3b43d7682c41c26bce9506e7ca1c183b24f59465d155843cf442ce88284ea007

Sharing

Copy URL Twitter E-mail

General

Target
gettext-tools-0.18.2.1-x86_64-1sms.txz
Size 2.2MB
Sample260903-wrtk5sdl51
SHA256 3b43d7682c41c26bce9506e7ca1c183b24f59465d155843cf442ce88284ea007
MD5 444cea7f80402120ac127b8fdc2b1a2c
SHA1 36cd9fe10ae66ac35a0d7583bfdb362f6e287db7
SHA512 1070fc42ad816b78d642de6c5c283c367dfcea581395cacc74cf577bf6cf6ff267cb16c2fc7284dd08338056c44fbb371a2633b581f75b05f1154fc375087fe4
SSDEEP 49152:sGEBVpqZKmcYAnHfTLvEsvKI+lBiO0hdHA2S47NxLqQnTRi:sBVnmTAnHfTLRKzBiOCg2txTTM
TLSH
T176A5332F63F4627A4D5F2058F3BD0E32108C8D45A8D738955D2E680A5690FFB7ACEE94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  install/doinst.sh
- Size 579B
- SHA256 d29af78a2a4b6f49799fe4cceb4adeff537e9d5a48993ce82d84aa126fa2e3ca
- MD5 34215ab4202bd9802d992d46a1398175
- SHA1 9fc829608c5853ac82a483e4908d936481242dd2
- SHA512 b11d5d52a9b1d4b8c8bc29646415875fe480f0db58ce58a13104ef463d6f6f3b1bfd28843ecefa7b02ea5cebdb857669eb742015f995892e24a10e8746f58562
- TLSH
  T1F9F0E7E3D30B9DEDB619A0D32252060CD6C22A8D10FEFF6A1CEC14F800158DB7662E48
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  usr/bin/autopoint
- Size 23KB
- SHA256 5d22f283a9ac79b829bc2550cfa1018034b582037d41f1b2e9fae8a5e7e16d85
- MD5 3593e057e2e502e1f1a6e49515f4976a
- SHA1 83bf14d75973c2d1a9513f9adb48be2f103cf77e
- SHA512 a073670079c315881e01ca918f30e01ff5a7e7da7e129eda05cb0684f0d4f5c705183a75297952e841a59d6474ddb6938baccab04ea42e651c8ebded7ba73819
- SSDEEP 384:LfywjWFBJABEMt8cfF+wDr3B7hDIcQw3rivGmoVDHPDPfluvzMCLPeyCX0oWZXpD:Lf7jWFBJABEMt8ylr3BtDIcx3rivGmoK
- TLSH
  T16AB2E90B7D465272E485C6F93B876442A302919F41646858B4EEF0AD3F63B2C73F92DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  usr/bin/gettextize
- Size 41KB
- SHA256 e5ece59d8ca8a9f05939a9894489a7df87f0a26624c41ea260513b97972ae718
- MD5 b0ee7159d9ced2320e23c31dec0bf6b4
- SHA1 50512205410bba2b157965d2cfa56a98e3a2a637
- SHA512 f900be8d9b7948d0a35b61bc7e20c8c07cd472afab83c316f3a11b6d87f206be913a2b0da77f6868f3c4ede15a02cc04f26ca7fd79a1aac34da440efee29e32e
- SSDEEP 768:9fLjWFBJABEcOQvxwIdNX3gxS4DjGyJgcQikYkh0HTkibclJbnFP/945fP8dg9CN:BjWf+BEcOQvxwIdNX3gxS4DjGyJgcQiK
- TLSH
  T12913A633B86D26B294C586F869C30004271659DF95081C1A7ADEF1E93FAA71C93FE39D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  usr/bin/msgattrib
- Size 20KB
- SHA256 775fd3ee1acc6567a46309bfcf6f3598c433a5140406eb025aade382e2b436f7
- MD5 0e68cf879da1fe89adc5fe30fecc5daa
- SHA1 d4224ac22085a71da2ee010ab93adba26f5aaf8e
- SHA512 0d82716decbf87af8a80fcd9c1df30496cc63ee89dcf12bcd15dfbc474305556a270f0b9da8cc2de44e850fb587ddafc59cc1a33cd63e5dda3fd716646b8ed51
- SSDEEP 384:zUm39OvJzaeNWR77YbB7HN3O/0ppCDGDD:zXtO5sxkZdO/0PaGDD
- TLSH
  T14592A3C7F660853EC4B1433565E347196A3BBCF9E622267B39CC373127026590EBD1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  usr/bin/msgcat
- Size 20KB
- SHA256 78d9a8e48f1c9b09ae1340be9c6c143bd7aa6d781d4335edc7dc5e65bdb2f642
- MD5 8be713a105ddbef12380892c5bdb0d5f
- SHA1 8d0019c8c80b7bb1cba9344e7421fdebac8b0276
- SHA512 786dd09ad54d5c21a1dc53c3685627389f7712e3e7b1fa59f52c66070803fa699cdda2e0b19f8795b43767e3a530cf42f402f5c66f1abab31ae00362041fcdfd
- SSDEEP 192:GUTTYNtCoF2xahjJ7mng9BN5APAb+r6kqXKyCPHf/vje3aOXaWt/ZxsN:APdX7mn2N5L+2XKyCP//0HXa
- TLSH
  T18A92A407FA51477BE0411B3966E2751CEA379CFD9621263B3DCC307927C32160E6E69A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  usr/bin/msgcmp
- Size 19KB
- SHA256 207566d1ce3e6cfef5447973ec92d22d02380ff219a0442dc213159707eaa596
- MD5 0429d90dc51b43442025f3aa9d16b5b3
- SHA1 36263aa5d04378fc48ffa7c1bc029cb0f9a7bad1
- SHA512 c4c6f6241322929cb6139f61eda24e705007165036fb19d467c10f2d85bbccbd9cdeceaa3c3e0eaff917d2be10e1b0ac1fd2ea1ecc060cb28b40eaf79d220bee
- SSDEEP 384:kn3Yh6JqENJDxcFd0IPDqP4zX8FqOgouReSqPiWg:knZJjRxibqPM4qHsSqaW
- TLSH
  T18692E807F3B2DE7BC4D9437025E701156A73A0F4AB216B37359CA9783B027190E1EB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  usr/bin/msgcomm
- Size 20KB
- SHA256 a74c5ad84f776be50e91ecda4e6c420a362caa5c4191368a1a679ce9d5f83e1d
- MD5 6f192526cd241391c988975c7da4f7b2
- SHA1 dc1dafb1bad1961c6107a8335b916c8d0b7212b8
- SHA512 3608c97755ef4b7000ff65224c675fdad26053835c33453c1450c5e505cac2991809a7b64e632adf271f83a81bc9e7b9afab1dd36f71fd5bb52d8776a31ae5e3
- SSDEEP 192:GpetkoFzeahjRbHGrsLC/KuytattDZnD3yyZdPE/vjb3aO7Msvw2GHs:pnLbHGQC/KqDNiyjPE/vH7M
- TLSH
  T1DF92D607FA61487BC091133866E3352CAE77ACFD9621637BF58C317827026443EAE65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  usr/bin/msgconv
- Size 15KB
- SHA256 bf6f210377ae9612844b3a7cf34682117f87148f97aa50c3cb35a7a0c3ebc725
- MD5 145ff04cbaada056bbffc9702fcdc3ab
- SHA1 cf40e7893d73acba531a337f832fae4e9b241b24
- SHA512 f16f0cc502d330993ffaa56253abc9b15743fef3e77b5ba6452d447e4b427b622101fcb9caa4b8b2e44980b4ce325a207c57b4f66b76348cd8b4f29eeafc5b16
- SSDEEP 192:G0iixTJtAoFghjX/X89TUv+wKZYNOnvje3aM5/saJQsc8C:jtUpX89YNKZYNOn0p5Uf
- TLSH
  T12C724007A661C4FFC852133468FECA19AA32ACFDA761162B391DFF7537123480E7951A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  usr/bin/msgen
- Size 15KB
- SHA256 084fc1718d31fd6f0f56e8f834df6cb6ec1628ae88b4cdd4867da18fa4786e2d
- MD5 707c99eef13ced67624ac60922f2c7d5
- SHA1 56565f14c002b048bb27aa2fa28e6b17b32b3ef0
- SHA512 2ada6096f6968568c6450dc875e87da530ac90af2cbe5e5b6ee2473a965aa371197d3a1975b6f893acd27a6400e13c18f97d14cc6fdb9b1adf13f85b6f7ac02b
- SSDEEP 192:GWCzt4oFAhjJXaXnpv1w7BLwtsAOYOnvje3adDIyewOs:wBsXXa5v+VLZNYOn0YDM
- TLSH
  T1EC726107E660C4FBC45E133469E60A19A673ACFFA66516273A1EF335270234C0EBD75A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  usr/bin/msgexec
- Size 13KB
- SHA256 a6f44b3e8461de66bac2a69b13da4385e5fb6d561407ac74c47d360ab6a223b6
- MD5 a4c26c569b7f0c1692fdecb7883c419b
- SHA1 c3dff46ba10da657cef243a183028cbb3e5d0919
- SHA512 3c2f559527ef01e985bcefece25dd4041ad58cb6cd017220809187bbe9ff25b2a2fcff750694c9878557fcf3d97adba785556d09205fe766c1110604637bf596
- SSDEEP 192:GGIGbt4oFc76UaLIKK1I96nBaIEm/1N8PYrXFcqu38fFLs:2GpGa8Z1IiB7EmdKPOXFcqI
- TLSH
  T10B52C80BF165C63BC491433045E74A26BB33A4B9FB3547276A1872782E023581F6EF6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  usr/bin/msgfilter
- Size 21KB
- SHA256 32c0613576149bb5a145907672fcb6aa0fec9f56bfeba75add0ffffda052297e
- MD5 80c5126a9ab06a036873614d165c122e
- SHA1 623754e4da3c9e7d5614b10b3ea0ebc232c5be6e
- SHA512 1dad9bf9a0d1ca49edf43f4fedfbd1a0a5923df968adb6e8b3d76fff569f3108e138380ac45a62683cf8e5cead1792a0e269b25dd14338fb8fde78affa1bc903
- SSDEEP 192:GBcVCKkJtQoFj7jRWja3qw2hq2CZbNUZohI8DiBcX/cUfdwYt76r2FMvvje38Ovg:acYKyHw2qPq2CZs41702FMv0xvnJ1z4
- TLSH
  T1B5A2A243F660887AC4514731F5D38519A637BFBEA7201E2AB85C3177E70264C0EEE76A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  usr/bin/msgfmt
- Size 65KB
- SHA256 aed1657d62db207a7cb57a62187a8764b832fdd61ad98648b33a57914176f62f
- MD5 acd6563ac7a02d90c107dda2d93915ae
- SHA1 71047de70560d764a4f693330ccda3474307c92b
- SHA512 76e1d52ec6b4f561a080ec4dc6a1e8114087f28d5b17a0949c85773bf212a076e562594dc8e5eac5db9400314738582f0e13669810e7ad23e933fdbc480d70a0
- SSDEEP 768:NT3CBknHgahRY9MV0k2OFpdAxXT+PfTE4lFid3i5DJb4Vu3HvbY409:NjHgewHkRrAxXyzz35DJMVuXvbY40
- TLSH
  T1A253190BA9514534C49552344AFB5019EA72FCB8A130367F398CB7797F22A1A0F6B73B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  usr/bin/msggrep
- Size 96KB
- SHA256 1a8f28109fcddc19bf83025031ccff2b84de434f39bb421955bbc2a79759cadd
- MD5 41166fa440fe7a5b0fea2566167e7fdf
- SHA1 227d4c87637c08c0b19317d52e38a96754e3336c
- SHA512 5a9ba90cd519fd49ae5e01695208d469166bd14396c69661b2bc34ddd7b96cf4927eec7260596113ada78370b9f4fd21dffd1a3e7698c34de5372b71abc575b7
- SSDEEP 1536:LY1MLo3E/y+WQAC/WtmzYFOQ1bY7vqTCgZuw7DUhzK7GqkylO5X7:U1Mx8NFS0CgEw7DKYOV
- TLSH
  T105A33A47F5E248B9C2ABC53047D750226972B8A812327B7B75C8AB353F17F640A2D772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  usr/bin/msginit
- Size 41KB
- SHA256 60472300cd727c4e42edae446f35fdc41e280060b06c5c6529ee5c5cb1b27c58
- MD5 25ca6950861f3562a3c638b7ac2b990b
- SHA1 4a1c0acf8031d0368119bf232dd519daafc090fe
- SHA512 993683f0788a678c58bea0f2c6072beef072b8c43272ee15d9557757c62d21001524c3c5276c32f0ba7959480aef8468b54840c4622f520769978abfa234d769
- SSDEEP 768:xFd5mOmnQ7yK1CoLZHybFgvlu8JcCwTwGQp:/d5dbLZHybFyu8Y
- TLSH
  T13A133A57E56209BEE281873449D7011EEE73B8F48731BAEA7A087575170274E0F1BE2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  usr/bin/msgmerge
- Size 49KB
- SHA256 964406fc09fbff754b7bf5d76fb81c6cc72c3ab033107f20376d6800bee22ae6
- MD5 2a73e65af377293144d2e8b2cfab8b43
- SHA1 4ecb37961ab64779f905bd7c6d62885ae573c504
- SHA512 b00c4b632fd7f761efdcf0af38d634087c81b65e7d08bb25507ceb1cec4dcda7fbf17d1478d812b2d941d65bead6cb4e8813f9a1556ff2578e39fd7d942325ff
- SSDEEP 768:Sq2ywh9mK8PjDtUXvOi6Ce/CUTOAUnFUR8STtYgl9wDx/S:Sq2/5SrFTOAIWR8j
- TLSH
  T10233490BF5648479C5E647356AE311126B37F8B4AA206B2BB38CB63127137180EBD73D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  usr/bin/msgunfmt
- Size 28KB
- SHA256 ba709771079b84645676ecef5691edbc0dbf4263fec4dab00060c0826da8be4e
- MD5 611fe4b038b84f1f26b3517a479571d4
- SHA1 25e99483ea007d66850b9a738147218dc2a85e2d
- SHA512 a01b1dea3e5ad92fbf01766fa5c25d5d1c92a798b0dcc1fed369fd2e01965d3bfddb7227515dffa1e464a3a0229972092106a52e6353a7b11309fdd383499b50
- SSDEEP 384:+9J4mtQwps3xUClH0RhM6AgY3eSQt1MH:MJNQ/3xT0HtDtmH
- TLSH
  T1CFD20883F922407AC095533085F6051969727CEAA611EBEFB56C37353B1BF084EEF616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  usr/bin/msguniq
- Size 17KB
- SHA256 d71a5d4930ee22cc8ec77982491fd58b86bc1433bf67e81424b54f0f96b37976
- MD5 ddef807bf602ff067edddc63922ae353
- SHA1 f36d141128750cb9407a12ba9beb9a26dc9da41f
- SHA512 0a7bbab4619885b1ba578fb5c48483682d2ed6acd8b1455139b470164666e1e5e48f4241039cdd1ae02d92f4bed3cdb2496d1440f6ad14b905a632c66cce7a1e
- SSDEEP 192:GzRCctdoF23hjwKCr6MVW9UMhVpAoCJJX/vje3aMAzgUCAvsUpos:6N6KCTVWi+VnCJJ/0pAzq
- TLSH
  T1D4829303FA20843BC8910F7427EB4515A6769FB8B733666B751C71712B422743EAD9CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  usr/bin/recode-sr-latin
- Size 12KB
- SHA256 d8ebcb5aa4dba552fdd83c8d1cabc178d079d2cd151e906473925b59ca01cacf
- MD5 f3baa54b4060f16877a2f2e9f03a03f5
- SHA1 182ea323bf07b47dc86046907d45d217aa6a174c
- SHA512 48ec0544995556b60501283e7790a566f3e241e635dc85623f94a77cb87402248571be7ecc952cae99e9d7f20d015998ba216f99f3a21c7cd1f875982a602186
- SSDEEP 192:GBXdtW8UeAcnPKrijWq20fCNK0JAw6kM33m25oRuRsXx:0GGnyr98fUKi6H3c
- TLSH
  T12A42E747E256023FC6FC477044A342666B7BA4B8EB32171B691871702F127C91F9FB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  usr/bin/xgettext
- Size 207KB
- SHA256 737bbceb1911f993c03eeaf5bc975e6189641ee0aff8aec2159bfcf35f798e45
- MD5 7bd2be03d62c39538b5b04a098bf060f
- SHA1 9c3cee35d04b3b0c384b6cfb7d6ce9111373bdab
- SHA512 eb1cd72a9e699f48edd285541190046d13a6b4a84ac058cd519d9fdbe8e1c0fe32033c1043a5ea365234e7d9535d66a18eb5231cb9b79bdb7600dcb5fd59a6ae
- SSDEEP 6144:9kuWtmzYeTxAEjyZpwvEM/qzssMk+tya:+HtwYeT+g8zsQ+t
- TLSH
  T1FB244B16E54754F8C15A86705AE741A5DE307CB84231AB3F38D8B7751B32FA22F0E72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  examples/build-aux/csharpcomp.sh.in
- Size 5KB
- SHA256 0b97df86db4a46cfca3af1d29b5aa3f0d6706f7ae0057f1c25ace2eac6046790
- MD5 95f03cbbbb74550db1beb78068444467
- SHA1 391aeda06f5215243a428f754a3d1f37ce4696db
- SHA512 abaffe89aac44f7f4162d9776a934cae7314e251d535f5c9a173f9240bb22888436ab3e7735d833b0a8f0c08948fed5b238c637cc7c97a0d72a42648632a5f93
- SSDEEP 96:flrzf8nSHphEwwfwSRaoo1BZDKSD0svwUKJGuQCNSlLp1ZR2a6:flHf8SkwwfwEaZBZDKSD0sv8GuQCSlL8
- TLSH
  T1F8B14309550622308AD761F6920A789F9135C38781B8C874F5ADF39F4F22B79E2D37B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  examples/build-aux/csharpexec-test.exe
- Size 2KB
- SHA256 e4c81364b94eda8dbaacdbb140e0c034278ef0cb1270adbbfb50a4b3f714a651
- MD5 996995e37782c41b38ed77cb2e1fe3b4
- SHA1 49a791133b6e4ba0670e719c172706145c4d4ef6
- SHA512 15f27ea75a07ff43270ebf1b1c43e96ce49b45f20f90b7e2c7c422b292b587699b40d53dbcbbf2266dc376fcd3bbaf9e72f7f73b77f4712fdf27654f82abb684
- TLSH
  T15F517D2B532550BBE04913781A538B213BE7F170973647270E944158BC21FBD1E24B44
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  examples/build-aux/csharpexec.sh.in
- Size 2KB
- SHA256 592903b8d83b2664d5ad99506d2248f646a2691047efe27a86c6c6a57ee1d180
- MD5 69ee5af6aa29524907f5a27101f67f6e
- SHA1 09819e1484df29a7f3ffd657fb492397447b34f9
- SHA512 d35e37ec0b5bc70cb45d53c25984522f2be13c5bd653ecc27ada89fc4820c224277458d998e72d7503542a2ea904e558f36e1fa5a1e5e78379aecb2002525b00
- TLSH
  T10C515149A003C3B0744982F54D96B2CB659B936BE6284820B5DDF28D2F12F2461F37FA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32