23f02b41b6057d73aed89dca646d76c7f2dba0575a9e95fd462478b7b6108a4c90b70
SSDEEP 49152:sQ/IlK2fs2jEfLKBgC+GbvNRf9rP8idkgJtxl:sQK3vBg8bvNb8iagJtxl
TLSH
T11885333825091E8EE795D73329C19E34D89B44F9B7A320E6813D3AE5DE896D83C4B3D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  Douga\dock.ini
- Size 314B
- SHA256 db57b95666b3d42b14f7f6b1bd0393699ce7b187a819e7a83b542cb9d8ff56b7
- MD5 7305c1551d3120c120d2a37510e0e373
- SHA1 ff62e51b6c58bf24faf5d0f0f610fd70e4e12fb4
- SHA512 de18dc7ee53a1acf32ca493fb311de8fb3282f831e18eb98c0ed20a01cc90c1bb3659d8d5afceaf24f40ced8f1ef819af96cb66252d847ccb7fcdc5c5774fddc
- TLSH
  T19EE07D5B7E7072C30240871C01D5C04D0277CC2134513D9A5355689E3B4848F203C5AC
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  Douga\douga.exe
- Size 2.6MB
- SHA256 04672fda9b003d4974ceb38ca1be024de2f37cdc499df9444d4ba7e13d82674f
- MD5 4ae72032bab5e77f22c20cae816b8748
- SHA1 292c4de732323f1d93533ef5797e0d6c505e7031
- SHA512 ff9b9416df29aec6e2e30e8f2d0aecf7fe9951e87fc183014a53fa2468ff5942461453122ec0d3be112e752f417fb0576162dd51b9a9adeee68604f53b183748
- SSDEEP 49152:FZ7Hzy04VR9WZHQPnAc/mvCJQ5o+hPoP/CsRyejuqlaC9n87Rd+tneDV:zm5oON2V
- TLSH
  T198C5BF16B2A801FCD077E078DA5AA907E772384903305DEF13E055A92FB76E49A7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Douga\plugins\effects\sample_invert.dll
- Size 118KB
- SHA256 9269261a9cd3af7e4b6521ffee04f2ea0a6a3a054f378db8eacaedfcd9debdfa
- MD5 ecf0e228e4a71c75b3f4add23421b716
- SHA1 c54256640eea27a0a0ae5b44b673ec37c8ee2458
- SHA512 712845e84d5e7768314f93393ba2bf8bb428da0d186928adadca14834a7d65620d25f37656c8a1fefa0e2e5ed854b6ac48924c6eb4ecea6104cb89aa3444ed49
- SSDEEP 3072:9ufFlPkbltcW0d32O0oLjFd12GgNJlLJKJKDvHbVRM1yAysKo237t+S:9AkRtFkx0oLRuGyAysKoO7tT
- TLSH
  T1A2C36C8B66E9007BE2768638C0A34E45E776B85617119FFF03A4425A1F277C18E3DB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Douga\plugins\exporters\ffmpeg_export.dll
- Size 150KB
- SHA256 1a07d93ad6646b1c88654a105afbc97e01eaba9346c86298477fb561a751f4e1
- MD5 bded9ae0da5d8a9beedda4645810496c
- SHA1 c2a04e652ad5775038f2c6ccc3b618924f1f8252
- SHA512 de69a3090a2a09716ba38d846e3e54a1482b45a0871f17bfc243c7c1f5902c7055c482e046018469227e93213bb4984bbbaebd566b312d8af0bde706d0b2a848
- SSDEEP 3072:+Ywgdf52EQnFYaxx6fCcMYSYQ8RdZZSdi78:+E5LAFYUv3Y3Q1gg
- TLSH
  T1C2E37C5BB6B500B7E5738638C5A38A46E772B85207209FEF03A442565F273D19E3EB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8