5a4c658298c617d52cf98bea3a6d82a042c681512a72f06b8c0b0844184acb25

Sharing

Copy URL Twitter E-mail

General

Target
QuorumAPI(prem).rar
Size 3.5MB
Sample260805-mtsl7azvay
SHA256 5a4c658298c617d52cf98bea3a6d82a042c681512a72f06b8c0b0844184acb25
MD5 b1d8c31c33ea194243694ad3fd5be557
SHA1 d11c6c89490f9e7bdd8d301fa3a38f6d8b355a01
SHA512 49a941fa87bd2ab4eba85f4a07d973f1cb334089fb92b308e83ffff86fed5e1a5ecaf3c51f80595f568b2458a17b444c0dccadfc1352e98f3a2278c5aee988a7
SSDEEP 98304:hOThZYGIF3bdJZvdQIXNVqOkZZ8iWvhxa3f:h2OrxvddXNoOGxWi
TLSH
T1470633FC19273AAE74F86E2BF3C797494800F7922437560721068DA5EB35F617A2BC64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  QuorumAPI(prem).rar
- Size 3.5MB
- SHA256 5a4c658298c617d52cf98bea3a6d82a042c681512a72f06b8c0b0844184acb25
- MD5 b1d8c31c33ea194243694ad3fd5be557
- SHA1 d11c6c89490f9e7bdd8d301fa3a38f6d8b355a01
- SHA512 49a941fa87bd2ab4eba85f4a07d973f1cb334089fb92b308e83ffff86fed5e1a5ecaf3c51f80595f568b2458a17b444c0dccadfc1352e98f3a2278c5aee988a7
- SSDEEP 98304:hOThZYGIF3bdJZvdQIXNVqOkZZ8iWvhxa3f:h2OrxvddXNoOGxWi
- TLSH
  T1470633FC19273AAE74F86E2BF3C797494800F7922437560721068DA5EB35F617A2BC64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral1 behavioral2
- Target
  Bin/Loader.exe
- Size 298KB
- SHA256 2b61296fafa08458e1e3e3d131b20634fcebbac1be8b71374cb3c03303612638
- MD5 f39ad06b7b82f0470e34d3652dd38c80
- SHA1 329b712c1117727f2d8709d4b720569144784430
- SHA512 a5eb7d9c5ddd44f30c4af1f0a12076c3864f000fae5614710bb908176441a183f76f791961a9add516380beb06fdf3d2b602157c0c1c107f3b1e5ab4fb25e348
- SSDEEP 6144:TVePbDuA1Ie3dWmwc3KrLoCrtuXw8Taa3p1NjiU40i/QqkUSutYFrjW0DzQiROJJ:TVePbDuAT3dWmwc3KrLoCrtuXw8Ta99f
- TLSH
  T15354EA17E18AB07DD21896F8D395CE75C638B43D8328DDEB1BA18D6119329D36FB1A03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Bin/Madium-Module.dll
- Size 7.8MB
- SHA256 074dd48a356a8f78475cf594a3ff3ea211e42441c19f8a0286d20d7275ac3c4b
- MD5 2cfbfe0a0ceae7880b66878992b0b59f
- SHA1 fc4d3015aa4470a26c29efe207ce93688e148736
- SHA512 789df3c3d520bbd648a14ef5b777be1efac734becd2fc06060ca6a33de713d2fdaf4bfd80520e0bfb1557ce7552902f558609b3cc9f8b73b3ac1e98822808824
- SSDEEP 49152:E41Do7oHGjKE5MZPd0KOyTWn7lDdjoUTuZtK61xPXb0O/4nqx/PfQMwai5FKRQMo:3oAdqK3r+51AH6K/aOrimuEmCLTqtyY
- TLSH
  T1C4869D56B7A400ACD47BD13CCAA78613E7B2B8552731ABCF16A456B91F23BE0173E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Bin/QuorumOverlay.exe
- Size 347KB
- SHA256 a4524186afae9c8c4beefec355ce862f37d6caabb62e805443e91bcfbbbcba0b
- MD5 58261a42fe86b235930e4c86c5c3faf4
- SHA1 42ec3cf0079513d7906b5f09243d611de8ada17f
- SHA512 c4e04d9a650db43b948c67c184a559b2a15661d93f73a8f3eb9a3b1e0474d7ca3e3b4a2e28f2910421dcd5ca9c546724d112b415a52576070400d3a870fa557e
- SSDEEP 3072:W+VYlNvDVlmkj15Pb/ea2KP4jQk1wABGRx8pEV8kNavvK6:W+VYlNvDVlXHfDEmxV6X
- TLSH
  T10574F203AB449F14C97C343A92FB2D2D63A1F6CB1771C91ECF157AAA1CD62A69CCC146
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  QuorumAPI.dll
- Size 1.1MB
- SHA256 eb9025233631dc09e112c1cddae7cfb0794ffc807da036de4b7ef2223b3917c5
- MD5 332506a986b488188c6f0fa0ee9453c2
- SHA1 763e2dd39730cef659c16041c7af1c817d497f02
- SHA512 2b60dae1ddb39480f9afb4ad57bd8229a468377e07867ae1f5067ace3be3ff6efbbf8cb33af6c443cb16bdc19b09e0c70714ce2979b05e198a3f5b833f709c8f
- SSDEEP 12288:orUcw8vLvkjDWGmFrHX7or3wQ2Y5Qlzc:oQT8vbrHX7onLEI
- TLSH
  T1203520137F44CB10CA6C357A82FB293963A1F9CB1372850FDF153A661DD21E69E9C286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Tutorial.txt
- Size 11KB
- SHA256 2ac795403b738d193d4c8f114aa431d7b1462eb5c87264bece49f2bb432c107c
- MD5 3ede8a677b32fa925d77d8ba628e2646
- SHA1 a74f079beb1bb7193e3d196d2f10d4f6ad1cb6e4
- SHA512 957e583ed79a3cc536496869b41afbe20c0a927263b4d3c805e7c330291955f9e43cc237c8aee35fcfd99d3b5f845e25b4d255a6819d566f5e0e6a44fb5bc135
- SSDEEP 192:RUazN3Hv/vbpl9vgiuiBSqJ1CtHMWME5py0K1YYz:RUah3PnbpfvkiBSqzQsWI0K1bz
- TLSH
  T1153261227F870B2A3476432D9A149985FB23831F66076623F6FD411C3F39A058229EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12