cfd5c5126f60374ca508a3ae471addd92788c2302ecb481283b21f41e6a4861d

Sharing

Copy URL Twitter E-mail

General

Target
Aimware.zip
Size 5.8MB
Sample260925-2v9dnaydmf
SHA256 cfd5c5126f60374ca508a3ae471addd92788c2302ecb481283b21f41e6a4861d
MD5 60d76598bb1b8b2d3c1a81e420854ef8
SHA1 d021875c2bed5c914113a418c0aa08f8eb0ed10a
SHA512 d7e2505e10e7666af57189ac54297cb5e0fa1a61a021ea78d9da4f02d01e537b29cd91944d2a681390347caac9d348f63aa1f5c1f53f34f2cc7d3b1a9c370933
SSDEEP 98304:9QIlrZ5lK3lWdcjeBvodoBWj/zQAJ/4jL3r6411kGWjvtwAa0CS/PFhyKgtvnwXi:ycTl+ucjeBvoyMVJ/4jbrH12GWxw6Dhc
TLSH
T1BC5633591C3B7A5BE40D6AB46531359EF945BB20E37AB00C285B3FB10DE2ACCD587932
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  Aimware/binfuser-image.bin
- Size 2.9MB
- SHA256 4bbac73ef1843e236d20bdce85cbaf05c3497467f01aabe84ec9619bb90a49b2
- MD5 e55c477ca9b366d10dc7cfc5648fae40
- SHA1 38b1a0d43652a2b0346470a2f1d2f0528bd387c1
- SHA512 ae804fbe81200f9587a5a50b1ea7e8b1c90d6b36bd340db1ac2f32dc4ab842697bc1b4811e2daf9e3d5f5bdf3d7ae7642f37871e900c7f828bee2b2b66b4d7f8
- SSDEEP 49152:y+Y+VTSKdufQsSgGfgLPKo1VgPSXbt6k16TVY9EY5ftSi:yL+v4fSgGgT3kGtV6pY9EYttb
- TLSH
  T129E59D80F99750F2E9861571701FF73FDA79271988189EE7C6E03EB1F122611468B3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  Aimware/binfuser-strings.bin
- Size 56KB
- SHA256 b69736072661a9c9da5849533db15d534714f040299a939021fd331ca8622921
- MD5 44ec8435242cf6bf7691494726d87d32
- SHA1 b50258e92ba5de2f2fe5d11e6c4c1a44340e1bab
- SHA512 7fd95f9f4e4799a331cb5c7aaf36c2c22f3f6cb40c8ea0c05053f05672d681715e49f4a7cd681858bc2bb78e2c8c9f188c57fc4ffd50fc52895515680c295881
- SSDEEP 1536:HPMtc8SBLqk1/CfUzu3an9mNopwZr2PM+:Hic8SBLP1/jum9mNopDE+
- TLSH
  T15143AFE3335065A1D4E109FEA1D09A07BBB0A2F88766A150DCD9E2DD0099CF5173FA9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  Aimware/binfuser.dbg
- Size 2.5MB
- SHA256 44b8ae604d4917aa7ded9bfc44d8c4aa2be2db3da010d7f762ceae414f33c3c2
- MD5 4fbf1a4992f6aef735639ac4a128a151
- SHA1 e0d2930fc67a7534c2b2a2dffaeb1bc7fa37573d
- SHA512 e614a0af7198d5d4a4ff8977659c716ea455351cf70a48e350a324f1eed83e5d86c617e24ed58814a4ff83969436848e89586b034f8c17ea3438223782206dc8
- SSDEEP 24576:ZiULuiHAiGghlfstlv27z+NyIoMRrI2ujMfSY7j/4CnaC6ENMzZzAN:Z9QUqN
- TLSH
  T130C567095B42CE6F4EF76AC7A6E98364A6DB146E7273348EA1DCFD4300C7525B1B620C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Aimware/capstone.dll
- Size 4.6MB
- SHA256 7c9688e96fb4d5819bbc8705d51f1c89bf12331200416cebc136ed02c54f9ceb
- MD5 8b24f354f11bedef400a8fe39f5ba0c1
- SHA1 1285688172db1fdccadc87042f363b082115a890
- SHA512 594c1141fb3e379c2fc75ed9922c3d66b8156399689738551b720a5c513530dc104052c947b87c36bed09b05b57f0971f10159a80fa1a9492f86794da4159350
- SSDEEP 49152:4Scixz69kzBiY5+KkyTp4GfEzrZM9ZRtZphmg:4SgKkV4
- TLSH
  T1F326B441DE92DA31C87D0339467A0FBD7B358A2132946BFB63B4BC518E237E96D23611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  Aimware/csgo-x86.dll
- Size 2.6MB
- SHA256 958170fd316264dda536688ff8c282ff44a464a06118d7b6227de25e69c3a21d
- MD5 abcd5c92f0245565c4c5372d03fbbda2
- SHA1 023c68eaaad5cb8433554b5af4893bff70cc1ef5
- SHA512 0c2a030d9ba0187bab65906dca989690e6924293ce407acb8d01e040b65913f7d8f547f9f6ba29349e84ab7cf03160cf7dae9d79fbe7cf05e6a1e8ac18cde65a
- SSDEEP 49152:gjpY4E6zD0cxGl83cPb/UQGLQtLPW+S1kY1Ykbtr:gji4E6zYcIl88/eATW+SmY1YEt
- TLSH
  T1BAC59F41F59380F1FD4225B8305BBA3F962426088B28CDE3C7D42E57E5326E157BB69B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Aimware/csgo-x86.dll.mem
- Size 536B
- SHA256 bb9426b1cc7bcfcbb7e92f4296a398e88f54c4b10c05860d3c86b1f73dc41b4a
- MD5 de419fcbfd92836e3858e245d457efb8
- SHA1 79b6dd2184ad38ea9f03d5c579ec8961d817cc73
- SHA512 13a964bd1c3c0c6767abf33ba96d861d20105c8c21d54d45f76c2c93483d05e3845888684eb8cff850f12b9f839e5da638e392a5c431df884e07878eab1d227c
- TLSH
  T1F8F00404441751C0D010043514351D5745D050000757C077D005CC554DD330045451C1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  Aimware/csgo-x86.map
- Size 1.6MB
- SHA256 10847d4ca9003d13cfd51c72d89ba1c52d45a76a27e90212fadb268e16106aa9
- MD5 8689480c0e8c18594fbfff2318c4591e
- SHA1 580d5901df1fd3152f91eabaf840d069cd5e481a
- SHA512 6b2a60263d2d5092fedd4e5d963f94e3260f4a3b9da26fc6f130dabfe6d069358236c6e6959a42e21f793136e495943f438f28fdb50be94922f1a42488eece7c
- SSDEEP 12288:IC41Z3eIYm8zYIg4q771Dre340mOt24KjL1+qb8rW9D+8CHAzSmlRqOKgGn/V0tE:9B8HsAXeh
- TLSH
  T168750E35155ED0D7C4B7E682AFA56B10315CF483E273746A76ECE38207852AAE68730F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Aimware/devldr
- Size 1KB
- SHA256 0ded06323746283adf6f2180e0b43b84f0ed0f11d5476b281596146f95aff795
- MD5 513c6477eff08b65d5091eabd614d73e
- SHA1 38275316591dbbfc6bbff0b14b36bf124b892424
- SHA512 4b6228bc28f6dd41ae2f4db7c119daa9fc5cb70d92f92485a99f93f31e1e350fa100e79b293d2529f1d7f800642f3505efc4a301a8c7ae77a81ef9d3fdf67d7e
- TLSH
  T10D2198939ACACEDD40AA9D2973049D2D281815C5148ED31F245E657DA91F9228C9C0FE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  Aimware/devldr_original.exe
- Size 948KB
- SHA256 52e798a8040650a15e1fddd293a8091930cdab85550da07273198de890f56b0a
- MD5 85b8270ea892901994a35719afe40e04
- SHA1 53273b885d907c7a8dd962686a29bad5e59421b8
- SHA512 91219267cd37e222880fee45d89b137e19ff0042156bf7ce3cba247585a113cfcdf8e848015eca7b3fe15942bc7b3d4e7cb02b4b089e75c430dfb84cc14768fa
- SSDEEP 24576:CdZjSZHElaTW2tcigdXqSNLmTLeDQYEd2AcsQ:gBHj76E6vekYns
- TLSH
  T1C025BF01F643A0F2FA87357820BBBE3F9725A51457265ED3C3D02D57E5123F12A7A0AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9