0ab3d0fe1434d55757997542b978c771d642987bb15a7130f4160f0db38821d5

Sharing

Copy URL Twitter E-mail

General

Target
herdr-windows-x86_64.zip
Size 8.0MB
Sample260824-gzjnkstdnc
SHA256 0ab3d0fe1434d55757997542b978c771d642987bb15a7130f4160f0db38821d5
MD5 bd986324405b19ef1079f7f3186503b1
SHA1 48151ae6d62a11819fa4637f1c177c07b8e195fb
SHA512 6264eb55acfcbb8c94a373a887363270418b2819c17520dcd41b4eee909a231a0362f8ee678b395070bc22ecc041bd7a95906b9c8cb3ab50b5feaa7bbefed598
SSDEEP 196608:O0izpUVdmkJ7BU3J0lM9XLg4/nVz3LMuM1astQpbk7uv:hiz8o8q2lOXHRoucEtkKv
TLSH
T17B8633463B95B9B04CF15BF867A4900FEA38007FA7EE50C5BE9D9F4C65028B2BF49518
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  conpty/arm64/OpenConsole.exe
- Size 1.1MB
- SHA256 ed7622fd0d3bedc9ab9f122f5e58edf0def9e7999224f52dd395ba9f54edbe09
- MD5 b526dc55298384f1ea6b601fa2503d89
- SHA1 34322c9ec2d41e37a5b7690f7c38cc843e3df23c
- SHA512 6126723f09877123a49acf57ed14833906cbbac418939feb6533be8e524d8eae20730f75abc6a28046931d2c72a810a994d84fb3686304a7ef8316a3b06440d9
- SSDEEP 12288:ExRYWEFp1LpjEfNKsMSGPqOKvP6vqatto3v6FwhMI1FujuQxtALWZSDfNn0ndvyI:ExX6gxDDtedvHeTYH+4OxrOlRz
- TLSH
  T194355A64AB4CAC62E2C5D23CCD72CFF4303BF9648A308557B59A071EFCA5BD1DA94162
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  conpty/conpty.dll
- Size 107KB
- SHA256 39fba2713e2495117b1591ae8c32a3b904bea7aa66069cf7815e2844c76d75d8
- MD5 cbd0fe7c9db8514edbf32ad70e05529a
- SHA1 ddaa27185edd601f8c70d30aee78ebc9a6166b78
- SHA512 73f3ad180922ede0557261b17878fb57027bb13b33bbab2127fe7026c7cacf3310301a2981a34f45c6ec6d9670fcda9a29d70147d55e939b1b15efd834db7512
- SSDEEP 3072:UUaG9GGNczAYJCyrrCTeHGhJwbuzA6yiXFS:UUV9hNQAYRfCq7uzA6W
- TLSH
  T132B37C2BB6A800EAD0BB8179C4A35E46F77174754720A7CF2761835A1F23BD06E3E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  conpty/x64/OpenConsole.exe
- Size 1.0MB
- SHA256 b7fd936c2668b87b9ecf7b3366dc6568afc1c6f981874cba3e955a1c35cf8160
- MD5 5d725f6986d630b96f880fd72db57dc5
- SHA1 d7ff78662fd09ea559fd24e3c37e19143cebaf9f
- SHA512 31362400daa6e8abc6af4d1f2329bbbf51cb8d4ace2d8b018ccf2bdd2fa6a2d9f0082d9c7fe9d3670e453188976514506cdbaa6b0445f719aa4512f3e3898d8e
- SSDEEP 24576:MadD7LlHZ/1iOD3T2OcIm+whOM9F+/bdwDl2:/rlHxfGO5BgOMixq4
- TLSH
  T1A5356B1AAAA915E8D47FD0B9C543C91BF6B27C4203758BCB06E18A562F677E01F3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  herdr.exe
- Size 21.4MB
- SHA256 467682cdb5fa482c54897c6b9c96a5300a3516a72ef70ec3d009e16fadb131b3
- MD5 95f133e2413a2a91c71d3bfd67e3f56e
- SHA1 0c2dc0d4e67b828ddd28c9cadaf6cc6d5aa971e1
- SHA512 8cbe8476f55da1c2f18ba8dba09d6ce7c1823a3e0c2cb86ff1a1d92fe7d42af022e10e6e003a97ebd083d699d684415ba422c8bfd1c0db83547fd1e89fdd16c9
- SSDEEP 196608:xswsCu2YBpwesfkCW5Ls+yYF8Zz6GE8Ch:ueu2YBEVW5Ls+JAS8
- TLSH
  T19A37F711BB8ED95CD15BC8B0834A4B324A3530DB1A35BABF60DC55753FEFAB41A28718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8