f399ec22511c30814e845204909fc445fc5f816cad90902d76fd7371fdfa9c5c

Sharing

Copy URL Twitter E-mail

General

Target
HomeWayVPN.zip
Size 27.9MB
Sample260808-plvspade29
SHA256 f399ec22511c30814e845204909fc445fc5f816cad90902d76fd7371fdfa9c5c
MD5 f0e14cd7bde94c5f8f871652d27a2e5b
SHA1 9f3bdc491b71b1e68e047491cb06b3a1e7fc1a97
SHA512 66ded3af8656820f80987decda6fe320ddd07819dfa5dfe12e80e8baf13d1578ea3e7a339ee9f18fbe5b7b2e0fb963054d26ecf98129e39abf0697b72d7cbf4e
SSDEEP 786432:XdaHz9ODLsODkBj52I7nR4JvLyihm9/AWPih9ktEFBf5i:29OFkBj5bR4dOIF9ktEjf5i
TLSH
T1B757335DA3397897B4F94A7E18479AC5CF49032F2E7C907A8248BD48148BC66D3D4BF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

linux

Malware Config

Targets

- Target
  HomeWayVPN\HomeWayVPN.exe
- Size 111KB
- SHA256 0e91e7fb0c43654e7cfb23bf7269e4a25b6b18c457967cf8b578d3257aed9643
- MD5 b282af627401bff74e04c7e3a4482c13
- SHA1 df52fa7d0a9c67b4d65e9a9a879854c9d5b4d80e
- SHA512 f9a50a98efb357e905bb087a1a60c8f8bccd844b4b2e3d199da3ad2e6465c9102b95973735205c7a836b214c97dd088600fb3d80aeec70de9a3cb571206a0e0e
- SSDEEP 1536:i4oGGpXb8PFxPjcf6iMfxoFhZGsb8+tJT3me/NrjG6QW+tuFrie1n1T:i4oRb8PFxm6/ZBsb8yZme/NXUWOu91T
- TLSH
  T1C8B37D2BEB5950EAE21AC939CA438906CB71BC9647919BCF5B500E970F27ED44F3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  HomeWayVPN\data\app.so
- Size 5.3MB
- SHA256 06c1af2f6f0d53e147a004c2766023d4062bb972aad1ec51715bab086c9d4a36
- MD5 de9678cb3c7360b1700602ffea3a13f1
- SHA1 a77c0fc8b6ef62c878780f40bc0ed492e98ad25d
- SHA512 1e6f9319b8e4ba9e903181cd26a24c54b13ad64e46f186a4f3b4985d2fe80b1531917102ccdd8fe9a332c193e225f77a9fe095ab5c865e942c08cbd013f963af
- SSDEEP 49152:0XgsVzIX5T+tmdc0O/qo4P4AM5ymj6TsdzMDJWkhF+0A8dPvGRXRK0iKu3eLXZ5y:0XVzIX5S7JkJWIFHwZiV3eHimC
- TLSH
  T16046295FD4E04390D065F6B1B79EABBA9A1C78D84F74E18746C84B622E93D7047CE232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  HomeWayVPN\flutter_windows.dll
- Size 17.3MB
- SHA256 b66713715a7aeaa2f88ba18838aa7c245556eaaeb31c82da3f5aebcb71a7715e
- MD5 225782e5d02f400a76b8fabe8a6f5cd1
- SHA1 e54ef4f664a250808749be2ea9870607c20ace31
- SHA512 9e88489361b36970a982329184b7afa9ef403ca86830427c60397e49522e5d38fc652ce4b65e79c54583a50ffee83fb138a02d638e015c9ff53e56164556be76
- SSDEEP 98304:xk6EAbHbaq5XHYRpgzYv+tnesH+HjRZtUHTUz8xNCg2wByTjHfZ7FIpoUsxZ33eE:xxHjGgzG+sFGPBIfVmoRf3eIa
- TLSH
  T15F077C03F59540F9C08DD2B89B5BAA27F671B8490621B5DF278807263FA7BB05B3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  HomeWayVPN\mihomo.exe
- Size 47.0MB
- SHA256 fba95e95fe15f289946d6227ead987fadc691906aaaafe325fe6fb2666c8a575
- MD5 94131488108692fc8c8b8033253119d0
- SHA1 e714de273dfa6fc971ce4934da6c434294cd181c
- SHA512 d1ff5047291f376f732e7dd2c855771a4b25bbb9c0fc8fd200e68e34805aae3846e14eca23523381be77636f6e2255c27960b96c6c8386528787ffe12d93cae9
- SSDEEP 196608:V+v+e9IkXc34XXQcTn/jWqSorbSKM3RapdBIaYntc8ClpSLjKZZcB:VMlZXK4XVeoSKppsa6t+lYL0yB
- TLSH
  T151B73B4BF9254CE4F5ADC538C9A652537B307C69872423E71B20FA146F3EBE05ABA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  HomeWayVPN\url_launcher_windows_plugin.dll
- Size 96KB
- SHA256 d6e9cc371d4ffc204b7134cf18d49d931b28f4fffb719baef27bcaf4a018dbd7
- MD5 e817cf5d2f61f802a51af89bf337c9bf
- SHA1 80ed348a2aedfa5ef66ae52c8250df8c7bce5e4b
- SHA512 8b4885de095b3ddea183b489a8d73d38f510f4b8576cdd117c87cf48596f76f2a3b91bfff5c352de5d86d8759c4cc654df599b39143ea0a81d0e6b3c4852a86a
- SSDEEP 1536:NGpZR9r942MfYxKj2866rzCoFB21it9LBwdIBB/7V4V1iGjigb:Nkfr942MQ86nxChBN7V4V1iGj
- TLSH
  T1E6A33A3BAB1D10ABD259D4BCCA534941DB72BC854791A7CF17A04ADB0F27BE44E3E602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  HomeWayVPN\watchdog.exe
- Size 22KB
- SHA256 d916bf57e7aa12de524d6a33b4a8f6b0b6769826a730f30c139d76acb8a61541
- MD5 4dccdf25447c396600e68c4d423d3929
- SHA1 bcda83153b8a4946b0ac8fb1c08ea191df074743
- SHA512 5c05071a403e4a7ca9d74f0ac019aeda3b5f77a298d01d77687cdb5960051b068f71c05820a640606551fb5b98ab1b08e8a208efb02728c658f44e2d5b7a42be
- SSDEEP 384:YMkpfUM/bmYKqBDIHToVffoq6trSGtSLcV3w:sp8ebmhqSq16tnrV
- TLSH
  T1C4A22B47E7554AEDE07AD27CC962141AE2B6B51E0B22EBCF035002960F777D07D3AB86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11