6bb2faadbd87bf9a84e17047e7a7b1857faa91e57b0f9c5138ef74b3d0562caa

Sharing

Copy URL Twitter E-mail

General

Target
vdr-plugin-streamdev_0.6.1+git20150213-3.debian.tar.xz
Size 6KB
Sample260815-cntl7axybz
SHA256 6bb2faadbd87bf9a84e17047e7a7b1857faa91e57b0f9c5138ef74b3d0562caa
MD5 8d3c8b905f17dd9c3a90e96b4cf960ff
SHA1 b3b854f9f6f150e3a9469f1e2c86095c7c46dc83
SHA512 34360a84dfd3c245ceb76ffc3d12debf57f61adf1e59efb86acd1fcdb44c364241e3fe1b5177f68b08aec33c6de89fec70f72b0f79b0441797aade21330252d2
SSDEEP 192:FqWlfd0EIA4g74IdCQsFBNEtRvDiouObjLDplqYdsV:Flf4IpsFBktNbjOYOV
TLSH
T1EDD1AD0C595CE34E3F9320FB8ACFEA573D39210C0AC7C9D283698E48DF480A6AC4A549
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution linux

Malware Config

Targets

- Target
  debian/get-vcs-snapshot.sh
- Size 716B
- SHA256 b1d0df3eecc41e7e058182527ced6de43cddb95bf13d0dad6f334f5823a46d93
- MD5 5516ed62f9798723ba219815be89df62
- SHA1 af3124efe4b5b829b146a00736229e7a53600f76
- SHA512 4e815503e0a0b401ad5e06dc52032ba6f095c6fc4637b1ca1c596e90082bb67b8788a6629612bb6bf11f1085068bc7096e0d55c79026faf6ee26b74a7d32332f
- TLSH
  T1C7011B33812544B3118607D336EAE6223B974F810347C82ACC4C642EF2E2F85022E332
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  debian/rules
- Size 112B
- SHA256 5b40e2a73f3ca5e4f20260f9be73f01922601713b17713c55d71f87b6f784bb2
- MD5 edc1b45b626048e4433ed1b8b49fd242
- SHA1 b9484cc666eccac045824eb3da020ccaada4b509
- SHA512 197ee935bf280727f865ca1d9c0633ad1412889c34a6f37a23257d6aa4d142f7c9e587f822c3759229c4308f2ef8a59d8b16eb5357493222e1a97c4d2adba395
- TLSH
  T187B0922AAAE68A5444A02957264012D42684B7BA6AD8F2A2646405196689F32A10827E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  debian/vdr-plugin-streamdev-client.preinst
- Size 437B
- SHA256 2557066078bd60e20d6ce2ee65e0ba4624ced053347e216c9570eab0ed5508d9
- MD5 673f113213fd6e116d7f952bbd2c60c1
- SHA1 504b9547a08fe3e3742456245e16666be486c56d
- SHA512 850dd1531c91b68ee1bcfcdc1ed01531a2223753105e8d9ae8f9d17f83ad5b794ab77146ee1872c71e4e26907676fa559cdd50d0915c2488e9d8c1f87180de39
- TLSH
  T199E0DC066A10E2F624428A6C79236411FB6D22821913381E718FC065FF9431960A6204
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8