8b0563e23f4d16dec5690ab5d13db89470b8982e25ec8fd12cba22eccb7916f4

General

Target
NetBus170.zip
Size 535KB
Sample260809-vh3xsaan8v
SHA256 8b0563e23f4d16dec5690ab5d13db89470b8982e25ec8fd12cba22eccb7916f4
MD5 5e307cc5beae61fedd0ebfd2ce498b0e
SHA1 5be92477b5addb758a79eb41fc8550a3ad56e90d
SHA512 58ca4afdbb12d2308b1b4ccf953f5dba935e489b2d70d29aaf3276f51f6a741d8938ada5a5e215975e144ff4a8fe759331a218ffd5abe87acac64fb1e9947f9b
SSDEEP 12288:RM8eCosZnslyiw4pXm5ftOBnFF88syuA7:68eBJXqInahA7
TLSH
T18CC423D847A0D9B6562E360ACA443618F0B310170894C52B75B092FF6F955BFBBCD8F8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  NetBus.exe
- Size 585KB
- SHA256 848e12d94d467f2add01403a730e0b4762f594baf70c425fe86b3917c3f0b00b
- MD5 067a8e2d5ccfe6eeed1fedfa5d223107
- SHA1 fa60dbc10d96ea390e5679deb360ced14ed8a9d6
- SHA512 ee1badbcfbbf6485bc4577ce419710930e183da1e09903d770cb1c896969663cdb1d263686d03e9c5acc6575d40f0fb1a7035532ce77c08d5d69364a42721044
- SSDEEP 12288:Jgvar9zOSssaKDyr2QymB0fZnvc+kEsFpSreAck56O+0n4S:evar9H7aENQymB0fxkEiSJck56N0n
- TLSH
  T171D46C62F2914872D0624A389C9797AC8D2BFF113E289D4B37F53C4C5D796C1B92A393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  NetBus.rtf
- Size 22KB
- SHA256 de14106b1859f015a0e8212a2f76b21e44869e9558c4288c0aff800e019e2386
- MD5 72035134fd7eb8c69377b7bd03004046
- SHA1 7adad3c3e10ab9b637574635073ea46a5f165388
- SHA512 72a09ba3de1b1d69ac0785b346d7ee6ba5a71d582bfa44cf31881f74b8490f39b6533baf5060793a78c5cd741e0874dc34faf5500a5b5b99c422a4ca8b193a86
- SSDEEP 384:Wm9fb9FK94K94u94q94j94O94fjW94g94394k94d94s94R9412j394ijGj9jEUOB:WmJyDF1e9cCVs1s/Q0277yxAWY64gzHm
- TLSH
  T149A277BD088BA9D905DB4A8BE05ED58B5B35F02AC43CF4E133ED4355627E9083DF684A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Patch.exe
- Size 483KB
- SHA256 73a62d6593e3c70b60455299b793bb18d31eddd5f15d04442932c1d3ccb7eb0c
- MD5 3542b56a5f9ac8a8c34eb9db6e2f4d00
- SHA1 514559fc4d81b8e6ba8b68f629f5fbd1c6a7967e
- SHA512 02498057c16f929fa634182cc5ebeaae318732a078ff42d14199b79fbfd69b1e734bfa6890f0442f67cd059184187d46741bb948ec51e549e42d7b08675e3738
- SSDEEP 6144:xiHRQZks0niCX7QSoCg9H4wdSx3vi1W+7wUOthnSK+U4eytW0nNqclh3:oHRQKbb3ghdS1vi1W+sLhnS/8y40n4S
- TLSH
  T1F1B47E27F2918873D1631A389C579769982ABF513E28ED4777F82C4C5E393C279281E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral3