02240d26ed6a7cd59ad5876b13361f685621ccf25421e4d3786cb90419af34e6

Sharing

Copy URL Twitter E-mail

General

Target
Popstar-CLEAN.zip
Size 3.2MB
Sample260804-3k5s6atard
SHA256 02240d26ed6a7cd59ad5876b13361f685621ccf25421e4d3786cb90419af34e6
MD5 9721ef21ed57c848f7e5ee06fa8f4527
SHA1 0007e9b78980ae4bb3b98c89b55e958ffa63b278
SHA512 f8c6f1e664a62760e535cccee0c8a4142b23e331b2a272dd3f37c91a5d906b41177c53325522a87b5e4672017f8fb7e5b6caf439b3c013cabe72c36efc55388e
SSDEEP 49152:8UzLQ3WGzAMfsFofjXaH/RhnmJZypYxL9exJs8dPZvuA7r69AebW:1XQ3CoeWtLUxuMP1uE29zi
TLSH
T199F50236FC8CE533FEABD631A45E810DE6D1A3C4244C49F629CC46F8642E5A12D71B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  1h32pzt/libs/Clipper2/CSharp/Examples/InflateDemo/rabbit.svg
- Size 1KB
- SHA256 f1381ad47e093f4bb26e39e8ebf67cdeadad286051665ed982cef709eea86469
- MD5 daa643cba2a82c471591e3bf7c404868
- SHA1 459c9e271079906172543086b74d773cf4aeef22
- SHA512 a31529a7b1e027ac659113e9afa6a04671669ee90c1eeec29fef63c46b1a72839e6216114eb3b754480b9d8f3e0b965a915bafd4c1a42205b26196c73c15338f
- TLSH
  T16E314A5F03C64EE19E90369C84D01D02BBBBAC6534BDE254FA97913BF81E484CCD0B8A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  1h32pzt/libs/Clipper2/CSharp/Examples/USINGZ/bin/Debug/net6.0/Clipper2Lib_Z.dll
- Size 121KB
- SHA256 fe6c5e97d9fe87d035135596c3c4c0ea4c2e71e6ef21f9dd2a0a873124903352
- MD5 5fdafe3168ae6ce36587972f60dbfeaa
- SHA1 337598237ea3a7f7663f3faf1f1857798dadc6b8
- SHA512 107baa21215a801482eb9b49153b7f168a0089ca3239a02eb0f8c3e3c5e312ff479946f0d541e22d00b6d996bb0f36fcc27ac4e599117b232f557e7bd76b33c1
- SSDEEP 3072:VyLzCfFPyf+SvayUqhE8Dpc9kFC+zssXoaYvzNQyj/ZLQ8jtN:h6Pwv6s
- TLSH
  T157C30A3C5E988933D85E1BFEA0760A4757355026DA4BE3EB5D94B0F23EA33E38844593
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  1h32pzt/libs/Clipper2/CSharp/Examples/USINGZ/bin/Debug/net6.0/UsingZTestApp.dll
- Size 18KB
- SHA256 9969922b7a5451c016b6879b65b8acb520059dad59256e5d7453d29cef982f0c
- MD5 b78b86dc0b69e3f44250d4af5f998416
- SHA1 25589656e78f110960855d49c46d80bf5765409e
- SHA512 4c51f8ee3010eb93c53a3c560fb80306c478133fe38866ffb803c9b29edc4b2cef3a9b61265bdda9cf35cc68e254ec441399b14c83927882ecb973aadf9affd5
- SSDEEP 192:CflHVg57fcjicCYiiBeiFsjCdF+NEyky72UCfTLCge3eY52j7d0JTEotBfy9RuFK:0Va7sicCM8jCLHUCfaRf2jZ0qotJyPe
- TLSH
  T18A824B093FC8A216E4BE077BD4F325481BB5E8280A27CF5F2DCC646D0D52B9505A7B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  1h32pzt/libs/Clipper2/CSharp/Examples/USINGZ/bin/Debug/net6.0/UsingZTestApp.exe
- Size 147KB
- SHA256 25f3a17227027f1ef6b44f43e78d3e26951a54452505316cc7bf6128cb230db2
- MD5 84618b56a5690eabf81285d4afbe8db4
- SHA1 e6daf3bafd32d3eb4ae6cc3b60dbeacd733b40b6
- SHA512 02d0b0ae75167c9f2aec191c6dc9dbe3b6bf708eb94a75f43b45bfe4af73c9b7a97b2913c9e801441cbed1a27d1c83fbc6c9d64893ce27c7fd5eda765ea4274a
- SSDEEP 3072:05vnr5Tbx829UOeKnn2LFzZBp13u36wKp4zULC2ou:0BKjK2LFzZNfIUL7
- TLSH
  T1D4E3280772AD11E8D1BBE23D89A24902F7B63826473597DF1350427A0F777E0AEB9721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  1h32pzt/libs/Clipper2/CSharp/Examples/USINGZ/bin/Debug/net6.0/UsingZ_App.dll
- Size 19KB
- SHA256 1d76cd975ee808d8b8380c9a63dbd327cfc6e12a878d18d933e6c71e912a2898
- MD5 bebb117e3a77b52fab443a95c5fa6f39
- SHA1 154585ef49093eadba230b9aaa3c939b81cc0224
- SHA512 0338adc68af4c94154c165d5b4b5e67ebc2d5cd0abce0aac4fd2dc79fdb3bfbec351e5cd878450e9b65b57e7485ec153594b686b01801a9e792e22e4e441f825
- SSDEEP 384:tVa7sicCN4A3kIZQUCfaaj2jV08o8HyWiI:tVwzyARZQ12DoSy0
- TLSH
  T197924B4D5FC8A126F4BE07BB94F331480B79D8684A1BCB4F2ECC65690D527D805A3B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  1h32pzt/libs/Clipper2/CSharp/Examples/USINGZ/bin/Debug/net6.0/UsingZ_App.exe
- Size 147KB
- SHA256 e77813da5f22b769ef849f6b94e48a0db3aa6bb173cb4f340f129079aac90ae3
- MD5 1562c5a9b7d1d0b7f631804fb3c5bdd9
- SHA1 54339a5ad3d2495a7ccab23b669c8467e250946e
- SHA512 6047652a280b0c911fe1e5027a4a1e35ff84c72daca41668d35eac2b0a7620d10cad3d50392462ba023c4f3343150ec6d1ad34380829e6745611b275e7510f5f
- SSDEEP 3072:c5vnr5Tbx829UOeKnn2LFzZBp13u36wKp4zULChot:cBKjK2LFzZNfIULk
- TLSH
  T133E3280772AD11E8D1BBE23D89A24902F7B63826473597DF1350427A0F777E0AEB9721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  1h32pzt/libs/Clipper2/CSharp/Examples/USINGZ/bin/Debug/net6.0/usingz.svg
- Size 2KB
- SHA256 ee097a5f75b671f3bc17549b10a0beaec3193e8e7d0f2a7cf26a245a686cca87
- MD5 241c78150aa7011de92791eaa3629f9c
- SHA1 271fea5d913269c274b6ff81bf21ec780d16c37f
- SHA512 b89e16f4e046b711e2df3a1d17a641fed52e765fe220d5f9730a748dbd24f0c1b2fea99c5128892ec0628453e8f69ea8942912a1aeb46e9ea57ae9f3b81ccb88
- TLSH
  T14951CF68D5C84E68C9580FC9FF0F736378AE39C11AC0CF02D1A9452AED45A7E9E523C8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  1h32pzt/libs/Clipper2/CSharp/Examples/USINGZ/obj/Debug/net6.0/UsingZ_App.dll
- Size 19KB
- SHA256 1d76cd975ee808d8b8380c9a63dbd327cfc6e12a878d18d933e6c71e912a2898
- MD5 bebb117e3a77b52fab443a95c5fa6f39
- SHA1 154585ef49093eadba230b9aaa3c939b81cc0224
- SHA512 0338adc68af4c94154c165d5b4b5e67ebc2d5cd0abce0aac4fd2dc79fdb3bfbec351e5cd878450e9b65b57e7485ec153594b686b01801a9e792e22e4e441f825
- SSDEEP 384:tVa7sicCN4A3kIZQUCfaaj2jV08o8HyWiI:tVwzyARZQ12DoSy0
- TLSH
  T197924B4D5FC8A126F4BE07BB94F331480B79D8684A1BCB4F2ECC65690D527D805A3B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  1h32pzt/libs/Clipper2/CSharp/Tests/Tests2/Tests/TestZCallback1.cs
- Size 4KB
- SHA256 1c71457fe6192175d8c7f94140e33cb3a45d9712acf63222da5c318a2df987f6
- MD5 153ef1c1b6a38397ce6f6f2ba19fde01
- SHA1 e47b9686f318094964de5b1bfba58bc3ce4d26c5
- SHA512 ef9b56cda9b95ba7011121baf0c6dc4c8ff530a3fe244de67060b07f1fcc165e4b1458ea251065a9b532e8e9be2d83ec84dfe3ef912d9c7f3beb8c186f80ea64
- SSDEEP 96:T/UtXecrIQRyeFGJjGW/oWrRUQeOGJjkW/orBlwRGJjGW/I5BKOo2mwcZGJjkW/p:zUwQjTEgqXBlw/NB1oHwcZG
- TLSH
  T1B3A1F10971119AA15933A35BEF114F49FB3646A720CF3734B8DC52C05F3AD51874AA6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  1h32pzt/libs/Clipper2/Delphi/Clipper2Lib/Clipper.Core.pas
- Size 80KB
- SHA256 aeb0e251a6ac01a17b174b5ad56220038a258aab080f064dddfeb25dab7ba104
- MD5 5328d302c7f48d37d7a8374b6ad0a07b
- SHA1 77ec59c4bbeb202e9a223108d1bd025f0f5a4dc1
- SHA512 ca06d61fb1c90e49185fa200d1ca11b9033716af9ffbe3deee49b1fc72a2add820b4330b6e01ddd8b515bb9978069c926f8c79dc31428788ee83d115a48cda4e
- SSDEEP 768:O0+NHejruRxVSx/kGw84cMKAJoicVITRtR4zcaGa+FR6bJE4+oNkC6GT:O0+N2w0KlbUpfNkC6q
- TLSH
  T1B083861DBD463265C170C77AA306100ACA54A122B3419891BC4DE1F12FA5EEDF7AEE7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  1h32pzt/libs/Clipper2/Delphi/Utils/Clipper.SVG.pas
- Size 25KB
- SHA256 8c37840960a10a025d277bcaf840dd64a32b4c2b71aa645840da87b81e2f457b
- MD5 e55a064fcf421d0bf2f4d1163e5595ea
- SHA1 f1ce70f79d3d2e9afc404ec1c12d461b7d10bb42
- SHA512 69b1d31d7c7261a151bcd25cee0b2e5de18439bf383cdfd0b67699a841d94c81aaed18f635fdd211d259ef16c9ebb5c95675a46c9b9e649d1cc3d4969aa09cc9
- SSDEEP 768:1kpwYkqLDU7TOPpAXnEsGGuz59J8UwyN75:1k+TOPGdG5z7n5
- TLSH
  T129C2641ADDA6176A1633C3AC8B024195CF066413634685D5748CB0F43FEFE6D92ACFBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  1h32pzt/libs/Clipper2/Documentation/CodeScripts/SyntaxHighlighter/scripts/shAutoloader.js
- Size 1KB
- SHA256 0841295a7e23dabc77c6deb5dc0d10e89a81db34c125f5c4acaffbd2ded3ebde
- MD5 a122e7137e224f646b22b910a779d211
- SHA1 5622d674a99d6052829893851dcee1c9b0c7af26
- SHA512 86c6ed3352213f0a0d636393a1e9f5d4b9f69039f46271feed5665b80e406de921e2458eb8d3b544a9de3dd362ac0f09ca5890c7488e00a31cbdbac0b861d037
- TLSH
  T13C3172A87B69307266565863087FC10E0F6017DB3687D121A08EE0CC3DA08D8048FF7A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  1h32pzt/libs/Clipper2/Documentation/CodeScripts/SyntaxHighlighter/scripts/shBrushAS3.js
- Size 2KB
- SHA256 9871cb70f85eee26668f7400c5efec0245311529c0ba0be27a31d535b39e9a8c
- MD5 442d259478af459cb198f1c7920cd6bf
- SHA1 2e4aa2b0ba7c211a461f4178831af47f0e0613ae
- SHA512 9ad6d5d32350711f55725789bac944cf4e2d876e44e759e47efc452bbea673fd9617a2a23887b8983d8ca8e615ad00a1855c47625ac8a76b27305decf4294b92
- TLSH
  T19041A4949A2D308C5DC181B3144AD00FCF1D97F333DE815C7F5D98EE6A226AE811AE61
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  1h32pzt/libs/Clipper2/Documentation/CodeScripts/SyntaxHighlighter/scripts/shBrushAppleScript.js
- Size 7KB
- SHA256 e910d375025acb7942dd2a1afc0cad373d424a37610876636ef6bdccc5615c29
- MD5 74a77dcec7dd7bd0c996c312d10569bc
- SHA1 4c032070be424731d1fcf15d5f14c5ad50aba9e2
- SHA512 9df14f721e8130145d814f9f0288df1cfc1fab3b14f17a49c49c9e965a7f71841ed1acf1f30457f42a04fb4132f2c7caf61e19b12670b8b96f07616027818778
- SSDEEP 192:VzxHnCmt4of/Q/iNUDGr8my/47hGMxYZ/a5vT25MQ:VtRpA/iKa/U
- TLSH
  T14DF1E9E1BB2EC0564FC320A76897D04BA63AD0A1B15BD428FCDD484DE39179CC297F66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  1h32pzt/libs/Clipper2/Documentation/CodeScripts/SyntaxHighlighter/scripts/shBrushBash.js
- Size 2KB
- SHA256 4819e4b43b2b58bff731cf248d1014ab89250ad347fd0529c246385865e54974
- MD5 2d78054b479066ae1555e9c3ff2982e8
- SHA1 531024ca0b9decf816ea4c1edb65ac732bd445ab
- SHA512 e9bda7332e8144f61eb8ee7639e03db994c403b2164b999becc5c0b7e216f51a7e4a292281662833b5080d48e33885ed744e98d89fb10bd912e543f726be1420
- TLSH
  T1DC5185DB566C30A52E4045B2ACC1D18BBB1E8BF331DB9449BD2D94BE239187E402AD16
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  1h32pzt/libs/Clipper2/Documentation/CodeScripts/SyntaxHighlighter/scripts/shBrushCSharp.js
- Size 2KB
- SHA256 df44c6cbb3944b3bfaac20e2666af037613853bef6a242dc2ede1fc8efdf63cc
- MD5 b280eea611e5ed28f08ea552b59dfef0
- SHA1 bad1e3c00e03fc7475a7b92012d8c39488a94ab1
- SHA512 c8ea09fbc0dc68438d3df9ad3cda9290504b1ca498edbcbf0d8b223f484e6c13394945e05208af04c44712c9f1692c804033f7cb189f2a2c02a73868c041b39d
- TLSH
  T18C5146A88A6DF49C1E9054B31401C04BAF1D97F333CAC55CBB0898AF7643A6D817EE56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32