b1eb8e26e8a2a32d6d2b7fec165e61185e44b7617c94eb47c94d6f779cee092d

General

Target
RemoteWebControl.zip
Size 166.7MB
Sample260803-xpharsec53
SHA256 b1eb8e26e8a2a32d6d2b7fec165e61185e44b7617c94eb47c94d6f779cee092d
MD5 afb35195024b72769980e427c530d630
SHA1 9f41660deab93c0a11ae954a0a96d8decb6e2aa6
SHA512 8a0188ee093a319f4ae038de238c6b951aa19e9370bacf8022e95cf932967ff70dac2cb5ddc64dcc376bc921f32a185a7b80ddb7185fb5f7c1eb9795a6616b76
SSDEEP 3145728:t0cIAqrla/VLOiif9XafWCAx+/YdgqI5vGeYx/3a5VMN5DsKm83p1qswP:tSBatSf9XafWCAx+gdS5vEd3awrDr1+P
TLSH
T126883324D6764937E2731C32F769CB6EEA6ED72101056E4B308C1B948ED9C8B1E72B74
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  RemoteWebControl/InstallNpfApp.exe
- Size 33KB
- SHA256 a9c7a5511da372d5820f973c186a9fb9abf6cc11e50cee88dc8a2f38ecdd4e49
- MD5 d4e0379f98c0e01cef096a1d81fa7677
- SHA1 cc8264eeb243804ab1688b1a0a44462683e25ad7
- SHA512 d7c0edd2616049bad12c9611e951a5992e3e7b8b5b33e28c4955d9595b333ffb668fafeab3117720e19c0bb34f733fab7f8e94cfa3b9d49d7430e69f8d76c763
- SSDEEP 384:0uwgeYB02mlGVaH5OyyECsey+RW+l4A5XMCrsceMyop8v:0uQWCsyd8yx+l4qcIy4
- TLSH
  T124E26D97ADD40A63E886CAB0A4F4EB179D7F72511DB18053D6D0C5DE2E653E02E2DB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  RemoteWebControl/Remote_BeePdw.exe
- Size 544KB
- SHA256 15ca328a5e270de351fd120d167514d4cb9ffeb652af079a8f1399e908b369d2
- MD5 a8798a7d457b723e80d18bd6f4bca190
- SHA1 88085e168c1cc819870b2903cf9efad4d2a0414a
- SHA512 0a70719354626598eeebcde6b670b5eb79e2dd5a89607c30894e85c97cd8d1fec29e79a87347b757a91ece7e7fd0b07ada3f3949fecc698097af3fbb1bc52226
- SSDEEP 6144:F4GNFFjv2cyTdaHOlJ8SZimmaH7j/Jdg3EeEoYj2KhivZBdVWAZEtMeIR3:pPFjupaHOwAiDCxdgCoYj2KKVWy+IR3
- TLSH
  T106C43D105B25D23AD8B700718DBEA65E506CFE7503195CD3F3CC4E9A19FA9E23A3291B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  RemoteWebControl/pd/Remote_BeePdw.exe
- Size 714KB
- SHA256 5d93a13e3b1f55000752e0e69b83ff1d19f2aec73bbf555dd524b8497ac12924
- MD5 1a9f634ace53e9206a11359db1d03344
- SHA1 0048af80c03da7b146f4bf44fa929745a1d9e085
- SHA512 420e5de6d0bf5d67c8c19968d214ff0e7e4da8a4fdec75755f831c6950cfc2baf96948d6a6a8675783c599c32b47fbc6834011229d8cdb7b8536619c7daee2ec
- SSDEEP 6144:PvCx/8yvsjnwKvs3ccmYhzb9EldtiIz7OsYgGBXvI2OPVSrJf9t/VxpnFvDecibR:8tvsjnwKk3ccmYhXSYKktrFNtiZH
- TLSH
  T1C4F4E91BFEB650E1C07AC0399593612AF9B034A6473067D75B919B2F1F263E5AE3DB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6