823debbd09989999c37bf851037f3dd2dd10eb951e18d97a7983ca186511d8e5

Sharing

Copy URL Twitter E-mail

General

Target
PKSBusinessExplorer.zip
Size 360KB
Sample260820-pex98sbq3w
SHA256 823debbd09989999c37bf851037f3dd2dd10eb951e18d97a7983ca186511d8e5
MD5 ec6207393c0c63759827803d6c0730cf
SHA1 112944d32a4e613e3bfbea85ec4548e5918f0913
SHA512 81092b02b2e532236cecec3d1fb2f27028200af3f8695a74220850f3b45e13d420e691f9f64ed5a40cbefcb1ee18459078b32f3d3f384a4606b05cfef49d3099
SSDEEP 6144:RYA62tnm9kqp7Px+WcMPhZJzrAVJ0UHeGEnpRB90n01bBrH6HJAF9:REOnmaqp7Px+WckVzr2U/J90n01R6HJ8
TLSH
T17E742361DAC9B2A5CA2740F04F564B25BE3B27C39EBE35DAD1B0A32CC1D723507664D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  PKSBusinessExplorer/Newtonsoft.Json.dll
- Size 490KB
- SHA256 0edfac6be11732ddd99db66821ee47408c2dc1e9bed68e5ef9a8e130c565b79b
- MD5 cbd6029abaa8e977d3b7435c6f70dd0e
- SHA1 ebb89d4d7659ef77b658a86ad00dba0ead869f4c
- SHA512 96754c8a846311ca59f8ec38185c2a204017bc8bc73bae1fdee63b66f3cc459017ed34ca164b53d625abfae683683b278e1aaa66346023018411ae70fe9e8059
- SSDEEP 6144:EUjGZDUI+aj1pJcggovoff4dCWycRrMikC7qEACBdr0tqngai0p7eofLPsT:xz8Dbvon4dnkKd7Q0nyofLP
- TLSH
  T176B4394533EC8727D6FEA735A430151187F6F416A3BAEB8F59429AEA0D977804E20373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  PKSBusinessExplorer/PKSBUsinessExplorer.exe
- Size 741KB
- SHA256 f91f708564758abc0dffb1201173102d6b3ee8fa9336231cff106970a25dee37
- MD5 7f1f6507dd64778c9ecc44bd9bddb161
- SHA1 2cfac55b78895526bb1c026c588ed71ee1f7f8aa
- SHA512 81ef3ff7d6597a50c8bdce62a3efa8f1c9a8a9a860e1ee978dc0ea371f36b90fb7ff25482fae7423201f8af98b242e7f1befa6778de970b22237fadbabb71a2f
- SSDEEP 768:wk0XCbZVw7ndazxqR0uRTsdkbRmG3pZ0vwKMWkbtmGEpS0vwp:gGZVboRmG3pZ0vMltmGEpS0vi
- TLSH
  T182F45636D54349D5EA17B9FBC40BB47042ADECC692F2411A15B73B9A07392A3DDE2E0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  PKSBusinessExplorer/SerbianAlphabetsConverter.dll
- Size 9KB
- SHA256 ca312f1e95db2a66a32ec09266dd174fc1aa1e35ffdd4810f30dc6b6c62ff4fa
- MD5 1f854046e121d418b0d146455ce55213
- SHA1 dd090c6996fc8b45660dedb112c7d3504fcca4f3
- SHA512 9d473f44b512d32ffadb9eb4274d1da326edb26cc7082af30bc1969f03f960f648f7d047e050139d9f27c56c56fc91ecb0bb1276bbab7c06c06484974e31bf2c
- SSDEEP 192:mP4qKhAnyeA5xiPjQIZrYRS7blRAnKyEF8f8rnfhndySwB5BS:mPZnyeUi7QIZrYRS7blRAnzEzThcX/
- TLSH
  T13A124203039F36B1EB2AC639D4F90306636CB77EB911EF9B2C8B15DDE45A2408B72945
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  PKSBusinessExplorer/System.Net.Http.Formatting.dll
- Size 181KB
- SHA256 1c7fa94de5e727852934387b6b0094abc16f660c6c91b38fb3f5bc580cfbdc1f
- MD5 589e1b764c0dc53bf645054960626ab1
- SHA1 a5616537ca4e4ad5eb0beb48863ae65e9ea91080
- SHA512 dfd6924dd7baf7eb1b8d3cc862fd7fb4a311818ee5684c7a85e3106ead0f3dae2a79956aad9b5404c88a1d2607cad627d0efd729e9a9c1c1425b907884fbd1d7
- SSDEEP 3072:I8eNPCLiHSIZ8gcAx081w88sss9wNACJ1xZ7iOo7EM22PBdc:xeF5HSIwHACRVS9P8
- TLSH
  T1DA045C6977FC479ED2AF4AB4F4345524C676F6426836EB4EAC8C90FE1493380CA21793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8