a73bb728a6226f784c0dec829ae6d127905cc4bacb76e1809ff66a6bca570aeb

Sharing

Copy URL Twitter E-mail

General

Target
mobaxterm
Size 28.6MB
Sample260824-gzb9hatdke
SHA256 a73bb728a6226f784c0dec829ae6d127905cc4bacb76e1809ff66a6bca570aeb
MD5 02800f97f63ecd788be1b538d6a7e13f
SHA1 68c341c1100a47de3beb62c79f10dbbd2d903432
SHA512 cc9e1cf0034129d6c3bb8869b4ba2352901848a999de67fb5b9daca8b9b6dd653a89ec0672d0c0fae65a9ec2114a8f3d09d1a861b903cd4b4de2ad7b7c1d6076
SSDEEP 786432:rgELymiuAuR0LRDbf8ohC0Sd6uyWQvQeOAb6:zyd60LlbkH9dmQeOn
TLSH
T1E0673328177110983AD19489F8B5FDD7334BAC819AB668C776336F20A2D372DF8815ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  MobaXterm_Keygen_v1.5_By_DeltaFoX.exe
- Size 172KB
- SHA256 ecd1258621bc2a3bba4f47fd7bb31f62f98f77c6973218574e0d34eb38987c3a
- MD5 3025f76f21eb7f7d162f6ef41d76e5f4
- SHA1 63ac89b44c2b79124a92160f0ae219f358e55117
- SHA512 98274841a3b93987dd00e8b0bda3eb0386c4e690488c23d6b1e2b0c1c854e5d0e4997a055e291a9c3fdf7d774b2ebdc628ef26de5f35915cdad5186f4570e3eb
- SSDEEP 3072:fpTeTHV14yehiPGjM/KfrXriuE7rQbP4uru0Pu0kyL:f6V1ZehiByDXriV7rOzru0Pu0H
- TLSH
  T1CE04DC822E4C4B11C414167BC0EB381003995E866FFDCAC3FF6A778EE950BD6B979646
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion
behavioral1 behavioral2
- Target
  CygUtilsLicenses.html
- Size 43KB
- SHA256 20d711f047afb6c715cc26b0b1265565c0776dda80dfefb181f179ec69d6836a
- MD5 dfd00a82684ea1c348b4ead006e1d634
- SHA1 bf2a952cfd5f39be46821447744604831793982f
- SHA512 927dd770c189ce2c5c36bf02ce4dd4bc15fe7942a0b4a56c7ee156c05d04f141e61ab6a9830ee4038cb0dee44249dc2a2cacebe9dcf9b9d3a7b9d7eed0084b7b
- SSDEEP 768:GYsM3QtuoJzqdAg6Oqa7ucP33QXzWzlF+GL5J:REtu7AEqcvBzX+S5J
- TLSH
  T1A713A55AE74517B302C202556A0B74DEE32D907977A60670346A825E37B3D3483BFBEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  bin/MobaBox.exe
- Size 200KB
- SHA256 616957e29361eaac1c7931a626167afb1e1727f1be4944f7b1b7fa59be3470d3
- MD5 a6eeb1f1f629e143c0d649af07ff3b28
- SHA1 952327872cda60afc53afaa30360ee46e93cfeed
- SHA512 cd4f7286f9bc2b6dad5c59e798837b2db5f2a1089cd771b515c6f2f709bdecd6e2ba47dc3459e6451d5d09b82e76da32fbccdd9d135ac3f6318bec816f51c9cf
- SSDEEP 6144:4yLJFZRe08Wly6kkKrK2rosnea357Pan74ukjQ:BLSh6kZmG1eao7BX
- TLSH
  T11C142342622FCE74001425FA3B79DC1179A4F3677540B4A22EF70A6179AC8FA5AF7784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  bin/MobaVNC.exe
- Size 214KB
- SHA256 2b777075c3ae797604e6064853ac536278919b549942492741ad918ea3e4cbeb
- MD5 8e8fdae4a2fb31ec96eb0d93c6ce0754
- SHA1 880b446993752fac73e6da33c93f444453fcf271
- SHA512 a07a463ca17ec12f9bf8ba443311736e17d5beb9e448d40c8982a4fe76195a0d7950560a9284fb5302720053ff4085d990b19c5917207016220ef09439ae75ad
- SSDEEP 3072:OVBBaA2+0bcdLJPf9FZJD/WoCpXYs2ZXQ3y1gmKnHA4izvyyhiu4esPXGhSok4kD:WBa4VZJDcpyXAnHA424PP2XuFV
- TLSH
  T1D02422E242C08F4DAC135812899C562D5E7FC7B67C929736BAACE5FDE1CC6C1920A17C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  bin/OpenX.exe
- Size 2KB
- SHA256 a6943a40ecbc95e4bfa2e20396e5d4f047ce3ca5827603934d1341fc3c4f1254
- MD5 a06d6fea8a733499b05cc3b64d5069e6
- SHA1 8349a33dc1f860c0ec725230a16f4705419da92c
- SHA512 2dec9f2b6948346f44e1a48c8d0dd65c8f167ffd8ae5b145caa759ac75f173191389d8075e11dc990581324d67bddce923d0c441d474874a07f8bc1008540322
- TLSH
  T1C6514A74C3616A9A757F9F37209CC4A64499406AB1E882BA6A108FEA52DF85E08C1F44
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  bin/ServersListToMxtSessions.sh
- Size 691B
- SHA256 e05d8adaefc34318f47967170b6846af99f3c9a55c9b25be59b404af7101d15d
- MD5 4e3e5f34abf5214d53fa0fd2d0c3c483
- SHA1 97f3509df885fee5b08836d9144ad5b60fa3282a
- SHA512 666d082a749757ccc8305accc61747a9ec29b95ac6a47c975148218455efa79551103266bfb7b2e6aaceb59f39377820e2b436cd257db836a2e6264e8c86b475
- TLSH
  T1EA01D8F04401B206AA3B7620040F47ABC80FCC2B13F05C38E2DDD06CC9D5081FA2832D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  bin/TurboVNC.exe
- Size 169KB
- SHA256 9ada893fcd300352c30949c8aa2ed361f1d039445f3803ae5019d63fb96b3df5
- MD5 1db020be01b3d326aede50c77462368e
- SHA1 9ee91643ad6e527f2a6c9bcd175d0f8f4d80ecb8
- SHA512 911f1cc34307dc6a1807a383c6ac60c3779f6dd51186680077d0258743ab216d0be4c91a074ffe16d67d879e4fa191e17da6bab4cbe54cdf8f46c41595b5047e
- SSDEEP 3072:FEokkVrsvuU2jTVNyvmIwB9Thp2gzbJMfYPWob1gHSrD7NR2wdSvb2d3bYj:mokkVrPU2jjRIG3p20QSrDGwdSvbyYj
- TLSH
  T19A04120366E7C4D66529BDC36506BB0B2CD32D03E9078C648A89CE92AB5C1BFC56CF57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  bin/VNCHooks.dll
- Size 29KB
- SHA256 74af654d35753c2b8fb6718a370cd5c0c86f8f8b4b45bc2be63c735fc1eb9622
- MD5 a01f2c292d131e9cfb9e12e243e81d77
- SHA1 4e76921c48fcd8cc753b9425845efa2f514aeb7b
- SHA512 0f7c28b39698934489c0439dd1d5d2fdd0f146f585f0a16ad0fe55370f1c52c00e17c0dbe413a89a02e07302164d4b05fc06e9adbbaed5a7757c023674a96e1c
- SSDEEP 768:YOfarwnYNm1uFgELT/6BpozGSWQoXReNWHf1B:Hcm1uf/vzGSSUNg1B
- TLSH
  T166D2E1E4676BF8E1DF235C14F0D2538406ADB0060488ADDF88FDA7CAF81AD70A95C56E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  bin/_rxvt.exe
- Size 70KB
- SHA256 0eb227bea70a126edf5be712ad02902dc46027f905c695ec20ee193cb818696e
- MD5 a8e6be5cd9fa1b529338b993e5de2574
- SHA1 4c5859b00c12a091bc70dabdbf45d5ebd974ae4e
- SHA512 889c40f3588617214a48dc5726c66c8f403c2ed4dd8ebee5c5fa446fcef9f3a83d38a56881dbe2d3bf95dd1ae7b83c10c31e90ef56fa76a7d2c8414672a32dd2
- SSDEEP 1536:++e954twYMB9zQGSGBjd6C6Yl666ea5Akie/ERrPFSS:++e954/EQGT0b0ece/ER5
- TLSH
  T12E6302F8B6C688A9F740952D6379D378A8F1D2A6C43D989EBEF00A3DF0181915DD31C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  bin/_ssh.exe
- Size 97KB
- SHA256 e054fa9d2567c0be5955f84fc129674038d1f9ed09831520040976399ee2bd28
- MD5 46f2a39e0850740b35fc287c2c0a8314
- SHA1 ca46f1a4b13470245cbe93003dc32946578884ba
- SHA512 044bb062bba17df30c69c33ba504f105ebad5424352f8135c822cb5955570ddd7fb92a54e5427cc549255495dc2521f6b41a57c98df82188b32b55449ac7f93f
- SSDEEP 3072:+OiGTCxhx2vjRbydxtnxvsAZHeNz9S9S5:+OKxWj5ydNsaq9eS5
- TLSH
  T112A312E0F4C49228E7E2E54113589A6E6C81748FFEF351FC446C3A508FDD5DAD228A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  bin/_ssh1.exe
- Size 208KB
- SHA256 d1058a40550b4abf7b3008d5a11ea8526fba2e2d9bc54d554bea41285c1e7962
- MD5 c3a83b9cb42376dbc4bca5fc66d3b306
- SHA1 51aa987ddb1de8a84918f0111b4d8e542716521b
- SHA512 7cd58a63d4a4c0b0a8449bc8e06630992768889a05fb71f9c41ad6d6f3ce62f84c3123962bc3050095716cbcad59925a2b7611b8909cbc93574e932cff95228f
- SSDEEP 3072:0moqBh7rwZfkUyzTVPKHlcqK3FfpvCDsBa1h6ZTvv/+jm2Lf7a08wPaL5qnVAO:0KLoSfL35p3s18ZTvvGj93aPwPaqVl
- TLSH
  T1A224222BE8D0A4187DB291F7FB21511B8CCB5DC57F9B23226B4F29E6C1D470AD8A09D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  bin/_xkbcomp.exe
- Size 61KB
- SHA256 cf0aa7079f9d0228b566bffed6c8433ce34ea3e84054bb11e17315e2a8a5c711
- MD5 8eff11783f18b7ed79d91df986c18861
- SHA1 03009aa369587e4e2ca779be2ad622eb6b35131f
- SHA512 f940d530a44ab86ba16d41c8ebac33c3eae1f14fdf94adadff10305ee168e752483919a8a34e0f0ca6694fd1faf36949c75580111749ae5c7dcb028f8015e05f
- SSDEEP 1536:wQtRVC5jBe7jkNYIqKxznBDaqeJjhyBtbz01wvYwQAR:wQP7fAZnBf0yj/0yrQAR
- TLSH
  T15553010C0DCDEE44C74C8E33CA29ADB99CE1D45586DA7E50B39F08568B7104E5AACBE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  bin/ascii-xfr.exe
- Size 3KB
- SHA256 c31fd1bdec57baf566d4d4bf2548aaa2980a4fd1efc99f35180ed4724b4f33cd
- MD5 ce68f54a30e453a7769c239f391bbad6
- SHA1 24d119dee30347dae72873e3d05acdec0b143de6
- SHA512 b4d02186fca6b28993d83faa16bd5da83aa71bf0422e4f27e9f136d0a232e1b7aa042c757f96a85c87a9cda470741875e5481f3e57ece4a3154a6466d9750d68
- TLSH
  T17C816D182D2611EEF9D1F8F9A558C663AE8C834ECD177326056C7DA46B7630BB890187
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  bin/autossh.exe
- Size 7KB
- SHA256 4b5aeaae64741778fc32199391c5f6045e15199d6bbc8790283b8e71d2927471
- MD5 343a541d13e877144915424c96a9f432
- SHA1 f66515f2ab34c43ad2a9d5768072a953ed0589a6
- SHA512 336ae2d355e7da8d7c1cd8d5b1fd75c23c4c6415fa9d17e6451d42c3dde258bbf4449bfc0d68792fa26236f6d1b250338bfc29b61d9eeead51df9a8b1f65cefc
- SSDEEP 192:T3Qg3Wk3y4i6De9Zj3gz2Wi31EF2W0FQpqJ/Muj:T3Qg3RiWK+2WWEf0MqJ0W
- TLSH
  T1D6F1AF2902B89088DFF86E501FA2F9B14CD4225E87264B63783D1B5EB0B463B1C57216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  bin/balance.exe
- Size 11KB
- SHA256 185ea5f3231f922f37891508519b594347e53d702c278f076ac2f8d979088069
- MD5 0d232c8bd2c8b60b008f7d34f9a95759
- SHA1 49e47430215146d22cc9a6b5b585d03142e9ec7f
- SHA512 b82dc6eda5c0655671d13cfe14dd81825d2d2182291f43639ba502a90d635ffefe0a35522bd39967f5cc2fa23ea9200867081fb66b2ffc166ec1c484c3d38e2f
- SSDEEP 192:LOv3NxjNUAsRBceGdAo+PbEC/6be1w0Z+BVDqUvPEf3kIPu1HLOM0WB:Lm3NPUZcdx+1y44BVDqUHiulj0WB
- TLSH
  T11032E10940E5CD28CF4C15FA1FD5CBD8EF5B464488AE3DC3E482872B03C5B651301A78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  bin/bash.exe
- Size 326KB
- SHA256 f08bdad072cfca6f7eccd65b18b65ba991635bba3fa21534ea197b692045fd8b
- MD5 ec8a489c4ddec5a99c4f700a3c3d9e59
- SHA1 044ec5ed6912069069ee3cbc34c4b3d588cad617
- SHA512 7ff1b701d9e14152b032188ae640133cc98d5884484d524d9ccda5ead7b94ecb7e1321d44ef589219c561e1f35aec0df3bd4c90da4008fa115858862799bca66
- SSDEEP 6144:7jBqCMqC+DB/54iqjNCrGIq+uA8NoixglzKDrgL+ojx9wK07zBld:7j/hCK+iKC58NoogtYrojxt8zN
- TLSH
  T1796423FF8E46FD6087CE51F310B11480FCC789C8AADE50B1F47964A80DB9ED56B29A19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32