10c919f5ae22cf9bb67cff73715cc4e82d78de107368a5649b658905b7da7c9d

Sharing

Copy URL Twitter E-mail

General

Target
dist.zip
Size 813KB
Sample260808-eg6dhszcqd
SHA256 10c919f5ae22cf9bb67cff73715cc4e82d78de107368a5649b658905b7da7c9d
MD5 0331d05cb873153c1b1e55a221f45bf7
SHA1 da49c187a7a16afa99d382239298380bfaa7d2f9
SHA512 96f031a2a0a50d8fb34697a05af63c2f13477f1734fbc003ba488c9292e060e098faa6c2c0f94c1425c8b16a527716b0ea9fe39876330a03b01663588dd12abb
SSDEEP 24576:W/O/p9IStWEW/APhbXXKLh0gZ8hRTgXF9:DfIkW1Q2Lh8RTgXF9
TLSH
T1AC0523CA4DCA4C658304CAFB2F9961CA877C48C2559D063E26B06EC2F915BDC719FC6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  dist/Microsoft.Web.WebView2.Core.dll
- Size 523KB
- SHA256 5e172b4f558723b7dbb7f568f301077c84d6571436fbe5a5f45bfa621c020403
- MD5 9f9feedb05b87e1be1c7ab710655d0e8
- SHA1 2886a398d065e13f667b974180589baff890d2b3
- SHA512 397be2264710120f1f6c419fc7e6a95915eabd0b0586461fadf7335d3b3e0bc35ebca96acf5cb4002a46f6aef90c0238564519c47c7c62c995b1d7469158b287
- SSDEEP 12288:qDrB322zh+iKsRFN/eA+imQ269pRFZNIEJdIEY0lxPrEIgcvLcglxMwCepM1SwU1:Zj
- TLSH
  T17DB46F1223FD462AF6F72FB5657416248AF6FCC6BD79E34D4598212D0D72B818AA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  dist/Microsoft.Web.WebView2.WinForms.dll
- Size 39KB
- SHA256 bef507a4ce7b6a848993bc504af7e2273cec22e77469787cb1d47d3f362164ed
- MD5 d15bfc4c7cccc1e99466a1866ffc473d
- SHA1 a4a6ce5968d346ca1da16bf9195eef8cdb07f570
- SHA512 28461110891a9ba7af40df3de46d0937a52bdfcc4dbd88448672d7d34e2a4b4f68a5ba464051a5523ad172862d62caa8bccc2e780615722ce37ef1982a028f3b
- SSDEEP 768:9FCniwqfU2Gm0bOVmW0etGjyf8ZDgcEST3p4Jjrjh2jJGSUyauTv1JKia5/Zi/WC:9Ijyf8ZDgcEST3p4JjrjaJGSUyau71JX
- TLSH
  T15A033A4142AC853BE6EF9FFC94B486631B7ABF837A61D3882D85B0E91D73390451076B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  dist/Microsoft.Web.WebView2.Wpf.dll
- Size 46KB
- SHA256 bf8fd64fe7afbcf7646631baa160c3a6d85b8a51777e52fb471f0230950de754
- MD5 2b4a31daa2e0af6a5fd7df0252cb3cab
- SHA1 6d30ed7787bbf1e464050cce5169b978734dcb2c
- SHA512 5fe91444803cae9cab98f5405eda3aacc6b677e57bd51cb82d5ea6e7712f5a7ffd133b8afbf7074215446938deb601bb10b0b97b43f72d187f2cd215deacfcde
- SSDEEP 768:eV08pvSZjQIf1jlCPcePUO9w8aDP/ryEH0tBy4JjrD1h2j5hUURGvkq7FKKa5/Bw:t84jQW1jlOzP7w8aDP/ryEH0tBy4Jjrz
- TLSH
  T15F233AC047EE8527E5EE1FB870B091551B79BF43BA21F79917C0B1A90A373A089543EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  dist/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  dist/dependencies/html/mainview.html
- Size 23KB
- SHA256 05a084d8963bec85192a3301bd743a19858d0e5fbf70bf867262c1ac50afce92
- MD5 ff95d56f9b9d77558c0a6ccd7c3c8143
- SHA1 89dd9f990c782477f5c41d8b3154acd574c62879
- SHA512 bfb00506e2cf720612eaf8be904bb4ddc3f64bef331cae65311b04ac6a6f1e50b379f3d6d5051fedd9dc5bfe26bd233876127bb95488f8abba215a8006e6b035
- SSDEEP 384:GHUr3A/YoZi/pdiOJt7zmEkGf2a2a2r2e2tI6X0l:G0r3SYoZAmOJt7zmEkGOTT63tI6Q
- TLSH
  T1D1B2622291C1151690B7A2C56BF1475EFF798217C70305AC3BED27A29FF7EC58863A88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  dist/runtimes/win-arm64/native/WebView2Loader.dll
- Size 134KB
- SHA256 a2db5a4f76238837d46abac8255d1c5f7691d39bba20c5c5271e64a9700964e5
- MD5 06ecf3f289ce5d2e2862217d2e2a63a8
- SHA1 70f2a9ea03ae6e815eb659c3dea8225180bfda73
- SHA512 3a1f257a87dd80345ea0131b9a35a5ab915931dcf185f0afa878f6aafc9cb9338710b32cb3a72cfc184d0d215a14e598ef67af048a46c55049da1e4b4b5f4013
- SSDEEP 3072:2Mma3Ncfa//PFRO+yaTLEMEtCqCSeS4AQv:aa3NgaNsMEt1eS4Z
- TLSH
  T196D3099327DD1453D6D3AB3CC8678A50272BB9B98530CA4B3253010EDE5FBD4DEA4A26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  dist/runtimes/win-x64/native/WebView2Loader.dll
- Size 158KB
- SHA256 31423e905e29c8a40a483e81dae1491990805fa066634d218b35bb96692bef0d
- MD5 aee20ef43cf692c9080c5973b1b79855
- SHA1 b3885791b0e122f8360d6fb7c0e0ac7fe4fa14fb
- SHA512 eab6684095c0a7555d921fb1a2e136fa1d761c5766c48571000a97403e6d437a3a4833c571f86c039aa8307fb2fc3fae1acffd63085ae9d2ea0d9e7f9ec1ace6
- SSDEEP 3072:sjvcJbdPop1MEsdhRVkiO6DxKkHkHA8SKGTT2EtetX72Wnwp:0qY1MdPHrbFkJEtwo
- TLSH
  T14FF36B57B3E500BBE0678674C9938A16E777B8500B609BDF03A447691F237E4AE3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  dist/runtimes/win-x86/native/WebView2Loader.dll
- Size 114KB
- SHA256 ad5cfe82f102739d4cc15c3eb38a411525762520c9c4229c902f67dbab23c5fb
- MD5 9a9df483ed55bd568cccdd7485804931
- SHA1 1c0d0363af131aab8cd81108c16354947007856f
- SHA512 0c989ea9e3c3ccfb7f8990098b1f5b0c7bfa311f83438aeb5047fdf3abcda872905927ddbd17245a9de2e73defd69dfee5271be2db254154c2f8e5478096de8d
- SSDEEP 3072:yOoLLhblA9t2JqgDyBGFHyklk3QKHS8TnoEtpAl+D6uq9FZ:0blct2JFkxkxEtisPqB
- TLSH
  T1DBB36B51B6D08071E5BE0B3C0874EA655B3F7D60DFA09DEB37581AA94E313C09F35A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  dist/sphere.exe
- Size 27KB
- SHA256 f98f5fa139cccb9ef1344f4071f2add345cd8cbae74e52e511c8f5ffff2cb406
- MD5 59d6c73d52bc2718bd49ef11d09f7ad7
- SHA1 e232ebd99387344240c17eb7869a96e4a72f6be6
- SHA512 092a696e36c1be96eae20673e40888b13c7bd66607ad43c7ebe0b7de8f7f2dbb95a63292aae129f19ce959bedab7ad6dcefe4df0450f5590f31cc29b7eefdff8
- SSDEEP 768:bhHm66cSTov9ClF1SoUUI0uUPyOQ/Ebzf:bhHm66cSMv9ClF1VUUI0uUPRQ/Eff
- TLSH
  T134C2271CB3D88777E2FA9FFAA87306020B75F2567921D7DC1A88605D1DB2B804261F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18