cf4e8fb1970230c0cb699324246d14b5406e284e566a1e06717d1b785b77c893

Sharing

Copy URL Twitter E-mail

General

Target
LPSV2.D2.zip
Size 478KB
Sample260910-sswkcadm3t
SHA256 cf4e8fb1970230c0cb699324246d14b5406e284e566a1e06717d1b785b77c893
MD5 86455def24235d6f65406d596448d4a8
SHA1 c58a67cb09cce66301701b05ef28df801929842c
SHA512 76f51e654ace19db82dfbeb35959be7039225cd320f18f10a27268c92257578da0a7831387f6474f49dfd45af2c80418969f2c198dfa40c38480b553b90c5f56
SSDEEP 12288:JHlyTyP8NBsbeg8nzyPZezsYJYE0njnmkPW3:pUyP+BSq2PAAYJSnLFW3
TLSH
T1EDA4230D0A9374EBE21FD879AB78D8EA72613F20ECD1475FA4299DC6FAF151C8447281
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution

Malware Config

Targets

- Target
  LPSV2.D1/CRMTraceLPExt.dll
- Size 19KB
- SHA256 bdca539493c65b0f16fbd7f79ad862f4bdd121fd69694d0e7a1e994832b8da1e
- MD5 0310403d734021893e40d561823115a7
- SHA1 3503ebcc3b0b85ded9644afab637e82079a85c6c
- SHA512 2ee38c255335f5fc349482aac0ae6ad2df3c3cf5b7a2d48c471116060903062b653394bf5ebcaef62967ab705d38574548930088945d492e4ffbfb11e74d14c7
- SSDEEP 384:mh3KlyzDqBG+Om7K933/g3RSCv3Pl2pF+4y3gNTEbV8lIPd2Wnijfy:hyzeROm29n/4r/E7+4ywNTEhIIPdPij6
- TLSH
  T12B92F81AE7E88218DAEF8F79B473170006B2F1269916D62C5FAEA5CE0D32F454444FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  LPSV2.D1/CleanLPS.bat
- Size 213B
- SHA256 119191b0a8f4703f68c0e69e7126a5bfa46d3e48aee8709456eeb7db761aca77
- MD5 c73023f6e0b984085e72cd2a0b42844c
- SHA1 a0e91347ce2bc1fcc3256ef4782cdf741ce27291
- SHA512 cc1494dec4ebce3f5780448752a223dc21c071dc5e07c0b4aa4bc6026a29c8b5de46e9a6e3fe3625182a4eb172c12bb683dc5f4fe27477dda20ce5a9e229b77b
- TLSH
  T142D023115583C1B8D5F2013740DCC1C4D3195324744C6305BCF9000DF30538B777118E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  LPSV2.D1/ConvertLib.exe
- Size 28KB
- SHA256 8c4196f8fa59514974d6295c61aeaaeb43d0fa14fdd8471ffb72cf83c73d433b
- MD5 4ceadf25f03c6883b4fb500475212f1b
- SHA1 6834e1e5967df87bcb1ce84910d7e240219b014b
- SHA512 4991bc6559df23829e35ae749dc0cab57c8564c8deeb1e846726188af01290726978f93febaf8a56a5d8813ffbb7bedd092223ac80edb8dec1aa2f4775b55617
- SSDEEP 384:n8CVh7ZyIcdapOaBDwyYI12eYNybyLSQL9dd/f2j:n8Cf7ZudwBc79ybyLSQLbRf2
- TLSH
  T1BDD2E7789F943454E4ED46B1B53A150276F0AEA366F38A3D5180F1FA5E32B100BB3B5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  LPSV2.D1/LPFormats.dll
- Size 74KB
- SHA256 ab6a66b00e69c02fefbbd2b46963f47faed8c277e2c47a074523d4de49c52ec8
- MD5 e0d0e64597bc6f369c3f7da958de7262
- SHA1 a33f5475adb78335018973b832d2f27aa4427524
- SHA512 4f8a96c30af82dd839cadc7edbbd24b5ec0778de562a0a1cf427c7e392834b404e346bdda09a49916fedaac43bbf51d25b03ba98b811959d4e750aa325478a18
- SSDEEP 1536:x4TPyPFnYvbdsPlX3neI+yDDQewTOBYAmdn56QfTR:3FnCdsP9eIpDDQ5OBXIf9
- TLSH
  T10473C65C225DA63AEB7C477FF8F595AA0230F103B5A2D27A4E90D4CDA931B041947BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  LPSV2.D1/LPS.exe
- Size 1.5MB
- SHA256 b50ac740d987f28cdf24b8c13ada3809fe7aec2a4de193e77fa01cddd9124674
- MD5 4ced33e87d8793b5e507a6c1a50c4b31
- SHA1 7ee00184f43c6f8e96283d5306f43112e63dc444
- SHA512 899bd6bb287b06a4d1bce749257aa225a402a8b713e48ae395021da26365b9ff970c564e99058b4589074c19879608ac8db67a0028610945781aeb3e4f6a6da6
- SSDEEP 6144:jXN8uTVIm/GY6DU+5Dtt/Z0CZ07141RlFUbat0oS9Yx8Ouf1PZKwlEmZ/fhV9Y8v:p9BIm/GY6Dl53NybatpS9TImZ/vjxTl
- TLSH
  T1487516E06A610E17FEBC4BB3546930B54A3A7F1338A1F9DF28C17D8DC9B27115C92296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  LPSV2.D1/Samples/AppEvents.PS1
- Size 3KB
- SHA256 c0cc07082684a06f623bbd8d2db62b107fcc7383bf9aebf8b32eed5b23db475d
- MD5 1b406d91dbb51fa1cb1030cf3eb234f8
- SHA1 41e311982c7a8951c8e10ac65963b1728ba13f1a
- SHA512 fe7ea2206f07be9217a27e3822b58f45977a28c8080e74f90bb7a62863810f967a1dff0456b6de67011e68d2024750384b4da33e4a44e56d739e1caee582fcb8
- TLSH
  T136610E66F105C0583B722092D574D526AE2181666DF768F2F0BCCCE27F79D268385BF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  LPSV2.D1/SyntaxerHighlightControl.dll
- Size 23KB
- SHA256 059d793b49a60b7b5b8aedc06b8c0e50f7f641ce398269a7c9041df987e69a98
- MD5 2239d23109155c01bd0476ec37a2cffb
- SHA1 43af386a8e510b3272a604b5258c9702eafc94d3
- SHA512 ed2fd40b3bc474fc7b0c6ef1073cce8c7b80f44c6304490626939a1d05337cb2bb0e0536330817c6c99e78cb5520fa7791a20d6a988b3f11e848ab825df7b795
- SSDEEP 384:ViFwkcl6raSd/PaKzQ3+zdYAsEZitPJRNDJHLKP82:Nkcl6r/aSSJHmP82
- TLSH
  T1F5B2F71035FC5A2BC5AFA6B96EE1801483F55AB49933FB4A0EC864CF29D27745292373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14