e41fc4087b7c50209cc7e6fd8ec0a56130723c2f70ea2549d8dd101a92343ed9

Sharing

Copy URL Twitter E-mail

General

Target
notazip.zip.zip
Size 1.6MB
Sample260905-cwt8paverd
SHA256 e41fc4087b7c50209cc7e6fd8ec0a56130723c2f70ea2549d8dd101a92343ed9
MD5 86c3b37b698070b944db680adf483a66
SHA1 9ef290c5ffc0f4395ad68840d7699c18e79e3066
SHA512 eddfc47431120dce86aac5f2bc96784e0fd0c5204bd7daead9d7012a5b9b8010b6558041fac60018f45db3cba1d20fa77230fe7f3bf3291e3f7373e35b4c725b
SSDEEP 49152:ho2w30celZhdEW9BNjcSrWIeioiIhm9FB3:U30bKEBNYeWXima
TLSH
T10A85339ADB90E3A7FC14F27470D9B1C5D907E132899B4140CC92DAB00CC17E9999EFEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Targets

- Target
  notazip.zip.zip
- Size 1.6MB
- SHA256 e41fc4087b7c50209cc7e6fd8ec0a56130723c2f70ea2549d8dd101a92343ed9
- MD5 86c3b37b698070b944db680adf483a66
- SHA1 9ef290c5ffc0f4395ad68840d7699c18e79e3066
- SHA512 eddfc47431120dce86aac5f2bc96784e0fd0c5204bd7daead9d7012a5b9b8010b6558041fac60018f45db3cba1d20fa77230fe7f3bf3291e3f7373e35b4c725b
- SSDEEP 49152:ho2w30celZhdEW9BNjcSrWIeioiIhm9FB3:U30bKEBNYeWXima
- TLSH
  T10A85339ADB90E3A7FC14F27470D9B1C5D907E132899B4140CC92DAB00CC17E9999EFEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  15013-stafficonbadge-ids.png
- Size 17KB
- SHA256 44871f135e78e4bf0e7ed2e2c565ecc2516e98972cd0c908e511e61f9500baf0
- MD5 11c3d7e9d1f0420a60cc691cafb105c7
- SHA1 e846bc81ceec7bdc1edaa2e52a2d39d9ab947dcc
- SHA512 a179276c5a5a657359393df8bdeb4af642fb765b201034b0a3bcf8dee56d06d60ab0670fc7409e10989f221d738c078ca6d474a4e89d973cfbe745112bfeda28
- SSDEEP 384:3CaGGkhrIndEz/kw6zRmnPC/HZyyPEFBgn49zsUwAs53xDnlUdPbEj6Ae6Knklz:SfGIIndi8wAt/ALgwwl53xDlUdPbTAeQ
- TLSH
  T16282C0624C286B037E5F1313B0FF2D33D7BB9AD54C48A153B19398A70852D205ABD3AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  15560-staff-purpleia.png
- Size 199KB
- SHA256 9417d739f580365b5ce0646c47786a5cba1dd4ea2f0270a4bba17ec86df49954
- MD5 04b79ad4bd408d1051543eea1fb94de3
- SHA1 69d02527e83d7091e17b9c6dc57c2f2d82441e39
- SHA512 f24148e5e2002861345578f480cba789073e90d53944287b58848e9475e7d8a8a595ac228ed8a1106aff7df64a1ccfdf57777004513a867234c3fdbf48eacfc1
- SSDEEP 6144:mESZm4V456HxMhf47rS75psd2s5yCaKBxeG1v:IZnY6+hg7Wsd2DCaKBxfv
- TLSH
  T1DA14236EBF94D0B3E7010AF52AB377274940ED1183E02FC5A46205D909D27C9AEDA3ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  19868-stafficonsids.png
- Size 3KB
- SHA256 0a03afde838571a958516ec7ac6b0ca57eef29fed79532a87d830657199e5923
- MD5 53503547c82fee3b34af9f0edf9ab237
- SHA1 13b8cb1b52446cd59541001d5a57ebec8c2805e8
- SHA512 6edb4739080df221753be26c35b6e180610f731f38d23fe93b0c0b2122607e6d7f1193ba148ca1b24e3b5ef8f4b03e94f290da45641f65fda444cb754ff761ca
- TLSH
  T138710A616C9316E2978B2357ADEB3664DA334902D8819047B891C4EB1C80AC31FFBB5F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  26091-stafficonids.png
- Size 3KB
- SHA256 4cfd2ac6ffff2030542290fe6547ad494c29412b891c8c8ed7af6355763f5300
- MD5 23dd84438ed6a8f70c1477274b55c962
- SHA1 e562b26f8806156bc5fe3b916b13c4e630b754f2
- SHA512 028318b6b9dfe7531fcdda7d3e7facddcd434d01553338a25fb435dcd3bda05107b042217ecb86b6b2e4ecbba89718d63b9c1dbe60292427ecb648cf7263b0ad
- TLSH
  T14D81095C1C5193E2969E7B450DC57580AFB7C4A64885F1D868EFB8130EC2E92FEA313E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  2651-crownicon-ids.png
- Size 16KB
- SHA256 842a0161f1b20e298dc996a0d27d085ebd25e1e039c456baa21c6371817cc12e
- MD5 a3733e9fd51836236e07573319987b67
- SHA1 bb5624cc3923455eecc1f3d2e255753ca4a3bb28
- SHA512 d1e2fd837897cf55e800b6bf88e3717bcb1b4c75f4c765be0103d51d28ad45b91a879f71a35af83f59eb131d876a47f319dc6bab1ab0a91b690fb0bd2d528561
- SSDEEP 384:b11XoGJTJibTcsefGL2/uIkhfFyfp3kuvzx21Kfq5hJ40eo:591/iEnc2/uwfNkuvzACUhV/
- TLSH
  T1D272CFC8ACD419FBE69579E33DE6A074FF735A16D0DBC094BCD099A28C810E65AE00C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  27933-retiredstaff.png
- Size 115KB
- SHA256 d59aafac4575d4e78d46b5144a9e6c9c78b23e299d22dd2180694807af78c478
- MD5 202c531d22faeb964819f0de519a585b
- SHA1 b468718afe6bb8fdb03e2ec8c86b263a8fd0c3ab
- SHA512 1c6f2c9f6ff25e44286bb6d025fc0231e68aa84d568b40a03da496417ba4c2be052b2b4e3e781d0f37485ae3382c64e249290d2abcb2d7f1c0cced46a350abaf
- SSDEEP 3072:X2G0uoEuW/Ee1VDUl6JtTetRniazCp4jFnQ9upy3HPAN:X2FHW/nVQlOtTkdWKnM8yG
- TLSH
  T1BAB3128DB6764B0AE3B0E1AC18173EA71951347A230C5E2ED66543B73D85DE2BB09D32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  40963-staff-administrator.png
- Size 176KB
- SHA256 d138acd63ef7ea0b13fd999dbda417eb7ee3f1e4e869b79f773c5eef57d12a22
- MD5 49389ba878f863b2b1ccae851f107307
- SHA1 e7cd081f7d045304be4d258a8767398ec7ec86e4
- SHA512 634bc855351e19f65be09cb0e4308e7e2e70935a4f44c8046048b944cc1e5579908a9c015092fef266fbf0b08c5c5224c5b67fa53623fba9e959e05f05b8d212
- SSDEEP 3072:fveuITDlF8dSixVUqqRpPRMB91gO1EZw7t7DIthHL7M3TXEjazmfPsYEFnNpGxMS:3qv8dSsUzXPRQ91gOqI7DI7rEXEjalr8
- TLSH
  T1B50412DBC60DC41DEA5CF299E1C0861BFB60933B04AFC4549D607D65B6386BF7886C8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  5144-trial-staff.png
- Size 22KB
- SHA256 3ea276deb20297e1a16eca31f26e5777ece4529eb2ce81a459418e803ed596fc
- MD5 0ee6d6b64bd9465a189891e99041f866
- SHA1 49834eafc39f05efef3937df68f8d8313f1c7458
- SHA512 2d2db814fb17e16c4fcd8e2ee6dc306c7141fe8822e29a38706209faa2de8e3432d8d10268cdf474703510d993e107536d4462d2600d1f582ba7dc3e4978b1c8
- SSDEEP 384:PeItdCU1g45qkYHWg+/IRVAmq3rWIYM2oogmd4uXoJkFYDX3AsV/xj:PeSddVgpHWg1RVPq3SIVmZKDHp1h
- TLSH
  T155A2D04BDD8193BFB0B0D06B74A01858E910BA61A6679726FC466F5BC2BF3548778B03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  69665-stafficonsids.png
- Size 3KB
- SHA256 8f760de035c3ffd9c34a59ce6a9b8a2c5f56d0ed036c383a66bb167feb46bd59
- MD5 231b9a331ac66ca2c10dffed951daac0
- SHA1 fea98bb9fd2b80ef77b733c849a3ecaa0724d345
- SHA512 5c03ac088361926ce8a945834ca2420474c1201ec5e4217f8293f7c34c140a050f1f77a033deae28f206b06fac0e563b2aef30f4665dde34653ab8b01e7f9f58
- TLSH
  T1E381196D288351A1FE59731C5FC92C98EC33468588D4F404A8D7DCC34D519D6ADAA39B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  73113-staff-management.png
- Size 177KB
- SHA256 d6d693b52d897b8d6081858eead5a9e0d7e107cda14be964f79ff5881b9e7877
- MD5 cc6e5c8675867ae12a9b84562311492c
- SHA1 c931bcf9931ba26753f4fa46edbdc1049d049a34
- SHA512 4ae271237a4bb8f436dc9b1150d4849338fa5dbf7d2af84f9df5f7ffa9317561c548a74971c75bf4d575af33ac890781685a2fb9dc15c3695bad14a4d6854850
- SSDEEP 3072:u2L69woFhhd/ZmJMuosZsBBrOdim0FQtThBj/+GxbeqFxq04aJEUU4OOeVj:uf9Jdhpu5YidnfdBjmGxD4gEUU4OJl
- TLSH
  T1200422A48392D77B6E79D21AB6510B8CC05BF69B6C04E04346A386110CE8AFF455CFFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  73764-staff-lightbluecrown.png
- Size 150KB
- SHA256 149ffe38015788e18137b49ce42a4b80705d6bc1a63d6bfee29841d60ffaddba
- MD5 a080ca61e0a5520a54fa5cf26f8a1476
- SHA1 0bd5b6aa5ff3fe605b49b7da3da0720ee5c3c165
- SHA512 d3cf46eef0031a477276fde1518b4b44c88341d6b8c4ba025980a23a2bff2c2470fb4563c221129e4dae8b4605910b7a96028f6fd8257e03ac0ecb812ff6cf92
- SSDEEP 3072:VexN7w/Xkj0xfu3FqHC1Q2/yeE8zHgtdCvE4awLnlMrWTLA6F:G7Yi0Z4qv8zHgtdCvxlMiAQ
- TLSH
  T13EE312A2E680F74DA8146064D04DD1CAD6E1D6F2974F24E9C79BB86884CF6FC805CDEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  74822-executive.png
- Size 4KB
- SHA256 69caa2eb15c657a95325076d0e01de2c72696d3c9ea10c76923a1b106547716c
- MD5 152294de49e89865150d133e69772b97
- SHA1 af3418b2064eba41b5ce766b9702a1609ed8fa12
- SHA512 19c0dc49e0e5c5f55747885751450bd6df99064f6e44fec0a71ea8be78359c41865799dacd46b4daa9f1f1d976673e4e43bedb33bd484bf45365a4a7d297abc9
- SSDEEP 96:n3u00rv2NSQ/LmbPZvQZJRWk8GFKGZ4JF9F5ijoW8DTo6:n3u0AvDQ/oC3gV9zijoWao6
- TLSH
  T164917DB2E5258FE7C7567865715F0032C11F61A605B30C695DB220F49479F85C650AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  78934-verified.png
- Size 165KB
- SHA256 21a4422d744ad1de7eff5f50c44df8e71dca916048697a14cd655657b030edc4
- MD5 9f6b839afe35f3570ca601b0e1742272
- SHA1 8614514ef88aae52d5885c816ec0f975c5a1c156
- SHA512 8ed440244c7ca7591d6e764bfb07d6201f5f9c81f69732855e5c05d8489572a26a58f540582fd61bb672cd99a8cf8715ac89ab1ac753aca23b4d5dc36b1c55f8
- SSDEEP 3072:xgegnwDj26ihHqmvxDVnmh55BlzUplxqrfIVUOkc45SS6gsM3+tOAbcY:kno1AHqm/mBGTxqLIVmt3+EHY
- TLSH
  T13EF3120703A8FE93DD54E2F6DBED90683C54D53F8EA909E55CC28AD180CB4D999EED02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  82083-stafficonsids.png
- Size 3KB
- SHA256 aea28c2f92502c3c7c0ef95f0df76edc6433329d3bf286551ce68c8f59783e82
- MD5 24cce89b603178552d61237e0cee6c0b
- SHA1 29d822a8c7c3b1b44d5c5e5114c498ab1f620bb2
- SHA512 ec87a1c91828256d12d57c667296fb6e7de826943ba3cec1ae61a6a49fb302d19dd664000a5733a9b13a875349d2e046855ea48c2ba09e5c3169dd0705b043dc
- TLSH
  T1F271D92DC9830783BA0BF61DACDE34908AB35169C4C9C31FDCD6A8071FE25855EA659A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  89875-staffverify.png
- Size 14KB
- SHA256 41188fa31edfa04ca715875989a45e30b5dd7d768261d0921cb3c86162e2d106
- MD5 2d9726cbd8c7bc78fd78276ad0d1e113
- SHA1 438fec0b68fbf97ad15b3630c1a213f7f91983ac
- SHA512 97d7b13c78088719377f993e51b9af6fe107924d79053cba92393c1ad1dde1b6f3a85133d055984ccdd6eaf71144081386e70cba6ee417242aa56c6ba95711aa
- SSDEEP 384:bdTZloYkHwRKzMAXt68Ee2pcRXLSz+EBwOD:dZlXOwRKoAXtsM72BwOD
- TLSH
  T18262D083A4E2498BC3298556E0BC06D9D52FC68F9206D19EB573D3355B913B09F0ACE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32