4f859304693868f341cd416aa3dd72f87e0864c5c6a6a1d9feab4633ed03ef45

Sharing

Copy URL Twitter E-mail

General

Target
pho.zip
Size 7.4MB
Sample260817-pe2mnazcqa
SHA256 4f859304693868f341cd416aa3dd72f87e0864c5c6a6a1d9feab4633ed03ef45
MD5 ba1b8a4b7db4f6594c24ff5c8c578c81
SHA1 6f7863285a10c90630e8a07a00a94569db32e814
SHA512 232760475dad52f34355d80d8d4aa6418af78ef58e48f7848f812c718b29cd067dc5885d80acf9fbadf05f00dee02964c8f23f925b8a1d14d2c4f495c225bb68
SSDEEP 98304:yDr6LR2V9DMbJcioxcKK2SewFiYCJc7vfmIM:yDr6LR2CM
TLSH
T12E76A5DA6B1D25C5CD677378DB874953EB48943207B0C24EFA9E821DFB8B41240B8B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution linux

Malware Config

Targets

- Target
  backends/vulkan/generate_spv.sh
- Size 254B
- SHA256 c3abb9fe51a4c033003ddabfd97c79583c89675572225b2d7b615619b58ee798
- MD5 a09d099e97faf2182cf8f37380f38437
- SHA1 9df03ad0145980bb29350970440eec4fd544fdde
- SHA512 f12ece36c97f82b1d36cea0ddb29fda90a7a4976acc62a3d3e837522a468d42b5d22902142259c670530041eb860c4cca35a6fef74eed69ffe2d38ff3815f5f1
- TLSH
  T1DCD05B117086653D1D36FACA52266DC704CC967C59020594D1C8054A67F1B835581AFF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  examples/example_win32_directx9/build_win32.bat
- Size 529B
- SHA256 79d8a01f47551dfdec9e00bb01c2f4936b687ffebbdff479ef52335c98be9eda
- MD5 b96acbd23ef31a45d9d88681681fb683
- SHA1 6c35d4bba6d76774972717f22f2314748eb345d8
- SHA512 fccf1823c6acc46ab996e5cd1eee8a06596d0f5ee8946b5997b740e71722d518b063e8a5ae8f16cd86a9e658de217970454c2449c33518292bd1363b899f643e
- TLSH
  T1EBF08B1A2CEE3882626C2F3D2E960B13A190600B0FB4D89D18D0C559165CF83503D597
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  imgui_widgets.cpp
- Size 413KB
- SHA256 abb52a560d127e9115adb2db05ad8abb3d88d795dc525f9f03441660497b6d6e
- MD5 f926e8557bee32d430b10bce475bf17e
- SHA1 bbf61f5efab2bca4a7127afd3c3c7429f66bb94e
- SHA512 503f1ab2588360f9674f69455993eccadae5285341ae3a6e0a8091e722043f969f09ce90831bc319bbd746610d1a5e8876028dcd5c23b6b4536ac27145219427
- SSDEEP 6144:2f1xk3v9n5IPgFu13GUL3a4RNMM2MoTFZh6uzEU:2f1xk3v9n5IPgkamMM2MoJZh6uzF
- TLSH
  T15494D5851D2332268A33E0295FC75255EB3958773BD4C9A07A1E635C7F8043682BDBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8