blankgrabber | 88a9da68236c688eed0dfc09b808c31ce7c954cecabe0bde6eed063711ff4466

Sharing

Copy URL Twitter E-mail

General

Target
IttihadPack-123.rar
Size 47.5MB
Sample260918-3mfbaatepd
SHA256 88a9da68236c688eed0dfc09b808c31ce7c954cecabe0bde6eed063711ff4466
MD5 4acb65e19ab1bf6ef891c85cf2c187a4
SHA1 2cbc4601e44d3df8b27cc5761ce9832c3f79b176
SHA512 7629da0d9daca3e5d086ff9549bfb0ebe1f0ffe930c3647426a964426b6c621626d88612d54f0895fc3f950cdfc57aac36753f871b5c1000c57b628a27cb1f89
SSDEEP 786432:D7o9L2WkEvUE3poIFOYdJFntGNP6fbD45HxLmG43UJEu+ek9Xv1GCPmbd1FfgjEl:sSWrUE3zFOCn26fb0XCUJ+pxvUsQpD1
TLSH
T1E8B7335A3FC0A8D06FAC06BEF047741FE0C6BEEA86569B1E3A4D3706343941B771459A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  IttihadTools/IttihadBinder/IttihadBinderV1.exe
- Size 699KB
- SHA256 f9b84199a250cd4c6b5a587b02df6260d6d4e3472c85959d223b779edc70bab5
- MD5 17380504f908762afaf58d7af1d3d71d
- SHA1 c7bdbfa2ed86e29bc8501cfebd0f5c5c2aee7a59
- SHA512 883ff23c9ebcfbc02e4593127fbc49ebe10f6127af35d0a451b0a35751695656e1d9b5029370cf7c385f93269f751705064fd71060876683fa6c68bd6779b591
- SSDEEP 6144:c85dCbmJdDtFAjI/SqAg8m5xA+eylyI385dC:xCIAjIaqAg8GxPTWC
- TLSH
  T164E458CA7657D619D087213CE8A2CDF08A20FC96FA59425B3BA8BF1E717F193470560B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  IttihadTools/IttihadBomber/IttihadBomber.exe
- Size 628KB
- SHA256 ef376c0c13d42e1473770db48cf63ed5b8707b2081f25564089cc70c8f56fffe
- MD5 68b9182d4714c5f67b4bbf1e45590888
- SHA1 9bc9d0310b75e12dae570de6e4e385536164f9b3
- SHA512 3873594c662ad9455f1918120f54262c4bfb04888944c80731e31c474c357c403a47761a8368d3461eee037811b0d5deb74f72beaa8813260b3fe10f45529e0a
- SSDEEP 6144:jtYHseBhgviIaGfC7eMGtSi5tFAjI/SqAg8m5xA+eykyCWtqDuV+iiI/LRFD+MSX:jePhgr5qGVAjIaqAg8GxPTyW0D8FyMQ
- TLSH
  T1B7D48D0E3359AD34D892F63433F4A6B70B3D5AAF5A03D209F6657A7E1D2B810A75138C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral3 behavioral4
- Target
  IttihadTools/IttihadCPL/IttihadCPL.exe
- Size 600KB
- SHA256 ee66d0ecfb70b4950be0fdea69b24a68e7b1cd00463acf44711b4476e947dada
- MD5 80fbaa4d84d7096e90a46964fc90c5b2
- SHA1 69960c8bb8207bb44016646249eb7bebf23f69a6
- SHA512 84839ed4e567eac59a18099f7f846efe7202b71a3ec42259ed6f770d305209ec3ea6013e8ddc42769b21f2a209afa398b175553a4edbabaecd15319c51e73d9d
- SSDEEP 6144:cKM+sWHcUKi8wpR7ILCbIGVn9IeygEu01u/6ZM2JvoZz2vyq++tAWc:bzJ83i8Att9ITgr8Q6ZfJvgz2qq++tbc
- TLSH
  T135D44C5ECDA573A5C2F88CFDC6438C132887F64EE989C755201BAA5C06DBCD494F2E29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral5 behavioral6
- Target
  IttihadTools/IttihadCPL/Stub/SDKs/x64/PEVerify.exe
- Size 233KB
- SHA256 3bfc496f6836e8262ed508bc05cbf7ca86f0246b0317b6e0b17bbc7507aa0ad7
- MD5 53d51690d74ab0151a1c5906fea155a4
- SHA1 2d6b034371ce6652dc37cb8aee0b4c381747b265
- SHA512 31942f384600f2580c6e42d6a70fa35ac3c21ae8026f4431ec03a7dda05b5d3f33c0e569c402f68fc99bdb93a35512b77c1202f517807768e0f5e4728414a241
- SSDEEP 6144:BL2oLyPCNNqFT+LXiXRof1kIQRrLJYWFgbkp:BaEyPCNNqvRoSxgo
- TLSH
  T156345B5A73A4C4F5E4628538CAD1CB96F672B8150B3186CF12641B6FFE23AD11D387E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  IttihadTools/IttihadCPL/Stub/SDKs/x64/TlbExp.exe
- Size 62KB
- SHA256 97f595488aa88df5331096c5f8c5ba51499c23598305202ec6f0223d18c06f85
- MD5 7112bbd499e542405ec42a3bb52488a5
- SHA1 561118517c796d1ac405924e150f16cb4daa6f79
- SHA512 5a880ca58a833f3b9602bdb28146a80b6f025ecbfd9b163f7e6b8fe901a7e9db137e767eb69768eb5603799807a3bd2b3cbaf7c7802d57de24799a865ec5f23b
- SSDEEP 1536:68sTxMSqgD2LJ6lXi/KjcTGBWEc6b2G3oJaQinq:68PSFD2LJ6lXTcTGBWEc6b2G4JaQ0q
- TLSH
  T1BF53F6149BF84212F6FB4B716DF5C0879976F657AE25CB5D38C943880E223C09662B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  IttihadTools/IttihadCPL/Stub/SDKs/x64/TlbImp.exe
- Size 188KB
- SHA256 76c24910eae1b750141d0c446b0fb18125cc43c4388fa66d29b0fe0da9a4e220
- MD5 acef4e9b8b39de4c677621fdf95049eb
- SHA1 4a130290334e8bf0b8f8df54ff1cd872cb6c7e95
- SHA512 0604709d84d96928687fec7c9bd57d1daed064ba335c9eaa9be3e3423a1dbc9b97f98ce97dc2c77a1eb3b73d4e8cda22e2321b2ec330d61cc031ac180b11b56c
- SSDEEP 3072:x4v7VpD9Zp5q4l0QSmcydxiC7ieldIVr61c3N07Cw5uGjsJx9BzdcOyK7f8y1Ev5:x4v7V19L5q7ytldIZ6C3NmDHh
- TLSH
  T120142A2567EC4A2AF6FA5775E8F5800687F2F55B2A1BD30D285817FA0A233C04672377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  IttihadTools/IttihadCPL/Stub/SDKs/x64/Tracker.exe
- Size 129KB
- SHA256 5d963c4282e4886b7d45e2af6d66fe3e670988325d6c8c767f45db374c704d0c
- MD5 e75207c8611f4a259640801e4c999aae
- SHA1 14984b5d9e8a22c74e4f187595e17f2442aafd08
- SHA512 b699044d55b24247ba5df79c9fe8d45b91d9c59b5e8708f22094fded77321a7072a5eb3076d8574a422e40ff10852479a08e8a46654012feb632903d9a8106da
- SSDEEP 3072:Wq9nBVeTEle6ef5eFqPmi/Q5hF1pOujmsFxT7XcrCjDu/Gl:dlbeT1Df5s6mntzOuiMhjuU
- TLSH
  T11BD36C1632E850F6D8A79178DAE18A46E7B6B4B7433153CF076482AA1F637D06E3D331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  IttihadTools/IttihadCPL/Stub/SDKs/x64/al.exe
- Size 215KB
- SHA256 53470f7ad31a60a5f058b851f0eecb121dc1ff044d2ce754609dc1335919847c
- MD5 736b03c2b5ee26241be7d01ebf61c320
- SHA1 ad85dd06e7dd97e71f5f11492e62dc32d6341ca0
- SHA512 0d37f34c420928469793998a118d527ea775ce5619f103b37cc75fdce4ca4f9d74f4e706001bec761b0557b196adf2377b466d5b72019a6c51060f69a27ad54c
- SSDEEP 3072:8Bv+81lr0ArllqD1IPLZHTMVCD4Cu1EmoQIhwd75qW3KKvj6rVWOY39wxZQXD4Li:0v+S5lqDQpTnGGmPqwdAYKKLUVY+8oi
- TLSH
  T1DC246C1132D810F6F4B79638C9A19656EA76BC5A173083CF13A456B99F73FD0AE38321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  IttihadTools/IttihadCPL/Stub/SDKs/x64/clrver.exe
- Size 82KB
- SHA256 92a572073cdd25c0b487911fdad52430299d8a6e0349dbf136cdebe3630cf762
- MD5 3df1900f00aee7b9e767de9d3276c386
- SHA1 71a35be8cbc01a74edb174450a1edf3d3aa6ccb7
- SHA512 5b6bc4ee39c2db89d6b3128d76c8b8e48ac93f984db1ddbadbe8fe3cf6d543a1bf94a56953b94c26d2f11d6c0910c30d02a8a3fee882e28a2230ecf36442b993
- SSDEEP 1536:UwbG7iTd8NzuoYGszYD69kgwobfMrhd24WmnbI9uBkA:rPTeNzuoYc8kgwobkP2fmnblBv
- TLSH
  T186837E5822A400FAE8639538D6F1CA16EBBAF893177147CF4754829E1FA37D15E38732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  IttihadTools/IttihadCPL/Stub/SDKs/x64/disco.exe
- Size 67KB
- SHA256 e3f437bf0475c59627ec6df7fa41770a372a62655f53cbf6ea582ebf7d06e46a
- MD5 4ba26b1bf9d687438a84df3fe72c3427
- SHA1 7adc99bae76bdfe4f6bb9f902df4c50fe9f890b4
- SHA512 c6f32bed9366cae9e0c385586b0212642158846a699e2f580c101aea3444a8e12186053f6ed0b8e5b689445c76efed2f6ebabee7e762d4cf9b7bbdb97b2ceccf
- SSDEEP 768:JPJD0SLoVy6f/IELS5c7d1ZstJI6Iq8fhHxox0iMUg8:JxzkVy6fScJgJ3ohHxy0rUg8
- TLSH
  T1D663E61493E84212E9BB4AB06BFBC3C387BEB5875D21D75D2895634C0C2A7C2795372A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  IttihadTools/IttihadCPL/Stub/SDKs/x64/gacutil.exe
- Size 127KB
- SHA256 7f25f497ee07285262b185af7434f38a21a1770c437b70df32ea61d2902c423b
- MD5 beb512a9b84f30319b01ab27448963f6
- SHA1 0a3eee699071ef0ab96207369d3c4209181a56bd
- SHA512 37af2b1b152e03b712e037e82cadc19183b32fae2a3d00c9fbd12652b94cf9d456337aa5a104e67361fa8611163df6083a8187f22daff5c135e95ba21df9d164
- SSDEEP 3072:OX46OsHdZTdvZsTy7BYqlXW7X2o2cjOWpSjQrqpiLteyLSk7L:OoMZTH8y5KGzcSwDik7L
- TLSH
  T101D37E6736A860F9D497853889E18A46D776B4731B7193CF026443A91F23BC46F3E332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  IttihadTools/IttihadRAT v1.2/Tools/SDKs/SvcUtil.exe
- Size 197KB
- SHA256 acb7bf20e53fde4e171067a6de2581bd2df374e26b75349c42c14278e5595024
- MD5 9f2bf87473dc29e0ed74d026101d80dd
- SHA1 71bbc200110ef22e6b2c90e9bbc0f49f7a6b4088
- SHA512 c12cb4ad24403fbd7eddb44f5d447e31b19171db94a8ac6ec6c4b9cbdc642ba69b55294a0f60f6e8f52b16b3bacccfa93a459d63b1c344fa3d001db4f92730a9
- SSDEEP 3072:Q3O/K60xJruHvlli7/qUH+Pz/tY0+ceI46nYNh/u9ck0xcXvUerFwyegYm1/K0UJ:SBGxsI46nYNs0xcXxY7J
- TLSH
  T17E142A3937EC1726F9FB4BB4BCB9C0014E7AFA236917E64D1998129D0571B80C962B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  IttihadTools/IttihadRAT v1.2/Tools/SDKs/TlbImp.exe
- Size 188KB
- SHA256 044910a5c27e72ee21d7ce09962a8b30d4be77458e629451cc1fb73deccf6cd4
- MD5 7b60fb55c7df5f801f8ea31859f0923f
- SHA1 e51079cd87c7dbf2aeb5795a4ec10c4ca4b0eed5
- SHA512 0f37ffbab2e714460630e5de345d391b1804c129787077dddf52f0331c6a95e6b09354b7167a0f7b44daf589c51ab7cca81d1404a7967ead82410ace613d8ae1
- SSDEEP 3072:r4v7VpD9Zp5q4l0QSmIydxiC7ieldIVr61c87Cw5uGjsJx9BzdcOyK7f8y1EAxbO:r4v7V19L5qfytldIZ6CuDjj
- TLSH
  T1D1142A2567EC4A2AF6FA5774E8F5840687F2F55B3A1BD30C285816FA0A237C04672377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  IttihadTools/IttihadRAT v1.2/Tools/SDKs/WCA.exe
- Size 52KB
- SHA256 2089cfba8e27c693adc7bff30fe174b7584832b0fd342b162dc6993e9eae282b
- MD5 c6846a484e08a5b12466a077db6c3e5d
- SHA1 fe50b5a8b5378478b65a8217841f2616d513c48d
- SHA512 395e58186ba9a5230c1b2c93fe83aa6dade8c0126d1ca58cb72b17ae905a9230c519692aa6920e7d70e403d0c9a7744bc4c09d38c3e52e636c4a60740b7dd4a6
- SSDEEP 768:0YLUUzqRtIzYAQ1gqiF9ZvCkEoONcit/E1isyc/:0YHmRtSYBgRbEo+cIE1Ny8
- TLSH
  T1D0333A5073EC8356D9BF4A302AF0A5864B7CBBC21911C56E2DC4B1AF0993FC19E51B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  IttihadTools/IttihadRAT v1.2/Tools/SDKs/WinMDExp.exe
- Size 1.3MB
- SHA256 1b3e76e8934d690eb462d77d3fd20266e70c6ff9fd223202a7f58b04a4109c85
- MD5 72ec26d29e040b53d1bf329141f9bf57
- SHA1 15e5f21fc209d73a0fb13449f51430ec35bf956f
- SHA512 66af8071416246e1171b4aa3f3757cfbeb08e79af3ca56fbce02bc916ebd035190db09369beafbd1368511fedc2bf87bad8dd7dfa47087c9306ce7c92a73abc2
- SSDEEP 12288:Y3mUaWs/++jX9O1NKV1BTP7EVFFP8NHQsFnBLCqGiWSNAPY9WqphQpR:kW7w1NolPFVp3WS3WmsR
- TLSH
  T1DE556C07ABE8A777C68B0777A03205097FF1D04B7717EF057948A6BA1C1BB909DA2163
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  IttihadTools/IttihadRAT v1.2/Tools/SDKs/al.exe
- Size 190KB
- SHA256 f6c6ca66956bc2a63136c769433cb4ca0a820351dc22515f791a098f0b3e4471
- MD5 9d381cc31bd46357f144acd242b8eb22
- SHA1 a2394f1737f4a16abdf527e4c00e91b0f147ed28
- SHA512 1037cd5aef45db81e24d86a0eb150f7e52d121ca09caab9ea74da89ca6d309f6fc9c219e6cc56ea8cfddf3a57f31f82fa6a4a356032a9f09431c6990d753641e
- SSDEEP 3072:gmzrEJqNKpw8oG4VO9ntat9uYpsYzFDL+wYZfP5q:1zoh8G4Kn8uYb9CU
- TLSH
  T183147B127681C072E9B345B016BCE3736D7E7D325A259A4FB3A8AD9D4A70380E735363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32