81c0b76ec654789d8861318bb8fd3e5b48ec8bfc3f4e1271d7650b393252ae9d

Sharing

Copy URL Twitter E-mail

General

Target
triggerbot_v1.7.1.zip
Size 22.7MB
Sample260905-s2barsxerg
SHA256 81c0b76ec654789d8861318bb8fd3e5b48ec8bfc3f4e1271d7650b393252ae9d
MD5 9f29a70aa337496e5858392b091bbf2e
SHA1 f2d266986feb8f995a7a4d2cb1ef0e29b57ab2e9
SHA512 01f9edde92d75d5b5352bee788c7d11f17ab7a262d0fee23f1616384e1cd1342dee33799b6165c18b28d9e2134152a39822390534770e01fcad6684292aadfc4
SSDEEP 393216:ZDCZyDnFOSJS1jVl1QEThnz2yvFjSPrOk+WG0geA2aBc4uEQ2U/EybwhSi1a44fc:ZDCgJUXLVz284rB4iEQ70L1a44WgGUet
TLSH
T1B53733DE5ED0FDED3D6ED20B0A2E8807FC77AC4BA0405115979448751E8ABDFAB6E801
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution ransomware

Malware Config

Targets

- Target
  triggerbot_v1.7.1.zip
- Size 22.7MB
- SHA256 81c0b76ec654789d8861318bb8fd3e5b48ec8bfc3f4e1271d7650b393252ae9d
- MD5 9f29a70aa337496e5858392b091bbf2e
- SHA1 f2d266986feb8f995a7a4d2cb1ef0e29b57ab2e9
- SHA512 01f9edde92d75d5b5352bee788c7d11f17ab7a262d0fee23f1616384e1cd1342dee33799b6165c18b28d9e2134152a39822390534770e01fcad6684292aadfc4
- SSDEEP 393216:ZDCZyDnFOSJS1jVl1QEThnz2yvFjSPrOk+WG0geA2aBc4uEQ2U/EybwhSi1a44fc:ZDCgJUXLVz284rB4iEQ70L1a44WgGUet
- TLSH
  T1B53733DE5ED0FDED3D6ED20B0A2E8807FC77AC4BA0405115979448751E8ABDFAB6E801
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  config.txt
- Size 240B
- SHA256 dc4af919dea72b4cc0b6b4c09fd8ddab151229af02cedc4c7be00f9314265e67
- MD5 1ef7df96388dfb5d97acc938007ac97e
- SHA1 5cef0cf9b55031f5aa3226e30fb1d509e207fb63
- SHA512 09abd8421876e6d8a7fd8e8f0ea41537c10a4ecc99512bde98fcfbee7b4aae8e02fc82cc967ddf75937d682b038f65e197b9c419dfbab68ad00ad59567067b38
- TLSH
  T195D0970FAAA60E04CA1302143E40CDDD33A90B4C0E000B1331088A022C1AE43BB0B97C
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  logi/devcon.exe
- Size 118KB
- SHA256 282ff232c35fcb82dad2fdae56c775523409494b175a5a83d7441b5fa65cb3f9
- MD5 36a56121dbe964347c859f95e996b26f
- SHA1 5e6c121ace4c55db612c9290799cfefbce99df91
- SHA512 167c0741d7ebeb96dcebf30e5b54f8e5e2e9e5e790bf4c6db25c430f276aaad937135678ae6048e52a2f49929b971964b750cae9a8e1d38d394865f2d20cd9f5
- SSDEEP 3072:G4xbslWCBChVAyJC3hcukHdqp2vJVx/6TuOp4oEk4ZBMHWtc8h:HbslrBChVAyJC3hqx
- TLSH
  T108C3D70263E85659F2F77A3469B552215A777CA1AF38CACF0198912D0BE3EC0DC74B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  logi/hw_logi_joy_bus_enum.inf
- Size 2KB
- SHA256 a3612ede5549930db3db05b6b44fb83e94a49208f6f5c56a08fee1a668d2bec3
- MD5 2e2906be67e3102a78cdb040a8d772eb
- SHA1 4c7382129573cd6cbbac395475fe57945683edbc
- SHA512 44006f8472b767b0ca8b104e1edc3da8033ce3d1e5ee551701bedbe31dd0270a362283916a5363eb38e84892c6c21000ed8fc7557e460d9cf0716e906943c25e
- TLSH
  T14241651902864E0034933B2BFF074EC3B96DA11488E5047A3DED924995CDE1DE3BA1EF
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral6 behavioral7
- Target
  logi/hw_logi_joy_vir_hid.inf
- Size 2KB
- SHA256 71850d80b64af43a2ff267e50f8ef8ed8bfa6e135a4290350b07bb3c2c932244
- MD5 d14ea49c397fe42418377c3ab5bfd418
- SHA1 bbb3f6acd5b50d6536c6ba1fa75cd315a34d50c5
- SHA512 56fc057870a80157fd05c30813c1464f42619c7a5368ea495512f08a57d37d3d5ec5857eb391030a0d7d565313798fb88eca23c11ff6ffa1339fb65cd50a3bd6
- TLSH
  T1A0513F0F8E180666A093D1B7AE015BC3E619611C1552007D3EFAE3448EC9F6C9BEE1BE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral8 behavioral9
- Target
  logi/logi_joy_bus_enum.cat
- Size 13KB
- SHA256 b92d4a1f0ca70e56256d2abe41e1fa03c2c73951775bdb309805901135b50e45
- MD5 77b64d63b1a3b1c6e87bb678f37cc584
- SHA1 07fc2604c76d5928d6153754fc00e98b245d498f
- SHA512 d497d613f8ed97f9c5e52a5f08be37088bd2ad5af2c92900b5dc7211c333c6c454757b247fc08b66a3c56fac8f414332e3c756fa9d1ec2f9b5e67ec7f126b5f2
- SSDEEP 192:6pLRBfp42gVgrJmIjg7I6SqAXStFDEqf8o5/MIJ/X8IE/EKez5aTyzEjGWYXooyK:6prEG5wrPFRGrDR1lQ9zz
- TLSH
  T15D5283B668EE04D6F1D3AC7063E4E5DB383937C77810642822A7F3219C89785FB14A9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  logi/logi_joy_bus_enum.sys
- Size 36KB
- SHA256 42e1d05a9c7c8f497003dfa92d25244aa79f8e604dfc46709a026abf9d19513b
- MD5 1db583d4308272b62e274b54196d2581
- SHA1 6731cfeb10007301606471210f4af94c0ac24c56
- SHA512 88f8afabec96e3ef79f66e677415b1824f8b466e8802f498daa542cd31db949eee32a1affb92bb85f6a7739d4a356e3542f0f81f7154e99147874aa44e25855a
- SSDEEP 768:KCM3LaYlAypK3WvrCvCwzs0eQFcDhj1r97rbmbrhyvR:7P3F3Wves0vFcDrRbgkvR
- TLSH
  T12DF26D969BA80C86E9A79530A2D4C90FFF74B2C21B62C6EF4094D0D51F577D2A62C37C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12 behavioral13
- Target
  logi/logi_joy_vir_hid.cat
- Size 13KB
- SHA256 ed609ac0fd073fa624f481fbc573013b6d768533030d59ba018c6e3f7d071d72
- MD5 d01d0d1d5313853aa904a88ccd09fc15
- SHA1 c3e5f98ef4e49736ed4de82e9ab7d777aed85c24
- SHA512 44c9ab5e1237c061434e5340645bc7a080ffc6f98aa9590a81f12c36b0838f62d8badd8add93b6121732c1dc0422723fd70789ba5c575ca608993d86ef081020
- SSDEEP 192:xHVV42gVgrJmIjg7I6SqAXStFDEqf8o5/MIJ/X8IE/EKez5aTyzEjGWYXooyKfPn:cG5wrPFROLhlHdjY5
- TLSH
  T1125270A664EE04C2F1D3EC3166E4E5D7683937C77C10602826A7F3609C96B85FB14A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  logi/logi_joy_vir_hid.sys
- Size 25KB
- SHA256 4e82728016f070d09c15e090bbd8b584b0acad12e8fd4b7daaefa8fc1a0272d4
- MD5 e1181afddc6486daeb4f8989f6335f4c
- SHA1 7cafa447192e910d9b2f4c6cb08c1bc79c403da4
- SHA512 a3f8d87064b607d497341d6bfb0462329d5b81a34847e2077840c55fadff7b203d000f89290ed5df021f7aa750459ff8b67753656da8bfea5997b32292a1b967
- SSDEEP 384:B0HMw3BrtWk2YxaMGQP24Ablhmq0wrsZsHLwArPFRaNphlHdPgYI:BCMyeY03Qe9phj1r9rbe0
- TLSH
  T1CBC26C56CBA80C43ED779C3022F4DA13BE39B7965B30C5EB405AD1950F97BC2B628279
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  logi/logi_joy_xlcore.sys
- Size 65KB
- SHA256 acf3926106856f055022cc41c6616fa92ac1fa438d2ea09d953fa9947b605cce
- MD5 bc3b1f0752bf779cb47d34d5f027218d
- SHA1 e6d364a553f7034727a84716d73264528cfab9a4
- SHA512 5181ca624ba6d16047aa62bf3c585022ef774367b9561dab7f52b4c2696a80c0f4b27bdd89215330e94e6be0ba557a90f6f90eaa0578865230f5adfe8eb9ef8e
- SSDEEP 768:v1CVPqD4WUFG2j6+eF/eiTmA6MQXuYxSU+oOAbQYWseI/dhj1r9ajbz+n:k1eZGH6QxxzbD/prcHz+n
- TLSH
  T164635BCABBE85CD6D8A39130E692D317EA70F9471701CFDB42C4D1416F237D19AA83A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  logi/manifest.json
- Size 500B
- SHA256 d616b456dddbbcea1bc078d96e91dbcf9a043f924590fbe78b018dc3aa95d892
- MD5 106c3620e36d62d262e9e210e0c2b212
- SHA1 88bdcf5937e2145319b0683d6468a56d0dd0a100
- SHA512 a6df0d4d3edb0f2b8c757a60a59f8f9a93e7fc8118260f719caca1d964a6e5e0b09a6dfd6343bcb57b63bc6eecdb66fcccf4280c89fc23da57fd1b27f690244e
- TLSH
  T1B0F0D82BC8186C1B12715739D367C550F9B6221F44D11A0771BC249C8FF58291156E69
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  main.exe
- Size 101KB
- SHA256 5aba6ec903f2e0e946459f98dc45c8129d3f22187f5adac00713d733191d3a3f
- MD5 04a6848457a5f80d41295c11b475b879
- SHA1 028fb30a4649b238b6a55ac61c55565c9d0a9c70
- SHA512 e6bf99e393276260fc1f8b2ff32c646b50ec57b906f9f12993ea38938df91a244378e066519c5dcceecd1869ec9cf3ced63da0783b1d2e7243221ef164bafd55
- SSDEEP 1536:Uj2XKbuEYE+9z2wp+FavGmhMn+IhzZtz0/gZRL7Sy9xo:USXKbuAs0FNmhMn+IhNO/gZRLu
- TLSH
  T100A3E44A6A4F8590C5748471037B47F65B2D2F22AAC3C68DA7C17F16EA7C281F909B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  opencv_world4120.dll
- Size 61.2MB
- SHA256 0455560c75bc456b5f758c94af653b6f0397ed8a28b9605cf52c62e7c8f18781
- MD5 30421cf4b73627905a9704aba12a2309
- SHA1 f648682c86da4a00b869d2ec5ae5b94d62636777
- SHA512 55cedddcb8ef5bded3c514726fc2da13677a54382e30b48a30a48857de631f47407ac1f5e42aefa34bf65f06a8b0a2091f00cfd9ebb65fb7b7b45487feb1d064
- SSDEEP 393216:MkCMhK1ZagmJGXnPsM9UaCXymS4DacRfpqkhUcW1ZBmXeA01LV1eaP7LiAUOPz7W:MkjK30GXnPsM9UaXmSGRveN1J77zuk
- TLSH
  T17BE79F56F1AA11ECD47BC07896ABBA13FA71344943144EF74390CA751E2BFE06D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  python312.dll
- Size 209KB
- SHA256 8b5c17abe1184b64f00a2cac3f4a2deeef384d32f457eceaad68b3a6eaa772a8
- MD5 7fd4ec41fbb56492bdab3e10d381a591
- SHA1 e607e19fce01ef69a0f9a150f2e3a2331c7b7b9b
- SHA512 1e5277b3f1ed276dd65921a02acf2b131d85bc0927ae70b1cd5a70bd93e7bd385da446dd97c272fbe0e8f922aa55ec4ff6c8935507f3566397b66272e2493557
- SSDEEP 3072:DPI/G++qKAUMEEr+yEtrnWg1IzkUJ/VJR4GOxvBq9eilP4w6H6GTme8:DPI/G+bvKyERnWQIVV8vBqp4wkme
- TLSH
  T186249E15F7A554BAED778538C8434902EA73BC024760EADF53600EB59F2BBE0963E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  vcruntime140.dll
- Size 117KB
- SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
- MD5 caf9edded91c1f6c0022b278c16679aa
- SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
- SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
- SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
- TLSH
  T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  vcruntime140_1.dll
- Size 48KB
- SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
- MD5 2bd576cbc5cb712935eb1b10e4d312f5
- SHA1 dfa7a46012483837f47d8c870973a2dea786d9ff
- SHA512 abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
- SSDEEP 768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
- TLSH
  T17C235C9457784086D59F95B0C1D6EE537E7CFA964B00928F0BA1E1882F637D0EB3D22B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31