096512a61bd48676cc3e0fe9943c91bb3c5fa9688b74de266c8a1d034114fa79

Sharing

Copy URL Twitter E-mail

General

Target
rain.exe
Size 66.0MB
Sample260805-t7e2ksce94
SHA256 096512a61bd48676cc3e0fe9943c91bb3c5fa9688b74de266c8a1d034114fa79
MD5 f8e4d84f6deda84563350570a19827f3
SHA1 e2b3cb5e5ead230192ce05eaa3f88d3a9a6a8446
SHA512 d9d282e2722ddef692e9d44c603a5e5bee27609a7b1706502137b7b71b57886dc13c0d0e38f00c407d28ec6c65fecb4fdb206ae4da97a43b77bea646621da53b
SSDEEP 1572864:tzSksYgekKqE6ALRWdRSs0OSCgrWsqgZDcS5Ax4WXdkpIr7:tzSLkqE6uXsP2qEDckWGIr7
TLSH
T1A8E733084FEF24B4C35DDFBFE237942F88FC2BDB76A095870950A06A6A5563B9810537
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  rain.exe
- Size 66.0MB
- SHA256 096512a61bd48676cc3e0fe9943c91bb3c5fa9688b74de266c8a1d034114fa79
- MD5 f8e4d84f6deda84563350570a19827f3
- SHA1 e2b3cb5e5ead230192ce05eaa3f88d3a9a6a8446
- SHA512 d9d282e2722ddef692e9d44c603a5e5bee27609a7b1706502137b7b71b57886dc13c0d0e38f00c407d28ec6c65fecb4fdb206ae4da97a43b77bea646621da53b
- SSDEEP 1572864:tzSksYgekKqE6ALRWdRSs0OSCgrWsqgZDcS5Ax4WXdkpIr7:tzSLkqE6uXsP2qEDckWGIr7
- TLSH
  T1A8E733084FEF24B4C35DDFBFE237942F88FC2BDB76A095870950A06A6A5563B9810537
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

discovery execution ransomware
- Renames multiple (224) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  resources/app/node_modules/sqlite3/lib/sqlite3-binding.js
- Size 59B
- SHA256 762c7a74d7f92860a3873487b68e89f654a21d2aaeae9524eab5de9c65e66a9c
- MD5 8582b2dcaed9c5a6f3b7cfe150545254
- SHA1 14667874e0bfbe4ffc951f3e4bec7c5cf44e5a81
- SHA512 22ec4df7697322b23ae2e73c692ed5c925d50fde2b7e72bfc2d5dd873e2da51834b920dea7c67cca5733e8a3f5e603805762e8be238c651aa40290452843411d
- TLSH
  T1D1A002D1B590B39576E44054E5D486821C91C1E1A5535AA0C14986A51C4888055159A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  resources/app/node_modules/sqlite3/lib/sqlite3.js
- Size 6KB
- SHA256 8d6b400ae7f69a80d0cdd37a968d7b9a913661fa53475e5b8de49dda21684973
- MD5 275019a4199a84cfd18abd0f1ae497aa
- SHA1 8601683f9b6206e525e4a087a7cca40d07828fd8
- SHA512 6422249ccd710973f15d1242a8156d98fa8bdea820012df669e5363c50c5d8492d21ffefcdfa05b46c3c18033dde30f03349e880a4943feda8d1ee3c00f952b0
- SSDEEP 192:QoM2Wd0WmO6pM+tPtVRhoh3hG/h1goWPQfAcCy7gPQbQwZQiR893+9dY:npM0I6aPkd/K
- TLSH
  T1A3D1514DEAE36434962F76E9861FA65930398547347C8A417D8EC3901FB5C2036ABFBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  resources/app/node_modules/sqlite3/lib/trace.js
- Size 1KB
- SHA256 d06caec6136120c6fb7ee3681b1ca949e8b634e747ea8d3080c90f35aeb7728f
- MD5 e5c2de3c74bc66d4906bb34591859a5f
- SHA1 37ec527d9798d43898108080506126b4146334e7
- SHA512 e250e53dae618929cbf3cb2f1084a105d3a78bdfb6bb29e290f63a1fd5fbb5b2fab934ad16bc285e245d749a90c84bdc72fdc1a77af912b7356c18b0b197fbe5
- TLSH
  T14421C18C5CD370A59B63F0AC636BA00C7579191330A4C590758CC350DFD1D6A87A3E9D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  resources/app/node_modules/sqlite3/node_modules/node-addon-api/index.js
- Size 377B
- SHA256 be71328f325cf541f37704a644e53cd04af1b69bc119b39733d64589e64dffdb
- MD5 76046a66f40449026e5b595ad0424518
- SHA1 11a716c723f52e55494c0f1fc48dfcfae23a848f
- SHA512 ecf086016a9b06f9970d919e3aeaa138bd8311f86ab93999b9487e8b1bf124bfbfe0d856aaed1c01601df85c6fed13b2e640d05c14a148010b03049be10f3883
- TLSH
  T1C4E0683A68BC11219C02C660B3C489020C8CF1B6AB4118C4C5842EC4FD4FCD4112BCCC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  resources/app/node_modules/sqlite3/node_modules/node-addon-api/napi-inl.h
- Size 214KB
- SHA256 4b053c184dfed740fbd802fdcf97e85fb8c7b0eb1d83322000d932d31662eda7
- MD5 eeabf0f97bc38ef266ca00c3ae93c65a
- SHA1 b5e210f136e169374fa1a421896ef3d9ae57865c
- SHA512 afdebb4991ba10fc668c5bca74af6e012baeba5729169b18fe439fbe85ddaebf27f9ac89b0459c403595577121246234f2d09a2c9199e5e980812ca61e46ebc7
- SSDEEP 6144:FXs+DJEkNBA8iOV65H05Ho8mhRMf3t/FtapJiK5rflzb/QNJnThjODNjZXobBHb5:FXs8EkNBA8iOV65H05Ho8mhRMf3t/FtD
- TLSH
  T1D624961436E5F1112A63E723681B92219E19843B2F3CDB90F1DDB7247F805AEB13A797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  resources/app/node_modules/sqlite3/node_modules/node-addon-api/napi.h
- Size 112KB
- SHA256 2f2f5d1e4ca96f315c51ad96c292c18294dbb999b98f8b2f33b80816a3189fb0
- MD5 7e2699efb1e4adfc553c568faf7e8684
- SHA1 a7e78cafb8e4360ac8dd95d7f1d8aa79029c6511
- SHA512 f102ba1e882a850f8229f88aa115e115ed2f73de00df5cbfccf2c81969da8a40c26b06dabab636f2fba6260ba0a4dcc928ec9dc06e7870978f3c67de3c60a578
- SSDEEP 1536:JRElFe9P2PLtK2nrmsr7N11zKmRZmJu6dSRViYcE:JWe9PmTHr7N11DZmJ/dQ/cE
- TLSH
  T165B3C8003B15E7611992D5D18B2B7262CE118036BF38D2D0F5EF560CAF9A46BA3367DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  resources/app/node_modules/sqlite3/node_modules/node-addon-api/tools/check-napi.js
- Size 3KB
- SHA256 9e1207808023cd998fe9e377aefbe77d6c59fa129f94e6acbf24907149d8c11e
- MD5 30dfff807dd17db0a258056b727bcc78
- SHA1 faa0140ef82603f8bcfa99923f88d7787c3f51c0
- SHA512 6c825b5b28224007efd005cbf65ffdb52f20400c9c80a2fe45bed375ce8862a656a30367e531315bebc7d687c7fa35433e65975eb90dd404b42dc9c3b1152ae4
- TLSH
  T1D1612E9912FD12A340B7363A5B4E9039B22581A7432DDE20BEDC07193FD057287F2BE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  resources/app/node_modules/sqlite3/node_modules/node-addon-api/tools/clang-format.js
- Size 1KB
- SHA256 3e0b5e6d6f1a0c5ed106115871d0fd48f37bac5554effdacaf8d2439f4ed0c65
- MD5 e549f9e10d94d3d9c2ef12ec461b2f79
- SHA1 599bf11eb9272e54371b35255c68f7999fe52985
- SHA512 fbefe82dfc7ea9e1e13a534348145f26a5395ee0e79b1fac445d8db8f9c137cc80b6de2973d22fe33906b6e166fb65e564a12235ad8de0e4773193256e5a66d2
- TLSH
  T191415186A9F7102501A152951BDF34293F5DD833320AFC43776D8ED1AF82E31D8967AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  resources/app/node_modules/sqlite3/node_modules/node-addon-api/tools/conversion.js
- Size 14KB
- SHA256 e089cbad94331ad07dfb103b5d5aafaaf99fba89e9674d64f4f35e9dfc432357
- MD5 d021b061d75659901614e8c6f87aa6c0
- SHA1 9b916186796d7e77c067da569fdb4f58deafbfd5
- SHA512 b0e361924e70c86fafd657d4d36f9006187b9f88dc9b1d09acdec1d88da6d4e3006892dd2409e500bc538864685df5acea6509da05ac8a020659cbbf4ba60266
- SSDEEP 192:N5NyA2jQTzIxgpscPG/1Zpw2YiXPi+i7y1blqxuCerleZ:DcA2jQTEG+cubpw2vXPi+Iy1bAtP
- TLSH
  T1F9629718B777236205C256655F3B4F400B18B19E0E9CB43175AC13D2AF884EE12FE7AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  resources/app/node_modules/sqlite3/node_modules/node-addon-api/tools/eslint-format.js
- Size 2KB
- SHA256 befbda4868248093b1f5e4307d28f412d12fa16929cd0c07f5e2575e2635646d
- MD5 25b89785c5acdbb07279914a4e320f96
- SHA1 c98e334ce1333889e348bbe75864c1713026f3cf
- SHA512 9d8d0847fac664ed450175f0f792256f3ffea701db5b737453b3d96b963c8e3a54f68dff54c91e73094a6488772561a4a343d2bda92b5625c1f43cef2dee9457
- TLSH
  T13441879A9DF30011537050AB3ACF742D389DB037B699ED10F28D53406F921288DD62AE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  resources/app/node_modules/string-width/index.js
- Size 923B
- SHA256 ed69ea4f757130e46dc48a0cc31beb6257e61a31c70936d82b8a3f02ffd64df5
- MD5 570a2a45ed08d4c933084c566cfa9766
- SHA1 e2b122265bccc50b8965d79b07a559a51e74747c
- SHA512 f0ad29fc99cb379e7bcb2995c18a55da9ada9852456e8da752ecc679e0caf3d0f989d558ba5f041bb02bc02fb88a8c2f8ae7f1a524a2a041b54ec5637c71c121
- TLSH
  T1BC11D0440AEF844D0A563021CAD8C0DAE1E6D8A17BFEA4F6CDDD098831C64BD81F0F76
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  resources/app/node_modules/string_decoder/lib/string_decoder.js
- Size 9KB
- SHA256 f1d36d47b2c579063392c1a68963467f2d4f51a069af09eb068d974c63ee3b37
- MD5 0d4d70ba095a2af4afd7069a295d2f6c
- SHA1 440bd1828612d1e583e33a4ec304673a11c782af
- SHA512 f527fcaa28387a43a4df21c3c2e43e001b036a179383a61c58e194a33f67ac3ce445ef692d21e8f79139374f4a0749d1cebd2cdb59a4d9b4d2ec71bffd8b3be2
- SSDEEP 192:5QHleR/frl9e/lyUK3jhDNQxSSZOdfZCjS7EiQJRPLytV:5ke1l9cyU1SSQqytV
- TLSH
  T1511241487BE762224387993D8A1FF985F36C9905410EDAED7C1DF2906F84630C5B6EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  resources/app/node_modules/strip-ansi/index.js
- Size 154B
- SHA256 bf37cd692bf030c2ec270945bc26aa8b19ad379fa5916f12304758f709ab0978
- MD5 d2f059d0b9cfa91f1e899a4632d33da8
- SHA1 ac06aab8c4ef70f9d2c18bbd0b2eb5ef0bb7c900
- SHA512 0685ed108c20c84b3c0d4bf181318bf3f3ad6602de1b5bb71dc6a8d377575e974c42bcc14f5d72a244f06044bce8f81005c57ec2d246a513b6f196700a5010c2
- TLSH
  T119C08C6620B195462C5240C4F0D855409583C4B03AB9A2F5EECF4566A0994BE0670A69
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  resources/app/node_modules/tar/dist/commonjs/header.js
- Size 13KB
- SHA256 2840b352ffdee3ed31cb30b87e51d9b96c6255ea484ced0fe2437ad46f49ad93
- MD5 ac050f962144a77fd35698801a47d508
- SHA1 1446a8f9b7744a9f76cb393c399c3eda9bfb9f1b
- SHA512 32393dc683a1df1a478ebef57c317b06b5a355a5c88ecfc82eabb74eae604626cafd03d63634072b30911c616fe8bec86fb5138f3f89dad0e99ff01e0ecfb352
- SSDEEP 192:p/Yxk9ptLnVWqDHidGV3xOKXnsHU0QX4Mhy+IXniDq2Cd1xKD0sGG+Ir5V+yuagW:pQxmEqFxQh2F0z2rxwO3ojW
- TLSH
  T1B552871B07F62130AE4330BC5F4A0007BB26945B1A65D5A8F52C17D11F47A38E2EAFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  resources/app/node_modules/tar/dist/commonjs/index.min.js
- Size 100KB
- SHA256 a4c5dc91e83c99232f3351f827fe27868f111bc6a42beb6a4b9642a9caab275e
- MD5 06b8f5f2d1495a971fc9d4c2a970cacd
- SHA1 f9b85b43f25ab4c3718127cc05c2f2a6bd93ba3f
- SHA512 204ad1d2d24ed9bd68eadd2858e2543a047376f634382a8da61085458ea1c87f9a82dd696b5380d1d79e674074dacc7a9e5d0e918aaf9aded928bede5e8d79d2
- SSDEEP 1536:z48oZ3S8Qd0MT9l7H4aHvJ6rCiwmfbtM5vruu:zSS8W0yl7HpHvJ6rCKfbtM5N
- TLSH
  T1C6A309D533E6BAD243B8A1D6C82E0142E3526878641C741CB7BDEDE35A18D8674BEF70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  resources/app/node_modules/tar/dist/commonjs/list.js
- Size 5KB
- SHA256 0bd50fcdbe43d28c6cb65bc76a77bbd3edc5c9fd8840d04e611eb2aac9ea2817
- MD5 d055bde2a18c9529aca21b29af75b14b
- SHA1 550263efb2b630415944e26196c7a2dca0ac42e4
- SHA512 7fa305c8f443cd4a8482d20cb457294604cbe7ca141c4c2f1691ad26ebafed0e68326b5183244bd268ac2d972aa8ef8ca1863a1137da0b2898ef816fc60a34ff
- SSDEEP 96:KBmqxHELy62uFtLKmnj8E32hV8+6CXoZvQxvBqWyz7it80ywqoFPv0Wg9LV5tOd:0xk9ptLF878+DYZEvBByz7it80ywfFPH
- TLSH
  T171B1536919F7BD26C963B1E9AF1B8016B674841B304DF864778C93A03F130D4A1E9EED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  resources/app/node_modules/tar/dist/commonjs/make-command.js
- Size 1KB
- SHA256 c81990a4be4d005c5dcfc30ea1067c790c8eaefe7eb5869474022b28d1899438
- MD5 2cf20dc6677466c34e850f154190aa12
- SHA1 77a06552f05611fdf990a446ef89e956dbd38b0a
- SHA512 06c0c216654a1df8de5a164ab14152edee872a0c9aa5b7c6f845b1a1f3e62ff464e7097bfb4fda53534d8f1cc100bfd2dea45cfbfa5e40e7b2b3616c80b9d0f6
- TLSH
  T13B31B11E14F763650AE374E6931FD45B9278D1531D89A4193ECC52E15F0006AA2F3FF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  resources/app/node_modules/tar/dist/commonjs/mkdir.js
- Size 6KB
- SHA256 e1664d23922cf2db56a8ccd448ca6a576c3514a4b86e55df9587cc64820597bf
- MD5 3c3465f421441c918cdd476b366aeea6
- SHA1 b20d77bf1d6e712bb3e82a7601e06e138fd6a4b6
- SHA512 5fc771a23584cd9b59cdfc2d9717ab53e0bff8731dc15f5950e93ba0beb1e4f2cc33515d8696986e44fa5867fb9eddb3086ebaaf04f42cbca033b6f810768a7c
- SSDEEP 192:48GdKm82GzCw2GGEnyK05Nk/pXPPtPgvc0btBIxcCRnC9ifgV5BwaWnvqyiQL:sHe1H0vUN
- TLSH
  T1B2D133ADA4F237595B7322F9AF5F446094AC840B3955EC5D7E4CC398DF028A09AA4FE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  resources/app/node_modules/tar/dist/commonjs/mkdir.js.map
- Size 12KB
- SHA256 9c7b88c1f53c6cc3f3d32e452806d02cae5a926782aa9448e60f88c6cd47a7a8
- MD5 6e5de2ffdfb3d34a1ecc5856be8ba34c
- SHA1 dd07b81fd033524c26c9f8765a3d6220d5460a12
- SHA512 e0e4f824ce313e1da78eb9425fd80bfea7e87e6bbd2e6fe2265e1cc94f40ff8332c8b4b78e8456644ad8146a807a33bd66dd7d004b40dc27be5849a3bb287167
- SSDEEP 192:fbYJuxjXVTSlia48Bepj4i8SuY55dV4MmECa7kuL15M2m+c4HH:fb9xbVXnZR8SP5wTMBL3c4HH
- TLSH
  T1B4424212507ADA377A1B23871DDF00A26E1468487DA46B103CCCE355F793F3ABDE2866
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  resources/app/node_modules/tar/dist/commonjs/mode-fix.js
- Size 876B
- SHA256 1a52161925617f0e0798ddd0df4fb7dc2cc8da52b3b2c60fd7b8756506d5deae
- MD5 d91f4a18e8bc06e25d212eadf51c6f08
- SHA1 36970b124705f9b2bd3c5e669cacc25d2cca4910
- SHA512 09bcd16c2dac993637ae2abf3551a4fa73d1d76a5aa1fba4a72973e664640ace24ca874542913b68a0b2679832744c6a42efbb9935162de7a18bcd8e97e0dabb
- TLSH
  T13311AB4A52F63E6507D0D0A5274BB14F6F59C6275C2D8BA07A8C4BA4EF18C7684A0EB2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  resources/app/node_modules/tar/dist/commonjs/normalize-unicode.js
- Size 1KB
- SHA256 012057324bfbac08b14ff36e29fa6d27fc3377c747efc5d43f7861ecb43131e2
- MD5 c07b6bf4247dab4763762f4bd1aa37c6
- SHA1 bb00e0d39303d8d45763e1afe43c0a3b471470f0
- SHA512 3583cdc64bfef7e3cf7c19cdc791939d567596aac78b43dd1ab30dc8905d007f5071a43e8efa099886b884beee0edeed7c0a2af5e04c91ff3b350fdc7a0cebbf
- TLSH
  T1DA21EF5AE7A259A50A9334ED5A7F62C4760C40437111CCDB3C4CEE588FA61B845F2BCA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  resources/app/node_modules/tar/dist/commonjs/normalize-windows-path.js
- Size 615B
- SHA256 549d841aa9e43dbc1eae3ca716944b8f7ac9cdfca1638a4c9cb6370beeac97a4
- MD5 a10ee8cf90a302acd623748f263e2e2a
- SHA1 74f7baec4056ec8a10b2764ca8118456a3db3723
- SHA512 6816c996b0397e63e1236cf53a479e6b302fe1e9ce80cd888a9c8974e5d62aad27deb68952b9ae2d7748dd2868c70b6cee1fcd730b84437dc4d1d0c5759ed4d9
- TLSH
  T1B9F02D01B1AC0DE00A7505C24AFE80866FD002BBB112402C446935C0AB70CA39096F92
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  resources/app/node_modules/tar/dist/commonjs/options.js
- Size 2KB
- SHA256 0f17e6496cb4b75ec3a4bb25c8fe540cf08b810b1a21f86e27b62d349e9651e2
- MD5 4204623f9fb59eedb33ec32c88c2b467
- SHA1 665a6ef63164fd80e25c5ef07b9c5202afe17ffd
- SHA512 de25f61b76f18c59a66d109c0ce26edede7fa7225b3c6c782f4568524ab6eeeb7f516c57873f54080c1430de9edeed68c18b8c5b05ceb7e95516232e6459afd4
- TLSH
  T17F41EB7A866732E54B6137DA63C9900B56107543BB69B074702CE3E59F85CCBC6EC4EC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  resources/app/node_modules/tar/dist/commonjs/pack.js
- Size 17KB
- SHA256 2f68f54f8a61c33d26b353bf9311f961b614c85e52b4b0b0521b2a3fc314be6c
- MD5 549d58351d9f5ca2be02eab9d58f8eb2
- SHA1 ae93808f1fa1e021acc9de9c09c8c6e4b7297bcf
- SHA512 6e046dfde5ec9bb133313d78be008243fddae71def9b70df12c6bd106ef10090f09e1d61187f9411d6a292506b3ff1c54e65951a1a9f0bc233810243ebcf46ec
- SSDEEP 192:G+xk9ptLF8USgHJCN9viWMNrNrZESeZE2qEowQrsQrJojFIdYRDmzq1E8XPGbxHQ:G+xmxsNpiWsN/vDGwd7E8IulF9C
- TLSH
  T18F82405E27FB2222C4A332798F4F9065A264805B364EDC54BE7C9380AF45174A6ACFF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  resources/app/node_modules/tar/dist/commonjs/pack.js.map
- Size 31KB
- SHA256 29fb4824d5d43e0c9365c95fd869aea413b0f6ed7262f7b01b55faa99dbdbc08
- MD5 716efc29ae06024b074671b7a847bdd6
- SHA1 a3748b0d88d57fd5f4a3ce78d580fa23994d9131
- SHA512 b004f8f6f6d2e57c0f6405e7ba4a3a2e55dbfdf19e15161cb21829ebf00be96ae36efeff1d8d4ff5e53cd2e2d5b7a89221e6a9ca44277c7618afc8e4d7bc90ae
- SSDEEP 384:fTOFU58YPlGWhmVo/GQ1prpFFFStj4L2woz4qJXe6x8vlylL747WY1r7RV:LqU58YPlGWhmVo/GQnFF2fV4
- TLSH
  T191E2231211AAD937B95723871ECF50F27E10648C6D89A71038DCE750F3C2F36E9B69A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  resources/app/node_modules/tar/dist/commonjs/parse.js
- Size 24KB
- SHA256 c90f3771fa6c839b81c1d24961786463a195dfb8a59a8f190da30d33e7e1f769
- MD5 6e40fd70b1230e5f4057877c186c72a4
- SHA1 001777311d230f76aa103bbe9c0cc4985047d238
- SHA512 68c363a2a43988e014864fd90c87dea3a30d5fe7083dd36cec1f61f233bdc41a3c0b9ddf25b342f0821f9ef0987acb4338481a05677917804e98d032283c4703
- SSDEEP 384:VSbpbS54fLTm7leJN1TxeiCyOVpIXEIHl+ojbSv1YzUGHGiqB9PIbMnNfcWGYVGW:VMpbm4TTmqiVpEE8Ljbgezw9P8MnNcWl
- TLSH
  T103B20E9A0AFB2371816331B49F4E90169231861B354FDE64BD3E0780AF961309ABDFF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  resources/app/node_modules/tar/dist/commonjs/parse.js.map
- Size 43KB
- SHA256 21a21876484569acee8663dc6b58bf49685fce033d12e0ffccbb9402e24c9ab9
- MD5 0347c5ee74a60f90bfb5fef707713e51
- SHA1 5383bdb8fad7e6df7cd51d582641ab01c028bcac
- SHA512 15eaf15654392b7c37422a51d21f3e9848b0502afbeaf30f2e0552c68a109ea217a57f13c3800fce06da9f3629097623b07e73786875b6a708042894acd07898
- SSDEEP 768:gNskRevVFk/L+q4atUUN4SDlBmq/JpVLzLa7z+56jj4SCutcj8Z50tA:iZNf3/JjmV40gA
- TLSH
  T19A13580205AADE33B517229B1DCF50B27F20699C6D8E5710389C9351F3C2F36E9B6DA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  resources/app/node_modules/tar/dist/commonjs/path-reservations.js
- Size 5KB
- SHA256 06fe7819ab48dec1c884d0aaeba9ae75bc804e2b1b6cf1bd16436d48ab3af92b
- MD5 e0cd3284b98facb21ef494d94fc53a6b
- SHA1 d251d7c2925d3d9a8c203f3f4bed854ee570af28
- SHA512 dc24fa9df20608ccbd97417abb63fd68759f5d437fe36a8842bffa4fc5bb6b01e7d2da118ee208dbbdd3fce2b8d1c050296f2a2480e4b5b9032d7ef3203bd2ff
- SSDEEP 96:2L/5uEcJTPQEgEz6rQnOyfAhyb1IG2wCyG0wjXJKyI8SgRetOsOKimCyb1jagC4Y:2Lxu7Pg+6cO3hyZj2wCyG0wF08SgRetO
- TLSH
  T1B0C1216A59FA212151B3B2666F5F54427238C0533299ED0D7E1C63809F8A8B44BF3FE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Renames multiple (224) files with added filename extension

Executes dropped EXE

Loads dropped DLL

Discovers running processes

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32