4c6b20a1f8724f04dc1e766c3d3bf600a1ff4a3ae0f10af27896c4d89f1ef5df

Sharing

Copy URL Twitter E-mail

General

Target
OpenVape-v4.21.2.zip
Size 24.9MB
Sample260924-lap7aasaqa
SHA256 4c6b20a1f8724f04dc1e766c3d3bf600a1ff4a3ae0f10af27896c4d89f1ef5df
MD5 232a949bf40cb84f7ae62fd6e58b528f
SHA1 5371ecc491c6915b87644c17f783d25a60399539
SHA512 c8ce9d66ca5c173b2c51dfc93dd7294636da2ea784c73ecff39f24355dcc380fe5a3f892de6ffb2d61013a3c8d3d10737c9dda96d580c86253b8fd6a521af7c8
SSDEEP 786432:WeveBkZa+8HYMLunwbj4VnzLM5+uorqH5S:WeDaxLw+MVzLUoruY
TLSH
T1364733BDE17A022445D4FA2829FFE34F873D8856205CAEB6E5F647A1C184BC8C0775B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Vape421Injector.exe
- Size 19KB
- SHA256 15dd44d0c1cd6d4f690cddbd65d2bb432851749dab78ee9b5a533928fdfbaa7c
- MD5 e0f87fe46a60d88d6ee7e2d558905d67
- SHA1 c3d6e73b7f63c044e2eb332ee311a1cd7ff4cd20
- SHA512 b19745703d19dffe99474f440bed7f5b9f8ac55621921fec999fc534513dd4618d738e963e050e2627dc3e7b099df57ad825855f6b00e029006c030ef3b7a162
- SSDEEP 384:371trhY+ENTYhYc0c5Rb7trk3j7we7gne:373ydYhZdmjbse
- TLSH
  T1F7921A46FBFA18DAF57AD63689725136A6B1791B2B328ADF0364801C0D727D0EC34F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Vape421Native.dll
- Size 21.2MB
- SHA256 6abfe0fb598709e75e3ef3ae241dc08439643ba649f676e2fffdf71c4eb1efb2
- MD5 81c4eaa3fff64fdcfce341696cdc5714
- SHA1 922b93df6191973f2c2aafdf06b6882a35a25a64
- SHA512 61a33f640309347cbcc206f4b8f4ea1944dfa5da997a081a30985a2b8e9314800656fe2fe1480ed30e504077eb652533ef07822fcc8f9470befbc9e9952d8db2
- SSDEEP 393216:aa+EtUCd8GDK8epUrv4ZfFwgcVhJAk7vHPn5e+LKBqVHP:aZEt7DnUUgtwpVvAafflLnH
- TLSH
  T107271293E8E8643EEABF9136A6840277BE3E87CCE10790D014B875D254B7C895F513AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  service.bat
- Size 55B
- SHA256 d5fd5c427e018bb04f9b2a5a8c97b693fe4ce442fdddfa4648a92937e9d7236c
- MD5 6507800fb443c893c1090248fd903154
- SHA1 b6e7f55a464aa4cfae76680921f7ab28291d622e
- SHA512 5075d995f1b50374a6a685e629685ff04803e104ff30f075bc384479f09b868dbeebd85c76e366a8a8801e2432073c9c0e180fffaa363eeefc5acf491fa33bff
- TLSH
  T1D09022008E000AC220800083BE0A020A008E0028A028E00202F8E2080C00C083B02200
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  vape421-experimental-service-0.1.0.jar
- Size 5.1MB
- SHA256 f9b16014109cacdd5f14f5142f548a8a616a1c32da3d23101b1cb437f6ad46ea
- MD5 622f73dd9180cce02bb18dcde951be1f
- SHA1 e1dfb71ee1eb5dcd84773bf29770cc221e0488a6
- SHA512 0592a44a0bda55f1699d34e35ddafd2a407d9df0e0df67047b7efafcf1a0f28249884ce0b1b50582a463fb3b6cf06e2e393c9856ae1a5578025ab6dcf3022d7d
- SSDEEP 98304:L4ieD1JtrKcmMoHDEH0vqqJ7RvozcoUG5YeA4z1HVF/g+geG3CZM1L:7AeDMoQUv3tQzcGKeL11h+eG36YL
- TLSH
  T13B36E07994DC5465E2A3A23080809873F91C99C8FA1BB8D625F8274764FECC9DFB17C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  vape_v4_rewrite.exe
- Size 257KB
- SHA256 804587cabf06f7670294d5913ab8837dd8c65adca719ea8bf8eea2f43775ac1c
- MD5 35074dd1f12902d905eb453a6a5f3633
- SHA1 004302f9b2fa7ef8b43971a265efff0e2c7edd32
- SHA512 0728fd113855c9669ad906070b49519a3d657b8d6498c1793d56d8d996434e59a4abc0189bb1b45436b3a7883199b3037dabc816f8442c0a62e50d8a4aed7c2b
- SSDEEP 6144:CqvqNRJsH0pAg2ke9JFvF4Bu+Um9aus8nIz91f36bGRwNt:/XBpJFSL9ps8nKv32Kw7
- TLSH
  T13A449E1AB265022DD367D978DA626705FB73FC4B0B25A7EF43801CB20E126E85F7A741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10