6694bcb80c1f2923e7ccd1fb05312d31f582196d1bb82303bebc8be5cae98d0c

General

Target
privatecesiumv2.zip
Size 1.0MB
Sample260810-wrag9shf89
SHA256 6694bcb80c1f2923e7ccd1fb05312d31f582196d1bb82303bebc8be5cae98d0c
MD5 b2eb7f66229e79a44dd64392edbfc075
SHA1 6bcf6356fdc195b3950c78a73fae7a443006a693
SHA512 7c547e4e913aa4834db29f935432fcf8da90c6f21035c0ee0150819b123019990269859bf8e41cb6638733e02fefd6c012e69606dec49c150b6d386e544d0f8c
SSDEEP 24576:Tt3vQLl5On0Lz1aZ0US9q1QG0DiaOzws0wWiJ3th8rYkkxJk:ZfGpLzvFHG0DX80wVz8rYrJk
TLSH
T1383533D56DEC96B16837DB7C16075F9F34CB824A96A1BC2C44FCA4A6D1A0C2872B1339
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  x64/SigDivert64.sys
- Size 88KB
- SHA256 5c3e7bbb06ebb134bed7b1231fdf3139a2052cbe5e8c8418e54237933b51bb4e
- MD5 ae66b5b024e79f8b158bbedecd75f71b
- SHA1 72abf8ea3b82eff3c7da99500afc87670bef9c82
- SHA512 cc3657299118b7bb6537bff4ec0389b97d6ef5b351db5fd023787a64ca6b98062c6fe06a9dff8aca82fd0cb4532d517509b2e36247fa0b9de3116203b2e3ab47
- SSDEEP 1536:7ovgCRgYL/h//oJJw5AdPtey2AyWpdsimpxpWXixv6W:74jmJJsKle9A5pdsiypgovl
- TLSH
  T1DD935C46A2E201C5F9F6C97895B59253EF31FA91AB22C7DF11D0981E4F21BE0BD78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  x64/WinDivert.dll
- Size 46KB
- SHA256 76dbca2bdd51c3462b62daab40e0aa9086f2f656b25d84e58f176fc2cef1682c
- MD5 0ae30ca56cd6eaa7a05d86fc315278f6
- SHA1 006ea37a9f1ba8e9104dbd81bdcf2acbc9545231
- SHA512 8025be193e10803d241473b42442e2a43b90684f230612b80fa76385b21027718d2a98eb8832cf970955ee883db4f1bfb7338e8de079b8e11045896435f4634c
- SSDEEP 768:itSVluu2agCfRSB3QEw2VWHxWYuaO6JXtltdUvwhqWB8TicI:bUZWECHxWDABdzyTic
- TLSH
  T11C23C703F64251BBC568C27083AED3526E22FCC56354FADF829FF7952885F42DB1A509
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3
- Target
  x64/clumsy.exe
- Size 419KB
- SHA256 5614ccc8da525eb8795cd8d41e73d67065a902e2f76abcbe4e439ef0aaefb4e3
- MD5 eab539551cc6a2a0cc26b52e60624d22
- SHA1 a6d5279a26ee8bd87b9d37b6f1f2260be92f56ad
- SHA512 6b5e59384366667b241b99a25e7678f312ade3e3a19d569b71d0f8b0d369c03d678edbd325d833fca26672bcf6e2541b89fa1a0db35e5617465a59e837f9c741
- SSDEEP 1536:uD9jpoRV3MXu/vL8gqhbQbPQAMTyfZtnmJgC+XxJpBZE4UvX:uMNMe/FqhbgNfLmJgC+hJJr8
- TLSH
  T1F494A32A31A1C59AD91574F39DA0C6F68252BC581E2006AB36F63F0FBF75193DD27A0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  x64/iup.dll
- Size 2.6MB
- SHA256 972275ea2e603f60a168d8090f8e15e4acb59512af03a51490d8c394dc6871b3
- MD5 a758fd567bf45810cb056e09482ec9c6
- SHA1 27883ffba9dfa8a06e935308eb2bb233ead2c836
- SHA512 ed680fe89355ee0ef537a06415f810db040fae0bd2726505eea23faf4927c27f8af391402f65d29cb7db1b034eacd523276e93d0b1dad714345e9b1df75b17f9
- SSDEEP 49152:+oQJPqj3dbslZXcSUdUL275cg3dnR7ShE:bQAjVsZL2Zr
- TLSH
  T15CC51ACFC66F6469F86950BA8654E966EE72F2412321CFD701208A653F33DED4A3B530
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7