11d38f2ed878489b2c3d02b3d1a67683c02fbfb3d265876b9ede749a8dff5f1c

Sharing

Copy URL Twitter E-mail

General

Target
llama-b10549-bin-win-cpu-x64.zip
Size 17.7MB
Sample260821-pgj6dstxew
SHA256 11d38f2ed878489b2c3d02b3d1a67683c02fbfb3d265876b9ede749a8dff5f1c
MD5 0753f8e913582b1be159a5347d3ede92
SHA1 0b1fdc91b8676df54126dcdc6c8eb12e947a2f27
SHA512 d15afa96ebb8feb5a4dafa24a244f639457f06776a0899ca4ba054d8b308f558c43036ac4e0bde12047ce40df3ead4016b01d3c03123942cc57603bcf2bfcd21
SSDEEP 393216:Oh67XuRE3lUvWZH1HaDbRYpZG+0SiIV5QP2jQJr3gPh:OMKRR48bYGfDIViNJr3gh
TLSH
T1591733D9BE509BB09EC938B1B18ADB2D1087B0765EB30861241CDFD14C5F9796F28E39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  ggml-base.dll
- Size 756KB
- SHA256 d386e77de852d6cd6c6e6ad90469b26a7c1c4082d15a9f04c60698a52d6b19c9
- MD5 1c96f204e567030997c330fcc80aa288
- SHA1 9660f5b6dd9d360164a5ea75ed12eeea906664b2
- SHA512 b255a94aac60429e258602e81c715674748ba956b312aea2e912e457d639c4add4d4d7d6fe9e74fcb9fc9d6f499f7c5efde95c5fa674e25ea12f35d0843a4930
- SSDEEP 6144:x0H/TZ+mTBujn2gnqAjj+MAtzAMxNSejCT+fvBq3vaxvtccK2br4xwws6r4rma/G:Ums6r4onszYmrIYSbJJ3VcwrcNx6t
- TLSH
  T1F9F45C9AB599D47CC163D0311A49A777F921B8C90B206DE713E0C6353FBAAD01F3AE16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ggml-cpu-alderlake.dll
- Size 1.1MB
- SHA256 0b330dfb95a09cf493a621d65ca4aaeb692d61f242b9c2b929a8a9327b142564
- MD5 98479d614c396b3a6a05109998dac127
- SHA1 d9866d465210e33c7ccd8a13e2847f20ae16660a
- SHA512 f07c382a0de1020c219e6f54a21b4a7c9abac215a61a7cceda8d497899fcb440d0e01210fc62fae5a92e40d396ecc146be3d2e1d749234840e7a34c077ffc3ec
- SSDEEP 24576:UD8YmHkntggYm4Ck1BsYJ5WGMX1LTQz9BNG1Cr42obVRFFV:08YRtggYbCk1BQ/FLTQz9BY1Cr42obVn
- TLSH
  T191457ED7FA83809CC17B84719A58A7B37912BC99C9143F7347A1C632367AF90BC19B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ggml-cpu-cannonlake.dll
- Size 1.3MB
- SHA256 291b708a4d9efd8a05307b35f0416e016056b6169c1101f6d2bd341927df808d
- MD5 651534f375ac1383c78d321ce1d27cf5
- SHA1 8c68a6878632859c05276f19dfe43ddc414b4473
- SHA512 ce6375be2b1ad8084fe92bc6f7ec91da90ab1684156b3c023994c887301d1bfaee73856895e9f19519bb0027eda068ffb172f8f39a0ccf8aad33b758311596b7
- SSDEEP 24576:BnWH7hdd66dek6wIU3PTgM9amnhAnOuJygSXDklZSdwFTaF8ibtIxi4/i4kgx0H:FWHRW9UfcM9BhAxJygSXDklZSiFTaFXH
- TLSH
  T100557EEBF65791DCC0A794709B16A3B37562FC9888107E7387A1C6352A76FE0BC19720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  ggml-cpu-cascadelake.dll
- Size 1.3MB
- SHA256 5caaf7ceae97cbe7adba1e9cdc4fe5d7db0f5ee7f49728d15536ce5d5e99df2a
- MD5 7ded17bf9e70e346c651e7b6fe2a2241
- SHA1 45ccd8d73016b357b6503b50a0d89de5707b9cec
- SHA512 1ea80caffab4328ba144ddb56fc489dbe4ae9fdde85cf893a096d26282b0d9f65c40726b620f1144df351816bddb22be890cf3fd8cf5ff6b677cad0f32f336da
- SSDEEP 24576:PsrCzDa4ACKCSyRH632PGMLRpzc7DRcX+zxDB2lVyiFNFMtpSYYNK:ErCNSyRa32LLRp6DRcX+zxDB2VyiFLM+
- TLSH
  T1E2557DE7F657919CC0A79470DB1AA3B37522FC9884107E7387A1C6352A7AFE0BC19721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  ggml-cpu-cooperlake.dll
- Size 1.3MB
- SHA256 b3278dfd6a72e9e91da7a7f12af409572573ee5e6cbfb3aa4a29912935c1c279
- MD5 d659ad0c8a2f34bc8e15f2535e3e25e0
- SHA1 d44dd8daca474318427afbe9e2afeacb54e7b56e
- SHA512 3f8b9348368a2365e1247f346105f6af1fc1cdc831e49c5f8284dcc220eb7c75ccdc05a11017e73d11106039a3ee15729e940c499c96913ecf2ffce14c34c212
- SSDEEP 24576:GS6nFSen4h+RshbWXWLomWt6UlsEVLkX/qEc7BhveYbFsvbtXd5jA04:x6njRshyXWit6UDVLkX/qEc7nv9bFCbk
- TLSH
  T151557DE7F657918CC0A794709B1AA3B37522FC9885107E7387A1C6352A7BFE0BC19721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  ggml-cpu-haswell.dll
- Size 1.1MB
- SHA256 8f1b0db3ca3f36c4f4c16423fe5352a61cf9f6e4d12746b2650fd190875dba42
- MD5 eec39506bee9601bfbec5b1900a4144b
- SHA1 bb904e0aa9d37535cfb7d51bf93a71ef3e342c4e
- SHA512 8b59c2af418d27b48d4356ce9d2152fb4bbc81603f7519501673b7dcb802023960c47cea7bd294e94fef47ad2e12a57598e04e49d99d3b09ea834dadd1000afe
- SSDEEP 24576:wrQ0nlcLvaXezRZSpPUlcFbi+3LbtTAfnUSOlS4bo3uvrrWXd:IQClMzRZSpUlcV7btTAfnUplS4bo3uvo
- TLSH
  T1EB457DD7FA83809CC17B84719A58A7B37912BCD9C9047B7347A1C632367AF90BC19B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  ggml-cpu-icelake.dll
- Size 1.3MB
- SHA256 c00df354322052c8540f40255aa63d50b8c9e5ab4e848e4eb0759f1edf9a7c0e
- MD5 1bc2c3de96a98f9e3fdb3c54810c9e97
- SHA1 6e2ea5ae5d08854146c2540d061f9e7ef938e507
- SHA512 e763ddfe2c82f66ea89e81e13c536075eb0ee7820dbb7d647734dda46e1c32a40c201e9d6527f9fbb29a1431c3a332960da58528aa8eb5a8c9273f087b76fb5a
- SSDEEP 24576:xRS/58zz7UnErvBtA7QBziZqmW2k9XyB9FX49GmTjBQDiFYbptZjOOOOOOOOOOOP:bShOZtA7WzifW23B9FX49GmTdQDiF+pQ
- TLSH
  T176557DEBF657919CC0A794709B1AA3F37522FC9884107E7387A1C635267AFE0BC19721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  ggml-cpu-ivybridge.dll
- Size 1.0MB
- SHA256 dca3c08f4fbc36d7fb96ffb6ba5c10de58bf0eb98dd74433dd88cca047011eed
- MD5 447f66a6ae331fa83aa5e1d31ae8b0f5
- SHA1 d2b29448771ad560f551125047886888a4fe4627
- SHA512 2251d9950da1e65d75dd05b5e15f1505f0ebd78ee7c6afcad0a279d35b916eb286088ce7867f6c3562906d3e0c20c0687d507b7e375153f280be0a59d8d4b72b
- SSDEEP 24576:+vAcPDdJog6wlzDzkCRPL02bybYfgDvjcJCNYzTcWtybJvyuaapM8EK:sAcPDdJog6wlzPkCRPLRbybY4soNYzTp
- TLSH
  T1DB355BDBFA83909CC17B84718A18A6B37952BCD8C8147F7357A1C6323676F90BC19B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  ggml-cpu-piledriver.dll
- Size 1.0MB
- SHA256 5255a9921f75959c53559254b94e5ee170cc869e5ce1f46406245be8ab1f14fc
- MD5 e7faf3ba7cd30f71f45b048df4561822
- SHA1 05b83cd9bbf19356e95cda696364d76dc3c697c6
- SHA512 0e823702785896bbdee74f33294d1ff8a71b560375a8221b04b77c095fe3820401b8a131544d6cdb898d08af2852a6fd8e8ba68f275101f2a708958eee4b04e5
- SSDEEP 24576:6BXvnTF/V2T6WeNVgF/Xso9C/ogeVV1hXl1t1yTZ/jguFXrOHt467MaK6HG:SXP9V2T6WeNVgF/Xs2C/ogIVXTt1yTZw
- TLSH
  T1F8355BDBFA83909CC17B84718A18A6B37952BCD8C8143B7357A1C6363676FD0BC19B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  ggml-cpu-sandybridge.dll
- Size 1.0MB
- SHA256 16d9fde85568829bc77f9c0edcb094db3fc9d719d3fc004c2f2291a92bb85d39
- MD5 9828d1d94acb985568763ce7d5b4af49
- SHA1 d95078d9288e60d660d8732a4d6abb246f3cd8df
- SHA512 b758df5c59727725d7d24771bb86c20c7d40e9aa6f70f40c3a2bc6f762440996a3ba9cb503deef71c266ababc5bab19c8865b716a126971ab57f6f8a3c86b50d
- SSDEEP 24576:gUjM702GXq37uimgL/hvnjpkXBRby63Y+1a3P0X+mETOp2qIGvKCRuNL42sy/:djM702GXq37uimg/hvjpkXXby63tSa+e
- TLSH
  T13D254BDBFA83909CC1BB94718A18A7B37952BCD8C8143B7357A1C6323675F90BC19B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  ggml-cpu-sapphirerapids.dll
- Size 1.6MB
- SHA256 743b90dace4c23f55860cc3062a9b1f43c4d3382a25aeb8883f763398ba314c2
- MD5 ca5dbc3cf1c3b3f709446748f3cc622f
- SHA1 382f30008169ec625efa6ae8f059a208a1869337
- SHA512 6dfec2c029602369185b19da474ca26f4333ba3b4aee442b4fac684c90add0f9d5830051e40fde7f803b01d3a8d0e0c2ee27a2eb73b6bc63470458023b0fdb44
- SSDEEP 49152:lRX/+PrK4kYObU3dlDlQnP7XnQrXJgDwryC4RFbotBf:ntylQk
- TLSH
  T1EA758DDBF65B918DC0B794709B16A3F37522FC9888107A739791C661367BFA0BC19B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  ggml-cpu-skylakex.dll
- Size 1.3MB
- SHA256 e3b64436747559b0263aaed64d39157ed39eddb13f45c93ced37ef5109f24bca
- MD5 b260481b7970e069a0d7098ba2db5c14
- SHA1 4c22c42c89ee992d7f94087f31031b622580209f
- SHA512 08548de2619721f54f4eb8d452501a7ae935c8d47bde85455beb26373a1f21eef34b067b37b10940b4adab9a5252d04269d9a3a58be59f699ecbf7a133f50f09
- SSDEEP 24576:6KSqVNfx7wdYUDFVrQR7/ra9KQ87Ak5Xa02mkwSPdpRFCX0tAQekrk2OOOOOOOOz:hSqzUDFVQRva987Ak5Xa02mZEdpRFY0L
- TLSH
  T101556DE7F65791DCC0A7D4709B1AA3B37522FC9889107A7387A1C6352676FE0BC19B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  ggml-cpu-sse42.dll
- Size 858KB
- SHA256 56f01ba7bbad650def213973585a0ba1ed7818e956bca5244bcf8ab4436c5e55
- MD5 9d3aadeb006a31b61258fc0dedfdca22
- SHA1 e0650d19c2690245412c745f65444c68ba6a7465
- SHA512 f3850071900fb6e2a90d0813a6fdf6ec9f666f19e0a67833566b8da412a5f45b2b47a4390d82f3e551e12a5dbdfd767b397085a4a920ae3c9f6252a0e19a32d1
- SSDEEP 24576:CeOU82BBahV+06e50gwWt7Pogfp9TrZmAlQa0B:xOU5BahVRH50gwWtMgfp9TrZmAlQT
- TLSH
  T1EC15398BF99790ECC0ABC4744718A633F952B89D85143AB357A0C3353A75F90BD29F26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  ggml-cpu-x64.dll
- Size 851KB
- SHA256 c6e70ad3b10e7c30e6a859a14b2e1d26c600b6954b4a6b3dfd2c192b564017e0
- MD5 41a62920f108c6d7f76baea27f9a9dac
- SHA1 da21db32232bd370eb4be129da14adc266683ca8
- SHA512 3f38325695fd9e10b28344f9ea3304002593c4199aa6d13e3cffa01afe8c5539cec2e3066cb9a12f6de32cb079efad266b180208dc2d6c46dc0c86700e8e4543
- SSDEEP 24576:5SRzu0ejJrpUbiXU6UilyT9ja/btQhg+o7MNv1ymyvT64D7s34jiJ:4YPUbiXU6/yTA/xQhg+o7AymyvT64D7/
- TLSH
  T1420539CFF99390ECC067C4744728A633B942B89D85147AB357A0D3353A76F90B929F26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  ggml-cpu-zen4.dll
- Size 1.3MB
- SHA256 58f19b74ae95866df1745a739e9e326cfef56c6523f2d54f1b5d02b6687f0441
- MD5 540a69f997d8942bc9086b0a14ce4578
- SHA1 a791dd9aef748bb656901263ef0da4e888baeef7
- SHA512 cf02638980c8b2d26335f840a2e2d26cf9e26ce91521c2c7c38d8f5e19fa25166596140895e51bd233b38c7891e6cff8f64198f8908e2645892e0072449826bc
- SSDEEP 24576:pnyu/CzSQ7U66qX6UFBD7q9C4pbRe09liCXa3iOXUsTuBFtAhty+He:lyuqNX6UFZ7qNpbp9liCXa3iOX9TuBFB
- TLSH
  T180557DEBF657918CC0A794709B1AA7B37522FC9885107E7383A1C635267BFE0BC19721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  ggml-rpc-server.exe
- Size 99KB
- SHA256 3f45c15c1d69865a8326f2e20329668fed7900afe89b4f9ec7c8610e7cd85d83
- MD5 c14251b2ae50b3e5b7406b2499ff0521
- SHA1 7ed4a4b0c30120c46e15c673bbecbe8286ab2baa
- SHA512 856316d95d63051039f5316c9780c9777398ad844861eeaf75b666d534f20e570a769f87a21fdf7bf70e8eb02a2d9a05f8780742b226ddfb72356a059c0de56e
- SSDEEP 1536:AbP8R6mVyxdrFmphTvuBlC0rbfkAPJvAkaRVOAihspvpBrF9BTFQUiy6:AbP88mQTmGXrLBvAF2cfbxQn
- TLSH
  T1BAA32B07B90AA07FD689C874C6468C525F627CDB0F61B7CB57903EB91E69AF42F39240
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32