1289711b2fe0c65c24d14f7eac95fe8b41c1667e8c04938ebc8e026617e544c1

Sharing

Copy URL Twitter E-mail

General

Target
RefreshTokenApp.zip
Size 39.2MB
Sample260815-z3e4nsvsbv
SHA256 1289711b2fe0c65c24d14f7eac95fe8b41c1667e8c04938ebc8e026617e544c1
MD5 7540c8e90559cf59f6ac7e136af1bc8c
SHA1 155d44cc3b3f90ad4f1486fb3f89f853bc18d032
SHA512 7e4cf592a94e3480d601e79ac65e1a95fe64051b46faf23d32d1ad339c778575c367fe496f19c977fbed70ee62f49dc3afdb0e3acdbbf36f0727d1a5abbef66c
SSDEEP 786432:b0/oe7D030Yri2WTvRmNiPSUYTjkS6yuHUckw9Su:W97Uzri2WYvwS6LHNkkSu
TLSH
T198973331552BB754D660A2315041BFE269318CD25AF8CFAAF768B24E3FC06E4CB7B185
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  runtime/bin/api-ms-win-crt-time-l1-1-0.dll
- Size 21KB
- SHA256 7c7f6393f06de11750adb09cc5698ae55cd9fb27b2e51e207286feb1b5b2b156
- MD5 fccce207a34c947f01d3f23a7dd09569
- SHA1 75f722801c77285db98a08af763252a0255e99e2
- SHA512 d3d923f133594eb4325f4a6e5ed46fcc348a7c0f310f14eaa38c6fad070ba637bdb4a77200feb231114e111d07a86595a6130291028cde3a284d9f847ec38ad4
- SSDEEP 192:xhvhwDmWthWDWJWadJCsVWQ4iW5YYHnsTX01k9z3AcVJQsMdM:xRWthWaCsvYMTR9zFVJoS
- TLSH
  T18FA20A4356D8AA07FDDB1B7102FDCBDB3B3923C21AC07176869794583697384BE2291E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  runtime/bin/api-ms-win-crt-utility-l1-1-0.dll
- Size 21KB
- SHA256 d8ba5f17b9ffcbf3aeaf3fa1da226832d2fa90f81acce0cd669464e76ce434ac
- MD5 708a5bc205384633a7b6674eecc7f0f0
- SHA1 01603a7826029293236c67fce02ace8d392a0514
- SHA512 8638845326ab6543338baa7a644af8be33a123e1fc9da2037158be7c8d165691ccd06cb3ff73696a30b8801eab030e81f93db81216bb3b7e83a320a0df5af270
- SSDEEP 192:x7/fHQduLWthWDWEXCVWQ4OWjfBm+0U8X01k9z3AfMeyGmY8P:x7/flWthW4kfBmo8R9zmytY8P
- TLSH
  T1FDA21A938BA85603F9DB6F7042E8DA837C3E2BD61540817645A6F54C2897780EF2192D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  runtime/bin/awt.dll
- Size 1.4MB
- SHA256 f10cd41455b933cad416e8affd19239478a7f1ac4d5aaa088e898a5c46bfd51f
- MD5 d31f8ce9d24061ec4f8d0bf773a65a4a
- SHA1 1c795a28f6e946924df4d1b22d0ff7a5d5c30bcb
- SHA512 428bed547b6392ac55811f0073f894d8486f65d7e59b504eae945ef4d6996afd05dd65bafb7699d9691c374720c97f5d5929f95c8b2a0b5568fb8167d0eabe7a
- SSDEEP 24576:Dz/UWtfYV1V6WBsCwDtBmlnH6DOdommbzIv8PGswfWvdYJ72RPcKX55Nx:P/PfYV1V67N0HMIvkGs8W1HRPcKX51
- TLSH
  T108657C06E7950195E4EB80B8C65B5A0FE7B27019034097FB77A48B69FF67FE4623A301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  runtime/bin/fontmanager.dll
- Size 973KB
- SHA256 a1fe88b336c81ff3c111f9fb6837d6f38e303b93eb851322d2394cfd06afdd91
- MD5 e825961e0f9f2926f5a46bdd56fac835
- SHA1 a817bea20944bc2a14b010b9943702638832e455
- SHA512 59a2ac6d9faad7532d303a7c7bbf49e430d088752c822a4d4870faa88e501f386fac22f4138a27248442af920479c73fb126196b5197c2fc09844add6c3517e1
- SSDEEP 24576:nmRfWc/2335puvb2ImOlO7ebW6SETwQNBlY:nmRfWcapuvqImLebW6SPYbY
- TLSH
  T12F258D49F29754E4D93F9070D6A1C007E7BA740203099EFFA5B0A659BB27AF16E3E314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  runtime/bin/freetype.dll
- Size 548KB
- SHA256 23926059718f76578aca469e9a3ab6c4ec262cc586e1dfa0cdad33dcdd2a2047
- MD5 85ca460e482413536106018f2fd62d0b
- SHA1 3d73447ca0dbaf03c6097f0f12ea624ebf3962d5
- SHA512 6995ed7173d6142d0e9978770213c752946e11baa64ac48aac4aadd39d6d4958bfebd737348595276a3b6695ce813aabfa9d1f29b8185410ad216e01b973a273
- SSDEEP 12288:NijCcIlRbJ+OA8svl9hO5sNrtMWM0WnkDJBCfEWmtsPV:NijzW+OAnvl9hO5sNJMWM0FDvZt
- TLSH
  T15EC49E82E7A417ACC66BC1388367871BF775B40513119BDB22E44B6A6F23FD16B39324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  runtime/bin/j2pkcs11.dll
- Size 80KB
- SHA256 8af436e60b1547d1ef76aa73614219ccce89c5ca40ef064be7006eb693bb491d
- MD5 d4eeab15dce714baed23f3b67c3e3e22
- SHA1 fa5793334cdc933d07eb52018d2fe90d31d43970
- SHA512 64ca6b438b435dff50e9321a3cc03ed65a1a91bcfb8b5761949d576b7830a79340be69b98754e5623e60a6ff35356bb0d26248494a83f266f7e36782582ac3b1
- SSDEEP 1536:dyxFfl0lQISAw5s3E1XGDsDPRLBDgPtYaNqxV6FSP59Xv7VwRFPSe3C3NAqb/ola:qOlQISA93AWDsDPRLGvYae2cma+v+
- TLSH
  T150831A4B93645054F86B627DD634120BC2F3F86A3110939F17E9CA8FB3EBD63661A790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  runtime/bin/java.dll
- Size 114KB
- SHA256 abae7d202f5093755eabe153984e8053a666dcaab913f61737d80076cd35df3a
- MD5 dc93b93d2c486b790021e85a56b1425c
- SHA1 09195a2e600f9e4ea1dc57f9ec2eacc5e696509b
- SHA512 6c7708112747e7433c604d616c926aa0ab5d8505ddff5a8bc800a9c6d1216a8b743ee384239fd387efcd1764c3b8e203fb48ada545735d2615144e670dfeb534
- SSDEEP 3072:ihkdkKVjreez1MyHtEQD30+ayNGEf8JSrZU69s/2gFMOuxF/n+v:aUkKVjaez1fv0WO
- TLSH
  T127B34B1B77298085F46AAABC80669D0BD372B4B01341E74E03E6CA9E9F8F7723D05795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  runtime/bin/java.exe
- Size 49KB
- SHA256 d5f1b9e03e298ebfb04d2326ecc1e2af3e6817f9b4d7f9f151fe856d56975650
- MD5 79d76355bf23f4acc8da6f50e0458ab0
- SHA1 225a3d9fb2f05c7745f4cf961e3ec1c16484b6e4
- SHA512 f29d446f02b104960a2c0babec5173309a5a809ea17abde9fd79bd3544c209ce51e913ec5c75a09e18ca50972144fc958118b8dc92e4d2ca7e7944ad4a01a526
- SSDEEP 768:tTZJoFZM5R2TyJ5R3s8D/bkt5Ruz3Vb3jD5TYiDLk5kIvjd:PJeM5RdJ5R3sozkt5RA3jD5T7VIvj
- TLSH
  T1F2336C47AA182C81F42F84F158A7352751B4BD032BD173EBBDCAB21E0971391A9176EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  runtime/bin/javajpeg.dll
- Size 178KB
- SHA256 5316e1f8a29632f571de7c98793b7e9c0337388cddbd2d1396f87f8a5079446e
- MD5 204db999813d00193bf7d9ff73e59e26
- SHA1 6e2798d69183337648a4a4965a1535fa7cf04afa
- SHA512 c71c5955c50c829bb6bb27fa67095986a9486f0f9e7a1f5c6d763455d3f2ed16045c96ff425038b486025296e00c5b65816ca487525c80d18d424f6f2693522d
- SSDEEP 3072:6u1E+VhUoaTFN307hIbRadX0PMCocoIJBSaDFlSPF4QR3YV4cA+v:6u1nV9aTFN4+bRamPccbJ/OPF4q3YVB/
- TLSH
  T10A045B53B2B010D4E97BC0B886B6A627E6B270551314DBEB4794C3B32F53ED16E7AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  runtime/bin/javaw.exe
- Size 49KB
- SHA256 45014e6597b9d9bd8a3726f2af311e70d99488237ce72694b31dcdf8dab680dc
- MD5 a31a3cefb03ea4d2b6c57ec8f71676ee
- SHA1 27a7222576cdec7b439b18b7008948540559b9a1
- SHA512 a02c5fabf9ecc091f40e6ab62cf5b43ad4476fc8ab2979c46f7e1faffc9229606c003b8859fb9599ee62e803f7e9bdd1b64b6b6c2a1fbf6497f4880c9a61b3bf
- SSDEEP 768:nHcN52EM5R2TyJ5R3s8D/bkt5Ruz3Vb3a15SYiDLk5kIvsr:HcNRM5RdJ5R3sozkt5RA3a15S7VIvs
- TLSH
  T1D1337C479A082C81F42F84F198A7352651B4BD032BD1A3FBBDC6F21E4971351A9276DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  runtime/bin/jawt.dll
- Size 21KB
- SHA256 f35c43dc70e854a5fb2b39c7d5959d3751a0e82c11c8bfe5f3f986974ed4c971
- MD5 a6e9fdab6b25d88242c6e69cf782ac70
- SHA1 f6d0db3e3bef96dca0d6a8610940a6673d602ff2
- SHA512 12836332b5f14f6448b7915c4a554ab5551076dc8e8997a97b2b9b046b33726cb5fe35c6c9079f9bb215e049ab65a7691d2109b6757fac4d132a60e6d104956b
- SSDEEP 384:1IZWydC474cXtEvNyEIYi2mL4/y8RFvIIvZjW+SQwu5:1mtdvbCkYiDLk5kIvh0u
- TLSH
  T102A29E5BC8800C99DD1B8B30A5F95A2BE5B6B7151B90E3CB2364C1285FA13933B9D3D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  runtime/bin/jimage.dll
- Size 33KB
- SHA256 571932f042ece1205492fae4766fbce7332a608aa5b56964a728098b1069ce5c
- MD5 fcdb9988648c57629a26c5acadf8b9bc
- SHA1 afc368483d4b4f83683d253f43bdb468fdd5bead
- SHA512 ccfbf686e9eaa58cca779492e8d7580770f6c230d7825372554390248f6fcfc6adb651aee439d68fd289885226c47dde9c5122f158e9539ef2cbbe9bddd37cba
- SSDEEP 384:g55kBR2x3tCn9LD+YuNIppsyvh7GBKtjgNyEIYi2mL4/y8RFvIIvZTDymYY8:gFHCnFDCIppPvh7nVYiDLk5kIvp
- TLSH
  T129F27C56E6841C99D92BE538C4AB9A2FE6B5F9525F50C3CB2720825E0F333813F58392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  runtime/bin/jli.dll
- Size 82KB
- SHA256 4fc03971a1619ca8661d75b79e9fa81799909427bd2578ab327e84be4c3037dc
- MD5 ee2852aa3d1780fe2eaf7ecc5f8dca4d
- SHA1 c242684026ceca14ea30fe4163f3da16cc820d7d
- SHA512 6ca9140bc5187047eb6c5ee01e89ddb37b819749ddb293c1185d4fbb497bf512083305cdd54e402c3fb3128a7b3dfa32358bcccee984fa3fbd441b7d1e81801d
- SSDEEP 1536:HNomBq7yzXdsmHca6W3g9vWIOF6fOU8jX7VIvPf:to2q0XKmHB3TF6GUwX+vPf
- TLSH
  T1D6837D5A539011E4DEB78178D9B4960FC3F2B0653761838F13AC85EA0FB36623E19BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  runtime/bin/jsound.dll
- Size 59KB
- SHA256 b9c38e8b8c2c646d04fb27c4cf2989b613f3991a54d048e61258155f1f5bf415
- MD5 a9df8fcc4fd20196660285018e481d6c
- SHA1 6ce5b6c86ef89fbf95f225e00edbe421020a85c8
- SHA512 ab42f760f21a671918033ed8ecc27c8947feace567270b2e3d9d1e4eceea3a26437a07ddea5766a713d7c7f606980ccb51734593c847a1395df28da683f3223f
- SSDEEP 1536:33rJS2NRQrlAE0Z3HMgvRnPe0JQG6k7VIv:D3HMaPe02G6k+v
- TLSH
  T1A7538DABF7C0D896F09F90B59A43B717D3B2386107418BCF9B5887364F5B3122A1AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  runtime/bin/jwebserver.exe
- Size 24KB
- SHA256 1fb5d17655c61f94d40828f99a11bc5b830f3361490ce02f84f066a727b4bce5
- MD5 49b67882d3cbad6d5a851919b85b35a0
- SHA1 9cb747dbab4e08f852c3c20579884d4fa09ff7e8
- SHA512 46d535d4ba95eaaf5a7cf7d64901277559938f3632bb6fe94f9045c91bde228a00ef8ff2c05f07f905234ae27d697f2c0225725c38cf16a6d93da731494fa00f
- SSDEEP 384:CB4TwdGVZyFevtYf5AUNyEIYi2mL4/y8RFvIIvZQTo:CB4kdHFeef56YiDLk5kIvG
- TLSH
  T192B28F57CE800CDAFE5B96B0B4E4222BF971B6A96ED1C3C723A4C01A0F517803B956DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  runtime/bin/keytool.exe
- Size 24KB
- SHA256 2efe0088a792a28f1999813c4ae1c634d05d2079bff24c9bf35438d3ee4b8e30
- MD5 f29bee947fcac184e5c46250738508ca
- SHA1 13527e4e74c4ede6fdb0650d2f14b6284846f9a0
- SHA512 976d17c426ec7150c699addca7aeb612cd2c6607045a6853064f229ec010448a2aa9cb4ef1b9fd64df8cec2af6cfb74bb109c4460dbfa64a7750b556defb686a
- SSDEEP 384:LD4zwd0eezyFrt4V5A/NyEIYi2mL4/y8RFvIIvZNLyT4d:n4EdBFqV5VYiDLk5kIvP
- TLSH
  T162B28E63CE800CC9FF5786B0B4E4262AF9B176966ED1C3CB2364C4191F513813B992DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  runtime/bin/lcms.dll
- Size 253KB
- SHA256 9ac122631d27eeffb18a20a9d135d8244287a967790a7e128014d27c1245e8b4
- MD5 ce9cde625b77c9328a82c0e587beadba
- SHA1 decf18f837bb148ea918b13deac98946d9ab18ed
- SHA512 da5c32a67a91930fdb3160bb30d1a89307337ffcc77003d4fa13e830cd79fa5f36b4693fba530c2c365c005706fc380cb63fe0cd9b294eff04181c6f2ebfaa9a
- SSDEEP 6144:PRK//JP5gXSol4IRI7OPh6SnLg9uP1+74/LgHmPr9qvZqhLaHLTLrLfqeqwLgTtd:PRK//HgXSol4Uh6SnLg9uP1+74/LgHmm
- TLSH
  T1B9444946B2A81CF9D477E178A197A10BD7F178150321C6DF07E08AAA5F07BE56A3F342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32