6ae43a0f49ab49058b4ba5df0556e755eeec7e4fe2e71b7cdea0bf8720a08fae

Sharing

Copy URL Twitter E-mail

General

Target
HWID-shifter-main.zip
Size 20KB
Sample260807-d1v68adg52
SHA256 6ae43a0f49ab49058b4ba5df0556e755eeec7e4fe2e71b7cdea0bf8720a08fae
MD5 a0a2118f2c0e33bca51b50b9c2fedde4
SHA1 d05b5e1c70279e6c9466f81091e8063b53658c69
SHA512 95f944dd949a5100859926aaa98896382c9adb5d91d67efc716c4b774847e71f5003cc7561a4a5f2d174ab98d2809cffe1530aa66181691a38f76405f746b2c9
SSDEEP 384:7DUlchSEo1N3sUVmm55Ire9BWMR3ru+0q4E2GCegvUnr:0lcxgN3Zw4AeXWUi+0Y2GCe5r
TLSH
T16592AE2DCF728E35C8A2613A354AA1297B7093037D5AD899350F2C287E7721DBB571AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  HWID-shifter-main.zip
- Size 20KB
- SHA256 6ae43a0f49ab49058b4ba5df0556e755eeec7e4fe2e71b7cdea0bf8720a08fae
- MD5 a0a2118f2c0e33bca51b50b9c2fedde4
- SHA1 d05b5e1c70279e6c9466f81091e8063b53658c69
- SHA512 95f944dd949a5100859926aaa98896382c9adb5d91d67efc716c4b774847e71f5003cc7561a4a5f2d174ab98d2809cffe1530aa66181691a38f76405f746b2c9
- SSDEEP 384:7DUlchSEo1N3sUVmm55Ire9BWMR3ru+0q4E2GCegvUnr:0lcxgN3Zw4AeXWUi+0Y2GCe5r
- TLSH
  T16592AE2DCF728E35C8A2613A354AA1297B7093037D5AD899350F2C287E7721DBB571AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  HWID-shifter-main/README.md
- Size 959B
- SHA256 6f98df3ebba450e01ab1c2935a1f9bc64f874e45932628d6fee8eb0ece6b6135
- MD5 9eab29b82bd6a68693597f24b3634dc5
- SHA1 3a5c0d192193ef1e1db33532a1512fee127938d0
- SHA512 28cb8734b52b6651d37a19970df4229331356c2b19d3bcf1c63e7b1f825f8afa653acb130896da4d18b5d5a76c4361003b47c88ca11fe2a1260bdce06284a420
- TLSH
  T177115403764463B761D70231131BA5D91B166136E39E93E8DD5401143BB3A9AA3BB8CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  HWID-shifter-main/Release/Run_Me.bat
- Size 45KB
- SHA256 0f8307239b5b0595f5380038465e9f42045bd9ea1084ab8b02c14ca2de1398d6
- MD5 eb3daee96bdbe2c6b61d5586b13418a5
- SHA1 83d78e699ab9a7d41c0d7483b0991bb86bbb1eda
- SHA512 15800c4749ca91994370ad20f28f2a425237fcf55c073270df05b234316ad0df5587f4ffaf8b8a040e47abbec3dca6ea800088a86f9c07a304383c07c7b7ea40
- SSDEEP 384:UDDGoz9SjSmLIb9a+dcJy10+D2s99VSMZ4YIYkpAlOE0P5Gw4wsID8ankvYBMxTT:Ir/iAlOVP5Gw4tVlMCAVOF7
- TLSH
  T10223EFD27A1D9632D826548C87EB810EBC78E08711F17B6211F1E94CD94782C96BEEF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral3
- Target
  HWID-shifter-main/Release/spoofer.sys
- Size 6KB
- SHA256 1992c044963f5c77aa7b5462e2bb69a37c66bc0e13032524fb1663c0314fd420
- MD5 96756deaff1b2667883d4a21e43f4f65
- SHA1 bce3d6fb9eec3f2d2695d96e61442a58039d594a
- SHA512 b6f472c8296bbef5da4baf638e98c2e0c42ba3fa783c69a6c0cc1e2f92f4c365d6d1c0bcf26e1644bacd4a001fd97c19b5fe2b616ba3c0982fc7edefcb59ef7f
- SSDEEP 96:eA/w8VE6wC4NrkXyhWZ2JMQ4LI5aUZ1ZM2a3:v/f/skjZAMTOA2a3
- TLSH
  T1FBD109FEA159D283E7AD447A965B5655F332B2D00B00834FE8F868996483FE3392C715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  HWID-shifter-main/Source/.gitignore
- Size 3KB
- SHA256 088c81a7704e96ea165ff39badf4466382d3ee327bce0909ce0711ddac1bc187
- MD5 d83e02dcdb02fd9a10185d708ce27a9f
- SHA1 a225cf81a58a99dbf987571cca19ab7dc4a73481
- SHA512 b310256451d54f268efb603de5ddc2dae29a90fec01ab03823e2af2edd8d1f4a03f2fb3c2f0f1c9879676a0ab0be0df99e696e44f0eaf1f4497e3a9c248dd4c6
- TLSH
  T16A71B6F98A6C937A85C110C9E5FAB808FA6D938913FA13F4848D518D7342F4451BF57A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  HWID-shifter-main/Source/defs.h
- Size 3KB
- SHA256 4a3e87a3ada9d7ff2c77cee9eab5dc12c9ea7439d85d6d91af6a4be7a825b4b8
- MD5 fcae38031329dc103a2372223872a2bf
- SHA1 b1b8867e18248692c3eed5eface0abfbdfa4dacb
- SHA512 4d62e8d5e5b7a78c970417e6a2627fd4408ada566db24fdf7eb76de5e2f5936029c9fe734b063729fc0d855e61096f17f0aa7659a4fe53639b179337270f5311
- TLSH
  T11B5153BC7B67654935126FB6CF2546018D6E15E327687CDFC8303B25DE79D281822E0E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  HWID-shifter-main/Source/fnv.hpp
- Size 2KB
- SHA256 18c52b8d4e6940c8d8e3e58496638e6d659a26335a928782fb73e98dcc70c2ee
- MD5 6db95c749515dba84bec0f4adae9b4cd
- SHA1 9815263099540d45d4d32de3c346a16f0054f1a5
- SHA512 45d604e615128dbdd09413206fe041a90601f6083258e31be49f852fa1a7384c66cb7c2431c2e81c1387d0179827c14b4f433bd6f9c812b4a031499d10f14d9f
- TLSH
  T1054120852E7CE18563BD22E3A3448420759CB136776CD6D29C4E9D3A0087477B23A624
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  HWID-shifter-main/Source/hwid-shifter.sln
- Size 1KB
- SHA256 035c65f21100fd2c98bddb3fea125cc2fed00b7194cdbab2d88b0455753a972d
- MD5 726b389d1bad582628f99dcdd684539a
- SHA1 3dac69ca583657e1cecc70a872a99b553bf4607c
- SHA512 cede2ddae04fc9c0d841e7fe09b8ad430667ee02d4d3f13127dab174022503e2cb84506e9e422138fac0a945a70858d6b621af773adc7e3484f95fba0ddfcc24
- TLSH
  T102213AAC103D50A1838B536FE8E24C4B3F7217FD81984A7D5CDA106A2757762C26F4CB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  HWID-shifter-main/Source/hwid.cpp
- Size 5KB
- SHA256 781a743edf8df099fcce650d0d2ab61ca760a299683cea3756687128d0340bcd
- MD5 31ea71aecfdbfef413c7cbfb0d503ef1
- SHA1 11fc065b94c82abb061f72c9ae441e8134fc81e6
- SHA512 4c1120b8a19cf73e5251f949be58fef8320a6c5efb954c0b37f1ef3cd1b9fdf83d7bbaf110b8001c4d9487c0d024a076399ae6e46b326fc49091aad3ea7d5c57
- SSDEEP 96:dM/gmFiH4D1pahh++vZPt3464Aqccmpm4GdBZ+Dku:0gYaCa/++xPt3464AqhRu
- TLSH
  T1A0B1A5DADF75C7A17B71602D2A0B0C4EF236D123F635A8910884E6B450C6EAACA003E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  HWID-shifter-main/Source/hwid.vcxproj
- Size 4KB
- SHA256 0b13990eb8fcc61b72bf6d50df9061d8e47c2ed87264bf0ef101b052e3a98574
- MD5 942ac4a8c8832d8960d32c45518c0782
- SHA1 3ff72b4c805545836b3346e1fb8e9502395e5d59
- SHA512 88f039def71ffb7a079c0c4d14af8dfc2b87f09febb1756bbb5cf138d74ebe1122a0911dd92200855da3d01e2a0e8bf1107b762ef42e57220fa8f8d3557c3b5e
- SSDEEP 48:32JKyAWbMFXGrBa2efHMlnrAHBmNwylIrAHBmN2er2M2JaLvGwmprwQprp+8h458:cQYofkUhmkUhmT7yaLuppXpJHjQC
- TLSH
  T1DF912149E9BC4E6AD1A24337D1D65C804FB153C318E2085CFA8EE7556B9750C7607773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  HWID-shifter-main/Source/hwid.vcxproj.filters
- Size 1KB
- SHA256 d528dbc74f54d7132ac96e063b56b30294b9c29e3804e23f128ba42b899de7e3
- MD5 e275fcd84fe0ceb92c26ecbc498ffb49
- SHA1 65fa76618646d9a596822d9e878b1adf1e58235a
- SHA512 7272884c02f4b361bd37c6916e0eb6f1989fb6a1effbaf3b3ade67d5ec7edcd2e672738d23d0212d537366b56ecea52417a98a9bac7d1ae2c45ff2a1dbcc7776
- TLSH
  T1A3214631C8FC1B8860266D27FBC0C909AF69B2F761D511447AEAD4477FE6308A52B768
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  HWID-shifter-main/Source/serial_gen.cpp
- Size 3KB
- SHA256 cf55dc7e9a60d2468cb39dff7d980ab1e899a97a53e0774a12d42b53c5ceacb9
- MD5 d6d4a3016cc07515e833a6359d55d0a2
- SHA1 bffb58579409f32d63c4c99845ab24469d1a1eb2
- SHA512 0b9e98657bff1a18c299a1c9405d3eb58dc5871d5d0e60354cfea957813e1982ece0905ea2a3cac9ec327908d9e75d16b88141456bf25bcb7f757c4e9cf87312
- TLSH
  T19A510080C324C38936D2236608E26015F0A1B4B7B3D5F896A59C1228DAA785B6B7097F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

T1018

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12