a87b4cea4ceedd65489317c369557ff8915c16843dd6b7603e5b37477f1b9e00

Sharing

Copy URL Twitter E-mail

General

Target
Github加速器.zip
Size 9.8MB
Sample260827-m77m9stdlb
SHA256 a87b4cea4ceedd65489317c369557ff8915c16843dd6b7603e5b37477f1b9e00
MD5 b61642a5470d9db72b73b86344a7f29e
SHA1 517f428a02081962ca63f3d9c8a56aaf32980b27
SHA512 9d8500fbb6dda70940f9a5ef01c702b410130c44e444a71b0c073f2c66e8cc24a74b92f5bd962dc47df41e72469cf2b50ca554bd4e6f7f7b47d5e5dfc8a5adcc
SSDEEP 196608:MBZbrt7s67TleozuKYE0IMr241mfeOdZ3r9r6XyLVZNXrjcThxl:EZbf7T8ozuXqiO73rgXOVZN7QThxl
TLSH
T14BA623E2E6CF4882C13DE97A54947BF1588838E30896CF4D1DFA5548A9F3085E74FB29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution pyinstaller

Malware Config

Targets

- Target
  Github/Github.exe
- Size 2.0MB
- SHA256 2d6fc1b101515bd1d31cadf5e5350a41695e28879f44d3459550c1cca2b008c4
- MD5 11beefbb6efa0659afb72665ec523240
- SHA1 9122280ba82af74a050ee123dab6fa6d167b4d10
- SHA512 c6ed1b1eba7d3c8ba004ed9ea3586bb3499bed56f086e4212f409a59741a355ddd73cb00785217d651682ee7929b8428d2799b183bfcfaf84b87c79fce712ada
- SSDEEP 49152:3Hx48syzzWKFvujfsQ3VXP+PfJN/cbbgak5xNh:U1KFYR3VGBN
- TLSH
  T166A52364F79505FAE8B3423D81A6C015EA72786603B4C2DF07D0A26A2F33BD15D3BB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Github/_internal/VCRUNTIME140.dll
- Size 116KB
- SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
- MD5 be8dbe2dc77ebe7f88f910c61aec691a
- SHA1 a19f08bb2b1c1de5bb61daf9f2304531321e0e40
- SHA512 0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
- SSDEEP 1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
- TLSH
  T1C4C37C4673A402B7D52EC274C1E25A06EB71B5448770ABCF03B589AA0F53BE1AF3D359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Github/_internal/_bz2.pyd
- Size 82KB
- SHA256 00b8ca9a338d2b47285c9e56d6d893db2a999b47216756f18439997fb80a56e3
- MD5 aa1083bde6d21cabfc630a18f51b1926
- SHA1 e40e61dba19301817a48fd66ceeaade79a934389
- SHA512 2df0d07065170fee50e0cd6208b0cc7baa3a295813f4ad02bec5315aa2a14b7345da4cdf7cac893da2c7fc21b201062271f655a85ceb51940f0acb99bb6a1d4c
- SSDEEP 1536:CX8z7RFgpNVu5eYu00NI5OhgYNxx8bhm+uVIYCVH7Symxs:CszlF+uyIkNxebhEVIYCVHL
- TLSH
  T190839E93E3605AF5E45B92B9A6A04357E331BE49035093EFF75883162F13F813D6836A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Github/_internal/_ctypes.pyd
- Size 121KB
- SHA256 c148292328f0aab7863af82f54f613961e7cb95b7215f7a81cafaf45bd4c42b7
- MD5 565d011ce1cee4d48e722c7421300090
- SHA1 9dc300e04e5e0075de4c0205be2e8aae2064ae19
- SHA512 5af370884b5f82903fd93b566791a22e5b0cded7f743e6524880ea0c41ee73037b71df0be9f07d3224c733b076bec3be756e7e77f9e7ed5c2dd9505f35b0e4f5
- SSDEEP 3072:QjyeQXVhflFZtc/uTfLImTi6pX5DJIYLP0i:QGeI+/uTfLIm+cXxp
- TLSH
  T113C36B0B23581099EAA7807CC5B35F17C7B1B859171087CF02A4CAAD2F637A36E7E716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Github/_internal/_decimal.pyd
- Size 249KB
- SHA256 980a63f2b39cf16910f44384398e25f24482346a482addb00de42555b17d4278
- MD5 c88282908ba54510eda3887c488198eb
- SHA1 94ed1b44f99642b689f5f3824d2e490252936899
- SHA512 312b081a90a275465787a539e48412d07f1a4c32bab0f3aa024e6e3fe534ac9c07595238d51dc4d6f13c8d03c2441f788dff9fe3d7ca2aad3940609501d273bd
- SSDEEP 6144:E7W/Dmi0FD5KaN7VqqO9a3juVQt07Ou9qWM53pLW1AT3Otjm1+Br:L/Ki0FdVI9a3juKeqcO+Br
- TLSH
  T11C446C57A2490CA4DE738474D89B9B47FBB278854320C3CF03A48AA76F577A323B9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Github/_internal/_hashlib.pyd
- Size 63KB
- SHA256 87dd0c858620287454fd6d31d52b6a48eddbb2a08e09e8b2d9fdb0b92200d766
- MD5 b4ff25b1aca23d48897fc616e102e9b6
- SHA1 8295ee478191eb5f741a5f6a3f4ab4576ceec8d2
- SHA512 a7adcf652bc88f8878dae2742a37af75599936d80223e62fe74755d6bafaafd985678595872fb696c715f69a1f963f12e3d52cd3d7e7a83747983b2ee244e8a2
- SSDEEP 1536:r5m8HQNUbaxjTvKzl9mjNLOjxNHeuNIYOIa7Syuxrm:r5m8H79mJOjPHeuNIYOIaum
- TLSH
  T174538E46A69544A4D96781B9CDA34F57E9F2F1001710ABDF0368C18D2F233C3ABFA766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Github/_internal/_lzma.pyd
- Size 155KB
- SHA256 f5e01b516c2c23035f7703e23569dec26c5616c05a929b2580ae474a5c6722c5
- MD5 b86b9f292af12006187ebe6c606a377d
- SHA1 604224e12514c21ab6db4c285365b0996c7f2139
- SHA512 d4e97f554d57048b488bf6515c35fddadeb9d101133ee27a449381ebe75ac3556930b05e218473eba5254f3c441436e12f3d0166fb1b1e3cd7b0946d5efab312
- SSDEEP 3072:esdh8kZbsOb0Mt4zorT81qjznf09mNoqCPAaQVIYZ1Ncf:esdhBZbsm0hi78YOqtX6
- TLSH
  T122F33A92A394F4D5F7628C78D6624F17DBF678090310929A02CCC36D2B1FB759A2E727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Github/_internal/_ssl.pyd
- Size 174KB
- SHA256 ba5388d6a6557d431e086734a3323621dc447f63ba299b0a815e5837cf869678
- MD5 0f02eccd7933b7a7c2bdedca2a72aab6
- SHA1 0b4c551d8fe34d8128e5cf97daa19eb4c97db06e
- SHA512 90a64082dab51380e05c76047ee40e259c719d7170fb4acb247b68a03b710461b350da3821b426fd13167895ded32f9c5ec0e07587ad4125683a18a3495f5ed5
- SSDEEP 3072:mn5VVb4iZpIy+vgSf36XK7DapGB4JQELqOlh59YL48WKqgVl5pVIYC7Nb0CY:m5Vp4EaDD36XK7r4JkQY
- TLSH
  T10E047C47B59469B7E817E4FEC1230802EBB5F005331157CE49D6DA8A0F07746AEAAB73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Github/_internal/_tcl_data/auto.tcl
- Size 21KB
- SHA256 517204ee436d08efc287abc97433c3bffcaf42ec6592a3009b9fd3b985ad772c
- MD5 08edf746b4a088cb4185c165177bd604
- SHA1 395cda114f23e513eef4618da39bb86d034124bf
- SHA512 c1727e265a6b0b54773c886a1bce73512e799ba81a4fceeeb84cdc33f5505a5e0984e96326a78c46bf142bc4652a80e213886f60eb54adf92e4dffe953c87f6b
- SSDEEP 384:UqT9XC9VZv9QXCTxsCTHI7672ORgS0mzBvxFRTX7Xvt3wBTnFXhCUvuyqz:LT9XC9VZviXCVsCLI7JlmzBvTxvt3gTW
- TLSH
  T199A2C7635F9542A630B1C22B553DB9A4EF2F81B70675801D38FC912C37F1815C6BEAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17 behavioral18
- Target
  Github/_internal/_tcl_data/clock.tcl
- Size 130KB
- SHA256 1947f8b188ab4ab6aa72ea68a58d2d9add0894fdf320f6b074eae0f198368fb7
- MD5 88bb44a1364147fdd80f9fd78fbcef61
- SHA1 2c3454d2669f0ca83fecf17976d599c85b86e615
- SHA512 010b13e8a2d50521b5d7adcc5f32f7cde3f12e1053961c575d967dc6cfd368640bf45d23832e5e9c3868cdca9fe0505698f949c5557d4169353634c94aa196b5
- SSDEEP 3072:Cbn4IAhYvuCg9epsArAzqpSMpWzP7ejMiIAxBPqGYkPAPaZpHYM8EN4LhVLlarXL:Cbn4IM9epsArSqpSMpWzP7ejM/eBPqG3
- TLSH
  T1E8D3A6027F19412E71B2D33A4ABAE198DF2ED1B776AB805CBC9E405C3B1091446BFBD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral19 behavioral20
- Target
  Github/_internal/_tcl_data/http1.0/http.tcl
- Size 9KB
- SHA256 8c474095a3aba7df5b488f3d35240d6de729e57153980c2a898728b8c407a727
- MD5 c2092f8ca2d761dfa8c461076d956374
- SHA1 90b4648b3bc81c30465b0be83a5db4127a1392fb
- SHA512 09ce408886e2ceaddf70786a15d63af9a930e70cac4286ac9ddd2094c8edcf97a2adc2d3d2659b123f88719340d3b00d9f96e9bc7c8b55192735c290e7d24683
- SSDEEP 192:kipkqA3KsZMAikGJ4kIWPa95KTBoF7dg/8YNkgQ4id:TkqWKsZ8kGJ4kIWPaDFzTd
- TLSH
  T1CC225385620691AD6DB2433ACEB990B0EE3A51B321B9416CBC5DC1643F7250E9FFCBD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Github/_internal/_tcl_data/init.tcl
- Size 25KB
- SHA256 331bcf0f9f635bd57c3384f2237260d074708b0975c700cfcbdb285f5f59ab1f
- MD5 982eae7a49263817d83f744ffcd00c0e
- SHA1 81723dfea5576a0916abeff639debe04ce1d2c83
- SHA512 31370d8390c4608e7a727eed9ee7f4c568ecb913ae50184b6f105da9c030f3b9f4b5f17968d8975b2f60df1b0c5e278512e74267c935fe4ec28f689ac6a97129
- SSDEEP 768:rXugPHudKlExBG+Xg3Qonlm6ofRRECLSQDjr5vkhzx/i:ygGdKli4eonlm6offLzehNi
- TLSH
  T1C3B2A7112384917932B343368AB9B598ED7EC1F715AD41BCB8CC825C777150A4AFDBD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral23 behavioral24
- Target
  Github/_internal/_tcl_data/opt0.4/optparse.tcl
- Size 32KB
- SHA256 67a157f1873d606b53dc4d894bd8e71f6b1a0dd66177b9513bd039b348b40349
- MD5 4ecd97188bfed58a15fe22ec566fa6a3
- SHA1 6e4e91096298f1a0ae6cd4241f167c8b4f661ee5
- SHA512 1d5067bbb13dab001168eeb41ebfa2d13bacb0f43a8067cc93923e8f4d062aa387da23d7d98d6a2ae77d7c849a6026f2343102cbe03690c2cea0890222339475
- SSDEEP 768:4D0xrpIuhenN4kA0G6sRcl5AdtsPLKiF64aJQ2L:HpnhsS9C5Adqua5aJvL
- TLSH
  T164E28126BA45629D26B252368E798451FF3EC2735296407CFC9C817C3FB0942C6BEBD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral25 behavioral26
- Target
  Github/_internal/_tcl_data/package.tcl
- Size 23KB
- SHA256 f46ab61cdebe3aa45fa7e61a48930d64a0d0e7e94d04d6bf244f48c36cafe948
- MD5 ddb0ab9842b64114138a8c83c4322027
- SHA1 eccacdc2ccd86a452b21f3cf0933fd41125de790
- SHA512 c0cf718258b4d59675c088551060b34ce2bc8638958722583ac2313dc354223bfef793b02f1316e522a14c7ba9bed219531d505de94dc3c417fc99d216a01463
- SSDEEP 384:8xgjLNILEHsdAW2UfnImRqXqux6XmihmCchzPLrXJjJh6PLfzdklG:8xgjLNImsdnvIm86uGLhLchzDzJ9h6Dn
- TLSH
  T174B2C9217389925A34B153639B352C8CCF3EC0FB51A951BC78D882BC77709190ADEBE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  Github/_internal/_tcl_data/parray.tcl
- Size 844B
- SHA256 e269029c8263e3cbc1920c3604ecdcf15edccb208a0d68f9eb42b73954d620c0
- MD5 577787c2f4f5956ba70f83012b980ae5
- SHA1 040b2469f796f3fdfcd1e1dd2eb1c5b799edef62
- SHA512 c2940f6f3d77412efc537b8ab67352f519dffa95739fcc17bf1817335afd9e5bfe91abe98cba99e278cb4923d4e6d431ed9d72282745203c0f7d73193f550238
- TLSH
  T16A011201430160ED22B1C33642E5EA48CD2219361DD66A99F4CB4138BFF1D2486B07A6
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29 behavioral30
- Target
  Github/_internal/_tcl_data/safe.tcl
- Size 41KB
- SHA256 c21dce3ab31893118bbed01e559070f1d3541877fee331bd45f5bf4300ed9654
- MD5 b8c1561d471cfbf4111c706411d59883
- SHA1 71483eaeef377ee9af90bec44f70c7b12c5bc720
- SHA512 465065a938c71af4588b3331b51a62dd57f57492eb1cb6c0f52b9fd0a2fe7a54b1e995aa56e4a41d7a99eaff665c1e23e3b240fb3f9840ab242c21b1dbffff45
- SSDEEP 768:H/Jo8y7AyARYhZfc3njlVdRIp4xOtoYx4WneNiBq5vIhfwEaqadlUCJ2Pbb1P6:H/c7AmhZmnjvdRIG924WneNiBq5+fwEc
- TLSH
  T1241397126B43579D387283329D7AD6A4EF3D80FB42EA40ACB44CE16C3F71419466EBD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32