35c14a1d24bd8b30bd38c001f72ae9a4b00507093f32ee37860e9192bc9f1369

Sharing

Copy URL Twitter E-mail

General

Target
spork-distribution-1.0.0.zip
Size 204KB
Sample260811-ew3k6scd78
SHA256 35c14a1d24bd8b30bd38c001f72ae9a4b00507093f32ee37860e9192bc9f1369
MD5 98532490c2c66037a9ffbc5dcef6b1a7
SHA1 0ffaf78cf368eb1661c7d5faa7fbd97cefb1296a
SHA512 29a32b4fbcd6cb9a9ea6e79a826b98b121b6e9c3abfe5c7985e37c0c572747cb62d967c582b328beb0ca2b2f45b3f81af2f0cb097ab8f122a4a34ea86be1cb06
SSDEEP 6144:kFQpIwI4BGXmzJAZlVnFBYWCBY6JVCznJ7:kFUIwI4UX1zKBY6JS
TLSH
T1E1242358FDA55447EDC8EBB1421F0A9427EE2ACF4187B04E06A1676E6D69F13CFCA4C0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  spork-distribution\bin\lua51.dll
- Size 237KB
- SHA256 522df32f08e93122a093b5925d824cccd0cbdc9f4a813f626f681d97ad0b9429
- MD5 87ca5fbe96f1a2b6dfd5529d840c2b4c
- SHA1 dce2c1d80c6f62216ed54119a70b14ff07694a4c
- SHA512 91f9065ed8441a64956afff6d38ffbc9660fc1628ab6d280c17d6013c7c76d129ce9170c104282c2643e1b6e8a2285cc66e0ba2287c435d52cf0c5c05e5bdcff
- SSDEEP 6144:kcvkR+qJF2fJOEpro3Ymc4/N+2YrzaTHhF0H:kcvkYqJkhOKroImjG2THhF0H
- TLSH
  T103344A5BF1A329BCCAA7D134869B57B1F93278911230FCBF16E4C7322D22E90575E924
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  spork-distribution\bin\spp.exe
- Size 297KB
- SHA256 a1b5e2c16f1483ba5a1703b7bc0d6ed2382f089bce7d424a0760a67b74ffdc6b
- MD5 3eb522832573f054c3a89e32229370a1
- SHA1 1200db8f205410b32515daa756546c9a8c99d0d4
- SHA512 c3873354917d878139a5c7e1bfb4f568f754f898447e382c811e02fa98654b7fbda70edafd6fa0925d37e44bb06de023fe96d3c00bf0381fd74e4ae5eff602e5
- SSDEEP 1536:XYZW/8eJex/BhWZWjtjbzQa4ChMJ5RttQ7XRm5BqZ8XeYVDBodUQ3EN7W+GDDHes:XYZW/i/B8ZWRbBoym4l07WvFMvo
- TLSH
  T13054A58D758598D6C90712774B96CF3712E8AE8D4E424703D92CF22D1A3259CAF8EE4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  spork-distribution\src\StandardFunctions.lua
- Size 778B
- SHA256 a726e2b98790c05b46d60dd44e76d2edc20a93a3c66afb7fbe7dc3f2b08de87e
- MD5 bfa95707952b2f5bfa9c1bfde868931d
- SHA1 1a5cbab12525499728f19b14a8c5109377d2c3b2
- SHA512 867a0288cdf8f57028d9feffea2f1d70c75cf4c5b7762bb15f7e1521e5eec84578b8a6719b1e2cf07f8586586be170109e74101b0eb94c389344d9c3a28bacc7
- TLSH
  T1FF01DB091646133255B2B610796B750AF4161583311CA427B4FD06E85F7BC6EF0C4FBA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  spork-distribution\src\Types.lua
- Size 2KB
- SHA256 688b7ab59cd913bf9f9266d6c5cc93b0d95f8aad45233c48bae5a2ca26cf771f
- MD5 fcb0451a027814c4851be8506056bda3
- SHA1 a9a69f96527f3ac322531b9479a93ae5de4a3a1d
- SHA512 f3db142057e50de01bcce1c965f02ae9dc989714504491acab2947f112b90d6c7206c3e84ba9aa6ecbd110b9b5c5874623402517fe1feaf50a16697b50629600
- TLSH
  T178514B477C9364246AF2E5396ADB6029F31644670304082479BC46EB2F7114CA6FAFEF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  spork-distribution\src\win32.dll
- Size 96KB
- SHA256 fe3610757e91b898160eb8ff0b2e4b0006e20478e93533d5121570bdf2838dc3
- MD5 2dc22fe6431257109997bd7a8a510172
- SHA1 0ceaac97f582151b9f5d9fe5aec44ebecea2569f
- SHA512 1c6056df739288cf6944b268b68829739271d4866b74a0032dcaddbaf935513ce5d156468094c576ace433f3a49cb0a619f3f8a1f9c0ad456e42458315d6e261
- SSDEEP 1536:5omHSb1uoa4rmMP51DtQ+caZR+6ezsVb3mQCIA7LXPzZWllt:5omybznHCx7L/NWF
- TLSH
  T182A31AC6B6CEEDA7C926523584ABC335233CF7C407C25B934D3561351A136D0AEB6A87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10