61aa63e43571702ca58151638da78cc9f4ffbe91d6ae3d5c4732bc1d371fb8af

General

Target
win_01.07.01.04.zip
Size 5.1MB
Sample260821-txwlkstcrc
SHA256 61aa63e43571702ca58151638da78cc9f4ffbe91d6ae3d5c4732bc1d371fb8af
MD5 648ff3f67aecfd253e8bbd06edadf176
SHA1 b9101ca80b49203d56bf286d3e2f015361191cea
SHA512 5b19c4f7506143e7426e062b064c27d2ce62a084dd5c169bf54a5a71cba4959a897c31b84b81eec99c88cea72ab71efb513ee641c169a5d4a75b52ce3bcf499c
SSDEEP 98304:zBMf1gJkttCsa84KhBJTM2RwuUu0TqCNsiv0hXFpcuRyHjAYChGA:FAPttCs0IBJ42RtmqAjvMVpCAd5
TLSH
T1F2363381D66B0387CCBC71CFD6BA4C1178A78EC0FFECBD604C5AA5866A7415686C9378
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  BambuSource.dll
- Size 3.8MB
- SHA256 718d0d0f939633bb0a398a1332741fec03cf6ac9f826b23ce9c2b7314837baea
- MD5 02c20510e060676e32601792cd8e7f9a
- SHA1 7d974d395315d878ba3771c2e81d796784643cba
- SHA512 0cabc1bfe5ae4762cd0aa794eee2b0d3ecfdc349f4307a941f2cb5d2a3a4dfb9102dbb5b5673a71957e94aa74752afcc5e9a69444738885710e3ee2bf4b96286
- SSDEEP 49152:HAbJc6Wj3CEYhNlyx918tXNE0X1Obp9W3Ekn4sJpA8B2LDcXdP5zd3rKyj:HPBj39aSuN4zsJPEIXXzd3rK
- TLSH
  T116067C57A7B901D6E876C13C8A475727F7B2B8195370ABCF06A5463A0F23BE1623E344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1 behavioral2
- Target
  bambu_networking.dll
- Size 4.7MB
- SHA256 83d1c54ba4ff39d8c80d1ae690ef5439a829e2841088074b2a1133f8721632ac
- MD5 b3427a114b6ed64d849e9381d1431ac2
- SHA1 cac1c9a61f0c865a59d90d9c2c861e3524ff8aa8
- SHA512 7f45eed2d0c4290251af153c3cc4bcce94dda866c9ef8e8bfcc06a12e5c91a796f7bd3c956b3ec10b234e9d052c6dc25ebee17b2ed3672e712b328016eb1a234
- SSDEEP 49152:fzLG7MsgfBzapcrMqISUGHeF8ZJrsCuXU/aW0wIl/ZbLd847vvsWsdaWCwTJ1V3+:fu75crMnm/davv0aOKIqf1kfcz
- TLSH
  T114366D5767AC0198D4B7D17CCA878A13E7B2B81A03309BDF06E4467A1F27BD56A3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  live555.dll
- Size 3.1MB
- SHA256 5ae41e066a24380d8feca47fc18b8a8833fe8c912d39c35df4f21dcfc388bf18
- MD5 5768d01ea3e393dcbc79802984f4ca33
- SHA1 05fa0ab564f582ee2217418beb19e9b652f7f4d6
- SHA512 f0a87a177107d534a095490d67a9df6cbe4c09fdb1ae8cfde2b6b7954a3c90f487dd20d482d6e46804900784c1d3d14cea7a18f5f1fa4c17a641af3db3213f77
- SSDEEP 49152:YkGJvCuHmupENRv1RGAs418x2GS8UndsCRKqRUFaj40hVdPgTqlK:butfpUnCCMaVVST
- TLSH
  T18EE57B17B76C0094E97BC13CCA978617E7B1B81917719BCF26AA82790F23BD5263E704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6