2da9f59e6469fbabe0250fc89abd56262981ec565ac6a3758e13ca173a5d4249

Sharing

Copy URL Twitter E-mail

General

Target
packetcap-v1.0.0.zip
Size 6.6MB
Sample260827-wr81tscm2v
SHA256 2da9f59e6469fbabe0250fc89abd56262981ec565ac6a3758e13ca173a5d4249
MD5 27d7cf5f630b8504943a11ce4e52f2e8
SHA1 62ea1d6dd97afc15fbb046e4f827ba7c2650636b
SHA512 b37ccf3e7936433e6d5114502d076ead363fe59f4c620ff42ce8330cb26eae8217dfea222d5afe74d0a76983b9c67680ae0227a2bd26787a29d66f1456fd38fc
SSDEEP 196608:/oD/1Adg6Xy5ao/Rq3roarUYkoxdrglHqgTQC:/ohAdgNR/Rqb1rxd+z
TLSH
T1746633379CC6E8D5F0A8C5A7045068DE9B1926FB12139F241CFC9BB2FA0DA976344793
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  WinDivert64.dll
- Size 46KB
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH
  T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  WinDivert64.sys
- Size 91KB
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH
  T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  install-ca.bat
- Size 1KB
- SHA256 df110ea924fd1636c15d2c7662bf5bc2fcbf88c28740abd6a341ca577b51130c
- MD5 fe31e98ad1040fb3c92c5a43f616764f
- SHA1 1c7cc078b61460486f5f58eb6f387b913dc9c192
- SHA512 db14e35f4f6e1e6852cc190cbcf7c54a194efaaeaccf4946c5ba2b02ec856bb1fe2331292cce752a7bfe16659d1b6b8bc764433a19b1e6ad4b967de59533b3f3
- TLSH
  T12021AAA2790E6821D5F4EE524E750073F40888DB6B1AAF5CB03B80745FB93C679FD884
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4 behavioral5
- Target
  packetcap.exe
- Size 11.9MB
- SHA256 0ca9aef13f606b2a6184b3563f2889a66f50b903c39b1e3e80324b8a9629b855
- MD5 d049a47519b2be4444622e3860741fa5
- SHA1 75741a23094625525b17ed8d8f02c9a38e1a3310
- SHA512 8fac24def25705fa1a47294231fba9dc31b23f342cedb76827770b4e6aa99d8aea3027635546bfc6caff428ef94e2a61b39fa340b74df9521bda4d7f30a2a6cb
- SSDEEP 196608:k2PzXvEVNO3E86g2DeykhDNX9klgkZwwnBVl0ja0Bt:kYzXvEVQ/6g26Nt+ZwkyX
- TLSH
  T101C67C47ECA559EAC1A9E23085B39213BA717C491B3223D72B60F7386F76BD06D78350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  uninstall-ca.bat
- Size 1KB
- SHA256 700251e7293dfc564ee1d9a09789c1136d411b06d87a97310c6df1d5557b1a73
- MD5 ff34f1fb42789508acded7c5d834a5f5
- SHA1 428d3d78a96b86f30b784b0b27cd64fbe4b696eb
- SHA512 083615c672735dcb8241b21e8dd41077b9bc64b0658ef7cb468051b8436c13b57a0ec31339a72f7ec47d5fcde71e37804e0e8422be1e9ef643a0b6b2997f8ef8
- TLSH
  T17221EF3A31012C11CAB4DAA14B7A1487F65904CB2E691FF8B4AF9071AFA53C5A6FD848
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9