e3cfbd24322e7c07e0f7e944fc5a25cae19ad0823948f806fcd26ccfa33c2c9e

Sharing

Copy URL Twitter E-mail

General

Target
build2-baseutils-0.8.0-i686-windows.zip
Size 11.7MB
Sample260910-vqnstssgqf
SHA256 e3cfbd24322e7c07e0f7e944fc5a25cae19ad0823948f806fcd26ccfa33c2c9e
MD5 eaa252da53edd503a45df3221091ab58
SHA1 0e3c476b37acda895473b866e86660638c7cf0c0
SHA512 55959b4227112475db407eacf39edf14dd1e2d704ac294eb22f31846e9e9abf13a5ff2217eb648b535ea766f44c5fb10e474517e100e9518d5b2eabdbe595b58
SSDEEP 196608:XvrqaQYvb6+pV6sJA/3F76+/NORV1ZQY1IDSqwkVzkKhctvMidk:XTqaQKb6+Vy/3F76DPEY1ArwkeRNQ
TLSH
T18DC6337D934955ABEE1FC935E32D8FC8C4BBC0694857D85BAC9011D094CD3EBA83B606
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  build2-baseutils-0.8.0-i686-windows/bin/busybox.exe
- Size 1002KB
- SHA256 0c943846e1aab637dfcb191a3992d0ab57d517bd5206a6eac174cc657945a577
- MD5 f0adfad6a2aca380cf7628e23c8c1628
- SHA1 487c27a27a9db8fade0d6132f57a51e74c248b25
- SHA512 44203a4f4a1cf09219d0ac23c5639b75b0223ed724f091433da443195e8388bcd84fd6175d69781d1cef656b0c872fc680659fe32cbed3c57d7ace3abc5bd4cd
- SSDEEP 12288:3bhb7RkE/vcMZCIQ4F0CNthh2gEfAYf7EjyYdi:3bhb7Rkoc8CIQ4Fdhh2geAYf7EjyYdi
- TLSH
  T1F0258C85EE8B50F9ED5B08B14187FB7FAA31E6118434DD9AEFD82D96DC33D5204AB240
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  build2-baseutils-0.8.0-i686-windows/bin/bzip2.exe
- Size 89KB
- SHA256 0cedecf109d09a4068479533504ea9b02d8474eff062ac4cf967d85d3d6a3f84
- MD5 b21c241344446e6df959a0e1f49dc2e6
- SHA1 d5a4ef012f02bc24ad1cbe8fc26edbb143ef9941
- SHA512 bd7ba516380b01967fe54e4778310f9d5fe9cd3a3c9a5bb967fbc4e67f1d19799d6fd415890a5b6ca7be07f1b91a25313febdb7f38d38e527830372d0ab8c331
- SSDEEP 1536:xC0yvCHHYsOc5AR+mSvWowMGOtBjXI7/0RN/8p6AMOSh0tKY:xpdAzNMGOt1g8kEAZShMKY
- TLSH
  T1E8933B00F2D749F7E986073289D9F37EAA19D60D0610FEA7EF18AC4FE713719A065281
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  build2-baseutils-0.8.0-i686-windows/bin/curl.exe
- Size 271KB
- SHA256 343e689bf48ff070b2a2eda0b6c0178ecd82d30c73a70d30d4d0b9c02ec2dff5
- MD5 2203384abda0de1e31ebee441add06a3
- SHA1 2b408e383adff42030853d3a4e6c1ccdaaaf2e12
- SHA512 58465bfba7adae95b837955de02bddd13f71d187941e464739c0a1f60209dfc5e33058021077375b709677df7f1826a6098c62173c3ca6baad0984495aaad3df
- SSDEEP 3072:WiOI9GbtprCtWanR8+B9lEh21gwWCcdOsCsYMCp965b0xlDxydrM5PM2FzMDGywj:AI9Gbtze4vKcUsXCX6SqUMEWGKqp+vLC
- TLSH
  T185447E21EA8764F1FEA7517592C2F33F963869115015FDA2EF98FB8AF473F222528101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  build2-baseutils-0.8.0-i686-windows/bin/diff.exe
- Size 272KB
- SHA256 124a738649c756efa8a902400f9bb0d6db5b43a7b88e86e649d0b6467a7b4d0b
- MD5 49713401a817a0b3aacf01472bd6ca49
- SHA1 bc0c0d71a62b0ffd862513e7fa43cd0912d160df
- SHA512 c72fd01ee6bafad21d461ade1a99bf72ca7c4bfbdade54890c58fef1bed466b2ed301cbd6a01791d9ed209ea3958f33b1f60d3b78098ed72d9510b40a5f40113
- SSDEEP 6144:TGNtczIRiS77jkd6MFuz3YLaJE6WLEIvP1j:TRUJd7hEFP1j
- TLSH
  T1F1544A58EA4764F1FAA3613585C7EB7F92345B028021FDB2FF1DFA59F5336222819206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  build2-baseutils-0.8.0-i686-windows/bin/git-receive-pack.exe
- Size 38KB
- SHA256 16d4794b56e54bebac9fcf0d1b2f6a371bce3288bf65b381f1112d7af8a67da3
- MD5 8c5aba07913efa8dafd88886bb7c3a7d
- SHA1 ad4257ab3992c3ecf726cb07cf7b545b06996e7d
- SHA512 7435d1be96a7b94842e5d7311ae22aa328fa2ebd617e57087d387b7f3b76ff5670a254052f2938dbd29b011077e2ac351e39f077ceec6a6175c1733a3c46856c
- SSDEEP 768:Cn9mXRXzYOduDe+S8Koi47BeefEMolgYiliU/:Cn96h0K+SZCUSEMolLi1/
- TLSH
  T1FD035C01EA47F5B1FB61157066E9C77F8E3D7D338821C82FF744CB4834A9656482AA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  build2-baseutils-0.8.0-i686-windows/bin/git-remote-http.exe
- Size 1.5MB
- SHA256 68c543bbafbf2c2e63c8dba72d6a682c5cf5cee899d455ac7571039efd683eb6
- MD5 18302e6172acb3b7c3b6b906ea019edb
- SHA1 147e2a0384fa50f6026a01dd50f52786c5f166bd
- SHA512 eb976bf8160f1abf257cd1aa22dbf58680d78153bac7a65a47c00d55985f5fa43b41d3df916061c8580d263211a4ceba1ba7d2200b6fa521e68462a19c00d0f0
- SSDEEP 24576:9H572OII0bWH/b4pZSDeVA9eT/lRJQYh+IJd+lZ0rCUjagdUQOccBTEbrHZJxxDp:BObkgK7MtiKXCU30mr5JoX0LMdgHEA
- TLSH
  T1BA753949FB8764F1FE631675824BF73F9A6597028031EEB2EB4E6989F833917100A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  build2-baseutils-0.8.0-i686-windows/bin/git-remote-https.exe
- Size 1.5MB
- SHA256 68c543bbafbf2c2e63c8dba72d6a682c5cf5cee899d455ac7571039efd683eb6
- MD5 18302e6172acb3b7c3b6b906ea019edb
- SHA1 147e2a0384fa50f6026a01dd50f52786c5f166bd
- SHA512 eb976bf8160f1abf257cd1aa22dbf58680d78153bac7a65a47c00d55985f5fa43b41d3df916061c8580d263211a4ceba1ba7d2200b6fa521e68462a19c00d0f0
- SSDEEP 24576:9H572OII0bWH/b4pZSDeVA9eT/lRJQYh+IJd+lZ0rCUjagdUQOccBTEbrHZJxxDp:BObkgK7MtiKXCU30mr5JoX0LMdgHEA
- TLSH
  T1BA753949FB8764F1FE631675824BF73F9A6597028031EEB2EB4E6989F833917100A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  build2-baseutils-0.8.0-i686-windows/bin/git-upload-pack.exe
- Size 1.4MB
- SHA256 a8d611aaf133d77b442704b4756139ca5805b15cd516513542023c1fc1958ab4
- MD5 9f549b2a8cfe7e4d052a150dfce8d5a9
- SHA1 a48ff250e1bf7cd9290c28b9cf421a65bbacc7af
- SHA512 17952d7154ab770aff624f9eae4c8a0c612ea8f4de95691c94499a01e2c556ee22868bd1be351aa944dc6c136e906b0ddff963b5f3e4f0b16bfa891d0f876ee8
- SSDEEP 24576:XZxcI1kf9uVZQwxEOLJAF7s8Z0UC6Josyl9j3D9805J68Jp1DApjWBhummxxodfq:3wukjPC0MVn5LApjE8m6xodfMpT
- TLSH
  T19C652948FA8768F5FE671575C24BF77F4A619A028531EEB2EB0DB989F833A130019315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  build2-baseutils-0.8.0-i686-windows/bin/git.exe
- Size 2.4MB
- SHA256 bcc29e19d72e5c95e08e4d7a00ea69e5b4e16bae52edcf334ac251d7e3914511
- MD5 b37e9b40145c28b9c4cbd693398426a1
- SHA1 de2dfd3ff524225602d4a03777d3194318152b53
- SHA512 774bc5b345c11b27d001361300dade71618c5dbb7db71b372e5aab5f0e858ec90785b074388ab5b2bb9182ff25780c7fe4e06798dd64b87c070287077b597ed6
- SSDEEP 49152:yzvr4dMmGG+H5SixNL4vNIHkN8ETvrfcmy7uhqlQ3wP0dg3BWFV5d:yzT4gGknxN0OH1ETvrxGQqlsScFVP
- TLSH
  T19BC53A85EB4760F1EE6365719587F33F8A71DA018039EEB2EB1DAA89F933D130119325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  build2-baseutils-0.8.0-i686-windows/bin/gzip.exe
- Size 100KB
- SHA256 38d5e72563edc60967cdd1e215d67885cc120ca6b102bf04e5a7bfde115e225d
- MD5 9f3e643d295e1a76532bda9da5a674dd
- SHA1 c0502598b504beaa80ffffc4c929187ab797e0c1
- SHA512 036090eed5430611a815682b98861bae6e26d7dddc27aca2968218cc8082e05352065f3fa5c3e7605d930c1a660f94a31a1b0975f480b1984d47146d0903ac47
- SSDEEP 1536:TwDywIjxTBcBPsJrUhDURqL4zbQsG7yhI6WWB2h7sgNrCmqRvWliZ:DwIjDc8ghDUOKHG7+5JLpRWEZ
- TLSH
  T109A37C59F48798F2D55201B457CBEBBFC424FC355A20A977F72DF6AABB736021202206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  build2-baseutils-0.8.0-i686-windows/bin/install.exe
- Size 142KB
- SHA256 80e0f4c09eb9da4496544f7b87b1c81ec837f9dc589d0272a0df6854468390e5
- MD5 cb6d22875ad43b1758a5b19f3716efa1
- SHA1 a7d76838fcbd7f608f97f1fb545cf3811afc0865
- SHA512 06cf9ba35343bda51bd5eda41802a7fea3c58d6e0d96477bf5df5e1636aa2b9673f92e64f8522f68be8f8177a10c4a1e9c64d24631b5f036a2c8591adb88002f
- SSDEEP 3072:kr/dWIo5PGDnz2pblkOq2gZXJ7QZwBE4ve8lx9gdQBTOxY7PikEYN:kEcjzyqhZXJBE472QrisN
- TLSH
  T160E34A1CEE4755F2E9A3017282C6E77F4A3079318610E977EF5CAD5AF6B3AA63012314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  build2-baseutils-0.8.0-i686-windows/bin/less.exe
- Size 153KB
- SHA256 34cb13a057e47e3dd40e8affabf59945e0c6114d964e83301c47616bab982df3
- MD5 521005edf2978cc9343bc3347bbb1ba6
- SHA1 df78b6829829b6ae16103c96da1a9bcb5bb78836
- SHA512 0259570988905cc3ed4ba4b533643d015113af06d06260c3e1b299a2fcce96a86ea28d741250916ce353a3955e86900deb583da0c880915ede7fe3ebbfe084a4
- SSDEEP 3072:WuQ1ySszPWcAHcCXwAmuQ5puB/Twygf5l2JXoLXpZahxHNVd:nuyfPkg5Jzy/0yu5lCXoLXOlNVd
- TLSH
  T12AE33A0CFD87ACF1D96381B3494AD3BFCA61AA064721EA73FB0DA65DBB73616110D214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  build2-baseutils-0.8.0-i686-windows/bin/mingw/libbrotlicommon.dll
- Size 137KB
- SHA256 093ff5c6944acabdabab68ba3c0ee9777cd02e2f20882438fa0b13b116757783
- MD5 968cfdce934adad6d478c93fc9d15312
- SHA1 2ee48812a0f8088500e6cca4246ff2eaf12fa2e1
- SHA512 2111be0da094cc9cf477c434e1076822b8d83fe8c291bb0b2cbf20f100f0e86ce546da356ea9e165c4fb280af85994b7f3a40c7e26018af2ed2b4048dddfc2db
- SSDEEP 3072:iRf4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBWC:af4AhdNorGvHdbi09GJJ
- TLSH
  T1BCD37B61F3050737C26B227AE49A6BB9F335817497670521B8A9426D20C3DA4873F6FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  build2-baseutils-0.8.0-i686-windows/bin/mingw/libbrotlidec.dll
- Size 56KB
- SHA256 914af479193ddf9343a5b75df03f2d6a58b0fc0de9cc90bdc7bc3c110fb54339
- MD5 1d4c5fdcae738db2afa4fa341f7f3e23
- SHA1 996e61165720c3a9736cd275e8a6e8b6b59a2abb
- SHA512 bff68bfafb5e580fabc06a0693960a1b4ab790dbfe6e2f6afcd1d86e7a87f6230ff1bd4d7ccb27ca7088d9e18b467c39ba552d7c1191e96643d479ce4aac7ec5
- SSDEEP 768:mF6ndCOluGIOKlEZ8aAX6NsC+zP1/AUI9iPfBSH8f0vzRRADHGazQxARbYs3674U:Q6nUVOKlLJqNs1zP1/vxIPAt6axSN
- TLSH
  T186434C42BB432CE6EFA7427581865B3B42BD4B014533E27BF764B6EE7D332236944109
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  build2-baseutils-0.8.0-i686-windows/bin/mingw/libcharset-1.dll
- Size 44KB
- SHA256 1bd6dc10ac2dd3767996a9df36eab00b16dfd26c0ab911c66193cf81c64f6c83
- MD5 2eeaa6da0ff8c347f00137208f4a9492
- SHA1 63b00d8a07405f5016365493506df0195e61435a
- SHA512 b572b2350cc559bdc342c0c2594c7972b849730af9599f4e41b2a5d04de8a1ca0017704733ee8a0bcc2cbbda4bd74d44e4eb20313510c8b51a507255ff9435e1
- SSDEEP 768:69h4/Wh4MTn4krtJsnWDyHnEPgVfmysUT+OQ0G:kB34khJ1ykPUnQB
- TLSH
  T1FE233C65FA075CF2F7A262718986C7779175DE018022FAB7FF19F61CE877A07640A00A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  build2-baseutils-0.8.0-i686-windows/bin/mingw/libcurl-4.dll
- Size 583KB
- SHA256 cc1208984cc354c766523cf19b1b25a0ca05355bf3cc29957da8f745cf0fa1ec
- MD5 aae27c333d1eaa8e8229415f178589ad
- SHA1 2dd98ec13a3d166f0affc1e684bc64972ae7c20c
- SHA512 cb57f3fd28fc3677cf61b9d97f86fd7321ff2cd07efb60461bc6a44033e104562b98ab5dca97b7b030b103ce7036ea65ba0499fc2318757fbb089c2263ac1f17
- SSDEEP 12288:iCMdUC8U4BwqyqktFjtU7LpibHHy0Vaz9oVhL:id2nU6wqyqktFjtSLpic9ozL
- TLSH
  T1A3D44B54FE4724F1EFA385758647F33F463557018429EEF2EF49AB5AF973A22220A201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32