237a764ab5e7b705800d387fbe01f5162abb53ae71aa6a1592d434ad2e828437

Sharing

Copy URL Twitter E-mail

General

Target
237a764ab5e7b705800d387fbe01f5162abb53ae71aa6a1592d434ad2e828437
Size 7.3MB
Sample260818-yrwrlszbpg
SHA256 237a764ab5e7b705800d387fbe01f5162abb53ae71aa6a1592d434ad2e828437
MD5 e4c18922599173727b785802fa7e6f71
SHA1 93679ad3276a04e0db59330cfdde8b5fa319aba8
SHA512 a24db78872dfff61094b23d5aac9298908d9356c272b63f48514c1747ddf013824c84d802bd968d202e939bb02ea507071179c38cc3985f2dd8a7a558546ec0d
SSDEEP 196608:Vcw1RmdSM0mGRdcuUu1BnDLntZ+uz0H+D0zU+P:Vcw1Ud4mGR7nLntZiHI8
TLSH
T14F762362D7CCDC8ECA1BE0B7576FC0885FAA317949558E092B34964E373E8D11236BB1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  Новая папка (2)/START.bat
- Size 3KB
- SHA256 11a89ecd65cd3583ff42bda9945dd4be3d46c847c99f2578d72b23743062e562
- MD5 2c40706d89038926d9a5c8d391637f26
- SHA1 560381664f598a1007348d36039b70f650022b19
- SHA512 f243f3dfdd02955696fa30f810d32b4b0c087c4b9e63dc8fd5c0e718f708e863a2070f7bed4075741df12357fbf4b3a273918df994ede13cd5ce0ddcc02a3825
- TLSH
  T15B812F57F989D9C20ED10AE75A345487BB1FD0738664DD8E78EE80B418681D80EAD6C4
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  Новая папка (2)/nm_image_assets/Styles/Allure.msstyles
- Size 1.2MB
- SHA256 39e78b8cf604c9c98c728f28e5cb20e497de710b5ca1202d150d7d5ebd8a79f3
- MD5 95df1e2542700dc6c45d22ad4de28c02
- SHA1 5255f77ce1439cb639e8b525df911100ae64b332
- SHA512 362feb5b3fc6b0e87aafed2fe9f35025e31efae2452e4bda1589862c980ea77dcda475a4f729d49f5c7668ff13a13b1bd2af889b007b3b41b7931524f2c94f6b
- SSDEEP 12288:ZpNrmiRwxONrTSBCKENr4qh7XxsOIwSU2myr3jSZ:mgOjg
- TLSH
  T1F455BF0A2DA4C86EF1765A70ED6049EAB1F7BC45BD64A69BB0D3383433B1E504C0779B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Новая папка (2)/nm_image_assets/Styles/Ayofe.msstyles
- Size 748KB
- SHA256 e6af741c1c75601a984ba00d9683e593e1efe151ea24a544a2253c7a77e2fb53
- MD5 b6bc75ac74e2ba51a9e9870822c415b3
- SHA1 63fffde4572025f4ebbb4f2f26c3e2c7612e0b03
- SHA512 e4934401948ff16f641e6159ade8233d7d8bebd703e9a2b852349c17f7d2caf4117e29fcd6f534aad94430de1990f42b65ca28078de7dd95a5ffebc94740b2b3
- SSDEEP 12288:BCmPDw02wamPzQcVZKmPjAcX6El1feeLD3lSRjen:deeLD3lSRj
- TLSH
  T16EF4367266E8C845F1A67A70EDBD64FC4636BCDADC38C60F14D13E0A32B19515C227AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Новая папка (2)/nm_image_assets/Styles/BluePaper.msstyles
- Size 6.1MB
- SHA256 f181315b09138d6237100afcde1760890d3933731641bb258303b2a4a2f54939
- MD5 e4ad954e443a58283079f84b0e27465e
- SHA1 97c700dc03a94d6828b2adc5772540e68c021696
- SHA512 87fa7cb9d98514c9b44327522df4eed5906431ab7e17f6fdb5d9ac332ab26341608e952a0f1a54b01e37844e09cede48c30f6d1c6b7043c549e4a358e1e80bd2
- SSDEEP 49152:qX42ZP3lTjYkJnhxPlHHyWzTtRHXFP3lTjYkJnhxPlHHyWzTtRHXR3nKnJa:D
- TLSH
  T10F56FF01EAAC0058E1AA6670DFE4F4FC46237D596D38821B5DDF3E0A56F8A5185833BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Новая папка (2)/nm_image_assets/Styles/Concaved.msstyles
- Size 3.3MB
- SHA256 ced8d4005fdd76789b41c7da560348b3339376d27571e45a6803cc7f72c7b6c7
- MD5 f7fb5ba776ecece641f671d7f5f9d380
- SHA1 57f169d12fabbfbd632eac41e71dac408f6fefe6
- SHA512 85d7438caa4b569feb81795f385efb967ab3b0fd996c1160ddf4a70df21e700c163d2b0d8ed9abbdc84e9dfdb0f816e01fdd1b60a9e3ddca6a6e3a641dc6eafe
- SSDEEP 12288:HyJqSSmY/NBuai2gWBJqpCGqHmBuRS2C+1JqEa2a/qBuMKmy8ygC6ajja6sxEK6c:Lo6ajjahoc+E9ajjap6K
- TLSH
  T193F51D86EA9A4482ECA79671FE7840FC49BE7C999D39BD3B13C27D2962F1C0011127D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Новая папка (2)/nm_image_assets/Styles/Core.msstyles
- Size 2.2MB
- SHA256 0f3c9165492331b8f9d398d813c6ab31207cb7bb1f1d699bfb739ffa6fc39eb0
- MD5 c716abd7a1c92c85afd19a063c3686ac
- SHA1 3b19bc0296940b9bb7c12dcdd0db7dff42cd989a
- SHA512 ec8c0a6dc0d4fc46585c9c03822865637129fddc91c220c481a30423ef275429bb24a8ca6ce0c93fd820b8832ec7736fd96b9520db4d58fcd2a07c15ebdd958a
- SSDEEP 12288:qbZFWsLk+xtPBE7pcyvVKckrZRbX908+rTsVy8PZjYgvdUPMBaDLV8X:qml
- TLSH
  T183B57A5176A50045E372E679EC6502ED0A6A7C5BBE3A997F40933987EEF0D310E023E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Новая папка (2)/nm_image_assets/Styles/Cosmo.msstyles
- Size 2.0MB
- SHA256 d6d8683247179da22fa970a677a5800ae9e38f830c6366dfa01cd9a1c5318d81
- MD5 4e2b5754d97906a903b6fda841cb69b6
- SHA1 101308746b29baf0764c3d458def39e22cb403ce
- SHA512 49ddec823d8d25b238fa32403d825e287f86357d29738b7d82f142af18748dc63743e430bee72f888f361e4beb55a29b27e20b0640adf1531e9f5085d6f6cda5
- SSDEEP 12288:VpbFFS0yIRLd9KsaK+bF4C0g2GLdA6sYOPbFQSsxoXLdoqURkJv:
- TLSH
  T12AA59D573698A174F9E279B1DDA795FD47B67C988CBB8E0B00E33D0632F194098423A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Новая папка (2)/nm_image_assets/Styles/Fanta.msstyles
- Size 880KB
- SHA256 63ceeac9fa52c603a9b5f0d125768521b46faab2a48935d39979897aa7e5b5f7
- MD5 2a66e29c57c7459585fbf5ef71cf17be
- SHA1 a5ad3958e13a9b124f9ed84d4d58784fec0ad21c
- SHA512 aded6530582b4de6198df7b96e70413ab68bb191c76432df3b8105e3fe5be273623be5f2d1cfbcecb76c463d325ced6aeb5fc5e444b5ef2ce4254e0c347f21cd
- SSDEEP 12288:DJF0JCJUVgF0aip2CEF0fiJPbGiHvN3HvjH+2pEJYdS3ufmx5mx/fmx5mxCYYqYd:AiHF3HvjHZS3R
- TLSH
  T112155B2276D84456F1A36B30FD7874EC0627BD896E38C61F2CC1793E66F1A905406BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Новая папка (2)/nm_image_assets/Styles/Graygray.msstyles
- Size 7.4MB
- SHA256 902f3736cf4e55d113f4529bf9ad38c09f2d1b89d75052eb84f0bf104e52f462
- MD5 6a33ddc3100e5b69a890cb393e1591c5
- SHA1 2f6ec2428b55505b98ba6b16ffa87dd3e92cac23
- SHA512 04db311811d2c5c0885ec3372afbe7143c90de30550f75f37c03c9c5ee501de6379464a4c366a80a8078cdeec4f98efc16d92272b70d7ac95237c41acc98ca66
- SSDEEP 196608:Y33333GY33333GL33333GY33333GG33333GY33333Gb333333t333333X33333GO:
- TLSH
  T14076A301369C7D7DE3A2EA30ED7A60EF462A7F559C2B852F30C1394B25B1D6174C23A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Новая папка (2)/nm_image_assets/Styles/Hana.msstyles
- Size 956KB
- SHA256 c380fb11b344573b86ac56c8aa722116ba17aa323aa978eeaa4181fa082e1dce
- MD5 7d10d18eb56f310884a50d27a730d9ee
- SHA1 b340c45a389e7bac4cd398322c5d8bdf768e182b
- SHA512 997e855ce3fc1551a7a473c29d68bb54773b02f526cd4c5f8e52b779712f7a28e2cf952f6ad99852cb3f82d13651bf73ed382cf26541d96ddd649dccfb873b5f
- SSDEEP 6144:BG+Jxbhp5S+cO2UI4n/Jxbhp5z+lWWVR6ltJxbhp5B+n2WHD+x:BQ+cO2UI4J+lWWVR6L+n2WHD+x
- TLSH
  T124253D0266A8AC65F2E36A70FD7D40FD5637BE599F38850F10C13A1E36F1A41748A3A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Новая папка (2)/nm_image_assets/Styles/Invoice.msstyles
- Size 848KB
- SHA256 7e4d628e843fd7b23fbc66e5926007bd85ddc050abbc421628d768c52de22b2d
- MD5 404124bc6ad303ce76b09124ec683603
- SHA1 4b1e94d77fca6aa8850f98784ecaa7db376b0e05
- SHA512 eb8226ff825c02f37624351e5314f995802447a01a0105a9db02c508b3e34130ece631457555c912125fc2ca3b4bee2ed6f4d030f20155c04f79b1f0c7fbd0d7
- SSDEEP 12288:ErJLAWS/QhJLLOau/5JL+u6gdUvNv///ztvwlwTJodkHD/LzTe+78:ovNv///ztvwlwTJHbLzTe+78
- TLSH
  T1E5051741B6F9410AF1A7BA34FD7C60FC4766BC5A6F38860F20D17989A2F959318027B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Новая папка (2)/nm_image_assets/Styles/Lakrits.msstyles
- Size 1.0MB
- SHA256 21d5f8facdb57bc81e5d6fc5d517990ecc39544c9d725677282e922b367195e9
- MD5 f66ebb5623beead2a76ceb096a506526
- SHA1 3c70451def1bd015dca4e0a23bfee3bc28270d8c
- SHA512 543485f9fadcf534daf7d8bf9972a0a65ed6d3a8d4e172294fbf86a87b45e83621a7b69a2cb0534a5da4f0b13e527a36676271ef8dbcb5c7e62f94a516c2e84a
- SSDEEP 12288:xGtewS5Yx/te4qhRwAteJahUmMDNEOrjprERGho63c362C1II:PiZ
- TLSH
  T12E35E5566AA85C41F3636A30EDB550FC0662BC89DC3986FF50D6393A72F1CB256133A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Новая папка (2)/nm_image_assets/Styles/Luminous.msstyles
- Size 1.5MB
- SHA256 56a6736c90ca9cdd941cb8fecc6b790fe6d2290e6cd41d31c1fa2edb7d358e02
- MD5 de3c3a1ace1989a446b9f3d593e539ac
- SHA1 496d927796a1da5dc304e578428907108911e0df
- SHA512 14cea933726c33327a4ed00632b64734b9cec705767b2eb281dff8c5add88e73116c5f95dee59918bfc9799a9225e42c3d207a75ac209f96305e4f5f1cddac67
- SSDEEP 12288:xo7EVlRWDk72plxkvM7wWlxisBJ/qEaayn19:UZM19
- TLSH
  T147755559A59DFDDDE1A66A38DC3670FC0222ED7AEC38950B1589BC0936F25037042B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Новая папка (2)/nm_image_assets/Styles/MacLion3.msstyles
- Size 988KB
- SHA256 7d312b94c3fe3b0217dac9c835f678723485d3cfcd6c7b18f29b7e00dc26f09b
- MD5 7698cad10ac255843867ea65080c6d5c
- SHA1 bd252fe285d2f71e683d47ba1a8b7f912eb23361
- SHA512 957bc322c6582a70c279e8672cebd3f9fb4b7758816b1a08f3fd66e922a8f8339c204d24e970233100ee55811cee00f143cea1cccf042f1eebd75c1836796af3
- SSDEEP 12288:xPZaQrfs89Zkwp98b8ZaoIEsaPcHT/jjjzArMgVyjc:TPcHTXjc
- TLSH
  T115258751729A4429F9736E30FD78A4FC4636BC1ADE38D62F2CC0B90BB6F144555A23A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Новая папка (2)/nm_image_assets/Styles/Minimal.msstyles
- Size 7.1MB
- SHA256 5983b59611678d194ef2a2b8767de6905515ad9a41fe679df4d8519892aaf82f
- MD5 cc3ec2df3c12283d3b4c69c26cc4e5a8
- SHA1 834ced1adc19dac0afc8157ca9d13999958afb25
- SHA512 87f51016a83059e21834f5140244c54eb883dc2ce7627d3ebb1d79f513e0b9c51f278311464aadc7fb8198407a7422c1589e1d078bddb0b9cad26550006dabc2
- SSDEEP 12288:ofeN9N4EpjWllVIsAqOdttYUE8edt9YkC72lVVo8PYedNN4k6feN5NYATjWlhVon:W
- TLSH
  T16876F842A1A88167FBA26DB4DD6CE0ECD979FE169D65D10F50803D0A72F2B11041EFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Новая папка (2)/nm_image_assets/Styles/Museo.msstyles
- Size 1.5MB
- SHA256 d9349268b5fe495ea96c25cec1b73f49220125449cf5a8acd13bb0713ddef08b
- MD5 79f8a5b702487932551a7b439e86aa8a
- SHA1 aa21a067f0a119f07671fd4b5cfbff886e0b7297
- SHA512 9422a1aace3dc024065e3e245f281d20e1f1f2acd0228d2ca96e2ac993604c204fed841ea2679743dce360294233ee95f8bd724792d208942e6b2f77a66f5b8c
- SSDEEP 12288:MhCn9dfJP8Cnm9f7klCnTd/400kXmmmTmmm:
- TLSH
  T1267543156AA8C085E163A5B0DD65C3FC05AEBC59FC2B897B3093BD0EF6B1D500C1A7A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32