5243496ac0375286ee1f3aab4aaeb7a91cb0eadb483e9b24d156372f60a08d4e

Sharing

Copy URL Twitter E-mail

General

Target
vdr-plugin-mp3_0.10.2-23.debian.tar.xz
Size 16KB
Sample260822-wvtejsar6t
SHA256 5243496ac0375286ee1f3aab4aaeb7a91cb0eadb483e9b24d156372f60a08d4e
MD5 6cf9449fa98912e974a5d8a59a81b573
SHA1 75f92872bf9aae71503a4bae5f668dd31552f182
SHA512 f5520ff2f0e17a84ffa171d66b23037da04114fe6b92f305cd2fc778a9bf58f3fe0985d6f2bf7365e8ab0957abe3904918f4b3d1689bad582747fbbfc0d60d31
SSDEEP 384:1Y3b3Al8d10BzW05y8EZ3pWIKtXnFJkXiBq9xvAz:U31XUK05y8M3pWIKtXnFNWC
TLSH
T1EF72E1F2E7913BE12929C58749BA4D5437DB51A67F28CEF0C24D09C1DA15866F097902
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  debian/mount.sh
- Size 895B
- SHA256 490abf05c6da2bd52f41984d7770f5abb556a347fbe350a616c0a580d3585a09
- MD5 e5c8709853f8a7c67d53650d548ebdbf
- SHA1 ace9c5345e07c75e322d06c998e84b59a4b2d7ff
- SHA512 4da8f5c67acd519bafd40cf8f4f5f94dd1417501366d3907689605d0b9d99720f6fe611e19156a4efcb5aeec5dc765cc53379860cf5fe6ceadff72ce4a1571cf
- TLSH
  T16611C01C340EE37C2A9582807D4E6A7EDA41435803867E50F1CDF83DB77699292F6E43
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  debian/mplayer.sh
- Size 18KB
- SHA256 9c884c0017df9c93aefff030854b99078c269058575eeb6e70555f935df4f3a2
- MD5 83da2ba9f043a2b0652d9c8bd17cf828
- SHA1 fd7cbff3a4e99a4b350091a16055317ad0377e1c
- SHA512 e6b8c783575e4d82d339a77de76d6718b878e4d35a6e668d7e6cf64dd656c9d76e10410dedd7de89b4482b303dff801df80593718ed864a1d2ae9f2150bd2d17
- SSDEEP 384:/ZWl8Mr5IoeuzS6X4vOsBVzvyMTSp3sirRhGIjKF/FcFcFLxazmIxyyWT2b4HCdw:/ZWlhpeuzrIvOsBVvpTSp3sirRhGIDzo
- TLSH
  T13F82B70374DD3338519AC078B54FA586D728902B48411E68F59DE4EC3BA6F2593FEAEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  debian/rules
- Size 1KB
- SHA256 9a1d625eb2e9cb3e4c189f0948d966d0481dcc38ff961978bc7ab46898ff665f
- MD5 c2e62ecc05eb9912aba85951f29c71f4
- SHA1 9fc056ba0fd9888df2320e3553f6f61824efd67c
- SHA512 775216972a95c5a5580259d4e37b0884d0e23de1c1c6857873710f3f11ae1e6952fed7086bcec22836219a97861c0fe6a838ddb65d87d8f12999f3b9f40eb7f9
- TLSH
  T1FC21AC51E14C417EE82046B3678205F279A92AD0CDBFD699B4D1A43D34CF30B90E7BB1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  debian/vdr-plugin-mp3.postrm
- Size 128B
- SHA256 cc14e2a682c279a7c9d142223d7459c4dd15f54edc9e12bd285a4f08e27e857d
- MD5 df04510e5caefdfd45923aee0b7f7e08
- SHA1 ce757bfecedb6b9c31799ace6db74a0e1de96795
- SHA512 58f422db5786a3ff40c1da0071faefd69c33b2685e34469608b59d2e3f14ef64952407c84492493a088e59bbf37e2e019798a94d785d9150b7a3109b2796d4d5
- TLSH
  T1D8B02B04444B0D4208E0045B2687F03B5004098C4317954DD11030F4B40070220D0C0E
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14