767a456bf0675032d37d3c8caf05e2e5dcb105c218614b2e4e42b51370d05205

Sharing

Copy URL Twitter E-mail

General

Target
aircrack-ng-1.7-win.zip
Size 11.6MB
Sample260825-xkrnmsvsey
SHA256 767a456bf0675032d37d3c8caf05e2e5dcb105c218614b2e4e42b51370d05205
MD5 37af71e78813e897297cca59cc0f70b7
SHA1 872ef4f731080626d7cee893ef42c8f630ce90cd
SHA512 12e2288fc181f0fb4d5cadbd20125aa971cbd56feade5ad32affb8454611ad11f46db5b097e790279df1841b79108944bc0306877334134f0c49bd6b064a695a
SSDEEP 196608:ik2edpGM+b1LBFb4gOqM11ciyrcJedKsNPBKBxyMBLcPXOuYbQgkbssqw4T:ikhjO1LBF411ciyAgDiLAvOuYvkbssUT
TLSH
T1BAC633D5D28A0531F80EBE3518721B53FB2ABC3B429548D431AD32F67D425C1B99EB8B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  aircrack-ng-1.7-win/Makefile.integration.mk
- Size 5KB
- SHA256 e93dfd745192a2cc8348f90709736c618b773d910741f6bbf9049dccfddba0ea
- MD5 401e0140224cc233201034367706e7fb
- SHA1 8d986e58af9171d1d1abbae7847014669675cf75
- SHA512 fc4c031b5646e45fea39d8d293b9c24b98306e61dd64f51bbd4318d27278e75b43071bb984efed435e7af2ab08f972c514e2344962a96e77ef0ab1c7fdab262c
- SSDEEP 96:V++mWKBk/OlAUp81ipB8t1bPFrsuLcB+sVEp8F4anqR0Gzf2qvsnLCiMBStDPApr:JmAdF1ywbtrsuLcB+sup8F4anE04eqvB
- TLSH
  T1BDC10E6CEA460790B543C46B3C1071873296E13D80BF8EA9F7CEE45B674099861BF9B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  aircrack-ng-1.7-win/autogen.sh
- Size 3KB
- SHA256 9ecc4870bfa6c9a7fc693ea0c6bbdb9c682f2825fff5904f056c48bf36ca3f8d
- MD5 5c4984392c9c1371857836fe071c9f33
- SHA1 0cd7c8abebf7ad6faaeb5a0bf459fbd3714d3d81
- SHA512 4dd43715b87fafcf1a1af7345695e726c741bdd916b9ced5818ed639e4fab73abb8a37842b8357ed8574b98712b038a262c05fbc471f2a4ccd04cd334ea9f4aa
- TLSH
  T17A6193BAF220833138490469794D90CDB66E01BF19597C6421A7EC1DF69EE38B4B792A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  aircrack-ng-1.7-win/bin/Aircrack-ng GUI.exe
- Size 32KB
- SHA256 c84ff6bb93b341575643c9bafe9bc4ece20357fa1f3e95035f04980bd310a3e9
- MD5 ca69a959edfb693c7a84103c468e19ff
- SHA1 a4cddec3334594c3eeb771a3ebad886a0f3a978c
- SHA512 21850d3abd26741105b4615e4d102993d01820a11302d812e61d3b6bd1dd598f3a402eb029ba31fd6c3bc1a3316376598e8292a22cf897812b3b4489d98f443f
- SSDEEP 768:KwMYppdk17Rhq4U3E60UrVqc9/uVvXr5c:p1GmEpUTuVvXr5c
- TLSH
  T1A7E2941433F81E27FAB59BF829AA620407B576266570DBC90DD271CF0AE6F008E51F5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  aircrack-ng-1.7-win/bin/airbase-ng.exe
- Size 174KB
- SHA256 53f19477e0c298cdbb7ab8da47446ac4c73f343b1af5a5d8bcb4d240ea2149dc
- MD5 5b03211be4fc63d666fc585b3ebdd078
- SHA1 3371759f42a198e281eada80f110408e0d3b6e15
- SHA512 ce1ce09600e7f6e3230471ec5f246ee02fac6310609454c09da611919ee23331da050ba336539bedfaba1f9db1d372fefd56e21edd5d882cc479f05483a4c670
- SSDEEP 3072:C4fV3rk/NTdenI/bjcsx1G3udnNa9/Ty6+WZbfDpbcMqeYBfXmKHoWmf4DacNS/t:Vd3rk/NJenIXc83Na9/Ty6+WZbfanBfo
- TLSH
  T133045B91E68958E8EA35853885E7C333763CF4C403729B1BE768D6354F03EA13D9A6C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  aircrack-ng-1.7-win/bin/aircrack-ng.exe
- Size 242KB
- SHA256 29c29ccd797b134ae460d0b5452965b3ef02d02d035a2b296319734cbba2513b
- MD5 d4cae12f53a8f49c3d5fa3314b234856
- SHA1 855156632cae813b148ec8a5ac44da0e6945d5f3
- SHA512 32aaf6135014c0bed58b9330faff7d59d59ad3ede2a00d6602dd07507eeec787a284f2d05bd7b58d6aba718f311371e6284b4201a090429b42f7145f0c173dbd
- SSDEEP 6144:6QFlaocE9taa3Qe0PM0/TkqSGpLfzAZfDiTwEFyWl:6GaosK0FyWl
- TLSH
  T110344B97BA894DECDA2482784BE7C332673CF8D502355B1B6B6CD2304F12ED179DA606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  aircrack-ng-1.7-win/bin/airdecap-ng.exe
- Size 117KB
- SHA256 af54bfec0ad4a2efc09797f558f9c5c868e9eedb3e1f61f3086efe901dfc75d5
- MD5 733eafbdcf7b52ca1466f3a7c752a0c9
- SHA1 cb8f6516afad35e7fc7b83a6f6c7b1d40ee96fe2
- SHA512 a5bca64bb9d85f14a05752d1abd318cf9d0b1a3717e4a74c75858e639a89d0a551919df369aa09200cc733c1df0f3bd4c8d02ee7a3eca5f27dc092d3af53100a
- SSDEEP 3072:m/f1GfFYLFG3udW6OR/Thie2J3fdpbcMqetM9f3Cg2EWmf4DacNS/MXur2MoegSy:ef1G+LOR/Thie2J3fwqM9f3CgmFdfH
- TLSH
  T12BC34B86EE899CE9DA358A3849F6C332253CF5C902529B07C628D7364E03ED17DCB597
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  aircrack-ng-1.7-win/bin/airdecloak-ng.exe
- Size 98KB
- SHA256 3d4ac33f4bf7287b659f08c9fd82d1278fc1e5808e3324ae27c450f543bb0796
- MD5 58cd4384ccc4ec105560e58936302fd0
- SHA1 8a2c2dc35a8d89f42490097725aff608de07b438
- SHA512 4650b4d095375794d766cc17bd17af0324e1789efd5c2b1f7a6f7e8500e7dbd153499cf3cc3e77f180225e57aca020ce653f47c61f833771728f6d7c50eb9372
- SSDEEP 3072:E2x7sV7w/TwDhN6sfApbcMqeaxf0Yh7aWmf4DacNS/MXur2MoegcJ6F1K:nx7sV7w/TwDhN6sfNdxf0YhrF1K
- TLSH
  T10BA32B92BA889CA5DA244A3819F6C3301B7CF5C542A64B17E52CE23A8F03ED17CD75D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  aircrack-ng-1.7-win/bin/aireplay-ng.exe
- Size 201KB
- SHA256 a8d6e08427c6f5766d2f2e028c7b08e481d58cc37fb6552bcdcb8166afa5f14f
- MD5 83b33dfd123a1bf0d7abc4cd1842ba68
- SHA1 c783453edf9ee682ab721c6dfbd491657989a7ad
- SHA512 4281b0dbd6797f90ca4ca71c26b586b8bf3e553d2695fddc9f0e1906911bb0e2126e596f692a82f6fdf22cfbf90f64ee43984001b6d0c6e3b882d4cb9a283eaf
- SSDEEP 6144:PUZpO+vo/rVbmYNdq/Tha2etzfBCKJfX+p/DtFdE2:PU5o/rxvo5FdE2
- TLSH
  T1DA148D52F6C558E9D635893846E7C332B63CB8C403348B17E768D7314F22F907E9A69A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  aircrack-ng-1.7-win/bin/airodump-ng.exe
- Size 224KB
- SHA256 ad5b999f6cd145edef5b7076345479a4088f5352196ea043c0e1748776fcb46c
- MD5 9ee12084d49374bb5dc9a86ce1c26c48
- SHA1 aa7dfa38fc2144761b304dce96bf860bbd8eb0b8
- SHA512 c8cadba9ad4d7791f7c88bf321b247f1391eb8eeb34728fc97bf26824d110f215d03287bb7edcc234c668e8b205c01e3e5b30717d81828836d3f5ff78e4f32b3
- SSDEEP 6144:206SQ1wPFOv5ZGU937uDKf9qNXNx5F/TSCW+5Xfy8PfL+kMk8wFkyu:mSQ1wNfe7uDKf9qNV38wFkyu
- TLSH
  T12A245A92B6994CE8D635853845E7D332763CF4C403359B2BE32CCA314F12E917E9A6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  aircrack-ng-1.7-win/bin/airolib-ng.exe
- Size 125KB
- SHA256 8d2a112e23e0a6efe03e162dd39d43b4437762274e25b860c3349a962af902fe
- MD5 41dc9f7b239e502f2d7ddd69bcb1dc6c
- SHA1 2afb93e3bfefc5e7b1dc1cff0486f7e9c6f98cb6
- SHA512 f3ff39fb7064afe8863efd9a89156e3fa7a44494f40cac6ebd20c2e0e4bb267ff391c18b61cc9573aa3021b7beb5ff46ff3e43a3b1e15f6c04f5f936c9e33d03
- SSDEEP 3072:ZUqgDfpMLKrRVLGaG3uddt/TjSGSZrfbpbcMqe31fXSyCqWmf4DacNS/MXur2MoW:HgDfTiet/TjSGSZrfi41fXSyGidfN
- TLSH
  T13FC33BD6BA999CA9E634863849EBC3311B3CF5C502B14B07D238D2364F16DD13D9A2D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  aircrack-ng-1.7-win/bin/airpcap.dll
- Size 206KB
- SHA256 ee14a2819a2e7206dbb002bdec46e6097e2798ab295c32ed1090a66dddc64861
- MD5 aefa904bd7af6aa2c5c30cdabb7156df
- SHA1 3ecf7ee173ce4f2280a738568c8fe4e0bbad69b5
- SHA512 a67593b3890bfd5e311b1a03e60117dc6aed6b661aae73e1fbe29b4ced89ffb2fa86bc6d541aca62dd5a7825e3de43886741bf00a29b5f46eccf97ae873774ba
- SSDEEP 3072:l35SjxHfE3E0LjRTLAPviH8HuWkGidRgNRreBOH/mNjRRV45pVh9womMftrOYjtO:qHfEpX0MJWPsw8Z4TVTwo1ftXjfX
- TLSH
  T190243A8AB26240F9E8A7D13CCDD34656F6727049072967CF1BA083A25E337E5673E325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  aircrack-ng-1.7-win/bin/airserv-ng.exe
- Size 85KB
- SHA256 88ee6fc08c42e5e702fe6ab80abd6ecf8788e0bdfca55d14bdd673569ae1d5a4
- MD5 d6391737fa80255324e9c8620f6d83ef
- SHA1 0d1a867a93230969b813ab7b92ae4303565a0993
- SHA512 83aac507c8f20b861fbc0808bd7e36e3db842972dfe4168d5e5420f9ac04b1241faf221c484af1ba8387e48806f3954f4e7455e4137d4eb71bdc7a6eb73a2bae
- SSDEEP 1536:OaSc9vLWM/+KwMRp+MfdPKkbca7qej8DFmfcs+NAMlFQWmf4DacNS/MXur2Moegp:ec9vSM/TwMRp+MfRpbcMqeAUfcs+tQWj
- TLSH
  T13F832A96AA5C9C95EA354E3818FAC331162CF5C503965B1BC538E23A8E03ED17DCB2D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  aircrack-ng-1.7-win/bin/airtun-ng.exe
- Size 144KB
- SHA256 f8236cad565aaeea259d49f74d799c10691c47bd9fe63c1727a80ab78d1fc603
- MD5 166486aef81a303fae5f81b25efcdb99
- SHA1 baac3aef9a58b85726498c3d208c500a7ffe1ccc
- SHA512 1eeb5d21d9f963a4fecd1b24c9a2326433a37f2261ba8fc67648b3c581452ce81fafe3798d87c6967feed8e50662d65fbbb8faa30549726b2b5e45783b8650fa
- SSDEEP 3072:4xpx9/0vpez1xG3ud8NSV/TZn+2Vrf+pbcMqegOfXmBMqWmf4DacNS/MXur2Moei:if9/Vh4NSV/TZn+2VrfXnOfXmBj2F3JV
- TLSH
  T1E3E35C92FA894CE5E6348A3845E7C332273CF5C502619F1BE728D6354F03EA17D9A6C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  aircrack-ng-1.7-win/bin/airventriloquist-ng.exe
- Size 144KB
- SHA256 b986bebae91481dd2afb0daeb03f7bbedfa8c723a30cbb5203f962ace34a8dfc
- MD5 0229856510baa331787aeb4d9f7e7e01
- SHA1 6d0da55d3d043fb972ebfc80bee2168718df252a
- SHA512 b4a281db2f5c2e29a39dc494f686e2922aa6c533040de12f968fb38bb33b78a670332ea3dc70863103100a51b8e5bc5a3574f64debe3413122c482209e697319
- SSDEEP 3072:vVkqcuSQ1/ob+DxG3udxNUl/TiCmyZ7fTpbcMqekcf3ianiWmf4DacNS/MXur2MP:qqcuVob+DdNUl/TiCmyZ7fqLcf3ia6F3
- TLSH
  T170E33A91FA899CE5D6384A3849EBC331263CF4C403659F17D724D6359F03EA13E9A6C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  aircrack-ng-1.7-win/bin/besside-ng.exe
- Size 147KB
- SHA256 99fb5763d9bb7f93f98c1a04d80152efcd14da69072407c4a6c18ad4afcf4327
- MD5 c2c17e6d976f57a75ed845e33a26dee3
- SHA1 797ec5b6b12237ca65e5b9a4062e85a5ee88f4e7
- SHA512 1ecaeb8c2589efd56026863ae0ee6decdfacb3f30373e1e73eaa84317ea2ab1c732f45dbadff67f880e9f14f6b40d55687d3d39b14fc9ab908d73e2e875ec89c
- SSDEEP 3072:0u7ycQgERo6k2uG3udSL/ThKOWFbfmpbcMqeK2fXWZYN1Wmf4DacNS/MXur2Moej:X1QgEaxWL/ThKOWFbfPx2fXWZe7WRoV
- TLSH
  T1A3E34B92BA895CE9E635863849EBC332363CF4C503615B1BD738D6358F03E913D8A6D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  aircrack-ng-1.7-win/lib/csharp/Example1/Example1/Form1.cs
- Size 2KB
- SHA256 257c71627ea054a98969ba9ddfd9e4f79de18dac372317edb85f5cad7dbd7aa4
- MD5 1aedd14c6bc4928168069ef53bf1e62e
- SHA1 a1677b92c432db3c010d95fd7ee67cd513423081
- SHA512 99b7926dccaba95805aaa3fd25a3317b6221cd4f6e1b91b9ea732508b5475655ac36a6bcc61ab7abaaf3e32da89b73b027b86624a393044d5022553b0408de26
- TLSH
  T1A141130C234DBA158472427CDF12BD5DEBA7052B499348247ADE43CE6F78455A260FF7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  aircrack-ng-1.7-win/lib/csharp/Example1/Example1/Form1.resx
- Size 5KB
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH
  T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17
- Target
  aircrack-ng-1.7-win/lib/csharp/Example1/Example1/Properties/Resources.Designer.cs
- Size 2KB
- SHA256 9259d85616bea956f8135349893184137f7a4f64d9901893ae7f5d6ce0f7cf72
- MD5 b18bd245fcea765d59a878b715d871fa
- SHA1 5f7989d55b73f75774a7617f7395dd0ec8762729
- SHA512 9bc09d601fd7d5f8bfc72a069ca985a2d3259cda8659e5e7962775dda4dd26e733400a45b80db87cde06009048c427fb5944ab7d1c70006bab09c0d8012e5f26
- TLSH
  T11351AAB71F94C1320834D5AB8700F851CB662163C63DD838B8AF03655FB639443AEEAA
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral18
- Target
  aircrack-ng-1.7-win/lib/csharp/Example1/Example1/Properties/Resources.resx
- Size 5KB
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- TLSH
  T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral19
- Target
  aircrack-ng-1.7-win/lib/csharp/MonoExample/NDesk-dbus/Bus.cs
- Size 3KB
- SHA256 8d83e490f8ae533a86b913918bb8523e88eb39c0bebdd399b94931c5241ed363
- MD5 45d75f617e60ac7a98442855d1f4de4c
- SHA1 ef0ff7c55ff064cee60558a037d025ce784722a4
- SHA512 a5e5d1d648baa210053738148c07dec5a9989e7444b2363a78912a5496f592cb3767d9b4b69b1100eeb0b6c001facabc66f39ec19d638e5f493ec09045233728
- TLSH
  T155811245EF9C226A071202948C619DC699BEE8712F7C55B2FCEDB110B494C2F973CD76
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  aircrack-ng-1.7-win/lib/csharp/MonoExample/NDesk-dbus/Connection.cs
- Size 14KB
- SHA256 423a862e1db80d925801e86d37bcec84c0ef03a76c896f8f19aebd39883eb462
- MD5 016509dab483439787914cd02b08b6f4
- SHA1 8a12eb1a85c6da0d9b1d9d127f0a18b2a9f3a180
- SHA512 c0db9949a9e425e9ed37c766b1cbb56337459c9833d71941f3b9b6b5f21a70c6972ff300b88ff5301c053b3d0f1531fe536581ec4a4cc9555234fdcb940fe638
- SSDEEP 384:lI2YK94jQtCQ6Z6mJNCaRPttHAFR8D8I0mFPXbneix:N99TmJQetHAFRmsm5Xbnxx
- TLSH
  T11B62B850EF4D9E9E01A151DCE8117489923D80724695ADF1FECCD29F72C886DC36CBBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral21
- Target
  aircrack-ng-1.7-win/lib/csharp/MonoExample/NDesk-dbus/ExportObject.cs
- Size 2KB
- SHA256 4d2430cf8978f134d6a575ebd09116bd2d0e8ae3d8f41cf90c37090b82fd2b64
- MD5 fecc60a04727502d752a89bf6a44592c
- SHA1 5c18420431720d5b3811edf34cb5aa25be8d9903
- SHA512 278dc1063332afb1f4b081660427bef74fabe1237b60e9595361f7385a7d4c6eef641407f272714f82d37556baa39fdac48ccd4d61a10cbde15c9c6af4a0273d
- TLSH
  T16F516A25F74EC89942F6538EB541BD864A3DD1324128ADA2FECCC957718C11C439732B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  aircrack-ng-1.7-win/lib/csharp/MonoExample/NDesk-dbus/Message.cs
- Size 1KB
- SHA256 32a7bbcc0527c1cb063405103adc6cbf04172b5c140a807ab500fc74f13d4bdb
- MD5 6278f3ef1bdbe4ba229525f51805daf4
- SHA1 3eb48f08460a8b16370c817aff8b9653a61eadfc
- SHA512 1ed1b1f0343af38fd567369eb68ac9233459074c0f8dee17ca53563c093fdec4dc32b022a0924909c93eceb511316c595f2c9be75da457e8b1f49c89bf92a64b
- TLSH
  T116412E8CFB4DBA99420004E8E8119CA33F3DB276465ADCD1BD0CC25FBAC948AC650B36
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral23
- Target
  aircrack-ng-1.7-win/lib/csharp/MonoExample/NDesk-dbus/PendingCall.cs
- Size 1KB
- SHA256 2366283b8ad3970487838c9fbf90da8324a33c6809d55f2c72432ef2757d13ac
- MD5 fab0c235740c099c7e55130013f7e224
- SHA1 8c7ebb48af1d1aeaed338315dc84175f2e56e729
- SHA512 f5e2be3e7a54d0a268f2cc15393b53d184efaf09d838539b356452a6e3b7839bd0b6ea2b8358ab52ba1ec77611bacc82cedc9210b5b7fa41bcfac25d50c8f365
- TLSH
  T11911C040BFBD8C0A1735006E5C22B6C8087EA93A650864FB7C4DF251807EEED135A7B6
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral24
- Target
  aircrack-ng-1.7-win/lib/csharp/MonoExample/NDesk-dbus/Protocol.cs
- Size 6KB
- SHA256 8778d28686249011dab6b76c889891a9555b76bbb16a46594ee509d18d59f6a2
- MD5 01986a6cf1a9e16266f29cb0cb5dea38
- SHA1 f952e76af5b5e959da29c370343cb4f1971ad966
- SHA512 f4dfda1ee946cf6041abcec217e6667aa210dc8d285a79c9cf839a1c1f480133b0bdb2b46096a804bb5f386fd130536c4c7a83acb66731e64b04ae434978f1ed
- SSDEEP 192:lIF/rzNz8NFH080OtOzJN+UCh+hi5vNvDJkFoBU:lI5rJAzftOdA1kWBU
- TLSH
  T192E1304D7FCD846B071A05C4ED261C4AAAAEA63581ACECB6FE54CB6A75C4C06C334F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral25
- Target
  aircrack-ng-1.7-win/lib/csharp/MonoExample/NDesk-dbus/Transport.cs
- Size 1KB
- SHA256 9759267e90084e9ec5df3529aa735dbefe9bb2d466c7adfbb6d0d8920729a7b8
- MD5 e4862d64012e3a7d74bc9654b9d02ee3
- SHA1 3546e73cf1757fc9fc2f341dc72c973622319aae
- SHA512 d73cf3195244d51bde32c126778f8bfd27268d9c1107a4e72ce427818bcda4852cc1fcb2644b6602069600b99aad8efcaafba06eaa41b5bdb8f23a5cc22c9064
- TLSH
  T1A9217CC4F79ED25003771199C2C68D85773DAE310A1F0CF67D54832B686C16C636A9AB
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral26
- Target
  aircrack-ng-1.7-win/lib/csharp/WirelessPanda/AccessPoint.cs
- Size 11KB
- SHA256 1336350e4a83877fc3eba0225785cd738cbd7bb02cded10ed43ca86213d1486e
- MD5 c7935b1699e4bf1f83e5acd1be8c79cd
- SHA1 c08ad7c58c4341e7813795027c3f14b188413977
- SHA512 5dae484c7510b697dd545e1d5959282977ae3b698ea5b22c7dd5af01e81c32b8aa183b80df4946cb0ff24f49e21e499de7dbefa178446ef3c6cb220f9daf8ab0
- SSDEEP 48:L/eo44sRfMtKMKr7+FSMceBeN1oXAqeoUKxZqcPJxE5lFv9TITmSnrP2xQVnJnmA:L/eo448yJcR1evx3RxE5lutrLJ0z/W
- TLSH
  T1A232090CA7C1C8216D729BB39F02F045EF5F14538885D695BDFE07619F32089A4B6FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27
- Target
  aircrack-ng-1.7-win/lib/csharp/WirelessPanda/Coordinates.cs
- Size 4KB
- SHA256 989a7812c80d88ec91bddff0c5fc7ec952db2da03d54e3cbc406c52b3d959c98
- MD5 6e297bbcc4071cb7dd30997d522df52b
- SHA1 871010fa6d9cd997ef07cfa60ceb033411782ba3
- SHA512 55947fb5667bfe846ac09b3b67a8d92cce0047010ae70118f70707acdf0c4072a3f80c4eb608f398eb192d031f320c4aa6627a0638112371e5955b53e32df773
- SSDEEP 96:L/eo4+rj1m+j9Ic4f2n7saOwh8hmWhsRFRvZuq:LUM5dOcOFHq
- TLSH
  T1BB91590C1556E847AC3366768F0B908BDF6B44134C5BC7A9B9FD418A9F3D80092B9E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral28
- Target
  aircrack-ng-1.7-win/lib/csharp/WirelessPanda/Readers/Reader.cs
- Size 12KB
- SHA256 8a6e9679ee315a6ccaa33c97c6f0d98a7d53fd3b8e62682d8504f753aadc99c4
- MD5 0ae85a633b06ca762587efd5eac813b4
- SHA1 042e49161e9385bb07a6661e88969ac1fdb2f614
- SHA512 dbeca1d251477174bc252b944e0b683bde0edb403a8f6bcb23f8f4ab3e0d61a41ce0c129006446a78adaad20bca42bf073dec453fad1cae8ef471254996f02dd
- SSDEEP 192:LUpFRNo9HNiPLEfOxr9wNc2QgG+Sz+55kLkyK:gpFmwLMOxrCNbFHb5ywL
- TLSH
  T1E84222497B42A5324C33A2BACF96E045FF2345271192C670BDEE83592F34095927AF9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  aircrack-ng-1.7-win/lib/csharp/WirelessPanda/Station.cs
- Size 4KB
- SHA256 9d196810cf8feb74e100c7087d18777fc70624256d817151f926bced7f320918
- MD5 9ca8d5cb87dc023fa727880ab5c147f7
- SHA1 6d3938fe101c402c55063b0cce33933ffa836b6c
- SHA512 c978865b26ec1d236243449e8c1b659c794cd730e4efe56639497403557480070ddeafae0b897c7433c9bf196e6a1c0d4dc02b9fdc9f22a17219294219a6d7a5
- SSDEEP 48:L/eo4hfBy6y7muBhWO8Eh/NgVtGaNnhZif0cA9rJnm725:L/eo4hfk6y7muBmk/dyXu0x9rJ/
- TLSH
  T1CB91DC096B828D615C3367379F83B045EF2F642B54A2C161BDFF43600F328A4D275EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral30
- Target
  aircrack-ng-1.7-win/lib/csharp/WirelessPanda/WirelessDevice.cs
- Size 4KB
- SHA256 676885e0b446d3b557ab94126cedcad8b5d9f42ef1c550bcde79760b5578b04e
- MD5 feaf9f5cff5a85c71ad2dadd6c7f0102
- SHA1 4e69757732222ddc18dbc5af84ed0c484b1b453d
- SHA512 2727418895d1fc41504730c90b68fb2c3a08b7ac8ad1adc0055e952ee61597aa31adad6586130ad7d5cf783230939f3aa5fd26d791b306386a54a037e2605b6b
- SSDEEP 48:L/eo47haJin8M84C3T8z8k+t8k8Es51pL23a8/4a2oYN132ESTcgn2N:L/eo41Gi20+Ne58bENqg
- TLSH
  T15EA1A9097682D82158335BB68F02F049FF6F14278856C398BEFD46E55F3B05490B6EEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31
- Target
  aircrack-ng-1.7-win/lib/libac/cpu/cpuset_pthread.c
- Size 2KB
- SHA256 dbaee6fd493fc7f9cc7447e99f8002bca1c780cbc2ae61e610c4a70dbabfb0e2
- MD5 ef3271875639f3761ac16b4c33a44cb0
- SHA1 60ac17e2eabab7c191d5e2b3369c4cc7c076aceb
- SHA512 054a52dceedb5500a5616fadcf90d8b7d62a3b16059d9986e3a56080e25e2d073f6fc4f839b9e3c56d9c64263010cabc6fc2f5d6910c8caa13262e41cb0e0644
- TLSH
  T1C451753F95DE43B308CB04B1360F4487A12B675A3329C00085E5C0597D29E7C9B3BCE8
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32