dec9923ab0e18f70eb09760fd3281694bffbe975ad2e149cbd043c8a0f7a2426

Sharing

Copy URL Twitter E-mail

General

Target
custom-install-standalone.zip
Size 18.3MB
Sample260827-sewyysaa67
SHA256 dec9923ab0e18f70eb09760fd3281694bffbe975ad2e149cbd043c8a0f7a2426
MD5 e723f54ba8a1ce4768105d8c920949d7
SHA1 64b7a397d74e0f2dc42c1ffdb74e2527383b7656
SHA512 7301ae87b8e538c4fe61027e831ef4e8f181ef0289d463347fa5a600d61bab180d760d720f75d072a88e5c726d9a10acab1ea1e9d47965704dc24b1ad3aee1c5
SSDEEP 393216:zKRjing4udIwwvSaUA4Il4EyiexTQ+z5pofAO1IFE0udIw+Du:zKgnSdIdn2pQio8mTdIlu
TLSH
T198172355F53E26B7F863BB3C965754C0808BE7C5388066DB0A5F46C804AF88F662B16F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  custom-install-standalone.zip
- Size 18.3MB
- SHA256 dec9923ab0e18f70eb09760fd3281694bffbe975ad2e149cbd043c8a0f7a2426
- MD5 e723f54ba8a1ce4768105d8c920949d7
- SHA1 64b7a397d74e0f2dc42c1ffdb74e2527383b7656
- SHA512 7301ae87b8e538c4fe61027e831ef4e8f181ef0289d463347fa5a600d61bab180d760d720f75d072a88e5c726d9a10acab1ea1e9d47965704dc24b1ad3aee1c5
- SSDEEP 393216:zKRjing4udIwwvSaUA4Il4EyiexTQ+z5pofAO1IFE0udIw+Du:zKgnSdIdn2pQio8mTdIlu
- TLSH
  T198172355F53E26B7F863BB3C965754C0808BE7C5388066DB0A5F46C804AF88F662B16F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  custom-install-standalone/lib/lib2to3/tests/data/README
- Size 410B
- SHA256 b7442a0d467c1bc14706408cdb44109df70728ad4472e1fb0b60947a053752f1
- MD5 d3d39c73de677a4415097dd577e1097a
- SHA1 7b7efc962d4f92a2373764df46aa94f4dce5efc3
- SHA512 96f1e080d24a78be52e38fd72e245b21c035ec35f7dac416e69a3c0aade920ba9e99c73ae146603aa4435f7a12fa577d56717ec6395c763ddc9266a976f8ccab
- TLSH
  T125E055E9988A203600A2A598A21875789E1FC07E7B22842AD65D82A97707C2023C18B3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  custom-install-standalone/lib/library.zip
- Size 1.0MB
- SHA256 dd65dab90fb8906185e502ed07caa4c2549da1162fe21de92579f4d93c670114
- MD5 034ce4f851e4a674bb512a76c96bd944
- SHA1 1ae260bbadc81d6a6821f773d16e340776ecc0a5
- SHA512 34445ecf1ff3dea00fb58902f968125bdd68fd5d3b4370351daae2c2a0330c3faa1e474ed797af7f678879da2cad0195c0c973a32e7e93fa926203694d31ca66
- SSDEEP 24576:iTAE5Nu/W0cp9gpeMa7hLoNzDlBq9eO9py0SuObbwJW6:icwuWsytL4lBq9pCuObqW6
- TLSH
  T11E35236EFE64B45DC916FF30D0AA2E62C5DEE745E415EE0F4415F2235AA31EC870A20E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  custom-install-standalone/lib/test/Sine-1000Hz-300ms.aif
- Size 60KB
- SHA256 1933965d3f03aa674c8ada3b5d73a2287d71e35bd8e4fa6d732724ba951dd27a
- MD5 2014c71fceb0bcdf7973711b5fdaed95
- SHA1 be394ac81605ad2fb739ebdd08273ed85603b222
- SHA512 5f76a53af9ef4ef7c2eeb848811c1deed5526f7f35d15a90c1c9f473ec56bbbe5e69ec6a59130e098fc3cb332616350779ab74bb659c0a8d6cec695b84e990f7
- SSDEEP 768:Abbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/:w
- TLSH
  T12E53135A3285343CCA1B3D36AC0FC9569A15B4245C611436E4DF9F81897383B4E9CEA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  custom-install-standalone/lib/test/allsans.pem
- Size 10KB
- SHA256 364c8ec104864cc573c8f61ae3f5bad1d5ea82f1a1d55754011373465af7bb8f
- MD5 d866da65f1ea5324737d86f4a835d4ba
- SHA1 04aa736d0b89232751838d42d6dcba5265ec2697
- SHA512 3c3e5e7500835759a158878523df921ff9ca7a193f4da049c5b77de7826cd8930b584ba9ac27638d925ce25344d693b27347242502285ac568cab47cf1a135ff
- SSDEEP 192:HZTOPb4j+yeX3VRkop8cFwuZQbQkHPY1JPw2SNDf2uOjTrVBYTOPb+Y:HZSs+yeX3Vy08cFw2TmPY1JdID2jhBYm
- TLSH
  T16022D7564E3BC485247A651F0F6AB143ED78430F097AE1F2395F4A908F3A5126BF6EB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  custom-install-standalone/lib/test/audiodata/pluck-alaw.aifc
- Size 6KB
- SHA256 bd180a1145d18611e620bf7e5baa5b29f4afbaebc894befcb303251b5ccdbab8
- MD5 a94ffe85c5cd06da9eccfbc5d211f917
- SHA1 0c6cada81d2ab019333c17913832fcafdc73937f
- SHA512 36b69cb15096dddb01a4851c599e8b46cc77d90280f2c10f2e8be26dc81f5a7dfb2fc26ec55146a74addcb6ab5f98d2987377a5e245acd83a905353fc338f475
- SSDEEP 192:h9vKGW7bucQFag2WGvst1dB7AWvDjaYWq5yjbDDal1:2PacQFnBusb7XvDeYWbfCf
- TLSH
  T129E18ED6DA80664CE73E583417298A6B264A2DF5B3A52F276FEC50034F0516ADEC5C4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm16.aiff
- Size 13KB
- SHA256 4559920a8cb9ea62be33023d6dd183bea88bc20bad1b4caeb196decb9e5fb6e6
- MD5 55a104cd45a4974900ca67c92a7a87cb
- SHA1 e07e037bfd8cecc46a12991d2c61a482c22c48c5
- SHA512 359d8402776cc883fbcf4d405141b35aea198e8da54fee386af02a166173f46fbce40c13a858c95301ee6d6939382cf78d8cb6a74b7c43ed15628606a2e55b5e
- SSDEEP 192:5LqWZjfgoRbTc7BOJ8KlLtPBYzms1wA/h/EZFLE+9I6eiHe89rjXtizEmRL65LCi:RqOfgSbcbKNUzmKw2yLaieuizTG1CHUt
- TLSH
  T10352C0878E4BBE1E85E982650145E6C98C103D60C7691ADDB41ED8F0DD72B237BA9F30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm16.au
- Size 12KB
- SHA256 cc925dc8ed7705c2bd444542091169073445d907f5cade9579da83e8d2568ad8
- MD5 8b53b44206ea1c797f2b27a4a1b6532b
- SHA1 cca0248c188b7a13cc713ec4bb92bc3cfe226c3e
- SHA512 81e0ed2ba40ae1933eaa73febc2150c804431239cd6244b1e9da97072c6b69a88938e8d68006065b1f04c39179bb0617ee66588f6eac28716909cdfaf68c5dc4
- SSDEEP 192:EGqvOf+kJ0FLU3P9s865aOPnUTST7I5hqJHFb/iysMRvPFGrzTqMpSdagK6:EGqrkJ0Fu23fPLT7IGleysMRvdGrzmb
- TLSH
  T1ED52D09F81273C1C91559255503F88E61E302EA5764B7D2DF18FC693F3FA24A2AE0747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm16.wav
- Size 13KB
- SHA256 0c7b9ee51db4a46087da7530ade979f38e5de7a2e068b5a58cc9cc543aa8e394
- MD5 263f463cc93d29413dd1955d560cf70b
- SHA1 bc7feb88523009e733c53627ae2aa67bf461b700
- SHA512 9fbca3049ef0d8b2f91b5a4ec90c5c1f54d7306c6fb5b6515cf546bff1aef43cf989e9c5ebb99b16ae2bbcb9bcd82a477072960b143ab9cc1709df36c6985809
- SSDEEP 384:vEpAW7koAXlsDzNjmdNLdi2odoZ0MTfzBU9f:vESoseDzAdNLdipsTfN2
- TLSH
  T15552CFCE48033483157AA3365272A8B69A900CD7E633C4341B4BB69615B9AA4B34F5FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm24.aiff
- Size 19KB
- SHA256 663c223c95e77edf64bf88b2fb3f9ab385866187630a4914c7c17ed7221c9f82
- MD5 7c28f23ab674aad98a01a116dc01b4d2
- SHA1 16f0c4bfe55f3b98ed2c4e8622748d47e45103b1
- SHA512 dadc4dd5256bf90e72c047475b867d883cf79cafa1d7eae28451bf996d8e8da6a0a849c7f700648fe23d24dbd46dc761ac357d6678a3ea4889028871991b7201
- SSDEEP 384:pVb2zaeybT1ttql46yD3dGjE1Pbj5Xtd3C6PV8SkULYCgoUJ84:pNRnttttDtGcf/d3TdZkfCFUJ84
- TLSH
  T17792E1EBD23D23F3CE54C3F5E791F458A88F37A500EA734619A892A8406E917319D334
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm24.au
- Size 19KB
- SHA256 0f7ff61582b28115c56fe3127a4a203aefed876bd4f7e8d8c20224afce0ffe97
- MD5 84e7c7e43334b5d879019a66d97e264e
- SHA1 b85fe853e8f26cbf5f31af7ebe8f131b31b563f5
- SHA512 00068f777df1b808972ebf01c31a516e9a40ddf31df69ae83a5c98341b4d448ed597ba6253d98a09eed62e8061fcc7125dbb3905543a31a50d2a6767b0814671
- SSDEEP 384:LVb2zaeybT1ttql46yD3dGjE1Pbj5Xtd3C6PV8SkULYCgoUJ8Z:LNRnttttDtGcf/d3TdZkfCFUJ8Z
- TLSH
  T19B92E1ABD13D27F38E5583E5E691B468A88F37A500E6B30A0968D3A844AFC17319D375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm24.wav
- Size 19KB
- SHA256 802304af89c305a0d5feb8bf6ba9c7b3abfb6d5e620ba6d4f4d69277ef315e22
- MD5 95fa93fe473ea60cdde314dc9725730f
- SHA1 74d45d5bae9cb915f853d2fd0fce956ed7cceb1a
- SHA512 cc032becb050e6f8e1273bd0eef30682782041fab9a1cb08f144fdc8e86e3c385cbbaa3a4b2b9bc22e77874b82f102873fd7434abc354055f5d3666728ccb3db
- SSDEEP 384:sTGvh4oHhaK1M/n3fDrMksyE6MTRE5C5nS1USsZkdzAe:EeqoHwK2rrMf6F5undUEe
- TLSH
  T1F592D0296012FB8AD887D0D988DDD3E9B344C1BD9B9C3DB81AC4DB4761FD190BA6C613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm32.aiff
- Size 26KB
- SHA256 6b03ea1d93a88bf105909313e5661b5f35c281bece7485a9b997a621cd59f9ac
- MD5 2dbf2451925144816d1484317b0b6bab
- SHA1 a1bfacd94cebb593fa9441be90d83dcf879d6c86
- SHA512 e05da22b86c0bb1405f5ac2f1ec7fce0286f1f91ff295cf03589118b94f4a10cffe86fa55fb99eea045f1451883210d787fbd81ba49153c1ef11eb55a2569194
- SSDEEP 768:8Ia1qDVmJaDcFCGJTrlbR+EsDRz1rZeePsqdVmM:DTmADfGJX6Es9XeYRV9
- TLSH
  T170C2F1F0870CB752DEF9152A4A07F45727B2DA4DEE2B49C989613709BAEF41B06B0F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm32.au
- Size 25KB
- SHA256 2a4dc7a2a75969654a60ae333bdda0b53be979e0db035daa9780f202d9faea3d
- MD5 b03add40a0bfcd10dacb962f26f20ac1
- SHA1 e09f34b99ad172b2b3c507aa62d7cc9d13ab628d
- SHA512 015d4592ab2c43bcc31a1d296f7427069646007b3c7c69d24f80afc640037aceee34f2e2407b7e954d77f6b30e504bda9524643be68693d86b23ee925dded888
- SSDEEP 768:zIa1qDVmJaDcFCGJTrlbR+EsDRz1rZeePsqdVm:UTmADfGJX6Es9XeYRV
- TLSH
  T18FC2F1F04B0CB7539EF9111A4907F56727B2DB4DAE6B49C889723709BAEF80B01B1B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm32.wav
- Size 25KB
- SHA256 ac87068283e5d1d92cfe4dfb2cc50d5ea5341d5ac0efadfa47db48595daafcfc
- MD5 865bb0bdb9f34c5e6795ff34b20f3533
- SHA1 35c7219a416b2a2d5e7876f6f9973e2cf4460b28
- SHA512 739b10d2ede581fd26160e281499e460caa04429f253ce8e67e472d17480ebda182ca4da89a1d986729e869203a2b816f462aa33c16c60c87a5767bda510da8d
- SSDEEP 768:EOcraxb7tfS5gbRsRDPRIeQ7ENMoxFAj:pcrQhfS5gbYRI5kMoxK
- TLSH
  T10EC2E0E1B04B83526FD5DC366AACD01D564BA10E88BB0774642E2848346F3BE19F772F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  custom-install-standalone/lib/test/audiodata/pluck-pcm8.aiff
- Size 6KB
- SHA256 93e79b29fca6d56488393712285db29e7e5a75c693f9be4008cde600b2b81700
- MD5 8e07c13f49ac805686d407d5dc4c75aa
- SHA1 34c00208d5cd9d6632b0ceebdb871fa57bd5d620
- SHA512 d96e057c35819ed912783070dfcdf53512f822ad33a67a277016f328f9f1f5654b7375a54d27e9115beb1d01265798007f9d085d0522cad0cd99eaecd30e3114
- SSDEEP 192:mwLQvcqcESUOI/jt7PGQV3bldEHeshz0q2OC2Bl1:GvRVSUOILt7PH3bGdhw5OC0f
- TLSH
  T1E3E14B13F20B719090796AA75C6DA97A4F537E0F11135E4F6E1E5D70620BB90BB3493C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32