72ede9e7f8e1c003d0c13f6346096ccb9d60315b12002b45bee91bd0efe14d56

Sharing

Copy URL Twitter E-mail

General

Target
PowerPointFigures.zip
Size 28.0MB
Sample260816-rq3efadh55
SHA256 72ede9e7f8e1c003d0c13f6346096ccb9d60315b12002b45bee91bd0efe14d56
MD5 8a5a6301762385eeef2b5cb947e33db3
SHA1 dbd27ffc6d68976684755a0511fe7004f9fecc97
SHA512 d6371f69e831de4bfe93283cb8b2d6708b9de162640683b6c66f75cb5fa3a62b5e1cc0d9ee9948f9c96ed5134f2c67d5b7528915c920cfb505e60a5f9ce94123
SSDEEP 786432:kGo672XmpZeImR2/aqRvAUOgjQAdtpALi6ygpQYpwcdoa4qp:ka722TmsaaoU3k4bALlDpQY3eaTp
TLSH
T1FB5733FC35A37043307C9AD5678B2259CC29D6AA0E120CA1D923BA5FF9515D0B76E3CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Targets

- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch01_Labeled_images.pptx
- Size 3.1MB
- SHA256 d95c3e86bacc172a206043a43c5f65418faf1dbd78f647d8ff79b41117a886b5
- MD5 4a5537c342e77ea842042d25699ded15
- SHA1 3dcb07249c748bd455e81ccf0b24d43ac66f47f3
- SHA512 c749b37345c48436196a954d53af8b39d71460b03122bf8a242bd4c81ebd250f568013ae9fe6c1f2f7ea0829478ddb8fac8818598255bc963b785ed0cbf5c808
- SSDEEP 49152:GwAYRxGY+k6zaEXQMkNCsdtfHglj1JXYGPFAUnodfH+rap9YQFpcEcnLG:xAVYRg3AM1sffWXYiFnodPvPt
- TLSH
  T1FAE52314EE73ACE6D09C907312AD1F943E3307A6C2441B6673BD6A7E3F962592E07B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch02_Labeled_images.pptx
- Size 2.0MB
- SHA256 13afd8c2d028a3f6835b128ba892b85a53fdc80b96df185a395b01202741768f
- MD5 b76a446e2e45e23992976dc2b09bd74e
- SHA1 cc8b6b7e2faa5a56650c831db7a9d39bddc6af63
- SHA512 b6f96ad2d11d01dffed71e0df23796a69f8d7ab5294118f126e5ed725af1caae919045d0e2a695965f31a5381983082e617bf535ecbe852893c5903226e3639c
- SSDEEP 49152:acpedoutFb/9gfwXQMkNCsdtfHglj1JXYPYYsvv:acpeoK/uoAM1sffWXYU
- TLSH
  T1E5A52328DEA27DE3C4DB11B606520B61AE724FD3C6064A91326E7A0E7F542C5770B78F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch03_Labeled_images.pptx
- Size 3.6MB
- SHA256 741473b1b193a210cb17b9b204b4ab880b40f5942d7f030c314d4de1d7864552
- MD5 c0e78ff886d32bc0fd82ce97cff093b5
- SHA1 42a3fe7dbe628c42a615ce705c26beb03168baf7
- SHA512 da600cd0e54cb6de9490cca65c97fd994b8006085639a3e3c7b2b19fe8d1db885c49ef8325102122962ae7dfb58c61ed6cff9717ecf9a26e7bdf19f88b327872
- SSDEEP 98304:utw7aAM1sffWXYm+UD26vtpvVprQGC3ixJ:utwHM1su/b5vNxJ
- TLSH
  T157062364EEB3AEE6C06C6136129A1F947E730797C1810606B3EE6C7D3F853991D4BB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch04_Labeled_images.pptx
- Size 2.1MB
- SHA256 f9b06a4d1636d3a8bcb6760be786270227be190038e8bf5c17d96f9799f1ba02
- MD5 7a64d88b921eef6b0cdd47eec0f9ca7b
- SHA1 ed1f7009066b81902d5f4c4f30e203f57cd27280
- SHA512 153d0140b25ceafea7e58b3dc4fc98dfe403b737ab360e16aba8bd334ef47e4786c5cf610fb33163a772309b99a71cb16027d69b3c591d97779075de903f2e1d
- SSDEEP 49152:z0iMXQMkNCsdtfHglj1JXYqzpwnojz0tXqIB:z0zAM1sffWXYqz+ojGXt
- TLSH
  T1A3A52318ECB3BA97D45D617715961B94AE330FD3C6404B05B2EE652E3F4138A2A0B7CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch06_Labeled_images.pptx
- Size 2.5MB
- SHA256 e636387eb4527ac772737b7c7051ffcc426accbba10beec0de48bbf21cce6fff
- MD5 0b8f3014b5df2c48334e26e312af1f44
- SHA1 d33045d3dba0ba49706ddab3875c71cb4fd92928
- SHA512 0beacdcd9100e5a531e1da1c79d0b498ac6867199a44ed6c0d169b7440a7adbee78a3907da28e30e48319d5e154f8c3f327986fffb0d64cf0622a478e9165a9b
- SSDEEP 49152:96tyBDsyr2jXQMkNCsdtfHglj1JXY/l7UIcprK6fvpNFqpRIbsQuJ:UtyBNcAM1sffWXY/lbB+vpNcpRIbE
- TLSH
  T1CDC51229DE73BCEBD09C9132598B0FA87F730786C204071573AD296E6F9A3592D0BB45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch09_Labeled_images.pptx
- Size 2.0MB
- SHA256 1d45b10d814e0a7111a66b8a1bec45bcb5c147a42e32f1ed2cc695629d26cb3f
- MD5 6ad8497e2a1a38cbcb7022ba25b194d1
- SHA1 deaca80510c009d5e79ba9fe51a42fc398dd6c8e
- SHA512 0d6549cde02939aa5d067bbeefef3fa586c65b7c6570b34f6555e442fa752327cc383143b0071bda92581193a46f4e4f3c53a101b3a30ba5b78ff9bc95a3debe
- SSDEEP 49152:mtNRZZl/f7kSY8D1HTYXQMkNCsdtfHglj1JXYbQ1E:ilfLY8DlEAM1sffWXYGE
- TLSH
  T119A52345EDB3BD96D068A07612AB0F587F3306D7C5411B15B3BD682E2F8438E2E47B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch10_Labeled_images.pptx
- Size 5.6MB
- SHA256 e61c00b2ebfdc029eb7142f54a77b0b7b5ed2592db6ea1f54d9fb2c372acdb66
- MD5 e7b46f5b0ab966454b13f789c98e740b
- SHA1 55ad71f0fe2d0411181b519b92b18bc77d85a10a
- SHA512 b85a72a6355bdc6c4394c786ffb235f3ba847aad2cdf5c9f01666fbef65aab478569050d742725ca72311acbe12f2c847d2c12c0a8ebad84b61e652744c58bd7
- SSDEEP 98304:uAM1sffWXYyTznKekDuZBGpMRK0BZDmnZhnZELMX8l+6P5HVE:PM1suvTzKgZBGponw8LMmk
- TLSH
  T1F3461225EEF3ACE2C55C907216993F983FF3229BC0900B17F3BE5868AF952590D47649
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch11_Labeled_images.pptx
- Size 1.1MB
- SHA256 291a4ac375595eb7c7d0716c1a62cd48c59365c5a46f63e162106a734ec3b74c
- MD5 4729a9bfe4fa4ef7dfcfbab3f2faafa7
- SHA1 bf9b12bbeee87f9098853e8a90621bb2dab47207
- SHA512 457d19c7c64aa4ad1f605f1eaef90094f0495bc96eb7f409a5231dfbe049f9cdcadc45bc3c16a90d5db89f68f8c039c22b1479313c10f276bd1867d96dbdfc1a
- SSDEEP 24576:dgAUwfPQMHEbvBWAEFsdSZbbj4TfHgFiMj1r9fXYyJ:e6XQMkNCsdtfHglj1JXYs
- TLSH
  T13135236CE9327E42F0A688BD538A97599DB4CC4A4E938E41789D384F7B541C2364B38F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch12_Labeled_images.pptx
- Size 2.3MB
- SHA256 6d62e71506215306aba9d3d681161c19e2626e59d4f7717348d76048482dc2e5
- MD5 f341d0cf3fa6e018937f3f68a03baa11
- SHA1 54c40b36b646d137e179dcc466e803d5cdb185b0
- SHA512 5a4fb41142b72c5e1a4a4e0200b73c9f806a6729c31e84a322085e81a02d55316e8a2078a26fd9fc0d9bc1bf2bd20fcc4522b4943af8dfdcd3f7fa3645a2b609
- SSDEEP 49152:1/ebjXQMkNCsdtfHglj1JXY21A+grvdozeosM2V8mJETn4:wfAM1sffWXYhtpmV2TETn4
- TLSH
  T118B51228FDB2BED9C4AC5036259B0B487E7307C3C5814B8572DD992E3F9539A1D4BB88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch13_Labeled_images.pptx
- Size 2.1MB
- SHA256 d4b71a5a0a7fc20919cfb4212dd21546b265f54917b236b2d667b43df04da80f
- MD5 f752630fdcd995e8f48489e88522cefb
- SHA1 60a504c306a38983a2f4cd225bb9f4b6211f8649
- SHA512 a5be54675c35ca212bcca4d13fb4084adcfd2a79801feb05d2407ca26028d8c2ed02f9f705b3b14598f289d5be2ccdfb88a560f34885464fe07304e2c5538822
- SSDEEP 49152:BUOAwXQMkNCsdtfHglj1JXYAOwmTT6n1cLU4in:xAwAM1sffWXYTan
- TLSH
  T10AA52355EEB3BD92C5AC5272224A1F947EF30687C1910F82F3EE5C6CBF0528A2A47745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch14_Labeled_images.pptx
- Size 1.5MB
- SHA256 998cc849491d93da0f8be3d8c72de5cd25b6a7435cc6ca69f6ccc600e06c95ed
- MD5 981a3ed6c4ad1b9db39cfa84352cd371
- SHA1 91c42f198bdeb51a71531e0e0aec89dd1eecb542
- SHA512 279e5bd0ef4c3bbcad38fd89b93f3fd5190626b9a60705ddd92bbd24de95b60b1f0ce598889b5d976eeb0f0847a701109560baf2bf9b746e55d15ddbcfde7646
- SSDEEP 24576:Cr59XOe7CfPQMHEbvBWAEFsdSZbbj4TfHgFiMj1r9fXYyhqHlVYRxMnC5XKcW0Y:xeOXQMkNCsdtfHglj1JXYGKlVY/MCTY
- TLSH
  T1C0652368EC72F926F15F01FA07591B046E77494BC902DE0472ED782FAF142C96A1B7CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch15_Labeled_images.pptx
- Size 1.4MB
- SHA256 d25b1a4721aedf4426f12dbd5c24b7489ce06cdbcb5d3ea8f53be51e92dfd596
- MD5 a8d60e2d33e97e9ef10a75eca0ba371c
- SHA1 a86ff889fafa8b41594d7df9ced5be788f8f7e47
- SHA512 e85f293acca16ab824ee45ea50393f0ad82e4f2b0fa7a6bc182a6a5ace1ad1ddc4dcfb1dcc0a9ae630dd515b1a0fc35b1c45420b80af725c74418e4d231a0f2a
- SSDEEP 24576:1zgZaHtk3MsdyM8fcVVCfPQMHEbvBWAEFsdSZbbj4TfHgFiMj1r9fXYyUKA0:RgZOG3M+yMBgXQMkNCsdtfHglj1JXYR8
- TLSH
  T1CE652364D972BEA6E08D1076124F0BE87E760E478A818F50B39E6C6D7F052C62F1774A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  PowerPointFigures/PowerPointFigures/sebesta_ch16_Labeled_images.pptx
- Size 1.3MB
- SHA256 16cf88c1c8ad1eaef16a9f024f405f2328cbc70807509f7b5394013bb307deed
- MD5 3e08afa08d9348fa6a4907c255324cfb
- SHA1 ac86a2a7188478ea23abf32b153b0f7193be120d
- SHA512 94458d4c7ceca1f15f5372c3c438b5b080326ff4774b7caa7eee8b91896395c902078da346041b96de828ea87798c0a1b6dd1512cf9d444a62f3dd4f40df96e4
- SSDEEP 24576:5lyqbOeG74IKwfPQMHEbvBWAEFsdSZbbj4TfHgFiMj1r9fXYy4:jhbFd+XQMkNCsdtfHglj1JXYz
- TLSH
  T11E552338D672FAF7F15D40B7434B0BA87E6109878A064B10BA5CBD5E7F112857E0B74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  PowerPointFigures/__MACOSX/PowerPointFigures/._sebesta_ch01_Labeled_images.pptx
- Size 222B
- SHA256 b580641a77a9613eca41bf14ad320e629fd18642c014482fbc948edeec51b3c2
- MD5 143a797d30fbbcb100d1bf0bcecbf23d
- SHA1 47a9adfad83b7926ede0f9005434d28745cd13b4
- SHA512 de27c31082729bae0aa98433c483f13ba67e1db4f14e24b36392e247fcde35098245df2b4a644228c15f7a154719606135743937f56753f5bfc9364512d2906a
- TLSH
  T142D08CE526900E06C704C2B22ACAA9826B7A6424C2221293B05F80001F04A8AAAE130B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  PowerPointFigures/__MACOSX/PowerPointFigures/._sebesta_ch02_Labeled_images.pptx
- Size 222B
- SHA256 b580641a77a9613eca41bf14ad320e629fd18642c014482fbc948edeec51b3c2
- MD5 143a797d30fbbcb100d1bf0bcecbf23d
- SHA1 47a9adfad83b7926ede0f9005434d28745cd13b4
- SHA512 de27c31082729bae0aa98433c483f13ba67e1db4f14e24b36392e247fcde35098245df2b4a644228c15f7a154719606135743937f56753f5bfc9364512d2906a
- TLSH
  T142D08CE526900E06C704C2B22ACAA9826B7A6424C2221293B05F80001F04A8AAAE130B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  PowerPointFigures/__MACOSX/PowerPointFigures/._sebesta_ch03_Labeled_images.pptx
- Size 222B
- SHA256 b580641a77a9613eca41bf14ad320e629fd18642c014482fbc948edeec51b3c2
- MD5 143a797d30fbbcb100d1bf0bcecbf23d
- SHA1 47a9adfad83b7926ede0f9005434d28745cd13b4
- SHA512 de27c31082729bae0aa98433c483f13ba67e1db4f14e24b36392e247fcde35098245df2b4a644228c15f7a154719606135743937f56753f5bfc9364512d2906a
- TLSH
  T142D08CE526900E06C704C2B22ACAA9826B7A6424C2221293B05F80001F04A8AAAE130B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32