2678d9768edbefa38039f00b6c8806d5d76ca8369560e8be38887f0e6c29a278

Sharing

Copy URL Twitter E-mail

General

Target
OpenVape-v4.21.4.zip
Size 27.0MB
Sample260827-pp6pcsvcld
SHA256 2678d9768edbefa38039f00b6c8806d5d76ca8369560e8be38887f0e6c29a278
MD5 fbfc7ec30568ccbd31f6886d0b9b18b9
SHA1 c016150a0033fb36c3339d98dc0409ab6e5d2c13
SHA512 24add8d6dd8e7bb910e437445b10a3d9ce78463ec57f073d2659eb839fd10febc478404b61d63267e4940a86c975a28a4c16e618ad3cf9ff64a943df7d72806a
SSDEEP 786432:ZeveBkhFUNGRyq8VSdtyzHgqn/BosFqktQ:ZepUNGRyq5nyzA+BOUQ
TLSH
T1A857333AD97E005C64407E383EB511895E3C8D7B71FEE6B57BA39629A1611CCA03B32D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Vape421Injector.exe
- Size 19KB
- SHA256 a51fe50eae88d329323b5971d38bc2463fd824275238c4da6e27c91a0d75af82
- MD5 93e18ca322c0ceb7d18905ec0536ee27
- SHA1 5c95076e9d1a6072f632ef99d8e5fb8477870b97
- SHA512 7c899fa5f3c0ae75acb5e2e2ffeed97c2dc49825ce4291fbd781d8aeb2bf39a21cf7191f20512249d08e130530634247db6284be17ab664e70a258b7eca2a55b
- SSDEEP 384:l71trhY+ENTYhYc0c5Rb7trk3N7we7gne:l73ydYhZdmNbse
- TLSH
  T157921A46FBFA14DAF57AD63689725136A6B1791B2B328ADF0358801C0D727D0EC34F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Vape421Native.dll
- Size 23.3MB
- SHA256 5af8904584bdac1c7d88e2b0fc58e9123e4011b56b500ae8d2a9fda3add4d449
- MD5 e5a880e0fcdeae71670f444bcfdc87f1
- SHA1 9c3966465cfb14f0c58fa13cdc07e03d90e5a7de
- SHA512 b0c2d1cac6369b8239453546eda9d358bf609351cd0010d689aa935115b2a25c252d1f0663d7150c965f5a2479a6152f0cd68bdc1f92736c2e79ac6a7bb6ccc1
- SSDEEP 393216:YlZlPft/bFU8epsnuv88M6/jmGw5rwgAVhw4mYvUxll8XaPBqVHB:Yfl5FZUsa/s5rwZV+4TcrKacH
- TLSH
  T1A1371293E8E8643EEA7B46366294023B7E3E8BD8E10780D514F875D254BBC8D5F503AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  service.bat
- Size 55B
- SHA256 d5fd5c427e018bb04f9b2a5a8c97b693fe4ce442fdddfa4648a92937e9d7236c
- MD5 6507800fb443c893c1090248fd903154
- SHA1 b6e7f55a464aa4cfae76680921f7ab28291d622e
- SHA512 5075d995f1b50374a6a685e629685ff04803e104ff30f075bc384479f09b868dbeebd85c76e366a8a8801e2432073c9c0e180fffaa363eeefc5acf491fa33bff
- TLSH
  T1D09022008E000AC220800083BE0A020A008E0028A028E00202F8E2080C00C083B02200
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  vape421-experimental-service-0.1.0.jar
- Size 5.1MB
- SHA256 f9b16014109cacdd5f14f5142f548a8a616a1c32da3d23101b1cb437f6ad46ea
- MD5 622f73dd9180cce02bb18dcde951be1f
- SHA1 e1dfb71ee1eb5dcd84773bf29770cc221e0488a6
- SHA512 0592a44a0bda55f1699d34e35ddafd2a407d9df0e0df67047b7efafcf1a0f28249884ce0b1b50582a463fb3b6cf06e2e393c9856ae1a5578025ab6dcf3022d7d
- SSDEEP 98304:L4ieD1JtrKcmMoHDEH0vqqJ7RvozcoUG5YeA4z1HVF/g+geG3CZM1L:7AeDMoQUv3tQzcGKeL11h+eG36YL
- TLSH
  T13B36E07994DC5465E2A3A23080809873F91C99C8FA1BB8D625F8274764FECC9DFB17C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  vape_v4_rewrite.exe
- Size 257KB
- SHA256 804587cabf06f7670294d5913ab8837dd8c65adca719ea8bf8eea2f43775ac1c
- MD5 35074dd1f12902d905eb453a6a5f3633
- SHA1 004302f9b2fa7ef8b43971a265efff0e2c7edd32
- SHA512 0728fd113855c9669ad906070b49519a3d657b8d6498c1793d56d8d996434e59a4abc0189bb1b45436b3a7883199b3037dabc816f8442c0a62e50d8a4aed7c2b
- SSDEEP 6144:CqvqNRJsH0pAg2ke9JFvF4Bu+Um9aus8nIz91f36bGRwNt:/XBpJFSL9ps8nKv32Kw7
- TLSH
  T13A449E1AB265022DD367D978DA626705FB73FC4B0B25A7EF43801CB20E126E85F7A741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10