9187807a0eb685af0449b7af030f8966fc4bf61dbfa2b06039c29535d8b2d343

Sharing

Copy URL Twitter E-mail

General

Target
thc-hydra-windows-v9.1.zip
Size 7.9MB
Sample260910-l74e6svtez
SHA256 9187807a0eb685af0449b7af030f8966fc4bf61dbfa2b06039c29535d8b2d343
MD5 aa0a66a38adaaf75d42be196d79afc6d
SHA1 5e96cf7eae6d3f524018ee0ce0679a34d7ae6e4c
SHA512 99e9c4c731dfdffea5fec6908f3fb1782f05c9f1fd010928151c8e7ffff6e66b64a1072ed6c826d7bf7d0a724dbcb5f96c2def8e73f8f0aaa1d66edd4fefbb2c
SSDEEP 196608:UcIqYLqXuTLHPGQepCPQDEjUoxKUORExuoVs9aTa:TIvtrDsQU+KhRElVqP
TLSH
T1B38633B4F4B276A7FE4FF076C9F125EA09207874A55DF0142EB2F0603162AEDA52D5B0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  cygX11-6.dll
- Size 1.1MB
- SHA256 dd76b95262bb433c86a1bbc4ff8bb5d0974e66de4175430f772e451c34892e58
- MD5 17454799fb654ca1755d80a9a14e2c60
- SHA1 1bbb566f6aa8d10a6d883fc32dea37a658c2e65c
- SHA512 50c763c94e95d132b73824e13269b9f7b209945bf6ff5a98a4c9563457cf4dccdcb4dfa234265fa13e8d392c25bdd03d95a4416f44207a6cd21f84946693ae9b
- SSDEEP 12288:YRW0p/7AtTJbYhdjgLHyjltJ+BXIebO/KejlhV+FL/oGvgj9CKg2PpSnVS8fOlfw:WpTAyjlsJShlhVkYJCEGfY84y
- TLSH
  T1B8458D15E21324ADD57BC1B082379B33B673B8352178AD3B3A64DB742F93EA0264E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  cygXau-6.dll
- Size 12KB
- SHA256 5c785d1d7c04ca80c401b67cc739d6a88151de8a3c362ee665ca49020a747d1f
- MD5 18f6d195dd54533553b98ca82632d33f
- SHA1 6712480105b3bbc52e1e6ab49715886cbe4ee46f
- SHA512 4f32e18f8035ac7d2a1ff607eafdcd29fa28255a0806a796ced24b94a34ba2fafd966cbe2874bee751312e89312eaf236d7001ea24b39b217e7abee9ff7f3003
- SSDEEP 384:IjNJkO/dcfhKn8eqcccccccccKKKKKKKKKKcJ4GTGRY:IjNJFdcJoNqcccccccccKKKKKKKKKKcP
- TLSH
  T13C42D96FEDD3D4A4C596E07805FEA23A32EBBC221126772E4794D6A04F70B98237D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  cygXdmcp-6.dll
- Size 20KB
- SHA256 54d6830d3b7985204e367eaea54dff55d0c917899d4ddb2e49a24454992d392f
- MD5 f3a5ca1acb2fc1e60ee954f819a0ddcd
- SHA1 0c5454e435e67b1e72841e939228cce5d63be222
- SHA512 e03a70b13449239d8176509cd24f748e50ef8e875d7fbfe3bbe4516d3e61cbb492985775f606f39328c46c64fdd44a4dd326f14493ca71ca5fd13662e966cb88
- SSDEEP 384:DQyNvT4VX9z7XxkqTcAccccccccccKKKKKKKKKcpk2xR+M:ZvT4PnPcAccccccccccKKKKKKKKKcpkc
- TLSH
  T17492953BE706646EC06B973401EFC7326BBF743022632D770B59E6B11E74E546B16A90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  cygcom_err-2.dll
- Size 12KB
- SHA256 cb4c7c00063a1b83e8e22d37f2bd731ebd884cdd6e77a70ce22b203c31684c66
- MD5 e95ab0a28056face07a889031240da32
- SHA1 0adddaf6753786459c68326045fca3befd6012c5
- SHA512 364505d6faf85cbc76dce61e151e82110e23c7483c131f046e614b5a40cd0d5e01485895667ebe9aa3f87332d2396049527abbbe8de9bdde2bfc0a6fc10f7d8a
- SSDEEP 384:4CV48waXYZuMjIUAdd9ccccc1cofwvI43v/q4k+ftIq:NVZXY0MUxccccc1coor
- TLSH
  T152421BAF16D2E47AC985E23C99FFA635A5A6FC036334373E4398C0634F64648713DA44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  cygcrypto-1.0.0.dll
- Size 2.3MB
- SHA256 dd87a0eb7cb98f660e33726bde7ca244e5ef1ed265a59ec2798ad46e7e5ae1fb
- MD5 2634d37b3e12333b293e07ea960460f6
- SHA1 e8fad93911f2895d00fecb3e92d38013372abe81
- SHA512 1cf3232382e8030fbf23a5a6f031a7ec6b473e4c64ee8f58ac7657851868e24abd331367d682e2f345269b193115086091b3ea1f5cc93afabc74adfc2d035c04
- SSDEEP 49152:FGtlqq5VwAsOVaxIE8dAvyaPRGyJqrBggpeTPJ2kIU6iufrWdDo:Xo6KanJqqgpeli+Q+Do
- TLSH
  T1E3B56D26F1A234EDCD3BC1F0875BD372F571B86916B0BEAB3154D6302E92D50272EA58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  cygcrypto-1.1.dll
- Size 2.4MB
- SHA256 9d364bd4a665bd2cda29725b07d68b92c5bf88044524b1f09dce6ecf3ebaa76e
- MD5 d6fb14a60fcdb754c4cbb463c6ed59ab
- SHA1 737f44172c83b71645119e4f9b3b9f206978c131
- SHA512 74140d76aa98150d5eb011e79061c7bf1a188d9eae5b58377134a7374761517fe3c9d76d49f75e9f40ac254b566e733803073dbdcc3bd27a35b67901c0d1d87d
- SSDEEP 49152:fVwAsOyz24vAQkJOI1wIU6ik0hoBRZsEkWuOil+HB8hoGtlq01eUNVlO/pf3+c7V:gkJOIR+kMmXsEkWuOig8heUNK/h+c7pz
- TLSH
  T145C56A16F25234EDCE6AC1F0862BD773BA31F8691670AE7B3254CB741E53E90221EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  cygfreerdp2-2.dll
- Size 1.1MB
- SHA256 4bf6d11e1fd41af27c791146101b44a93f0c0eb3f4fed8da8c28df82bb352e0e
- MD5 d322baf39282edb6c1632d24d3d9b1ee
- SHA1 d0a4e6b9351d43fde7f75b5a225ce6cee04f019f
- SHA512 531e37dde08093fbb28c56a0ee48b8d64de860dafd963c804a111579c83304d27f44236dd1f8363049a57fd263d4f7c0b145fa2cc66e895b4199f6ef521654f4
- SSDEEP 12288:DcQMoE3zqXnt71LzKvrsrIkZSy3xvdPIY6noCKpRwv8otFQiTNYZ2c:DcQMFzq3LvssrIi3xnAoC6a0otFMZd
- TLSH
  T1A3456D26E78320BDC96BC1B057A7E271E631781412243DBF5D64C6323FB6E10672EA9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  cyggcc_s-seh-1.dll
- Size 72KB
- SHA256 63cbb466c1ab94c008c8287d7422e9a16e2758080e24bb57c91d71e411671bec
- MD5 f1debcd32e64d8cb0bf9171e411242c8
- SHA1 8259a9985d2e7b0d61df83d78beca01bacea0edf
- SHA512 cf2f8354cc29ce9d91d0403c218c5afcf36c5c6c47c34a859d0d32fa5aebd70086186e4c71e8ed912395073043c36894962e1afa7a0ab4d9462988dd47bebf74
- SSDEEP 1536:ZGfpRbf78WYb5qSiAFe029vXrlsydzTNqfV2JhMZzG/Hxl:Mdq5BB2Nayd3NfJhMZzGJl
- TLSH
  T1F2733E66F29354BCE253D0B08397D771AA27FCB502606F7656A4F1781E71F802E0AB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  cyggcrypt-20.dll
- Size 1.1MB
- SHA256 f3517a4fe18e5a4839b089e64190a4252513fd28be017ebba4dfce71c3a1a53e
- MD5 b1a7de86aeaf2220c885e80a4a8e8748
- SHA1 eb9f9679d76ed99a4c756352471467a6eb646550
- SHA512 0bd4c43abc056ad77940581c3453a56c58043d0551ed22810ad97ddb54b47594d6c6245810b5f5be8be8682dfe7f856eaf39b60062b1c58e180f5a9a468cad1c
- SSDEEP 12288:qLDVaXue69G1kksUitm6Ewv5oEua+3+QIEyC0oIqmtQMp+UaQy2iMVyuY8mUUAaz:qVaXueaGikNgWi9p5F+dwg
- TLSH
  T196359E87D8A224ADC69780B0CF7A57B3B426B49C53F4BEBB1191C6713913B90239DF94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  cyggpg-error-0.dll
- Size 115KB
- SHA256 340bca8ac8d4b0b29317725e3f8db32786d24d85f89fdf489736c4f067561a26
- MD5 e4c57eb7d2aa00d2bc4bbd97454375fd
- SHA1 8d61e1218ee10e1294428f59c9110208f57cc17d
- SHA512 c349ee804ba3f67c510b8ea57f55eda420f42c9b133e726cf63718fa8fec3456fc7f521186562b6a2ad5e2c3e290d153034da2a1fb527f352f1cb49fe34aed8d
- SSDEEP 3072:MbMKNoIGmwUCG/G6x6pVf1JJKDo7wvcMAgH5x1q:oV+3szsVf1JJKDo7wvNAc8
- TLSH
  T1CFC32A17B25728FDD657C27486B75371B4B2F8110330AFAA5620E3702E71E65EF2AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  cyggssapi_krb5-2.dll
- Size 274KB
- SHA256 9179676243c490eab32032331483f801b13934c3cbf0eda0947e843a63e571a6
- MD5 3dcbef6e5c24f3f0ee3ed260b184b1ad
- SHA1 3057f91a145a3519638c6613122704be5579fe8c
- SHA512 1ba81e4f62bd0900832a4f274129731e5d720f0a3aa9cf95ae3574d09c98d049faac2e1fe632b1fc23c540205ecd9e4bc3caa02e66c94cb84826c8bbc4108ed4
- SSDEEP 6144:sF6pY8fhhOTKvhxdND6WiygCRvxglZcute:IkpOTgd6WZRKZcue
- TLSH
  T1A2541B13E26364EDC99BC2B4579BA3B37930B8655234BF265710CB252FA0E10B63DB5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  cygiconv-2.dll
- Size 1006KB
- SHA256 8587e66cd22a76f60e98aafc773e5844eba380f46cd1224e0982ce31fd8b3ac6
- MD5 6a4fa71663356a4fc090e59d08e08bb6
- SHA1 f3efdf4c66fd0b240e4139a7c8f171a0dbdc41b4
- SHA512 0f6596ce354f0597e110b45e12aeb9af0a6354787628ed4dce0cd794289e203d546c597850e13f9721e69b9e9f4e6b82b576b9d686b8b3c678ae4d83d9708348
- SSDEEP 24576:wwM/17BAUZLY3wPKO6VbbTiZGavkg3NyeuQ6l9fH+fh:I7BAUZLYgiO6EZGaXBuQQ9eh
- TLSH
  T1D625CF51F3D2DB27F667C5B08DB69B7AE426FC21AF02443736A4B7AD5D32BA014C8112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  cygidn-11.dll
- Size 197KB
- SHA256 fe857a3e379e20aab47dfde1765996f03270eaf4ac076d8711e26bcca261e0ba
- MD5 1097113ef5e44a9c843353403c7403c4
- SHA1 2377f91263051dbe214d0b0eb35d0db9af244b8d
- SHA512 e501c7aa00c0ac02a7e9a49eb4e33f8818cfd249d75ca60f946ecbaf0f046535c806151fbe88e1a893c7bb60bdb8bd140bd2a9a8e4d05186b18a146d2bc5f26c
- SSDEEP 3072:oKm8+QyiF7LVGjbV8ixLM9EqRQj4nQBlN:JmgyALwiix2EqOB
- TLSH
  T15B14D695FDC2BDB7DD0C7032597652E06330A9894389F73B77A0A7AE7CA32244E9150B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  cygintl-8.dll
- Size 41KB
- SHA256 75df6d1b6f4bc5b0b03a94294292c81d6ccf0a9da8ad982256f5000688f24aa4
- MD5 7fac4ef42d05cd5657813947ed89ae07
- SHA1 68b3900454c64b6f1166cdc45edc37a8272fa9e1
- SHA512 f75882b84ef3aa2ff1dd1423963b6d05b346876d3affaaae638557ab40b455b49150f93ca24858079a002d0380db500b65615aca256fe4f5980f854b8ec98a4e
- SSDEEP 768:/SQIqyZJPeyCFWUk/n4+aYb/VxAQpWmqTt0BcB2QgYYYYYYYYYYYYYYYYYYYYYYW:/SQRyZoXy1aCVxAQpWmqKc2KtS2bVb
- TLSH
  T1CE13F85B6297A09DC413857895EA67319733FC222570A76E03A0F2701F90EDB2F3DA96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  cygjpeg-8.dll
- Size 419KB
- SHA256 2813a0fd86ce5a7a78d77e8d43c19d31f8297e5cf96717c2cb1dbd89afc290a3
- MD5 c34ec1a18986d4c776bc9d5978969757
- SHA1 99ea404a3e048c8088abd7ed9c6236f6d4e53b15
- SHA512 1fd9f309977f6d52825ae5845ca5d40fb4f0d770a7c452c56af8549facf109c8f264040d1ddfcaef6335b86da8de305dac5989d972478e87801d77a819d0105e
- SSDEEP 3072:vq7oT33sFaxm3XCl3S7L8rmIN4LpIeLXi+9jlOJa+5tUK7KkM1MJJJZnC//NCeCR:WX57LMeLDdlQaASyKkCMJJZne/NChJtV
- TLSH
  T115940717E9622C9FCBD2C034CEAEEA325775703D93F359BA354499E43E528903A18F18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  cygk5crypto-3.dll
- Size 191KB
- SHA256 1c219fdf7ecf5377b3fc2ea804a655ed0279756e39756d776dd683f7274f68aa
- MD5 b90c073546aef47cedbbd3ef136d7318
- SHA1 28917bfbee42c5a6a68462716816a8a40ae8498d
- SHA512 ab317343122ef92abf91076d05b9899b3bf68b1123d2372b754464d38f4fdceac7a6b4588b5d24754d500a8dc72d71df5384b469d499a0dd4ec9322c4a691fd6
- SSDEEP 3072:k5Y1eKdX87aUDjbtqoP8LcZkzlzTBhpg7Tq/oiMqqD9wIvuJ:koeKdXAa8goP8wazlJ07CohqqDfuJ
- TLSH
  T134146B56EA629CE9C9BFC67043EB8772F420782411A4FF7B2364D5756E43AA03B1D708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32