be745c978315ddf2bfb11d98fa55ad267b837338519dc7a596eaef2bdab91819

Sharing

Copy URL Twitter E-mail

General

Target
fivepd-callouts-pack.zip
Size 14.3MB
Sample260924-ad7d7aha66
SHA256 be745c978315ddf2bfb11d98fa55ad267b837338519dc7a596eaef2bdab91819
MD5 f3a0ac2f32d90fd0efb20b22f4dfba1f
SHA1 55c92f2d7a63a7e3b517d0f4e2842d27b21aec72
SHA512 f3a67e5baec98c2a991229efa4233a9c7082297bd6e283fde755c8dbdea2be7d5d581ee0aeff4348e1a74d0893fbe2c94e41fb7859ade455098c307ec302cb8b
SSDEEP 393216:uebgFnZmC1ZrZEb596vTYouTJRj8ieh6H0lf4T2Swdha56:uMF2EfaTYouTFeIUF4iS10
TLSH
T114E633B4D3082A51E012DF35B7E6331BFB829E87449B4F173C28B420569BEE565CAEC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  [FivePD]/FireScript/FireScript.net.dll
- Size 15KB
- SHA256 e42a5da96f4d9429e616013d03940fded947c940c1ed7699080f89704848712a
- MD5 b7de7cb4cce10074af7208dc45827cf1
- SHA1 849b323e0e12eb085829befdb07f695b44efae3b
- SHA512 9f64eded4959398d1ee6822c240e525018bac2bd988695227aff1dddff8a8d5966c4c216cf05d87e4bda029eefdf92301768c30b3a6af7a5970e4b516a71c018
- SSDEEP 384:at2ySZFKrQvxdeps8UijGR2RNLxr3UnQr:g2ySFKrQ5d2s8G29r3UnQr
- TLSH
  T14962F90957EC463BEDFE5B7B9473428A8371B6259812EB0E0ACCB19D6C37791091139F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  [FivePD]/FivePD_PoliceRadio/FivePD.net.dll
- Size 27KB
- SHA256 2247d66a4ed5012ecec01c34b04dd880271f6fd0398215b33c308ffdd2bc2403
- MD5 2700a65e8255c4f41737a0efde3be813
- SHA1 a85ebfafa709620d00115ca68ead8d481569773b
- SHA512 a8d6c4432e993123e5a06381478b7348b956aee8ec236a34fcd06b8f7252ba5346ec85563953d01d65b24a6c42ad218263a75abeb6ca6f6367f9d057bb433760
- SSDEEP 768:M+43JtUYMTBXdyFeaAN3Aiy3Bmoh22NHiAZ:b43oYMTb8eFI3DL
- TLSH
  T1B9C2F925C3FE9675E4BB1738A9E101434A31FFCC1A23F3DB2ACC10D99DA675449947A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  [FivePD]/FivePD_PoliceRadio/Newtonsoft.Json.dll
- Size 431KB
- SHA256 09048096671226faf7c5a2978f3b1d220d86b42c26093f7bd077c90af23c3f9d
- MD5 28425e7458666b6e17092b9142b0a0db
- SHA1 88886be208b2f60963895dee786e53c1a0ccf2a3
- SHA512 80c48bb45bc4c5c5aa5f1c3f6b4fd259c17c5531722796c82a75bca3333f983ea4d190c841a3e52aa93936c92689ab3fea253a9c96499fb302eb04297bf910f0
- SSDEEP 6144:Vd3x9vfd/CsuW3X6pIOq9z5+W1BFHPFJYUFy+11zHYftZTtaSzdEanwyLNFZ:FbOObhOuyLx
- TLSH
  T115944A1163FC872AE6EE6735E474062767F5F80BB27AD38E4A50D4BA5C53B419800BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  [FivePD]/FivePD_PoliceRadio/PoliceRadio.net.dll
- Size 12KB
- SHA256 56e3b1d702bae9793ca9620685ab2d0e654c2021026ab4136a5a9e65be950e7f
- MD5 2279f1c4c7e519edcbfaf5285374311c
- SHA1 0d61280685c8ffc93be13f757812485359d4ae13
- SHA512 6f6d86442004b62b38a360297c3b855dfe1e3ad29598e0437cae8089e29f41eeec9103c0aa16da210b7655a251f089280d84354a0b046d8cd103c5c17e6d516d
- SSDEEP 192:kuv42Gt9Qn2RqJzXIoUtlWfVeExlJ07OQqdOtMxdm:lqQBatHEXgqdRxM
- TLSH
  T12C42C8117BEC4631E4BF9B73BDB752458771F88F9A22EA0D1548A45F2A32B008D52B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  [FivePD]/FivePD_PoliceRadio/html/index.html
- Size 1KB
- SHA256 23647af6829ae85a7f19d257eeec940afd2b7fa0990cb384a7f00eda026b05fc
- MD5 42b50dc880f7b623c312c668573e7e81
- SHA1 2b15c1a2febbaa613b43fbc1a2ee1e25df96d72a
- SHA512 4a743a8aced7db5ded51f4ccebd417fa88eb5f17a39631f39eed1d45ad5d880a3b16a051314a26c60215f0d11d9be21459698ff6bd8627fa2e176c84321bbe6f
- TLSH
  T15D31380839CD82BB22121183B1766B6A519FCF31E3758DE3B6F5167B6381958DC6F120
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  [FivePD]/FivePD_PoliceRadio/html/listener.js
- Size 1KB
- SHA256 186cc1ba6b5e1a1b3efcbe1ca575c5cc104e6765642b5120712eff08d54933e8
- MD5 629e10c49804c9cb18f4cb698986fcd6
- SHA1 0e606453d368c46138fb87109d4c5ba8afde1697
- SHA512 2a779dabe79858cdfb3c3273a9f52680803df1d075741c190adb46421831dd40b09944f9035c674133aefad52aabf5f198df113083fb11069bead8c93c832bca
- TLSH
  T19E217FD1F38CA74E81E53360727E22145FACCB3242045AF7F497A198E2BA40607A2D71
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  [FivePD]/FivePD_PoliceRadio/html/radio.js
- Size 878B
- SHA256 6b0afd03f64113811f776d60b166caf7c0499ba5e40a3d94a8aa57990b3646ba
- MD5 5ee9ee211a24410db81351ef4c7df02a
- SHA1 f26fc13c059b1138149f257b750e41f9962b08e2
- SHA512 2b306abc2db4bcc3ede6cae5656ea9a453264a30e9bb2b326e4199636f63bd705b4e2c9bbd8460fdff2081311324a4df9530bb99933b7572728fcde902644f4b
- TLSH
  T1CE1148963B0E452987D24420657B9834DC7DDA34AC019CA1FC0A9262F8EC8D8D59F6FB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  [FivePD]/fivepd/FivePD.net.dll
- Size 37KB
- SHA256 a290b9166084869334930076781c3d7a99ab31ede50ce591a5bb1a311f87a105
- MD5 a11d20747b5ccd3aac2394b31ee9611f
- SHA1 3a8e89f4c33545dae4ea32df3daa4e3b5c898a7f
- SHA512 296c967885a24ff210f7f6b26b7a3f5f5e11b1aa67272de57c7bcba079f167fd1ed5bea8a709bfd2c32f8f1fa1d5bbc3668150258d9e74fc9612ceb43fe83ad4
- SSDEEP 768:NvCJkm4UybRmFgb3p1MMZiQ+qD7YxdPj1pZ22NH++tb5DFbw:NvE4UybRmc5WMZiWWbre0hbw
- TLSH
  T122033C0667E84FE0F9FF2F397A5C42128B72F841AD32E3573D0D60B45E8239865963A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  [FivePD]/fivepd/FivePD_client.net.dll
- Size 1.1MB
- SHA256 64b70b34c6f66f134646158b901fe06bd10912692369281b30dbf69ebdba9fa6
- MD5 44d1ca4abf0b9f287dd7ecb6bb5a5b07
- SHA1 d24910b84cf32b58182c82ebe02e2034bee005ec
- SHA512 6cb6d61668e4c1ec6442cb6b0ce234dbb5b86d5bef8eb1e9ee85670e9ae0cf68ac358e519b02d0f6bad25a257fc1769512fe45f50fee91a9023c2fd66c85e4ea
- SSDEEP 12288:Y2BZZyOSNHZb6RmRXwTd/FoGlZrjRo1OsyoGwiy5X193neiW0NISiCfpoX2/ie9E:dclOmRXeXo0ZrbCi2/+
- TLSH
  T14F456BF97994DE01F4DE0D7AD9528921E261424795E2D28F6ECA8CE8FFC07F46E484C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  [FivePD]/fivepd/FivePD_server.net.dll
- Size 620KB
- SHA256 2a9f2e82049eff673211449c3c27dd46d19e902f47db7e7984a9e7085a4ad503
- MD5 d9975b8d71a1a25621c50ba5b1c8f563
- SHA1 4bf0b185155703c19c2413b11f24996d4420998c
- SHA512 664b4a39c30290cee55c4753349eef6aec206f9ef95424a69bb537e10f4637fffeec872d2fb4a890d1beaeff5b0dd86a9892dda5a88a9c8c3dbd32a9cf12e88f
- SSDEEP 12288:zJjTQGPeBDD1J3y4M828i4IBtXSMebrn:tv8lD1J5r2l7SMebrn
- TLSH
  T169D41959B6A41E15E1DE9F7F5CB1AE008AF26C4EAC15E2EF8DCDC4E812417ED980D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  [FivePD]/fivepd/MenuAPI.dll
- Size 90KB
- SHA256 7063ef067f927babbf18b4c0c34e23cca32276902ce45f7e641e1b1708172372
- MD5 d113941e69c9f90566ff23a99030f9de
- SHA1 236c48f66f31f8d83a0466ef8e368bff68063e2b
- SHA512 311f24a844e6d5ea2481a151a726682ee09160e26cc21a94f92fe4d138c98af7b2ba0922e658195fe98f4198f81340ae6dd673d380ecd8d678bd0c85325a7c55
- SSDEEP 1536:z5LjespLDbrtAc4aNp9dv7HuPqNR/b+iTVExghLHn:z7xFp9dpJ5Ea
- TLSH
  T178936C1572E807EBF0BF9B7C65F2905127B5A58B350BFB09C9C9A8CE1853BD14C186A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  [FivePD]/fivepd/MySql.Data.dll
- Size 1.6MB
- SHA256 421ca313ed7aafe1ff54a4187e699fc13a5ba599764f27f598908fdd1497943c
- MD5 9e219a0aa82433018827ac91b559b85a
- SHA1 fe5124ff18367e49ddfbd6b490555846674947ff
- SHA512 d327b1d869dad24822eb56db603ce5e5e396d4dae6a67c18239fed8115e37301055ead87b744e120f71c449537c32e199d33a70a2f3a6dbaa4a61e75526e2b7c
- SSDEEP 49152:sSurA/8k47CvhNCB1zhubakT7TP3x8/Wb9:sI/8k4mTb/Hi
- TLSH
  T17C859E10F6DB15E5E1AF1B7160A2D12F47B4BA06E011DBAFDB44B66BAC33B428C14376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  [FivePD]/fivepd/Newtonsoft.Json.dll
- Size 431KB
- SHA256 09048096671226faf7c5a2978f3b1d220d86b42c26093f7bd077c90af23c3f9d
- MD5 28425e7458666b6e17092b9142b0a0db
- SHA1 88886be208b2f60963895dee786e53c1a0ccf2a3
- SHA512 80c48bb45bc4c5c5aa5f1c3f6b4fd259c17c5531722796c82a75bca3333f983ea4d190c841a3e52aa93936c92689ab3fea253a9c96499fb302eb04297bf910f0
- SSDEEP 6144:Vd3x9vfd/CsuW3X6pIOq9z5+W1BFHPFJYUFy+11zHYftZTtaSzdEanwyLNFZ:FbOObhOuyLx
- TLSH
  T115944A1163FC872AE6EE6735E474062767F5F80BB27AD38E4A50D4BA5C53B419800BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  [FivePD]/fivepd/SQLite.Designer.dll
- Size 176KB
- SHA256 fc999fb057d78583f7c6665f704370cb0e3ffa370b2b36031c3c642251d94331
- MD5 3b6aa683067d98a7e317ce829b7a2552
- SHA1 20d017c2551b7c4f3989d72a258b67f522494e00
- SHA512 0dd64fa63ece612291adfa9749169153c4e887aa06c2df11f3a364d06ec4680ee3fece06a1d2bf5f4dccab136fd39d2ff19d793500ea760c83b0895048e24ce8
- SSDEEP 1536:I+6V+g11sZ4iUvi+B2V2eG5BgWP+cAn/WqVCA45G7TdPkUiprb/HAavVCYpkNDrQ:IqqsZ+vi/w9Su/ylW/jCYp6Drxx+D1f
- TLSH
  T1D9042C0033DC8E16C2BE867568B048418B79D677A126D799FDCDB2AB0BB3B4055337A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  [FivePD]/fivepd/SQLite.Interop.dll
- Size 1.6MB
- SHA256 386d9f73dc2b527327d0b9d8c0a6700b901b7e69d9db35ea5c5ea52354b83a9c
- MD5 20bf56090460aa02f2294b4c897f6895
- SHA1 55cb7c759f5b5ae4db482b5fdf85ae5dc0a1cd48
- SHA512 36c704f3cea5042ce242b3152a2ec38918adea14a9ae02f943215e3956c83f891ae6e2e4bb3e64480bf0b85e72d941b928d42be253ed49c21391abb6ed6621a1
- SSDEEP 24576:vmCYJFdV8lItLyLZhpvVTP52ARPfw0xqrcDfb3wQFZVeXNV2BvPDQDMp8pKQln50:vdYJ3yVb2CPfw9rMW9V2NQQQKC
- TLSH
  T1CE759D4BB2B500DCD5A7C27C8A175607E7B174461F60ABDB46A087AA2F23FE1177E324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  [FivePD]/fivepd/System.Buffers.dll
- Size 27KB
- SHA256 9d3af29e14d26fde4da4c1ddcbcaee2e6b120115e21f364907c6f69b8ed09a25
- MD5 8174d97f8ee460b4c965be8f9f01a83e
- SHA1 e445779d1c5b9a1edb3fc732c7bd57c8f16db69f
- SHA512 346acc32c2fd860901d69b48dc809c5730375d7cdeb1978ca8cbe98fb6a4065c607c47563ff6564f6ffd9606b2d4240c1763746bdd90e6e8e934887933135889
- SSDEEP 384:SUzCHQJ96ZFKgyVvKjzcZhG6Y26WmYWX1C77q0GftpBjcfSxT4bHRN7nldHI5:jzCHS9RVUc+kit6bnHG
- TLSH
  T147C26A41DBBCC163CD6B5C3152A9E9833E39E3C39D119A2E1989F6981E937C5DB2092C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32