85556db7c984b16b8e08221c7be988987dfea448806a352b085645accb6e3011

Sharing

Copy URL Twitter E-mail

General

Target
85556db7c984b16b8e08221c7be988987dfea448806a352b085645accb6e3011
Size 2.2MB
Sample260824-ntlpbafq4t
SHA256 85556db7c984b16b8e08221c7be988987dfea448806a352b085645accb6e3011
MD5 451e916b5488913f9497e72ee42f14d9
SHA1 ef29d95234e3615fce9f389a0ec73b9712ef8162
SHA512 82d6877ccd7d323ec66032e41682d93007b7cb35257a2f009dfca4d0c14b26581f9130aabca3ce909043df41e1ccdaf4b387d9f1004d17bcdd743e582231366d
SSDEEP 49152:x/mittkEm7606v770uVx/VESuAEVLR4yUpI+QBCwUTrnAru:x/mitCEy60Mf/+xLVLc++KOTmu
TLSH
T1A6A533D589CD07A3F90440BF98D78838916B2BB4E6C14C6FD0D3EE962ED9D6B1E0685C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  DASClient/DASClient.exe
- Size 882KB
- SHA256 8c66494625becbc405af002e59a6de35edf393b2334255088c7a677c5b26e317
- MD5 bb5d90307b2c913130c5cbebe7729437
- SHA1 f84f98292c986a5bf0d51d1d2ca6cc8ec87c8758
- SHA512 2d0ac3cfe183de9c51c2db14f1dc89765e1f035ed2ba2b69b98b9d2815aa8e8bd192ea8cece81c1fc73e272bcbc77e345a4c32d9fc8bc26bea9f3effecff17f2
- SSDEEP 12288:pyp3a1s+pLoX10jNnYtsJ529VOZFLZuYGi/zdh0Dcmbt2Wv8MJEv8MJa:pZS+p0lKNYei9VOzZ5GcZtWtL82q82a
- TLSH
  T14315F01436B06D29D53E577068B0805053B2AF87CA46CE497C8D35ED3FB2B474BA3A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  DASClient/EntityFramework.dll
- Size 1.1MB
- SHA256 3e834a9db27a29e702a23af95baebf62a96d0f8b6473d8d42f60143d93efdcb5
- MD5 28f50369ca372101d682b6a86f4bec8e
- SHA1 d81e64085f8e29bad44ddbfc038526ef394d72a4
- SHA512 8d2c6ae05d6e96ddc7b18c885065c6680aae46b9cc3688ad1108e01c3c54fedcc70b6a5d46bd4b9716e4066a7eed999f86985084d36b106974372e85c8e624b3
- SSDEEP 12288:8QvglF6svcrJ0R7AsrT/yKFIVtyBZqOFhw7wTkP:SerJcRrT/1oOFyEE
- TLSH
  T1FC356C93B7F8C22AE1FF13B2A131011A5AB9F4866763E31E169475EE0C637045E117BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  DASClient/FirstFloor.ModernUI.dll
- Size 244KB
- SHA256 9a4293c6722a77650d9d1623965d412162fa0d3c61eb66d796ce2d00c9fa8fb6
- MD5 4c962265755bb199869a8d811fac44df
- SHA1 1207828cbc7c67d1a97349903fd0eacddade5e83
- SHA512 3610b057569e1f714eb0c50a5a37384cca1e13f643e32986a9892137ed5439e609f71159b22b2426c466ba28942dac2ea6469fb8db3f0187bc0b51f9a4d08b73
- SSDEEP 6144:WLgzFzFs9tlsiKn8E4ysTE4ysHBCUqtT9QWDmxHeF:WEzfs9tlszn8E4ysTE4yshCUqtT9tDmK
- TLSH
  T109345C84133488B4C42707799CA69B987B3149565AD2DB6A78CF2D9DBCC83434B623FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  DASClient/Interop.WinSecsLib.dll
- Size 30KB
- SHA256 c7778b1677ebb2fc54636b2c911ed697f4aafebcd999e0f09e655e22cd40cc3a
- MD5 e13498480615344cd6c2509c7e3c2ced
- SHA1 671746b45ea16273d2aca7cc51c1e98bcc4f21dc
- SHA512 aaa3e15621c5b4767c6c2bc6909470a0256a34fc2b193249a89f8c8d87ffbaceb4e9cd6e38184965e697408b68c6de7b4a92f3f3ef41ec5a2460bc40454e2735
- SSDEEP 384:IWgUP85mrIFSYJyyQQpalrfwSj93UMIeoVWp/3Zw1M2UAzCQ1l01Fm:3P85mrIFSKyyQQQxwSpP1BJ9WzCQU4
- TLSH
  T11EE2C44473ADC035C9DE537A8A63837A1730A6091213CF0A249D315EAF6976B864B7FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  DASClient/System.Windows.Controls.DataVisualization.Toolkit.dll
- Size 272KB
- SHA256 895819bde598f710ed62cee50e8bac05eefd42dda64de60e7d8de8898082cae4
- MD5 6813ebecd58e557e1d65c08e2b1030af
- SHA1 4dc95c499cbe862d4c6a4fccde71b2869f07e279
- SHA512 0bc8b0af27d565f604f49733bf5bf643f360f1c78fc29335f3415329c93dfaf4cdbc2923dcd1d3025249a64291c112893468b3ddd7bbf2050f8e671aa7ecc96e
- SSDEEP 3072:W8VV2gG5QRPQiIK+58lx3F4ZSnDdNbOFZxAK8Jy5TALKSLm/sHOjrBFC95:W62TqBaKC8lBgSnDdNomKvSLCsujrW
- TLSH
  T18A547C9123EC8B3ECFAF0B3AA52150114770EA9EB5E9D7D92DC049F96C47B018B153A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  DASClient/WPFToolkit.dll
- Size 456KB
- SHA256 aef9fcbb874fc82e151e32279330061f8f22a77c05f583a0cb5e5696654ac456
- MD5 195ed09e0b4f3b09ea4a3b67a0d3f396
- SHA1 01a250631397c93c4aab9a777a86e39fd8d84f09
- SHA512 b801c03efa3e8079366a7782d2634a3686d88f64c3c31a03aa5ce71b7bf472766724d209290c231d55da89dd4f03bd1c0153ffeb514e1d5d408cc2c713cd4098
- SSDEEP 6144:ABk34hZ9hNZbkDu0WtH7epyiNrt3329rzSkmN0OE0QxlmGJcdBI8rO7le2LvFVNs:OhuUiNrt33sSkmN0OE0QyGJeBwL/G5
- TLSH
  T112A45C5933A8CA2FCABF4332646141148BF1D6D2A7D6DF4D6894A3BD1C873439E812E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  DASClient/WPFVisifire.Charts.dll
- Size 1.4MB
- SHA256 02e41e8bc4a8d8b7d153bf507c7307d646926d407e1371ca68fd946750a4d972
- MD5 d3d7dd205cf89dd3765999239bb163e9
- SHA1 d41b74c231deb9971bfe9e55e3a68d62363f7017
- SHA512 590934fbdf11624dbba02dece795a78e8d16b5d7b60c8a5e5e3e0a5f4a998e0e2384bf1603f645f655341b581ce8c601fa062baf70920354c6e19d06a74f5c82
- SSDEEP 24576:/BcNtJldYacT8/20Dox3M/drQI1AOsJtP3Sfxen8:/BcNtvS42nxDtP3Sfsn
- TLSH
  T165653B3D93AC8A2ADD5F5375912009248BF0F20363D1EB5EBE857AFA1F477018E46297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  DASClient/WinSECS.dll
- Size 84KB
- SHA256 1c333422e2217a3bcf73e1cbad6d40caecfbfd186428684eadc5bfb7b7adeb94
- MD5 28d0f2f3de8b04de8bdc4b5d128184e7
- SHA1 78d71b8c7ab947a668c71674290fb1de31600c13
- SHA512 89d77c58213c1b80848911a02fcac9959eb52db2d7434cabe44e15e4824b09eac6c3c7d0b0ec1e3974355fc49d415a28474875a96d904870c1cc4fdd5d7384c7
- SSDEEP 1536:ZGvzvaWidUJ2n7CEhtumXr/iZrDh8M0uv:Zk8YkhdSrDhV0uv
- TLSH
  T174834B00B3DC961EC5AEAB38A1D6E15903F1E0312533E76E5CCE65DA5A5379082F27B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  DASClient/WinSECSpe.dll
- Size 192KB
- SHA256 39c5c5c467108b2968da051aa50c98e0770d6f01d88548dd6309c2cfde38c573
- MD5 735f59d8510022b8d6a81502edd14812
- SHA1 5d6718814801ae08b1aca41ad327a9859589e49c
- SHA512 6a69e3caccd21097b970f5daad8a9bad58708472a442239e92fbcd724d13a97399a714b56d8e68f09e2f1ea7cf7f655c094ecc5dde9dc112bedee91d98cc833b
- SSDEEP 3072:1087rnBLaY75w4SFzVGa/s0+Ii4H3pLsLvkT0HSqwOrtlbkUDKR:LVDAU0+KZYL86TwOne
- TLSH
  T108145B02B6C08271E2EB137E1A771B656377BD10DB718AC75BA03E5DAE306D19D3A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  DASClient/transceiverxnet.dll
- Size 136KB
- SHA256 e6d1969e7d0a5487ba491263bfe8e35d03c9c16d11e18548c3e26385298204a2
- MD5 f3b7796fbdd236e6cb759d41f05771e5
- SHA1 6b046526990564962b86f1700eeab059e605668a
- SHA512 645880aba637f8fe9789a1c2cd07d99ced22f1fe1a50afeed24d5d245351c5b3ad1e0323e1521d973226cda2b3f0bc965738b45dbf0a150e6f3725beea44593d
- SSDEEP 3072:Wxz6nha3k3Zl4xxm2WL2rUJMgKvZrK+qnWA+0GyAuXts7UO2Zk/:WxQa34l4xgJywJgrK+qXO3
- TLSH
  T18FD3291053BE4A27EEBE94BCF96110428BF5E52EA51BF7DE4D84A0EE085B341C952373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  DASClient/zh-Hans/EntityFramework.resources.dll
- Size 69KB
- SHA256 428b5eb3f9e9d3e244f48434ffe4f94e2dd7466fda5d63971eb7681377b6dee6
- MD5 2571728a515fd7b977db3ea62eef3f9b
- SHA1 03aa546a6c2f095d4f7e81f8ed912c7965b487a2
- SHA512 7ffc3056b7ff4918b7041c2735e878a877ae38f86b78c7385a40d0beb1f853f06d0ffa7c4fc5fffdd78e16c0becba1dcca5a8adb665a19f46f99d91c6cfbe95e
- SSDEEP 1536:kVrY50q3F96XNo1bz3VyYkXp7oFfctgVGFqRf:6850q3F96XNo1bz3VyfX16zRf
- TLSH
  T13863B69263FC99D8F5F30B787B3B98216C7BBE681A6AD02D19550B0C0971B44E960F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22