6662ff419ea2653d540d8dcc785a5c55d57401d376afea6a34f4804505ac17be

Sharing

Copy URL Twitter E-mail

General

Target
NUD1.0_NoInstall.zip
Size 7.2MB
Sample260809-222x6axbja
SHA256 6662ff419ea2653d540d8dcc785a5c55d57401d376afea6a34f4804505ac17be
MD5 acff7e2864816141f95956515d4bb1c9
SHA1 6fcd6efead4a0040c3e67182f6835921a5aeb9ea
SHA512 e9468fc5815df73d26c1dbde0d83dbdd6a8f68922a04485ce343677586a597003a6578b95d9fa4b11da17a447dd91ce2a6d30328d2bea5adecff44b3398c1fa0
SSDEEP 196608:r41ncQeMCAozQtxkVv5TxR1O8Ig/kZyCzPjGp7bR:rWcQDCjkkVv5j1O8h/kP/GpR
TLSH
T185763334ACD1CEFB86F2FA9423E0E475535C537566A3029B96E850073AE7CF3601A279
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution pyinstaller

Malware Config

Targets

- Target
  NUD/NUD.exe
- Size 1.8MB
- SHA256 2105151c63be28a350bc1c81542e8c5bec1a4640076c6713d3e4182c83bc5ae6
- MD5 26b2404e756354c349f4f0680c10ef0d
- SHA1 d67f17a063a44addbe314782b4d2271deb7308b1
- SHA512 b09c9feefa8bc63b4fc7134c264a4e245a4c007e92ded549a8af14e4a875b0e918d29641e1ca8d8b554259c2c58c13fe98c8c950f3524523b6aa1b4e380fb97f
- SSDEEP 49152:dHx4GsVCJPvEOt28Soxgw9hmvoryX0InwSOLX:MVwPvEQ2wAorEFnwSAX
- TLSH
  T116852254A7D108FAF9A3523CC9A3C525D772B8221B60C9CF03A4956A2F337E1693E771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  NUD/_internal/VCRUNTIME140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  NUD/_internal/_bz2.pyd
- Size 71KB
- SHA256 ea5aa5c49abe44d4441fc7bd5ca906212d271d7242fc89248c665abe2540a6cd
- MD5 e2bbf84123cf9bdcb880c0b77b1cb90d
- SHA1 1d2f99224335318591aee16ededada67c709feca
- SHA512 5a2479e13418b67af14e7fde54f8dbdbf1d6c075193bf0ce429eb6b7f06b2bb20d5abe347cd3acc080e24b3e053bb9228a50858c80376a0a62f343cef806a6ea
- SSDEEP 1536:vTlwz7aM8g9Cpsgy1lOR/zkO0Fxl8XEsHb0ICIFLV:Llwz+1TOp7OdKxKXXHIvIFLV
- TLSH
  T106636C52B3B472F6F5AF81B99A820353E730BE550710A3AFB344835A3F12F51AD68365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  NUD/_internal/_ctypes.pyd
- Size 120KB
- SHA256 7c02c8573f10caca9e1cc823d257974fbdef03a7360d22af2dce7b3179111e81
- MD5 31519cb7373b1a6ac6726651d370bc09
- SHA1 4efeb5ac71ec1af6e4ddcd41be4b7de7b07d44e1
- SHA512 3e609446a7da0da8c4f7f55be9bacd4b54464fa23a377dca80cb096bead5f640ef58ec9f181031f888f82b04cb345274d7423203cb7af1afae1528e93bde2a71
- SSDEEP 3072:xWWOAk2gZSqO6zNLp8e7f/FM8gfl4PKBj2nLIFyP:xYmqOm9f/FXgNIK4n
- TLSH
  T198C36C0B73A801AADB678178C5336E47DBF1B45A131147CF02A4C69A3F23796AE7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  NUD/_internal/_decimal.pyd
- Size 266KB
- SHA256 3dfc7933359f2c994c502a3759f3d498d027c936394ee7d27e48fa22bdf2d61f
- MD5 d3c7118afb8b5746b3f5b45023eafa42
- SHA1 c66f6f6cb84f65847262d40c4a1dacee871a1f4d
- SHA512 9ff8a59741e6b64be996a35e8cdbde5cc994012c8a5b13cdb0c61b2a4155dec283c444fc66ecdf1cbb5586a08b1453ef4b647c9be4b710d71fe8f1c3fdab072a
- SSDEEP 6144:ytoWl2o4B+ABhf235jNQ3vLHpGqqM33fIWeA24Mn4D:EoWlV4BLBhuJ6Vk9E
- TLSH
  T149446C53A3490CA8EA73807889579A47F7B278960360D78F43E48EA73F93793276D744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  NUD/_internal/_hashlib.pyd
- Size 54KB
- SHA256 a6a932a67a09509c03436b7ea7fce619d5ade4a372867bbe113347b3cbd14a81
- MD5 c62161500984dc9638083c1099bf8651
- SHA1 74ca1ffe45cdcc67143a4bc00129b74b09ce676f
- SHA512 934de01a88d46b96d7671763ed1bbc864b0794816626ad167388cb99b720ceccfaf914186324c108aa3ecc05f3ed0fd0ad85aaff9d639bbe256c3e6a5a6d314a
- SSDEEP 1536:+p9WQrJrvQI3K0ub1xHluPqZyp0IqIFvI:kWQFrIQmfaqZ/3IFvI
- TLSH
  T190434A51E78950A5D92282BAC8A70F43F9B4F11117129BDFA3A8C48D3F237C74B76B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  NUD/_internal/_lzma.pyd
- Size 149KB
- SHA256 97a891e9237379b2cea58a5e243b557dd76a426612ba2871b2d5c28d62a8e672
- MD5 e6d66978b4c11368550be8510486ba59
- SHA1 774848e7623d536295dc66d43b43c9189a38a596
- SHA512 ab80a1e5c828606d7706bdbec8eb8f488d1e590a62d3892251b6c1622bd7e41e3cb067c8235159a7b2dac0d3d33e0c1b1f006c918e85a73b25bb1aede79787a4
- SSDEEP 3072:Hbyh4SOP0rtnoscUAePRnOdznfl9mNoM7wFKRKevIF01:7DSOsB8PeZ2dYOM71Ke
- TLSH
  T14FE32891B254F4D6F2228C34C9674F67E7F978095310A29E01DC837D2B2FB766A6A313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  NUD/_internal/_queue.pyd
- Size 21KB
- SHA256 8bb59daef1701c217a5441883f4cbc257db440fcab13c9874c5cc91492432c6d
- MD5 35343fe7c6bba71f89a0c1c0073ac7b2
- SHA1 1e1018718ae7d9f8158a8edef381f80add59ff00
- SHA512 7666a9e54b2b14438d4a89d7f31cb31b4da41a81de5fd84f4b0f2514cef4b29ec08885c71ea27fb1af236dffb7e0611c8733537938162e71aa6c2ae7df87a62a
- SSDEEP 384:NSyR+g+9JzbEvJb8FSXjG27ika2ytwnB6NHBfXc7Sga0sjmIF9Uc:XRFb00ika2ytqkf/c7SJ0ImIF9Uc
- TLSH
  T1C4A24A86BBA850FAD1B7C0B5C8A35F50F2B2FA55570287CF1264428E3F32B826975F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  _collections_abc.pyc
- Size 46KB
- SHA256 60b7ff936475c9fb15bd9bcd24b9a3343ab2563ab5a62ddd2771d22aabe9e41c
- MD5 6f1f5f61c0ddac4bbdd667646a86c455
- SHA1 4d94f4865843db5b7e1a6128665f509f12458d2d
- SHA512 f735f88bc2d5ed400c8b3d04b665f4c4455a42fc51de70dbfc0ca0b15211c30fef38c31f0fc0ce80529f6804bb33fdba2122d7f161ec12df124590836f622e77
- SSDEEP 768:IHbq6pLDheS0FgQlfV6uioitFa0SepCGq7hs7Wpgv1vBw4yDY+DbZCZ:IH+CLDheimv0SICGq7hs7Wpgbw4yDYQu
- TLSH
  T10E23D4827AB16963FF64F1758017885DA72FD492F700C357292B027A6DEFBE08E61D18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  _weakrefset.pyc
- Size 11KB
- SHA256 04942bd980aece2c155245dbbe992dab7fab56200f7a9cd391c24092493cacad
- MD5 c45553abb735f64cf7038d472697f716
- SHA1 dcf2ecf2604c365abec46d26262e062f81dd49bc
- SHA512 110bdd55e685df856499a49c8c676a14214e9098a4248ec57341a38ccd028016af24621e0e33b5e203ca017323431f9bc5fe4b0f571d260f0a35dd4a3035caef
- SSDEEP 192:TWGdoph4kQWivF4jeSQnYUcdO95Br3vkJBaGcqTKg:TWr4kzi+aSQYdO7BIBaGOg
- TLSH
  T103424386B460D8C6FF78F2B851E6644C732E99A2D23CC313243F92524DEFAD98D5561C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  abc.pyc
- Size 7KB
- SHA256 99b3b79161c2b850f93162e02635cfde25a63b16fd1a66413b8cc07b3935010b
- MD5 ff1d85c23a1ad4a3dc06761f54295f37
- SHA1 435ed8b2c9f9c467a006c0abcf9b213a48fae0af
- SHA512 82bd08fdaa02f3d7da964bdf5e4a07ec18bee1f60d799243672341e0fdedcadb147fbd05b4c2f54bc9f3c487dbc7425f8f1b09006258f2af07d639200f37fbef
- SSDEEP 192:V2u9tHLjJblUU1IMf32RDBBNtZI114sZoRVRirHL0Zu7KaJdKK9R:V2u9x/Jblb1c1ZIv4Ym8HL0ZuGaT9R
- TLSH
  T104F1560E7393E1E7FEAAF23D840D985CB71A8112E7169A537EFF06541F1E9E142B2418
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  codecs.pyc
- Size 39KB
- SHA256 c8089a89ac013c775af14d3f50722dde3cd4c2264f614f9df829c9d2e9a14361
- MD5 588c341b5a1b37af87d06371927d4d7f
- SHA1 38ccb93aeccfdf480788cb0d5aa8b80d2b982618
- SHA512 64282d55ee56866e4e2eac754638bb73d0fb1507414094bf984bb1d7d0d61ba9e1f0b555bdee118cbf1e87cd575ac5db56ee732df1e6223401e1ca501ac3c5d2
- SSDEEP 768:Hoel04QBuPeAv+eIfhFd9j3stfioUmQgwP6wEmdOYthinDA5eqcGhnp4exfjgDJA:Hi8k9aeCwElkinDA5eqFdaexbg1z8
- TLSH
  T1B103B9837EA26693FE14F07184978D8CE32D9967E3214643355E436E3ACF578CD32A64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  collections/__init__.pyc
- Size 72KB
- SHA256 afbcd432cd8927828d2a95523abe5b112d76536dd6c112909f1c6c0e0e369a10
- MD5 8f12b04892a915495c50e5408231cf49
- SHA1 d78413fa9c48401fff8171a090884d1b903b3915
- SHA512 b8c5f53efea64c5eb2c323b050f6a8f6c4c774d9307e8572d9bb9830cb0a80fb6f812a4e1f63a41a53a948d15f12f2d9910875bb6b557c5867230ccd4ce50296
- SSDEEP 1536:v39cdpi0oCGLCmvTBx/oJo8uFD7Y0AREdtZCQZ/Jkj7KiGlkfTx+:vtcxoCGLpUKickfTx+
- TLSH
  T13773944AB5A08A87FF75B13981FA0548A3BED1A2E704D317705F52251FDFAE9CD60A0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  copyreg.pyc
- Size 7KB
- SHA256 c9d3813d270dc1e684669ef2445ab4ebee099400e2b3f5b92cc185504c262928
- MD5 31250e9d8ba6648b24ac719c1333cdbb
- SHA1 078db027ac5f4413730cab0427f42f7e8ff7be03
- SHA512 8a36701cc43c86b005ad4f6e3f72a69449cc1327e31823f681ec9802ffca73755761c1f23f46e0f6df788749e9e286ce0c3eebd7740d23ad69aaa955f70f85c0
- SSDEEP 192:xt6HFGlXQaVRx4DnXrB+R4t8Hj8TINfH7Tx44:xt6cGaVR8n2jJNvZ44
- TLSH
  T1CDF10A17E8C1BE13DF64E03CC19A0484B72CA9E7F650C317385A82261CDF6A5ECB961D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  encodings/__init__.pyc
- Size 6KB
- SHA256 edb816e8f3b5193ea6a86fa4399da59e0bdf9c347041caa9f8dc7873dcb37a24
- MD5 01c08ee1a9bd01c0370763065b97304d
- SHA1 be166ceeca5048bcd057c3967faf8f6fd73c0545
- SHA512 75f796533696bb906293bfd239a56ab06c2806a71e2f5ef673929bba99a05ff8cdd1a348c3f8d245d60e51766c356e177c82bfa559a180320503d6942ff26523
- SSDEEP 96:oBHIYGspF3e06Q0YXJuGZKEfaklXfymGftOdlN+2MxalUI9IXizo+k1t5v2DtkXG:9YLpFkYXIGZKkXPGVeL+0UWPk1eCTaO8
- TLSH
  T183D1D707E6601892DF6441B4E09F8948C76CB7A77A18C757354E42A82EDA13FCFA161D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  encodings/aliases.pyc
- Size 12KB
- SHA256 28ca0a7a2d180222d20a1d5c0027ad5302fd3ececf10f1b42d45b4d165d399b3
- MD5 48163d76afc068d1a6fd26752cfd3fad
- SHA1 0919392bc405d841ebf27c2130b6bbe439a2573c
- SHA512 283f187354bb5b9abd5ba36a2f9f4f5d3e72eaad7a8fcccdf18e7fd7bb930bde19dc13d4342d7a588a128b6ee296dd78e2f177ce11ff1335b8220ed389300114
- SSDEEP 192:dPVH4kU440+I14X/b38TghOgaxL8PZm+/QjBzaXnls7apHLyPrHNG42cEFthM:dPVHrkvYToc+Gz8nlBNyPpG4zEC
- TLSH
  T1454281D670D3B4EE6A9571A2D8E121E7F11B65888E0863C87FC8909F18F5919DECCD30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32