1585bbcaf17280a6445352e73ee31d9796a39a0ecd2b9977172e021bc69ce39e

Sharing

Copy URL Twitter E-mail

General

Target
Storm.Precompile.zip
Size 53.7MB
Sample260825-sdvz9sbl2z
SHA256 1585bbcaf17280a6445352e73ee31d9796a39a0ecd2b9977172e021bc69ce39e
MD5 15df51888abc0ce59c291f5ebd74200a
SHA1 6f7c417ffdb6502fcfcd3d0068b72b1927b11817
SHA512 f36cb42246970e4886dbe38ea528a68e42a2deb8ea5551db627f5070eaffa39918c0f904375431fa81bb2c9a6da6c8817d4d8ef32d2d751fbab40179c5347709
SSDEEP 1572864:hZln+on1eXFfUAP8bXMXKadM/uu9x0Vgn8Ph7idF3wQ6:hf+yY1f7P8LWKaODDuc3wd
TLSH
T187C733E4E28D8411EAEA3EB915E713CC5422DFDE22F05EA13C5852C558C338D7F94A6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Storm Precompile/Bin/Decompiler.exe
- Size 9.4MB
- SHA256 fb5c5e11296f8cd6b552aa03daf760d99a380077ff92ba657d4d956af5f3d0f8
- MD5 a109790efbe0542dddf63ef0415dd508
- SHA1 34d3f0c57dd5359f21bee246e00ee01f69132678
- SHA512 a148f1b6a5423147651ab12fad0250ff000efb605e7d468fa45d1e1c1bba71bf2748741d9e62aa72228b9e674d3766d736df64e81b85c9d441e840e0bed75d7f
- SSDEEP 49152:AhW7+AqGnMYHZi0h/tipa/lZ9dco869rpyd8cuIhwSt+AOaQXkiShcwaPJXqlExR:UkDPUKXmtGYGz2YhN
- TLSH
  T124A6C62A676960D9C1BFC07892839F22BD21749D073977F7898182692F20EF87D3D764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Storm Precompile/Bin/erto3e4rortoergn.exe
- Size 38.6MB
- SHA256 f572e93b358e9da6f1c48f418ec1b978b222658ff4ee716679473f8159a3a514
- MD5 b8784f278c4211f528c1963523f39c22
- SHA1 da6e1cc7216a964a3513bdd96cf3468529f0626b
- SHA512 b205ea63b7e7cde490584f00d3776c45c4e7fd29501b8aa40dfa78be28fbe8c99bf9d2c2a31fecde370e61b9795020a512b098e7849178ac048053ddd97c6a54
- SSDEEP 786432:0rgsm1C26fWhVl4c2FP4UyZt9kiYie3pu8li1VUCI:Ec1X4WvUFP8rkiYie3pq3
- TLSH
  T13A9723D3ADD9A1F4C4D30B44128F11CFA8D168BB89FDE95D29C61C031921FEA598DAB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2
- Target
  Storm Precompile/Scripts/Favourites/Dark Dex,lua
- Size 772KB
- SHA256 d260cb437fe89994b2856281c6533b0bb81d65241e3775cc32a21cd475b86018
- MD5 24fcad1fab52b999e3ef55ccc0d0490c
- SHA1 2a012fdb369757ebd5cf4d38c4eb038d587970a1
- SHA512 371ae00704e54d1327718fd07f05a3531b74697f482e3601c88b542ae43d169bcd4b310b46a74ae7c67df5b006646f18129414b7aa6aff67ad5fd6caf41d9fd9
- SSDEEP 6144:Gomu2T2otUaomQcEZVGkJuMaZoJ86loiZRD6uhZF+1DtyrQ44/R04NRpFbalISzS:AYTeC8
- TLSH
  T10AF4830C32898EFE9B636D64B0E3158DB2E85263D3E91540E1BD4E1CF24DE5605B7A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Storm Precompile/Scripts/Fun Scripts/Infinite Yield FE.lua
- Size 485KB
- SHA256 992c15b1be3ef881aff3bb1c2b4be51bf8e73b5d373a8d19c73b4467fbf68814
- MD5 6d9751059acb877188e4b49a91d13ba2
- SHA1 a2969e9ce6a1eed0f4697913eccc25d99266b09d
- SHA512 e9bf8be4a681331836d22492d1cc994fa4b5f9075b980de0790498fcde22591f3604852f3a97502b2fa23d66e252c97760d18769d7e2a2ce51137f92d74bfbfc
- SSDEEP 6144:IMXkbLheE7NPtUWChRGAmRMYNyIBMQulAQFoZn4X4CyiSUhKqGGZtUi8/1JVr4UG:/XkbLheEIWSYGYsFSn4XRqpa
- TLSH
  T1CBB4096EB18F11A52D63B26DB4374886BABFC03410361A4DF4BD51382BD8A4D46E3DF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  Storm Precompile/Scripts/Fun Scripts/Sirius.lua
- Size 186KB
- SHA256 80d2c32acf6e6a66861d9133a01dbd46569e05752f1e91bbf4ea980407212536
- MD5 c68cf93f5454d6e2f448718f0d138992
- SHA1 6b452f3b9a3cafccf8a436b819a707543f818302
- SHA512 df0d577c41488850ba1b0cf3d0181d904fa3d574033af372553f8909ca8b09fc4bffa4e5a9e2bcbf84957fef8836a80d7be3ab0d0f840660b6d0b6a6ea4d32a0
- SSDEEP 1536:fmlGuwktxcZHWKLv/Vkpj63bG+LFylIW3kYmA:fsGuw8kHZ/Vkpj63bG+chZ
- TLSH
  T19B14D688715F62F848E3518AB1774405FAADE170723E5045BAABB07E84DCF8C85C67FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  Storm Precompile/Storm.exe
- Size 33.0MB
- SHA256 e0ae841a84d5c08a528c0f24f987e44bb3c8b9427fb901ea9c953fd33416d4c8
- MD5 062419a539cbc25ee822f719a08e8128
- SHA1 ddabd9fbee717f722d23b2512cf629f2190afb92
- SHA512 ec05f751930ebe8592b272d61e91738e453341be327e07470d005498ee0d05e20a0c55ab3962527960fcbe96c6033fcdc186186dd25daa39301d2af74246a1f5
- SSDEEP 393216:SUwUL02cwEXX921nuJYgrFqAFLKnCTMGPVf:SUwg78n95/rCCTMGd
- TLSH
  T12377AE2293A44E3DC99F6773E4B603254335C60AAF4393EA981C969D1F833460B59BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  f_000001
- Size 87KB
- SHA256 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
- MD5 8fb8fee4fcc3cc86ff6c724154c49c42
- SHA1 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
- SHA512 f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31
- SSDEEP 1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
- TLSH
  T1069309DDB2C6702257A720BA007F510BF236199D6C4D8450F169D8EABC78A4E827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Storm Precompile/Strlib/Monaco Editor/Index.html
- Size 322KB
- SHA256 26717e9bb428200bea1f4cb58c9fd6f4ba7468b39bf859b13b5db6c91ae768e3
- MD5 e4f52b3ed4231890c9226bc7cf37e706
- SHA1 114893105ee0bd5bff34aa2c244764e037f8bac8
- SHA512 ff28853face3e6319d6385fd0041ad63fe9b2de27012b4e3b85ea064d5238db65d8396c30579aa36ade47652852e66f75f70e889fab69d37b6bddfe2599c7a85
- SSDEEP 6144:ujW4GZWXmponRPOVT5lFeicvmSA+HncLFhNyePWPkvU+OI7a5OT9l8pVp1fbl2GK:ujgqo26wfpI
- TLSH
  T1DE64100EF1251C1126876230669BBA18767044A3AD667F063FACD7142F9D29F61BB3FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral8
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/base/worker/workerMain.js
- Size 133KB
- SHA256 b19ada1ffe036707eecf00f4e1bc0e3c4c6ab546fb7e5d4d52f5a62de4caf0d6
- MD5 b838e4d4ca3a40a357225bd920ade768
- SHA1 4108724d46fac36b42521b70c99cc6a3ac32e2d2
- SHA512 9d689e2be1cfc52444d22ffc590efb5ff2fd9ead6ef7f01323b57156365eff7b4f31c3a0b9e97872844373791ba40384f768f4f2655a75f37d0a5f2da74cfe46
- SSDEEP 3072:W1DOqzYJv4cw7ktL4JqX8PPiz93don3F9s:gDOqzYJv4cw7gL4JqX8PsI16
- TLSH
  T156D3C5CD72A5B4125397A1B1507F120FF33A296A980D44BCF365C8DD2DBA48A617BF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/basic-languages/lua/lua.js
- Size 4KB
- SHA256 4ea76aa12e7e1072dd553b93e0c17b34b6d11a28640ce0dad2d193f75e940ba7
- MD5 ee5ad27a99a4740d57fb4382b93115ff
- SHA1 63cd68497ea351005a3b73db40ea0f031de9fd6f
- SHA512 b915885921c5cd783f7061a153d476521b8b0ba6da4bf14b67fabedd973d46affd40afd8419d56e991f54eecfbb9ae8ed9da2cb5074bcfc5b149c1350111982a
- SSDEEP 96:SD3OXPlI+iI+6OOfCDv9VtKI9fTxdeT2Nhq6i+G/uMB:jXtI1I+7DVVtKI9X6y7G1
- TLSH
  T130913FC2CD8CE25E8BF5F7848EDEA0E6F58D4236C43516BAFED0455C160CA88865E735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.js
- Size 4.1MB
- SHA256 d0bdfb6772eb44d719f442d22e2849010da23b684c1d44073356c253f9e6c392
- MD5 1c1273a4e17674191aeb9ba244d9c4f8
- SHA1 e06db5613d0cca29f3fba7c40a9a2443bb776518
- SHA512 457bcc3aaaf762e95768b956e24df4cabfe8f572630ffc3b7fcd1dbe445d10df42dbd14ed7f0d8ba248f087dd526d3cea8499a05d67f7dd83828e96cb2933c81
- SSDEEP 49152:3PkQszEIEgPHm1Y0sr+NG6mvEA2famO2aJwBeDZ+6sOFWeX4WNwo44JD9SrcYTEU:p
- TLSH
  T1D116504B6AE62421A257B0B94E6FA4067635400F5D4AFD083E9C82E84F5D43C57FAFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.de.js
- Size 46KB
- SHA256 4840ce5d29dbedcc21e3aef15fd1c4ebb82371e7f967d298fcf9668b6ab7162b
- MD5 ad9bf818536f91931fb650b3216dd18c
- SHA1 403d2a77da3ef57d26ae8517ab1911a2e06bc18a
- SHA512 a7489f6e059edd044902db53a486c3881ec363d9db065651692b60043b2a3b388dcd2f8041d460a5fb0a11201e94277815cea27145a3df00792953b602c95bac
- SSDEEP 768:HuYC1xYdRB1a3XqGzdigBdQqAaI/23LNdPxFpST1kF4AJhYmz7behjYWMuRBk3hv:HqxgVuXqGzdi6QqAaI/27NdPxFpWxAJ7
- TLSH
  T1A72307B19D46702A5FC963E1BB415D3B3A1CE2AE7A56500E487DC427204BAF9C6DF433
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.es.js
- Size 46KB
- SHA256 39c20b04dffe19f781303934bb52275bca7163b44f395e6caf37db4ca29e2ae3
- MD5 b5d76ad10828693d4789877118b40bce
- SHA1 0368e36c2dee4e6135e5d619870ef49feb932769
- SHA512 81e8e6f77ea88765333a127858c709df146d1d4ce7bc0106a5106b6ad1035250bf09a6de87894004e2c6f25d87a5705aa8c6b645b17c420dda3db82077c71ec1
- SSDEEP 768:N8nKFyVgAYwTQG8zHqIkGMvnmvoKA9OfxjB3EVuU13pjbazPnBANt7+OlzDKPp4I:SKFyVRcdzHqIkGMvnmvoKA9OfxjB3EVs
- TLSH
  T18623A73647CC175315D303CEF2D3D513D188AC89B068C1DBA1BA9AA560CCEECD56FA6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.fr.js
- Size 49KB
- SHA256 2476075bf25a091da61bbeee0c870169f796e68f30dd70ee6c8d28995f3920d6
- MD5 609979a6bd0e729fe66215c1fa383a89
- SHA1 6daf268486dec76a48de52731addcc2f450d6618
- SHA512 5afb9b43b684d2c517792947702dbe9a7ac7446abd4628b00bfb14ce90854995e06e7c5135056b52aa2450cec5644e66861a8ce98a51ba49277c37109e55f9ac
- SSDEEP 768:ILjlgb2uZ5CcXQ6Q3edz3uzATaY3l0y+dg90TWIvkUqBkiuP/oOjF4Zoczc3A4qJ:2liv5Ccg67SATaYVKEkimTjFAoAaZw
- TLSH
  T12933A61FA6C421920EC61BC3F5625593E874C88CB35DE316ADAF53D912C68DCE2DB6E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.it.js
- Size 48KB
- SHA256 01d14ba84f1e2efe3d153fe5ca48e04391620fc39a01b35f90e2db89ea3d9e7d
- MD5 3e3d0b63e450ec97e699801d491d91e5
- SHA1 8d28e0cfbac8ce6f70664a054d61c7ad69e1882e
- SHA512 a7eeed13a281d532567cc53cae6ee9fed68e57b7ff68868b7814dce90a537d9a3b9972757d9333866c7557023c37b13f3c7a3f8ed0e50d519445080726d785e6
- SSDEEP 768:gqEy7izsuMa01VaiYR2L8XoXNj8YtvnYbP4ymMb3d/gyKJdnPTrysribj5K3m0MR:j7fQL/j4Qq2FA1J1qn4mB7agn
- TLSH
  T1A123A83D0281211029DF13DEE176604EFB67A8CCBD5C316959BC052D35CEF98B19E7AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.ja.js
- Size 52KB
- SHA256 61c4daa3f0e1358fc78e69a057b5e1da3b639c94a70ea5ad6de5623d496d5517
- MD5 1b4528114945e6cada91efe8ce5c19f6
- SHA1 0d49f278175e0711af2f1d539934b98e9de995b4
- SHA512 aadf263e9dd6d4722a76154d0a521774e7d51500b5233c661ed55bce95014a94b724e6a196cd5ac47032ce508c00b2b183ae3b570576b633e45568df8d4928db
- SSDEEP 384:hg2PXPtm+04LZ+FFHr0ZA9qOSTvvIEveG1vz14NdahWMpA1Uj4vHba3RPDScLBkm:bPfLsIOCam3rJrYEIk/872rpvsk
- TLSH
  T11F33603CA7C0A8394D2593632A9DB4EA3455AD5BEC227736C13DE021B9B03CDD185BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.js
- Size 38KB
- SHA256 d91fb15a406fa334895f5fa5bdf1da02afca9cdc50220b4b597f18ca6869e75a
- MD5 25a6f54d69d6ff2426396a68e19b53fa
- SHA1 6edc8f277381e88de77d0f4462366c6fc7974b98
- SHA512 2340b961e83abfc4dd067cf4e51ad71b48b16e4ea6c7d224754912cd5e3711c4eb63d70adb8a7f42fb5d42dc9dc68bc32ace46ef005373f579ac0d937f9e3947
- SSDEEP 384:hO8LKmvQkKEQq4xlX7lrp1E1bIJUeYB4jV87XfVGZ3H6Sq6B4wCJjocN986t7J9L:U8LlfQq4xPp7pFBsZjYKqk1Vetbe/
- TLSH
  T11E03FAA3A3481337298B06EBB6EEC194672A5D3C7711535AA4EDD43821874F093BF9F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.ko.js
- Size 46KB
- SHA256 ae5895709821f36a7edc58a61967e925a3d3d7b0a3ae29042a948743cff8d0a9
- MD5 43f772044f04b44c2db113388a6a5fb8
- SHA1 cc6714152dc7b7ae61b0a74444f84d0462f9a9ac
- SHA512 c36cf14b60fcf431949de5afbee0fc836afea5c01632560df704848332d43277cfced62ea38c89488350b66db539d64b3e5982fac55c6a0d2a11e28bf6f1fe6f
- SSDEEP 768:cOnmkUxK1pLkKgljQM1r0xXDj8kCpY2XlGyrHuivU1Azrtu1QrWp4cX6v:RZUxKgKzxzrCp9GyrHuiFrCQKp4cX6v
- TLSH
  T1A72301E239DB93983547CA815AE1B6758382E5B7FB8301C0CD96CCB0CD589E7444B9BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.ru.js
- Size 75KB
- SHA256 25fe81d3e67512248d7c361a44f65b6902818a27a6674484fd168524f6e10e2b
- MD5 8e4f383a3091adcf8902b126d58d2bd5
- SHA1 fe277bc0dc079282b51f38486d3d609edf3de599
- SHA512 1730546448dec4f573f53caa088f0efbd583395b181f35e8a0b28f04a8600d727b13908d7c2f413e2b80ee5fd57a53bfefc729a89d23f614aa20287aa4d90061
- SSDEEP 1536:U/0F6MhjpIMbBBKOXnFCSHhEUVCcan9oARyGuYQI/c:tPhjpIcB8OX/HhE1canGARyGyI/c
- TLSH
  T1CB7337A156DA50AE0200B50BDD087E493EEB46FE3FAB533615B43D7E34F3024C66E669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.zh-cn.js
- Size 36KB
- SHA256 f4d6e40540aecd433aeae871fb64ea1d711949b10843c61adacb13a2c7565b06
- MD5 368b9af46e5b7dc798f0d9bf8286374d
- SHA1 3442974703766081a3afdbe0dfa0bcfe112690f9
- SHA512 56a29d8b195f2b23fcfbe930a1845a645f53e3c7982fb2000d5590cd2d501a538c238bc2376adb621c2eb7938440439388a1e6128a7579715cc47101f140e3c9
- SSDEEP 768:kbVMLHwwytIZgIlChuIW9P4CAz9NlLNYAdszzHfVBI/C4Y00llmR+V63:YPPdzhuIWQszzHf3IXY00llmMV63
- TLSH
  T173F2C6941BDC6FF93C021381671E85267908670B753BE021A7F3FD9D20919EE46E7A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/editor/editor.main.nls.zh-tw.js
- Size 36KB
- SHA256 04a70ba24136660ea074095aa01d4d01a399cb9104cbfe8bded202538ff76d68
- MD5 1f4ff6a381a8c58e1c91e28da60f42b6
- SHA1 f9a54cf63658a87f6ab1130eeba0bf183be57fc5
- SHA512 66a31b61d711030171c12dede7de56942e19ca3add1a3c646f1dcddfd34b9084c3f114d1e1cdfe3d457c2cfc12e68dc5a1b21ba84ef43923c0bca21ca542d817
- SSDEEP 768:bHetcy+xQHM2k00fZvOjRUcdFF/JwN+QVEWrn05ZxXUeqJ1wrv6Vl900pgL+K14t:isxQHM24ZvgdFF/yN+QpiUeqJ1wrv6VP
- TLSH
  T199F218650FBD5BF83A05F3AD270921161C0E6B0BBC3661159B7E7EA424977CC23DA8B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/loader.js
- Size 29KB
- SHA256 f4f992573d388f87598c275da26f8597a68801378ee8438166c703bae1bfa1d0
- MD5 28d495de7e571f6cc67ffa30927dc189
- SHA1 8dffcad06874610e2ae2cb89be4e8bea9414aa46
- SHA512 12336df4ada164eeda296d8f47927c9b8a98af8d8fa940511481aef2865f871808ad15aea953009cfa65f4f2d1ddc6f94597d1a32e8b3c75bd65925c2cd1d269
- SSDEEP 768:DJ6C/Hdqo+gvwTeMq/soU2j8hHN0mJJjvrCfn5SU4RVV+g:N6gH3PwTRLpJ91t
- TLSH
  T1D9D284CDBB9474234347F4E8D07F111BE2BA965A144D842CB11DD8DE2CBD58AA23EB78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/loader.js.map
- Size 119KB
- SHA256 aa6fa8ff3f7954289f79161468a013f9619ee7f20834601b398b457be4c71e7e
- MD5 3a2301f5f45fd27052e38b602aa9e659
- SHA1 e8118eeedc331a1e5063402d94619563213d6663
- SHA512 963652e3ab1ff1ed73c9424a74b5391449d69d3bae3977b0527fb1450c491599bcf2b0ab4eb183c7556d82f1bd25c30ffb25a70264b2e03db15ddf45019c3a4d
- SSDEEP 1536:cPDTaNe1H3mveWCCuu9A9RDEyzO28U7mdDEaBQWeWUWeWNPV8AzNzWzTnt0iw7pe:T/mq+o7Rl88xM
- TLSH
  T175C343870E53E436531FFEFEDAE94152EEA8B2D5126981007C0C42CD2395F59B6DCAB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/pickr.min.js
- Size 23KB
- SHA256 a3db381ded98175ae567fa6b3e2ea3a4c4ad17748ac6ccd3f303b203aafd3345
- MD5 7994604c603d5bc54fb725733baf414a
- SHA1 ded56a6cee7bb00e7f29bfe7162794600fe715ce
- SHA512 03d8020cba44269b98872dd87fd7a0c3a42ae7406ddcdcc7bbbc96acce812a5fdc17cc9fd7dab0db66fc1a5c5d3aca827a64bd057b02713e767f25449ecb1a90
- SSDEEP 384:y3nktJFOieg7EQF1x2p21rvjjjxmXAygJMlZZ4KWQWzb/Gaj1KYC8dulwMJ+uy4q:knktJFObgYu1xcojjxmXAygGnYC8dulw
- TLSH
  T16DB219947682B93122CB45DE2035C80AF2356690F04B2594F16DCDEE1BEEC84B6B7B7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  Storm Precompile/Strlib/Monaco Editor/vs/script.js
- Size 2KB
- SHA256 c3a86d3888ae90702410353fa7bf5de23042874ad227322d912bb3c281bf6605
- MD5 c1ecb9095d856192846af27ea08d366b
- SHA1 cc6064f8d6d2d0dc334b76f86a471ec752c6469f
- SHA512 5d8b7b56290f28879d99ee8944ca1f3bc3a43db16a777248b6e0f8baeda36f1cf6508491af1bbe1ab1aa54cb31bdf1f43024f6942491ff6751c04ab076ac961d
- TLSH
  T1A941E2689DB20184792B141E77FFD61038F065739C14DE24BABCF9509FE981B429E6E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  Storm Precompile/Strlib/VelocityAPI.dll
- Size 10KB
- SHA256 5e61033cf355f6b8748c11dce2d7d647727aac81fd322d8c73ec1ffdd310cbfc
- MD5 333bdfd4e38564f6cf06e907b8883380
- SHA1 c10383711032c56e67f58ff294f371b3fbc8f1da
- SHA512 00f6d50f9d3008d31bbb57f7c411574ca08718019bb972f8a9575720abb215abfba36c54056929b7ea985670c4783fcc3fb27887915e61c90bc1426e13180ecf
- SSDEEP 192:6dG4couGKtEEKPfthVLWgvwNeKr4Pvi67gcrEFfegqsgr/I9:6dcGKKDPVygPKr4Pq67drEFVEe
- TLSH
  T1E02208017BE8822BE07F4EBD9DB2536107B3B6464803EF5F298C668E1C163144E31BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Storm Precompile/WebView2Loader.dll
- Size 157KB
- SHA256 bf2fefaff7fd4775ea1e07328cc3142721943948f16d261fb82cbd978b7f99e2
- MD5 5525f542ef0aee3c546cd2a4cef5c9d6
- SHA1 3ece5714527a45cd43b429e66c24cf3e7150d907
- SHA512 ecf1922ea28d2cec125cc81c2254922a81d2bbb5ee05d546e929d1ceec747da6b7314fa2102e7bb1c398bc53c283d50f09b1aa6716869f79752405998dd1e733
- SSDEEP 3072:Q/2N6GchehS7YQGKTtXBJZi9JGfJT8AEtJZkYmRSI+H8qF:FNNq67KTtXBXzEtJc+Hb
- TLSH
  T1D2F34B5BB3E500BBE16BC278C5A74A06E772B81117509AEF036447791F237D0AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Storm Precompile/runtimes/win-x64/native/WebView2Loader.dll
- Size 157KB
- SHA256 bf2fefaff7fd4775ea1e07328cc3142721943948f16d261fb82cbd978b7f99e2
- MD5 5525f542ef0aee3c546cd2a4cef5c9d6
- SHA1 3ece5714527a45cd43b429e66c24cf3e7150d907
- SHA512 ecf1922ea28d2cec125cc81c2254922a81d2bbb5ee05d546e929d1ceec747da6b7314fa2102e7bb1c398bc53c283d50f09b1aa6716869f79752405998dd1e733
- SSDEEP 3072:Q/2N6GchehS7YQGKTtXBJZi9JGfJT8AEtJZkYmRSI+H8qF:FNNq67KTtXBXzEtJc+Hb
- TLSH
  T1D2F34B5BB3E500BBE16BC278C5A74A06E772B81117509AEF036447791F237D0AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28