1bd8882b9ccc16e7a1f81f59043364b246753d783c64216e2730be1e5dea8b9d

General

Target
Matrix.zip
Size 53.5MB
Sample260925-jchtwass8m
SHA256 1bd8882b9ccc16e7a1f81f59043364b246753d783c64216e2730be1e5dea8b9d
MD5 cd3f6c91748c5d84d2c76e66fb55cc1b
SHA1 be17dc6a1e0cbabff51fad293658b28751b6051c
SHA512 1966554798a8e59572e179d65e7ab557bf3b4db6b17edd4e858e3bbbc90f8aef807c9e728f52223b9b227051ab47f741b6be96858f3000fd19fa213a47087e07
SSDEEP 1572864:t+ovn3HbqvN45oX1kG+AX9c2Np1Gyg85z06:txyIfG9Nc2NpRD5w6
TLSH
T1ADC733CA9AA6294E757F5B095B203DA5244FA0BCA3130832FF2F175611DF7C097A816F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  Matrix.zip
- Size 53.5MB
- SHA256 1bd8882b9ccc16e7a1f81f59043364b246753d783c64216e2730be1e5dea8b9d
- MD5 cd3f6c91748c5d84d2c76e66fb55cc1b
- SHA1 be17dc6a1e0cbabff51fad293658b28751b6051c
- SHA512 1966554798a8e59572e179d65e7ab557bf3b4db6b17edd4e858e3bbbc90f8aef807c9e728f52223b9b227051ab47f741b6be96858f3000fd19fa213a47087e07
- SSDEEP 1572864:t+ovn3HbqvN45oX1kG+AX9c2Np1Gyg85z06:txyIfG9Nc2NpRD5w6
- TLSH
  T1ADC733CA9AA6294E757F5B095B203DA5244FA0BCA3130832FF2F175611DF7C097A816F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Matrix/_license.dat
- Size 8B
- SHA256 7b67301a53a2cbcfd9a8dc5768bedf7128eb76a89a8b8db2f55c2d0b31300933
- MD5 28df143a2f43bb2310760bce7d513a26
- SHA1 d664ab4a266c2c5daec01f2123ed02911a66175c
- SHA512 f1db8f195495840aab086eef5aca162b8a0323f5544c7ad5b381066431c11f56764cd9583c3cf4dfa1d0ee6e47d56df5f63ac096a9b6863880905cc6be02a785
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral2
- Target
  Matrix/config/BLADEBALL.json
- Size 384B
- SHA256 2ce9961f7627d3939914c598c91c0d091f4430e43fa923cb314f8e0b2127b680
- MD5 8fecf6a0dc830eceb31cdf76c950c74b
- SHA1 48fcd2d257f85b9140c063db18245cb8abd8474c
- SHA512 30d44030048dda04c07386408e1a309a5ade9be38b0bca77a8cccca692060b4b04e90becee5ece23f9ae7619338ac06a99ee3ce057e0551d472c9ee04a0faee7
- TLSH
  T1E6E01ABE558074B85B3086C049C17E4FCBA754761E7090DCE7EFC8156EE3989B626C87
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  Matrix/mcache.dat
- Size 277B
- SHA256 c00ab4fa0b7efc78009e43628467869370267dd9b583310ec5d9b2dca1613f99
- MD5 ce0dd26a91cc258bf21e53babc173ef1
- SHA1 d93ef04d2042b2c5f67f77d407cc04deb96b1c70
- SHA512 cd181cc1cb2fa54a3777a518c9287845d64477754ae01a94b84b3142d5774c61b19a69a3662a4528b4a7cadcb6114ddcca75d446416f32d3e58c1ab24d8a80fb
- TLSH
  T1FDD02BCDF687E89233C5C171385551EB0EA9C02457051621646FA10F22F1224373A954
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  Matrix/newuimatrix.exe
- Size 86.1MB
- SHA256 62e685b4e056ad5b5bc4ca65836d15fb330f9ae3b505b92bdc37962d0937ee04
- MD5 02d736064274e5fe2acc235b5fe3122e
- SHA1 d5b3b636a88b2a1cd62034348967ad592ba0fe62
- SHA512 7bf86e95f8b8cc87caffea2e3246755b259268909c4a3b41edfcefe9bbbaaec4e1d8bab23877d73a72a3bdadd6c4a512b7a689e3d340ea40018a4ce732d53b94
- SSDEEP 786432:0AZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:0AZui3zQz2jOZKft
- TLSH
  T1B6187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral5
- Target
  Matrix/version.dat
- Size 24.3MB
- SHA256 0ec89c81846adc3f7c7350104fb76278e26e0bea42b3a21272497e6293a08d4e
- MD5 c11d0411caac1bd56e541ab7d9d213ed
- SHA1 7253c399ea407485596d51d3c6bc1ccd6ddbfb67
- SHA512 9f9af486f4459c154467083475a07f7c8a97a84a1e53831d59504dbe17afc22dda4676bdb81e7a7f159c345ff41b1b5162b8d0a28adb607f6dc88a5ba55b0d77
- SSDEEP 786432:cS/CEncUrVIvkcUhxcUgAcU3bbWcUvBU+/AixGqjq6V36z:cycUrlcU3cUZcUHWcU5U+Iisq2z
- TLSH
  T1AF47125A9EBEF80904183ACBBB579EBE394AED2045E9C38051749A3DE34CE414767F31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6