d18b470d6d09963b2c8695c6b7a0b626009d520a91624b3a895ea810f5b1f71e

Sharing

Copy URL Twitter E-mail

General

Target
thcrap.zip
Size 18.2MB
Sample260807-df9h4sy1ht
SHA256 d18b470d6d09963b2c8695c6b7a0b626009d520a91624b3a895ea810f5b1f71e
MD5 87d87f21d5ee0283452ebd723a1a72eb
SHA1 847bab5d08f693f72827a4af90b930242eecc283
SHA512 a11dcb75f23dbeb8c67ca37233de3148fe29f69b20cd2e14d341fe170bfa4474c68b7692e41615c50e3b42c133141d8382d87557abc18b7d0cfced083acbef4e
SSDEEP 393216:pZtalh/6gvvM2lYLvnzTrjF8fT0amU5K0u6DcbgmYqWHThyEtCXLS2t:1alhygvHlOzTrqL0amU5VuZ8mYqWHTcj
TLSH
T145173307A98D85AEEB97E435D697EC084F0B4C5E215709B3A49CDD8998733A30BF9CD0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  bin/Microsoft.Bcl.AsyncInterfaces.dll
- Size 26KB
- SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
- MD5 ff34978b62d5e0be84a895d9c30f99ae
- SHA1 74dc07a8cccee0ca3bf5cf64320230ca1a37ad85
- SHA512 7f207f2e3f9f371b465bca5402db0e5cec3cb842a1f943d3e3dcedc8e5d134f58c7c4df99303c24501c103494b4f16160f86db80893779ce41b287a23574ee28
- SSDEEP 384:cOJWqnwCBbNAP0VES2j0cX6dAl+NWpVzrdcoquWeP/WxR5kHRN7dDFcYR9zPrf8O:culwCBhdVv2wK5fdcUtFFn9zT8pY
- TLSH
  T14FC27C1A935C1317CEAF2EB4E570D9422935E78A2C22EB3E1588F2950D97345EB31738
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Probable phishing domain
behavioral1 behavioral2
- Target
  bin/Microsoft.WindowsAPICodePack.Shell.dll
- Size 574KB
- SHA256 6ea25be49a4e96c43c20bc29eb1ced078f4e0bcec4673ce722271c77bc2fa121
- MD5 f6a0bdf17dbfdc16cec93537731571d4
- SHA1 22ef1d17448c01f9d06eddc0a4ace8827699a877
- SHA512 c665512ac8cd86b93b2f60061cc6101222709112a6f10b18bed76e94aaf6730aaef100c10bd28b71ee96c704f3576ff0641b13af618e1f3d4c2515109771789a
- SSDEEP 6144:PpXcF836yvCI++R1yjRbcq/9NlKCuAg496KqMbwFkguan+W86b8c3v6n9c6KwZE4:PPVCbbcC9P96K3wFvuI49Mmn
- TLSH
  T17AC429247BF5951EF09E977CE1AB162297B0D311F103DB1F0AC026AA1CE37514D89AAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  bin/Microsoft.WindowsAPICodePack.ShellExtensions.dll
- Size 37KB
- SHA256 c21bc4847ac3c75db64b5f7afeb0fcb0e22ba436b7db80692523b4810b046d22
- MD5 7f616473bc928975d2d8e9897e41d1e3
- SHA1 6b665bf91c0de499b3c94ea94be1e9c44aab0abc
- SHA512 d7ebd31e30fc266fc2ca8d4e9f6d3ff2c595cd4f8d2cf60cfd662db2902e8f262f805da0236110979a563a09c08f7908cf66e327761c2e075580c0fd47466d02
- SSDEEP 384:3fSzdiw/AuYKDW/SSg5qGhei0kLmmZXLVyRohwhxrqwmzSgaVAap944G/NW2TslW:vI/ARK1Sg5nZXLVyRohe4zFABkMk7
- TLSH
  T1CB031A0457FD8637D4BE4678FCB2051047F0F543ED43EFAF4B94A19929A73A4C891AA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  bin/Microsoft.WindowsAPICodePack.dll
- Size 111KB
- SHA256 264180e6ec4c94c24679c392abc8438216cde7dfdb1b0befe8bf2216e895266f
- MD5 3efd49b9b913c9fd0c334ac3f2f2f6ef
- SHA1 bd0f94459f2c6dc4912856ecaf0c71671d92ad75
- SHA512 7479d471364f1026947e15f5a5649ffc839947d5c676148382ec397e201ffc448985226bef1f58e6e23635263dacba55d63a145b4029523afecf8e4dc3cd63bb
- SSDEEP 3072:5pM828whjGQhioSWPCeS20ImL6HKgqYA3FliA:5pl282jGSSWPCeSgHxZ
- TLSH
  T149B3396477F8162AF9FF1BBCE4615121CB71B9826A03E72E1FD0726E08A3340D958767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  bin/Microsoft.Xaml.Behaviors.dll
- Size 141KB
- SHA256 cc62aac669a524bf4f4ec80b6493b1a920b1a6b999cf39647b9a1e8f6e959b4e
- MD5 9ad956cab2868019c2f630b38c2dd3a1
- SHA1 b60b1b9e3c38eb29e0bdfc5c0313ccfb8c5d0ae9
- SHA512 6cae617cac41d3ece6289456ce62008f771572a138382c243a60d32b5d137ce92778434ba886901835a327254f2dd70e546978950ef2279aab2a0e285bea2246
- SSDEEP 3072:JAyazS96IT0OegAO56C9bOEW5m51dXcr8/somEk5rcjTf:myhYIT0Oe5yV9bO8H
- TLSH
  T1D3E35BA593FC8A2EC7FF0675E0B451144631F793B923DB4D6EC0A1AD099338266127BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  bin/System.Buffers.dll
- Size 20KB
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH
  T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  bin/System.Memory.dll
- Size 138KB
- SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
- MD5 f09441a1ee47fb3e6571a3a448e05baf
- SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
- SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
- SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
- TLSH
  T1BAD37D6857C6DE56DB5FEC70E02052016631C52F5742BBEE5DC8B8F026923EA28193FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  bin/System.Numerics.Vectors.dll
- Size 113KB
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- TLSH
  T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  bin/System.Runtime.CompilerServices.Unsafe.dll
- Size 17KB
- SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
- MD5 c610e828b54001574d86dd2ed730e392
- SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
- SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
- SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
- TLSH
  T1A8824A21CFD84503FE627B344568D183FE38E38A6806A36A2586F57A1CD63C57B31E38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  bin/System.Text.Encodings.Web.dll
- Size 77KB
- SHA256 e9c4f5eed186cb129c527c4b8d67d163ea2f2396e9d8b96e30b5e7c12203ce84
- MD5 fa9d0d182c63c49a4c567f7c1652b6e6
- SHA1 55ddfbe80762c02f9a9c65809f9ec3ef8f7f2ccc
- SHA512 58f468c982ab66930ff37efb5a941db116e8c1aed66ebc23720a7b18f71bebe1e929bea76680294edb25f430c23d520b8a87e3a22064c5993d0396819a21cbe7
- SSDEEP 1536:AOOgOOOc2yQDmBkKQh39thfavqcdUIUdu4OzfocSWnO73TT+zo:KyEmXQh39HfavqEUTjOzfo5WnMO0
- TLSH
  T198735E12A748C75AC75E153256A085619BF0DF6F2313F782585CB81E2B733C9EA0E2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  bin/System.Text.Json.dll
- Size 629KB
- SHA256 86c3f263ae9b4469ab1266c80471087082447eb4a38e6b97bf5e84de15c07a1d
- MD5 d7e1e8629da31f3482045f243edd50be
- SHA1 d3ad7f529c0b9232206348842e31566ad7347135
- SHA512 0ebfcae7cf17ca0c4299f6d1cd850f0f8959b49e6bbc05079fa6679838abff9eca3a09ad8158f7b0395dabb20a0b9a25efe1d8f645ca9ef69bedce45606a23d3
- SSDEEP 6144:oQ4zRvmmBhTxZOnAHqBfFgICCSToJkR4mUfimb7MVM8iHtoqurICVLeV+kctqWan:BmhZBAXM3eVcTQKiyfVtQ1RCHe
- TLSH
  T1E4D43A0467E49F3BEADF5370B07941249BB5F81A6329E78B520844E93C937D29D837A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  bin/System.Threading.Tasks.Extensions.dll
- Size 25KB
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- TLSH
  T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  bin/System.ValueTuple.dll
- Size 24KB
- SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
- MD5 23ee4302e85013a1eb4324c414d561d5
- SHA1 d1664731719e85aad7a2273685d77feb0204ec98
- SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
- SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
- TLSH
  T1DBB23955DBFC5143EEA35E7066B4D6873C3EF7C35D21862E106AE14A1CA37C1AB20B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  bin/Xceed.Wpf.AvalonDock.Themes.Aero.dll
- Size 85KB
- SHA256 d6ee39d923a9cfcf1a1bede9239ee86615066f0b45bbf69875ea0d4a8c856830
- MD5 8ab7c7eb8779c8c3afe52078d3606c11
- SHA1 013b4c183c15c16d0c37ffb623ac239b5635d7ef
- SHA512 b849cff1bf52f36241e9929e6343cb0e78ca06add91cea97e16655f9a46b71b1b9559916fcab7c017b031d7fe7c85b780a0fde25f4a07134fbc2caa4119720a9
- SSDEEP 1536:CrIGJ/yox7dMEmjVWm+NdXYoAv/yCJtxHZthvlQiQaNtPTATK5wsx8NTNf8McZOm:CDJ/yox7dMEmjVWm+NdXYoAv/yCJnHZN
- TLSH
  T1C4833B91B1A445B4C82F0FF924B2A688AE397EC166D15614348F3D4D6CFEF80C2E57A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  bin/Xceed.Wpf.AvalonDock.Themes.Metro.dll
- Size 77KB
- SHA256 79b7b41d14723adf85885ea10728ed63f3a750ee9fb7c957357d72ac37c9c211
- MD5 4fc46786368d8d10db7751bb88894325
- SHA1 356c99d66d3191bf6a465dbedd119fe6a8ba9727
- SHA512 0a8514f11844f94b5f08c8bdf0e2e8570a066a80793bc42b2b1f609c8072c30d6fb45477b99fd8f54d8da1d9cb8758fde478d57ffcd3a98afa5168f398949b2a
- SSDEEP 1536:jf/s2HNz9vFPPjJo0bsZMN+AQo+V+kM5yCbU:js2HNz9vFPPjy0bpN+AQo+0k
- TLSH
  T10D731983B2A50AB8C56F4FB514629548EE293EC252E26A15345F3C0E6CFDFC0C5E9367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  bin/Xceed.Wpf.AvalonDock.Themes.VS2010.dll
- Size 82KB
- SHA256 55374ad7dc745894af543e8ba8ba01b8ae91dae1f0a3031f4f4686af0984e674
- MD5 1c813a6cad06c7fea0685bd24e503ef5
- SHA1 e8291cc867f3c5eaa5d36f5747574dc89e3d7e3a
- SHA512 193c5e4f2919e4106b1b462a5760299cc86ca61d1c28ae184280279523d9a06d9c4686387fd3a3e86643baab30c48dcf001c56cbb231bd82a513e40edb5c7ed2
- SSDEEP 1536:pXfsmzcesTEWSRnqS++gGeqGqPjJo0bshfjcwKD37niMogEw3o5EZwXkHH+DOhlc:pvsmzcesTEWSRnqS++gGeqGqPjy0bcfZ
- TLSH
  T1C58308C2A1A106B8C56F0FF554619988BA393ED552E16611385E3D0EACFEFC0C1E53AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Probable phishing domain

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32