44a677c09d796c19e4890a30791238fbb3fce67fe33b9a59e0d60dfea1a1d4a0

Sharing

Copy URL Twitter E-mail

General

Target
publish.zip
Size 61.3MB
Sample260816-p343pabl4z
SHA256 44a677c09d796c19e4890a30791238fbb3fce67fe33b9a59e0d60dfea1a1d4a0
MD5 8e3badbcba7f55e877b2f58cd3dacaa0
SHA1 4d5ea8aa872535734907994acb7add5fc18d1018
SHA512 47bb13824032cd6b3349de5ccf2edcd0386470a7bf6e64454c4896bc6747fd3f9686abc626ce91d839e56a154c6813d0b5aeabe2309a28105592490da2171cd0
SSDEEP 1572864:yhHWXgNY5U5ZCPx1HOXKNeUrQmce1t54GUHQsoJ7Y7:oxNYCAqXKoUkmcgt+QsM7Y7
TLSH
T1CCE7334408D79BBBB523B99BDCCA42580D0BCA5DFA36443F21E19305B74B2B8559B0EF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  publish.zip
- Size 61.3MB
- SHA256 44a677c09d796c19e4890a30791238fbb3fce67fe33b9a59e0d60dfea1a1d4a0
- MD5 8e3badbcba7f55e877b2f58cd3dacaa0
- SHA1 4d5ea8aa872535734907994acb7add5fc18d1018
- SHA512 47bb13824032cd6b3349de5ccf2edcd0386470a7bf6e64454c4896bc6747fd3f9686abc626ce91d839e56a154c6813d0b5aeabe2309a28105592490da2171cd0
- SSDEEP 1572864:yhHWXgNY5U5ZCPx1HOXKNeUrQmce1t54GUHQsoJ7Y7:oxNYCAqXKoUkmcgt+QsM7Y7
- TLSH
  T1CCE7334408D79BBBB523B99BDCCA42580D0BCA5DFA36443F21E19305B74B2B8559B0EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  publish/D3DCompiler_47_cor3.dll
- Size 4.7MB
- SHA256 a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082
- MD5 a7349236212b0e5cec2978f2cfa49a1a
- SHA1 5abb08949162fd1985b89ffad40aaf5fc769017e
- SHA512 c7ff4f9146fefedc199360aa04236294349c881b3865ebc58c5646ad6b3f83fca309de1173f5ebf823a14ba65e5ada77b46f20286d1ea62c37e17adbc9a82d02
- SSDEEP 49152:FCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvpiD0N+YEzI4og/RfzHLeHTRhFRNS:EG2QCwmHXnog/pzHAo/A2L
- TLSH
  T19A367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  publish/Exploit.exe
- Size 62.2MB
- SHA256 eb2ce51eda895c4d0dddca324e710c03c6cf5a783ff0fc0c7a1fa9667e8efcd7
- MD5 0abab1f19ec03955642334cb6e7fbc80
- SHA1 15d1bea81ceb5b83ab31ba967d342a933e9f664f
- SHA512 52bafd3093a46bcdc7f7be645e43fb61bc96ae8b0a3a4f57b179422e6845adf52530d869e6efbbf9444e624d037c7c21630a0e998aa3e177c04c2a16a7308b9a
- SSDEEP 786432:ymR6tsMUPGA2VBwe46lvcm+hRIAjB4lS+P70e/QKdf2Z00xTN6C0lxP0CLz:y64+GAA+e4iUT2yZ+P7xIY+00xTePz
- TLSH
  T12EE72356A2FD00E8E47BD178CA5B5627EBB23459173097DB226486692F33FE05E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral4 behavioral5
- Target
  publish/Exploit.pdb
- Size 16KB
- SHA256 c975e529c9e7850bce8f3259c5604da3f81f21a52359e1695d83bcc6403952c9
- MD5 e6bccad2ee7ba3df7a09a9c0708bcb0e
- SHA1 91677a63c550ab8dc362fb4c3635abd5f7171e40
- SHA512 30e812d6e0cf7b62aa298261cb419bb9d983f93252ade8731facec90514c02f07893035f433ff65c19d2ba961248e11e721b39ace9eb4ef5b6ea77f404e2fd87
- SSDEEP 384:zSuN3y9nXpov0BkeaNdgrxdD3S5JspeS01L54uTDKokxOOiGHvf4eoPImKk78PGc:zFC9nKZtSA5pfbB79sbv
- TLSH
  T1B372B4B7835CC921C55556779962C68C3B30C3203342EF7AF2D82A48EDBF79947B22A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6 behavioral7
- Target
  publish/PenImc_cor3.dll
- Size 154KB
- SHA256 e1bcd85e177302a63f63b48a8f84e3686355f5058e559086a80844c1cf0f0466
- MD5 21e4cf2c243bd5c8d5734252e1a42958
- SHA1 af4bddd90bd6c181abf947baed4adb6626b967ff
- SHA512 359836cc787f4250210c2f47cdf50acc254ea2d7863ddeb435e433e01aad90cfc11bdfc5b7ab646b796ba99d8f6cbc529fec24339f749d8b5150933da6de8167
- SSDEEP 3072:v1rdsza/NXpFSGeVdEgUx8I3iJ05uE2vlATZ+k/OaY4E2zW:3sza13SxyOSiJUuE2OX/C
- TLSH
  T1FBF33A07B6AC409BC029D27E85D70649F772BC1017228BDF22A0932E1F777D5AE3A395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  publish/PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 5de57dbc363e91b13791c24e5df76e1395b4256986de4c7844594ef809f7cbea
- MD5 f1f8958cf46eafd044e49e6bb93d501b
- SHA1 df3359989cdef838b039db644ea40a60ad4d4262
- SHA512 977e6f6aee602d5a907c3a77eff78dde82170c2d9c2f59445fdaefb73f61f1048c54aeddc029ec46bab741b6a6b6ed6ac5780585358551f730064836554281d4
- SSDEEP 24576:YT4TGKoemVbVrYbQ8boX+E9ozdf+DNLt2/8fGV8jPWe6uoYO6lHeazAGu6eQ8r:cXKoeIVrYbQ8Mozd+NL8kfGV8jmazARr
- TLSH
  T1D8454A72E2E642E4C47FC1B8C656972BFBB07409131866DB87608B552F27FE0A63E354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  publish/vcruntime140_cor3.dll
- Size 117KB
- SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
- MD5 caf9edded91c1f6c0022b278c16679aa
- SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
- SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
- SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
- TLSH
  T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  publish/wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 5245476eed26c58e120dbad3cb138f8d7fac755836b611def109fee0d78aecb9
- MD5 b280c026d75703fd9aeaeafb3b076224
- SHA1 7e5ffee3efaab3b6026d023c8ab2758f4d882303
- SHA512 a0f77a77ebb3e2b0ce1e16e3530ffb339744bb330124ca7b9874483cdafcefeba317432ba72528d02167cad75a682db5249eee434bd6066e1508ce9103d5d15d
- SSDEEP 24576:L/DlALEXzOJfwDpLlb6NZBBr00JkG+u4ZqHeyFLUy2OpJ/V7TW0jeexrjnda:PUEXnDpLl2HB3GG2Z3eUydfN76TN
- TLSH
  T146954A4676BC40E9C57BD23CD6DB861BF27178142B61A7CF23A0069D6F23BD04A7A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15