a98d3e59bd3d89c0176a3635a5ef2feaef5c0a0f0917884b455130b5afbf75d9

General

Target
vape.zip
Size 24.9MB
Sample260804-t3qbravdrh
SHA256 a98d3e59bd3d89c0176a3635a5ef2feaef5c0a0f0917884b455130b5afbf75d9
MD5 77617717ee09a9bc1eafa170d10cd7ff
SHA1 c18ec9d2bcf4afc1e84ac5b05a4fffed9b06839c
SHA512 99561dd5391fbe2ed7602c6688fcc4b203c74c5d665ead386ea238068b6361ece600e90d98bcc915c6328aec8a37c07f1abbd8d42c26617ea77faddf8ecb7206
SSDEEP 786432:mSymxIR2aigoLkY7AR5Nerx8QZF4dSFAJn:BqYaDWUZedhZWd8AZ
TLSH
T1D347336166334E6235AAF728E6BF278BFF912DB0057B0B58E3F55222F540DC950708DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  vape.zip
- Size 24.9MB
- SHA256 a98d3e59bd3d89c0176a3635a5ef2feaef5c0a0f0917884b455130b5afbf75d9
- MD5 77617717ee09a9bc1eafa170d10cd7ff
- SHA1 c18ec9d2bcf4afc1e84ac5b05a4fffed9b06839c
- SHA512 99561dd5391fbe2ed7602c6688fcc4b203c74c5d665ead386ea238068b6361ece600e90d98bcc915c6328aec8a37c07f1abbd8d42c26617ea77faddf8ecb7206
- SSDEEP 786432:mSymxIR2aigoLkY7AR5Nerx8QZF4dSFAJn:BqYaDWUZedhZWd8AZ
- TLSH
  T1D347336166334E6235AAF728E6BF278BFF912DB0057B0B58E3F55222F540DC950708DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  vape/Vape421Injector.exe
- Size 19KB
- SHA256 ed616e06cad79553df589cd004c45ebdea7295683c8c8eae9c0ae2e53b1c2efe
- MD5 bfe2883583ea3c55be34ac0d7c7ba9f0
- SHA1 fd5b11b9c510ab18af7d81e6035f2dbe8dd84e63
- SHA512 bcca0ac9c40d6148d2a4ff0018b0f59534cc476da0234a8f09bb57150018f9b332cf50b5e97653d5d30ecf3ecc3253e129f1a71a28a6ac5d0f08771fa4e142cd
- SSDEEP 384:871trhY+ENTYhYc0c5Rb7trk3u7we7gne:873ydYhZdmubse
- TLSH
  T10A921A46FBFA18DAF57AD23689725136A6B1791B2B328ADF0364800D0D727D0AC34F47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  vape/Vape421Native.dll
- Size 21.2MB
- SHA256 2fcad592a883d08c8c7ab81855597359ce0a8ccf7210f3ea0e973a6416963992
- MD5 1c89a9424e8b8eec146a965895d2d9ab
- SHA1 2fbfee1ae7b4bc19ff57af3af35c58cb27c00e20
- SHA512 e776ada8a0c241cf5e1d6069a501fe303fe6479eb729f8b43b11c7a8c5c2ac3c89369d00361e0f3ea87ce066616dcdf733bf6c4d0b16533361f24a9b46b4df01
- SSDEEP 393216:Mig96q/G+MkN8epMbvIpb5wggVhVBa2vSdHSgHWzBqVHJ:Mj96nkyUMkNwpVvBp6hlWYH
- TLSH
  T1C4271293E8E9643EEABB453662D402777E3E87C8E10790D414B839D254B7C8E4F613AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  vape/start-service.cmd
- Size 699B
- SHA256 d8a7c7a4193a56aa425c7f89b4dfbbaec6b5e3ec1034484af78299473a016c25
- MD5 4c36a90ea1aaaff8721db5b4d00ffa17
- SHA1 dc308ce6868060029fd2adaca6c2cb1f680879d9
- SHA512 b5e9760c22a009e5a89f68a481ffe8b3cd144b36318e5f1613d2496ec95001ff0209341c651306f107d5c9163054e9d00f15f072c6afd9f5d437c47b8879a6e9
- TLSH
  T1B801B868A800C6B1113802A2AED86147EA0E816F3334F05CB0E4D0884FB6AC92BEA284
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  vape/vape421-experimental-service-0.1.0.jar
- Size 5.1MB
- SHA256 f9b16014109cacdd5f14f5142f548a8a616a1c32da3d23101b1cb437f6ad46ea
- MD5 622f73dd9180cce02bb18dcde951be1f
- SHA1 e1dfb71ee1eb5dcd84773bf29770cc221e0488a6
- SHA512 0592a44a0bda55f1699d34e35ddafd2a407d9df0e0df67047b7efafcf1a0f28249884ce0b1b50582a463fb3b6cf06e2e393c9856ae1a5578025ab6dcf3022d7d
- SSDEEP 98304:L4ieD1JtrKcmMoHDEH0vqqJ7RvozcoUG5YeA4z1HVF/g+geG3CZM1L:7AeDMoQUv3tQzcGKeL11h+eG36YL
- TLSH
  T13B36E07994DC5465E2A3A23080809873F91C99C8FA1BB8D625F8274764FECC9DFB17C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  vape/vape_v4_rewrite.exe
- Size 257KB
- SHA256 804587cabf06f7670294d5913ab8837dd8c65adca719ea8bf8eea2f43775ac1c
- MD5 35074dd1f12902d905eb453a6a5f3633
- SHA1 004302f9b2fa7ef8b43971a265efff0e2c7edd32
- SHA512 0728fd113855c9669ad906070b49519a3d657b8d6498c1793d56d8d996434e59a4abc0189bb1b45436b3a7883199b3037dabc816f8442c0a62e50d8a4aed7c2b
- SSDEEP 6144:CqvqNRJsH0pAg2ke9JFvF4Bu+Um9aus8nIz91f36bGRwNt:/XBpJFSL9ps8nKv32Kw7
- TLSH
  T13A449E1AB265022DD367D978DA626705FB73FC4B0B25A7EF43801CB20E126E85F7A741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6