1a4322bafa8bed715f95e978a6dd2f55ce880d76011a0817912d96aa7e4c11c6

Sharing

Copy URL Twitter E-mail

General

Target
SMC v8.beta37 (Linux).zip
Size 195.3MB
Sample260820-xmglfstepa
SHA256 1a4322bafa8bed715f95e978a6dd2f55ce880d76011a0817912d96aa7e4c11c6
MD5 062225be8ef809b75445b5af76eb065e
SHA1 8f3ecd955e8b442716d962dd479f8de0c2ed1ad1
SHA512 09c3f6bd43210d8cf19a74b170b82946c91bdcfd5bd3032111aba59b6cf57b804478d48649bd758413afa871deb07f0711106ba9b10a839672d07afa689138dc
SSDEEP 6291456:u3kP8alTRn6SHfYuqa+1Wpxwo9SWoxpjFT:u3zapc9da+5o9NG
TLSH
T1A4A8334692657001CCDF8237EC1B4237A884C14DC42A99767BBED7BD8F863CA5D319AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  Super Mario Construct
- Size 1.1MB
- SHA256 b5d2150a17a889d8dd38ae3efcde02c6895b9012a0428621c674e7f8b9048d69
- MD5 27b974115c72afe89a72a5a6421fbabe
- SHA1 1b60e9f9134cdf62d2a443b691c9784ad1456ba8
- SHA512 c8617310d11c494c0695db7e5c2a886f7c8caccd4e9e8f6452ff536bd1aff81a968147b2e5112eba53b0a3b95b16e58dac0d5f7077be0c5a58d1d09ca68b2619
- SSDEEP 12288:2LI902jRhzMpnjFpGdq4k/gvoC7qntvz30wmaF:0ojRmnjFpYomktvYP
- TLSH
  T19835180AB26798BDC0EEC8704B2AD52A9874744622737D3F36849D710D97E305FBEDA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  libEGL.so
- Size 258KB
- SHA256 745d58be8f6855940a863f2580c991bb8149dc74180c9be94771e8b8fb2db546
- MD5 0760ccc4fdd409f4db243265a78ed7ac
- SHA1 33e90127c4d9d5cb365f7cf3e314a8db7d2c7407
- SHA512 9ed0b57ef2ffd99381070ea8d5467f37583029d8edb2f31d2531f1b521f6e335a213b8a973f9eae94ecd0fd43324839dc8f5fb3c217fd6eb51a58ddedf1584c2
- SSDEEP 6144:/MJSxKOFsJnQXy/6YgQY9kbImaJLN+wMGNWX:/MIx8/6L9fu
- TLSH
  T1DA443A17F2A0900CE4BB85344AC7857197A0F456579B72EB2B40B6243E7DCD29F7E3A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  libGLESv2.so
- Size 6.0MB
- SHA256 69fcbd20e9f005fbcb6b4eb1a4e92eb9cfc55cfd9cc5f92df929a16db06d4b03
- MD5 023cbbddc6151e67cfc26aabc159e914
- SHA1 c21cc747cd22fc19fd448109558487cc0db00114
- SHA512 8ea1679a86694d1aafb9d24aa95ec3048ad636b92c3353382dc3c5511cf67f071ec48ade6ae545f8b5d2c1272ebf546a03c37a1161d250f949c39c86ac29e917
- SSDEEP 98304:xHc+yPD67glPY+SMt3XAgTzQBvY8cHFUB588jxgr3RN1rCAyVnziQCkk:tc+maIQ5ut42k
- TLSH
  T1D0565C2676A0804CD876D475679F8A77D620FC962328B6C733887B192FB9CD1573B3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  libcef.so
- Size 240.1MB
- SHA256 48d317ad93033f164a1f8c1fa00e72b5135efc4e14cf61e1d5ccf66ea4d96f66
- MD5 23b690f8a1aa387a19c8506d53b59d75
- SHA1 9c1a25f1a8ccd77ac9ad2b1203a0770a34ac45ea
- SHA512 6ec4f76daf3eb8682c4922ea6b38131c6227a113ef71ba7e9b1decbb58e300249da214d3593748e3c3b3392ce791199387fff79e0ca89f59dcc38ceb93f7774f
- SSDEEP 1572864:RXWrQg9wCkJUzF0lKEEVJWGiRj3tz0vFPs7RPC4il0JMve216ea/qTroRZH5BTUT:lEw/1C0JMvefwop3cYdCCwRuY
- TLSH
  T1F6C85A2B65A0C05CD47680F1679BC5329771F88A2324B7CB1694FB612F79CE6733A3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  libvk_swiftshader.so
- Size 4.1MB
- SHA256 996c68d59d9c808a6543224e151a8a49aafa3a3e09227d6a614a85fde0e27858
- MD5 e7533864c9e3456cdbaf2a57b3fdfa96
- SHA1 74dae9dd9e50b02c7ad427c7ba1577c1cac3c213
- SHA512 231e39837030b3228f438767484afe302087ff410edb382546cb7d78c396c4dc31ed41fc1b87e2c24a6c032054903f4770e656135c0445a7917af97236c4dadd
- SSDEEP 49152:R6qPVnYWO6vl/YeBKpdq8DFkHTa+xf0T9AcxxQ3PEyD91xzTcPA22ZrlvKHIQJ0+:R6g7Om5YwAdrd8vq3QiK
- TLSH
  T18E165D277692BC9CD45590306BDF86339B11F86563217ACF23D06B262EBACD1672B343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  libvulkan.so.1
- Size 642KB
- SHA256 cb4bc0fffc341f58f48a72e32714d3029b3ba14a6904150bd23475c8679af068
- MD5 d79da05197bae859adf6295e781b3b92
- SHA1 38ce8c26e50cc18fd14d42e9beed9243c5312dfb
- SHA512 ec4694921f6836e8e529796598fc9c25d3cefdf770b84d6d42a0f0f7f3e107b5689ab0edba5c05fcaa18d8e5fb4a7ad4fd93e25b3f3dbdbdbc474c578611648a
- SSDEEP 12288:iWez0zAf6k7g3YHxoJ5RW6tdv4SCWCWXzFsl2v0Y:iWs0zAf6k7g3YHxoJ5RW6tdv4SCW9lvV
- TLSH
  T1D6E43B33A6608538D8768074A8C6C51257F0B882A754A5CB12583F117FFACEBE73EF56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  www/SVG files/keyhole.svg
- Size 402B
- SHA256 50d0936883b8cdb919c7ef0c7b170566eacc2997bc8d6d95e0aa5aa56b81865b
- MD5 d026ff63c99bda34abd329ae18a7e4f2
- SHA1 7f0339a18978963011291ddb996de35905219dc2
- SHA512 c111ba454c3ad058cf0abde7dc72675b2a7c4bf88dc63636049327ff77e3ad2b631304f821e5df2ddc2e16723be27df930d85a86441622060652b10ab244b944
- TLSH
  T1B6E0AB698F9EAD3508558BB89FB886C33031389420D8C9C8CEC015652015BD0A509B90
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  www/SVG files/light.svg
- Size 367B
- SHA256 58ac3535e8d7f774e53e869e5ed4645a1480a57e2f2a10bb2b7df2ccec002896
- MD5 17e3960bea8d72219df07e546867f41d
- SHA1 adefd81e2541551e29be845046cd7c3e1faa25b3
- SHA512 009a37cfd9acef83adbd9c89db347c4a64384aa58a2e4bc51aae36421bc215ce0f22ce3279cc9fa15de8fb4d15f4ebf39456280d7f8567fcb378600571c0a912
- TLSH
  T1B2E0C00C57555C7041F08755B77AEA9493AA82C300D312CCF0CC243ADF6527E7A931BD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  www/SVG files/lss_logo.svg
- Size 8KB
- SHA256 d85de6f16af6e30a1c379e8d7f4c5fbf4d00204f661602f02025a7ddb555d6f0
- MD5 675dfe337ffbe74c925cd0d30a691ca7
- SHA1 8603b841544a204b07a9afc8d4f6ed814114ffb2
- SHA512 228d9d954232eca8dc784bad3f19aa39a2f1013ee380d4eb453784fc9eba096a044a32e83fdaa9e90efa6305aaa58a956a638929414da6a44192c6f04350573b
- SSDEEP 192:E8mPoVJ44KI45l4Y/iXrp5cIl3ueo1DFryn48L:E8mo44KI0F/2rp5cU3ueEDFrW48L
- TLSH
  T11202961AF3C8443A15371290DE98B886D02B3153AB243D6A7A5D0AB5EF725C7B3367DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  www/SVG files/outlined_circle.svg
- Size 466B
- SHA256 f748203a21e5b7b61468ee5989214900dd720dce59f7293271cbcfdf2223e355
- MD5 7707505f0d3b2e10773798b2834ff34f
- SHA1 194dcddca77a5085b333fe4b12996beefeeb21f3
- SHA512 74dba7efe30bdc7b8895b45f810e6fef7258fbf5a6ec1b234fb8a0d1d90a67cc8ef93923c249ae6f1338dafbd85e371fe15cb035daec53cf62d940066a317b49
- TLSH
  T1BAF0A77A92989C3BB529834CEB519110F75A8586A5D68640F29C2F1F5B30CD7185B378
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  www/csv-parse-sync.js
- Size 47KB
- SHA256 2c13bca4c65a1ea9c6b97c051af7cc3b5fd6f3774b6de8a3ae63c46a71cebb59
- MD5 7fa797b039d1cbbdad42892bcff5c556
- SHA1 8dc644d7f8ea06006453489d97d77216795d3f8e
- SHA512 cdc8f713dd1aa8f617e86988854f57cf2d5162a43c8e65d45e07d1d18a2e2f53a38669d0b2107bdd7e3a55baaef05ac832e1d58b78e7f780cc219c5d409fab80
- SSDEEP 768:9mHlq+NuDyJrqr6g6gpbsXebjUbmA6c5gnYwW9THYWh/OmJ3dLKOX4vahwfgS/Ze:FyJelsX20/bsljSkmWLpK7Z
- TLSH
  T11F239442B68461740BE221D190AB500AF078562DB49D48E8F665F4E738EDECFD4BFE39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution antivm
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  www/csv-stringify-sync.js
- Size 30KB
- SHA256 f1aed5fb0a8c4cdde8c057704fbef3473b5d7801029c1d72b089b0cc8e322ed4
- MD5 bb8912e226e67a1a28aab34fcfaaa6f0
- SHA1 6652ebc06b9a9aa11cfe26c5488ab47150843962
- SHA512 bde5f9679695c23ed4099594ecefdf3a3d8fc4052ec9b442d45bcb437370954582da7275013b2b350d0b84bf2fe44fbb0575158f7c88ad461e23d39b189a1c3d
- SSDEEP 768:ypWJcb3sf+XNtNX3CM1rF8fiH/9OzVAcDKfzqUZ+Ku9sMiGR+jR/jgEw:Ey+XNV1riERm
- TLSH
  T11FD2B649F6D5B11806E325C1409B540BF178AA29B09D18A4F366E4E368F9DCEC4BBF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution antivm
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  www/index.html
- Size 985B
- SHA256 97b93b0800ff1d938d1fe6ed8567385b4633388bf714b0f8a5e844aaf805dee8
- MD5 e01bfb1e50ea8fb13d095aaef8035577
- SHA1 e83d725c8edce9220c203e9e699d8a85bf67b0bc
- SHA512 b79d71f2d89edf82818eb37e90a830c975acdef22513356cda40a8aee15a5efb7e2d463b106d602481c403e0309bf49eebe218b3da1c0965139224701d14f8fd
- TLSH
  T1A311212F6CB3EC5A136195927475F40909C28D64F711DF5070D9E3775E817C8CCA74A8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32