fab7f8ffd3d1af9859a07e967849be68e5f068d4c5d325d4496e0fa759cf2750

Sharing

Copy URL Twitter E-mail

General

Target
StellaWare ARC.zip
Size 12.7MB
Sample260923-23f23sff88
SHA256 fab7f8ffd3d1af9859a07e967849be68e5f068d4c5d325d4496e0fa759cf2750
MD5 4dab85075b002c7ba2b039b5269102b6
SHA1 7eb203eec6ce6e468a5a91b452b1fead315cfb78
SHA512 99b4af8e9baf2ce9011d3aa6b778f0ceae339879e3d7efbdbfda853164a9d95c77d826aaf4c26e65e1cae175ba3175f359ca01855fe65bdfce762bcd15806695
SSDEEP 393216:rShwJa5M4Gha393zWBqAf6pne5HZECMPlDlH:2hGa5hGhqzwqjpOMPlD5
TLSH
T1E4D633EC7386342DD5AAFE3CC9551B3652076604E387BCAC025E3B3E71A70812E55FA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  StellaWare ARC.zip
- Size 12.7MB
- SHA256 fab7f8ffd3d1af9859a07e967849be68e5f068d4c5d325d4496e0fa759cf2750
- MD5 4dab85075b002c7ba2b039b5269102b6
- SHA1 7eb203eec6ce6e468a5a91b452b1fead315cfb78
- SHA512 99b4af8e9baf2ce9011d3aa6b778f0ceae339879e3d7efbdbfda853164a9d95c77d826aaf4c26e65e1cae175ba3175f359ca01855fe65bdfce762bcd15806695
- SSDEEP 393216:rShwJa5M4Gha393zWBqAf6pne5HZECMPlDlH:2hGa5hGhqzwqjpOMPlD5
- TLSH
  T1E4D633EC7386342DD5AAFE3CC9551B3652076604E387BCAC025E3B3E71A70812E55FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Assets/Fonts/hkfutk725ora5craxcnu.ttf
- Size 224KB
- SHA256 e1b8d3a78823aa94c69715020fa72aa780bce2420db0c73d5a2e895c02c6e083
- MD5 9572d1927d46d80b8e8be24d3ec63b9c
- SHA1 002972394295b1fa77e6d0f76061f0b1913336c8
- SHA512 38d332391a58ea7dfe4b7e412f3ab91f2f6086954fba981d22086cac57decb9f7d58db8c0d30d8cff81641464392217f3ba2bdfa3a7a26d0774b117afe3615b7
- SSDEEP 6144:hQhf1bvB6lyZRf0hP892vnu6a+LkC93H3wsGrpVEZLCO7DS9XFuFGNUEUb1NpHDL:6hf1zB6lyZR8hP892vnu6a+LkC93H3wQ
- TLSH
  T1CE245D413150D601EB6B9A70A461FDB2F2E6BD6ECBB38E43F4373AB854460D12D93359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  Assets/Operator Icons/0bepwbm58futk7i5wryt.png
- Size 14KB
- SHA256 768bf330db0984ee6c9c3dfc2b41f4634f3232ded5daaad37254829187c356e3
- MD5 dabce591c8605b3fbad62762bdc6efc6
- SHA1 3a71aef04a746ac7e4ff4c04344b4d717b610d66
- SHA512 68af71310d55d02afa23e633e8b22333627c2208350482c42c83130cf245545a986d6df14b4ff81d8c27e7b6d3579d09325c9b5506991de04ad1b0a86616889d
- SSDEEP 384:5LzVIDs6dC76wMUO4H5yB4m3z+3FNPttf2gCHqSP:5LzVID7dC+CHHm3i3jttugaqq
- TLSH
  T11D62D042279BB4E2844193A39E8FCB83756F6901F42E5197B67280F54B89D58F3ED310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Assets/Operator Icons/0faxgv2tsfuxsr6dczuh.png
- Size 8KB
- SHA256 89af759f223191f4ea7051aea6ceaa29b7911b9c0da7c9af5491c7dd1b50969d
- MD5 e0f477b26f738c0845195e2d27220cc1
- SHA1 615033847becfb5a8f6f2b82a5393f2aed42862b
- SHA512 9e44615b5c00a658d7b417d36e5d6b6a676305a058ff05b5bef896f52f04c372d0d35eddc3192d133a2e4f417c3cb01361c96c63c75d2e619f510a28f3c6cca7
- SSDEEP 192:vUEOW5555555555552MgarTQ+sQzeiDZEGTsBxbJJJhN2EzWdfSy1e55555UfyzS:vUEOxarzlzeAeCIbJJJ2YyK46zS
- TLSH
  T1AA02AEA0C01F73A1B593A732D5302CDCE0C32A64A4DD911E5E6F7AF5A8093A8379CD5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Assets/Operator Icons/1svq18fqdcji987m9gru.png
- Size 11KB
- SHA256 5a1c3c528d281df856d7be5d5dc397e5ed139c71988354259edbe67bff121af8
- MD5 956ee59e7ade51c66be7eaefd2abea23
- SHA1 bff0d88aa6233d7e8385786df336652931ebc88e
- SHA512 ccc87ceb47195fdaa49004fdc1573be8f176cabb2acc93eb88e2f3c3d834715d046841b4ec27d990de1c9793824dfadde20b4368e9d12af0e3d6c13ff93d7abd
- SSDEEP 192:Qr2ZsnNWzDWK11U3RK1KqK87RJF6p14uUVULWZYCq+J6onb1BvlHNNaEC9f:O2ZsYzD/Mq1RJFCSuUVULW6LoxBTXE
- TLSH
  T10532CF9E911CF2672CFC5718FF199328768F39C0244447A9A99C394F73FF0676A6A848
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Assets/Operator Icons/2d0j6pcr6hsfqtozelcj.png
- Size 32KB
- SHA256 3a09b6ac6131cb7c432e965df1808f40a35dbfe31f368a353c3e6cd6efd2a397
- MD5 3170df2100137c800cdc8dcca1e0d8ea
- SHA1 8e842de7a49278fb2591b4da5fad12a7707503a2
- SHA512 68a6491e7f0b3e01ccb952767a9c56138e2234dbc7f7bceaa1c44d3aa79f76984e53a55d7b4ae17e7b1ac7906b799544dba3503c5388167f2272ea9babf7a23a
- SSDEEP 768:4DHC27zwFSM6VJlxPPgOuEEA1R6Bl8LiZLnSB:4Di274S7xPYOuAP6Bl8qLnS
- TLSH
  T109E2E0711B993C02F2D1867917188EF81805B492EFDF78B6686834D2B27DAED605C38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Assets/Operator Icons/2d8jq5wfel4r2dsn6xkj.png
- Size 27KB
- SHA256 332ddaf703efc17c8bc7d672c94de689ab2d633257b8a7d88a64c127ac3d1352
- MD5 1911f53f7a48869c6a3c09ee39fae2cd
- SHA1 7aa8781148fe39a7dde2645ebe86e5da868dcb74
- SHA512 df1ec787c365c29e6f029ed89fbdc6c5e0db7b16ebf456a31b9a1286e17d32cbf28c1d7cb1cc01ec4036b1c5a52cbd858c71686d59838a7e5bcda29a3dfba133
- SSDEEP 768:u8RPEaX3qxnh/0XsdZu2NxclkusTs4r8+KW6ODObHEw:uI3qn22N+lkusuyOJ
- TLSH
  T1EDD2E178AB91CD24248A263D4E8074FF579BE85E7B02EE92632D2F3024522F45DF5C36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Assets/Operator Icons/2lsfq5gjy9czep8zmtwj.png
- Size 14KB
- SHA256 6089ef2f562549b6af7b220bcb4a6d07f8c3dd3bd62f5d975213969db69f0692
- MD5 5ade3d03c925d213a4f6520c021c679a
- SHA1 18deba005979597538c850edd38dc7e3391a9e37
- SHA512 43737ee04af72eef4c88b3096ba9e8151aaade6796cee3f843d4e7cfeff8947a9598c02d6ea3f1aaca34a3b90bae03c29a6799df284f1a4860f3f698c06adce3
- SSDEEP 384:Y0MHsIm0BZfWhQ2y9jvTPBPllOPBNZ3g9XO80fL2iY:Y0M9LQpgjN2HWO80j2r
- TLSH
  T1A262B0EF441A1581137D22D0CAB12DFB6705B12CB96844F93BC5BAF1DCF94279A2186F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Assets/Operator Icons/3290f2dw36dkry94bi5g.png
- Size 44KB
- SHA256 7b38449788807b9a2117da8dbdd9cdc0b4a777be47d10c9567684282f81c0886
- MD5 3c466a5dd68bc483b04d3e0192c74a83
- SHA1 ba3c42ace02be0d69e8d8a631479b94fc4b4b05d
- SHA512 8ae55d72a3bae544faec24929805eedf16018c7a843107120cb1a64fb2511d5598119393b4d978163973cb8cd2d280f73bf5e22532d2a4277e42bec21c66ffe0
- SSDEEP 768:3ggFxCWtMsXooL2wj0iCHCmELypTPr9G9jD3YCtrkqTZ1lRsyoj:3rjvTXfr0NtEaPr9f3qTZBs7
- TLSH
  T15213F14BEAFBE545F640134690A6926FC8C3F202C5C13F8574CFDAB4962C85CDD8A6CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Assets/Operator Icons/3e543alczedcrud0n61w.png
- Size 33KB
- SHA256 831bc011a953e12a86d5eed1156899763a52610cac1ce0528cf432e69f20e994
- MD5 b89902986ca797e4f695c4edd81fcc4e
- SHA1 88151df701367de2e942bd61a76e911bf9b38f51
- SHA512 68c39e368edda571fff009cfea18cb17a1a1ab8a4e72bfb8b97465796894b01b94dbe181decee4efa4adac0f23eceea9625f1c4cde98d03b47b8a13e2ac2422f
- SSDEEP 768:U4vAmPtstzyyvAUmNGVy8Wg0q4sBitwOyuh5PZqjnrS4MseuH:UklstzyyoUmoMF5WwhqbrS4d
- TLSH
  T14DE2D134E2A63B19F5098EBA9606D64128F7BF7CA45D56D5F12B39E1C3D2428C70B8C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Assets/Operator Icons/3ex43y583ad4nmtgre1g.png
- Size 20KB
- SHA256 bcc641c368d8c0d38c0d7d1c3b5b78a476c810b4d6139a5c5250d23bdce199ba
- MD5 cf0f2da06ac9e4b2a997a148cb73ccd5
- SHA1 e2bffe8caff19d21ef872eb58e5bde00285d4de2
- SHA512 0431ae335f782afc97e532ba764ed61f4b68c1eaab784855c79e12799223ae639aaa39a97e2f1ef855a997576ca93974e7c24e36b96a0d63838a86bcf9b43f73
- SSDEEP 384:L/4XKocA/pUmq/zmjXyJtcU78gcf03sHt9ANOWrlc8GnpKCKwTZVQGMBJ:L/+9Vq/STy0U7G08Hjqrlc8CKCxQrBJ
- TLSH
  T1F392E1041C5157AB4C29201EEF4F26060735B20B9DB32D9E89189DA56F8C2D2FBBFC66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Assets/Operator Icons/3upo7ytsbu5kfehwjuto.png
- Size 19KB
- SHA256 87f7d76971b17cc19af189eb4e81da56111f78e4e26dc1b7552905110e991deb
- MD5 681189b6d8de688d3db5cae195de0fd8
- SHA1 9bbeb7f35c306f0d24f41bc13edf1179dfb3aae7
- SHA512 c4e5e903b9c2020a7271f5758422201bd9943734c0843706c1159f7045913798fefb952f96240ed32640ba52cb3d5fcdaf98e00869d14032630c0d0ad8b403f4
- SSDEEP 384:H73HEDKDVzm5qjdK78lkB3E7SRJL7ydGPVDHW8/nzN545ihO5knYN0VcGotv0:b3m4zm5qjgg1cpO+D28/n554Vkn00Vr/
- TLSH
  T14492E0C52D7DDBBC7B92F8D7B3059EAD2BE838796E166122A144CF28234560258814FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Assets/Operator Icons/43qpcfql4rad87m1kb2h.png
- Size 11KB
- SHA256 48833f307c6d4570b8f6eb345784f48a18611c60f9540b68a76f2d22e0456868
- MD5 d9653bcaa59a5e15b816fb2c111c7e36
- SHA1 6d89f2fbdbe462873d2b7e9c07f5e45486c50c24
- SHA512 1f1baf41e7e88d1e4976b00beb0a10789767563a7929641bc21433bceac5183729c0b4b1ff7dba8d0d8b90aca1874c42fa79533e5a05f1317bd7632e53a601ba
- SSDEEP 192:DQGfZbekwotXmgJ/Fc5lSFlzRmj7bKfNJTM3nUybqsTuNFN7JvekvlDmRQ7o:7Rb/h4kPzRqbWJwUcVuNbdvtmRso
- TLSH
  T15A42D0F79AB898196EC1DC3E3B300A25EE43B869467B643FF7C4E05439102EC04C187A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Assets/Operator Icons/50fy5szylk7mp0j2lg76.png
- Size 14KB
- SHA256 571e81961f15641986953d8249ecdc73080b10b7af15c947dce1df0b9489dc39
- MD5 2f06578e36d102c288007a809f28bf8e
- SHA1 32ddf951ace9889face4f19b2352e8188174ae0f
- SHA512 904883610eec7b5ee04e7a822d7a0d656fdab30afb04bfa2fb9a75100a27c2e1105a41487ddd091cda85d8a015e86a82746faf4f3b79fb607a8120364f5737b3
- SSDEEP 384:CisAgspBnkzyqazqaJKlfiFixbD4602va:mmhqyKlKFiH3a
- TLSH
  T19E62CF6CE95A277F0FC296D1FD6EBBDA474D35C889F002EA5B978840C0589B0A45FED0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Assets/Operator Icons/58zitwrudo3ipsjq5cn6.png
- Size 69KB
- SHA256 303f65cdd2332751905f972cb3c55bd4f392084c516be84fcdce67386de91e40
- MD5 4dc80809816a7107d015b2828891dec3
- SHA1 03e5ed69774fe487df5b18cf8897ecffb49122fb
- SHA512 dd24306dbcb114f19a666b26d2fe45e560071fd3d258a4e34ff20658d31251234b6af89b459c5fa27604ef89921545b3cdc8f73e9dc7c2043562eeaff1b9ba13
- SSDEEP 1536:prLUADDZZJGpUX9WVUe+wZrAxOX4hT8T1+uHwAFFDnICtJZ+dbz:Vw4DZGpUX9xerOhnuHwADLICty
- TLSH
  T13763F1D1110578CD0EFA5526DA8CD39C5032D86F82684ED64EF993C0AE68A9FCF399E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Assets/Operator Icons/5kf2l8f29o7md87m507e.png
- Size 28KB
- SHA256 71540e1dc3bc35338e8020999c18cbdd21b8651e7f7147e65ffe9363ee9302d3
- MD5 0651a594b68c1a771dbbf7cf90f3085b
- SHA1 3f653633b9269fe3b28768861190214d16dbcd00
- SHA512 b1f5cdc1e3b69cce74fe0e3fb8e7faf459068652cb572bbeea595bdd6e59c7b7738546cc4f78b4ced36a3d8f24deb0803c5120e102882fc752e44ca8801d4d5d
- SSDEEP 768:wOudEOGq76ZSuOg9DxHPSYlyw16KweBDxGSp:adEOGx0g9DVflVMtpE
- TLSH
  T1AED2E12417E9FA284BC826BDEFD10A5F550335D48163C9324E63D8F299FFA1C5021B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32