b23f88027ee3bf415c59c20b4fc608c858bcf0cdc94ec2434b309352006fb736

Sharing

Copy URL Twitter E-mail

General

Target
b23f88027ee3bf415c59c20b4fc608c858bcf0cdc94ec2434b309352006fb736.bin
Size 8.7MB
Sample260814-wb74layamd
SHA256 b23f88027ee3bf415c59c20b4fc608c858bcf0cdc94ec2434b309352006fb736
MD5 f199722d6d41828af2b8749aaa4614bb
SHA1 6e590a596e2932536fc1e463495825b595c7026a
SHA512 e270aeb9ebc69ced44f9dc0bb5191d52e6d4eda6e68261d24e661f092c2ed2cd0a5670c9623aeaead06c29bd45b0c751be4c1e90eab3512b8c82d1e7f0c50d6a
SSDEEP 98304:OGt8dy3X8zlFMvqbMvqjMvqsMvq0MvqAvo7MvqCMvqGMvqEMvqnMvqVMvqIMvqq2:/tQFbjs0TCGEnVIqM5DFTkdhrOX
TLSH
T1F696235487132B99CEB9ADF4A7E23F8F8C44E47469A6380F7144434F05BA8ABD5EE4D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  SoundCloudZapretFix/zapret/bin/WinDivert.dll
- Size 46KB
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH
  T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SoundCloudZapretFix/zapret/bin/WinDivert64.sys
- Size 91KB
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH
  T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  SoundCloudZapretFix/zapret/bin/cygwin1.dll
- Size 2.8MB
- SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
- MD5 a1c82ed072dc079dd7851f82d9aa7678
- SHA1 52f26fa1aee39476f1c13438aec8bf969c78da45
- SHA512 22993e7cee1e7aa69ffe45adf3a329abced7e53d54ffea96dab42fe273c81522252c7b7e98e5af36d2fdec0346c51540e977c6e56b8c08835bac86fa6d04ca59
- SSDEEP 49152:hGniafRcs02/oSqCmB5RMiCwDjUZQjuhKv+TLRlURxKc+tKaZrpu8dhcy1u7MHz:YniGRcsVJqCmB5RMiCwDIS4TBrppUy1J
- TLSH
  T165D55C1BF3A350ECC967C138466BA372BA32B82441347F6E2958CB701F72F51666DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  SoundCloudZapretFix/zapret/bin/winws.exe
- Size 199KB
- SHA256 affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188
- MD5 d498e19bc7a79dd1efcb6b928cbe9909
- SHA1 e660246d9b5de531d8c6ed563919d2690f47d209
- SHA512 03fa6ccc762999e4b5e3c7ed4f4a269d5e7114af52c833842f94fcbca19c3b2edd3c218df247d7616a54d25262f2dc14762a958c620433589ac3c1efa14b379a
- SSDEEP 3072:llblEpda/1ZqNUckRoAHzGDIAaSLECf6CuWhs/JSDxIcdDFth2zp:l/TY5czliX5mhYIcdptyp
- TLSH
  T145145B17F39588F9C462C17896AB5333E932FC452134FA4B9FA4DB212F65E10B12E798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  SoundCloudZapretFix/zapret/general (ALT).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  SoundCloudZapretFix/zapret/general (ALT10).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  SoundCloudZapretFix/zapret/general (ALT11).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  SoundCloudZapretFix/zapret/general (ALT12).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  SoundCloudZapretFix/zapret/general (ALT13).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  SoundCloudZapretFix/zapret/general (ALT14).bat
- Size 604KB
- SHA256 696d0b0409118915839a69a6f48c0e1fcf27adde50bd2a22dede7cfca6f90f60
- MD5 0f4d72541f80efd6deba0b961ba2d655
- SHA1 3f3a390c182e750a2f23fd52837949795d2c23a0
- SHA512 821a63bb2d7a9d281cf101aed1427718dd72307b4e5bb71904de9a6e779045e29f90c1a571ebf9de7717403fbd714fee1cdb764aa7cd82335bafb5fb73c87407
- SSDEEP 12288:jABKMbWsgxpWUMN0O3Fs1EKb9Dsz36RyjtLV:jdZv+CbDsz36Ryjt
- TLSH
  T176D406293B954E10EA44247C867EBB11D732A0F2670263473B1AF2611E459DEEE3E3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  SoundCloudZapretFix/zapret/general (ALT2).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  SoundCloudZapretFix/zapret/general (ALT3).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  SoundCloudZapretFix/zapret/general (ALT4).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  SoundCloudZapretFix/zapret/general (ALT5).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  SoundCloudZapretFix/zapret/general (ALT6).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  SoundCloudZapretFix/zapret/general (ALT7).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  SoundCloudZapretFix/zapret/general (ALT8).bat
- Size 582KB
- SHA256 93a45adf388847bf576aeda874057b87b924ec8e5881da3b785592b580963cb4
- MD5 1a5bd231a24a489dbb9a0c644eb7fa7b
- SHA1 90af27c02263078bb002ecc07a4caf1202a47bc0
- SHA512 c12ccc6071812dfa6ec518b83f4712f96ad2f531e62c5998299741c87000f643af4444bdd9bccca2169c979aa54b0bf8db9f33129829ad1a4dbbce846926461c
- SSDEEP 6144:8P9BUihFaifD76V6lE/kxJctz6Q+FiGlDTjyeosaOLsHLf1bDPoZUGHOuKTrdiFj:AB/Lai/61dWQIimDXavDP1JpELoR1f4
- TLSH
  T196C416293B951E14E954183CC67FBB51C722A0F1560263473B0AF2A51E18AEEEF2D3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32