0d8e9b6fd54992428b7af14e2d7e93e70ee7d823bb0e2fdd810d00504ce9e336

General

Target
Resurviv-Windows.exe
Size 78.4MB
Sample260808-szdccatvet
SHA256 0d8e9b6fd54992428b7af14e2d7e93e70ee7d823bb0e2fdd810d00504ce9e336
MD5 9ccdf488ee00ffaa10f34f79d6041504
SHA1 bb36dfaffbc1bf2fe25d2daa60a7492f93a8f0b5
SHA512 5a6f7f8013b906bbf64404b4ce81b75db5cd43854ad9c5ceb10c65f1ad7fad62eb4c6101f6e29c622c82b9f8e8623377210001e0479e81808fb876ded70afaff
SSDEEP 1572864:j92/JSxJi8bvBzAXCSspU3UIBftflSBtpthBCYoLpYN3HL:jFxBcXuYU+fIBrthBK9Ydr
TLSH
T17A083334C426E86BCBC63A3ED760E13362A7F735294C380E674539AE5CB589F058947B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Resurviv-Windows.exe
- Size 78.4MB
- SHA256 0d8e9b6fd54992428b7af14e2d7e93e70ee7d823bb0e2fdd810d00504ce9e336
- MD5 9ccdf488ee00ffaa10f34f79d6041504
- SHA1 bb36dfaffbc1bf2fe25d2daa60a7492f93a8f0b5
- SHA512 5a6f7f8013b906bbf64404b4ce81b75db5cd43854ad9c5ceb10c65f1ad7fad62eb4c6101f6e29c622c82b9f8e8623377210001e0479e81808fb876ded70afaff
- SSDEEP 1572864:j92/JSxJi8bvBzAXCSspU3UIBftflSBtpthBCYoLpYN3HL:jFxBcXuYU+fIBrthBK9Ydr
- TLSH
  T17A083334C426E86BCBC63A3ED760E13362A7F735294C380E674539AE5CB589F058947B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Loads dropped DLL
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1
- Target
  $PLUGINSDIR/app-64.7z
- Size 77.9MB
- SHA256 f57430e30ff3bcb1589c6428e27b8af1d3cafd2ac9a1a48715c90bd91019fa2b
- MD5 4f05ae6fb49b83eb308abd88511d3537
- SHA1 bb12182a61bedf7fb197eb8d987951adf6e35305
- SHA512 3e5c84b028704d9b987fd1eae4bcc2c6afa7226a4f0118c0955109bd4209ab51858ea118a78282e30e7dc9bf6cf45a0cc99b4c4dbcaf188b032f64e1399bcdfb
- SSDEEP 1572864:V2/JSxJi8bvBzAXCSspU3UIBftflSBtpthBCYoLpYN3HM:9xBcXuYU+fIBrthBK9Yds
- TLSH
  T151083334C426E86BCBC53A3ED761E13222ABF735290C381E67453DAA9CB549F058947F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Resurviv.exe
- Size 180.0MB
- SHA256 25e2f5a4ae221bc1f8183b181ebcd3cdebb043157ce9f39066ac29a8cd306364
- MD5 07680b8b7073423ea8a8a220e6f3419c
- SHA1 bf5d40f75331f8fff05e74fdf8fa5ba56b65b496
- SHA512 a08c60a7b4ccab65fe412ae7d9dbbd67f7e4fcdaa97c106c90e03725e635f01160dfda1b201d7ebceb2ca5090d90035b631771e157ac36179e52cf0f2cf916f0
- SSDEEP 1572864:ngJz8+qNOI0zE2ya82+omc2W9Lfub4aMlRGSaHcFLDWVDoxEv+pTj6eHTW9WN6Qz:NkCUbdf19
- TLSH
  T10A988C03F39A50D9E05DD1B58B479633EAB1B8854324A2DF2B5407922F77EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4