7277ed397800dd26bc73a6998dbccf5d2c86cabc45ea2a3686d7e587fff6b202

Sharing

Copy URL Twitter E-mail

General

Target
AzureSetup.zip
Size 183.6MB
Sample260810-1r2c7sal2x
SHA256 7277ed397800dd26bc73a6998dbccf5d2c86cabc45ea2a3686d7e587fff6b202
MD5 04c53a43e60a8615a0bd6c799b9f81ec
SHA1 3205972fc98fe9a60aafdc52aea1b116a0215b33
SHA512 91ebe590789e226b8a19101a5f6554ae9361dc1407317e5276d1729458c13cb9d070516a421d451ccb2a1b4f6e8481b3f138d14d982da1a4614f33b7374e3857
SSDEEP 3145728:wOtfTkb5O0eHOC8hfBPiIGAc98OM0uYbeNo1YXAzdAvd236QCKBMWphy6XjXyE7T:1kEOdbiVuYeNBAzdAvwqj0MWbXjPP/
TLSH
T1779833AE8AB31E3951635C64A688E01DF5A97A08FA436277374D01E43DCFDDAB479330
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  Azure.exe
- Size 69.2MB
- SHA256 75d273ecf4ef6a4d9c09b69f43b3a173ea8e71c8c4b8381104afe86b4500278e
- MD5 35936192a29202692b65345fedb2b8c3
- SHA1 3b7561ebf7370db84c6b51165894863e68ad2fca
- SHA512 055f705902dc3d4c2921b30d655f717f8763a27d623bdd368d83da52f587524eb9ed641c86ca629857471fc2c45fe665417a98d1c551464fb9711b145a9b514c
- SSDEEP 1572864:aejOYfXAwvJo6duNjPt1a2C2Uh2Qr9xuTJdpdb5Nvh7:a4VdduhF1a2Cfr9IHvh7
- TLSH
  T1CBF7337CB274BA8FF6C18E7B740110EED349E855426B12AEAD3F35E27934480DA2951F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  data/defaults/source_38.dll
- Size 665KB
- SHA256 f6fb7f66535add4f53bb82c78f26da829ca4a4087cb0e0d59eda47d2bfbf80df
- MD5 a395b7bb03d95ce6b5bf5d544a30f60e
- SHA1 ebe1ac6a941c4c9817f0f6a467e2fd07b3a04ba5
- SHA512 a678d5a6662767b550d1157472722457ec7f6b73a792aad68112a0b31bf9027386ff980b1e640c614f30265727c9b37beecee487d1cd17acdbfa6178aa8c76a5
- SSDEEP 12288:Cxc0cX8wIyw5XLHkvRKcN8eAHJnJMxjPuv4dafAzUcr7lESJ:CnC8ZZhLu8cN8eAwmAdoAzUcr7S2
- TLSH
  T1ADE423A1CB51D4206EDABCC3DD8549BAC6FB1888940EF33476060A15DC7254BECBEAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  data/defaults/source_4.dll
- Size 907KB
- SHA256 934cbe9ed16656555b41a3f3a489626a5d37f38d270e5db7c0baff64a047a2ba
- MD5 69c649d7e5625f4967ab66fadf3436a8
- SHA1 4d6a5d94218736b798f081911dda851f44d06f4a
- SHA512 6a0ad4abe069e3dcc69577f93d639802b48e02bea7d3395c8a81a48962fd97df93a618d80d689685cecb99ab621c202b54839ab170183898ba20d7bf6ca0c61f
- SSDEEP 24576:FM+w8ta+GvRYTcRbU68mgl8oVDhWmEH9rBLrN0Gy6:uyfGvGA1UkC5DhWjHNg6
- TLSH
  T1171533FB5A50D683501DA98CEFCF8522768A98EAE04C4E16944AF14C41FE1F4DBF48B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  data/defaults/struct_103.dll
- Size 589KB
- SHA256 b2782fa28f8bb95dc9eef2ebeb70b87a6b35f619861c7cf873a9a5957f9fc0c4
- MD5 b511aa0ebf412136e54da7b74939d17d
- SHA1 e2e6162bca30ff0308c68a59523d5872de031855
- SHA512 82b38aae87aea1937f0f49c2d90374f04adc1317cce827f98cbd15a6ef238631279eabaae869894dcfc623f0c41d302f3da82d820767d3340f647fe7cc57bef5
- SSDEEP 12288:FCLaRmXa9NpuSmytZHi6HuDb5uaQfILNbwA4rqKDuk:FCLaRmK9NgytRi6O8aQfIR8A4rquv
- TLSH
  T12FD42364256AA33E7277DA04130A4F337874DB0DB58273AAF6C8101B95CF4EAE577722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  data/defaults/struct_50.dll
- Size 577KB
- SHA256 26ee02173181855210730522ffc5b5bad2c45f8fc4e8f041ff3a1291e5851706
- MD5 808be6ead91d28814e5abc792686aba8
- SHA1 a30f52ea0223f2a2ec2300c2780047edb581689c
- SHA512 8ecec9a41e620206a702124e5d8c2f29f507437c4e57796cdd6e272e79434077573155276dee2d23885c89fd119e3a44ec2810940bdad30375e7f2608ac54a07
- SSDEEP 12288:4sihnDx/RQcdQbAQpl2Pll4es2xbOpxBF/NgFWX07io:4sGDx414tuH2xK7KkX07io
- TLSH
  T13EC423BDC83A19C99740E9ECA0A3547F390396D648ADE46FDED3E553C0280D49A8B7C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  data/icons/base_123.dll
- Size 622KB
- SHA256 51752444e4dc78a85b1922300a88bd2aabcf79abbcbcc576e6c0d9193574ca74
- MD5 e03ab2717f825c6e80c6ddf306e781bb
- SHA1 dbe99bf6f86a2fda338daf7bbc14ee0a6ee9940c
- SHA512 71b14f51d2b6a1f812fcb731e369b1bfd91f64f391e4bfea97a936abeebea3c6f14034285c2d41a3fc5672ee229520c9572b8d3924d2132c4df956994a7142ae
- SSDEEP 12288:EP5S57VYkdP4oEcyFGxHM/jC8NwKp6BdI2wflR/hSVOYmkfn:ExSOboFPxs/jCiwKp0dI2wfl/+OYfn
- TLSH
  T1D1D423BD6B68E90D1B695FC1C4F0698E57C2F0EA6ABD4C1BF00EA7CC240B79883556C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  data/icons/info_45.dll
- Size 711KB
- SHA256 32da2f3ec0c0fe0611f8c3eb2a48f7b14b1b07a644c935bbb6aea0bfa3548215
- MD5 2f85b7f8dc87ee70ec61b46059333894
- SHA1 d7587fed6b84888280be9e2cdae6c804ec430119
- SHA512 dfbf9ed193d627eea586ecebde1fac3d48dd63bf6b8a9a31c07398326c779604282a214aa9242c4fa662e68a368c94b1f9c09a0f4abe5a20541af6683e7878da
- SSDEEP 12288:s81ZztyT4upx9SJtOvZLw8VVNeLa5r23gtV52gwPmCAphf9CCqP:MP9M8vayVMQr23gCPmz1CC8
- TLSH
  T148F43329C8ED65C1B66C13CDD9D29FE4198FEF8B38B87C41293D4D6C762A80D249CB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  data/icons/log_3.dll
- Size 995KB
- SHA256 335e9320256e40729c5bd080e801bebd88903756bca3b2a14c98dcaa0905a5c1
- MD5 5b51915d974c19626d6f8f1cc161f9d2
- SHA1 eea9b22a9c8f24df46671bdc44e1dfb80e800ef2
- SHA512 a1e774184a36b46e9848625e47b3e3f9807522ad2efd3cae2f3590ff2c2c3e7c96f9a63c26dcc9fe25cf40bc111fb699e1549dde68553d296a4a4de5bfd93e94
- SSDEEP 24576:0PVHgg03z1/MrFqVr66au18hVxUxgBsmtu:YVHyhYRumhLUIzu
- TLSH
  T1D525337412DA2C0726A77CC466E84782D5E22F0EA1CB7D7B12E73D21B15878EC13E9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  data/themes/resource_112.dll
- Size 856KB
- SHA256 da4933eaf624d6a59a849f04a6661913377deb641c6d6971d85d130788f4ea05
- MD5 f7671979c092d3d027f53bdaf79c73e2
- SHA1 4f8708581a1b9c845492cf4f56ae4ea9ba872de2
- SHA512 3c620b518ea222d075ed0d6dc2966716b6417cde63ae29c6819caa3931a3bdaa8446d2d96737d149a02298c11656cadaf531398d9b6d3c1032e676201a50b01d
- SSDEEP 24576:mQmq2XSAQD5LeKOi2egjcl8Wo4TZIRDGLVNZcJ4LKeLFa:vdGPQFLeKBgKi4+RDGLVNiJuJa
- TLSH
  T10E153396598A903207FC30DA79341707A3EB1B197958276E237017B6871A3E8CF4FB76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  data/themes/resource_8.dll
- Size 690KB
- SHA256 dec7676514d8b95643854abe2c1ec8367a1cdef289c6baf985ab3fd0715bbd10
- MD5 079a5ef35a607690dcddfe06c1e176a3
- SHA1 97a3f86e3a96b26c3e6a61e6937b3dacec8d5eb2
- SHA512 7681d2cb533e80de62260328586dc4608e9317944c624f99e9b2d3afbbef61a3b826631f5194038552b4d6ad54034540542e9214b7c1bfbb424b56c9f9318009
- SSDEEP 12288:0tlmW3XjnvrMEjDacNJb26tCLVAPJqe8Mq+8AisQ9fdJi4M7/Xsfka:0tb3TnvrMK1NJV6AgetiPZ3ZRka
- TLSH
  T1EBE433D1169BA8576BDC98E23DF099FEE204A98719907271DC3D316E71A7607C3E0CCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10