44d26eac554c1b3754cea287eb30bfa51cc3391aa6d6123f9b42d391f2d71a63

Sharing

Copy URL Twitter E-mail

General

Target
New folder.zip
Size 130.4MB
Sample260814-anhhtaec82
SHA256 44d26eac554c1b3754cea287eb30bfa51cc3391aa6d6123f9b42d391f2d71a63
MD5 c9dcf5545fb03473100d5ca52be44cf4
SHA1 4ff48455cb03e074ff37bc004fad31d940dcbd5e
SHA512 97428e27f988d1666597ed29be332b0c3aa954ebd026c90446042c390229b975cc277d9038d671c40234035fd527548546e0cc8fc643869b483424ae2193b300
SSDEEP 3145728:nVV7DrwpThgz3Ybu++OuwP3mCsPDorSvNQafybRYg48Dg:nD7Dr+FQIuHCV7afybRYg4
TLSH
T1EB6833BBDB24160BDC5FB532901ECB18968EB15C49813E9E0E5827053A4E5CC6B36FDE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  New folder/binfmts/Shared/KeyFile/1033/sqlsysclrtypes_keyfile.dll
- Size 13KB
- SHA256 c51a51d4e3734765d1352dbf09511e49a2773b3d6bd9a704ee664fb8e3059e42
- MD5 166a4eb063fbff4d85b7647b9b3819b0
- SHA1 1738ea07615836656f9d5579e1de65a1a9fa6ca4
- SHA512 d178a00dd133698bc04c9d641c4c77cd6547c05e2fb4b81d9b86db53b12ee49def2496360eee2d8b84c7461adc1db8cc0f1632d6bd8938957fb34880e8df992f
- SSDEEP 192:eezaYKTBCxaMQk3X7rrqYPWhRmWQRFGQKPnEtObMacxc8hjeyveC3cgYBv:euKT4wMdrrxPWhgWQKLXci2jpvqBv
- TLSH
  T13A523A868F7DC10AFD970EB0A3F4D9D33E7CA7C31B52A09F5651E64408A67D08178A79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  New folder/binfmts/Shared/KeyFile/1049/sqlsysclrtypes_keyfile.dll
- Size 13KB
- SHA256 c51a51d4e3734765d1352dbf09511e49a2773b3d6bd9a704ee664fb8e3059e42
- MD5 166a4eb063fbff4d85b7647b9b3819b0
- SHA1 1738ea07615836656f9d5579e1de65a1a9fa6ca4
- SHA512 d178a00dd133698bc04c9d641c4c77cd6547c05e2fb4b81d9b86db53b12ee49def2496360eee2d8b84c7461adc1db8cc0f1632d6bd8938957fb34880e8df992f
- SSDEEP 192:eezaYKTBCxaMQk3X7rrqYPWhRmWQRFGQKPnEtObMacxc8hjeyveC3cgYBv:euKT4wMdrrxPWhgWQKLXci2jpvqBv
- TLSH
  T13A523A868F7DC10AFD970EB0A3F4D9D33E7CA7C31B52A09F5651E64408A67D08178A79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  New folder/binfmts/Shared/Linux/keygen_short_test.html
- Size 820B
- SHA256 08451e1f3cb00edd9b49cd0e41eab9c957be3b5839686bb40a8d15f5e252ea28
- MD5 0fd586bd54aec120d9b7966e1b646c37
- SHA1 d466c135e526a967210440f18b41228aade87a1e
- SHA512 a70f5321eb0c0eb26926d6b270e0ac43bf16b2c121df6cb4591a3a3af795dc63361b8b7af85690fb54115202b308ceb67731dcb089616062b427f810b46db927
- TLSH
  T1E501F1FA70018EA08373D97471C3F915149AE3E592841D8C75C0756FF8A754882A7BEB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  New folder/binfmts/Shared/Linux/php/obsidium_keygen.inc.php
- Size 19KB
- SHA256 ac637dbf7fb9cf628b66e5dd3f31ecd641bf21f0e8d878e360c84a19a2040478
- MD5 9935116bc38e3c986c46b38cb21e8436
- SHA1 6a4fe12a92ad37907c2b2b433c739f1cad7e76a0
- SHA512 5c3fffbf84f18e1a7b1bd5ba52bcae3396fd01047f600087b710c80b8dbb5d1b968216777e807768432cd2d9523bc4d1eafc26db5594ee43194008052f8a6fcf
- SSDEEP 192:V74XDpiFBVCjLJwICqFJjLfH++FtMQP3o+F8PWe:4pyCbjLTY
- TLSH
  T1D59265C1BF8E24AD63B211A0D67BEC56DE7DF210226941EBF8D87149E59072C93288B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  New folder/binfmts/Shared/SDK/Assemblies/Microsoft.SqlServer.Types.dll
- Size 303KB
- SHA256 e272e45652092622db856dca4e840389be109abcaefd1f376b0043b450a801f5
- MD5 e3f6937bbc9f71fe87a931adfb92cecf
- SHA1 91d3f257a6bbfbf8c50843011db6ce6535d998bf
- SHA512 0d535416d4e3c485a4d133a23270c31d4e0e9f6e59a53c34fbaf0475dce0dc1004d329d3d7d58bb5c6a8f2b4b189932fdb90ce1294aa1d5ffb9c285711882210
- SSDEEP 3072:X9ZHG6aeJrHhGKyoE8GoPxjdBiFaAGWjvGiPP2EpPZHqjm1Dkkr0v9o3:X9NbaeJrHhGKyoE86/KZ8
- TLSH
  T1E964981DEFCC1226EA76F374CAF4447663227A13663DD7CF40425E8D0A6B6814AA077B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  New folder/binfmts/Shared/SDK/Assemblies/ru/Microsoft.SqlServer.Types.Resources.dll
- Size 41KB
- SHA256 69841056dc8d96096196fb08c79cf7d3b9d4659b5e7e64d13e47fc3c403e3f3f
- MD5 92ba39e66c3d5894a23b110da092bbc0
- SHA1 3c25e7140e6a59bf4af205c7ccaf7fe5907326e4
- SHA512 7055ada1eeeb954e5770fce83469ecddd2c9bc2aaae05887ea899042ad22b2513550de20242f5af25cd2338093e085a2d2da4682363a37834b83c01294348177
- SSDEEP 384:9iua0XKriuQVqDvOo/dHoqWZLXci2jpvMUqR:9ium7QQDvPahMi2jpvGR
- TLSH
  T19413745297ED1449F2A2F937D514FE067CFA6AFE3F2A931A10182D7E34F2550C628329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  New folder/binfmts/Shared/xe.dll
- Size 616KB
- SHA256 f724575de0ea9ec3cc15a1f10d6a936ef2ec6dd3790d0d1c39dfc1f9d31aece4
- MD5 9abbdab424f66a7f4c395fd8759cef0e
- SHA1 d08a1fe1ab2eb09827f26fe493994e8f064c74c8
- SHA512 2583f01afd894330c1e98a57327df14605b19c4baa06beba9f42bb63a0831f669bf495fc91c16041cd882169434a568b09fffa2d5f56edbd2b36fbb6a8ae5ef8
- SSDEEP 6144:atkUO5IjISRbo5x88oTPVXU+u/o6XPLFlDxzqKoAMl2FrbyOHgNf1UfD2t2BgCcJ:ukU3IBC823SLMkFrzgx1Uyt2mL0eUW
- TLSH
  T190D44A2066CA8669E4F315341779B25B533CF9254B22C8CB52A4596F1AF82F22F35F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/SqlUserInstance.rll
- Size 20KB
- SHA256 89521c05d50625512ef53b3c11cded25cdee1d7dc63ff539c2ba8a58a6361e13
- MD5 34a0d74588db4242b3166bcfe1c2cdd6
- SHA1 19630f066153012c3f2c79cd02ea6dd08b5f512e
- SHA512 883ea9084dbd82be0320f44a600393899877190535498d39d6be6095abd59caf6058a993876ece2449eae2814bfa5e0245c6fe0680f4e6c2b61bde6bfedc5638
- SSDEEP 192:zvGPWFxxWOBWULwu0Sc2HnhWgN7ayvWYjKI+XqnajlFQuY:zvGPWFxxWO7D/HRN7/+ImlQuY
- TLSH
  T1A3A25E898E6B5003F8622D70D3E4C4D26FBC6F8334A2713FDF05A59519D278CA691EB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/de-DE/SqlUserInstance.rll.mui
- Size 22KB
- SHA256 5c078a9b5ef063d10f5059a37d0dea80d44a5297cd273e779f8b0a53fdfb8cb7
- MD5 b30fefc695f4444a893d567727b7520d
- SHA1 7c30c0664a6d7bdf5b74d6db49880b0412902a33
- SHA512 9e38cecf8b7866fda83a7c58982d8abf418cb67fd909e765727ea3e510713894a57426ce24de2c08e02dbee0b5736ef1623414704aa8952b04002ccde97ea338
- SSDEEP 384:NXe7Jj8tgZO3l3tBNADygiKWwmhGWbD/HRN7uDR1lT2X:NLHBNcRuzDvu1qX
- TLSH
  T1A7A2DB5287E95219F9F36F706EB892616FB6FDD2A838951E0240A06C1CB1F40DE70B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui
- Size 20KB
- SHA256 f98754389a248c07098a28aadd445863ab73273497803cde52cc90ec6cebb359
- MD5 fc4f82a8de54ccb30de50d9981ac6839
- SHA1 7dd0063fd84285759731dd19299dab8a01c752d9
- SHA512 df1eabadbe157d27bb7182619e5a0b0461414d3df04359c30ae809d185d55b997eaf32254151f9c427d4cee48d730eb4f7c9878e8f9849ad967b86d4d550977e
- SSDEEP 384:0+wmn1FXuebMWyP545PWFtGWUD/HRN7N9R1lT7s7:8u3Yt8DvNL3
- TLSH
  T19092F8429BF85119F5F37F306AB995315EBABDA2A939C21D0240A42D1DB2F80DDB0733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/es-ES/SqlUserInstance.rll.mui
- Size 22KB
- SHA256 f9874030171972d18f3dc0613e66033b94c380570a43bccbc3c4f196c94d4221
- MD5 553937b6919c99be1c01f2573e0ceedd
- SHA1 064abc97a7c8b9ccca56688a853c2198bdb31d91
- SHA512 99caa8b06ae1ce3ddba98de5d9630374afc58e4f45bdc816eaa20b193a0a675900a860b96fd0dfbf09d7003fcb5d31884627000244ab72134897a8430479203a
- SSDEEP 384:mTuganLHNJ/EcTN0mq6uwfiq5oemXWfrGWtD/HRN7KImlQNv:9r1Dv5
- TLSH
  T1AAA2A8519BFC638AF5F37F317A7999215E7ABDD1A838841D0200A2690CB0F84DE64B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/fr-FR/SqlUserInstance.rll.mui
- Size 24KB
- SHA256 60c405450b4a0dbad51709ae5c861d1294c4b086755fe3f9a8f27a6762ad3a27
- MD5 de9f74d85d098faad2e6a474da74ed5c
- SHA1 634c5df556356d4e28a6254e4151c9afa938e646
- SHA512 e9f2adf5c8c10e778b4892e3a4592df7ebd9d1ec67360b561a5f09f7ae7031d6d642372717afcd921ba543463b33584ea361ef75d24de2452518f791c5fd74f9
- SSDEEP 768:BMLOOyP53fXPDjLlxFJAmLGtJh1Zwbj6pVDvSq:AFvSq
- TLSH
  T141B27455A6E91606F6B77F30BDBD90915EBA7D8AEC38C01D0680A0981CB1F90DD78B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/it-IT/SqlUserInstance.rll.mui
- Size 22KB
- SHA256 f58eec9cece4bbb1abe97241cfcbbee35a6ceafcf8a39afba122693af13a42f3
- MD5 2950c68d38391ab2c206e5ab231c0945
- SHA1 d958eb015858ee43674768449e2de6ede58d756d
- SHA512 b1e1b034b6e350476f37cb2f2545186f34e49d4cf933447745142d3e18381b3c7ca311ddb5415c4e8a2ee9fddb45f4603ed98deed0a89658b16a57c00bcedc15
- SSDEEP 384:+UrE1HsxSsSOr6q2NkBqRvVmhNW6uGWyD/HRN7wR1lTnc:mViuaDvIjc
- TLSH
  T166B2CA129BFA5205F5F37F306E7996255E7ABEA2AC39D02E0240A05D5CB1F90DC60B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/ja-JP/SqlUserInstance.rll.mui
- Size 17KB
- SHA256 16a6f34a270c3e78db03af615d4812ac4d7e1362899e21aa74c190cb85e4f3d0
- MD5 74e96fd0f188ad2dd3f91f2bb4dc749e
- SHA1 1a13ff7630023689ec9b04e509eca6da48e1e433
- SHA512 a21fe7a95fb72fbd3cc812aa10018eca8601eff9514b83f40630f1a7a6344a77fd64a8274cda70e6279445d374bde2f9c9d16d020e6186dac73d6d53b8f29e78
- SSDEEP 192:xPnb5mkmZnPGfIKyCk0PY4WFtGWRWULwu0Sc2HnhWgN7ayvW1xmZdGP2qnajldG4:KPGf7koY4WFtGWLD/HRN733Llfbl
- TLSH
  T18382A347D6F8141AF0B28D7047F8B0A17FBCFAE294A3406E0A45E45A2D61F88DF1077A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/ko-KR/SqlUserInstance.rll.mui
- Size 17KB
- SHA256 626cc8832025d12f8cb79e11ecde52ad499053e2e7c9abaf785de5c7f5cc1ab6
- MD5 ba2e9ac880f22762db631e4f183d9d25
- SHA1 149b6440aa6005da3241b2520b555e0060fd18fd
- SHA512 0ee9016a31f0da0c645327bf2e691dbc3a4932e8f22416c8ba440a9ddb6d33c497476a0c4349837f386e3d11e57af23225d000f00fe9d0384cf459acd419757d
- SSDEEP 384:XVVcMFwHY4okRv8HYq33cF0WstGWUD/HRN7SmgR1lTC3:eYntMDvSTm3
- TLSH
  T1CA82B853D4BCE14AE472AA3067B89B72AFF9BAD35517501E4240F0582DE2FD0DD213AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  New folder/binfmts/frame/LocalDB/Binn/Resources/pt-BR/SqlUserInstance.rll.mui
- Size 21KB
- SHA256 658bf89a45bd5172c2ee761aede87798d5a3610fcec29a1150287b6977b5c186
- MD5 f89385dcd27c93b16915dcb29dbd5702
- SHA1 9fe13a9593a5ec8a5f1ac1ee68e81c16a79f2708
- SHA512 065eec8d5f50901ebde3097fb79acaa8c6ed34a9613df6a3a3041f2af1b0b11cca2dbae10f4d3684dcc2cd6b0b1f9a14caa90032d5a080811d0f54b27888d47f
- SSDEEP 384:7WvWvW0W+WaWyWRWhWvWV5WNWpWK/WfWXwLWWW/9WWlWQWmWnWPaW9WgW1W/aWrn:LxwWJuCDvgU
- TLSH
  T16CA2EA4297FC224AF4F37F716AB899319E3ABD92AC39911D0240A2691DB0F80DD74777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32