d5b285ebfb5342e571c466884a3812bfc031abd5252a92d822dfaac18766661e

Sharing

Copy URL Twitter E-mail

General

Target
npm.zip
Size 80.3MB
Sample260819-vbz8ba1tay
SHA256 d5b285ebfb5342e571c466884a3812bfc031abd5252a92d822dfaac18766661e
MD5 e9c63ecf5263a71d31944db8d735519a
SHA1 aab2f8064a24e0286d868a2f9406295a677c72a0
SHA512 ac7c0cbc005cc6e54a00efeebcab057f734d11aa261da918184b370b6363a3038a1cff62bf0cb511e4697d6bf454043d9ebc41804c87dbc37956750065586e65
SSDEEP 1572864:PJTlwBPe8U9urKMmyYMtNlq8/LBicbWyBEFcmBFO+NkoqgVjydiaaNk1:NlEPJPYyYMtNA8/LBCy6qdoyiaau1
TLSH
T1A50833E8A4FE051BEF1AB377F5C19A438DACCBC998469927141C43C99C961F40BDB24E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  1.d
- Size 18KB
- SHA256 7a9e2015e113960853f68a0e8fc48e9596dbaec857b0211ca1c79bb97fd38d6b
- MD5 1293a290d02b24094201800ce9c345d6
- SHA1 68ea5436572e01e7c961ac24443e7d13d10c6828
- SHA512 cb96854d48892abae0f013b1da5f702a57b5b79a95026424d4d038f6acf9d8ee70498119ba9e817f7025f15fac742cd73fd8497f68864e5f2589303ad14c1320
- SSDEEP 384:oCPegFhkm/9F3I8vbii5+rL380dJkU13eRQbl4ZIQ6P:fLh1/TbJ+JdJ932Qbl4ZIQC
- TLSH
  T1738298CC3BD1B0705673F0F77D17A0A6F1A94C8DA2988949E397F4A8F928324D1B6758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  corepack
- Size 334B
- SHA256 dcef0a787c4654ac5c085fafa3a1e12d60d6f42e0d259c38378b61ef64295fa2
- MD5 1a27e3e2f449816f5ffcdd57703a3f78
- SHA1 b529a4d96ca51d2bb96f7868970ed39c7259f3cf
- SHA512 32c2bc00b1ac8755c571eee99a565e82a9e617bec608229992a66628b50f647848598064207c9c1631a68d709220f6b84601f5aeb8554a8c35edc70ef996119d
- TLSH
  T1B5E04FA451AA5F72491D7AF0AC599459449E43832051AE98EC1C3B41847439E72CB6AC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  corepack.cmd
- Size 218B
- SHA256 920630a1d1ec47aedea7345e3c868ecdc07e191373497bbf47fbbf5942fbad4f
- MD5 c046e14548ebb384ef71c0efea0e857a
- SHA1 504e3d339b444b1051fb0b033da0f2e661385c0d
- SHA512 efac98aadbdea59064d5752884bc9697c9fd15ad44e820f9457f679ad4e68be2e11e965af03ad70fee1f34c93c64eaf1813c60f19145ec1b693787a45c602833
- TLSH
  T12FD0127005BE4F333A5A2DF9F48213B778CDABA104150DBC7D29439202CC2C687D12D5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  install_tools.bat
- Size 3KB
- SHA256 56b0737b893d96c09bbf64acd701e73d01438f0acec81e63c9588d303cf083b4
- MD5 99990a2e67475740ebdcdc06b9afd8dd
- SHA1 1b03144138323aa1e70736ea84c3b9562b90c314
- SHA512 7f2223a9ac850b06c87758602188e46b7bb4623551d68466da343194c116daaff8bca3865dfdfbacceff355ad60921cd65f38a53b6dd80c12a8dcfbf134912bd
- TLSH
  T11A517325FE18C3666EE0C799BC3A52F5F70F501793128D15B0AB40348A527EFB27E299
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  node.exe
- Size 87.4MB
- SHA256 3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5
- MD5 f3d6b67650a9106925ff4157e444979f
- SHA1 c4eb39aa399e99cb932b3f87c2062d22d75c3239
- SHA512 749d01acffd2c2905723e371b887c756da1d2793ce1949b8ef794db63ab03a8bc3f63429876824389448ae6f91ba4abc68ddd71460b80f2515d098f5e340228a
- SSDEEP 786432:DWJVDSfPhj2e7pAp6B6hEu1J6dG/u3YFU419:DW7DSRj2e7eEu1QC
- TLSH
  T10F187D13B3A705D5E8FBDA3196E65123A932BC066F3085DF324C17261F73AE05A7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  node_modules/.bin/clipboard-image
- Size 393B
- SHA256 5d9ed1aebb5e760d7a2a01335c2e36cd195af723db3e2ae05c137b1a6cb92b8f
- MD5 2df15da3505e3b135cc29c4f49ade47d
- SHA1 aefd19014bdcedf5340fae62229473aa9e4661cf
- SHA512 596d5691aa96e7623dd63f874c5f66a4019f772a776e71e5b897fca16d7dda4184bdd5669e4173dc8ec614f3e8cdefd5f26b6e339c42c8f599bbae4083463406
- TLSH
  T1BCE0227010A08F7BC11A42B88D126828405A2343A8007F95FD0C3F42AB6031EB1EB739
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  node_modules/.bin/clipboard-image.cmd
- Size 327B
- SHA256 61ed8369143e24e0cfa01988181f4b3cfacb1e5f56a2885a4acd1d9f9d1e69ea
- MD5 c5faba175e324a705295eeed44f895dc
- SHA1 7fa6ae37e579c8775a635872c433e955b1aede2f
- SHA512 9dc5cad54d4212d5fd39943ded5b693da5ee7b44eadf389ccd17648aaae4b57067bc6a08b40e647c416d643694453d2ede5c9a1608cccd14d3e0ae421f4074a6
- TLSH
  T139E07D76F004704A72379B71A517364226F2BB48884302B6BC3804FBAB413875BCF8DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  node_modules/.bin/clipboard-image.ps1
- Size 813B
- SHA256 3037670cf999b4e12646d5be4c0e3e4cf672f4ff6bab39d4b32c545367c3a387
- MD5 d557d94c3b1e2f67b49d5371c428f817
- SHA1 f0118a5a21c0b997e57e6f9ad79dde37cfeef841
- SHA512 6b7a45218271b52544d21c8ee224b7b103f9c6c9c8d69b6bfe1179b1029533e1502993b342cc03c2af98121e8600fe4cae1a1055ee740f87b61983151c6d4502
- TLSH
  T1B701AF3438F07E6FC2069AA2277A2E116246D55B5C044F15F40C3F82976022D13FB731
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  node_modules/.bin/is-docker
- Size 381B
- SHA256 a4e83df76948974890e678cde594ed63e99e397439a862b874f0b858f17327f6
- MD5 f18d15de2cc614caca9d3f72dfbde9ac
- SHA1 371e9ff017fe08911538aaff4a76c8a4f73c98c8
- SHA512 44cf1549c1e5a95a5cfef582d0db0569e14ffb4d9398955da1827c3c1d802c818ec9e1b46115de585b6471c07a8e2c7efac40b3872c7da756e086850a8ed0fec
- TLSH
  T139E0D87114B15FB2A11982F88D115858919B3343B8043F95FD0C3B529B6531DF1E772E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery antivm
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  node_modules/.bin/is-docker.cmd
- Size 321B
- SHA256 30f3557c93f870ab7bc1f7872aacf5984cf9d1306ab940f8ecab0ea09381cd4c
- MD5 5e6e989fa7edced32cb1136fbd911af8
- SHA1 ec6e17b04cd02d21407a09423496cfd7f561a4d7
- SHA512 6488619b1cb05623273d3d2f9e26be6170ec623bee7a3e13a0d1eff39d36cfbecfa652d2f0202fd890ffa2defc80c3d273f80cff2fe6fade34e83c9b20da1c8a
- TLSH
  T1BEE07D76F01078413237EB729407674226F2B759844301B6B87804FBAB4138A5BCF89D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  node_modules/.bin/is-docker.ps1
- Size 789B
- SHA256 9289873f0542abe22269f79a09bc043269b548e090a976cd36a6d29837d67fa7
- MD5 5f1edcdd0c5f82f0cf7ef6bd14155a79
- SHA1 0aa86814f978df416c5ae0410b3af518c73d08bd
- SHA512 8b3f7589b91062532bf1dcdf26b0edbbb28e43f68073937f2d238ac2089d2ac31cd8cb5a078b1a86c780762afab94c7d65215ca25205ed52c8ab55f8f006f899
- TLSH
  T13A01FE2479F03EA7E306DB9317755E01B286E56B18441F15E40C3F92876172C67E7772
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32