fd195d642406fce7c97331edd2ccf1dae052872746453eeb753f88607d81ebf8

Sharing

Copy URL Twitter E-mail

General

Target
net7.0-windows.zip
Size 4.4MB
Sample260817-ttavpsel2v
SHA256 fd195d642406fce7c97331edd2ccf1dae052872746453eeb753f88607d81ebf8
MD5 b7c0571b7ebb0ce7b709cbb06a7d115c
SHA1 ccff1d0648ec6dc46e6b3e13dc1d7d7504c6b1e1
SHA512 28db7c2d7f60c3b523d1a704fc9fe28b2f137e86b541765ca1a36535acbea382c907b881c68ec07ff837b13477e20d9d2a644c9ca322901574d098fcc90b90db
SSDEEP 98304:1kY+UlFewdsanKXWqz4a0nTN19+/Aneq3Da1pFy+4J6b+LUGI+b:L7iiKXWzaETN19FTai6q9I+b
TLSH
T15D263391A1E43683CED72EF6BA72F8B67322B869CC4440D952AF712BD6450D38DD6343
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  net7.0-windows.zip
- Size 4.4MB
- SHA256 fd195d642406fce7c97331edd2ccf1dae052872746453eeb753f88607d81ebf8
- MD5 b7c0571b7ebb0ce7b709cbb06a7d115c
- SHA1 ccff1d0648ec6dc46e6b3e13dc1d7d7504c6b1e1
- SHA512 28db7c2d7f60c3b523d1a704fc9fe28b2f137e86b541765ca1a36535acbea382c907b881c68ec07ff837b13477e20d9d2a644c9ca322901574d098fcc90b90db
- SSDEEP 98304:1kY+UlFewdsanKXWqz4a0nTN19+/Aneq3Da1pFy+4J6b+LUGI+b:L7iiKXWzaETN19FTai6q9I+b
- TLSH
  T15D263391A1E43683CED72EF6BA72F8B67322B869CC4440D952AF712BD6450D38DD6343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  net7.0-windows/DiscordRPC.dll
- Size 82KB
- SHA256 63ff1146555876002518d6a77092a553151c9d1b749dec37a6b80e5233d2db66
- MD5 a1a4002c481e5828c9bae4b0e982bfeb
- SHA1 420708b18a503b398eca8a4edf2ce203fe26a620
- SHA512 30573b33aa38ff910baf0fd33c701a8f5e58cb093f010e2fc321f3c6203c75609f1585e34118d1a9db3b4beba7b2f82d8303bdda76e2fdc48c087d3b8498f778
- SSDEEP 768:Bc5WkTEZ/k5j8mtDLIS5A9lIuKlNmQHQZtKUc0cu6yAAtijcJRMvk56HX+mTxHN0:CSyNn5A9zUmcaHqsPMce+mTxtSNh
- TLSH
  T1C183E76123E84B5AE5FE1B38F07411113BFAFA557931E38F4A4860CE5A127C289727B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  net7.0-windows/Launcher.deps.json
- Size 1KB
- SHA256 343729bfec4954a86c585f0a316c5a747045cc239e592cdfbc9ff9f16af4e070
- MD5 dcff517ae1d40a602b07a881d7f3a534
- SHA1 b052c36d82d77c95f11bf7476bd62f7cd3cc3d0c
- SHA512 21e4b43c164b6d611a9aed645fad0956f9bf390e6ae84805d1deea5897c3f1c0768d89cdaf7e4d86b4877e06d5392e3936aab78e3ee03a43a5908174cd3e2f30
- TLSH
  T1DF31562AC6945C3704B163B5A9384242F721173F1008589F79FC549E8F32FA77092F36
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  net7.0-windows/Launcher.dll
- Size 6.1MB
- SHA256 2b2f19a03918bc9bdbef22bc24d8c068751ecf503035f87db13715bded7acff0
- MD5 3f365029aacce22c3939c314dd822f10
- SHA1 f830dd7af60228e9312f314539280ca9dc9ad4d7
- SHA512 4c38aa4f779558b6ff59854cf36b726705cbc59df89d974f48954b9edfbc4651b9e6bded8c2f78c55406265b1aca6c23726d9430d92a2c97715e9343f7827cbc
- SSDEEP 98304:hkKUz59G0W01zfHUVV/aCcmSTYC0UVOeskKUz:W59bW01z2/8j5Vz
- TLSH
  T12F56E013F363C31DC5172D3A87A2C7A07363BC917B12E10AF7282A69C99B1B44E9B5D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  net7.0-windows/Launcher.exe
- Size 795KB
- SHA256 d640c084ef994e75b64d131f93618fecae0f50c6ab172e62d35f465d5044d956
- MD5 59d866c60a56604bd42e6e46bf35b537
- SHA1 e98dac29488cc1c323c0dd5f27cc5ffd7fcb0bd5
- SHA512 6696f310734bed31f5780c2b93d4e7446f8b2d88d92acfaacab8d4712d4474584d9ee8a79a6626e486d9b0a1bd213848606d15d9b9ea88068cbedd5b9d4b1b4a
- SSDEEP 3072:C7LW6Pr46prwG2k5GlI1JWE9QVsxyvJyn4NTfQf1VZlJWhrZ:CXWJ5kICW3Jyn4if1VZ3i
- TLSH
  T1DC052A47B2AC11FCE1BBE33889621905F77778164731A3CF1390967A1F66AD0AE7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  net7.0-windows/Launcher.pdb
- Size 24KB
- SHA256 9f5875ae5f2df0efc3a1bd8b385cd8a226bb73f2c93a0111aba6a39fcfcac03c
- MD5 93f00ab2656be605de4379590ecebafd
- SHA1 793a75b74bb2276f830a3ceaf826e7218ebfa9c1
- SHA512 6e8ce9edce9e2ac0482a7c3b756ffb18dbdf1c1d2e1e2aa8263e3eb4c8d8e00295f7c1dd228321e3c1228acb648cd7142fd1dc06a21a5514b7cf0ee168369062
- SSDEEP 384:dCW+hmAEM3X3X3X3wtyfm71ZdpMhaAsAYZ1PGK1CuP0hHpEs7BZHF/f3u/ZiRyiG:ozxEAHHHOyUd6/hHTqJ9EklC8P
- TLSH
  T190B292B7C388D611C65915325576C3AC33318720AB49DFBAF2D4662DEDEF3590BB22A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  net7.0-windows/Launcher.runtimeconfig.json
- Size 266B
- SHA256 6a9ae797b520e700bcb418aa36e945f22d27c86b3aebb393cb7c4462d52e76da
- MD5 d8ae75ee64991f91ddf5fa2c72adcc7c
- SHA1 c8318862e3f8051daed02b9d764e7468cbe4bf86
- SHA512 8907e87ce5c582ada4d391009b015ea9878c3f788a15f327dc7bf147e8a4ac80258e0541f1f35f3e00cb29dfbd55839908595a6941920d68bf7cb8bfdffb4998
- TLSH
  T1F3D0A93BC9208CA328F92BB6D23AC280FE35871B10800E2A32BC100C1FB29630100F84
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral13 behavioral14
- Target
  net7.0-windows/Newtonsoft.Json.dll
- Size 679KB
- SHA256 72cf291d4bab0edd08a9b07c6173e1e7ad1abb7ab727fd7044bf6305d7515661
- MD5 916d32b899f1bc23b209648d007b99fd
- SHA1 e3673d05d46f29e68241d4536bddf18cdd0a913d
- SHA512 60bd2693daa42637f8ae6d6460c3013c87f46f28e9b0dbf9d7f6764703b904a7c8c22e30b4ba13f1f23f6cbee7d9640ee3821c48110e67440f237c2bb2ee5eb6
- SSDEEP 12288:1eos/POdGV5jfWrV/9Yeh9eRcyLfLYtT5mWxTZ/B7jW5JMtRRpKzQk:10/POdGV5jfW5VnhFyvOB7jW5JMty
- TLSH
  T173E4598563F88F6AE29F2B74B830490E4BF1F44AA6B6EBCF4404D4A51CA3755AD00777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16