8e1a949df0f5964e5d2df814dac33243358e54e0855f95b603a198d24fb6ef17

Sharing

Copy URL Twitter E-mail

General

Target
lighttpd-service-tools-v1.1.1.zip
Size 127KB
Sample260925-pmlleaea89
SHA256 8e1a949df0f5964e5d2df814dac33243358e54e0855f95b603a198d24fb6ef17
MD5 3fcbe30b454193cab47d0c2194036d13
SHA1 bbe6ff3816f84005c40a81c9c5540262ffd8ac26
SHA512 fb82c0577432fc498ebacd4475e677cfe7017600b172cf93ca82a2060b3a33cbc9dbed6ef954af4fa04f66d0acf1391e87f44cd0d2704b95cee0bc2af7c9d97b
SSDEEP 3072:5YvcX1HkFf/1bsM7iFX0KfeLpXDD5YViMU:5YvSmNsUcBkXDD7b
TLSH
T1F3D312CDCB988948D05C44AAEAE9B51EC089FDEB0B5FFA913DF529214A4BCCDC199403
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  lighttpd-service-tools-v1.1.1/lighttpd-service-install.cmd
- Size 3KB
- SHA256 152d4b39b7ec4e74c2d4f41225440d9018eeebc694b6f4be35af69ec3dbd34df
- MD5 ac9d7c1411348ce907422c26bc05a6d7
- SHA1 e9a6dba66720024af1574f522d8954465dc20370
- SHA512 8a0d940e4c2477783d329f8243388be29e965a17a5e3698b3dbd9f5da64cdd0b16c95bcba8cb4124d3f6c882b377127b3ca62de8228a13798222c606b05c1f76
- TLSH
  T159610ED619D906E051926383BF43D206D22BB286A90D6A4936DDF80E1BCFF5C44BB4DF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  lighttpd-service-tools-v1.1.1/lighttpd-service-install.exe
- Size 63KB
- SHA256 753c8a5f46643aafb158c03a2b0271ba20c7009a50c14657c171c4da4110b97d
- MD5 d690679f5f6a857dacdbc5ee6ce7e736
- SHA1 01fd9a97220c5fce3dcd7c756b07deff4428b240
- SHA512 f8e11de83a8511f7e7c1e363426eff955b600e78dcfa47fd3ef1cdfbbbfbd56ae799381b05daa738f3ea7066437958f35ae220473031d597261f6c0987c6910c
- SSDEEP 1536:IU9RNMwPS/OWg1gDlU62RBWx5DaC1ByfelAqFBokxN7HI1:FhMyGLxiLRBc5DdBiqQkxNE1
- TLSH
  T1375302D473D9982CE34A85782FF286453B19DD9D3FB4AF0B936060D617B430C536CAA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  lighttpd-service-tools-v1.1.1/lighttpd-service-remove.cmd
- Size 1KB
- SHA256 b61928942b93277e63052deb241566681f51d1437c8289845625dc612d2ce7df
- MD5 8d428654302c3d3a855d701b88aee578
- SHA1 c9900ae9dcf5a48aa76db30afe692bb9d8f645e2
- SHA512 398880cde40f594b7e291b5d8a01030c85bba1049a2371cedc51d378ac648c26f9dc508ff034ead0b3527a6d6d1f00bf13c97dad63e4373eb870b71b6f257b9f
- TLSH
  T1922198D96CCA09A05191F2437C02C445E32BB194BC0D348E35DDED596B8DBA8167F89F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  lighttpd-service-tools-v1.1.1/lighttpd-service-remove.exe
- Size 63KB
- SHA256 23df204c49bb0f82a670f928a4c11f8a36051c855b098431d1b4035b2aadea81
- MD5 1a86599cf0f45c8dbbf5c02b15b05b2c
- SHA1 2c62c81a179e1aa2ae64dc80bbe218fee2e68ec6
- SHA512 11cd15569a54f53b8f058006ce566ff9e1b6149e62afa030540faced4c3987eb64a91b3bef70854e41f0382538f99eb83f54cade93421e1f82087fc3a8622c7a
- SSDEEP 1536:M9RNMwPS/OWg1gDlU62RBWx5DaC1ByfelAqFBokxNIsX:MhMyGLxiLRBc5DdBiqQkxNjX
- TLSH
  T1815302E8B3D5981CE246C4741FF386413719ADAD3FB4AF0F936060DA27B960C936C695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8