2102adb2fd4eec9c253af14a465943c03e81cf82d70cd128bc497dd278b29dd8

Sharing

Copy URL Twitter E-mail

General

Target
2102adb2fd4eec9c253af14a465943c03e81cf82d70cd128bc497dd278b29dd8
Size 11.8MB
Sample260805-ng6tqaen9v
SHA256 2102adb2fd4eec9c253af14a465943c03e81cf82d70cd128bc497dd278b29dd8
MD5 b47743cffff7560e041bda38223eadf3
SHA1 23b72a8b2df09b87f1fb935aa2390178feac2ea5
SHA512 68b999a66cefa240440c2634f9a730ce5d1b4dd0c46efbb969432ab72612f3d015e44696f0d65b95d30c199f3dfcf3c16d47848f64d9aeee283777337b60ca8d
SSDEEP 196608:u9qjs2Fiq6Wpmr5zFXbJHuTcVgQzG9QJHJvQYvT06FqYCyTtds6Y3qahu:eGDhJmVNtqcVfqQZJ4MzFDCyTQ90
TLSH
T182C6331ED1CA7D548323AA31D33A571BD2D86C18A76C8B5932C24FF1226B479D37898E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  AutoMapper.dll
- Size 301KB
- SHA256 d0fc1dc8c796205ef0d81f91a22b9209cb5d7a40c2fc821916527210d3dede5d
- MD5 8e25bb6b08fadab139c985c1bb7ef4e8
- SHA1 32b18c02631a01173cbbeeeeca9bfae777b65d3f
- SHA512 fd014a17e2fc0c26c8b85bfda146ea06e137ba24579ca920e68bac934bc1a0e786736d6f2a8cb956a608490847e198886c98bd5535d1a9e6339b4a6ee0ad2583
- SSDEEP 3072:cKdc2oFHW0omIpHPoaHehV+yRxDZz4IVKDzGAHGMATWOChNpyBfs1bs2Uq9Iafl:rGaHehV+yR5vO/AIfksCeARzCkN0n
- TLSH
  T19B64394163BD6221CBBF1339E578540647B6E81BA05DE78F4AA0ACF71E673486E013B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CommonDataStruct.dll
- Size 110KB
- SHA256 cc38bad1a2c053fe1b95cd53ed9c6888e16dab431a74cdb0c69bc172738fd521
- MD5 82bf64e61c163f8a2656977301dfc48b
- SHA1 1001b611d92247eb5fa81deef2992ebf20d72cad
- SHA512 d541e5b8387a50fc28cb02375015e96bf0e9e68934417b7045858d73abb8b60846e7872b67a727228d3c65b796115c4b80f5375e6545d61d8ec3f34b4ce5cbc0
- SSDEEP 1536:prD/27EltwpaltFkfUakZdeVICupzFuLRma/hIH9o2cCbPeX2MUJZGT2TTns1K:dlGpoO6Zdi/u1FuLRIm2cUmGM2ZVTT9
- TLSH
  T1AFB3271B33508E0CC3A91A75D2E3A83803F2A5567737E74B7E1841C91E82779ED46B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  DotNet.Log4Net.dll
- Size 9KB
- SHA256 198242156f5fab7797272de9a5422fb03bc18d3d8eace018652695b1937197fc
- MD5 bc8b96a0e74d851e2365606cffa60614
- SHA1 474c0ac1154eaabe27173e833c7db9d273c5a079
- SHA512 ea0021cd64f155f4099dc4fe73499110e02f43f5a2dc629737333dab5e6bc347620a5a5e6e1013e73f60631a1fb75481ddfc539fdab1172c56b732e0b10465fd
- SSDEEP 192:0JDcAPrxpsru8elEMUUv5tKVAd6sWqRG:0VcAPrxpwelPzGVAbWqRG
- TLSH
  T17212B721CBD58E23CA3F0A769871171197B0E6619013DB8FB4CD790F6FAB6140A5336A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  DotNet.Serialize.dll
- Size 9KB
- SHA256 6b5a05a4987d777f148beefee70b94379eece6d0709a26bd9874a682d2dcbe1b
- MD5 5f0cfed0226d2ae4a1cc2be57e85a56d
- SHA1 6716f57cb733b9c9477ddc3b70b96a6f8903a6d4
- SHA512 5d688ff08de9e8a98702c0e6bd087c0bf441e0cfaccaa3ecbc9a423fd8c8253cfd0278d4c2d02f182a68829db29cfd19ac72a8957d26e36b3836e834398fe539
- SSDEEP 192:c2LEsqOFMMGETY7L5JD2crcjxdU9/7pfK7XeWAxV:EgCYY7L5B4FdU9VfVWAxV
- TLSH
  T15C12B504D3E0CA33DCAC2BB59CB753866375EA52D993E79F09D044969CB33498F117A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  G2ADB.Protocol.dll
- Size 13KB
- SHA256 30879eb0ab82138268ecc558407e4f92637a63cfe638da8d5a325be5d691e5eb
- MD5 f392a9d5e84fdbc0575b36e255f97a6e
- SHA1 ec694248080d095471aad7dd57a82562a9c2123a
- SHA512 cf10fc1251476f1644d4996761575d98174d66ef58e0b8b84e9035a826e11d06589b2ffa67862f3664e916b31f94fb180d5d799fdcc665086befa0d1223e9276
- SSDEEP 192:fVDBcT4iGw/o0tWEaqm0Sf6HX7Ktx6wAa9Fuci8ARzCrSPE3:9Nc8iGwQslzmXf6LKtAwlgD8ARzCN3
- TLSH
  T1D8523B12A7D8833EE9BE0F75993341110076F95FA823CB5E1A4CA24E3E61719E859BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  G2CPS.Archives.dll
- Size 159KB
- SHA256 d056810a9c832a78ae9fbe0eed9e818170fcb24e60454675369eac1533804a39
- MD5 c1e6efec433430aed90065f5e99f0fbc
- SHA1 c6910ef856b6fad00f9e776654dfce34ef2b541c
- SHA512 f0c83bc8fc67d9130a960cb96c28d20abf5417d014179fd73d8164f6009da64f30318d1b7c74701eb4718e78f3934d33b38400ecd53fae486fb9a464b5da0ca5
- SSDEEP 3072:zRkfDJtlDa7MHRKIJ3iA5hLjYDwgtPMq0pfSE1Jt:NkfDrlm7MiDwan0pSm
- TLSH
  T185F37C3E72E08F21D5885A79C9D3E83607F2E5827673D7CA7E0826DB0C563649E0A3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  G2CPS.Communication.dll
- Size 170KB
- SHA256 f93f5b6c6fc4bb33fdfbeea00d0d8b45b3c3af98b8aa256de6a4dd63b2cc44da
- MD5 20f491b200af9b12814f30d6acb68022
- SHA1 ab64d705581da7ca1971bbe1d283e44acc52f23a
- SHA512 23b56ab11c5660b4836b68199834a0f97cae0a0dd166eb881df6bdfaf4ae019cdef4681102b2973269da02094a31022bea67f4170be57117ffd35a22b60017b7
- SSDEEP 3072:S/7GpBYS4Qhue7w+Knx14sdhl/Zg2Vd8WoihJshUVMEOJ7suACn5B:mCpmSEecrVdhluRichUVMEOxtAW
- TLSH
  T1B9045B7F73809F49C59846B1C0E3C83903F2EA876637E747794642E91D923BA9D8A7C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  G2CPS.Data.dll
- Size 464KB
- SHA256 04ba265e3d50685a6ada36d16800d293578c3473f22d563dcacdbbc1a2dc92aa
- MD5 dace4c65559b7eb80b501f1794252a9e
- SHA1 8d6711aedc71033bb3e789cc277b3a6a4a79f6e0
- SHA512 f03f07d6ae8947d6bd920e4798cd4eecacdf5a6bdf2511aca84df48cde48daa5bd418443c9ba19c9f6029f4375311e93a533410c2fc44ceb99ee9e670dacdfc6
- SSDEEP 6144:+WIsWzzDMOnMSOUXASjB4vQ2wK4e6kqg0pp5OTWy8CvcvGX/jXe4Wc66Z/eWL8yh:EfoOMSOQj1fKcX5mECWCZ/5VruYR
- TLSH
  T149A4BE02B3D4CB08CBD91674B9D7E83803B2E516B677FB4B2A1D55A63E833B489453C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  G2CPS.DataBaseService.dll
- Size 83KB
- SHA256 1bfd250a765901d84e2c28da1d83a3845699d2c063a86714e3d7c8a754bb0535
- MD5 25f349fce700e7de8601bd4cee453e43
- SHA1 30138666364e4a7570c96941c96dcd465d590d7e
- SHA512 bdf99d04e96314f4c0fd7bec4fe02946d0c52cb6c8e860cc57f226274329514ef82691a69f44c9d0667ef3861432f6da783f3f20f009917d21a8310b458cc9e9
- SSDEEP 1536:LyU9eSLheg332jfis6N9bZbnMorq9IezCoBAvL/cqbzop:7zheOGjr6TJd/ebKvL/cqbQ
- TLSH
  T1B183E70A33C98B65E9584579C2E7487403F2F94736B3D68A3E0C17CA6E423E8CC597CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  G2CPS.DataManager.dll
- Size 170KB
- SHA256 c7aef38632772412f1c41a59150b7f8d277b078268b665882b1b8bd2707f7fdc
- MD5 567be074b84ae866d770a22abb833222
- SHA1 92235f486ff3fac320a6c86e6f7519f8bc7403e9
- SHA512 c39861aa1476006262ea3de3cfbcf1df121cbb6d7f323f4889f3e34f5f23d0ee9f773e99b5d38ae4f935dcbc4ca88c75f4f3614d73497e6e2ab48a553bd78972
- SSDEEP 3072:zDCNFiTTyiLnaEy3/vbXzeLq7weOMvIBUt+hI9+MzDvMGFXjTFBTDjSkPR5J/NRi:zDCHiZ48YCtpMiq/P0hmRTrXoolV
- TLSH
  T1EF047C0233918754C7897271D6E39C7813E2AA863F33EB8A7D5A02D52D523A5FE153CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  G2CPS.MqttProtocol.dll
- Size 124KB
- SHA256 0730a7fb04d15846da7f6a9351d043a81849557065c5d22e3eb70e022899a96e
- MD5 8312ba945a0c708d993013803b0f9603
- SHA1 310825af57dfe7594bc95861ca1261592aa52334
- SHA512 c6d5906ed6d696aa15b329290c4de947131678b52fd52a102bc1c72dd3506330ff8d87a818d6fb836976870e223b2457a9c6231ccfd7eb39a670962879a07bf4
- SSDEEP 3072:ce+M8mfeqIlEMjkEe7YIZVo2Fr/JxqnNzZpE7K:c1M8fLlZuPNq9+
- TLSH
  T185C35C3EB6A48F05C6985576D1F7D82803F2E8837637E389BE4806CA1E81735CD4A7D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  G2CPS.PT3LicenseParser.dll
- Size 93KB
- SHA256 6bb135ee4fc72a38b6722200d95d7593f0659c1e92df53e1b2d56d8fc2d218fd
- MD5 b6aaa06cabf5ba82dbc03fd69c3bedca
- SHA1 e88f411f0265ace11458c8fc846cfe4151cc5a67
- SHA512 251ef2934881033ac59eb69c197b679676556c0d57db4a7aca2ea22ecee177c9f304b4cf6360f12ce5c6eb7491582cedd8fbd7ce6a01660ec78a0a23dd18cb1e
- SSDEEP 1536:OA8PRAOLaSvGpzR3/G7Gl8ZPOkNkl7ImOQLUM6no7mh/vkyQT:KJOSUBqZ2kVmO+r6no7mh/G
- TLSH
  T1DD93E72B3B944B06D65E45B6C5E3C93507F2A98BB633D34B3E1812CA1E027D9CE897C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  G2CPS.PT3ResourceParser.dll
- Size 92KB
- SHA256 1868fa7ad97b61b99c6e054dc76c1b9440b395c41d016f0e6b06b5cdedf13e78
- MD5 b04cdb1d401faf08f712898ad098e744
- SHA1 3498485a5be7bb3c509d3744d4aa825638fe4bea
- SHA512 bab2eff775333132db7e45dcc6cadf752b7a1fd3f470bdf96dedfa0b4a55a48f72540771e93c1ed7192fab7e4d831ac3489e16626e89cc19fc8f84eb32933b82
- SSDEEP 1536:ja6qzjfq38R25uezv/zGCrfS+DADD71qhbk42hlxC+UsZ3:nqXfq38U5ukD3rfS+svM1k4UxzUsR
- TLSH
  T14793184F37948708D6681579D0E7A82453F2A88337B7E75A3E4542CB0E123E5DD8BBC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  G2CPS.Protocol.dll
- Size 119KB
- SHA256 673d2615b7334b9b54b80a5b90c235265e9bfb4d048b4b70feba987ee8f14521
- MD5 f8fcdafc10a714bc23fa13abe2149034
- SHA1 5e6b7feb0d5ccc152cfd5274cd2cdc8748b7c53d
- SHA512 fe0df73b95d0283b02767939de2d30337f633cdf5f5b10d1bc0741e215d8686ce536bf1636ac31e0574b9b0227fb88f28d677d3d26cd1c0684533581f113df76
- SSDEEP 1536:ognrGo+YWkXyw/nPHFdebOZbxkKwvNW+wsgMCBzYDzl8n23T1ySXK:caWiveKIKwvNWTsNvzl8nUZ/6
- TLSH
  T18FC34A2E77C0CE11C59856B6C0E3C82407F6EA877A37E35ABE4845CA0E81B65CD4B7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  G2OTAP.Protocol.dll
- Size 94KB
- SHA256 5ecb9d8b3dda51b44772e596f5a06cb1fae86451a52f7549d654cb67a9aec879
- MD5 44953cb617e3a2e3c1047f3cfeabc697
- SHA1 e467bbc8c9c6e5edaf7513824c0d36732cfc3813
- SHA512 21da899018c73781e8a53705f77b65ea995d446cbffe59c52cdfd702079584f76faa4e240a129f8463f1ea2cefb0ab55c911b83fe0d3e94bb609f5ebb29c1f14
- SSDEEP 1536:ndkGgWFWYUMfQFIsPUm+fP3jMQIbKC6e6w/x0oev64vXqftdxrPun:nfgWFFUMfQGFmWjMQIp/LevrSVdxrI
- TLSH
  T12093286F76808B41C59889BBD1FBC82403E2B9C77277D34ABE0456DA1E523E4DD4A7C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  G2Secure.Protocol.dll
- Size 84KB
- SHA256 3e6a99043129e24fbea001a5545bc9c54aa388be56e31183a9456dcedba34639
- MD5 ddde2fd3e8f5d805b5c18df800147719
- SHA1 1d6967a181ed61a09df339d49c47ecaa6845c2b8
- SHA512 24072f11aa84c3813b76a544ffd23048bb92378492184cef2d21c5cd804fed871abaa2b4a3b88f987bdb001f2c3c877c2bf1081db9e11ce4663fa9e9493d80b8
- SSDEEP 1536:SWxcjDQevRT4C9STk1jTbFxPqaYT2MG6SFCBpToszhF1Y9NaPv90Q:OD5vtL/x2243SsdFSbaPT
- TLSH
  T15E83290633844264D69C4679D1E389B013E3E94333B3DB463E5817DA6E177E5CE8ABCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32