941f488f6b657388ebd50a6a49ec32ccd1927d023f98dd5b6d6b418666a0aac6

General

Target
TaxEvasionDownload.ZIP
Size 374KB
Sample260807-b2ql1syte1
SHA256 941f488f6b657388ebd50a6a49ec32ccd1927d023f98dd5b6d6b418666a0aac6
MD5 d824af98a6050260570be1779247add0
SHA1 ed401785ebcaac7ba19fc9eda21b89de97365eb3
SHA512 a4b188e792599aeb1db358c4e353fd9becf48721e16dc2df8cb3b8523b52b03160bb08f16784c3000f7b7be2ec2a2701f437dbfab8995a73d90c82bd6aa61725
SSDEEP 6144:jG6tsoAui6DRz6Iibz3s/uguK1xAGgfFKG5ZZAN6jEzxYTjoM6:jGuNiueBzc/1u0AGuFKG5oNJzmHU
TLSH
T1F0842361DF0D0ED19650ADB381C57D3A369D62AB19C1FC805722EA325483E6734FEBA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  TaxEvasion.exe
- Size 18KB
- SHA256 8c360306a3ee3c0753970a0a7adb11125224e8ece69ffcf8dc281ba444a67486
- MD5 85d5af79d28498e521cdacae4af78e0b
- SHA1 3e3a5a5fd65b8de98d6ae1849f8f9e6f23f27264
- SHA512 282e6dcf247184bd97bb3db8aba35a49a6b208949bfc8945739c20f010470602dae7257220467f75007b906b5d62c6686266e9cb8e1d26af3012c68d4c35271d
- SSDEEP 384:4fyAEJhbsQ85G1v/oZZ4a3pTG//PEn7lHE07o16nk:eJEJdsNR30C7df66k
- TLSH
  T12F820908A3AC5723FABE0B7C5861170187B2B777D832EF4E24CCA89A7A677421550767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Veylib.dll
- Size 114KB
- SHA256 28e2f52bd7e252d10dac989a013e7fdddf40f34eb6b8356e52d8fc9aa8a2994c
- MD5 07782e7392c71dce6c672bacf0a36302
- SHA1 294de7141c5cf9238c0e1afa7d0aeacfa6bd0ed5
- SHA512 9de84b0f2f9a519e0ac254fb007bcf92c6a774a209c5d76327032495f3bf23f1f3061797297c207d63bb419640afbdc9dc1a7fb67a521d2ee82dbdaa973453ac
- SSDEEP 3072:0N/ECza7whsdC928dqydJc+/yxoMzFscPNlxaNEx5Q:0N/ECzaMidC5qyda+/yxoIFxMED
- TLSH
  T1DDB3C8A823BF2930EBFE0F7A58642118967CA343A5CDD2AC1CD8D4D5F712B8D86106D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6