715b2d7ad2e4666975390232f939a8d419ccfc1711caae995e129ae6394210aa

Sharing

Copy URL Twitter E-mail

General

Target
Aerotto-0.3.9.zip
Size 647KB
Sample260928-ref23abb35
SHA256 715b2d7ad2e4666975390232f939a8d419ccfc1711caae995e129ae6394210aa
MD5 af6cff691b515530b319d5bbdd3f1217
SHA1 b3a3d97b842e5b0d48697877fc22b8aef321829f
SHA512 0b1240f1a5a3fff63bc8e3675d3de4c960159184f0efd2716b38af2fce4099c7b06e6f52e1c342a161f4dcc378bfb8302d4236e91459ccf80e73c45cc0130d63
SSDEEP 12288:OB+NX0aVfPHvrDjMB+1HLvPf4RPJcGbw54v+q:O4NEaZXgUtvPf4RPJea2q
TLSH
T1AFE42370A22C9A83B24D9C3E0595CFF5A15493115730E249027D8AD9ACDDECAEC9E8FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Aerotto.exe
- Size 159KB
- SHA256 637cf4de701e2abe086c2afc3ec72088b7457e697058ffdec3103b29b12ddf78
- MD5 87b33295451568f0290cd45784e9ad9b
- SHA1 2ea0c787ec32e3aa937eb9d663ce2c6fbc9d827a
- SHA512 e4297a1a7a2e8da061b09f1116ad934228f0078deec42606db7c9aa5312b4183191e1b24b2b49941b3ebb366a4e6648b180f65ddd20466161ce8b269a65ee2b2
- SSDEEP 3072:AUKtuS8fYpBmstgWXFAPYJIcsASkSnPN6jF79oNv:AUKtuS8fo5mMCPYqcstkoPNUC
- TLSH
  T112F36C2C73F80606FABF6B7678B14A118776F947983ED39E0D8494DE0A227C28911777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  CTrue.FsConnect.dll
- Size 220KB
- SHA256 f5d77384c7c902b690090c04320eaea1a954466c934ffb8fd8a61df0cc425517
- MD5 5135233e2fedc4495473fad608b56c76
- SHA1 e1a46a6b171d9c7a53eb6fa1f8613eec8a64b339
- SHA512 1c236039d25916f396fcfa62e2afa8025e489734aadf0c80bbc2987873a1f358e7fc93b36b80a2c343ea2b1e5c651835cafd76fb0061b1f78e4f6ee692b46bfa
- SSDEEP 6144:e1ktxN6I/3E3NAK9nQWTyKJlO2V155/y:e14Nn/4NAK9QyF
- TLSH
  T19824A22171F8302BF916BAF19FDEC258C76AF6E9437386AF201921CBC1959425F127B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Microsoft.FlightSimulator.SimConnect.dll
- Size 149KB
- SHA256 1936c86e2e2867a8841a8dc7343ab0f5bb82818f17c47ac80b660115b413d266
- MD5 c180eb6d9697c8ca543216a796d0b0da
- SHA1 081a73d46dbeea3d10701732ebccd634fb4c67c8
- SHA512 5cfe0d1e70a1201a9d56b90b75772727255a5eac1bd26707de98aea3bffe5bfca1cacd371b5fb6f89236b55c4bf9f2cc8e486141d39fcc29d5172a52c951a6af
- SSDEEP 3072:qwXpaSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSh1467Uj51cOOGRW/n0:qID1475aOOT0
- TLSH
  T1C2E34B1507602027EB8F13355471BA065135FD87FB4BA3872B60DBBAA923389A5372F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Microsoft.Web.WebView2.Core.dll
- Size 681KB
- SHA256 e6f54c8ce208e3797c427d01ad671b47cb25abc85604753d6ec2546d0ffef550
- MD5 76a346cf8ff55b0516151470cb441a73
- SHA1 b1fd2a9dc354da2f34e4ade7bf3c4fd02b12ec09
- SHA512 ba5450ad79215d1a3423f5ed624a8ff188b5227d322e612a6eb4e089200cc8b4bf92e2e7c02f22ba1c5400375b476ffe5f0252666a60ed784b538150aab97e0a
- SSDEEP 12288:iJ4dCXzRKX4EcJupbSRi461R1VcrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNIG:iJ4dCXzRKX4EcJAD1RrQ2
- TLSH
  T136E4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 cc3d2937c350a4f5e20399855bcab4fe695a395308feb2ed67394faa6a1ae849
- MD5 256624e11fef500d49e0f421138884dc
- SHA1 155e5a0e2d501e6aa4069d8662a757a7a9fa9066
- SHA512 a2d1a7d9bebc6455e0e9ec76a08b8f5c97752d4129c00eb8383a8cc7767a9dc8803d81f5c751f1ed5f3c3787c5e63fc715dfd1323584a1274b32f5d954d92681
- SSDEEP 768:yLQNb2vIYymJ22Mss+5ZQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSxi:yob2vLbZQ+ZDgcEST3p4JjrjaeFSUyaG
- TLSH
  T12F033B4087ECC517E6EB5FB8A9B491610BBABEC37DA2D3980D84B1D90C73BD055113AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Microsoft.Web.WebView2.Wpf.dll
- Size 84KB
- SHA256 6942b85a3388ece45febde5584d2bfc035d84315f2dd5a4a47913f01a0193800
- MD5 d7c1d5858f1c30d46d29961f4439ec65
- SHA1 66f6759abdf1d2ddaf6c77e7314229fca5ab5a30
- SHA512 a2f65fba6e550ca441504c485bc3f17969c58fbfbeedb0a32c5c150ceb259ef96380b92aa848cbd27bffd5198776e161e20cdd197e7c52512d2f3160bb7730d3
- SSDEEP 1536:9yT7jn5/DNHD3XAhdx5WKhE8sYvDHfy7yEW31bfc4JAyr4YeUquHVxU0uRBpqUuE:9SjnpZmW+E8DDHfyy31bfc4JAyr4YeUs
- TLSH
  T10F836D4113BC4423C6FF5ABD68A452990F79EE43BE61E7C939C4B6E80DA33D016427A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Serilog.dll
- Size 123KB
- SHA256 7a26a473af5eb7a00196e275c86d773f36e1d4caef566f97f1df7e07e20b1670
- MD5 0aa45a8a1cd24cd2b589e4aad925f35d
- SHA1 0dc29954c4c2ffea4c33af0e56ce84158849b81e
- SHA512 7a865b16633c09bdecda34fdf15c62db4f04f2fb8db0abf57563aea51de67daf9eca0c08f053f551937a0c3c7987a53de2454ecb13139a193291633df7262981
- SSDEEP 3072:XfwtSQoXux2ogH8I/eXXXXXPXXXXXHXXXXXTaXXXXX14N0QXVsABFkNfM+HFukRb:PwtSQoXux2M3XXXXXPXXXXXHXXXXX2Xh
- TLSH
  T15BC35C26A3FC4AA1D3EE1671A47506404B71F99B3567EF4E3F5C35F92C123084A28BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  SimConnect.dll
- Size 65KB
- SHA256 1b9db770e95d1a883038f0f52898fcb1f34eadf659f7ec23be9d0b50b47fa125
- MD5 2ef276db30a3109d2667bdeebeb85160
- SHA1 9e0268057f21b588dfde58aa687c5d1f6a48fbc4
- SHA512 ac6ddab7a9f9366e03bafd91f6a2b67404c43e828a4c19c0be69682b73b057b6f03a0dc875c8ecd4768f3bf466a36b259d04286551447ab0342661f83c5af00b
- SSDEEP 768:92twaTLdgzFHONG4fyN8TZvB7Y0EoDWKNsTc4kFmku5J8s1jRUejvCGYK/f:92twyLpvmCB7u5V9b8gj+hpK/
- TLSH
  T14C630A86BE6444A1E1FBE23D9915A212E3B0758203584FCF67648D2E1B377DE8E3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  WebView2Loader.dll
- Size 159KB
- SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
- MD5 0243cb84351c92ddea3fc0334f3a52ae
- SHA1 d80c01c98f0ed8af1be111abefcbbf6c9f3938bf
- SHA512 74314c87eed82b1c9415462be3259a6626599047a18821cadc73c0c0c62cbd54948d6311ad4de9955fc2d4f2098ccb17aebeee8929ac2741bafc38ceb51a9585
- SSDEEP 3072:d94EUQHTN8gVEeemaXpNbVf7W5AOVU9dPTwnhrEtJe6ub9VY/3A:3dzeDZNbbVf7W+cnhEtJC3H
- TLSH
  T194F35C57B3E500BBE1B7C234C9634A56E776B8115B609AEF03A4427A1F13BD0AE3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  runtimes\win-x64\native\WebView2Loader.dll
- Size 159KB
- SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
- MD5 0243cb84351c92ddea3fc0334f3a52ae
- SHA1 d80c01c98f0ed8af1be111abefcbbf6c9f3938bf
- SHA512 74314c87eed82b1c9415462be3259a6626599047a18821cadc73c0c0c62cbd54948d6311ad4de9955fc2d4f2098ccb17aebeee8929ac2741bafc38ceb51a9585
- SSDEEP 3072:d94EUQHTN8gVEeemaXpNbVf7W5AOVU9dPTwnhrEtJe6ub9VY/3A:3dzeDZNbbVf7W+cnhEtJC3H
- TLSH
  T194F35C57B3E500BBE1B7C234C9634A56E776B8115B609AEF03A4427A1F13BD0AE3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  ui\index.html
- Size 19KB
- SHA256 fbfb66ab0611543da026eeb62b9b77a487389dce1269c8f176f426b3add8444b
- MD5 a7a7c83c5135c1960bd54563ff74d7ac
- SHA1 ec407a7b87fc30c076c1fc9963985466852f72cd
- SHA512 83c15fcc7c208e1683045729a12e9c71d242dd2cae9440bb43c6a54db35ae44ebe5fecc188783d14803c251d60d6169beee604289422b94fd548a55ddd12db8e
- SSDEEP 384:iGBdjGwiU5kpnV2sFMiMHWqubgpFH1hVgUXcqbTgwm0M:nBdjGy+pnV2sF7FIFH1hWacqb8wmb
- TLSH
  T17192D932A2B83037523381E636F6731AB77681039343C96439AC05544FCEAE5D9FF5AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20