e74f37560028fc6981222f69aedc1b370e095a416f4a1b4664710466bce7c45b

Sharing

Copy URL Twitter E-mail

General

Target
AzureSetup (1).zip
Size 215.0MB
Sample260804-nlx3dayere
SHA256 e74f37560028fc6981222f69aedc1b370e095a416f4a1b4664710466bce7c45b
MD5 edae03a029c8b5fe319babc55170e9b8
SHA1 3f5cdfbc2ab28f7a79915938a48d36e79ef4cfde
SHA512 538b59af77e4a4fda34dee2bc91d5fa1a073b691700d3c502c48b5b2049d6e943f62c4cf3da05e91fa806e3594cde5fc8ce053bd6faa7639d260204f8518117f
SSDEEP 6291456:YnEn2qjStSHuNKU4Pth+qhRq0YVw72V4AGChl:YnIlw++KU4Vh+2qH672F
TLSH
T19FB83391233407A71DBE697A821C513FE5FE0AB2FE2ED254D1B3B805782735D76248B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  AzureSetup (1).zip
- Size 215.0MB
- SHA256 e74f37560028fc6981222f69aedc1b370e095a416f4a1b4664710466bce7c45b
- MD5 edae03a029c8b5fe319babc55170e9b8
- SHA1 3f5cdfbc2ab28f7a79915938a48d36e79ef4cfde
- SHA512 538b59af77e4a4fda34dee2bc91d5fa1a073b691700d3c502c48b5b2049d6e943f62c4cf3da05e91fa806e3594cde5fc8ce053bd6faa7639d260204f8518117f
- SSDEEP 6291456:YnEn2qjStSHuNKU4Pth+qhRq0YVw72V4AGChl:YnIlw++KU4Vh+2qH672F
- TLSH
  T19FB83391233407A71DBE697A821C513FE5FE0AB2FE2ED254D1B3B805782735D76248B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Azure.exe
- Size 100.7MB
- SHA256 3246e682c5ebee6ba6e1061bbbdd03ddc7704331fab51afa1d68bc4b986dff63
- MD5 cc5a2e85de408d2ba0d66250249e1510
- SHA1 dc44e71ee359ee5b5134ead2bcf45a4d2e8144ed
- SHA512 d43274064f7410d515a94c78194a27f299c6d717b8d1fc4b2e8936d9820ffb6c5381be907431b1346258f20761280d4e2406443c1621a9a0795bc998d04be583
- SSDEEP 3145728:pUKAnorwkuTOlUeLXUpoDMhkZD5ZA+tx9ZQGXo7:cor1xGYmiMsZbZt8
- TLSH
  T1E238331DC060BAABF6A54CB325F186A5DF8167B215B2D88BADE8F45473701530E7C33A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Executes dropped EXE
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral2
- Target
  LICENSE.txt
- Size 9KB
- SHA256 7f6839a61ce892b79c6549e2dc5a81fdbd240a0b260f8881216b45b7fda8b45d
- MD5 31c5a77b3c57c8c2e82b9541b00bcd5a
- SHA1 153d4bc14e3a2c1485006f1752e797ca8684d06d
- SHA512 ad33e3c0c3b060ad44c5b1b712c991b2d7042f6a60dc691c014d977c922a7e3a783ba9bade1a34de853c271fde1fb75bc2c47869acd863a40be3a6c6d754c0a6
- SSDEEP 192:ydP0KvBLCqikR/EgGJLrlwD+eilNi5Py1SDeoDXDw9lF5OMz6Q:PWBuqikR/EDJLriwlNi5KI1Tw9lF5OjQ
- TLSH
  T1EC12B57D7284177109D207E16A0AB9D6F62A953C3117AA2438FDC15923AAF2CC37F3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral3
- Target
  config
- Size 3KB
- SHA256 60099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5
- MD5 d9bc824737177af5792846f26507231c
- SHA1 c44835e4881d95a97b597bebff5deba0233a5887
- SHA512 f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8
- TLSH
  T114610CABF16C48F87171266692FFFBEC51B380A0DD3D2105AE11DA021927F67C853AC6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  data/defaults/sample_109.bin
- Size 633KB
- SHA256 d0de368e953bd7645e5557c25b92082221723b4821eca61a41fbeb9deccc2a33
- MD5 77c8e1bd7174abd8c41f3ea4ecf10adb
- SHA1 bc38392c8f4bc8017ec31ffc7ade0b7f36fbd25c
- SHA512 e182c0121f82b705a4acb1a738ded767494dd5fac215728e6680ddb90c8f56539fb72a24b8edd94533f01dbc8e5bcdaa622167c86b1e6b1d71c43b9965424c61
- SSDEEP 12288:EsBSE3L80XxxEoQWJt9/mFQEGBv9i/cZS9vnB+5d7xURN:EylL8VDWn9/mFRg9RavnBE2N
- TLSH
  T15ED42313A68275F3F2C4A40D9F5A3BD41E5020BE219D072D0A7EBC9A764F78586E6C36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  data/defaults/sample_86.001
- Size 836KB
- SHA256 72d01544857b2c0aebe05d478b0efa3ebe5b6488dadfbcd3ec8dbfbfcf7ad12a
- MD5 e35e27fb3be121e4db136e23182e4a94
- SHA1 6a3f483b14ea3f522aaa5c95651f0ce321080141
- SHA512 c3093c28c4ec15d7a69646054836da4e374d528daf78e81556e1517c9152c699b13c59aae6cdcc0d4c86eaf41f277eb5f3ab689d78a9fa776a62b925ac5a9330
- SSDEEP 12288:ysGaI6lxHBjGr2ty54Ft80dEBw9NBV9gjXvigWyvfsYeycqsPr:1rIAYit0p0dEWNBsjfZWy8VycqsPr
- TLSH
  T1B30523A5F0F63F132C14633F2B6AC4DFCDB98559F9361873AAE41A1623B5583ACC501A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  data/defaults/settings_41.bin
- Size 805KB
- SHA256 ea1c9d6d70a16459c4bfbdd7f80957dc2ef3ba51978c50a6c28097e2f25f8870
- MD5 5e9d9cfcd69c3f6e1adb24bf105fa068
- SHA1 59324d2afff130d38b88cac04ff4d6a5b5d355b3
- SHA512 44a8502b41b3dd37fcda183e82e3b384fbb4ba213e243fcf07781e3fe17428ba6d7a37b33c9064de4517febeb77130f3f2d3b0a33ae030f3d57467f0cf92011b
- SSDEEP 12288:ZEs8x9EmaFx9fHSclos+lDlUhg18S+1+JUp+vj9ocEJKR92u+ETh5Ck4AP/2n1XB:ZEs8x9wkYoPyO18NV+71iu+ETakl2Bzd
- TLSH
  T1A205339DC64E3F4EAC1098D4BD63E532285F0EA056219CB739C5AE1974C7BF0A4DB4A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  data/defaults/source_0.001
- Size 772KB
- SHA256 d5c1ab67b3d5bc9818bf5628521ac5b45fac45ced6945782ec1e26b4a8fb4ad8
- MD5 f62f4848347a8896f23bd8c1fb736348
- SHA1 cac9f3b7e0aa6675235ee8c05ef0d437b6ddac58
- SHA512 06344353054e72665e226570dd8e3ca610fcea1ec6c9a0c77542e95717b8b356cbdfe6b1393f24f34fde7a84d4ab94fef8005de37bfa06a9958bbc34e2810825
- SSDEEP 24576:PP83gW4au4ZQPz2WUaQ58x528La8/2JekkTE:P/WA4ZQP7B9aKGeNw
- TLSH
  T168F43374062FA696DAE76FF7007D78F54687586EF063350EF86E1E4158E8A4A00F90CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  data/defaults/source_13.dlm
- Size 720KB
- SHA256 83041bb57854211f3310fe822a9d9eb498469a8aef8473ea794622db3e2b1d88
- MD5 93c865dabced604eef4b59e64c49421a
- SHA1 edb8326a2dc6ffb7a19e9138bbe2b9e77ae4ce17
- SHA512 ef2360b02ac797ac26df5074c65f1a723064889874649a918cd40d61abed161c760cafd6e4dfc3a2a3fe1786559484f3d9541e45c7341ff469f4917b30cdcfc7
- SSDEEP 12288:87w5bued2IUiTpijbKtd410JxgG00lD3Nc4N2giIKLYP+KL:M0dtpAbK/gFcD3Nc4liIKLq+W
- TLSH
  T166F4330039574D3E9AD960263DE75098B7AC5EA6B0B336C7DC5857D8E834E03A075E2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  data/defaults/source_14.sdata
- Size 586KB
- SHA256 e9e731e4a15071539796f2540d24eddeac5bceae93cce0cb30449d7be1b82f0c
- MD5 503dba041b452307f8850df42d8a148c
- SHA1 a64ecc5e2c543b4fa53dbbf608cb0af344161856
- SHA512 73fd5c1a0914df6356b200b0170a3ebd753b6be9cf0d6017dacbfb48c9e0bef7bbb1705e5a83927edb3d612c6bd498c65a8806fd1dc583db51a44711f946c96f
- SSDEEP 12288:gMKS0/7ai9eN2W0sipH5kT1DAhVs2WWx8vzS18/KGWv0iouZ9:TKGi9tW4Za18hVD78fCVv0iouj
- TLSH
  T114D42328520393466E2EED942F2F22992708F96F7D5E472F55423F1D413A5ECBB143CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  data/defaults/source_30.dlm
- Size 759KB
- SHA256 fced039092e723c88fe1adfee3211a58ffaa2c7c1149d65b44738539124f84c7
- MD5 670e3fb0d6d042beeafe22a766fd3515
- SHA1 7ccb37c60907605846b1e6934d0dbf9f375e284d
- SHA512 d70581404979b5250a09257c7b09242d414f4a976b3d74879f9ff08ebba60805fa5e09578a6e6f183a2f8eadde41b65c60161775a3bd78c5d9e9694d83bc4709
- SSDEEP 12288:wAiEAPzUvzf+v4MiRLDlZH7/bNzSzW5OW82ryR/m3mN0HA/7ZHTiyRy6GOGcf7dg:hqPUzfeixvLRzS4OW82rMmWEA4O8OGwS
- TLSH
  T1EEF4236A00D321C98F26D927CC91E09510AD24651311DCC8C7A657A23EBF97BC6F9EFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  data/defaults/source_38.dll
- Size 665KB
- SHA256 f6fb7f66535add4f53bb82c78f26da829ca4a4087cb0e0d59eda47d2bfbf80df
- MD5 a395b7bb03d95ce6b5bf5d544a30f60e
- SHA1 ebe1ac6a941c4c9817f0f6a467e2fd07b3a04ba5
- SHA512 a678d5a6662767b550d1157472722457ec7f6b73a792aad68112a0b31bf9027386ff980b1e640c614f30265727c9b37beecee487d1cd17acdbfa6178aa8c76a5
- SSDEEP 12288:Cxc0cX8wIyw5XLHkvRKcN8eAHJnJMxjPuv4dafAzUcr7lESJ:CnC8ZZhLu8cN8eAwmAdoAzUcr7S2
- TLSH
  T1ADE423A1CB51D4206EDABCC3DD8549BAC6FB1888940EF33476060A15DC7254BECBEAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  data/defaults/source_4.dll
- Size 907KB
- SHA256 934cbe9ed16656555b41a3f3a489626a5d37f38d270e5db7c0baff64a047a2ba
- MD5 69c649d7e5625f4967ab66fadf3436a8
- SHA1 4d6a5d94218736b798f081911dda851f44d06f4a
- SHA512 6a0ad4abe069e3dcc69577f93d639802b48e02bea7d3395c8a81a48962fd97df93a618d80d689685cecb99ab621c202b54839ab170183898ba20d7bf6ca0c61f
- SSDEEP 24576:FM+w8ta+GvRYTcRbU68mgl8oVDhWmEH9rBLrN0Gy6:uyfGvGA1UkC5DhWjHNg6
- TLSH
  T1171533FB5A50D683501DA98CEFCF8522768A98EAE04C4E16944AF14C41FE1F4DBF48B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  data/defaults/source_71.data
- Size 939KB
- SHA256 564afe7006d15870b637d2415a3688ecd6d21fc9c14468a61e159e46d14acdb5
- MD5 c0d1c5d1ec6a20aac53959e0eb5a6b28
- SHA1 cc412cb0e5316da0b84cbb1486e79cbb0454a2d1
- SHA512 b8236475df91cc2e88fc83d6144b5c52b1c612d8be759129425dc305e7b347523c64da8ef934628398caf0aa35ccbe970e5f85068c65cd121be3437d2aa5e1be
- SSDEEP 24576:q+bpON6iT77Q4KK7mlLjnssO/fzJLrkOUHX9fc:q+FJsk4KLXs7/bVMHX9E
- TLSH
  T18C153339FEDD2FE9C823BA57BC80F20194625AD198F25DF007A3298CEE16EB7111D156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  data/defaults/source_89.dat
- Size 985KB
- SHA256 c7eb9c4bf7139a058daad007e65a4a87a3159f0573946c6bda82dd204015e8d6
- MD5 ca1752d813dc2cc5dc6e638f533efc9c
- SHA1 fcb3bb890634b5d389a718800aa1bd2b561cf868
- SHA512 6b418bf5ebe517f559013160e2a9e2d6f504b69597e1db49dd11785c72eb32111f547ace0d7bda0294454e7bc2c84006cd02a0d2eb1b43691b257cf5754a2796
- SSDEEP 24576:ImInKRgD+TNQl5PvBekjDBKRfipJlKaK6m3iZOtCnjCZ:ICgi+5QkQaXlKaDFYCOZ
- TLSH
  T1B125333E84E1B444EDF42B1BCB6FEA3EB87F855924B884049880B7817737295D57B81E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  data/defaults/source_99.dlm
- Size 949KB
- SHA256 e3e087d5fc698da3ab5eb4d007b00d9c62fd1cda5a1427dca53e8fa8953f3088
- MD5 5265df3e37e9e31382d3af9b7e60a5e4
- SHA1 eb849f7d27b9e1f5c14172946f0a3c3a1b47b514
- SHA512 53d954482420d28cbfc0c1da8e5bc6236c8e0fd63f9318deee001b7fd390fa1d0dfece2ffb50704ef4ee3a66ca73ee969799d3d34e75ff237c227ef9e3cd937b
- SSDEEP 24576:C7SpwXowBTanZerIaSMmqOKqDhgX+6iHAGR8v5:CU2GYCMQKHX+jHZ6v5
- TLSH
  T1CF25330AB308D9486F7E6FB135033BCC636229F841A5AC59B60E6A58D2DD7D9C8C17F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  data/defaults/stats_28.dat
- Size 937KB
- SHA256 cf637682719570e17d713bd7676886e2484caa7630148c7119d24cc21285e4f4
- MD5 fdcb57e748cbca851c0ed104801157de
- SHA1 98f9fa54229e3e4258eae68a7ba7f8cc59c982c0
- SHA512 6b540b269ca3734fe80cd4a18d7cc1a87ae1a96dd1258bfa94dfaf9a5dd2df5d7df0231f015c79b0e957978d52c3f8cb65384087887a652a907dca8249773074
- SSDEEP 24576:UWcNBifusI2xOj9R1O2NgM3RgB3JGJRSXS1imXD5dSSuOd:UWIB4I1NLQgJRt1/z5sTOd
- TLSH
  T13615337B30FA68F4C9C85BAC3E813A0990A60B6D739F8745D724019D82697E79F78D90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  data/defaults/stats_94.data
- Size 791KB
- SHA256 89c4f2bf4f58d67b40178a5a0d9491ee93f742c7b6ee15e2d7ec3d06c0f9d2bb
- MD5 0f3373dcd652d8f4e8fd593009598c0b
- SHA1 4341b9aa067679f567d2be4a1dafbdf7862a5651
- SHA512 68f123684c7b0e0fb937639f8a510ab9ba0d3358c4b5bcc43a13fc5d1dda40c09f9c46690e0a2a1a12846883a3c86e40f15568570bb6944cadbd7247774cfd39
- SSDEEP 12288:0H/tILCvf7jCI85dSDQCx4GchDRvdQ4T3xlsozCFjNES6pv/J54ho/6tR+:0ftI237vQCx4GczvugUFjveB54yytR+
- TLSH
  T1D1053309B6FC758DE6CCB23C259628CA0A31981CD91FFE93D07C913F976984BA7D4158
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  data/defaults/struct_103.dll
- Size 589KB
- SHA256 b2782fa28f8bb95dc9eef2ebeb70b87a6b35f619861c7cf873a9a5957f9fc0c4
- MD5 b511aa0ebf412136e54da7b74939d17d
- SHA1 e2e6162bca30ff0308c68a59523d5872de031855
- SHA512 82b38aae87aea1937f0f49c2d90374f04adc1317cce827f98cbd15a6ef238631279eabaae869894dcfc623f0c41d302f3da82d820767d3340f647fe7cc57bef5
- SSDEEP 12288:FCLaRmXa9NpuSmytZHi6HuDb5uaQfILNbwA4rqKDuk:FCLaRmK9NgytRi6O8aQfIR8A4rquv
- TLSH
  T12FD42364256AA33E7277DA04130A4F337874DB0DB58273AAF6C8101B95CF4EAE577722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  data/defaults/struct_50.dll
- Size 577KB
- SHA256 26ee02173181855210730522ffc5b5bad2c45f8fc4e8f041ff3a1291e5851706
- MD5 808be6ead91d28814e5abc792686aba8
- SHA1 a30f52ea0223f2a2ec2300c2780047edb581689c
- SHA512 8ecec9a41e620206a702124e5d8c2f29f507437c4e57796cdd6e272e79434077573155276dee2d23885c89fd119e3a44ec2810940bdad30375e7f2608ac54a07
- SSDEEP 12288:4sihnDx/RQcdQbAQpl2Pll4es2xbOpxBF/NgFWX07io:4sGDx414tuH2xK7KkX07io
- TLSH
  T13EC423BDC83A19C99740E9ECA0A3547F390396D648ADE46FDED3E553C0280D49A8B7C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  data/defaults/struct_83.sdata
- Size 868KB
- SHA256 7bdb39fd0206719e11a1e5337c8a09dee89faf26ac3e1b052df8acc5708fcefa
- MD5 db74bb21631473f8285f2e934a5493f1
- SHA1 20e846fb24149d149c56f99e6172edbf6a381d3c
- SHA512 03edbaefebb18a46f4e0a9aa38dffbf194faa4d06be67e00a69c990c99b12af2eba1877fce75549dfef7c820b96e4749920f1950d72532126a4d467030f6b34d
- SSDEEP 12288:ZSmqefCpKrCDtcoXB2a7NbjcpU3IDYDUJLpdI+76Nt3tG0wKjIv6rZvTRiOs:wmzapfDCO2yNb4yh+7673o0wKjm6rNxs
- TLSH
  T16A1533467016138631099BC19E3DE8FFC9BDCC46449DB8FE29CC896A6D45A887C87BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  data/defaults/system_128.data
- Size 626KB
- SHA256 1046f44fc5fe881c47763993d07f9f55b91c1d744629f739ad9eab51bb316f1f
- MD5 fe64dd7b01bf8e0380af8d55f9993392
- SHA1 721288bf88c755ebb34fe1b5662a3be0455df480
- SHA512 abf227b108a8325e8d41387a2e7d037e6e7f33d36c87568e208f3c9494d669f8e6e66c7a9fe096cf3441da1b996cc2282659bd85db682ef82f3d97ee26f53a4c
- SSDEEP 12288:DAxsPrhZfG9Cq0/NVC81YC3tjL9K38KgyKF8Bg8EAdqe3eljtU1x:DAxsPn+Yq0//C81Ya/EpKgvEA1+Uz
- TLSH
  T19CD423E683DE630B00158A4001F3A0C73B589ECDFD7C5A99AD9937DDD918A7FC698B84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  data/defaults/temp_54.bin
- Size 646KB
- SHA256 ad1fca43a8f168e5c68b6c379054d13392bd3806bfa566c8527540162d6b8842
- MD5 1d0436462278dd1ffb97901e1f1339cd
- SHA1 82892c50e5c71756aa8bd329da2b8850e432f7c2
- SHA512 4dd0287a3afa7a9527b55d003a3511845bbe59077df9435d66ec0f7898a6bc6bc77050e5bc39a76de0b712842ce47ba3d21666f7d35ec9738db9539da63c9790
- SSDEEP 12288:Uha2c9gP5TaD5rWXj09znhMMuBrUCh4G3jf0YAc4JK8aFviNFwSGInqsl:Uha224Xj09etBgCyGqcsaF/Inq4
- TLSH
  T15AE4232453742ABDC40F9767640312B33E697EDB48E1AD3312256F09097F992FCDAA6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  data/defaults/temp_82.dlm
- Size 605KB
- SHA256 2352067024841f2ed81a6e412107ac81ceceba13bbc1ccba756922a76541fbe9
- MD5 70df33fd55cd57fc478247b63433a785
- SHA1 a754873464b6a4f89c61f3af0f100b4efcba7583
- SHA512 08d347ec81f9262818c1bc0334038488c8db39eab9b6126bb12244d73fdb038fdf30b777e8bc66bf326bbedae55f25761675be49b719ec1bb3f772905a1ac7c2
- SSDEEP 12288:pVn029a2xWuv9E7h5gpXLl57eUUAe42CqdDcdslrhP94txBHNU2spRf:r029fMQi5gpXZ57eUUAe42CqdYe4ETf
- TLSH
  T12DD423BD08C2D92043B18F478BDDB52DBB5ABD642E20C4916D4CB60C3B66759A2F522F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  data/defaults/test_101.002
- Size 1002KB
- SHA256 2b5e8410135ff06acddafef0d5ac3ae43a789426bbd8c1d83f2ccc18d1707900
- MD5 85e6da4f752f1a80986be44dba78bb75
- SHA1 417b0f97b4314672dcb369df1ce84445082715c6
- SHA512 846fa48178998adaeb367072ba7c953838268ba2b2f40279a9c6eb0fd1aa0cf19f3a868492a8e2e8af85f3bbd700049d3e2a8d2a8bd64e3c791d36e066222532
- SSDEEP 24576:e8+tZaq3/5zmap0l8LsvJpTqYlcAwVDr6D7JG08kw3ADugL:e9x/5qap9+lcAw9r6Xczkw3AXL
- TLSH
  T13425339F75A0266EF4B007D0BB359CB2CC89DCB51B2892EEED10F85D59D23A801B8467
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  data/defaults/test_108.sdat
- Size 724KB
- SHA256 e2c4aa73cac77608d18887070b0b7f70b9ab61676f26aebd710009c8e65a5bc5
- MD5 53f087e6b6325eb2c549adfb7658d14e
- SHA1 f07e1bcf8023b8eeb596ecb5ebff9b4d96350f88
- SHA512 4a2e34553babba0cc7fba521691c8211d4df3cf02f7448e2371b6477572fcc00f9c3d9317243b50bce78d158cd6231b03f72a21606c991ed7bde86b0d54726ff
- SSDEEP 12288:5IwRYqtEB8kK3Zync/wN9A5jUlvMy6sUiF4qG0nIApq:5IdiIc/J5+D6DvqG0nIYq
- TLSH
  T1CCF423526B8BB2800F5B2A7CC94CBE6D7F2D2052F9139DA9012F7B35159BC149B06DCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  data/defaults/test_39.data
- Size 876KB
- SHA256 425edc3e0240a82fac9e030e651517c8eeebd2084af3f0bc0a277a1381ac6ec6
- MD5 784731e66be13e5c13ea8275f54ec4e7
- SHA1 cfa786d503cf7ba124525d1ced01082a66c80e15
- SHA512 4d41a1ae9d2bb74a7862ae6b485e83be4f20d855eb82721d1f24b152cb01f01c5e15e31c47d7f4a594b73c9685b91c0abd4fb1f2137fc398d36ce7d015ec07cc
- SSDEEP 12288:ixlQfqatdrWfsmJq4b6YB8WSWOoMLa0Sf6iQ19nXR6x9h8uGimtzGXsxafj6bio3:q8XWfs2nqWOoGaYi2kxpG90kuTmjx
- TLSH
  T1FE1533A08C3C5B06D2CE7EBF051F474B7C71499BD3E122B8940A492B68BC9DC65D9F92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  data/defaults/test_63.sdat
- Size 738KB
- SHA256 1b0c347c6ed2a075005ded7acedd65d5a898bfe4c67754ed7cc555fd063e7507
- MD5 c3f96ab184e8577946e79dce72ebcae4
- SHA1 286cbbbdbac481568ceb671cea232704c4781acd
- SHA512 875dedc2637367aaaee0a49c6e0374281287d63f58fada89d1f6458cb1bc8e7bb28abdb8670170bffb25a83fbca4b9a9d8a1eec174e62a0bcfcdc3b6e87d577b
- SSDEEP 12288:jdAwnMUqwMH/j9K1nYCaaon/nPK25PyQdM3ELqM+YlWlK1nVcqVCYxpM/lz4J9R:xAwNqwMH/jmYCQn/Pn5PyQ7LqM+Y0lKX
- TLSH
  T1E7F42396DF5D321FC0692B5898D62F9E6240AA27750CD01CF8B7FE91EB48375323D262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  data/icons/base_123.dll
- Size 622KB
- SHA256 51752444e4dc78a85b1922300a88bd2aabcf79abbcbcc576e6c0d9193574ca74
- MD5 e03ab2717f825c6e80c6ddf306e781bb
- SHA1 dbe99bf6f86a2fda338daf7bbc14ee0a6ee9940c
- SHA512 71b14f51d2b6a1f812fcb731e369b1bfd91f64f391e4bfea97a936abeebea3c6f14034285c2d41a3fc5672ee229520c9572b8d3924d2132c4df956994a7142ae
- SSDEEP 12288:EP5S57VYkdP4oEcyFGxHM/jC8NwKp6BdI2wflR/hSVOYmkfn:ExSOboFPxs/jCiwKp0dI2wfl/+OYfn
- TLSH
  T1D1D423BD6B68E90D1B695FC1C4F0698E57C2F0EA6ABD4C1BF00EA7CC240B79883556C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  data/icons/log_3.dll
- Size 995KB
- SHA256 335e9320256e40729c5bd080e801bebd88903756bca3b2a14c98dcaa0905a5c1
- MD5 5b51915d974c19626d6f8f1cc161f9d2
- SHA1 eea9b22a9c8f24df46671bdc44e1dfb80e800ef2
- SHA512 a1e774184a36b46e9848625e47b3e3f9807522ad2efd3cae2f3590ff2c2c3e7c96f9a63c26dcc9fe25cf40bc111fb699e1549dde68553d296a4a4de5bfd93e94
- SSDEEP 24576:0PVHgg03z1/MrFqVr66au18hVxUxgBsmtu:YVHyhYRumhLUIzu
- TLSH
  T1D525337412DA2C0726A77CC466E84782D5E22F0EA1CB7D7B12E73D21B15878EC13E9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  data/themes/resource_112.dll
- Size 856KB
- SHA256 da4933eaf624d6a59a849f04a6661913377deb641c6d6971d85d130788f4ea05
- MD5 f7671979c092d3d027f53bdaf79c73e2
- SHA1 4f8708581a1b9c845492cf4f56ae4ea9ba872de2
- SHA512 3c620b518ea222d075ed0d6dc2966716b6417cde63ae29c6819caa3931a3bdaa8446d2d96737d149a02298c11656cadaf531398d9b6d3c1032e676201a50b01d
- SSDEEP 24576:mQmq2XSAQD5LeKOi2egjcl8Wo4TZIRDGLVNZcJ4LKeLFa:vdGPQFLeKBgKi4+RDGLVNiJuJa
- TLSH
  T10E153396598A903207FC30DA79341707A3EB1B197958276E237017B6871A3E8CF4FB76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  data/themes/resource_8.dll
- Size 690KB
- SHA256 dec7676514d8b95643854abe2c1ec8367a1cdef289c6baf985ab3fd0715bbd10
- MD5 079a5ef35a607690dcddfe06c1e176a3
- SHA1 97a3f86e3a96b26c3e6a61e6937b3dacec8d5eb2
- SHA512 7681d2cb533e80de62260328586dc4608e9317944c624f99e9b2d3afbbef61a3b826631f5194038552b4d6ad54034540542e9214b7c1bfbb424b56c9f9318009
- SSDEEP 12288:0tlmW3XjnvrMEjDacNJb26tCLVAPJqe8Mq+8AisQ9fdJi4M7/Xsfka:0tb3TnvrMK1NJV6AgetiPZ3ZRka
- TLSH
  T1EBE433D1169BA8576BDC98E23DF099FEE204A98719907271DC3D316E71A7607C3E0CCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

Loads dropped DLL

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32