49a1201e6783646cf4d638b05e41e11147ace7b86ee5602be2e4af82c2bd36f1

Sharing

Copy URL Twitter E-mail

General

Target
49a1201e6783646cf4d638b05e41e11147ace7b86ee5602be2e4af82c2bd36f1
Size 821KB
Sample260816-lkyamsgp4s
SHA256 49a1201e6783646cf4d638b05e41e11147ace7b86ee5602be2e4af82c2bd36f1
MD5 ed854a0213a24d1a0ac141176269a6f4
SHA1 a75f20c50bfe0f61fe6026fbfab9bdb3429f6696
SHA512 05b2ee6b47ae11ca8b5d0446c5ad2f3fcb46f2d33303ab38af03e9a2ee59a116b5932ff0a0d63134dd6c0887efa539d4daa5cc56504dcf0db4e5c2b66c1c152b
SSDEEP 24576:qdsrFhBp5mV/046UpRbBodsrF/5mV/U46ApRlWhWG:Es7zcVs46Uvb0spcVc46Avc
TLSH
T1820523B094D21C10DA06B377CB5749E7B7F30766D120F1A4FE8E1E1A6D8DEE09847A94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Malware Config

Targets

- Target
  v2/patch_029.bat
- Size 1KB
- SHA256 13bd928e9714a62bf35a1ee70727de3773c025cc4df8393abbe8c6b3ebbe35ed
- MD5 9f13ebba956afa4d94810acb6fba6305
- SHA1 add2cbed7e6381c74b4a49adf65b089e084ccb4a
- SHA512 20ad6c9f001760cdd6e5d10abb0baf41e814fcd36e17fc48ee2148cfdaaca7095298df97752aa3877ca3be084021011dc0945b9a19f43556092f4543ee695a68
- TLSH
  T1C9215BA931168165A8D9C153ACF220D5321FD3BB0340AD3D344E8C39FB14FD166B8A99
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  v2/patch_029.sh
- Size 2KB
- SHA256 e02d7e2a7433f8e06edc78d9283060a4501d93409114e247391af485111e44cd
- MD5 6b5ebaed2efeb14697451ce30b03c150
- SHA1 65b86e35a6f8f3bceb61ba17b4deae8fa2db8d88
- SHA512 5c68e6150fb13ad5a47ab590404bedc96b64fd74ea0146cfbeba1ce2eed849efbc9339f2ac4477a11635aa40ff05c7049908208369ef2daa5608de6bf0a5aaa1
- TLSH
  T1D64179B1B600D6A0324EE03F6A2350493116360B3A15463C751E743BABEDFE710E99BA
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  v2/patcher/Analyze/Analyze/Program.cs
- Size 2KB
- SHA256 0beb6637cd04b37ce7dcdf0510753089119496afcf0b9cbc95155110b18cb162
- MD5 b600435c096b8d60b2f82ebb56672f9e
- SHA1 25e1ff559b0c465bc486e5dee76b4b7322659733
- SHA512 61298920a6d0f31742f272d200b4d80187f5ab5714e51e9cb44bc9cac64f3257d4db2a059e90c4bbf94dcf979767d4894583388b835c00e75a3ff9fd487ab5d1
- TLSH
  T1AA410F06EC66E21D2E636437BAF31040A7598D872258FE207C2D76E78F9086D0B71AD8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  v2/patcher/Analyze/Analyze/bin/Debug/net10.0/Analyze.dll
- Size 7KB
- SHA256 425ecd5b1fd5e46e75d8c7ab64bc745d5927c1baabdb685a0dcf4d2ca6af1f1c
- MD5 9705562a1afe3891d820a25637582584
- SHA1 132295b6fc00a5a171fa8e32ffcd77e7e674b1fd
- SHA512 5dc62d32c16f87daf700a0f9b939cf34a491678aa24343326e969a4d70d7b2078735f6227187d4f6c97082c4ac2e86decf13fdf119374c7a7423b3f81ba2953a
- SSDEEP 96:65fYo/cJlQa2fNbo6YOBU9sCha8pe+9/mxpQzNt:653/++fdYSUOmHe+aU
- TLSH
  T110F1AB15B2D89331DCBF4B36E96316400771E99B8972DF6D2CCE014A9E326144BE3BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  v2/patcher/Analyze/Analyze/bin/Debug/net10.0/Analyze.exe
- Size 158KB
- SHA256 acb8e99fdc3f9cd4d3e95c798cc98fe4ad0d0119213c1d86c848ce904b5c88af
- MD5 2a69b2aaffd74bef9e090a5e772ec655
- SHA1 e4f74a8f3382280af867c0993bb2dd3c743ec2b2
- SHA512 ee035865770aa27f8cbd73ccd114ab98fa691fc574bb4f71db83892bf0c25dd11d44a6cc587cf7ab71abb326bcfe473970cc3f96069cab792fa413b5926e5cbd
- SSDEEP 3072:xlDJk88wN1QA7sxrYL1peQ3lOg9SkHNwG3JzaAT5fS:PAAwxrI14Q38gB/oY
- TLSH
  T158F33B13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  v2/patcher/Analyze/Analyze/bin/Debug/net10.0/Mono.Cecil.Mdb.dll
- Size 39KB
- SHA256 28cb367972bdc1cd43e4006306af2fd96d37f4ed4b239ee90e1dc7237a93af7f
- MD5 7287a874e5384c339299b7f3a7588141
- SHA1 ff5ca316d3492b5d306e334ea92dedb178f00fed
- SHA512 e0b787056a6e282158b6e27adb9156503fec010b7e524aff145ff1394f5a9bbbb31c51993613e598ff448637e159a6764c03f4ab3d7326db19604e973e079f45
- SSDEEP 768:08b1qk4Ccx+fcVl41qWa1FacyzS33XSQvaCCEHHTQVAWGmx:nSx+fcVKEWaHyzS33CAHTWx
- TLSH
  T14B033B047BAD8B2BD9AD4AFCB459120557F1916A6623FB8B8ECCB0E3BC07F401543667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  v2/patcher/Analyze/Analyze/bin/Debug/net10.0/Mono.Cecil.Pdb.dll
- Size 88KB
- SHA256 a332332633fbcb20e8d50e49b4db7bd1557721417122cf0c5f4c42f2332391d0
- MD5 6c28c1e5cb24f0955b8ad1620c7ee794
- SHA1 92d5959bd6006211e7951711fec37b7deebdd69d
- SHA512 f2e089604d541a9360608e76ecce0a6d5b4e8c8ebaf739965099d75b86e0fe53ce5eecfa50a62ebec47315ccf75f56efd5c5eba118bd7971145bdec1cc3a18b8
- SSDEEP 1536:rexcDkwB3u9jX9FIYzaTN9Q+hwV+BwIfrhALYKXN7JG3OSkiAvs:rex+kSe9nzztowVIwI1Ar1JGBkdvs
- TLSH
  T1A6939E35DB94F767C3ECA9B624590D040BF1D26AD163AB098DC95AF8380FB7506323A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  v2/patcher/Analyze/Analyze/bin/Debug/net10.0/Mono.Cecil.Rocks.dll
- Size 26KB
- SHA256 bf992f3dce364ebcc3200fa7832ef07e20b4e2dbc3a8a6213ce44e3d239db984
- MD5 c73fca71d0872456a8c909e969bb63fe
- SHA1 fa38c450742f8f63865649117c1224fbaf88db50
- SHA512 ca1a017f58a5148f47b44abbf54f6b5df4e9c47df6900321d0a070ff56be15b9d6f01d46065021e73eea7a7c350700647b5cab28c9f1c3690492ed38ceddf2f9
- SSDEEP 768:flHJ9KA2pPfoyE+lzNvVyhRORU5euXekYTkj:f9xePfHl6jORU52tTkj
- TLSH
  T1E6C21A0123A5CBB7E2EA413A78E2961402F1C14B6813D74F9DCCE1AD99CFB456731FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  v2/patcher/Analyze/Analyze/bin/Debug/net10.0/Mono.Cecil.dll
- Size 353KB
- SHA256 831dca77470d85cb6ffbea3072daa7a3df5b7c9fcfd9c3f43674a9be99d4bfcf
- MD5 1743a1d9a9fe195b24f8afc7a71d86b9
- SHA1 9693faf12cb4c25062bf3197ab01b1c69be019cc
- SHA512 89c7fd4613c0bf426a9f3ed0734683073048c9d5b55e466cf20b724d4d1f99487e582c7b6b5e57762503ea82b283afa70ea50867c14c2a92d1d3e37c98d4b2ac
- SSDEEP 6144:DT2p1QxCThYRykN1creGO/bo5sE/G9mq63iyxZA4JPwVI7TtSi:XI1Qk10mUbo6E/mmqM04GI
- TLSH
  T12F747A3923FC536BCA8F93B6E06A043D86F5E005638BEB5D59C0E6F55C43BA25902277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  v2/patcher/Analyze/Analyze/obj/Debug/net10.0/Analyze.dll
- Size 7KB
- SHA256 425ecd5b1fd5e46e75d8c7ab64bc745d5927c1baabdb685a0dcf4d2ca6af1f1c
- MD5 9705562a1afe3891d820a25637582584
- SHA1 132295b6fc00a5a171fa8e32ffcd77e7e674b1fd
- SHA512 5dc62d32c16f87daf700a0f9b939cf34a491678aa24343326e969a4d70d7b2078735f6227187d4f6c97082c4ac2e86decf13fdf119374c7a7423b3f81ba2953a
- SSDEEP 96:65fYo/cJlQa2fNbo6YOBU9sCha8pe+9/mxpQzNt:653/++fdYSUOmHe+aU
- TLSH
  T110F1AB15B2D89331DCBF4B36E96316400771E99B8972DF6D2CCE014A9E326144BE3BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  v2/patcher/Analyze/Analyze/obj/Debug/net10.0/apphost.exe
- Size 158KB
- SHA256 acb8e99fdc3f9cd4d3e95c798cc98fe4ad0d0119213c1d86c848ce904b5c88af
- MD5 2a69b2aaffd74bef9e090a5e772ec655
- SHA1 e4f74a8f3382280af867c0993bb2dd3c743ec2b2
- SHA512 ee035865770aa27f8cbd73ccd114ab98fa691fc574bb4f71db83892bf0c25dd11d44a6cc587cf7ab71abb326bcfe473970cc3f96069cab792fa413b5926e5cbd
- SSDEEP 3072:xlDJk88wN1QA7sxrYL1peQ3lOg9SkHNwG3JzaAT5fS:PAAwxrI14Q38gB/oY
- TLSH
  T158F33B13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  v2/patcher/Analyze/Analyze/obj/Debug/net10.0/ref/Analyze.dll
- Size 5KB
- SHA256 0af39963a4d9683aa539045a41578c5a516ce2bd4be36a7ba808930298eaaf1c
- MD5 2e28d23eb4c45996a46b842b0e4ce85e
- SHA1 5957cdd756ce63ccbb06294c399c2e2e072ee4f1
- SHA512 9a868fee426a24ecae2936e254aa29237414f35e8ea19b878c68c2b4dae78897c1458683d760830045012c66028d3a848eb159b04bbf28cc707245326df55c5f
- SSDEEP 48:673FiycssSvKRpT/2d65sIk1aloxpIQL4vpfbNtm:MF3WZ/mxpUBzNt
- TLSH
  T14AB16312D3D48337D9330372AEA397425778FA758C664BAF29C85A077E1A6740D62AB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  v2/patcher/Analyze/Analyze/obj/Debug/net10.0/refint/Analyze.dll
- Size 5KB
- SHA256 0af39963a4d9683aa539045a41578c5a516ce2bd4be36a7ba808930298eaaf1c
- MD5 2e28d23eb4c45996a46b842b0e4ce85e
- SHA1 5957cdd756ce63ccbb06294c399c2e2e072ee4f1
- SHA512 9a868fee426a24ecae2936e254aa29237414f35e8ea19b878c68c2b4dae78897c1458683d760830045012c66028d3a848eb159b04bbf28cc707245326df55c5f
- SSDEEP 48:673FiycssSvKRpT/2d65sIk1aloxpIQL4vpfbNtm:MF3WZ/mxpUBzNt
- TLSH
  T14AB16312D3D48337D9330372AEA397425778FA758C664BAF29C85A077E1A6740D62AB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  v2/patcher/MosaicPatcher/Program.cs
- Size 10KB
- SHA256 8c4b0fa552a31f408919eb24564b0f4a7654ebcc6cbcb567ef092e4af80f42a4
- MD5 651e7acba510a9c0587bd738c615321c
- SHA1 9ea8585456df9334d7382e7d940d66c67a82a242
- SHA512 70e4131ff310dc23047545bddf9946f9e47cf7461dcd56942f9f2cbecac6eddf39dc00b4bcfeb6ea3b17ab3bb8600b2341cdf2640a5e64855837302a6b442013
- SSDEEP 192:5IakjZgh/gO9OxC60O+FthRCyKwUWqKC6qoQvqxCa3Kk/RNUmPUKDy3ZCXyuT/:Stgh/VcxC6v+FnZQbWzNUmPUKRr
- TLSH
  T17C22810A6C82623E0AB3193A5BB71C05736AC9538099FF117D1C07F66F2087CDE76AD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  v2/patcher/MosaicPatcher/bin/Debug/net10.0/Mono.Cecil.Mdb.dll
- Size 39KB
- SHA256 28cb367972bdc1cd43e4006306af2fd96d37f4ed4b239ee90e1dc7237a93af7f
- MD5 7287a874e5384c339299b7f3a7588141
- SHA1 ff5ca316d3492b5d306e334ea92dedb178f00fed
- SHA512 e0b787056a6e282158b6e27adb9156503fec010b7e524aff145ff1394f5a9bbbb31c51993613e598ff448637e159a6764c03f4ab3d7326db19604e973e079f45
- SSDEEP 768:08b1qk4Ccx+fcVl41qWa1FacyzS33XSQvaCCEHHTQVAWGmx:nSx+fcVKEWaHyzS33CAHTWx
- TLSH
  T14B033B047BAD8B2BD9AD4AFCB459120557F1916A6623FB8B8ECCB0E3BC07F401543667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32