34803a9d1bf35c2808cee0dd4b3300273c7e0f51afb6b693cb6baa37b4fb69e1

Sharing

Copy URL Twitter E-mail

General

Target
Hewski baba ayar.rar
Size 3.1MB
Sample260922-s87mjswwcs
SHA256 34803a9d1bf35c2808cee0dd4b3300273c7e0f51afb6b693cb6baa37b4fb69e1
MD5 98a5b2ec4ff6758c94106aa638b1f758
SHA1 831ab01cd91aa3df0ee0b7e524d7388281f3ba6c
SHA512 2ef0331c8ba9949c3cda0e6871e6332025232cc076d9383953675b43b6e923a828b3f6f9e026476d29b4a25fa93eb84d708b0e48cfde92a2c25efdc9d30fc809
SSDEEP 49152:n3Ws6HsaJ5hFXj7eh0qsDbxUOnqkTLu4MoHBGVO0zQ5+ohowdoj2x7:mtHse5DT7ntXxpqkTL/naQVRZR
TLSH
T183E533F62579244BBF2A8CE0278D57B0289D957AE6FA78EDD052C76830104493FDCC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  Hewski baba ayar.rar
- Size 3.1MB
- SHA256 34803a9d1bf35c2808cee0dd4b3300273c7e0f51afb6b693cb6baa37b4fb69e1
- MD5 98a5b2ec4ff6758c94106aa638b1f758
- SHA1 831ab01cd91aa3df0ee0b7e524d7388281f3ba6c
- SHA512 2ef0331c8ba9949c3cda0e6871e6332025232cc076d9383953675b43b6e923a828b3f6f9e026476d29b4a25fa93eb84d708b0e48cfde92a2c25efdc9d30fc809
- SSDEEP 49152:n3Ws6HsaJ5hFXj7eh0qsDbxUOnqkTLu4MoHBGVO0zQ5+ohowdoj2x7:mtHse5DT7ntXxpqkTL/naQVRZR
- TLSH
  T183E533F62579244BBF2A8CE0278D57B0289D957AE6FA78EDD052C76830104493FDCC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  Hewski baba ayar/AMPER.dll
- Size 2.8MB
- SHA256 7514344506c9e1c7831ab34a9d6df214626ef767c102a9ac575e50088b58fce9
- MD5 2841d7c826d6479c7f9159ce56b73fd6
- SHA1 c94a6303475ebb70db34fc7f7e5bfefd4b71dc0b
- SHA512 0977bcd6de0fd7eddde6e9d737800173947fd9cb72fbb662d9759f1d042c4cccd04bb660848cacfb91f1a6497697900d91e4375852f4bf2f3ad86aa5cf30f123
- SSDEEP 49152:BT/5oAo1uTpnqo8AVBUxXNkyq9uGX7wT1v9AMan70ce65f71mx/thH:BTRDoUh8ALUxXNkNuuEbAzn70cFG/t1
- TLSH
  T1AFD52346F6D408B9D6B78138C5739906F771788907608BDF23984A292F73FE16A3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Hewski baba ayar/LW (1).dll
- Size 823KB
- SHA256 6c734f81e0c8e727bd6384c1218e6ebd8061440c3e3b9b6db545cb12ad12cb90
- MD5 944e0bc26f124b4536aca8717ffd6fc1
- SHA1 8d2b3ba2bcbc0856c15e2e4445b0d970dab4f5df
- SHA512 253cca3bb826461b5c721276ad08fce2114aa73e2c58498fe10356a2c596eef2dd28e345e5d27b9a8c4093478cff5557a40abf053c1330dce8afae745726ba7d
- SSDEEP 24576:l5kTwPzY2PhthHvsNm/Sr/+CglG8lDTrk:DkT6HZPsmyx8J
- TLSH
  T18605E04AF67548B6C426803DCE539E4AE3B2F859072197CB13A0875E7F637E1583B362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Hewski baba ayar/VURGU.txt
- Size 422B
- SHA256 11aa797226e04f6a5722c35d17e159070226ce65de85f14f0a44f4403414a17c
- MD5 924e5eca609696a207e2ae0f5526c795
- SHA1 3e77209bd713f057f7fc17683ac73f6ef9046e8e
- SHA512 1ecd4706d24a4200aa0c98e0d285a8d11627a27e432f2efef06a2af2e4c0d3f48681dc5a0ac19906e3e77c1c421544df739e0dddcc811706e58277b2f5fd9786
- TLSH
  T104E02B54479C498D3F8DE5CCF40406E52D7A6BCBB5730FB8A55EE195971E024C1B6C02
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Hewski baba ayar/vurgu (1).txt
- Size 1KB
- SHA256 41d9924d8e8fc7b7ed3fd07f4905375ed8408cb8df850172996191aa9f39771c
- MD5 d399b34028bc076109d36358a1089286
- SHA1 93e275701fb4eb0a02a917bbca1a79c8280906f3
- SHA512 d323fcb558e2dc99c7c111e75e20ea2637029a3e6d9c1dc54213bc9a826772e30bc5715a11b55b4af5f1f955cca3a6e5b5de84f184997ad3691bca3aeb3a260c
- TLSH
  T135215A25D95F018C2CDC929D38AD4BAAE1537E6B77B18458143CC592A88FA331136C71
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10