82892487a01ad67b334eca83b54317a7c86a03a89cfadacfef5211f11a5d0536

Sharing

Copy URL Twitter E-mail

General

Target
wayland-1.24.0.tar.xz
Size 236KB
Sample260819-ahbhbatbnf
SHA256 82892487a01ad67b334eca83b54317a7c86a03a89cfadacfef5211f11a5d0536
MD5 fda0b2a73ea2716f61d75767e02008e1
SHA1 0145501ee1ab8c1a168b9ad3f27b7b5a34fce6a0
SHA512 60216602cffd1473ae15381f9e9a6f3829e742cac83843ca65360ba78bcff8d9442f15eb6a6d5d29c8f74dd920762ca1605f51658d22a1d3c18e338505b9f974
SSDEEP 6144:EhO4L74horSNg/L+kASTD28gZZKrkwg3yzeas+:ij74horSC/K8TD21Lzwg+ep+
TLSH
T1D634136846B4DF6D373117CDE0B8B9991DE1C2DE4E2EE6DB14A10804EE73C7AA55208A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  wayland-1.24.0/.gitlab-ci.yml
- Size 10KB
- SHA256 ec14a2273ef94b0aace7526fd5cec24cb4f814aacd9969c51126ad31a8a70bd7
- MD5 4d13f04adc8b630dc2726e27ad4f4fa3
- SHA1 28e52ec50669cfeb1deb81b28bafd4fa18e7f5b8
- SHA512 5e392757ede1254e39ee972b707a4ca31181762cc2ecb09bc19674a76cc74c8ab81d508045dcf52e625d0f6a421f85a6f22a8d2fbbf1ddb19a6afe8dd90d73e5
- SSDEEP 192:8CPoTjwfTTY+N6UmH4DF5re+yeHQ7V7aboozl7X8dYUn9i:p8+N6UQe3wxGkozl7X8Fn9i
- TLSH
  T16F2273B36D403B39F89810A9A2FFC289E63AD87BE390FA7574EDD1485F979110137492
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  wayland-1.24.0/doc/doxygen/gen-doxygen.py
- Size 3KB
- SHA256 27d546280992c5a7094d1f40f2ca4c7b45f8d9ace18b37d34ca3149f4a211e56
- MD5 d6a0382641073c11c7307e5224d52160
- SHA1 c6940072efa0c7cfbff798327d27e112058f24f7
- SHA512 ee630a0476461dfa60023e93504eaffd706b46de40a3ac3f1aa8d1231a0f74675c2fd1d4466977507ed7f50cff619377196a05813179335922f35683607e968c
- TLSH
  T17E618236E51E12B0436381AF19EDAA92CF21A51F2F557815B4FD16106F2EC2803FB2F8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  wayland-1.24.0/doc/publican/sources/images/icon.svg
- Size 2KB
- SHA256 1d29def7fbda6542c15288d6a5a2caa6607410c0a5ac911874ba0fce2d64434a
- MD5 9de3a2a5b8a5740cf7353671d6c699c5
- SHA1 e3f9b9bfeb765c5879570e6c0296d01a1dd548c3
- SHA512 91be4a52fe2c51e171690c9d3dd1828cab359c64d42c8965fdb7de12dc022e7ac49fb3a54d66c41b2e26c3a70ff879a22a3c79e508c4a3f2fdd9fc3100b24824
- TLSH
  T16351B618D3DDE832F329C78CFFF08412141A8A936B118591A1A67E6CFB376E1086E5CD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  wayland-1.24.0/egl/wayland-egl-symbols-check
- Size 1000B
- SHA256 c83693d752622765b4cf3804d6a51a3977225d941e9a1e89b21101bd4174a770
- MD5 c29d1fa57438c15944fa649805ca6e05
- SHA1 e805a049236d239643fb2a90eb34b9c0a7713d6e
- SHA512 64935ffb0424abccd0e262c67db156eb43508241cd857d23012f25928e7b368503fa087ba487f9192967e09b4c9e51321c4a79e22e0cc64659f458612542cb01
- TLSH
  T1E911C20DF8A7EA602AD892F1674BB96250B0810B8452163530B3C0799DB47C5B4FA9FA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  wayland-1.24.0/protocol/generate-shm-formats.py
- Size 5KB
- SHA256 9543c83d2a8805d4666163f405aba49e8e6212439b6d948510a342bdca7757bf
- MD5 c22efc2c5711afcbadf8e7b86ab2da8d
- SHA1 0bd567649a996885a41f617ba54e74c2508afe75
- SHA512 831cdcc88ad1aae319f7164306773fd45e1ee10b1866ef81874a68c84a778323453c031ff5e788676cb00dae46f34b8b60cf942536d9b426479d8602b97094ce
- SSDEEP 96:94iC6PRcRYYzcWa5B3PYILdGQLWRk5iE9sO9sKzI/GTtYlgvsZAmiN1bOdamjdAN:946PuRDfa5B3PY5QYks8suT+lg2Amk1B
- TLSH
  T19AB17604C479491150E38D6C39D6E0963F54A6335300A61D7B9C94E8AF46EAE86F37ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  wayland-1.24.0/release.sh
- Size 1KB
- SHA256 658fce23b57e1727d31e04aadf002aa4914ab93a0321f6ae3be76566b0972804
- MD5 9f09d38216d23303ce25b58d37e6e702
- SHA1 a9568ba061d93000b3e50bbd2bd053f3f6ad031a
- SHA512 9915b0eff214fb457545262e02e4207f851906ed4cd7dbdb2838a6ec0b55ab2b9564dd0ff8ae79b427cc2978c582626ca27a6063c1c69084a4a8a09fe08794b5
- TLSH
  T1244141797801E6F3B41647217CE95213773DE6FB1ECC2D5451BA6E209228E5EA2E0117
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  wayland-1.24.0/src/embed.py
- Size 1KB
- SHA256 d5e2862c0289d37045f3586e3dc51b5bf6ead6760164ec5e08925ac7cb7e678e
- MD5 ba4ebf40c12f16420a738141d2738d47
- SHA1 a8ca7686f5b42dc6d9bbcf6b9b1d05adaeaf1a2b
- SHA512 69574f4a0b9607e5ef32588b4224ea742c89b69684c47451403a64785cfb63c7b447a78de22193f071ea5ff3f03ec01b53062e09af778df77057d946e47011a2
- TLSH
  T1E431190DB2500B3116872254A838A89AB31B701F762B384020DCF281476905AD6FFCB4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  wayland-1.24.0/tests/scanner-test-gen.sh
- Size 948B
- SHA256 0fdab57f6cf36d7bdac256108b0243fac10489b77c66d6942273529af188dbad
- MD5 b534344015e036ebffc8e3b46d05e467
- SHA1 52c6dfe8633375ebef5773c0a07556a166012732
- SHA512 1b1630de0f016fefae0a6ad993121f9c6830a680c802db2caf0e1bab7897b6b663f6cb841a97e8ca94c1b97cbda18d2c28b9898f8ae199a60f3fd174048a6142
- TLSH
  T13511BF306A8B5C391056C7A1AB00D09C393A93C4D6BB9E727BDC8A4FF954C42A22CBC4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  wayland-1.24.0/tests/scanner-test.sh
- Size 2KB
- SHA256 61c3cdf8b3a91ff0d37c2cca587a017cb2e8d6f50c2173351b27c5be4ea6330e
- MD5 8198f359bc877c5dabef55c4c1fcf78d
- SHA1 b6bf2798ef1f01ef6049fddf19723c56c951db6f
- SHA512 57e0ebe7d66f3af64b46b365c2215f28e979b6faf82ea7d5498ff9158508ecf70ce3921d3d23784dec12d19376f1ea1a6cf9f593dab458e3b954cf571733b246
- TLSH
  T1655198747C94987E715F52B0BA8890AC743F83E1D7E56A2A27C98D2BB550C81B63CBC0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32