239e6215846d1010072278aa2e2a1a83c09bda1db08ff29f7cfd5643235e4199

Sharing

Copy URL Twitter E-mail

General

Target
239e6215846d1010072278aa2e2a1a83c09bda1db08ff29f7cfd5643235e4199
Size 7.5MB
Sample260825-cskvvawcne
SHA256 239e6215846d1010072278aa2e2a1a83c09bda1db08ff29f7cfd5643235e4199
MD5 12a28fa89772892ee44bf179f2ef58db
SHA1 311d8da7b8d47736d279fff20768492be468ac77
SHA512 4ef699f2fad615415216f5f6dd01db29a1996d25ceb6b2038258372577d795ab1fa738b2ce94d1daf621b41ada364507103dde2e98a65f044a45ad0af3f2cd6e
SSDEEP 196608:46D6TogK0eaH4f8vJZHl32Cg3epCKNe3HtpqfnXwebB6w4B8R:ZyoD0bq8VxpHIXtQ1t6w9R
TLSH
T1477633515CB6629BD38FF73BB2A23F21905631A0633F04A793C718E534E6698BF1DA05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  ef_commander_64/EFCW.EXE
- Size 9.5MB
- SHA256 a757b249c182a28926811d28565b54029bf245c8f3f0032e01f85073f8acf0bc
- MD5 2fbf7389c08e637f0007d7ee04bd3c86
- SHA1 1527d9396bf52a1a505d4fa079d233341bab9ff3
- SHA512 df912d48efc126872f583e9be720b4cf53d155c24485703d6c278359cb066e5649bcbe648c2f5a2eb2266f78e4f8692e7db45816e64b5a580cf192f103ddeb4e
- SSDEEP 196608:Xo9i2UX5ON3f1TSlblt6LkCGy6dA7KRirp:XyicpNOy6dA7Ksp
- TLSH
  T1A1A65D46F7A2D0D9C076C038C4429226F6713D556B328BEF66487F6AAF327E35939342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  ef_commander_64/EFCW_DE.CHM
- Size 1.5MB
- SHA256 ed97e39206510a272ee56487dc6e91fa78d70940b47742939a911a8de3b252a6
- MD5 8bbc80b9c4c54ba4debd2f10b46f5998
- SHA1 30a24fa1bec4669e78c0ef6da4d9392504d36215
- SHA512 2ef5697180946a4453c5ed30aad0e992cc9f0e29da6d23efcc32baf26a1ff958e547be6698b0e5724444f3e5c009cb62439fa21a819cb3efd301231561a04e68
- SSDEEP 24576:b8pkNN85be6OvYHaZ6C+A0nCnaSygMK9zOuj9Kip2eZwCHhhqdxTR4UFTLfgSwdK:Q40beV/Z6C+m74K4i9KgHTCF9dfg/dK
- TLSH
  T145753376641E3119C3EECA3DFAC63D4E828170F0E62419C7939F180AF67ABD6D25244B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ef_commander_64/EFCW_US.CHM
- Size 139KB
- SHA256 37813b6adbd4b6446dc35e9bb23fbb6c8e2fc4f580b81720b68f3679f7fcacaa
- MD5 1f106f0069fa1618f34c019a867702d4
- SHA1 c8ed8a4721ab7bf1507169d2dbd0ae0ea344f529
- SHA512 9bc85d763c4e0c50be7acdd411ce9f51e538ae6f0f3b281885da19f0fc1938a102296fed33c2c435d95a894dddc1c5c7884216fc62c3787d635f65d28baebe1b
- SSDEEP 3072:naHQ26rTe2E0URJq630gtsb7zQsL4QZjHlQD+NzOoOODhg8jKcx:nayS2E0+tt03rsQZjHs+NzvDS8jKcx
- TLSH
  T153D312700A7E5038E0A95631F7931A7D00A7762AE4A5611F8B633D19C7BEB81FF41F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  ef_commander_64/EFEP.EXE
- Size 160KB
- SHA256 8be045845573eb4e4712fcaf33a2ce65cfd1b794d0e033fa52535f120e24c3ae
- MD5 eebaed79046f4d2f184eda2dcb6ab6d0
- SHA1 94885eaa54bcc22bc9bdff2c92b70f7221372524
- SHA512 976441dfb438ef614f2f84967ead913c3f013b025022bceeb843fec1c72bbd565e2bc928f776a68d5e4b5b495c395010572c121a548b91e4a3806811749b91ab
- SSDEEP 3072:nI/fouRCNlK0gMcDDSUmcapK4HQjQ5KIxI94OKI++rfQ/s:I/f5RCN6fDnmclgs4nJ2J
- TLSH
  T15AF3AE4BB7A160F5D46AD074C9D26A5AFB71B8664B7043CF1620865E2F333E1AE3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  ef_commander_64/libeay32.dll
- Size 2.2MB
- SHA256 f42072ff92bc3e7ed4d4dab0c377d38a90f2da17995c047a81d6cf470ac0fe27
- MD5 2db3fff8a53f3d5238ed00502a4f1999
- SHA1 5ebbb62acfebab6d109bae51fd247eb36f703ddd
- SHA512 acb514e0ff1d9ae2303c0821aca9f319b3a9c7c366da73e752f489ff8d2030993e4e97809dba64af7a8b3ee6ac4033ecbd85acd660530ce43c5504d432b38550
- SSDEEP 49152:eqNGtlq1XVwASOHjAdgb6j9VohWcd2jNhbubJf4fIU6iqsbq56oPw:eWE2FhWcChbQJAw+Lbq56
- TLSH
  T102B57B229654D1F1E6ABD07CC975463BE2F0B81807B0A7E76AA9C1311B23EEC727D744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  ef_commander_64/libssh2.dll
- Size 474KB
- SHA256 95b778050d791fd707fe544f1ae46cfae0ad0b2289c5bcf3b206d6894317d26a
- MD5 b0e68f1e7066b88fb7d43a1642c9d870
- SHA1 1373e94f862df8b534cebfc31b571c870f3d2dad
- SHA512 561d4f8b9b4f15da5616ae7e955398cf004686eea7adc64c78fac28b811dfd4e570947d1dcf5a9f60ae5b88fc340e6b898db9d9aaac343c20e5dfaa73916e714
- SSDEEP 12288:OeSAHl4G2gS7B0sNt9Hd4pz9DFTqGrXl8W:OTo4FgS7B0sNObFT/R
- TLSH
  T106A47B46B3E106B5D4B7C178C5A34A1BEBB1B4065364DBEF03A496691F237E02B3E361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  ef_commander_64/sqx20u.dll
- Size 597KB
- SHA256 d358980ec040e1ef6c401044b812316eec54953619ba8508f0bb646855c383d8
- MD5 2c232d7ef9bf4ae29fc7ca0dd815b260
- SHA1 85edd37cd1b37c23386fe5ff04be9df963cfe79e
- SHA512 25266bfc8f93c5cd21176b5515282613ebbb998b68d89cea90deee7764735ca4fcf00f070d10f6c24483da197ccffa3d901a48860bd111dce3a41b3309d7c555
- SSDEEP 12288:Ekfey+MEMgdrY2RAY3HiH9mauIuIERiA3fiweP4RmLoh3nXuABoG:EoX+ljc2RAqHiH9mauu+iChR2tkp
- TLSH
  T10ED48D86B36803F8D567C17889578A27E6F574450338ABDF42A0DB7A2F137E05A3A335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  ef_commander_64/ssleay32.dll
- Size 377KB
- SHA256 97a4ab8a66af7ba34b70510b033fdab06b7f9a1c63d32793b4de6a4cd24fc1ec
- MD5 821365b85a4bb5294c02436b10f61e9a
- SHA1 55389ca89a07c738a0b680dc5b8737bca437c71e
- SHA512 e88988f94d202f977226cb8a57f0c4a22fb73a87b5eb166846509216a75945a59f99cd033d861f5f6b66e99e1003cb0a0ed7a88d7a512f68a481563e982c6229
- SSDEEP 6144:8J/iCKjDLxA8L2kl/j1bJrQkTYOHwD3Ugbv3pk8St1m4n6Sgrns7N3u24zf5/Xl2:8JpiDtA9kl/j1bJrQkTYOHwD3Ugb/pkp
- TLSH
  T129841A42A6700C95D8D7D178C6274BA3FB74B85883386BC31B2A851A1F537EC757E3A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16