b557cbd9abc5f8815fb8c3cc89a359c79a85928aa696de1c2750bc463547c662

Sharing

Copy URL Twitter E-mail

General

Target
BB465 menu.zip
Size 241KB
Sample260811-2drsaazwcy
SHA256 b557cbd9abc5f8815fb8c3cc89a359c79a85928aa696de1c2750bc463547c662
MD5 bf66af19c7e2cd6e7fc4ebbd19ce0c17
SHA1 07a7341514492bd5e6653974cbc9199871395b9b
SHA512 8e8a4e24d275e64b498cc033263d35c6f6b48d338d8a6806b65e9a10d71a04ecbb6aa3a47ecdf02094e7c72fa2d4f24386c376997c140e11cc4046fbb9534168
SSDEEP 6144:Xu00REOkbjDTndo+UufvvNVEt+m/6/ImGVdE:XLOc3ndVvvrhRDGPE
TLSH
T1783412BEA49FEC01DAA86CB6C35C8370E5B145E58D252934FC2D3F215AAC06DA5F348D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  BB465 menu/BB465 menu/BB465.js
- Size 1.0MB
- SHA256 baf661c60f0d8331d7520a67935ad4eab7b2b0954348c81f51b6b2f4e86a4f7e
- MD5 2ebe68a39f79b13f9fe5e876dab8837e
- SHA1 fd565a795f45aa1f3bb14b75e06c524781a204b5
- SHA512 3fdde5dfa73c80a4ac0fa6bb19641294e276013fe2f7594fe2059dfd94a27a162ad309c7e11f95f2236c4cc9a36f039603a0bb6f392c53256e1924469cba3ccd
- SSDEEP 12288:HJufIx5xqRtXhCcQg8K80K+6FkwxPqp3eOy:HJuP8JOwEpi
- TLSH
  T10E35554A15FB10B88567F17D4B9F94493222DA137E1ADEA47E4C83202F4A13897F3F69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  BB465 menu/BB465 menu/BB465menu.bat
- Size 159B
- SHA256 e56859dc77672e539141226a89ba2a504536b29d0f0d3c0244af97f531745b1c
- MD5 08d7980bfd77ebc2a507d45af13dd63f
- SHA1 c9016aba04b7c5d5f908d7baeb253c454718e5a4
- SHA512 3d6e64a8228d3c41b0139da01c6b1f8855befe2f407fbef0bf1814fd3c8f102bb96273e1d81e306518caf85e5bc9e450aa620b82bcfe84eb45349bcefd480c26
- TLSH
  T1F9C08047701AF914D2F615D14D79F4D6EC0711C355209ED7F8D275B0F94D4D4534E048
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Drops file in System32 directory
behavioral2
- Target
  BB465 menu/BB465 menu/__pycache__/bypass.cpython-311.pyc
- Size 13KB
- SHA256 e60dd15fe27771cc18891da477d1a5813236ccf8eb642955ca53c508b188e1ae
- MD5 2681d0e3716d2d9ce550009335458878
- SHA1 1e393854e0318b8c9ef98843ca8f2ffcede639d0
- SHA512 d92408d2e490c94b13ade6a5c9c8683eafad21c58896f02f98b966e22fa4475558b8440e5afc9a51f828dcb67c257679ce7671628943adeab244fa3874167ad8
- SSDEEP 192:WkMlyuJ2hKpoePcjavfATMofRp5RCG1r5JbTYVmz8vntWTGrOOvhim:6+hKpoeDfA4sRT9RbTY/WGfim
- TLSH
  T1B35261653386D27FF954937C98A0595B73F4D9F1B3288713B2EAE0152FAA6103D021ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  BB465 menu/BB465 menu/ac_bridge.js
- Size 152KB
- SHA256 e0d655d887253266c92c168359e8acb8944d4a5aafcc50ea1a15a06800f3b213
- MD5 c49a1718b3fabb6126c657301b753937
- SHA1 2aea4babbc23c164cc13f4b5052aaec573e23044
- SHA512 50d9feb73ca496d084ceaa862ec3cd4bd5673277f1de196fc0b0754498dda417ae3a9f68924a78d407aaf11f7a2b05ec09cfb206a3401226a8538dad3c6de509
- SSDEEP 3072:JC8pvzOY0mQrYrFQxAqXAaQdczvQg47SFOokQpg3FwiwgpB0lINK6jx5E3Fy+gbu:JRpvzOY0mjqxtVQ2zv147SkoHgWiwS03
- TLSH
  T18CE3744929F78262812BF42C2B4BD04CF23995036159DEA47CECC364DF9A931A6F67F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  BB465 menu/BB465 menu/bypass.js
- Size 20KB
- SHA256 9960225b207d9da8042200e54a23de98470ecf02187bd59b531385bd3f8f70e4
- MD5 46412aea2bc5b852dba26681723db226
- SHA1 44a32ac1557a877d5c14cc331021ecda709a9280
- SHA512 7182a718fb112f2792a90d5158d646a0b9d65f5dc92c93c0c4d61311a720f32d9f1dbdfc13813195e694331350535ec55a59fd070678c094ac64ca471f1d5d72
- SSDEEP 384:d/Y/ofGlN2zNuTA3YjqqXRUSuCvQg0fIyFdL+uq6yfzAk:K/OGKSYg0fIyFdLdqJz1
- TLSH
  T16F9274923250AFEBE56D0085E9E886DF64F00DB24318FFB0E56DD5FE41B0858A5D2AD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  BB465 menu/BB465 menu/bypass.py
- Size 6KB
- SHA256 3f6c309fcaccde137a41a07f0fa8ef85ef8d7c37b0fff70333bbb12efdcb1592
- MD5 503cc43c469a679e957b4753f906283b
- SHA1 88c99554acef3d68e5ae635a88dd9f0c592843c5
- SHA512 127307aac9f69704ecd6f5e3888396e87cb8151520e2bc9ee1959e303ad05976d09996f635d952617c724b3aa500c9e604e2bb8949c70c427ce673b2cbc18d91
- SSDEEP 96:ZWPm2AXGkZcPhssCyHEqmUW7awgdC3hvQiL8uBNCCi:Zym2AX0EgEqmU3j2F3i
- TLSH
  T18DE15A7228042B287253DE0E8971D8550B7ABEC3B6763428F0ECB5C05FED476D6159FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  BB465 menu/BB465 menu/devmode.bat
- Size 594B
- SHA256 e7cff8868905d392b425190343d89e63044a07468027ac2f5c9163e577cb465d
- MD5 4008cde53287fc39349cf6f5c27973ab
- SHA1 21877745d4f857b6ae92bc4f02b133e70644d36b
- SHA512 86611569043ca766d6c81497a1258edc2ecda6fa1b2cda565e63245126b9ffbd947318e17be84c59c6a09a946f9bff05704453410cb5e40c4353d0f1529b3874
- TLSH
  T1E4F0021B72E425FA03B840264EB56091F847006720322DC334A1F0503F6977ECBEC998
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  BB465 menu/BB465 menu/quest.ts
- Size 19KB
- SHA256 2f3b752b9492f9094fbd6b7166ab1c3928c6857048acfaa44c546d4a36e606ad
- MD5 b269908f2241f2064780503dfb52e419
- SHA1 18f82d9d3ec8d33403e522047eb30e1922f11c0d
- SHA512 af97ca2b4728ed950e5bcae45696f09efeb447a682b8517fc15bbd8a00ab6596c01dc29f1f83ff57feb86861726ff4f8bcd28604448be9d7bfbd530513b6d309
- SSDEEP 384:s62ql4bHfg5KtftFXyrSXcrRcrDgMzw2XpOvAsfit80vcPE/z83rYQDv4xPPRC94:ru02QH680vceSlHjLhxkw73UBEi5
- TLSH
  T1F5923F05786654628CA392509EDB430CA11216477EA0F8E1FFAC8AF44F8D05F977E7BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  BB465 menu/BB465 menu/questservers.bat
- Size 581B
- SHA256 7f5d56371e3548e5e1ad4f5170ab8f2883082af44a0a0ffce0b98dd27f4c38ab
- MD5 71fe5cfb0c6508f3020f05e41d83a26c
- SHA1 fdbddc47d758a7602a34f6d7a0632a1a1149e741
- SHA512 627aa1a7b59560d791b5eb81eccc1ae5b9e095ecab980ba6aa2c1ceb2a46a1f3fde65a0327ed0d42aa9c3a139bf4d5e0b553185e91a0a2575a9fb5633f8128ec
- TLSH
  T18AF0A21772D161FB07B844254D75A0A1F90B10A720316DD335B1E0503F6477D8BEC958
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9