1bd7fdebe02eba0ecf21949f0d955bd3dcc190e0902110e91308a571e9e3e407

Sharing

Copy URL Twitter E-mail

General

Target
vdr-plugin-xineliboutput_2.1.0+git20190511-1.debian.tar.xz
Size 20KB
Sample260822-wvftfsar3z
SHA256 1bd7fdebe02eba0ecf21949f0d955bd3dcc190e0902110e91308a571e9e3e407
MD5 699685e9960472f9b0fe81edb249b42a
SHA1 f2fd0117b56c4c9c2ee98f83e2a59337dba39684
SHA512 f13e8077dffe04a617ff3003459d72234b2f3317bbe08f4baac12db717a6515bd07213631bdf2e0114a966ba73117ee1c5348dcc7d5f90f1d06fc601222dc6fb
SSDEEP 384:5Hp4uPlspjbyb+ZX6+EKH9TVd1Q7xA/9fbCTKrYSYUfPM93bFVs:d2mU3yOvH9TiG9uepPSW
TLSH
T1F992D1E47373D29A80ECA967F1EC12C95B442F1AAD5043B1DBEAEDF9B460C30B4821D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  debian/get-vcs-snapshot.sh
- Size 723B
- SHA256 dfd6505b429ee868d018fe3d37985b94943a2abcdbed059d97b2a8d30db0dc05
- MD5 f551761d63f196dabb497e48ef1a4203
- SHA1 ad44f78ba4fb922c2e65c0ced8af62c4a9b317b8
- SHA512 abec5f351b1736836c13bf8ecb64b9aa411f452909bb9831cb2dd69639bf1a9efe3ee4b941d86094d962d65205eac4591e360ab81e1d2a58487d271c87843629
- TLSH
  T11801C073452545B6119603E33ADEF22537964F850747CC2EDC48341AE6E2F95122E375
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  debian/icon.svg
- Size 113KB
- SHA256 92d48205a17b3f2a3cc3b17d6b5c53eda4555c9432acd69158c843df6e76f66b
- MD5 43efd90c6f88c5234140637092c955d3
- SHA1 c23fb60a9a482799525828d0e070b5e68767f11b
- SHA512 f3361d4002433426f8817a09f389da4307d8466522266bf28edf6d401f9aa598d4c1670756257b61701ce8bb6d48d8f62b73c64d57f6f353c7ba191b150d2951
- SSDEEP 768:sXwB78U7Wx4cC6R1sODDNBL0Vk46ymzBWSYL:sgB78U7Wx9DR1sODDNBL0Vk4WeL
- TLSH
  T1D0B30F11EDBF89D6F11EC1ECDCD21A1D228804B782458C1BB89C274DDF6E8C2A76E365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  debian/patches/disable-po-update.patch
- Size 601B
- SHA256 4bdcae1c6869b2d1e0cb4bbe171ad8dc66a386904f0ccf5f59349db51956257d
- MD5 c00363ca5cc620689ad7d37a282f67d9
- SHA1 e037aa3de92bac0d53711f41515537a695b9fd0b
- SHA512 9ecb45d5e38e1666b5f2a2fb14425a117b6516c398c9973ed1e451eb07b5de1cb7efd499fa2ecdfb596d0994de35a59b37884852f6a3e1312f6a208cb70a1ff4
- TLSH
  T1B2F0DD62500130FE46817B133D7D6CF0F42B2A2B48240FAA58935B64CD8717CDAD2010
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  debian/rules
- Size 1KB
- SHA256 58ac9faec59881839a77c5abdae0a5d57f8b2799d6499493b13c87f196f61981
- MD5 4e9eea59703b7658aad5601ab54055b0
- SHA1 ee81ab4f769cd2a64b8a85622434cbd4741b1f4a
- SHA512 edc757e0e24615b11d16c4806a723acedac5654b9dd6a349ebd18a5c47ed6485a4a2fb0707ad9ee4ea4cbfc471d05a448812bc1912181e7fce76caa292855f08
- TLSH
  T19A31CFD081B445B43D43973E822560F6566189BE85BAB9CDBFE4DD1C02C5709B133897
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  debian/vdr-fbfe.desktop
- Size 270B
- SHA256 03032b46fa1792867a18b4c6d31171de647ea0a985f8e9e76c8d99bdee04a234
- MD5 247c1fd4cd2abbae50456c03ac558862
- SHA1 58970f9d131afd02fd7d4c8973c2570fa9ced191
- SHA512 1fd0ee5dcf053ca07a912da546aa5fe9b162f439ef545a7a059307e36b95b83cddc5d5238a7b211ae1877c3d74fa77cbf5782505e1a93964a8f551a50773a422
- TLSH
  T149D02BD53E8A42B8654B6231B59BE8CF434515AD54E6B484F7446C291281A9EE105BC8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  debian/vdr-plugin-xineliboutput.postinst
- Size 1KB
- SHA256 8b4a947a804b88376e06c2dacc418c18b95770c962d14b89e3d2a754a1b4f3b2
- MD5 36415c0be617a407293843b1aa3096e2
- SHA1 eace23b2de5adda9d9dce73c51ced46405fe6a7c
- SHA512 63a693b82620036449ccc5d64d63ea177584cd36b954eb90a75ffc9f46717158bacba1a5682cb7b4faa0dab0859fd3f0b11d885d8ef768aedd7e543b3d417162
- TLSH
  T1A33127198048D7BC2DC6756DD76A81E6DF9853EF5148589D350E6BE41F8224C301251C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  debian/vdr-sxfe.desktop
- Size 246B
- SHA256 e917c427fc7291904dea957f82a4cc9d54dc79a4a2a3e879c4fdbb9dc2b6733f
- MD5 826aed0eecbf6fa0e05834ff33a999d7
- SHA1 b57649789b712a226f28d9c4d090e22aea382d6d
- SHA512 adf15b4965908b19f26270fac5e4a7598c2fec7a5ed6dd83bb8f54daa8bc75263752d69d549348118d3d383541f95f50e22e16eae18207c966cb7ba1a43d05f7
- TLSH
  T1D5D095D535454178AE075339F2D1E4CB0359152D4CEBF445FE45581413C266ED409982
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral19 behavioral20 behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22