ca755c4bbc937486b2d055f18af992a4aace9d13f3a686f6a660665b54fabb48

Sharing

Copy URL Twitter E-mail

General

Target
ca755c4bbc937486b2d055f18af992a4aace9d13f3a686f6a660665b54fabb48.bin
Size 621KB
Sample260827-nw243stfje
SHA256 ca755c4bbc937486b2d055f18af992a4aace9d13f3a686f6a660665b54fabb48
MD5 ce7eaf20e4f242d5de37c37f969d9e51
SHA1 85c176fe87b3209cfcd4f58153e473d9187a5e30
SHA512 9105f206788a2c233447382d1ea590421cd70c8b58734da9ef368f5278d616955d4af4ca38658f144e634cae7028b8ec25282333851e3e8f16a0870fb0e13fa6
SSDEEP 12288:a4fjZP4neTzzh8DWbRGUGZiIcOlevl85IkYS01puiNkwe2i4MsDpuef4vK:a4fZkeTzzMWbUUGoPu510jnNdrMsYefP
TLSH
T12BD423FD9A6D4C0CC9CB0BFF65D539D3F7998096E260A4262BCD81548C932E47F90DA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  raul.armv4l
- Size 96KB
- SHA256 60b59195ee6260aca64bf6f704d52b064cfff2533692eb70f006c564a8dddfb9
- MD5 797125981c82b7a0a3333651cd742c7a
- SHA1 b06cd4feee882cf85c735c8902c47aec56855d26
- SHA512 22e5219bd98730a9865a9ae36a9a9bcc2573f8c5fdf7de91390b0afa9b796c9a36638a1b11c7938dc481b1fc3924b73c4af5b9056dfdf6ae51916fc6b5c51edd
- SSDEEP 1536:pETde7An5IjskVFXfXENMd9k8KQBPHDpwhncksDGpm1Wm2JdRezfLX7:yx1IjNnXfXSIk8KQlHDp2ckstYJufX7
- TLSH
  T1E1A31A067D42DF03C5E522B6BAAE45CC33126BF8D6EA3142ED266FE137864DA0D36750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  raul.armv5l
- Size 96KB
- SHA256 b2070ddbecc03dbb26cdc2a72df88e9fc5f6bb7215ea3e12d0d1035704553bde
- MD5 455839981635aa556393ff142e9bb9fd
- SHA1 87ba33b6e251ac0098e03952934846825516b445
- SHA512 8ee61ee475fe8b8bbfbf10ff715d8538f8af98f693787c4196408b5b316a8792030b95b33f80272998cfff7b25b97b6ca9b6beef75acf77ca04f0af8b4294a00
- SSDEEP 3072:HHSHQYiLfHOaoPVqeerm9U0e8HYphosHO7:HHjnuNerf0e84zO7
- TLSH
  T15FA328067D42DF03C5E522B6B6AE45CC33126BF8D6EA3142ED267FA1378A4DA0D36750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  raul.armv6l
- Size 105KB
- SHA256 84ea062cf0ebbd2474f50dc74d36c6805814f6a0486bcdfa0c40273e01f749e8
- MD5 2bdd89c6489756ee6e10ecb34501bbe6
- SHA1 98f584232d070807d8aefaefb8b305e86576a079
- SHA512 a5cb9de44923e1231d8de42f0088c73f6a466f41e63c1dab6f4ec84e548b6c34a881eaaf086a8cf05067e633d7371ceb28ba1c3e4c05a25631c3489acf1fb8a5
- SSDEEP 3072:jA5jkcg3gnMQ91Q0/OB1wVXGwGd+Ln0z+APX47H:jUtOB1oGwGd+La+AQ7
- TLSH
  T197B33C46BD91CA02C1D225B6FAAE54CD33136FF8D7ED3115DC206FA067874DB0A7A612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  raul.armv7l
- Size 118KB
- SHA256 30d0f4479b7223afa3e6679b6261e68685f25ef5127e00f596b946fc9518bc78
- MD5 23c86005938a365aa13f47c757508f83
- SHA1 a9c5f0ad4c68fb785f6936f2b2223ae88c9c1b6c
- SHA512 6291ae1b024b83eff453ae2c57969446c2ca7ea4141cc85e13ecb6ca7dd5c04aa79e83594b444463fdf243482aa0f22f1cd3c164a759530a18a5c04ca3e053fc
- SSDEEP 3072:LDpGyGD7lHLbdRkRc2h8kRRUoooLMIi/1CtPyL0YDIL6a9/:Lc8Rclk7UoooLHitYPyL0Y8L6K/
- TLSH
  T1B8C32B46BD81DF02C1D625B6FA9E548D33136FF8D3FA3015CC216FA0678698B0E7A612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Renames itself
- Enumerates running processes
  Discovers information about currently running processes on the system
- Reads MAC address of network interface
  Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
  defense_evasion discovery
- Reads network interface configuration
  Fetches information about one or more active network interfaces.
  discovery
behavioral4
- Target
  raul.i586
- Size 85KB
- SHA256 7bc264b4a37d6ccac9176959cda22c0ea99a3a962849017e21dc8723a4e64fc9
- MD5 ae946a76020ed6d4911a152cd4c76e54
- SHA1 49286f3bc816ff0679aacc493cc57bb31904b506
- SHA512 43060ded2cb86bab5579f3d17066deb389ecd7b0783141d4328df327109301a138eaa5d87025d3ad2c5ccb4d7d463461538a2195f529120fe4c78086498b1576
- SSDEEP 1536:HjY+hjEaGOu2uIVzmafYukUUu/WY53hGw1rq++dP+xogMSYri3ajcGZ16:HjY+hjE6nTVzmafYTZI3hGQW++y0yaHZ
- TLSH
  T1CF830882E747DAF2E80311F592FBDB312A35FE3A0835DC8AD364EDB169126D2550A35C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Renames itself
- Enumerates running processes
  Discovers information about currently running processes on the system
- Reads MAC address of network interface
  Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
  defense_evasion discovery
- Reads network interface configuration
  Fetches information about one or more active network interfaces.
  discovery
behavioral5
- Target
  raul.i686
- Size 88KB
- SHA256 fdafaf4366664835f363de8b39cafcaa03ce1136b84c7aba87a9e143478dd7d2
- MD5 e7c350506aa41a9755dfddb9d230206f
- SHA1 543610ed84384a7aaedac1026fe15f63c012aa65
- SHA512 1ed83099a382f884a32cde6450f41f0daadaedf8d920a2d82355dc87a9940ac2ccec9109b394c13457cd4e35dfd46ccea60fe1336d277a9c080ef64d708ac7fd
- SSDEEP 1536:2rniF7anyy1O9cId5slWhiUcOZoRfKkfYkBxylFupNGmtNe:2LiF74yWO9ckZIfKkfYoyepNGa
- TLSH
  T10B930741FA87DAF6C50385F080E7B63F9E31BE1E4431C59ADF98EEA9D923AC12505358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Renames itself
- Enumerates running processes
  Discovers information about currently running processes on the system
- Reads MAC address of network interface
  Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
  defense_evasion discovery
- Reads network interface configuration
  Fetches information about one or more active network interfaces.
  discovery
behavioral6
- Target
  raul.m68k
- Size 94KB
- SHA256 ac28bfc0d7037af9aed40d633a824f061d23374f86a4e2f422841a7cdc2f2bda
- MD5 b23961d92dd297696dc0708f9fdbf0cd
- SHA1 8391195f5805e0bd94846ae502f87d93670feae0
- SHA512 f9bdc78400f3e2a183de33878f38fcb965ecf85f707779c3bb61a183406bfa2bb9c8cc0e15df8047b0a9de727688051a56b8949aacb123f4d8846ae3e9ba1a04
- SSDEEP 1536:cRVWR11yelssP1zVTrdkMMmmLQzr8631WYUF167aZ:cGaezVtJESrE1maZ
- TLSH
  T1B8935B86BD01CF3FF41FAABA449708267535FE6518821B61A273BCE3AD610E22D53F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  raul.mips
- Size 126KB
- SHA256 95871105a8ca339c39ede4b2da1e2d30989b5a91395b808ba81f3cf9f7ed0b14
- MD5 531c0deac93b2aec0fd7212181281b0e
- SHA1 e60884465478ec7abfe803f992180977e4233311
- SHA512 23f83e22b92ca57f0fadc1f8d00e9addd17301a549166536924d765214b4d15e0c8137e335773d61d537aa88e8a67c452b40bbfc032bd1b6824f993590bf2478
- SSDEEP 3072:FsTHFbgNnCJecNO7kbPE69LxdtD2AheZCWDI:Fo3tDVd
- TLSH
  T190C3A50F7E218F6DF35982714BF74E3496893B962AE18546E27CE9101F602CE641FFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Renames itself
- Enumerates running processes
  Discovers information about currently running processes on the system
- Reads MAC address of network interface
  Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
  defense_evasion discovery
- Reads network interface configuration
  Fetches information about one or more active network interfaces.
  discovery
behavioral11
- Target
  raul.mipsel
- Size 126KB
- SHA256 b68c2a6af863c98b91e172f21f4593f37d2cf25a39a3e216617e58124f0ada26
- MD5 87b3538ef395d7180dc62e5c8920081f
- SHA1 bb4f9dc188f38f8825c9c6204d9121f9e77a09b5
- SHA512 555bc7c3f8112668b07e0af47ebdedf61bc87fcd925869000a82cb0c0d1951b90a07314119f6c30ea1083140d0c1ec4f3b01dd6ddc9e19be4f6e4da82762f7c0
- SSDEEP 1536:YaDeho+HPtElSuLBina17EjtVvlb91VPwdQOADL27Jqlk0DrcDHnBGVRIdpCNHGf:nK6E1ud17EDwdQOQ2oeLBGVRIFO090M
- TLSH
  T192C3E709BFA10FFBE85FDC7301E90B1A258C6D1716B63B767534E858F24A18B0AD3964
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Renames itself
- Enumerates running processes
  Discovers information about currently running processes on the system
- Reads MAC address of network interface
  Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
  defense_evasion discovery
- Reads network interface configuration
  Fetches information about one or more active network interfaces.
  discovery
behavioral12
- Target
  raul.powerpc
- Size 94KB
- SHA256 f02b8476bc0e5a38f364da103f1583b17c2742361f46f5640d161092e35a1bd4
- MD5 25968c6172db6bd7879e56d846ef5fb1
- SHA1 10c8734a97a2c2439b080da5fd7d80a2ffaeb864
- SHA512 c9190cbf4b59a841b220022f4e71ac2314aad3268632ee23fd36a8f0c9dd03768d489041d863566f9d00105ba4df82d716f73e2075ecb041cd1b06424d6e82ed
- SSDEEP 1536:GHV4qyijmHZfLy+o0NGlYq5bY1sBJxIz6tq5ZW2bmd:mV1yFtysfqdYAHaWvd
- TLSH
  T116934C02BB1A4F43C0AB29F01B7F2BF097D5BDA518B4A4C4751EBE8943B19F16047E99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  raul.powerpc-440fp
- Size 94KB
- SHA256 98e8621d5c2822da0ccae779f5025f56ea690e955d55ae9af7c8cad9a2658599
- MD5 9687d2fcb154a8abfee8180bb3f22471
- SHA1 804f984228333ca6192547b523f69b706ec14785
- SHA512 409f131a0b14eb70e14e5f46824e1a21fe03dc2886cf05ba4e7fdc9846d341ce8dc24514c209610855986295254e1ca22d3768ce3e56128492aa5aa06cbbf867
- SSDEEP 1536:59kDIPJCZGv+tDM7pYZgmqpoJljzKVqjJdGPbsrOY:59kDIhCk2M7AgRAlygdGorV
- TLSH
  T14C934B02BB194F43D0971DF01B7F1BF087A5BEA158B5D588751AFE8943B09F2A017E8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  raul.sh4
- Size 93KB
- SHA256 9fdef11e64a74cd402931d7f8834e999825c0e0e91355f0f7b571c9c24588313
- MD5 13b8702742c88c90cd02f9f3b1969cf3
- SHA1 0752547cf8d82b49c7d9e546356efd6e09024294
- SHA512 f779e861a0f1946d02f59c48ffdd9e5c45453cf18fb6ebaccaa21ade4408840a05ed858e802a5381a9967eb549e7f20d80526aa4e974a8b38505cb6533dae88b
- SSDEEP 1536:Bjt6Xzi/qqIiCXtMUhTnrvSTGfGCwacbYmlUnqgtsRTX031TY7shEC98:Bjt66DU7hTnr6TGfGRacbJkqgCR+TasC
- TLSH
  T1A4937C23AB954F86E00776F1A1F19D744F33BC2B48671DFAA526EEE90083AC87542375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  raul.sparc
- Size 102KB
- SHA256 336656fc6a31de7dda597b739354db26beea2315edc0628232d3972a8d65f98e
- MD5 ca562521cef8572f2550908cb03b5961
- SHA1 05d13911c12b120457b8bc7a956ae663ca534087
- SHA512 d407d3f8e651ca3508d8ea0bdde8d35859f7b207757b273f42838830524013f67e902532addaf499e5afbf5b0ff17864e35674b4b0629c4ccffbd431957cdbb0
- SSDEEP 1536:5/zKsafODM7fR4jeaKfgqOeb7NF9MJiGt3o+D6E:naQ+CqaAb7YToe6E
- TLSH
  T18CA329737A338E07C0C5B5B241F34625B4E6AA6E18788D4DFEA25EC8EB117D03216776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Wi-Fi Discovery

T1016.002

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Renames itself

Enumerates running processes

Reads MAC address of network interface

Reads network interface configuration

Renames itself

Enumerates running processes

Reads MAC address of network interface

Reads network interface configuration

Renames itself

Enumerates running processes

Reads MAC address of network interface

Reads network interface configuration

Renames itself

Enumerates running processes

Reads MAC address of network interface

Reads network interface configuration

Renames itself

Enumerates running processes

Reads MAC address of network interface

Reads network interface configuration

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28