279cdb6459ec5db2d13dff07c7bb9910ee38658c91eddc8e2379ee4bc5d78b9c

General

Target
etl-automation-pyspark-3.4-alpha.1.zip
Size 570KB
Sample260824-gzjzcatdnf
SHA256 279cdb6459ec5db2d13dff07c7bb9910ee38658c91eddc8e2379ee4bc5d78b9c
MD5 a9856af2f4f761cc4009d1f42964c48b
SHA1 cdd611ffdea6ba20c475898cae56bd05b3f27b40
SHA512 690217ee2b236c7ffeaeb3ddda12468e578c79aec0cc36b2f6dcd827458212cc344d5d411e0df940bebe861f1709fe192452a29205817f06690032460c4293ad
SSDEEP 12288:0A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWBSFyorOIic/7MPk:fm6Jj6ESfUxZ91kmY/99z8AFXicTD
TLSH
T199C423692756F0C46206F3FC828CBCD886EF14F98B9315BAC90FA545F456257BB2218F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Activate.cmd
- Size 25B
- SHA256 41c60c41f26b16d45584df791b0402a600a017701437c75df4fd720cdc3ee752
- MD5 044cbee82e4b17efb66fc9c22d01027f
- SHA1 93f543b75ef740b0e70e5acfc6f75d1727ce9b7f
- SHA512 34fb1cf66aae9fbf879ee821a4d62b557a8941bb0065fdfc7d53382f2a61162704f529f80c788a45e83eb67f66d2667ac734d90a3f86a6e09640cf325466b4b7
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  lua.exe
- Size 852KB
- SHA256 0be1298198e9ba2fa22ddcd6f1f0ef4f239d97ec0767e0ba083ae97bcc18945f
- MD5 0732431664287c7817431f20fad29ad9
- SHA1 857c4ebe45dd5c58be32dc3a154cc2ab0293fa36
- SHA512 8ffd74d3c643b28fec04f510f1bfc3824dbf51e99b5f5656863a56b479dacab2ab4333f77e31456222b87520f165fa055baaa5c7c14ef90163445a3ff485cb26
- SSDEEP 12288:w628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZoQ:N2HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH
  T16B058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  package.txt
- Size 301KB
- SHA256 8b6c79baa34dbbe59f932965d133644cebbcedc34afd7180bb3626bc69bdff7f
- MD5 25b358d2fd9e7c0fd75531a7d6e5f5c7
- SHA1 8b9822df5a2e76d6bdd07b938bc8b53e85cf49c7
- SHA512 d5ecbe5e9d468626cdba96d6474557f2dc38fcbf34666548ee488d2d4916ee4fd342f37458344301b0c445e705dc28e606fa0b547a064a3af94be523024cf2ac
- SSDEEP 3072:YgI7QHal1Q/gUKDsoZTfBQYXqrVtYUU9W/j+JfU+Od/iLtldDlE97GsMYJAZYwrf:bI7QHaUR8JfCMKjggVdR7tMEJolp
- TLSH
  T1C76418E360861CE2D9EF8780DC639DAA5EB720F1474E164E2F1CF4E03A50599D6CEC66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6