54ef0c69a912de511475df02e57e5193e69193a4cf95a19d508d2705fd602e42

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.WindowsTerminal_1.24.11911.0_8wekyb3d8bbwe.msixbundle
Size 21.3MB
Sample260909-wap7dszyav
SHA256 54ef0c69a912de511475df02e57e5193e69193a4cf95a19d508d2705fd602e42
MD5 858a69cfbd26efccde00fc880f7a7a51
SHA1 80d8222ddb72c4ab59626d30d7a6c87be2314821
SHA512 d1606636a9b4d5b70d45c3404879ba5df3d1bca8286d30e2d6f833383b676c39397bfb82b57c405d9333c9e25ac2e345e7f833827886e6fffe2e2156f188c7c3
SSDEEP 393216:H1FuafEIT1lrjOD/q3iU6OI+RTRZKZLXUb9pOj+slshwCSdK4jGj0BtC1yw8p:HXfJ3rSdcT6UZpOjTqaZWj03Ca
TLSH
T1942733DBE203B9DBCE7A467203410564BC2B0663AD4A9F561FD8E799D845B8C044BFCB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  CascadiaPackage_1.24.11911.0_ARM64.msix
- Size 7.3MB
- SHA256 2b9127a85c67559eb5aaba2a8457f74f33cad056cb1293159faafadbe7fa0d9d
- MD5 459b6b5d0c958d2c1db699592c75b241
- SHA1 c8a283d8e7bb8fd5979fd460fb014c74926f77d4
- SHA512 ddef4d0211e795df784a01cb471ef04d28ec155e1479473e5e73701a244c4a0ce32cbb9ec376fa3884eea8e3143685902a474c9a43abe0884d767254ee3ee9fc
- SSDEEP 196608:+Cj+iKUyF1JwaQ7k4ZIT1X1KeDdBOD/q3iv28e9R6PEqAA/8TZv6:+1FuafEIT1lrjOD/q3iU6OI+R6
- TLSH
  T1D67633D7E103A99FCEBA867142854065BA2702536C8FDAD91F89E3D9D844B4C244BFCF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Microsoft.Management.Deployment.winmd
- Size 49KB
- SHA256 84d66bcac356c4a84e863736c06390212a3ebeb3934c672c43dfdacc69864427
- MD5 9ad1cd61476bd837115a6c5bf3601354
- SHA1 f77a3d87b308abe1b651c5727ed0436ac577b112
- SHA512 bfde039eb7678b77b54ce9a7ab88622e709d02d6b6ac21ce18a45ec36d7692b34e8855ee1986f98aa047bf19adf5506511b98c92cbf4134cd5bdf1d90b4e1923
- SSDEEP 768:Lbz1P4mUAHUo0iyhQMv4MZZ6xasnwmTnbi3e9zt:LnlGsJ0RQMQMP2aswqO3az
- TLSH
  T11A33E5866DE48E3AED0E2B3D75720B543B3CA74F5602A74725A4BC393C4BB815B53227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Microsoft.Terminal.Control.dll
- Size 1.9MB
- SHA256 052091aa4295f5b89b5de51f797b0baa67dc8f62e633fe9b7980bea7f8e8d8ec
- MD5 6aa522a7a9a799ac8808cf0a5d5bc784
- SHA1 57d371ee963ba27dcf68d69157cf2f2d5f7a5a4c
- SHA512 b4acb6fbfbad8553d51d69e51e27c36ac8b4f3ea15b84b2d937fcff11adb4a5a10fe49a3bcb173858228b09f19967f62fa1b2c1cc829ae3b0363bcb4e5d64d95
- SSDEEP 24576:NFbVgACDiaL0DKTXUCBbL5kJu0KMndMPd:nbgTDBbL54CF
- TLSH
  T1F195F661EB8CD9B1E1C7D33C9D628BA8302BFA64CE348587B49E575EBCF17D08290156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Microsoft.Terminal.Control.winmd
- Size 62KB
- SHA256 3f130de16c287e58ed7eee63d4becd6019a2f547b14fb3d09ee29ad844940d78
- MD5 936c9c75e9a8488ca99616fca47ddb62
- SHA1 98cf4c0c8b23843e09e07ca1d6b8d0d8d58c3f8f
- SHA512 2539b1807e364a80772accabec20fa114ab1240467b4fe8f98b6ed8209fe30fd8b77ba6e009c693095e9e735e0b182b368c2bda23173d73460eacec608e197fd
- SSDEEP 1536:xpnSd702bbgE4TDfsYOoYpjzKklL/L3gAzUQR8AzdeE5gzL:xpB7wYOFpjzDl5gP
- TLSH
  T12353E9A3E8D58E39CD7F343DB8858961673E9283A603DB438A183C6E1D837DCAB55174
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Microsoft.Terminal.Settings.Editor.dll
- Size 3.6MB
- SHA256 9df3b82cf9c4081fad5f5a9977e1b08ac9bf0f64d37304183ba3523cf09ae227
- MD5 947c6d9d01bc12cabb572334bec63ca8
- SHA1 c78d0db9c8d3eb0961be6428f8112eac37d01bac
- SHA512 5a18e0631031993fdc9f94564819f0904dbce61c23f3c3c2600cc6a3a9a0df0af39b66c5a19174462aa17efecefe8341c3c92e46420c77d5031fa7d6f02b4054
- SSDEEP 24576:pMPr8auSC+hlZZjEi6lTMeWBiRZ4EfBRVXHiu65j+9T6MOZ3sa0OeHCyW1PnJqsO:6ZRLZjSTWwBRVGXFQaco8
- TLSH
  T15206D790FB8CC865E0D7D33C5E728BB83437F9248E348697B45B866EADE17E1C581126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Microsoft.Terminal.Settings.Editor.winmd
- Size 122KB
- SHA256 d0072b9b7a931b469b11e14e64d53eb37f0df4f185fd2cad89f620f9f8e82e79
- MD5 625b8df5b94daad3ddd6a610ae4dd719
- SHA1 c8f17c6af18cefc5fe0ab90b675515d97b8ce0d6
- SHA512 6e07840852dc1fa767f248e1d09ea27193c29b9af826e4f20f47026c3475320848549620ce488a10a77bb592cf738386dffcd00f8b2d1006a7cb48788165165b
- SSDEEP 1536:NiLslpLq2gqp9HL6NDX2ya3rruCwDJ+fb7hnjqJU44z5Wo:tTFguWNv6DfbljqJU44l
- TLSH
  T130C3742358FDCEF9DC761A3DBF35010592ABB2CF4E11DB568A3469181E932A71580EBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Microsoft.Terminal.Settings.Model.dll
- Size 2.6MB
- SHA256 77ab1139fb0cadd842a6f46a227297d6fb2c328f9caeddc7e6e4a9f02ba24de6
- MD5 39a75f0c3cb510332fe0951d660c6a51
- SHA1 859983d263d883363cbfc8f7eaad2830f3e43e52
- SHA512 c191a9a6bc590082184d99360b9733c86761a7bc9c890da2055123ba8415764d2b2f4cc705fbe98acb4aacdab6752e3792a3d21284a64ec0682fd9c960a9e37a
- SSDEEP 24576:M4EGelCNgSxlmz0ajrFSz3up3EQ1e57qV43VB3368ecwnWUOW:M4imggeep3VJkc6
- TLSH
  T1D0C50861AE8CD860E0D7D33C5DB3CFA83127FA288E24C597B59B036DECE17D19291616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Microsoft.Terminal.Settings.Model.winmd
- Size 147KB
- SHA256 827a0526fbe17e7ee8e152f4838a8889f212d796526ccddc93ad0e2dac3f9465
- MD5 95dbd1b6a3bccbea6fb291d9c79d7960
- SHA1 8dcb61068cf0dc490c4e8a2c057db4d18ee1728e
- SHA512 df600110346d5d4a8b0c1cdd4d7b6c5a5b52744b19ab5b1a124414f9d015e12f7941edc43d3f26d08143568daab232117acd61f134a89a9bf4d163c0046126bf
- SSDEEP 3072:pokqPNttA/fy7nu07J2HXOJCQ0BnSDToU:poLPE8J7wHXOJCQSSDH
- TLSH
  T180E3D512C8D0CDBACCD69C7CB9554E61372DA343A901EB5B8A1E6818CC433F61699FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Microsoft.Terminal.TerminalConnection.winmd
- Size 17KB
- SHA256 458963e16e8c52f30ebc75158c5c78c20e65470ae2709da92d4cc266e52bb140
- MD5 b3af44f25721c30863ed6ca135df9704
- SHA1 2239ddafcfba612a10fc50e98b746f9986435836
- SHA512 c5fc1b4810521ac5bf569f19a2795a9b7aa839685d019a65df4fe26302127a4af7c06d50961a4b9a39ef6dd627aec40f0fd60cd3a24a656506ab92e53d4b7606
- SSDEEP 384:bBgPHhA8ONOjODBVOblNB67rj/R9zcqvNE:WPHhA8OMg7rjZ9z1E
- TLSH
  T150821983FDB4AD72ED5F2A346568D6463A3857A72B00EA13056CE8285C637C0BB354ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Microsoft.Terminal.UI.Markdown.dll
- Size 469KB
- SHA256 a55624530a965909a05af5f75a4a291f8fbf35b59bd113b3ce1d9ffbc3dc1fcf
- MD5 fe9fbd28a5ab1e5a92f6abe36c04cdd1
- SHA1 726ca9366f99d77e7d825083301a394196ec65db
- SHA512 11a4dbf827ec56d0237e67f0f76d23c96771799119852c6bceb1c926a6eac32873130c463b677db01e7e010e92a3464c1b42543344f13f2830b07588160c0fc7
- SSDEEP 6144:bj0bvAV8kOAzqCREFc30lq4XGtykQw96lovKVnKJSKdfgbWpXfl91CHVa6OezHBb:bouoCRc5kQZW/CL
- TLSH
  T1C9A42855BA5DDCB1D1C3E23C8E778FB82227B9788A30C5467606E26EFCE17E09A54311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Microsoft.Terminal.UI.Markdown.winmd
- Size 14KB
- SHA256 f14f7854c60f29a0b66f3dcd040bd5db1f8007e8d647a2584289dc8bdbf11038
- MD5 a383d8fe1300d7d94185b457bffc5743
- SHA1 05daf351b9fec4e5cfb7f19fc80da3f225bd8725
- SHA512 4c47887dfef1287a584df2e8ce247266b3b29dca7d0a2152b084e50527f144acf13c35b75c4122680dab7922c53d2816a8cb06a324ec7997bcb6de1fdcadb2f1
- SSDEEP 384:zA6rvhEPHzOzEDNv9gclN5DscmeR9zGbPTs:cAvu937N9zKg
- TLSH
  T150623996DE3CC423ED4E7D705A59CF133E38A7D32900966742D9F5842EA73C4AB2066D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Microsoft.Terminal.UI.dll
- Size 233KB
- SHA256 86b78c9debd59367c4c81fe8c4730aa2b1c783de842b82998cdc31649be0ac59
- MD5 1bb86a9e3bf89529e42108c5b14e2044
- SHA1 52ce935e217723c0030111ae16efdc6bb9562582
- SHA512 25af8f3e743c2bd05860e1e6b3bc78591dd1916d87a601510c2594608d3fa7bc27e164214d23ab654cffb62c9fdcfd09db8ad77d8bf0135ffaeb8b783232d5f0
- SSDEEP 6144:0AxPhgdBgWnmhj8HDbKlV6xMUIf2pNtPGpzA15kt1t:0AxZsgWmIjut
- TLSH
  T175344B615A8C5C61EAC6E23D8D668BA43A37FD648B30C6877157132FECBE7C1DD50092
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Microsoft.Terminal.UI.winmd
- Size 14KB
- SHA256 0c50d1c5527fa15ad6790935293bc35776bc8c1e99f22ce3a4770839ce512820
- MD5 24eace30cd336f1d950479efc58ade73
- SHA1 f8dfdee61a02a04ae9b8eedcf530ccae4e290c16
- SHA512 d9851dd5439e3f2ae4886f0227c7ec1b7a1822b6b2a746b9780759153901a6f67d178fca71865f3405bfeadee74f0e30964562a141ec848b266ac90e15fe6513
- SSDEEP 192:Iv4WejNp5exKpeb0yjEOHC9WD5y+vO3S2j0dWDI68n2JBWseawW14rGMsc+6UQ/7:IET5eg+EOHC9KxO3S2Y6lNgrj/R9zcqj
- TLSH
  T1C8623AC38D685853DD4A293169A8DF82BF3DA7D36500DB235599F9881CC37C1AF3626C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Microsoft.UI.Xaml.winmd
- Size 279KB
- SHA256 2eadb8600bfbc1911b5bff2f7226c512f25520098857e2252c1ea4c48bc83b91
- MD5 4faed9800330f0e2d7ede04094622743
- SHA1 d1be77a4a9f7f4c80f33bf14510e1a504cdaf3e7
- SHA512 9606293356030fde5d9d0ba70704e968b5affc6942ebf1d8eb52df548552071dc23dd0c93e6875568a05214ceffd7cbdfc8c8607f64fb7b05482b777882cb7bd
- SSDEEP 6144:X8M+IFNxaeugzwfs88O43KuYS8IMzscp5NGg3ZqEN0nk3:X80u3k88JMzscp5NGgp/NT3
- TLSH
  T14754E6727DD89DF8DD9A1D3F21807880A669E29F4571C703A2052DDEBFEBA420D53272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Microsoft.Web.WebView2.Core.winmd
- Size 105KB
- SHA256 39044284b8533378d97fd3498139fd5acc5ef0503393c62250434833d0aa0526
- MD5 f31117c0a8f74ddd906d3db0d90b4967
- SHA1 aab63999fb27eb143cac195f861122e8f874a672
- SHA512 21998ba66fb3f8196795e54554ef0908dc551068709611317139764ed87dab498ff9668b837222adce47f346f8437816aadfc349bafceaa249c4961a6166d963
- SSDEEP 3072:cb0hjm6Vc74shGx3lySyKDh2+XQqyPSmGL+zxc0QBUQBEhTvMcUQYM9dDOC7fVSr:00/84QGx3lySyKDh2+XQqyPSmGL+zxc7
- TLSH
  T14AB3E5639886EC7EECD6CFFC74A44B5D9B7E52C76282DB13C6051C290EC72286C45A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  NOTICE.html
- Size 23KB
- SHA256 9691413dfd4979a89d3a02853a7153fe5f40df937cc817dd2715621ec8ea04ef
- MD5 e249b5c0d677ffcac219a4d74791531a
- SHA1 8f0a7e34206e6a733fecdac7871e7e7b4fc805ac
- SHA512 385194ee8c9852b28ecb0a04249df3ea369fce8c5d6d514f378d74fb1a79d42e20e7c586c5a9e5e2c10f3e4d5d5b6ada8dcacb191be0fc518663970b35588f68
- SSDEEP 384:uhRVmf3irs4rsFmxDLaH5qAz73qmcfq5LGhVko47vB5q5dPHpvrsCrsxxDLAqhqn:wufSBfDLe4GWmx5LgWoUvW5d/1zqDL7o
- TLSH
  T11AB2D66F7254036619DA2BA069A97CC9F26FB15F7A6B2BC8246EF344532702DC1FF404
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32