1df946c65920e27e4666d648f0c681231390add6e67c9e73fa27157018407ace

Sharing

Copy URL Twitter E-mail

General

Target
vdr-plugin-xineliboutput_1.1.0+cvs20150211-2.debian.tar.xz
Size 20KB
Sample260814-wwpgzsydkc
SHA256 1df946c65920e27e4666d648f0c681231390add6e67c9e73fa27157018407ace
MD5 c97c66ec2ad3835af0be77ff07814839
SHA1 29b3d1e571118be12af45085a85a56fb1f5584e2
SHA512 d6e7866abe0ec09c1dbf23f9429cee2d78955736e15b7454292a8efda105623ad59553586b527365ecec1027e5664a9243eb238087f63c24ae39982a5add2611
SSDEEP 384:Rc1TIXbKCKvcd3f33mQdz4ogZPNVCEsAl/ekU912b6oQPlO:RaCUc1mQdWjCInU91k
TLSH
T1A7A2E0DEF6CB300219A08D042E9311CFF6A753C91F76E19C645CD44DE95BAE98EE3514
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  debian/get-vcs-snapshot.sh
- Size 646B
- SHA256 28fc86c171de4a03826f7272f5fa70286555b26ea79b89e3880d32b3610fb448
- MD5 aebb0f45460e4ad4e5e59ac94abf8253
- SHA1 4aea4978ca55360a762bc37d47fe76466a812b71
- SHA512 3f85550eb0ae7c537924f9f3244c365d2758c325936d17a3ccc4cc66098d23e3662136646eb1d565eb8b1e275300746e03420792bb90f253ba877645b61212b9
- TLSH
  T1E3F0DD63051540FA186317E326BEB6243F660F86835BD82EC9082C1FE6E1750363E73A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  debian/icon.svg
- Size 113KB
- SHA256 92d48205a17b3f2a3cc3b17d6b5c53eda4555c9432acd69158c843df6e76f66b
- MD5 43efd90c6f88c5234140637092c955d3
- SHA1 c23fb60a9a482799525828d0e070b5e68767f11b
- SHA512 f3361d4002433426f8817a09f389da4307d8466522266bf28edf6d401f9aa598d4c1670756257b61701ce8bb6d48d8f62b73c64d57f6f353c7ba191b150d2951
- SSDEEP 768:sXwB78U7Wx4cC6R1sODDNBL0Vk46ymzBWSYL:sgB78U7Wx9DR1sODDNBL0Vk4WeL
- TLSH
  T1D0B30F11EDBF89D6F11EC1ECDCD21A1D228804B782458C1BB89C274DDF6E8C2A76E365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  debian/rules
- Size 1KB
- SHA256 48c517670c6d3a3cb88c939675142ad7924c87b62ca4ac748ad552f7b3998e97
- MD5 53eb72b0a95cede33497685c40d8047e
- SHA1 ffb43e9d13de06beb44ea54ebb93bf98651a1266
- SHA512 382ebe6480cd64594dbcf50b56d48cbecab41018fdc1dfc95b2de2d3203e1c91f363312be91f00887552f48a804cd2aa9b6bf3f1216c66e28859c08f9c2c29e0
- TLSH
  T15331999113B801F83C535B3E9337A0A752665AFF99FEE98ABED0DC24418168BA173447
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  debian/vdr-fbfe.desktop
- Size 270B
- SHA256 03032b46fa1792867a18b4c6d31171de647ea0a985f8e9e76c8d99bdee04a234
- MD5 247c1fd4cd2abbae50456c03ac558862
- SHA1 58970f9d131afd02fd7d4c8973c2570fa9ced191
- SHA512 1fd0ee5dcf053ca07a912da546aa5fe9b162f439ef545a7a059307e36b95b83cddc5d5238a7b211ae1877c3d74fa77cbf5782505e1a93964a8f551a50773a422
- TLSH
  T149D02BD53E8A42B8654B6231B59BE8CF434515AD54E6B484F7446C291281A9EE105BC8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  debian/vdr-plugin-xineliboutput.postinst
- Size 1KB
- SHA256 fd75b67c541e0339985289ee79a4b4dfb83c2a10687dc2e137297b6d3be86fe4
- MD5 76bfa84806e8874a9140278754398bd4
- SHA1 5e1d5b9a0cb6f37e333f0beb260d10ad4f2ec852
- SHA512 37f57143c21b598489ad669d6589cad9d54904fa00fd7bc2fccbde1f71e710bd9829402ebe957a024a337e26c30f8c8d05074bdd86399296ae609e34d4c58af0
- TLSH
  T18D3127198088D7BC2DC6356DD76A81E6DF9853EF5148989D350E6BE41F8224C301251C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  debian/vdr-sxfe.desktop
- Size 246B
- SHA256 e917c427fc7291904dea957f82a4cc9d54dc79a4a2a3e879c4fdbb9dc2b6733f
- MD5 826aed0eecbf6fa0e05834ff33a999d7
- SHA1 b57649789b712a226f28d9c4d090e22aea382d6d
- SHA512 adf15b4965908b19f26270fac5e4a7598c2fec7a5ed6dd83bb8f54daa8bc75263752d69d549348118d3d383541f95f50e22e16eae18207c966cb7ba1a43d05f7
- TLSH
  T1D5D095D535454178AE075339F2D1E4CB0359152D4CEBF445FE45581413C266ED409982
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral17 behavioral18 behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20