39914801eeb2a9eb4e3751223ba4e651a2477e821ea92ca807bc5993c79ca570

Sharing

Copy URL Twitter E-mail

General

Target
peqrk8.rar
Size 1.4MB
Sample260813-n6fc3axygs
SHA256 39914801eeb2a9eb4e3751223ba4e651a2477e821ea92ca807bc5993c79ca570
MD5 43e516e3b5a949d20a91f902d3d937ed
SHA1 a1dcbdae5b6c853c2cafb0b198e9d7e2990e959b
SHA512 b03aaf4eb4c6f2e2d15a16b3a9857a4c610259586684fabe8c78f062f69aa848d9ec418a27c53590e70b90aa023fdb7f1d77d95511f43e37e9bb867b32fea257
SSDEEP 24576:gO0WKdTdV50Hn1Yat41aybofDMSNFK5DU2erMvmMBsHz2kh6Y6KJmCXp1tiG:YdiKat410fdNF+QMvmE66YNRXp1tiG
TLSH
T12165336AC7F5F15547C698AC389D80B1CF65BAA7010A5CA37B08EC1128C1BFD7C19BB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  peqrk8.rar
- Size 1.4MB
- SHA256 39914801eeb2a9eb4e3751223ba4e651a2477e821ea92ca807bc5993c79ca570
- MD5 43e516e3b5a949d20a91f902d3d937ed
- SHA1 a1dcbdae5b6c853c2cafb0b198e9d7e2990e959b
- SHA512 b03aaf4eb4c6f2e2d15a16b3a9857a4c610259586684fabe8c78f062f69aa848d9ec418a27c53590e70b90aa023fdb7f1d77d95511f43e37e9bb867b32fea257
- SSDEEP 24576:gO0WKdTdV50Hn1Yat41aybofDMSNFK5DU2erMvmMBsHz2kh6Y6KJmCXp1tiG:YdiKat410fdNF+QMvmE66YNRXp1tiG
- TLSH
  T12165336AC7F5F15547C698AC389D80B1CF65BAA7010A5CA37B08EC1128C1BFD7C19BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Targo.exe
- Size 1.6MB
- SHA256 51318671b66049a19755b8cf117bda5f72d0e02b77e636f949ed1e368b591739
- MD5 ee6aef040f8475b45bbbaa2165cb85ba
- SHA1 9f9c476bbc3c8cb10a82b76d4261f58704c825d8
- SHA512 4d542ebb5cb4c265899bc4174efbfdbae9eb1dd2f16e9c3764830c762fcda1f390bfe516d699490c68ed048afca8d7d412bff30bd88ed128c181265544556916
- SSDEEP 49152:xK6EgpquMX5Vcim9+0fugfL8JHIgtDp8PveUc4:xKMASD3fugfAR78XeUc
- TLSH
  T1A775F0107FA51547C66C8AFAB464102EBF316E85E659D2CE0C8138DA24F17D0BB4EEDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  discord.net.commands.dll
- Size 102KB
- SHA256 000dcaf7a3de43eeacbd8dd1d3e9ba7bc3908222c3757426a71081eb0d1985b2
- MD5 11a492e4782b8a4ceb204808c0c8fcbd
- SHA1 2e433ab0a9ff97ee7de7a19a477ead4fb94a59c6
- SHA512 468614e7b8213b27a48c8bbed05cd2e7e77597b0420631153bc524ef2db5248cd65b4ed50289cc247060e68484b3a72b15dad5e970d59379bcf499dc74d61a15
- SSDEEP 3072:I8fk9wfEzaHD0nzWMpZW+8RKbpGLlJqG:dYaHInzVpZBJbmJ
- TLSH
  T144A3396552FC8B22C7EF7A79F0B41235C7B5E60AF42AF74E4C8CA9E92D123806511277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  discord.net.core.dll
- Size 119KB
- SHA256 f812a1da84b579be1032acb06f13546220e1d26b79d9008659b5b4694353045d
- MD5 d00fe9035e5936a65ad44d819ca7b392
- SHA1 2dcb764a59909008617f7cee40ab632e3e44bac8
- SHA512 7cd92ffad5d70a9a7d0750e586d6718b6d631ea7c23437e323b5ffe588f856c43e06088f779b291cfb1d4474c85c03356298c0af54fdd90687936766f707e6f1
- SSDEEP 1536:KT5tXDWj7Y8D6hKvKbrIueQEc3ncl5Jr9aIs/VhKSXS6MmQRJt2+pQc9dYjb2oja:+3ncl5OuSXWms/Qc9dYjbBjVcJ3
- TLSH
  T1FAC3392883ADDBB9CFDEB73BF02046018A36F38AB146F355886CB9F9781779454841B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  discord.net.rest.dll
- Size 415KB
- SHA256 99265d78c4e55267ed476a9861c226d5471cef29ffce6b00e1bcf5544073670b
- MD5 360b5cec575080f52030bdcd8d02a5a3
- SHA1 c7b1dc893b82433e2990a623897baaecab394360
- SHA512 47b0384e05293746c6d1a59d7b26bd2d56a8720aa8b1b93035b763fcae30a91ae43b3198d5140cd983f72a133303b732ebb5e440e568c6a939c60c663a5a50e8
- SSDEEP 6144:TewKp22JCoB4Tlt8KpeybiXn8CJhAPwa9EjVG3:TejQX70Z8zPrajA3
- TLSH
  T1A5942B9193988EA4C2DF7FF9B690466FE322D6419856FB4F254CE5F52C83330482A673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  discord.net.rpc.dll
- Size 153KB
- SHA256 c571dca93a812e15856691276c137cef07003fdb6ad416123b6f544745a826c8
- MD5 f60c9b32b94ef7cf8cdc193f9271d0e2
- SHA1 49c98483448e03224d65c040ab9d049c0d315924
- SHA512 3bf040899fc9750ddaf252130bd3a9fb16c86dd13e5092407b90e5275455b4d33dc5d04bba492846aca7d90d157120f26300ccb38fa7ba31a15232a511322195
- SSDEEP 3072:Ok69/MqXwZB67bETH8twdQtUvApHFSXbUcuTk5N8lgvAgKN:DEHDtw+QezccWvh
- TLSH
  T16FE3292487E48EA1E78F777DF1449221C722B249A81FF78E594CFAFDA543380A905637
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  discord.net.webhook.dll
- Size 12KB
- SHA256 2910fbe517217a867c6c1c5139c2c5848eb70757cc24dd8f1f70933c9d0f91a8
- MD5 4b699c860a2be85b89869222397cef13
- SHA1 b350f8d9bf1d5d0b3ba9ac469651ec474a966148
- SHA512 fc5d1ea22a31d8e8c56ca16764987943517f6bf0655642bf9f027a3f8ada61b9bfc571c8e9df2bb19692ed044f333860d40dc508e20b6fb4d4d119ac7e00b7e3
- SSDEEP 192:c9OGUcrvIC8I898Kk+IbWPIdWUwEdCAp98nlaX71KuuAKr2:c8GUEv+u6IgUTd/8nnr2
- TLSH
  T129421A0993DC4223CAEF577DE4A543458271EA186427EB1E0CCDA9FC2C933941A05FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  discord.net.websocket.dll
- Size 361KB
- SHA256 9ef37e12c16e4f3a72ba1a5c0c7cf39360e109d443fa0274030399fd04e58b7c
- MD5 1035aa9535fbbb96c2bc05299d682997
- SHA1 dcddaeccb8bdfa98280f715fd595a1b9397ee905
- SHA512 3be18ea46368af995fce244eaceae02c5520d125ccfbf1d7162b1215360a60a17bd73deadcdca8bf09a6298d237ccee82fbc5f3ab6c77d3a1692bd099916a8eb
- SSDEEP 6144:uv/S4d6eg7cY5AYzAGWyuzGJXDBeidHX/vzThOIfXuwKjPGO+to/1akYwXPhX:u47vAYzezGJXDBeid3HzThRS/nN
- TLSH
  T17E743ADAC3588893E59F63B5E644AA4AC7A3E206A9CFF71F450CD6F5244A383EC04753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  microsoft.extensions.dependencyinjection.abstractions.dll
- Size 34KB
- SHA256 f2663ee082ee928ce9bcd16f08c64d12bfb72cc6d53e55b566c33997159ad2ad
- MD5 c39c3bbbec31d1fc672ab063c4a42c64
- SHA1 5c211169de589593e5c8ea2fa05d0c7cf88cf4ec
- SHA512 df4117120ed9d805258a516265227f48466bdc07cf6586fe197e8081715a6793486dfd5225bf55c524278d6517520d69f31ea6e6625d9bed4415a0ac90d3ba13
- SSDEEP 768:YsHhq44KF8/f3IExQnlGn3i6m+w5zs6bhM30A:YsBqTKeInE3h0NbG31
- TLSH
  T120F25C8177F8A212EABD0D30D87182059E35E5E65801DB2B2A5CE0F90E67FCC7651F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  microsoft.extensions.dependencyinjection.dll
- Size 43KB
- SHA256 080e4d42db861b9b2391e1f4ac03b91a5253ad71b2ffb86618765f22cc7ba0cf
- MD5 6cd63f93003d0d1d50fa8b343dbb6acc
- SHA1 458b44df69d513ab9c24b07f4288e26e9c602df2
- SHA512 16cdfacc1971266c067628ec2c8bd14a8ac42a7f84fa1441a0a8d52d80f4b535fa211ac2560c9e1d0729512f5d3319aa968c23b953d1047b594440e308c5664b
- SSDEEP 768:bZtcZiD3I1rYLpHyadf5S6ni63vI6bTce:XcorI1IpS6fXvxbYe
- TLSH
  T14E133B1627FC8233D6EF4AF51877C5501F79EA922402F7490E89B0BA1DD7F805A21A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  microsoft.win32.primitives.dll
- Size 22KB
- SHA256 e281d04d35118b7f3a2406014333e0581b74ea4b62f4f2388ad3ad8b32223c83
- MD5 9e12d3a3500f09d1ded5fe6830e4f8db
- SHA1 afa308c0166d8cbdd1d5e6fdaa8c9b87eb9184e7
- SHA512 459c90a4942b6014ec90a311c7ae45370e0d49ca4be3961570a2f50d340637ade1b6def90aa4722a91e3cedb0d14e5f8802c02745e72c5bcf705ac6499ae396e
- SSDEEP 384:ybha4YH9Whs3W2W/Z3WUQ7q0GftpBjcERHRN7DlJrv:ybwJ+EieEBHb
- TLSH
  T1E8A22A91C7BC4213ECE39E7062B4D9873C3CABD3AD2057290499F2D91C977D1DB24A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  newtonsoft.json.dll
- Size 638KB
- SHA256 973fd70ce48e5ac433a101b42871680c51e2feba2aeec3d400dea4115af3a278
- MD5 f33cbe589b769956284868104686cc2d
- SHA1 2fb0be100de03680fc4309c9fa5a29e69397a980
- SHA512 ffd65f6487bc71c967abcf90a666080c67b8db010d5282d2060c9d87a9828519a14f5d3a6fe76d81e1d3251c2104a2e9e6186af0effd5f331b1342682811ebf4
- SSDEEP 12288:WvS56CuBAXYxeeNvWHc3oY2osSeBTdb+:K07SAIxOhAVeBTdS
- TLSH
  T191D44A1263E89B2AE1EF23F5B4304E0947F5F416A7F6E78F2644D9E618837518C907A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  system.appcontext.dll
- Size 19KB
- SHA256 ea3a3003e10f44280074810934261b61a209c1ec1e9029b932742c853bde743e
- MD5 b906366572177d428a8c3218b203b417
- SHA1 c9a0c7200ad55960a1e1824b04718cbf6ca84581
- SHA512 adb0d6f982e9f586d49eec0b8d775b98c87515e5c540968fd919864285ae6f970d00af7f8f5d0bdcce29b4c77f7fcf3247f461821781b020aa1413d2fa8b1282
- SSDEEP 384:99JjWvfWJSUA0GftpBjY+ILKHRN71UlBRAhHvH:9Dgiiem1qRAhvH
- TLSH
  T125923AD18FBC8143ED936D7062E8DA877D3CA7D35C20855A146AF6D82C833D5EB24A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  system.collections.immutable.dll
- Size 238KB
- SHA256 a8e9ce5d4db1897a939e60860154617300b0dfa4c4d3e10341f21af0de4bbfd5
- MD5 aad3b7c5828e16b4c8071e5ad64b3f7d
- SHA1 a9049b07b9f5c9f4c3da4d4568781ba58564b896
- SHA512 5eb044397db450090c41b20b99385c085f5e08d4983bf2bb34f2bf026f6df747b37839ab309846ad1fc1b76519ef77deb28ce4831f8140c9dcdd8fb1700690fb
- SSDEEP 3072:u80xOpWDN5GznPbTl1kCaHa5OcQ60YEQiZVAaI5SBdGO36m2biZkYAoNliuqxEN1:u85ltaHaIcaCiQ55K7aiZ3AM4ER
- TLSH
  T17E345B00675CE336DBBF6E37B7218CE51676D22BC283239E6A8CE7B04483355EB59494
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  system.console.dll
- Size 33KB
- SHA256 083f8649db8063f231eb38af39a450cc4cb9c8d381804bd189bcf589eb9f0951
- MD5 f6b8a8fe0174e9657c3544b0a4aca494
- SHA1 b5102629939ebdd4bcd0f407a92828dee5f2b565
- SHA512 f8fdbfec7882239689d2a6efd9b6e59ec68b3075eae153f11bdcc203a7d207a3762765b89d3001efac7d10934e9d6c923900720b85376d6b0a95a584761cb6b7
- SSDEEP 384:q88mvx0rdouZ7RX7yvDgipjwjd5zhiNiN/W6EWFWFEW93rq0GftpBjp6tERHRN7y:L3OhouVWbIf7a5ij6tEBEb1
- TLSH
  T15FF21B826FFC002AFAF39F303AB5D6422839FFD65D22D51D0154D18E1992B94DB61B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  system.diagnostics.diagnosticsource.dll
- Size 34KB
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- TLSH
  T145F25B54EBAC8953DEE71D3062A4D9423A3AEB936C10C25E2699E18D0D83BD1EB11737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32