01f9d96a25365c4128cc86776b99d6ad43abce0b01c121d672f85bd675fd4781

Sharing

Copy URL Twitter E-mail

General

Target
vesta-1.1.6.zip
Size 4.8MB
Sample260907-jv45tssbpb
SHA256 01f9d96a25365c4128cc86776b99d6ad43abce0b01c121d672f85bd675fd4781
MD5 9e6a8432cffec281b3409988b363c096
SHA1 c93ee231858c7b2e99263e714683178da9342914
SHA512 92b6473797b43bbf3de4b8beabdf675b3a2e0b1f012c013b934015579e31e9dec2826847dbf91f9a86e0c35b87fd0410b975c791a1ce26530988006a18e11b22
SSDEEP 98304:WY+TEa25BWAqkA8EhFo80VUjUJe6pZO9lo/K/J3uSatZZjAsyUKkFk:WbTEP5YcA8EheVGi3nWlPB3uSOyUKkFk
TLSH
T15336338087482C9DE05308F418AD16A1E37AD0D1B1CEAFB659DC17B1879F8AF5F7426E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  vesta-1.1.6.zip
- Size 4.8MB
- SHA256 01f9d96a25365c4128cc86776b99d6ad43abce0b01c121d672f85bd675fd4781
- MD5 9e6a8432cffec281b3409988b363c096
- SHA1 c93ee231858c7b2e99263e714683178da9342914
- SHA512 92b6473797b43bbf3de4b8beabdf675b3a2e0b1f012c013b934015579e31e9dec2826847dbf91f9a86e0c35b87fd0410b975c791a1ce26530988006a18e11b22
- SSDEEP 98304:WY+TEa25BWAqkA8EhFo80VUjUJe6pZO9lo/K/J3uSatZZjAsyUKkFk:WbTEP5YcA8EheVGi3nWlPB3uSOyUKkFk
- TLSH
  T15336338087482C9DE05308F418AD16A1E37AD0D1B1CEAFB659DC17B1879F8AF5F7426E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  vesta-1.1.6/.github/CONTRIBUTING.md
- Size 588B
- SHA256 b6b522e8dd74e70a52e39e273f00064f2bc811bf728769fa4c0a465c5f6eadec
- MD5 0d15d6478e71355fc6fbfec326286701
- SHA1 1bec6960a4358fd7c00fffc9ad70c500fef26455
- SHA512 2ae5fa65a7eb7538065b0b98159ccc0e0741223d8b6ee0c41f7135e7268a82e16cabeff13de3121ffdc13024dfccda039596eb09d3df9d0ca6f73d01569d4f83
- TLSH
  T1C6F0E126A201221D09F7C573F65043E49E5DC22CA2894C7E879815594B5B90E8D35B14
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  vesta-1.1.6/.github/ISSUE_TEMPLATE/bug-report.yml
- Size 1KB
- SHA256 b5ab8467da71375c18ca6f43a99461f8d1b2d63773ef6438a4a98f9c1f888b86
- MD5 d938489aa2f512bdbd245b9b56f0df3d
- SHA1 eaaebe53a2c3a4059fa1be22775e947f058a668e
- SHA512 52e865b42d15020c04c7c9f12fc62779bb43ae32bb049799973e82f60a21fe5f161cb2a7df7bc5cbef5ed4e3238a8d05e244af838b86069068ab671a5de0d9ca
- TLSH
  T179117AD6CA6A7BB5CC114296AD20D20253F0EA0F52025231FACD01B92FC938DE7B179D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  vesta-1.1.6/.github/ISSUE_TEMPLATE/feature-request.yml
- Size 597B
- SHA256 54b64c1a7c3f84ec9a13f5d70544edab07af13bc9ccb660a6e22c78cfd90a617
- MD5 64eb9926d5e923cce837105b77d4b537
- SHA1 d7f0ad4033f3c8e5c636df2c167adbeb849274f6
- SHA512 f75d043e9b11014139eceb2f16c94529095c973a29eebbad345e1fa4f89d99d6d2c5619b3b76e3d386166a4b263fa910348bedacbd2b63c6cb8605f3963274fa
- TLSH
  T12DF08B92AE9A3A25CC0B40299D72C24216F4F70B92034030FEDC85F81FD1798F7A226A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  vesta-1.1.6/.github/SECURITY.md
- Size 334B
- SHA256 2176b3878411e5f0fc2e2c305b2f444f8e08473fe32a987e02e3178f09cbfe4d
- MD5 2acf6a289d07bb337690d62b597cede8
- SHA1 11841a8d720c5073b38ccf86b6f1ea5b23b08ad0
- SHA512 c5ef1ebedec04df76131ee5a06b8913ff55576f2f1d462297b073f0e1b6cf88a828f058217dce43c08bb11dfa724c72f628754e9fe55e9056ca8cebf55ee04cc
- TLSH
  T128E02668E37C55620B0242F9BD74E2CABF2BF40526511666809A03A29C49BC9591369C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  vesta-1.1.6/.github/assets/icon-docs.svg
- Size 294B
- SHA256 f0061d6b0bcdbf2230d68c0099cd8842b95a6a5d5c32b8f22b82bd25a1a9140c
- MD5 9ee513051668a6b2ce39a0360d688c60
- SHA1 27e4070720d533ac92854148fa03842ba8ef6e35
- SHA512 e145f721772998fded4e9f0eab4d533cfadfa9ad46be4f57c49b96769f4c3b433a9922073de3983dce07e70a9921e8c25d0efdaa56aa855b3012b96067c80fe8
- TLSH
  T147E02B79E38C8C3CFD12CA25EB783235D22E92C2220D5065CC2EA531D1155CDE83B9EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  vesta-1.1.6/.github/assets/icon-download.svg
- Size 258B
- SHA256 57058037c6ebdd7ef7fed79a9da5fad85f62efbf5483bb9049f0a42b33b09fb3
- MD5 488fdb9fed8c2ce3fcfc34bed2c64f67
- SHA1 03c566807c876890c81469feaa1fa8cca6627535
- SHA512 3556d004a72538efadc487acb6611a17d9eccd48781e9604eb328b7c6afae580d109cd59f61575555bdaa8026826c83fcd7afc4976f8a7354cf3fb2c6fcd08b2
- TLSH
  T1F7D0A769F28C4C2CF8264711DB3C7631503E51D3020D5179D8662936D126AADAC7BAEC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  vesta-1.1.6/.github/assets/icon-website.svg
- Size 288B
- SHA256 af5d269b75e4d730ae2ab6b4d7fc2a00b7c827427b02d15ff62bc34804bc7dee
- MD5 c37d5a6ddda639c18f3c66a14f08b304
- SHA1 567f01d0f400f290ba2c7688eccb6a91b05a3f10
- SHA512 bf6bff7cb580a86e7e1e6b0dd7666966cf0f79cb57811876cd2ab85632a49f32cd0750e5f98038161b15c6d28da6fdd78984efb6f25086b905f20bd87ee6db6f
- TLSH
  T10AD02B6DA35C9C2CB021C918C7367370645FB052060C5365E4113832D11268AF5379FC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  vesta-1.1.6/.github/pull_request_template.md
- Size 292B
- SHA256 b5d20d9f5d5501b3decdec955a8b9835f3902eac8fcb79a4f47bafc929ba04b1
- MD5 e25ad51b093ddb3cec38722819a3bd83
- SHA1 35e1628c423af8a06b7246a73db2d1d3504efd3a
- SHA512 3bd1d1cffb6c32c8647ba77998019ac74fec79c819aa7611875fcae7c5243a6185de95b547d6b933a7811840fc7193c9719d21ac544fdbde64f7e3f73596a9f6
- TLSH
  T1CCE0CD317E9A32226517025ACD6173B06B25B45567410025985C519EA6041D9531F355
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  vesta-1.1.6/.github/release-notes/v1.1.3.md
- Size 690B
- SHA256 6d630d62264a7cc38e063e6d66bb841081986cea80e5c19906bdd50e225d8a36
- MD5 4f30a694ab70b18d3e281b33d75859ee
- SHA1 cd3e08d7e281ecdc07ee72cc7d1ce301063dbf6e
- SHA512 4d159dffe1f5027806d259a00ae12ff58a88ef61f9a0a4f9cd078c086fb21c70b31d5b3592fb92153bd76a1e6705e0e96ed7d2ebe4519ff044fb0b2f903c89a4
- TLSH
  T1D8014427EB2B327264EA03A2E1D530C22D5B41D7B32D0B50F52D418923D2172847D1A9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  vesta-1.1.6/.github/release-notes/v1.1.5.md
- Size 669B
- SHA256 9dcbbeae9a8c3da5b02a31228cb633c391f4b14fcc53e6f21b95381c8a49168e
- MD5 5914a24d3d1faad8f030dcfcf7b955a0
- SHA1 917bd1e3becd0aba5ac26f0fc597f2ec1472cdb2
- SHA512 93763bd8d7a58d7cfe97c15a0793f491f6333dd150917c025927ff2c9fbb57cb2c9bf8192c206c0b73874a424017712cd6d94d7ab704a173cbec4d9940a8a0d5
- TLSH
  T1B3019E26532231724A8385F9684282D4ACBA61A0129DE367F42E41BE9304AECE6193E5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  vesta-1.1.6/.github/release-notes/v1.1.6.md
- Size 1KB
- SHA256 350c995cb2a8c41dda8cb71182faa41ad10ee38fac2e16f003c467e65708fc48
- MD5 f632cce3825551e073bbc4e2a369ff09
- SHA1 de9c6966fbc4ed929b6d6aca8171e1cd93481ca1
- SHA512 e97293518f413bf9513231b5cbc9941936b71c8d85ca0a3d474e511a5c08f6ecda5e7d94d34d1eb16dc1019cb3b32e0d93cf0c28514a4f39de39f20a05dbb259
- TLSH
  T1D63153E3534E3AA35AE38983704272B05E796174B3A6170894EDA59C32854F8E3376DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  vesta-1.1.6/.github/workflows/build.yml
- Size 739B
- SHA256 78f399a6b12e438b3d4422d115be344ed1681f5f6e854a34bf11cd131e09ac96
- MD5 be4ed0ad7aaefe562b0b76c871e63e5b
- SHA1 31d4f5701fcca2406bcb6d2652bc52da4bb50016
- SHA512 ab8937a1e44311da40dae3b8a1761f018a03d425d5764cb66767f98e55b152d022f7cc9cd3f1ee637197a1a4448b8ab184b60b963011e9a6213d9470a63618d5
- TLSH
  T1B101A261E405356F5A34847979EB7370602BD5DB6B006C7AF5FC41510F733ABC05B649
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  vesta-1.1.6/.github/workflows/pages.yml
- Size 948B
- SHA256 60adeb7ede14a0517f2427c7166f0703f2ec14c708b64b43912c364a2debaf78
- MD5 cd51d9ffb9b71396f28c57ac73525f20
- SHA1 e5795f961bbce8cab4c859461b59655ce25a0a5a
- SHA512 b66bdb9cce59a1dc63db945f193d5278513acc57be2a2e65b77f9c3eb091c2ea546c82656df7a462ff6d9ccf838312d2587c64e208c8bb745e9cdc6596e32724
- TLSH
  T13511CE72D82825B3A398886AF3E7D791627AFB17F500F070B2ED118C0FD769941D3606
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  vesta-1.1.6/lua/packages/web-radar/main.lua
- Size 15KB
- SHA256 349950505fb3293ae104dd54ae347ac7b209068235d6d7cf247df57e1451ac4b
- MD5 2814badcda6fd364003bf53572c0d87b
- SHA1 6eb6936c07ad76e991ab3000b000e22575f4b2ad
- SHA512 d553a1ce45c1a0c951bb28a719654cd9869bf244f3ce39595dca71145f9e94d70544737bd6888f559b37793d059b5ae71d9061302dd01e4069fe8304bc24e35e
- SSDEEP 384:85JISQmZJCsIUC7Fhw0fU9A5R3RfDdW1FWSY7rqUCbl09dOw1zSdZwEFwNC103zf:85imZJCsn0Fhw0fU9Av3JDdWfXOwB09V
- TLSH
  T1C262771EE60251744282A2C4CD7A8900FBE53523518B55F9B1BE41843F66B3DA2F6FBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  vesta-1.1.6/lua/packages/web-radar/public/index.html
- Size 33KB
- SHA256 cb3347fee7953bde6727d01711f18a7a80f12ba261c706454328c80d7f34aced
- MD5 d119a0ebb33a17621a03dcbc0ef3a06a
- SHA1 e2083f0c309d3bdfcd2c32a40f7394507ed591e2
- SHA512 b9743ad8fc03ed19f92b2a50ffc6b0794363e85a090e963ea89dc7c0c7564e7f314c2bd2ef7f891a8520602648b4b5ccf237a40e7f2aad67095a931e46f67349
- SSDEEP 768:iMr9HS3F44TYY99HtorqrQA2rigwFwBr5i2sdWpUqwSI2uVOxICv4AwRpLhZ:Fr9y3jhcI2svKLcOxIKwnLhZ
- TLSH
  T191E21AA50AF50239903381EC3B975B1E7729A003A50ADEB876ED411C5FC96ECD273AC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32