8db9be9b70b4f4b0c7d3c4a9b7f2e89f51aa50a7ac411afdb69232e96f3a7f2b

Sharing

Copy URL Twitter E-mail

General

Target
BUAA-WaterPoweredRocket.zip
Size 313KB
Sample260815-wwlfbshb83
SHA256 8db9be9b70b4f4b0c7d3c4a9b7f2e89f51aa50a7ac411afdb69232e96f3a7f2b
MD5 9251ac08a03dbb12c20019de522069f4
SHA1 3af54b0bde73a49297e4d9ce3796e1c13872f159
SHA512 57c0df2a78db3ae9dee840141b72baf52c9c580ac6d5b27015009891f5ab4acc69c9bbdc6709f80b7d1d4e569ffa6081c03e6dc7ff7e768eb6b94e89d1de2c97
SSDEEP 6144:Cia5Br0Y2fCoZQNQoS2lnrGvrCSWV5oz8hOJeGc492xvj8FmcXBRQXLu:7w8pYQoVYrWV5fEe292Jj8YcXBku
TLSH
T1366423D40E113B6AFA22F1BC90D56FB64AA80CDD3758286D25CD58E1B4AF72CCCE5352
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Malware Config

Targets

- Target
  BUAA-WaterPoweredRocket\BUAA-WaterPoweredRocket.exe
- Size 605KB
- SHA256 8397a304a8e1f9201b141ddb8ff8c65d4ec2861a38c92889b8fe0f20a5476140
- MD5 2aca24dec3cf343e6143251bfe5af483
- SHA1 9c46da16794851d8a7610196123d1af38892fbd1
- SHA512 b4d25dee19c6537a90591714df28cdfc0d5dfc7d25f287d7b925a2897792ff801f0f83b5cf8113ba0b0028de58a1c4f73312a982ea0127e9e29e4e01e45fefd5
- SSDEEP 12288:XQew8OXUHIKBpVfCJVAd5Q1Vo+8cLmcnQfcp/:XQew8O4IK/kP+Movcas/
- TLSH
  T1F5D48D1C33F84E22D5BF8BB655521CA6CB71A643964FDF4E0CD2B8ED09A5B108C1B25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BUAA-WaterPoweredRocket\运行组件\nn_training\crosscheck_python.py
- Size 1KB
- SHA256 9b81b5b51e483a373e0f177ed2cc94c7737c8bf0ebb90c624b0dc42913176381
- MD5 f06083a9fb7ce6fc87550d474b8644a1
- SHA1 770455534e261d1f5d6b8c02f31c7d2024753c7b
- SHA512 b23d681436d357865a01936bab1aba867b0448c08302f741cd2231118bc11e58e657474dc1f38be44dfa23575528ba96b2ccc52680345c7051bd7297f05b566c
- TLSH
  T1E931C001552F3924A3DB11AC1A04B9305371BAFB27418816B1CF5738DF882BB55372AC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  BUAA-WaterPoweredRocket\运行组件\nn_training\nn_training.py
- Size 33KB
- SHA256 5ec0adfe8199ddba40eb29d3941dfc8d8090175813e997327013d2a3e12d5364
- MD5 7236878b9eca01f1e3f4b5b373be74ae
- SHA1 e07e917c6980f6be54f7ad8b2c948fb26c772412
- SHA512 93ce4a69c0319cc7aedaf2116be032c2c674d183166034bff0af4dc22011a79ab711c532708e09032009c9ed660782a7d52e438ae2f3dbaaec4ee3d9621a7ae4
- SSDEEP 768:AHxnFTwJJMAI3EW3z6b46Fb6E8qdHCenlqfF0Wj8V+5j1VmSW2:AHxyJJMAIbWb4mb6idHCeW6X+dd
- TLSH
  T1DAF2E806486219D1E3E3547C4AA5DA092339789357465830BAEE975C2F88C3E63B8FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  BUAA-WaterPoweredRocket\运行组件\python_simulation_bridge.py
- Size 7KB
- SHA256 afc934c1f69bf5686e446f22db087ba90df62979084dd42478758fd11d05ce35
- MD5 62601a67ff534204697b7f78d1840ef4
- SHA1 779a3b0d148e40eca0c7351db681c5955610b94e
- SHA512 dd9a5af2c7a1ad25023a935bfda1201004c5329872b3c0770bae822d8fb92e7ee582a976035c9136f593a121b22a4bd33362b8e839a4d2a991c289a4cff8f3d4
- SSDEEP 192:kAskq5bTATwfF7eDrYDDlq5JGQzdJ1vz8WB:kA/q5nAIeDrYDDlq5JGQzr1z86
- TLSH
  T147F1C8211D651515A7C35295DCFE9C111DB2E0432A922E487B8CC6E93F8683FC7F67AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  BUAA-WaterPoweredRocket\运行组件\配置Python环境.cmd
- Size 1KB
- SHA256 6c6c1ab3d666de84fa515329bac7818340976cfbd211bf684703451b4842f700
- MD5 75b00b7fe17385eb7f49e6e8bc9c8b2e
- SHA1 a8a61013338454a163e310a22039e5e2d0021242
- SHA512 55dce49a70630605b6dc8755d3fafa0d8cf91cab600d4b78a5886eea360a242c558618bf3a1cb92b909a6ca76596858dc8e4a6c5083768b46422b392ed490b8f
- TLSH
  T10E2133223442D0B2A958294FD51F416775E972F703E89CCD38F2E0E49C8D0A17F6DB26
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14