3384ba50e1af903d95529ad919505b5a0642a236cf46716ce3691acc0e5ba320

Sharing

Copy URL Twitter E-mail

General

Target
t2trhmp.zip
Size 31.0MB
Sample260903-v3sbsayvct
SHA256 3384ba50e1af903d95529ad919505b5a0642a236cf46716ce3691acc0e5ba320
MD5 58355b89fada1bb91de8426ca778de7b
SHA1 29ad05676f12c6fbd5069e6e2889f9ccff241ad2
SHA512 a537125fd0fe17cec4f252e2ad08b1910a7266806406bbb991ae3e898ab55c09cd5cdb4d3fe18e77dd313b9ff99d4cede5a072bc7963f8d5589f8e326b672fb4
SSDEEP 786432:GksUyHe4uU+JClCxlvL4ClfoYX5l9cdBWVfACMTNn/eqi:NyvTI2CM27X5sDWVfu/0
TLSH
T1AC6733D06DBEB2A1C8671F76FA624DE0E07460F468B1E2DD60CD8AE9D885CF4E64504F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  Core/Core.h
- Size 142KB
- SHA256 057635e8b884a3269ce5f3a1a4d75da83d67c3764b5e10759cee9f99552fe855
- MD5 f9e32863f12af1e719e6d252750cafc5
- SHA1 3c3598a7fe4da81b74b0ba1b182488bf696614e0
- SHA512 ca1f09aadc9c19cd238c76e34ffa8018343541b6e6f79def3d9dd153654b4e4a1d385c9d4f7a2bead0d2ba919aa0c48e110d442d1c5cfdc18cde416114a684e8
- SSDEEP 3072:9HGsgmiSsBrFY3wb8aj46Uf/4NZiBWa0b9:9GsgmiLXYgb8ajj04NZiBWa0J
- TLSH
  T1F5E3A58D059960434DB367BE8FE73005F72A906347591720FC8E93AC1FB949886B5FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Core/ImGui/imgui_widgets.cpp
- Size 301KB
- SHA256 d721c91f55e6fe3da3a6198590f46389914d9e8ba4b7d33c76e7b6187308ef57
- MD5 5e84aaff8607c85831a5b84160e72a97
- SHA1 37ecd86a193f7aa9083011ed7e899f7223430a94
- SHA512 d08e906b5f9d91c45a04a64c789e17de0c403ca259bf09d698ed8c3cf3e643d87e05f6e9e895106fabb87e4800c16c82e7548be298b116f5119e482b3cf7a008
- SSDEEP 6144:Z1YSk3XDtBiqkaIki6MiZMhS3WbK0hOhXn:Z1YSk3ztBiqk5qMiZMhS3iK0hOhXn
- TLSH
  T1B864C5811D2322268933F0284FC76259EB2959773B94C9A47B1D635C7F84436C2BDBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  DigiMapper.exe
- Size 138KB
- SHA256 57832f7a25c5cd0dfca09c54d0019e4f19a0d27a949a92dc68baf35b72be8211
- MD5 365fc713b2097470bd269602b5d54eb2
- SHA1 4e237fb146ed252246ad81231294f877edbc35c7
- SHA512 5033693df40f39a568967b26977603c353d59e538d43da430838875d5955181cc5533a3ae8de4aaf23b8841046e72f970f539879f44c17a633b72df08ead29d3
- SSDEEP 3072:ejVYisyVqzOSDMbfVP+qmJTQSaMm5/6Ygnzg+zOG:ebsyVqzOswfUWlBgns+q
- TLSH
  T112D35B2BE659207ED2A6D9BDCA524912FBB27C850751B7CF136049B60F627D06F3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DCompiler_43.dll
- Size 2.4MB
- SHA256 ffedb064adc25328b24dcf145b04045a867a5574c931516d7845babf2a08937f
- MD5 d010ab113ed06bf6b42c7746ef395e21
- SHA1 5d6b1763f38ffe6d70146e74e9abeae15e3fc35b
- SHA512 0ca4656d0ea2af368b0f667dcfbbc819f8f1209cebba3e5a2bceb9b235e5443eb0452f0f0c3970b419fe6199d4d7cb7390a1f9cd46b689954f8e58ba9d0c2b9e
- SSDEEP 49152:wf59zPxKcvHzDB6t3+C0/aJfyLg7Ie4Xy+5j4m2CTv:92642o7lftT
- TLSH
  T13EC56C46B6A080F9C6AB81748A975703FBB0781403245BDB5160E6652FB7FF26E3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX10d_43.dll
- Size 558KB
- SHA256 d3671c4ea33f3a5eb214239b96e7e13d850ff17c7b88e9ce42ca98dd2cc81342
- MD5 a8724246a6a8ce5b06919b0d245886c1
- SHA1 f1a55d45e3693d8c40b5a7bd59671cc9b2edfbf8
- SHA512 f1211554b344d991ca8aa641f1ed11e00baba9775b21e93515f6471f7f2ad4fffcec1f9ab920b348cb543a285d184f17d1796ea77c9d012bbf9ca3cb3df53c48
- SSDEEP 6144:zrONe6geY8qq+ne6S6tsZsuvGnBfSmSQB6GtNWuzxDyKKqWru48ZEz2GPicFY:zUeU+ne6S6tsZNenBLSQB6SNWvqWb2GC
- TLSH
  T17DC46B1172B8E7E6E139513DB09AB64BF97130180B2082C766F44868DFB6BD45EFE721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX11d_43.dll
- Size 303KB
- SHA256 8b3bd19047ae6fd66cbb57933e622a3541545ad99fa609ea648d630816132f01
- MD5 c2e140161a8bd80effa4289d4b56d4a5
- SHA1 142e9e05130299428a2b7a34b6d4939ee43ab03a
- SHA512 103161958a070b643d781c7720f09f93d4d25366ec3b50d8a768c7e5c3b67ec5ef1808724b7620519f411f13f482287e8a8db5eeae1bd2bce764595b2f45dc9b
- SSDEEP 6144:p5H9B3WaqxYp9ZxQJ5H2FxPDiXHUu7Hzg5:pZqyLxQCcBHz8
- TLSH
  T135647B113798E8E7D0795039A1ABF213F67279442B6892C77BD00E8D5F76BD01B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX9d_43.dll
- Size 2.6MB
- SHA256 beb6cc5b8995713dc9de7442569d0f00b30462d6c4c2a05af591550c624b5caf
- MD5 6f1514f04c158022055e691c9b8181cf
- SHA1 3e9d1718446558a8d786a857e214ba5973951b60
- SHA512 20e8d04bddb5f56d7772061d7d83abc7b10b1944ded29465b67bb95f52ab1584f9f50d3173a86ff2d0682a42896d6e012fcb182fc997787da65174c5e0b732f7
- SSDEEP 49152:FL5W79bCsT6TA69r9R6OGykEzWCFC6mkAWb2zCeeYBKyCvUM7u:lSCONiS
- TLSH
  T139C56A2272F4D1E4D7268039B59BB307FAB4305913188BC353E04E9A5FE6BD429FA365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DCompiler_43.dll
- Size 2.0MB
- SHA256 aaca0bac2e1e94966f4546b6234333f9cdc1a4599024e30cd20aef4c1fd1b4f1
- MD5 0b3dd892007fb366d1f52f2247c046f5
- SHA1 9c09abcf5034d839ceb881437a5bbc7fee30ed96
- SHA512 284c3cfe4973d9ec5919e1bee1a739f3dad2b367d761aeef574b7d8e47f5bc775d5d6255ae087b4311a84a6e0fc80b57e5f308af5c635080b31f295fc0679dad
- SSDEEP 49152:zpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akl:33P9HP6Zpy9KyhMI50Du8LljslNsyHiQ
- TLSH
  T192A59E11E705D0B2CCCB00B16A5DB7A6647C9F30432096C7B2947EA95D72AF35F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DX10d_43.dll
- Size 505KB
- SHA256 05175aae7173650e04ec7ebb9fab69d3eea6da5c793c84c874b4795ef75e04fa
- MD5 527903b9eb6ed4d58bc70537e73575f4
- SHA1 f963038815644f3112976a4c2388f3ffc51136a0
- SHA512 217550fa33cbb7a5141da4331e9bbd906842037c81299923243e1f69bfaadd8d56b98b8a6ead9a43384b44abcdd40b4b05e9501e9166c2d6bcb234a077c343ae
- SSDEEP 12288:+TuX2VvQcKfKGass0wIvZ8vr7vZv9X4RSdmdZfM5Gb:LX2VKfEss0wIvZ8vr7vZv2w4E5K
- TLSH
  T18EB49C91D5405132CCEBE274610E71A236AE8F329360B6C71F5C5AEAAE787C417B87C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DX11d_43.dll
- Size 264KB
- SHA256 852117eee0e31842d16c0444de323c9e5d36634bd8f5b6f62f6dff3dc1ef9fc0
- MD5 19f6f2e9904b5521b7eca2d8fbc6ecdb
- SHA1 5a2567b84d0910fc070adb1c92ee8ef45332a379
- SHA512 2d299eab7b86b9e6ff6db454a3c13e7f2e561ae33d03a15ef1b6347d2e7dee4b4d93a94ed976f7d32e0cc62550e0606c4e8bc0aeb731635e7f6891705c35e1a0
- SSDEEP 6144:iR1Vjp1Q4nnY7Qm/PV/9j/6l/OQ4yIEGn/TsowXMwj+f5MPiMt:iRjrQ4nnY7Qm/PV/9j/6l/tFVGnBwXMW
- TLSH
  T1F0446CA5AA801035ECF6D2B4254F633152EEDF3007B1E3C71748AADAADF56C15A34B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3dx9d_43.dll
- Size 2.2MB
- SHA256 fe24577450c883e1d51db8d92ad4eaca289008301113d89effeff4e34342b142
- MD5 9acdcceb89939295ac2cba6bcdc5e3b0
- SHA1 1830e3f4d55f2e3381f5aa066ea5f7ed56e302e2
- SHA512 3c443de09664e6f83047507a21cc388e53f9990d2e822193818dc27fb3b84268121ccc74e01f2abda4936e4b6b75768efe160884f0687a839c2134f8503173b6
- SSDEEP 49152:Fizfxd26tPQ2xgc/lkWz20OLe9o1xCRAHjQ:kO6tPQQgcNkWzJOLe9o1xCWHjQ
- TLSH
  T1F4A5AE62C5091078EDF79070220C32B222BD57316361A3CF62991ED9EBF5BD5AE38797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/D3DCompiler_43.dll
- Size 2.4MB
- SHA256 ffedb064adc25328b24dcf145b04045a867a5574c931516d7845babf2a08937f
- MD5 d010ab113ed06bf6b42c7746ef395e21
- SHA1 5d6b1763f38ffe6d70146e74e9abeae15e3fc35b
- SHA512 0ca4656d0ea2af368b0f667dcfbbc819f8f1209cebba3e5a2bceb9b235e5443eb0452f0f0c3970b419fe6199d4d7cb7390a1f9cd46b689954f8e58ba9d0c2b9e
- SSDEEP 49152:wf59zPxKcvHzDB6t3+C0/aJfyLg7Ie4Xy+5j4m2CTv:92642o7lftT
- TLSH
  T13EC56C46B6A080F9C6AB81748A975703FBB0781403245BDB5160E6652FB7FF26E3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/D3DX9_43.dll
- Size 2.3MB
- SHA256 36b84dfa0ef9d3ff3549a7ad54d2a8032bd22c879219ee1a959137c4ef8786c4
- MD5 460d2b03615d8c0697721ce26aee1e60
- SHA1 e2dbd56d24cd783fb3c4bc2b527665623fb6435c
- SHA512 7d2a6c0593269aa74af6e53ffaede1e805c795410f97c5eeef6f4963e3e5785d02db81630758747dfa6bad60082ec1e118869b27f3f6995e11d9f592956d5b2f
- SSDEEP 49152:2bCJsk4VlPXA+15Om5wxw9Qsi55K+31BhZ64nI:1IIBnI
- TLSH
  T101B5486172F4C1E4E3269039B597B20BFAB1304907188BC793E04D9A5FE6BD86CFA355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/d3dx10_43.dll
- Size 502KB
- SHA256 b5f2e4d842c758fae91323888ace39328c47d9546231757f73831e2369ae58ed
- MD5 190649d410964753a54a306caeb33cb8
- SHA1 b45752e0558a9b0b70a9b490e8a7148b807a4f42
- SHA512 8321a42608947bdca156b48c019b999d01aaea6a558026493b42ca54c18b1f3eb7d0d343c998af16fd27dea63fff662c2f645962e261aec0fa04d8fcb72b92fe
- SSDEEP 6144:dIHyAfFvQet8lzb3f3+UHWIVPfkKS7GXzeARN85BwC5uhFcuiZyoO2uwpapnlJRX:aNFoet8lzbv17VPfkKS78zBN8LgIappX
- TLSH
  T1A0B4484132B8D6E6F13D653CB0AAF60BFA3135180B2046CB56B49069EF66BC44EFE715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/d3dx11_43.dll
- Size 273KB
- SHA256 25814402ce1d74f198958aa38661242189b4e5d640177087d0ba0ecf65d19a44
- MD5 015743813e8d70a91cce6319fd2ec94a
- SHA1 14c224c566a28168be62de535445d527a1156f01
- SHA512 163971668c8d34baccd6cd526b589b91792a2a6437ceebfb9080e2c98d0e33a59c9f084f98ccc2f117b872836407595b6166b09f3830b4875036db95ec2aef5f
- SSDEEP 3072:FCWVWFOaVgP7BzvjYlTc91N6Vkg4eK6DvDBcMqpcJbMYBu1+Iz54+vJds:/Ww4gPdz7YlTc91i1DLopYMvIIhs
- TLSH
  T1C0546B5237899CDBE4B9A83CD0EBA203E3F1F5950B60D6CB0260455DAE7B7D09E7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Cheat ImGui/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x86/D3DCompiler_43.dll
- Size 2.0MB
- SHA256 aaca0bac2e1e94966f4546b6234333f9cdc1a4599024e30cd20aef4c1fd1b4f1
- MD5 0b3dd892007fb366d1f52f2247c046f5
- SHA1 9c09abcf5034d839ceb881437a5bbc7fee30ed96
- SHA512 284c3cfe4973d9ec5919e1bee1a739f3dad2b367d761aeef574b7d8e47f5bc775d5d6255ae087b4311a84a6e0fc80b57e5f308af5c635080b31f295fc0679dad
- SSDEEP 49152:zpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akl:33P9HP6Zpy9KyhMI50Du8LljslNsyHiQ
- TLSH
  T192A59E11E705D0B2CCCB00B16A5DB7A6647C9F30432096C7B2947EA95D72AF35F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32