8434721b55e8eeb81f84194ac44f75afdc37710dad15a1989c96015f2aed67be

Sharing

Copy URL Twitter E-mail

General

Target
fifaisongdailahuyenthoai_9b58a.zip
Size 126.6MB
Sample261015-xa4v8azyev
SHA256 8434721b55e8eeb81f84194ac44f75afdc37710dad15a1989c96015f2aed67be
MD5 392f99677e53e9aa5ca1e6dc5fad6450
SHA1 93625cfc6c7c75207a77a84e5a175ebc88b5a9bf
SHA512 55990bca0034af2e30c56560eb0ee84a0e6fe2fe48f427ed2fddf4aed9b525c81dae686318e405a1056fdb8d21d21a7a9ee7acaccfafe144ab7bf4352cc5dacd
SSDEEP 3145728:x4RSD4j6fSgEJIyQqJgmtfNu5spJwm5L4Xfd+oBse:xPaoSgEbNJgMfvpJDx4Xl7B7
TLSH
T19B583347587FCC99EE5F007498716F8352529032BBD2CEF79660E0AC9C82EE2657235B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  fifaisongdailahuyenthoai/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  fifaisongdailahuyenthoai/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE.exe
- Size 651KB
- SHA256 299081afda4108e067045901dd8a97155cb5a2ee3e8c7d69d112f2e9f45fcd55
- MD5 5512dcb26cded8210e8def2502a90fd7
- SHA1 015249d01233823677f666e39dacbcf48e691549
- SHA512 914a1ac33db52577f99d2bbda70e1b127a7283b86914abd14e1a4f6b682534a4664c2018193723fb0042f3c55d9d509916f2a82f416cd0893cab8a36f731f1dc
- SSDEEP 6144:M/7FG9mpcJ/OD8pok6hHePl5OmJhCh0NDfKQv/O0OmSQ26PtFnKmlh3LolvN3x5v:M/744aOD86xbH5XX
- TLSH
  T1F3E43A626B2E5CB9C85434BE416BFD6B4A5FFCAE502DB72A0DD08C13BD866B53C19103
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/Accessibility.dll
- Size 12KB
- SHA256 94676c0d19a90619e81c1d20ddb8e5dfb5230aae141f4f1298d38b84db64327a
- MD5 d69f130e2c7064729663cb9e4fde6790
- SHA1 fc6dff302eda244c1afcf10d833ae8ab8a0f2312
- SHA512 19148b28682358258cd3ce33d982f0c9321316991395956a9db7ee947c997f0fab983e819837a23a6bbc899662e02e73d6cad4280d5780b46ba8ef8d299dd044
- SSDEEP 192:Ch8Qf8LoVMjgUiix4Cx4e7FBRbl9KYYoK3ESmMadMxrSeFU:2EUVMjgexRbli3ESmMadMdhU
- TLSH
  T1BD42BE28D3E48325F6B74B76ECF7529799B7B903FE75979C284A070D08226844863B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/Assembly-CSharp.dll
- Size 105KB
- SHA256 3e6e5ab43015cb219b7c204a58742139a60a793ec663409c60b59a7cbe2ebe9b
- MD5 c29a9953ddb5cc178546e2caafc5a4ee
- SHA1 4d020738331343fe307045b01289c16a77dd66a6
- SHA512 f427a712a5417f946042b5d071b82c83807463e00da529bcb1ed5baa345e82fe08ac7c8245d3b6d8b2b20c1191930732a56d0bc6f519cd45e28d1539254c0525
- SSDEEP 1536:Rbe8jGHliBjcpdH6sJL+NDW/HwKAfJzjLmmfDbLjUCm49:Ri4GABjcpdH6CWDBKAxzjLmmf3x9
- TLSH
  T124B33B2076A45B33EBBE0BFBA472960883795603B95ED7CD0DC2B4DE15827A04D42B5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/Mono.Data.Sqlite.dll
- Size 163KB
- SHA256 eac8afefa1981776fc0930ba571b95ae1efcfb637da997291d00ce610e1758d0
- MD5 567c781210b23033889d12d7228c76df
- SHA1 efb93b25db5d943c0bdca762de4da9b648454b4a
- SHA512 54eacef06adeb44b42f58dbbc81b9ed2bda3f85ff4e5b6bb3e5f518babbb33e38bc17d72a6733744622e80e0ffb4321bf7b0281000d0382cb5ab8865b66f88fe
- SSDEEP 3072:Hm8pNSa9OXKbZdBPtFS1n6fdGcFNFGFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHcp:HmGrZdBPuZ64cFNFGFOFwcGF6cmFWc0N
- TLSH
  T1ADF307A937D8361EC7FF91B8F8B156C08B71E1226A12C3097CC1149B6EB2B416953F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/Mono.Posix.dll
- Size 209KB
- SHA256 9c5417137cedef58d3d68a2e20e6c8cfbcc6cd6b2d3e4e466af5f052b8a63230
- MD5 8c403173a34ded2bbd798cef77b0ef04
- SHA1 d278759617c644c0bc1999201e8f3526991f976a
- SHA512 e8a28fa10ec65175d0becdfb37a138c9729399531b8ba9736d14f47c7e4cefa8b077788d6d4efc2507b33d7165955b432cc6425c01da3cef916faf11b032904d
- SSDEEP 6144:vc9wE0Q11J76CNWSKnc42KUU1pcsz/es:vc9wE0Q11J7PN+HzUoz
- TLSH
  T125244B5467F8491AE2BE1B38E8731F0A8374F9AD7D13E39E1EA99739147378580113A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 6559499f0324824506b83295bbfc37ac64326c0813dfc06312a82aeff9e3fc11
- MD5 0d12f0225302759c065a0d99b14829cb
- SHA1 9bc1937d91b8dd449d0e0fcfa609fa9574fae1af
- SHA512 eb8dcc1b73e03498682d71602b762bbecfc7de374b26265d7b83f6bf8944b9ee11abf0f553f7175a43cc9bf325dc4061d872f177b4e8582287624ba8ffeee847
- SSDEEP 6144:tUjTQ70cnf8MoVRxS9iJdBF119RJXG2yq+Q:sEiH119RJXV3
- TLSH
  T1FE344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/Mono.WebBrowser.dll
- Size 163KB
- SHA256 c1698aba0298b85495db60415cc3952e61b10e2891f8f275e8f55f9e41ae3802
- MD5 ff3d8465741f1c1cab675c4667214650
- SHA1 4b2352662204eaa0daa6687eb2f504dffc1cb4ea
- SHA512 ac7256ab007cbeb0f31640c90b5686188d936b225a12d4f153364e2816f268e0e97c30e62a621c667a75cc892d5fc880f474940d6a7fb8617fb4ab12278e16c4
- SSDEEP 3072:wj3yRIzL4lmguobiSDd2cJ2LMqEHbbqRJzLFW0S:OzpBi2CW3
- TLSH
  T1A7F3D512BFAD5A62D6E98636BC3501C2AFFEE156733FE38A1954FAE859033444641333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/Novell.Directory.Ldap.dll
- Size 240KB
- SHA256 186c964f87f84c1a2491c895dea486eba3872b8bea8ce08a8ef8a794139c1863
- MD5 0e9492ba4412ca7f46fe62ca16f3cd26
- SHA1 d94501ba4bd36dfc131779859e27e0f6c092429f
- SHA512 4f4c21d12b667c9614449cc2563d8f0b628b411b3cc8427d50d7834487467b604e5c059c211bf50df31f432e054e265d2cbf38b9b11155f1fe58b00a5fd32cfe
- SSDEEP 3072:VA9oMUnjGnSndU5XFCRYC+vNpjDK844olbWWhvIwGZ3s7KZ5cOdXzVQf/W26b22O:4qG8q/ilbrhrU8Ofueq2Qyvkbw
- TLSH
  T179343B2177F80714E2BE4778E5B9940E8AF1F45AB62FD39E1D8068DB2912B01DD90B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/Ookii.Dialogs.dll
- Size 130KB
- SHA256 5c8805ddf818a2c0a3a44a235e904a9896bd6aa8ede4d5ff386ccf945f808df7
- MD5 d0f634c9ca15b676df2c97eaad76b464
- SHA1 c7c3cc354c6f109c545a3c7a83d78ba375d849d8
- SHA512 07ea4d96fe80728fd408891ab6c63eea23ced986f79ef367d0033daee57fa022d76fc60eeb2aebcfd37893fbb55341a4a48c21c23d7e9d0ebf24cba418fdacaf
- SSDEEP 1536:7WfCtHhKjpOGsYjcePWDF+S0RbVmFqsU254cL0/GAdDbU4R98awuNG8p68sm6Wrj:7VCroe2ES6VX4DLEGAdU4tGV2
- TLSH
  T169D37E3537944939C9AE8B78D41511D68331EA662253EB3F4988727D2C73362CBD22FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 68c94d0c0679e8251f7ebac50a38f7af58cc4d47dd8ca11a51db9849ddfdfd16
- MD5 446f6dbb39580b20dcc466e6f018d4e6
- SHA1 573e0c15d3e09ef2d7c69afee4cd625453d825f7
- SHA512 3ac390e5b62b585e76ff52ad755897633719f39cda89b06d8f2dd75274b3acc776d81bc9f66c0487475deb2941efa8a46779cef1c01d87f97e84595a5cfa613a
- SSDEEP 6144:zkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:zkwkYfx8ZNCxL
- TLSH
  T1DD44281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/System.ComponentModel.DataAnnotations.dll
- Size 83KB
- SHA256 139d9038fa4e451bdcd893cc35c53ccaf375b0c36ec1aa4d06b9b84aeb9bd56e
- MD5 bc730c660c78780948502a874b5cbe7c
- SHA1 613dd7b895a20c0f9dc865cac03382ddbb1318b6
- SHA512 6b7099ff3c8b0850d38a6ed9d4003dadc285de5ebe6ad3fa89696313f0fdc7cdb1a0e20252762393339e11df043e284029e3e102f08b9447473e159e261ef986
- SSDEEP 1536:UE3n9HVeMZ1LUlFXhQDOk/ftL5JZXNT6n3UUYyFNXlcjUK6NBTgg:UaVLnZXNT6n3UUFlcjUK6NBTgg
- TLSH
  T1A783D4202BFC5365EBFFBB74ADF546110AB7BD16FC3AC35D4680958E1822B804862763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 1cedd2f6d0ee17c5209b7e10363a716801a7fa6dca0df45fcf781674b7bc4706
- MD5 8184b5319b766054a0c38fb521e569fd
- SHA1 1279dac5249c7ded8a665a7fb6e776a5a3421d9f
- SHA512 92d3e65311212091829c7a06b3632b489b9eff22ae84c8a1122421fa8c422a57e0fa1455a9a2980d81e0b7631de5be312996c0b5a9e1b3ac3fb81c3a85c123a1
- SSDEEP 3072:mGHTFkizuGCOE/htnREcacWown5WJGL0MIehgNe:mGHT5+H/33vJ5
- TLSH
  T155C3F92563EC872BE2EE177EF8B515100FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 6e00bb0bb168057fbc1a6ba61e7e370f6b72a290ffaaa2877c50296acf131ae6
- MD5 86f3656fc6440c04ff90bc6ae14ba846
- SHA1 2e53aa48a189199cae7fad794bca8df475d9877c
- SHA512 9c69cea8f08460a84f942ef4706b773f77b63753c053c76e11d2e7fe94b36962fdeb3a0dab9fcf79fdd4b113d8d7e1bd52f2c06c0b5a911a0ceb8ff2a350725e
- SSDEEP 12288:AWK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+OxHzR:Cl/umv0Z15PyC9vMNV1+OF
- TLSH
  T1A0354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  fifaisongdailahuyenthoai/SQUARE ROOT OF THREE_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 80e3e4a7a30c3dc44a68420e28b4819893e3786ee8bc6a53ed6e366d4fb1fb5d
- MD5 2ce7d1ac7663fff33aec2c6df4d951b6
- SHA1 0b452817d5bb64ff6f062f524c17cd5321202558
- SHA512 874a8b5f2a269bb28e358f121d9453d13ee1376122df465d344ce743660b0a0c0df62f9daf2a93a648c06bb337f9cf820fcd2de1f9fff05f4a7dec4ca134649d
- SSDEEP 384:oEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxysnRbli3ESmMadMkrVr5UhH:ocZC8Ll4LiMXkv2Y2Mcd4sj5Q
- TLSH
  T126D2C815D3EC4311E3B727B5BCF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32