583e7dd241aca303f68af3b90251741edd7ec918f1e8033bb97f8389f8b75375

Sharing

Copy URL Twitter E-mail

General

Target
pmenexe.zip
Size 47.6MB
Sample261006-zyvcssvx3k
SHA256 583e7dd241aca303f68af3b90251741edd7ec918f1e8033bb97f8389f8b75375
MD5 3c4b19f2b7725a7fe94e93162f86739d
SHA1 82646aca8211ad1c22176291d8780430c7287f74
SHA512 04a97cb7fda078d0b5784836dbfe63221902f3eaebc7704021c1ee32234001eb5d7f053d586738edf259661691fd812576841f3a21a0c8a49ec64c0e3c650914
SSDEEP 786432:DADHNyAMd5av1Yd1v6foj53yiVBmBT/5BZpz5LwTQAfw57S1tECvatZ2dNsqrNFT:s7Ny7E1OzjodBTxBZFNwm5Mtt0iNZhFT
TLSH
T1FEB73395EC315602F53E593765F8FAB4E2F381E324B6200E98CA08EB5986F47533694F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Appeon.PowerBuilder.DataWindow.Excel12.dll
- Size 46KB
- SHA256 f6225e2f31b46042959c359070a28780694b59582256846763ab874df982e01f
- MD5 2b2739f3a1e1bc06a36a4dbba885c3b7
- SHA1 be524f1576c5ab0f6ef3addb9fd4544972f41a11
- SHA512 ef67aa16b40dd924b65fe8fb52508795bb3c96380ec73bdd5cc4d109e268cbf2ecd76bff9d30ab7bc2d3812629571400cf64c6dd5d6305be8cd12fbf91216bfd
- SSDEEP 768:wiBn9NxJtUmomM74k3h9QYUw+VJ8OTVWIyhHxgckVVdnGn+TzPDb2Yi7rA+hLqAw:wCn9NxJJM74EMQiIFxNiVhLzPH27ir
- TLSH
  T19B236C0E3AF88722DABF467474F1843916F0F4553613CBDAACC6A0DA56167C80A6C77B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Appeon.PowerBuilder.NETInterop.dll
- Size 50KB
- SHA256 4982d4fdfcf5daf4eec619fc8862af34ea0eb88298a8efca0ea1f8b8013ecb5f
- MD5 e3a11b76e1025b97ff78ba4ab4facbaf
- SHA1 3b39a0f9bf6d620a8a805f0a3deeb77ab941c405
- SHA512 4d1da2c4edda145c8d4eea0cedb22050dbaaea7a2498f58948abd9b75fddc23a724530a99a36084022c13a5f80413624ee06feb4387ecaea63843f0a7c67d40c
- SSDEEP 768:zNJyzJiiw/0OpDz3hIfyrGVW01dew2jvMjhhLlW9DjyXDmy8RdqhIRaqyz7pYinD:zLyzzw8ORz3hrG401sGhhhnp7
- TLSH
  T16D337D1627E4412BCA7F5BF054F243285776B26730E1DFC41CC5A8E99A843826FA4A7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  AtlAuxiliary.dll
- Size 27KB
- SHA256 2cb4a61939b7cb329fcb417bd865fddde04426ccbc6f3c2b3ef0ef0f412ade18
- MD5 e63c8a90cef2a4515f5fdba5314c0255
- SHA1 1c9e1072e63540df3095564a29a35a2d1df2f557
- SHA512 8963ad26456ff49757c5991d2ea2358f2560d88411c5a075df71dd5c8b97d987927401898658493ab8b1d15b8f3253deb4fcaf127d0862ad5da643559749e8a4
- SSDEEP 384:KlGA1PEa24veXymnKEtF2uerx+oX5jIYiNrrA+gmL4nNy6Kuv:+Fh2ZFpSroouYiVrA+hLLc
- TLSH
  T18FC22A42FAC0C895E40E413098DB8B975BB6BE401F9493CB3354F35D4F7238A7AA92B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  EA_strateegia_vorm1.xls
- Size 192KB
- SHA256 2bfaabd51bfa097e5cbce15f316b7ae86cd3a05b15c1aef9831cb40517d51e29
- MD5 b8f80cc923e0d72efdda3cfad4bca2f3
- SHA1 8a72b76e29883284c18ee25a277b48fe825ef557
- SHA512 5fbff9bbad003d6b14a74e2c0347f0c837a5baf71f22dd402521016daadbd46728fb9bb52c02c10e31c0822cec22e2149a37caedfccbc6df7b7fae517b7b37ed
- SSDEEP 3072:SjWKUrO93Z+RwPONXoRjDhIcp0fDlaGGx+cL/WE+pwT+q9RVaEmgT89jaKAGI7B4:8Z+RwPONXoRjDhIcp0fDlavx+W/WEGV/
- TLSH
  T126146363E529CE19C51EC33D18B78F252B31ED086B63AB0B23C8B92D7DE18516F461D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Ijwhost.dll
- Size 134KB
- SHA256 52b4c47fdc6a0bd32f35692d30b468d3926f2e759470a573c9a69fd92b062d47
- MD5 dbaa66cbb28062f2770d374e85533141
- SHA1 44ab01637bd3d5b8f31dacee4306f06b951129e1
- SHA512 95bb759a83cc63c33252b99c9dc9ff29077e9bc50ffd5a1550e65180f616eceda65e80eb94378a50b8c70523dbd237aa3101f674c87ddbe5cdfe12d6c303bb05
- SSDEEP 1536:uVgh5Gjf2Yo3yRwYX+meEnNBKvtnqLXFs4TojzYx/M8s0EiKozr:D+fzo3iwYX+mfnNBKvVw2koji/MH9oX
- TLSH
  T1FBD34C17E6A8417FE1B7D678C9934D41EB72788A4BB0A7CF07504DA60E67BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Koguste_impordi_fail.xlsx
- Size 7KB
- SHA256 cf8f0b3249929b8bd0337fbc750415d83cdff31688fe3b75b866c5f50d674870
- MD5 c404b128f27b4c64acd36562a7744aa5
- SHA1 c80f1b03ed4e3cdd8934ab23ce9e0f80f85412dc
- SHA512 1c1fc9476ff9259a340f9e4d8519907379581dfae0081d90b5d910544f3a584dca0b79ca7533c279d7d56c1cf2d1d6e6207f40d21de998fb731122d6838de586
- SSDEEP 96:lYAgwkW0YWuQToXkPitFEB7wHSn862Z3KA5TI6UufJh2j0qFayQtfYxRgZtAU2:TghuQToXgUFEBPJ2Z3KmjMZmYc/2
- TLSH
  T104F13B2A8780BC56C1F7047EC21860ABD60C15E91B81EA8E7500F26DA7557E307AF9FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Kuuaruanne_2011_vorm1.xls
- Size 82KB
- SHA256 9adf9f3c9e9afe9a27747c2ff6a2ace575a77d6e47c69c1a45f98c8f45322f07
- MD5 ae44b31154e969db1cced1dcffa37bfe
- SHA1 8541dbe085fc0f462c83f2c7fd79d0d61c0f6284
- SHA512 c96af4c79c1428f6ccb40b7de4d0cf3d818dbcc062d987ae7e331b0c82f601ee9f85edb621b924ec18f22c075b1cab80fc16d86f978c3a1b1fd255f2ed8df306
- SSDEEP 768:Co+J5S+1iXiEh+rmYJx5B9US6io2O3mtRhEtE67osSSFyoeZ/19cBztg6qV+e5K:7+DMiAcmYJxHO3iETosdHeh0ztg6qV+r
- TLSH
  T1E88363E2AB578EA0C674C33508738720DB30DD106A638B0776D67465AEF2DB27BD11AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Kuuaruanne_2012_vorm1.xls
- Size 58KB
- SHA256 e619a8de3d264795aff12121c8a9416ac67b52287960c21780ee279f7f7856f6
- MD5 aca9572759cda516746f482775f86225
- SHA1 8131b2bbc853d4951c947cbb1e5ef7a73aea95e0
- SHA512 564a4583df9f847d459f5057cb7a8a3e6cc586d96e48c39703fa10ac6c42ca6f63dc8e842fb91b71b11b5f30d92276b92acf85591cfac247b015db83644cb87b
- SSDEEP 1536:Ye+TEP+14ntyvp5fyu7COfF7u8G53Mh7gWcahJkupZtf6HGka7MiWRm:H+TEP+14ntyvp5fyu7COfF7u8G53Mh7d
- TLSH
  T13F4310E2DFD78D51CB2B83758AB7D728BB31AC055622030771C4B6267EF09B4BD06296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Kuuaruanne_vorm1.xls
- Size 82KB
- SHA256 587044f6c41709f57bcb148f43b99fcd3d764ebcfebfb45c1f0d1193ba6a9ce3
- MD5 e49dbdca94e7545e401ae851a78bb38e
- SHA1 c73ab4c3ad31fe5e0cbe0c17da9c12ea5c731d0e
- SHA512 2e7c23cb1ced0bd4bc42f81edf3c277af3cfcf1ca385dd2b082fa984162877b8e03ea15655d4e5598644afa004a17ac6671576aa26fe46137779ed6b1bab0a8c
- SSDEEP 768:Co+J5S+1iXiEh+rmYJx5B9US6io2O3mtRhEtE67osSSFyoeZ/19cBztg6qV+e5s:7+DMiAcmYJxHO3iETosdHeh0ztg6qV+R
- TLSH
  T1D08363E2AB578EA0C674C33508738720DB30DD106A638B0776D67465AEF2DB27BD11AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  PBDOM.pbx
- Size 1.6MB
- SHA256 f4c63c9cc2d350e0beebbe22a41e58dd853943dde7668a3a58cdc342319a8c3f
- MD5 9905ddd69a80ad822b71c000ce7d8786
- SHA1 10e8d2d3146149452205a3ec43e95103e7f2b4cc
- SHA512 ff897f4f1b4cc4dfbec46a79f63267ca88bba994ae99453c2adb6dff63e1814f27386c9898d1ceb98c77b1bd033f4fdec56a27a15ef9339e37b769c73d8a7c2c
- SSDEEP 24576:vjA55il3QYqiKfk3FgOLQnX99CzxSOe+OLpJbP:vjA55il3QYqbfk3FgOLQnthOmTbP
- TLSH
  T15F856C0272BD01A9F177D27DCA7B5656EAB27C494730C6CB03A14A9E1F13BE0497E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  System.IO.Packaging.dll
- Size 314KB
- SHA256 deb6d930de291267317a79e99e2a8cf16707959e9f7d7c99d26139f98877eb49
- MD5 55009e4d45d32cad7398378d92d89639
- SHA1 f30dcb5c5e27fd34225e442694f09228b2ac7576
- SHA512 3baf6ef5720580181378ce3b29826b1fb2a0ae0b1473c95b5a17f0572e16d92be30b32d19e14b0aaf08b75f449d19cd9436e4d9315fe5e3cfed70af8cb2efade
- SSDEEP 6144:v0b6ThxuA6WnSCLSF5y+//2WbEUy9v9f0lKUV6h:v0bgxuAFSCeF//2Wdw9TUMh
- TLSH
  T1B464F72633E80506FBBB5BF891F3A051E27AB45327A1C6CF0521D59D1B93BC18EB1762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  concrt140.dll
- Size 314KB
- SHA256 b2faf3b85b23c840b654e57d5497a0ad31acd02fb01856cad4725a1715d5f78e
- MD5 6a2cef495313352cbcdb132a00bbc0e2
- SHA1 945de0b4c9f9ca1215db8081fb5f6b441868f201
- SHA512 5c24f3bb3e5342ca0a3edabbaee5ae6fa77c68b4dca85570777edafd27be88f0f8067cd55529f279199a5f7b1c81a1f8e8557466c9eb7d61387abdca186de4d4
- SSDEEP 6144:zpxc5oSb/fSpwaxspxI6CLwaVInWzgFYxNxKQG:zPc5oSDfStI7qz3l/G
- TLSH
  T131643B8A76580CEAEA67D039C653850BE2F3B8456352C3CB1364939F5F677D0D83A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  curl/curl.exe
- Size 5.9MB
- SHA256 8dceda68623b9daf35e7d49f083bc178dcc4a68f8756e405c97f03b0525029eb
- MD5 85a9e99ffa3969329157929cc76ffff1
- SHA1 f98810ca1d2b34dc4ba3a52fb6a7e90b32454462
- SHA512 776292cff7789e914a50906f634240723ed33e3388b1f2700adca369593d8673396e7a056cde9ab034abdac9d89e18427d10284c0fecddf20be5de8c151f73b2
- SSDEEP 49152:m7xIVSXtrkki+mZQiukMXyS8roKklgPY/OHJqQQmoile/GDdGtlq5IU6i3KJWFwN:OxFRtOEd+Y/WJT9o5WO+3WW6kcd6tOx
- TLSH
  T1FA568C57E1AA10EEC45AC1B1834B6332B635BC58066579AF2610BBB03F71F902F7EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  curl/libcurl-x64.dll
- Size 5.7MB
- SHA256 c24394ed346fcd77011b9719e61951a6b10530a51c4b266207c0e8178863f670
- MD5 735e732457198bb2957c0af960871b59
- SHA1 e823b2fe6a3de1d116d45e747a5f65f5eaf99152
- SHA512 f00b1964ee231ff457fe386511be1c7649898632ea259994a065ea0fd032c85dbbb2551cadecf937c5d89f6fde3c64881e447bc7328f6700ff3549dd37a25a32
- SSDEEP 49152:wO76kdsn34H+O0O2T40aMYtVp+28/jNPwcM4HsdEuIgePGtlqS5kIU6iQA/sVwAp:D7yX404Vp+1jNYcM9EpA1+QVxLOFv+
- TLSH
  T123568C57E0AA20AEC45AC1B1C34B6332BA357C48066579AF6650B7F03F71F902B7EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  kontojuhised.xlsx
- Size 140KB
- SHA256 ba6587605cc5d614a52ededf2b15d56c72c700361f72630cce96edcc23f31d7e
- MD5 c53414686c2042c8663e049e3e899f7a
- SHA1 af5526e2760d3fae92289c777d60c15a0f83f0ef
- SHA512 34f9a5a4f7bb60cc1ed7b913c955ae5066625a32f3b40f5bfe5f0a7625186714cde16128a8ae0bd52529cb81006e6583d62d4e86158f5663ac2c16a07c1d2f3d
- SSDEEP 3072:O5LRsu+WvKvgjT3epb1QRh5JIhgKAFyF6M3YJJc+K4LbK6JlqSAGRRRQinoq4:OdHMW34oWgKAFykM3YJJcL4LbRJlqSAj
- TLSH
  T133E36B8272E4B5E4C0713134866EC1EEDE6A0F8A5AD1D8D4FE9E256F7173AA2C5CD007
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  libcurl.dll
- Size 5.9MB
- SHA256 379040a64a5dba9345474f9054a24ff07e5e9a5d14ac979d2b842a11ad77cb09
- MD5 38b13530a2d9f2b2dcda8bcc897ee1b8
- SHA1 d8d3f429f3191d142eb931f11a34f8a9ae68dc5c
- SHA512 bfb198b124ad0038b091648fe4e338ea28873bcc48667475d321583a63acbf5c4f4e5a3c27529f50f25890e1797b39d69f5b9ff43f04247711eb4f78b242f22a
- SSDEEP 49152:CGtlqPZVwASOObHJm0JAoSjE0gHXXpjWC6v5nE928iA+sBuF1CrG0xwxbhcIXp5/:mqsHBjw6mIZcshHSoWO6yf+6tYl0baG
- TLSH
  T1B3569EA9B6BC0059E866C2BCC3879227D772B51523B057CF5A248AF91F63BD0277E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32