6d4cae2e3be38b4df70dc38be84c38cef89f1086d6db7f530d210762fc5cdde3

Sharing

Copy URL Twitter E-mail

General

Target
TDS_Macro.zip
Size 32.4MB
Sample260827-ae336afh22
SHA256 6d4cae2e3be38b4df70dc38be84c38cef89f1086d6db7f530d210762fc5cdde3
MD5 bccf8ef1ba9351ba927e920bce7d6833
SHA1 755d3783c707c57fb9bbd741cae93e737ba84cd1
SHA512 cf68e8f7d99b5eb9410c164828070e1c1767dda95f2a375d16b8a1b12572c35fa70936fd7d81b4a5e3642c4abfce36296daf5dd2f7fb71366155f27ae0298868
SSDEEP 786432:Tr3owWgaeUt0HzyMbq6ZIUiXAnp34NyrjXpZCjdhVYSbQ+:Tr3o5s+0HzySq+0kp3oyrjXpg3VZbX
TLSH
T1937733CDCC8E9FBFDE3AE53014790A16643113DB98F494076A91FB11AEBBED2162B441
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  TDS_Macro.zip
- Size 32.4MB
- SHA256 6d4cae2e3be38b4df70dc38be84c38cef89f1086d6db7f530d210762fc5cdde3
- MD5 bccf8ef1ba9351ba927e920bce7d6833
- SHA1 755d3783c707c57fb9bbd741cae93e737ba84cd1
- SHA512 cf68e8f7d99b5eb9410c164828070e1c1767dda95f2a375d16b8a1b12572c35fa70936fd7d81b4a5e3642c4abfce36296daf5dd2f7fb71366155f27ae0298868
- SSDEEP 786432:Tr3owWgaeUt0HzyMbq6ZIUiXAnp34NyrjXpZCjdhVYSbQ+:Tr3o5s+0HzySq+0kp3oyrjXpg3VZbX
- TLSH
  T1937733CDCC8E9FBFDE3AE53014790A16643113DB98F494076A91FB11AEBBED2162B441
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  LICENSE
- Size 34KB
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
- MD5 1ebbd3e34237af26da5dc08a4e440464
- SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
- SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
- TLSH
  T15FF2835FB74413B2018206A26A9F68DEE319D03A73664095785DC15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Main.ahk
- Size 271KB
- SHA256 f38be2f88288fde8aebd057e0ad331557c8f31b54eac4ac9831e79b16fe21b4b
- MD5 05903bcc2ef0b3aa3b22fb31e7b226c6
- SHA1 5afc4c70623bd1b46697778bcf5e836d242e7340
- SHA512 09d1f335958002cde75d9d3de766d88c0dc84ebac49de22a19fd199b775625b466b240cbfd4f7a2121ee5bf8ca6128aea32073599e307f6a6b46a9d36c45ed84
- SSDEEP 3072:hdeV+xBOqEHDYm3wAJ7AaNt7Oco6xApiV3x3HgqFR3lysgU+SPcVQQnpQphEe6TS:hde68YmX8+Rb27gd/ZYkIfKcon
- TLSH
  T14A44F82D9A95107B8397B03DAC9A8405BB348983800E1E257D5C93FC5F9D7368BF9F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  README.md
- Size 2KB
- SHA256 c54a731295bb192e9f8f3798eda838f7e6b8ce62f03154395e347d638746c4fc
- MD5 8c38d7384b6b3db5883070c28473d75f
- SHA1 2ddc3e039dcc93085c8dbb0ac01448ff98514cba
- SHA512 d8b8d031869ba81120d23150c4a3d89797c57ccdd1b1eb5a016a771ec0b28f3478625141dc704066fc07cc2dc7f48437d95fb41179a0753b5289f84a049492e0
- TLSH
  T1A151E77BB720192457211397F20979D6EF2880ACC04CF41D80DE14BCE6A17710B7E6EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Resources/(1.png
- Size 569B
- SHA256 91fadbeb93f6a3b6e91f9f49c1e9686d14ffd314e306e3ab5ec78acff83415a4
- MD5 f6fd1d79f7b11c834c0bd508fb3a5b69
- SHA1 9af4e21a60c2930ce447708465b0135107dd8ae1
- SHA512 347e60f72e51349ba8ff2eff5a870ec4249d4009efbebf9b0ac2694799f317111a8d2d417347740d78be83a3de1018f3481afd0abbe7c0c06af5ea62323432e0
- TLSH
  T15BF04167B3BCD46D9A482A372EA731E141F364BD42079259241AC13AC08169325499C3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Resources/(2.png
- Size 811B
- SHA256 8c128fd3d1482a0568a035a22ecf6125622652391dc90ad78f42a6663fe44e44
- MD5 388a916d63c366d19bd34a073da3a1d1
- SHA1 ceae6d95943a6e8e11b557288fde7419ebe1e6fe
- SHA512 b35e78d7e3fb36d42c3884c0a0a509124b1b1c6c21e025ee85c37ae9e037579982a07947bf41dad30b0eedae9b0e44a66b06d1a01882bda0598c85be57cae4fc
- TLSH
  T1150186DE3BC058F3BE73584DA88B86D129242CDB14A12884D92DD0713AB9CB88648E0A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Resources/(3.png
- Size 777B
- SHA256 991f166d21df328238a828552ac0231cc8ab7699ef55e6af08c3fa63cf48446f
- MD5 d31575260969532362e8d6dc7b432b14
- SHA1 60d344fbae95d3ab33212c7638d64e537a3c1aaa
- SHA512 dc9042c4a0a97b45796e298c36192c02c755efa0a9dc50276b47a7b13e1e0a45fc6b6964f10dd4b5dc8729d730ce329942f599aac2d913351c8fa533bf403dda
- TLSH
  T1780181E8B44C85526DEE400ED18B0498A5F0C35888B63A292A3DC32B18641DA1882E95
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Resources/(4.png
- Size 844B
- SHA256 5dead48f26280579a0ae032fe34d9ca4004934497e6fd6dbf9a6957198f28b96
- MD5 45490369f0a2c1e91e08384c9db515b6
- SHA1 b065c3f6bb28a252cfe5b2a9cf94774444f789cd
- SHA512 f0a28323e4d1c5ae1ac88ca2bf0aabfa34bdd9f9a88487c5885e35be68d908a68909c6245050c3247466f3564d56a88761171ca58e8fc58e07b1c4b55c5b8f4d
- TLSH
  T1FC01D6F19805FCEAA6020C5A3BE12000CB2033E1EB15131EDCADD88EA4A4044BA78AE0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Resources/1.png
- Size 208B
- SHA256 2e303ec708576b01c1ff5c21b06a27affe01bdcb00f0ab7ea02c82cc26df2d3c
- MD5 dd0b30aed6890c55131ef0426327fbfc
- SHA1 46ed2cfb9a9f3fb1663f5276e228eafb1ee1a58f
- SHA512 89dfe55211c55fd5b56fb4f6e6ddd5188229630ed204aff9e7282a0fb5c93f57d96fc1f4f791b819b793e0e8c480189c584ed6c9361a011c79c2a2e2ce6e2d9b
- TLSH
  T10CD022DBEB034CD2CA38023392F4142692023F2C1600A301E28BFC6D183A2968870A83
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Resources/2.png
- Size 414B
- SHA256 350d673c7d3f2fe55d1f938414f6dc34c6a8a9d88bd484fce731b5cecb2763d5
- MD5 f8dd131754ae17436300fcde0b3e027b
- SHA1 617151f6761980fda07656de31141627912bf82d
- SHA512 2d4f4f775bdb3e4828dde3fff9580477387973f399e41ee0fbf6f6b398bf54e9a419b70bf50f4fda19cf48e3af97a3d2d23fed8f162b70d40f439a5a0c125e28
- TLSH
  T114E0C05BC2A870BFCEBE513283F570B5B4178E399E225F033259FC9645B72B080E0189
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Resources/3.png
- Size 404B
- SHA256 94da5fe36597907eafa6554f38e98ab916fd7110c1278b17246e4fae9fdf31b2
- MD5 f0b88bdce54c688559b4a355422991a2
- SHA1 50363e5c869ed6ef106aefed20c32b7775b23846
- SHA512 9a13396c7b3bf6fdd3e226ded5069cf1b179d12a4f10b238d5078cde0cbd2942a52798d3ccff90539bccf7dc9a53598b6509ad338cb7b31000694ed1b18a43f8
- TLSH
  T171E0F1E31F50662ACC1C0031652D204C9671AD008418261BE0407C3028FD025C0E077A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Resources/4.png
- Size 262B
- SHA256 20d24aedbc0774706259e6e31195b8dcce8ee84088e57dad41eca9e9b34a3db9
- MD5 50725a98c236201d33a9b7f675990252
- SHA1 a73aebf539353b0f726aec07235e44bad154a977
- SHA512 cbf12f7a064a31841fad184099ebb610ed4a2b22a9f6e624adfe6f13963da2beec2e955790a042c4833573f7271fb27578397aa1c768e5615cd13a1ffd54cdaa
- TLSH
  T101D097CB13438C58D21F423E0002B42818B23EAD6EE26F08E0BA78B91C301917E0020E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Resources/5.png
- Size 426B
- SHA256 79019b0c877d969d526d5be039ed429c7f5a7cc1dfffc94165ba3b5cebf85553
- MD5 d85e8739d82de4de55db5ef61cfdea84
- SHA1 d833fcbaff41cf4926592b70763b295367e9cf71
- SHA512 794ee34de00ba01f0b4b53109bccc5797dfa385e60df631cc97da256d3b2afd0634d8ebdac89dee30698faf01567288663c5ad565270ab82fd71dfa28a4a2442
- TLSH
  T1C8E061F787640CDEDB3088751B050480DDC16E585642535B3629F9762FF52854725506
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Resources/Badlands II.png
- Size 98KB
- SHA256 3c53db4425f2ae7e3a16d8de09a2507c25abd232d36953c70c3e6e87abf9848e
- MD5 f49c25d146f4de3465d007a2f0db889e
- SHA1 213a7fb1f66fcb0706937ba8619a7e06295c0f72
- SHA512 34c9b8b522379acbc68bde11616e7c4bf213e36a9dfb23b09eb7cfb65ce831a802ca3f14d8ee5e3ed533b23f301a40c3b10ba5e35ba5415ec8bc4251f0fff4e0
- SSDEEP 1536:3nj/g9xv8p73JQA/scpKSlY9XjTD4RSFhw46D7EZcLg3RDGYqJot/CVQBhUueW18:DBsz2YtMahTUQ6LGRDGYq6t/CaDUhL
- TLSH
  T1D7A302A16ECF632463DB4AD6634F210F9CD4C4E7A4690A7B7866FA5C00BC7DC522D50A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Resources/Casual.png
- Size 29KB
- SHA256 983a5d8df227fb840526b8f8d7e9d03041333ef20ea994a5eef0603b0e8d4565
- MD5 b73a24ddb2ee2010410c91101ea57047
- SHA1 a80a6622fa554169cdf30183667592acbe49136c
- SHA512 2e2e99af0fe34987a30a787bd5b8686327b61f5c188c74dbaccffc78dc6fa84f650ac9c37d85cc025e317c7bf9e0d6ce2104d3365d694834564a0297af2bcec7
- SSDEEP 768:ZS79f6vCO/QC2kx11ePjl8bQPWdsLUYul:ZSpK2kBePp80P8WURl
- TLSH
  T178D2E15B934BA9A8AF7040BDC03455061D1E3DAA54378447CD8F43A13F388BA7FE469E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Resources/Claim.png
- Size 2KB
- SHA256 8b9d15970e8e39474251ded31b5fdb7bb507e1e1b2f6d1719c6ca87460da0462
- MD5 5ec168e3fa9bbb900a37f7ba56c82d6e
- SHA1 5970ca299d16fc5fd2a6af32accafccec36c99ec
- SHA512 fd7cd279ff3bf77b7fc14fe2e683cbb619a083615b34c3cf4c56c0e60869edc5f013cf3d651f7be7de3e2b15444c067f579225b3468039ddec32b19d6745de30
- TLSH
  T196511AE7A8611519C9D60DB7CB123F42C0F07D3BFE34265F78050922424ACD048A7F88
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32