09c2231766a5320402d9b16e3febff3357e07a31ee9844a1bfffcf2c28bf4b24

Sharing

Copy URL Twitter E-mail

General

Target
vdr-plugin-mp3_0.10.2-22.debian.tar.xz
Size 16KB
Sample260814-ws68mayzcy
SHA256 09c2231766a5320402d9b16e3febff3357e07a31ee9844a1bfffcf2c28bf4b24
MD5 f8999c6e5861030bed7d3bffda0bca92
SHA1 95af07c41801a401050cca1a8ea7c19e6b41a9f5
SHA512 8bc75140f3734e61ef703780839bf5adeb677ecddf684451bc2c64bcfc52f353856c6b6e84dc1a23e44cee2943025d0f2908e69bd932b839fa8469e5793468ca
SSDEEP 384:DeSz55dzCyw+eCBYbAHuFHwhP8jiCukp7jJ0V8nBDi6JbS7yHoNXaA:zt++eCZaQOu27V0V2rJGyINXN
TLSH
T1F472D0BE99D36201DF81FC1519E0D6F7D822D894CEF6D20880DF2159A171441FCF26AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  debian/mount.sh
- Size 895B
- SHA256 490abf05c6da2bd52f41984d7770f5abb556a347fbe350a616c0a580d3585a09
- MD5 e5c8709853f8a7c67d53650d548ebdbf
- SHA1 ace9c5345e07c75e322d06c998e84b59a4b2d7ff
- SHA512 4da8f5c67acd519bafd40cf8f4f5f94dd1417501366d3907689605d0b9d99720f6fe611e19156a4efcb5aeec5dc765cc53379860cf5fe6ceadff72ce4a1571cf
- TLSH
  T16611C01C340EE37C2A9582807D4E6A7EDA41435803867E50F1CDF83DB77699292F6E43
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  debian/mplayer.sh
- Size 18KB
- SHA256 9c884c0017df9c93aefff030854b99078c269058575eeb6e70555f935df4f3a2
- MD5 83da2ba9f043a2b0652d9c8bd17cf828
- SHA1 fd7cbff3a4e99a4b350091a16055317ad0377e1c
- SHA512 e6b8c783575e4d82d339a77de76d6718b878e4d35a6e668d7e6cf64dd656c9d76e10410dedd7de89b4482b303dff801df80593718ed864a1d2ae9f2150bd2d17
- SSDEEP 384:/ZWl8Mr5IoeuzS6X4vOsBVzvyMTSp3sirRhGIjKF/FcFcFLxazmIxyyWT2b4HCdw:/ZWlhpeuzrIvOsBVvpTSp3sirRhGIDzo
- TLSH
  T13F82B70374DD3338519AC078B54FA586D728902B48411E68F59DE4EC3BA6F2593FEAEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  debian/rules
- Size 1KB
- SHA256 9a1d625eb2e9cb3e4c189f0948d966d0481dcc38ff961978bc7ab46898ff665f
- MD5 c2e62ecc05eb9912aba85951f29c71f4
- SHA1 9fc056ba0fd9888df2320e3553f6f61824efd67c
- SHA512 775216972a95c5a5580259d4e37b0884d0e23de1c1c6857873710f3f11ae1e6952fed7086bcec22836219a97861c0fe6a838ddb65d87d8f12999f3b9f40eb7f9
- TLSH
  T1FC21AC51E14C417EE82046B3678205F279A92AD0CDBFD699B4D1A43D34CF30B90E7BB1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  debian/vdr-plugin-mp3.postrm
- Size 128B
- SHA256 cc14e2a682c279a7c9d142223d7459c4dd15f54edc9e12bd285a4f08e27e857d
- MD5 df04510e5caefdfd45923aee0b7f7e08
- SHA1 ce757bfecedb6b9c31799ace6db74a0e1de96795
- SHA512 58f422db5786a3ff40c1da0071faefd69c33b2685e34469608b59d2e3f14ef64952407c84492493a088e59bbf37e2e019798a94d785d9150b7a3109b2796d4d5
- TLSH
  T1D8B02B04444B0D4208E0045B2687F03B5004098C4317954DD11030F4B40070220D0C0E
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14