a907c52402d387a568bae75960f122e6486ca5ebcf237c046f12c9e57d005d06

Sharing

Copy URL Twitter E-mail

General

Target
net8.0-windows.zip
Size 289KB
Sample260828-b7739asdng
SHA256 a907c52402d387a568bae75960f122e6486ca5ebcf237c046f12c9e57d005d06
MD5 4498149a445bae92190649e2fe281fa2
SHA1 62d5d947a655f9f1d2dfef53738200df4bdb135f
SHA512 5f8352d1a4bb8608108c82496e45188a5cdb4613dfc18ee4a682dd6fe41f0277ad97f118be2606f9f070da37096465c5f115776cdb553533f3508ae0ecd05728
SSDEEP 6144:WcSg1HIRZsh4n/rMIO5ysjqaIDD3wrw+2uNobq70u1:W5gORuCYIO5ju1/3U2uNob94
TLSH
T1835422B7D0211105FA4E657AB10A456A063EFE8800A67A958C94F4CC7AADFFDBC0C1DF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  net8.0-windows.zip
- Size 289KB
- SHA256 a907c52402d387a568bae75960f122e6486ca5ebcf237c046f12c9e57d005d06
- MD5 4498149a445bae92190649e2fe281fa2
- SHA1 62d5d947a655f9f1d2dfef53738200df4bdb135f
- SHA512 5f8352d1a4bb8608108c82496e45188a5cdb4613dfc18ee4a682dd6fe41f0277ad97f118be2606f9f070da37096465c5f115776cdb553533f3508ae0ecd05728
- SSDEEP 6144:WcSg1HIRZsh4n/rMIO5ysjqaIDD3wrw+2uNobq70u1:W5gORuCYIO5ju1/3U2uNob94
- TLSH
  T1835422B7D0211105FA4E657AB10A456A063EFE8800A67A958C94F4CC7AADFFDBC0C1DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  net8.0-windows/AmongAz.deps.json
- Size 1KB
- SHA256 73f5dbd2fa13e861baef42ca4ca4695434803d25bb93d98dfb21d2488111e3f6
- MD5 57ae880d7044420c77f9118b26f36a5d
- SHA1 8bef435e88d5a15249a1e3d93e8c98da6b6328b6
- SHA512 0c7c766e6fdb3f4c7ecc7fe759827758a3ddc4937fc16f116e1a2fee84a2b958b2283ac255fcb8fd35777d8be3d194bc33898d7ec837722e0ab57a58cb5a283d
- TLSH
  T1A331B62ED5944DAB09B523B6A43AC396F622532F5004080E74FD546CCFB3EA75650F29
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  net8.0-windows/AmongAz.dll
- Size 120KB
- SHA256 0f9b969e8c23bd20f98133c513cad133a42e5d6bb8c9b360d029a0587e08dcaf
- MD5 ca16b054191a231df80310013f4d04b8
- SHA1 81ec819fb60c6cc57082f7a9df090c7451471030
- SHA512 967dd3d3390defbad8f50853b23d24770a6125b95e41bc5e33abdfe2cedbf4125dd0eda99b146c3b102a7f9ebc53d6f4675eeaac85e1ee99833e6b9ea4efaf4e
- SSDEEP 1536:feLxnLm0hgVaSuikAA8LwECfy/4eyLpkkrh1JIT3MFI3lg4zcjE/klJUJ2lOxM0V:OZbSujAAWvCfy2Llh1JUlWUJ2wxM0uW
- TLSH
  T1FDC3071432F84B62F5FF8BFD91E08023A7756467AA0DFB491E98B9CE19523C28455F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  net8.0-windows/AmongAz.exe
- Size 148KB
- SHA256 b55883cd3fe8eaeb3564a546c188c16395d135edb4021b19bb1d24fa27b19666
- MD5 b382f7237d60de32e4b7d1eb34d24f6a
- SHA1 23ef85b6c872588fb6c2aa793aee5327fabc4c4d
- SHA512 545b0760018b6ee975de6fb7e67b76e94e34aa3f8b354b6dd0d0e9289788cc4db65d437a2ac705dc175f30930bc84c9b0515d312193fb2f17e05beea4c34a6cd
- SSDEEP 3072:MqeXA/4yIg9vkNPNu6H6xCYOiVUE265pJD:MvgvkNFNaxmNEJJ
- TLSH
  T1B3E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  net8.0-windows/AmongAz.pdb
- Size 42KB
- SHA256 57201215bdd9a6cd12fae3846baf1f65c9408b06d9a02d52a14a6199be7bf15d
- MD5 83fde69cde87ea0b205631abe0647255
- SHA1 ba994bd9ada25a242aca90a8bcc699942ca736f5
- SHA512 cf1d66a115c9171bd8f2bc3b0732036be362b1591a3130e9ab526e2af9c7b49afcad2f50f72e50432582fa4bf6bf2b082d075b5b5cdf2fddad29d738507f2ea4
- SSDEEP 768:NF3VF2Ni2IdUB7kCs6eNFfY8+FxijwquWXShwpYA6iCrMiz8J0OP:jVINuMo6eDfY8rwISmrlBqQ
- TLSH
  T12813A42AD3C8CB1AC7423672903783197774C26197068BA5B2E8662DFCDF7606F77164
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  net8.0-windows/AmongAz.runtimeconfig.json
- Size 357B
- SHA256 a6a31e881a564ce497254b0cc044c32ade3cf5f02c6501e43c8425e8698b2c00
- MD5 35bc322bd42045632a8cb4fce81a90d2
- SHA1 351f78a6441ac2c8a34a03d92561000889260326
- SHA512 747651399d598da800d2d0090924b682bac3578c6718adf60cd6d99fa4f89ae8c343addb97476b64597c59007b2259fdc1a49380d7c33c8cfe220a30201ee718
- TLSH
  T192E08C3AC9144DA315F53BBED52AC287FE3047AB0158092AB6BC441C1F725625000F88
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral11 behavioral12
- Target
  net8.0-windows/Hazel.dll
- Size 140KB
- SHA256 01dc83e8bd863f8304afa5f12876d07bd7438bbbc746b307eebcc625242d1b36
- MD5 6b9461da6eddeb4368a500070791d3cd
- SHA1 7684846ae6373fa270d1f759add027c5583ddc4b
- SHA512 7c3fca8eeffa66160e969def012d0599fd0c80ce8819008f3ddf5a85451e1a8bc2534dd76d73b51b769c01c5b273a0819ad4fb254556152600d053670341c1a8
- SSDEEP 3072:hjqzBZIJp6F3vYpO8gX9A8B9xZfM9ZcCuuNFrClyyCsHrCoypWqbVy8QAb:kzBqJp23vYUNBB7ZEDcC/NKA
- TLSH
  T113E33C646BFC0D65E0BF2BBDA4B95501077AF912E9B3E34E079850FA1D627C1C910BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  net8.0-windows/Impostor.Api.dll
- Size 169KB
- SHA256 68fee1fe2b7106d7ec773455f9bc87de6572317f9da44d9b3701f2dbfe417f63
- MD5 451d68132389d5ae75a0fdae52dff58a
- SHA1 2075e16a7443c905561ca6bfe16a0e0b5d651548
- SHA512 7bdd6b9368db97e608d52f49c39aa44de1beb5063ae2e473bc81e4b6ec8ede06da3f1e7adffed33bae9d90d8442d464bf744a568002f31bdf9672569a980df26
- SSDEEP 3072:pKbgqaRSQXV7sRrFd+B6Kvl57uz6aH+UunWIMiGJdB+0jhGGov5f:XquSQl8+0KN+6KJtIsJljhEv
- TLSH
  T1950449392359C32ACEAA5635F0B105155D32CA453501FABABE242CCFEF47F54E6122EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  net8.0-windows/System.Management.dll
- Size 71KB
- SHA256 f440d3834c253089361d1c8e8fa61c6088acfde7a18d6cb3e612b74373c9aceb
- MD5 d1baf1db95c3aecc5570e757491a4373
- SHA1 7a0f934d9287305f2be6c8decea663f7dd32f228
- SHA512 02792a658bd5d9bb114d4808c0011c526744a0cbf66e247366eee02fb27645ff39e93f3a109309c9d2c6164a37eca114530159208748c8d441c3419ce62bb5e1
- SSDEEP 768:x/jDXm3gh3nbNhm/ImTVEathoQcYkiSLJKdbw6C9zKW:x/XXmEnbNDin2QcYxS9y86ezR
- TLSH
  T1BC63A411EBE88779CBE70671B47083746E74BAC72D22DA0F291B211D187AFC04F65E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  net8.0-windows/settings.json
- Size 6KB
- SHA256 bbe315d632227bd21aab8a809d564d3f0d620a6a047feddcc99003c1b6e83e9e
- MD5 972bc23f465974420adc5764104d3e3e
- SHA1 40c563a27fa2f578f8bcba19e18af0e3145633c0
- SHA512 7f0798ae5a03d87e2046b432c310fd17cf495e7891fdab28c766290be9882c0d7775977a75668d93a17a29d81efcba86528bc80c462ad1ecbb48750fad172dc2
- SSDEEP 192:5bHMvRHMvLHMvLHMvrutEJfWHMv3tEJfWHMvqpoLiaVjiMLUi95Rien:5Bpu
- TLSH
  T11BD1D622FAB70C490EB53182F49C7A53A632BE87F070396672BC114D57F34DA91B6729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20