d44d898409faf2cbbf5497f7aaef1ea8dc7808f5ec00ecf5895d42f5b4319d48

Sharing

Copy URL Twitter E-mail

General

Target
Osussist.exe
Size 28.8MB
Sample260803-ths7xaeq5y
SHA256 d44d898409faf2cbbf5497f7aaef1ea8dc7808f5ec00ecf5895d42f5b4319d48
MD5 1ecc680007b14e204ef83b9bba8d9cc0
SHA1 81db93ff0730c02aa2b91deedfa7cd10ee0d3ece
SHA512 ada9c8c194a1e4b98f76eef48877b5e294757879d6b3206e7a01d1f9f51669c16235f489babd37cf64dea3910dbc74dd788a552de0a7bdf239782d5943495da7
SSDEEP 786432:qqT5/avqdGElVp05pnCxkeFy8nB9cwtpj9uI53+ESfw4:TT5/a4G4052keIGjZ
TLSH
T1FC67017DA52F580AD0E0F8BE5A13A2425DFE98938E1CB56146D06EF7CECD7831A4B443
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  Osussist.exe
- Size 28.8MB
- SHA256 d44d898409faf2cbbf5497f7aaef1ea8dc7808f5ec00ecf5895d42f5b4319d48
- MD5 1ecc680007b14e204ef83b9bba8d9cc0
- SHA1 81db93ff0730c02aa2b91deedfa7cd10ee0d3ece
- SHA512 ada9c8c194a1e4b98f76eef48877b5e294757879d6b3206e7a01d1f9f51669c16235f489babd37cf64dea3910dbc74dd788a552de0a7bdf239782d5943495da7
- SSDEEP 786432:qqT5/avqdGElVp05pnCxkeFy8nB9cwtpj9uI53+ESfw4:TT5/a4G4052keIGjZ
- TLSH
  T1FC67017DA52F580AD0E0F8BE5A13A2425DFE98938E1CB56146D06EF7CECD7831A4B443
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  costura.dll
- Size 4KB
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- TLSH
  T1F791A51097A8477BE9BB0FB6ACB3534A4275FA61DC27CB2F19C562172C123180A31F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  costura.pdb
- Size 2KB
- SHA256 89b13aa6efbc0b04745a00bb5fcf05b7a4e3537095bde974ed3490a9cf582d17
- MD5 34b42a5776a3ad022b429124d55e576d
- SHA1 6c6000a5eaf8579850ab82a89bd6268776eb51ad
- SHA512 c24bf10e1d95a07fcd65c1f7841d2d4bdf25c5db02f5f4912286c8d6c077fe8bd3fc564cb249cb4ae01aed10889f25cc22a48bd9698499ed556560d0621a64f4
- TLSH
  T1F35193776F04C291ED9884B28513DA492B3047127602EE7AE9E51B05CCFFDF8077286B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  fodyhelpers.dll
- Size 47KB
- SHA256 e9fe1dee4d7185e51473a462e076452f8be51eb0b689900a90c27f6b4e9ce08b
- MD5 136a1fa8e40fef78cc9a9e40683f895a
- SHA1 f1ca638a9ef2467b4e45f8d7975b489daeb180f1
- SHA512 f55e0a24dd50eb9770875d93001f38f35c2cf6fcd48552078a8249b58b7d0a43747a9b94ccf6b901c543bb48c0c9ba184bba95e6c9070c47bd85d6a65666e338
- SSDEEP 768:LTAWdjKkonI4x7fQCuBsDY4TkqofUBfdTDrCFPz4+:LTzr+L7fyBsDYePBFTXG4+
- TLSH
  T18A234B0423BD83AFCFAD0EB4A872B2570177B55E7823EE598E88B4AF1D267441111F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  guna.ui2.dll
- Size 2.1MB
- SHA256 e658e8a5616245dbe655e194b59f1bb704aaeafbd0925d6eebbe70555a638cdd
- MD5 c97f23b52087cfa97985f784ea83498f
- SHA1 d364618bec9cd6f8f5d4c24d3cc0f4c1a8e06b89
- SHA512 ecfa83596f99afde9758d1142ff8b510a090cba6f42ba6fda8ca5e0520b658943ad85829a07bf17411e26e58432b74f05356f7eaeb3949a8834faa5de1a4f512
- SSDEEP 49152:cvrqKk8q2gqi2OXCt6kuSw9g8PTNTN/23uxjPHEiCAjFcm:cvrqZr
- TLSH
  T16EA50A197DD4EE27D16ACE33D6D25021E3F1E4932AB2EB0E72D357681842349788637E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  mono.cecil.dll
- Size 352KB
- SHA256 ade559d6af02dd346ebe4c45a0cc1043036eef1043e4990424b996fcb67282e6
- MD5 354f93e60e9a51128b30e7831f83ecf2
- SHA1 5a88348e6e2a4139f07a628874b82086962473cb
- SHA512 79641ff9085c28dce7eb3087a4952c6ce8c6f3e36f0ef0bee4431b7cb6d2c748f33f9c64e5e3753aef9aaa81748b6fa1842d6d7c1c60a40a1f42e2c5bc0bbace
- SSDEEP 6144:ZkfUXKIGaAmyj2mydYiEkJPwbIZzB7Kk:1KIVHmy8kGIZlB
- TLSH
  T1F0748E3623EC532BD66E937EE06A012E52F4E415739FEF795AC0EAF60C037625902167
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  mono.cecil.pdb
- Size 188KB
- SHA256 6350d9416a9e00ef217e4335faf57ac53058502067e40bb12371fefc4d46e706
- MD5 b669728b2d76ca6f7284d1827a264f9b
- SHA1 37277dc48b1158702f6f788e46170ee4775cc3f6
- SHA512 cd17a62234dd5bc73e269b58dde7981fc7eb7255a93bc44652e6574597570de5f99a8d03094f15f4fc54403726b761932111849d24e30931b4985d15c7900fa3
- SSDEEP 3072:ipH+6PNZSK5wvMSM3n4pYO7rdI5GcPgodkKXPOfZWyNhv:ipecnSKCBJtI5MBEgWyf
- TLSH
  T1F214F80BEA84A33DC95A05F5145721E626B9928C954F8B02B3ECF235FC8B7187F93359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  mono.cecil.pdb.dll
- Size 87KB
- SHA256 83dee93920776e467446b7f934869e2aa2d0a1450d2fbda1d9d84be8e418a4c7
- MD5 0b7b17a0a09c2d6458ad0e169924de05
- SHA1 a150ffeb11ec4e1a6204cdd78f99c1af38cff737
- SHA512 913f50a2cba6a9091b8877b634bd58ed93e64f535850910540a060b37716b41c673c76a51799e279f6027b3ef3a30b435f32bcab02b2f851a60a5bcc4a2907c8
- SSDEEP 1536:YffXkOOyX+6C5S6R7nQCALYKXNgJGsZaycLtvjCXeSo:oo5S6R7ndArWJGPyEtveXeSo
- TLSH
  T189937D36DB95777AE6DEA97738960C040BF0D275C193A74E4984FEF8390B31219622E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  mono.cecil.pdb.pdb
- Size 33KB
- SHA256 3ddabfc473957b611ed91114594548b271520293a29702cae8398f04ec94869e
- MD5 f2ef8203810b2d26dd3b693cbb1cd277
- SHA1 9418f57a723c41419d67292a164923cad4bf46f1
- SHA512 fd48f4b4978a7ca29fb41f6804b741555560b841b5eb670a97aabc7cb74ad7e6b1736c4f7b2b5eac1b1bd6dfc4fae6c55a069f22675068078abaef4fbb5c094b
- SSDEEP 768:R+PPPPPPP+Anm/C5wZ1mPvjdtxYiUqjToOwu6n7Rdcm6AAKDsBp:A333PnmK5cmvhNlU7ImrAKE
- TLSH
  T10FE2D83BD3B4C129C813473941B28216B7F18259A3278F2B639AB3359DDF3585EA2365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  mono.cecil.rocks.dll
- Size 26KB
- SHA256 5dab170f0d556c6105e8cce7352387b22e80cabfb348d61d623b2b2197984950
- MD5 ef72bd2e14788690f6626fa5a382b608
- SHA1 21bf0e545813319a031c1db8af26ba610055b466
- SHA512 fb67981981585aca1f541e47ea5aa30eee03d6af0713e7eddadc4818487b89e7dace5e979c124b9f91c1875ebafd3cf49a5dfe76f361752c546a3db9a59c40f6
- SSDEEP 768:VkU1iy+QcBCocUuk0ThROoUheLXQ99gBr:VkUSCo/KjOoUhsr
- TLSH
  T116C2F9012395CF6BC2EF467A78E1522803F1CA962813DB464DCC90A65D8FB9767237E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  mono.cecil.rocks.pdb
- Size 14KB
- SHA256 93894d2f1e57204f7d9c5de9a5ca7f7b9d563b1e42e8af207c6ee26386deacb2
- MD5 2be876c90f1f4a5c23788cafb5693285
- SHA1 3f4453e9a19a22c1c0942d0e5e24fcfcd583f646
- SHA512 4073d0a345ac4791c42ac8c2b61ce85d655b734ead75797398f120b9bc8281d16ee277cd1835a941e90c700ad50420e8fe31b07d1beccf07f1a527952d3f4a74
- SSDEEP 384:OSGEwwlajqW6jMai+NLy5nj4SCm5Mz6QkOAHOuXch81+BK570I09Y:aEwvjqjToOwu6n7Tx
- TLSH
  T12662503FE7A8CA2AC84615768022C259B7728318A725DB34F3D7A115EC9F3988772771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  newtonsoft.json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  opencv_videoio_ffmpeg4100.dll
- Size 22.3MB
- SHA256 d158bb02be89cecd4fb4909f804c0429aacd127960452b8118a1689d7a56cdc9
- MD5 bdfbd1efb295f3e54c07d2cb7a843bf9
- SHA1 6a86ab08db0f39208632f4bbc2d53ed76094be58
- SHA512 8749ca5c014c9912d82e31e7b17a04a5fa2b6fa916bfb9369b22f57868d9606f11cc09102ca380306e6f158d287c0f9c38b71a279ddaac49aafa17d8974f8479
- SSDEEP 393216:TS4tS5+N+Rt39fgR2Ez/DIiBSaDX/9GqsrxY44j9AthQIz2M8NWtP+:dtqRt39+2EgdIGqsrxcejEN9
- TLSH
  T191378D81EAC781F5E80748B0616BF77F9A346A1AC430DE71FF881B46FAB3F51551A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  opencvsharp.dll
- Size 929KB
- SHA256 ef64b29ec9ed40b09319334938f3c44098a34b0ea7909a1fbf12afd7e70b0943
- MD5 74e40c3c823b51c09feb8ab4931419b6
- SHA1 6e96507430d47c758374af708a6c3426fdeed048
- SHA512 3711078566e67e83010c163ad7cfdc8753ce67a67d05ddc98fcd1362950611a24d415dabb7d652174621a7d2f21d5a2f4411f427cdd1d5c5d0011ffdd7c86166
- SSDEEP 12288:hiFj9d+0VNuwLaZXxAL7+zU/1VbOCWy2rNOiigi:mdrNtLaZXk+zU/1VbOMg
- TLSH
  T17815E541BB905A07DE9E0331D02657A0E3B6E8E377ABFF8719A516390C43B985F891D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  opencvsharp.extensions.dll
- Size 20KB
- SHA256 9462ec9f0b2e054a39af017157df25e62b639408f5c70a47b3c5a90cfdf56f83
- MD5 586af85b1e349b872dab04ffd729dff5
- SHA1 923870b96afc47efbb1676d9145c6dd477d59783
- SHA512 fcc9bc60696eb94b634102acc3d97a618d6d0016e3c57c0088bccdac739a87eeebd0c60f6ee237098b5dde79914218c018b0d49ce0b2d073e5c59ab2f2498aad
- SSDEEP 384:JsOMX/W+mA3QYQcSFV06pp8T0BSY4bW+6ySVZlw:ku+TQVcSFV0z8e6NK
- TLSH
  T161923B0876A89326D8BF2974A8F511144736E2E1CE23E71F2CC970EA1D7EF844A11F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  opencvsharpextern.dll
- Size 40.2MB
- SHA256 b3572abd3947b008d78cf7d36bb43a5e99e9d84ef6c49f588bcbc83a1035ed99
- MD5 4900ee571d5d2f20f7bbc8c86e120c00
- SHA1 04e82ab71ac8a9bd47b284e291d3a9e1240f9fa6
- SHA512 6cf0bf639f93d1254eddceb42b528e3759d23117102a864f780bc571de2a2e5fd33d7ea0d681e419ade016351b525578be232e91daeb811164d4490c636cfa76
- SSDEEP 786432:cvCJJwyjiN+dK3kgbb093WIGSIpIpFiYk54iT3rmSyT0BCMDF:TJwyjq+dK33/093WbSIpIp8Yk54iT3rX
- TLSH
  T12697AE90E2D3E165D58304B0612EA7AF59342A34436888F3F7C4DEBAA8757C26677F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32