5a0ae10fe4a1c1ea8fa6c055d30a1504252ac92e29e767fda209100453549ba9

General

Target
terraform-s-k-proxmox-frontierlike.zip
Size 534KB
Sample260824-gzedvstdmh
SHA256 5a0ae10fe4a1c1ea8fa6c055d30a1504252ac92e29e767fda209100453549ba9
MD5 ba20d9e38251d926ed2420834c38829b
SHA1 5c9c5b6330dd4d39ea651369542c2a652239232a
SHA512 a06d9e44c1811dfdde3d39e3d3be782cac4c64b8323d3c860d95d965629320aa2b0195e36ef6fdcbbb388089d05318b9472e8bc4c0ddbe2d4835a2128a147d98
SSDEEP 12288:wyBXIs7rM1ocqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5I:NImQ1gEA/f0Za6TCXKBxe2
TLSH
T1E3C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  LaunchApp.bat
- Size 23B
- SHA256 a3e6236fa517f863ea551e17fcedcfc22df23e044dcd4863e6ddf3ef00966596
- MD5 b67e7e170c4e0163917772849582cb5d
- SHA1 0655789f766d72e8e727a20b23fd1ad96af13a8a
- SHA512 6d33ce9e095e414bb6fb76d5715ebf3d0315db7f71541881dbe799ab6c4854e27db59cbf4ca182e04ecbf5124a3b6608ac1a68a5f5d577d2ce5a555b17104823
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  icon.txt
- Size 302KB
- SHA256 772ce19206d35699b4d2693c59f8c0bd1a927f287f8bf98bd14d65f1ff248828
- MD5 cda4ad2b1f6f2ea85a7c8d4657ac9214
- SHA1 c8352c1e5404f292d5ee74d5c76ce410dda68baa
- SHA512 b4b13e914a7ed7b4ddecff8ee9d6e123bd22f3c761a4845f6c5f151eed1de344a36722db46c8cddc3cea069c8579e8c7da6acbb63567743e51be6d18b5183e69
- SSDEEP 3072:VlLuf/qCPyBeZQ3KdoKP/Ucom8hULbOT5XEtUgZL/jpK0Z7/dqeiOKuA8QY9brS0:VZuf/3QaWKnCbSbOT58/9rLdeXQbZrS0
- TLSH
  T18B64F8E0658C3CADDAEB8291DD629CAB127724F59B4B17CB0F1CF0A03750D91D6ADC26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  init.exe
- Size 753KB
- SHA256 ac5885b78810a7bf987ff6674f6717059e227df9c969b9fb46d00b2c0de1ba74
- MD5 85d426d8cedc9261000de61b8692e05d
- SHA1 6b01e8718263bb11c9d2e45cc8cf88b46b4ff29d
- SHA512 02859cee447cbb26d6c299151a04f8880c8fa083c07aa53cc8649b09de72ad0f7dc990c71b3cf3732b84ce5abcade7075d2d59a4f9cf9862777556e72008d106
- SSDEEP 12288:3Ixb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7BroikLwqG:UlRcIOXrh7dEiTWZC8gXTFS
- TLSH
  T1DBF49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6