1b22febc16f71dec447eb2afc0dcabe0cf4f48af15e3f7f59e715afd6c8e0e6c

Sharing

Copy URL Twitter E-mail

General

Target
Xeno.7z
Size 322.0MB
Sample261016-1ebxsaxt9m
SHA256 1b22febc16f71dec447eb2afc0dcabe0cf4f48af15e3f7f59e715afd6c8e0e6c
MD5 dbd14d081e6ef374a34f4f3654453ea0
SHA1 8f314ea51e8446eae3b1196bb59d8d28eeac7466
SHA512 74cd2cd7ef63968dc179a23dab744f04628ac79fec141de500c964f19de5112a2599c58e8bf5f3e3b99e6cf1edb1c70398b1d6a5b7c21e18321b850b6689d605
SSDEEP 393216:GgxBe4Sy8UO+7nWh4Z9sF3PP5JdocjtlqcjMlB5mBVoOILggufkiYBq:kf0yu9sF3P3docjtnIDG2OILg9fFD
TLSH
T120F8333BCD55EFCFD52A60B0878705263AA0417BEAE2BB732D5E8163C316B94751E02D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  About/IA2Marshal.dll
- Size 77KB
- SHA256 70db8976911089b12d584faa1bc48cbbccffa8e79afc70273cc4a8352a0dc615
- MD5 31fcd15b9a06ac591b130921b0b006c8
- SHA1 81a485e90a33ced93033ae9a4e079639bb283a31
- SHA512 1125e34a0270af7135040e2ab44a5ca749a230ad34bc23b60f3ac529579a21b4d72bf0cf574352469b97c66515cf2d2792e43ab29d9888131053be34d3a37249
- SSDEEP 768:67afxi7heDjJNhM1cUPKRK8MJL6cgNkBewiLW3WwKWeV:yw5DFNhMGUPKRK8MJGhG/iLay
- TLSH
  T1A5735346BB50D4A2C41C853944574F996FB1EE99AFC253D32394322E2FB33C06F396A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  About/Teka/Help/en-US/Help/en-US/credits.rtf
- Size 710KB
- SHA256 3ce703c36dfc6282c22991519309b921ae8f5b2653561ff3f9c1617dc2d6674e
- MD5 05b931430fd173bd22900dbaa8bbff10
- SHA1 af5176ee28dba4777e4ba3bd9351e5acb402b9f3
- SHA512 e3fbecb7637bdcbf6045140dfd3359529d223e42ff8b03c1883b8011d9dde307f36e7cf1a4b56baa76e052314baf89a03e1f6036e9a443160db394ddd45fe55e
- SSDEEP 6144:HMgRS450MZ1cMa0C6byUnw1ZD63iT/r7Dd0ypdUSKi8Sl:HMgs4CMZ1cMa0C6B2DY0T7Ddd/USKi86
- TLSH
  T1AFF432FD1E004BA2E199C7C12D57F48CDE36A026366E57D8A22990AC637FD38B17D847
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
- Size 92KB
- SHA256 fb17f6bd188428ec7e445e493309efd128fa625529a3166b058a5f53331c0a39
- MD5 c15c2d987ac0936962cffc215ed54318
- SHA1 8022fee5e72f50f88fc1a9ec9d50e60508518bdc
- SHA512 ddd0fcf90673d5e00db0408d1dad5ed792d19d4139cf29ea73dc65ee02ba847ed56219fbc1e680283c44754917c9527b66298cd5c2d34126aa2088f01c74541c
- SSDEEP 1536:P8CziCngtVu9AyMdvd6C/22JWBs4zw0DBSC:kCziCYVut4l64f4EsBSC
- TLSH
  T16593F1B0E5B68473D347CA3AB70196EBD42D2E4EDD23C2E4F2D50561B631308E5D8A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  About/Teka/Help/en-US/Help/mui/0409/mmc.CHM
- Size 26KB
- SHA256 1c7e497ce881005248f97542deeff2bcb3ad05f7f8443f4ad37fe62a6f64d85e
- MD5 39e49fa8791f1d7f57fff6ff0bc5a1e7
- SHA1 614bbdc3d266847f1b7dcf4840280692e035f5a5
- SHA512 a03eb05bd79cdc4953beb7aaa6cc07c78c6419c5424ce8d6482c3e7996073474088fad6ff4b121e58a795c193ceef7a60def39e1f2036e5495439836d70cf1d3
- SSDEEP 384:pgcCaFi9CqQONXJRxmvn/bnlZ99UJz5ElbyyFCTZC97qNmspfFUn9aomARf4zdXv:pZi9CCRO/blZMZMbyi97UpdUn+OQ
- TLSH
  T1F1C2E1B27387E055FDEA4F313EE39505B0F13C8940B877A6198A89462150E4F5DF218F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
- Size 75KB
- SHA256 aaaa1d54087d10801231b4bff492beac227c8b713dda39bfbbfd0972adb0129a
- MD5 86165cf3d62317770fce58f3cb1d4dd4
- SHA1 6ec118c5eb9f0da89d25f52215169ecd6e14339a
- SHA512 497f196ecdfd526edf1ad9006a8830ae8a723f2e7ad3f09875fa322f8d8fa5e16833070506145f2035f53f5b315dd533087137db77b87b301bacd12cb57f58ec
- SSDEEP 1536:3Cmnm4NN6/1xo2WnRQPPXBt/5N5MWj9F5ahr:JmQcEBnRCfH/3D9F50
- TLSH
  T1CB73F134FAB68137CB409A3ABD269513EE87041EFC37D5E063E29825307174E35A81E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
- Size 73KB
- SHA256 482811c38ed17d6fb2fbcc60cd3b8f4a89764219585c0c1148e59cc0e25b8931
- MD5 c0aa228d770f3c77458deaf45ce6f226
- SHA1 620f64d0c800a8b40d3ad203aecf060e863c5b02
- SHA512 215a631bb1cee3d41ba800c5a513083a492c0401325fb5c792977ffff3683d89e819459d8044b9ff9b3c335621ea597e941e0ffffaa04d893c3afc7cc671188f
- SSDEEP 1536:i8PkRsCwLbaGQbKr+ie/iRNGQgDdVLqAf2jVA:VPKmzea+r/aN0+AOG
- TLSH
  T1F173F134B632D53BEBC28A3E6698E1E7E8DC856FDE03D4E952D0D16A3834B29114C077
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
- Size 76KB
- SHA256 350f3e7cdc45b99bb3448d10c724d5ba6ac532cc51ef3ec4513f4d218b947d7a
- MD5 bf0942377f014c00b6e8520822a6c07c
- SHA1 3ecd626dae4ec6f8dbc73e76de63428cc0a46656
- SHA512 3e1b3e5a8df0a3d6f732b8be8681afa9e7660b173288d8ec376697dbb8d3f4ce91f23403b9749b7ea0930c4344b2833fcc680042a5571ba07376ee352e12a75f
- SSDEEP 1536:vVpopkiWXJm45/n7HGMAzBmoQ2uPdJMZTiXrHJypqsdaBqyMWH:Npop7WXYcn7HG5Vmo+dJh0EH
- TLSH
  T12573E07471B68073C7C89B7EB948D44BD9E8145EFC1BD0E067C8B568623CBBD26A0972
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
- Size 85KB
- SHA256 1bd31d1c1a7db64f4b32d612d26921c019eb56288e3a28b204de5cc58df63dba
- MD5 b083c2f7d195411e21538740bf2f05bd
- SHA1 49a6371bafa94a566f2f83c87bb523d1dbbc6784
- SHA512 0e397911fceb1f3d9b0fc55c513d7636f338d74a43546d25c5fcedf6a9c8ff2029be2c0188c705511e21a1f236e89a1aeffbddb22fcc8c4e130ee80fe1c685bc
- SSDEEP 1536:PbGvrnrIvvdNR07Lo7BEJM3mXYvX/3SW0VgAenWAWVcU0:DGvrcvvDRUIBEJGN0Vg1nAVcU0
- TLSH
  T16A83F174A5715037CBCCC93EE80991C7C9AB298FEE07E0F253E692287071BC4E9255B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
- Size 72KB
- SHA256 6a67d43209abf575634aaae36f4624807ace7926956e4981558cf9852419a0c7
- MD5 ee4c26f9aed9ea6f00895ad68e6fba27
- SHA1 4a36763cbd1bf495f75fe9d76ed295a21ed7ad9a
- SHA512 f0e41f031936a2ba4edfb958740701e95c6917d523c488ab460ebbd34215e4b7bb73b41d0ab24f89494f1d0dcde115acbcc0c19f88675205880cfc42e59f4c20
- SSDEEP 1536:VVJ8Jl74akWbn6wHScThhohCJSEzsyrVXxKBe8Yk:HJ8JGqb/S2khCWO4e8d
- TLSH
  T1AE73F138B972C277D749C77AA26A899BD089204FFE26E4F433D45903213CF8C6B501A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
- Size 62KB
- SHA256 2f9355f5db80f86272f091b138f8b48a253dad7609ed696e4b7e3379cbf28917
- MD5 3f3d9ab55fb11f31466413aa692d4159
- SHA1 8793560bf876df1dc98b38f967fe24167810bccb
- SHA512 669ed441c5d7f650be59398d640a54b8c1c81e8cc8b66d58885054128858fd8a8a763021d67e93ad845ea4951dfb745264ff828fe550d1377a44728309c455bd
- SSDEEP 1536:pZEp4xibHReTio4mV7W9/Zc8K3+uNK1KpL60pT0n8cgSyRrK:rS4xibkTR/1WRc8a+uw14TpT0nRgSyR2
- TLSH
  T1D55302F0A5639193EBD05377FBB6440BED1ABC0DED3CF8D592E054852630AA9846CA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
- Size 94KB
- SHA256 c65af6dd5f55d4b8cf925b776da6f38d3190a5b0bbfd5d0177601efda76827c7
- MD5 eabb7098f222df521e465d3d41cd4c05
- SHA1 2caaccb08b52b26ed9f5b12298a32a9e5e4abdce
- SHA512 71404122eeb7f046893306d7ec8443561cd3b332250c421cc43f8e35cf17325bdf00fb725bd33951fb966795782f305e05b3a8045643afaa5925680eed82d3f3
- SSDEEP 1536:Z/Gq4GK/w9uQrR6lfvfXAOSyhjdC+dtsPROXyl26oXwAS0HJCuNllFlIb+5D9BKS:ZGq4GK49uUkXXPj0ClClhz0HJhNbI+B9
- TLSH
  T1D99302F4B67158A7D349CA3CED814F8BD5850D4ECD9BE2E982CC8B39257074E93E4822
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
- Size 72KB
- SHA256 dd09b2bbab35bc2563dbb3e6ecebfa4bce2c049b0e263c2692e76d7f60c4d783
- MD5 935512b9467c05174d596dacb82d5a59
- SHA1 9388d4adc324a425f5460ea3013d888e8898f64a
- SHA512 0d8ab33f0cda5585ffc21e9f585233a8430a41e6b038aa6569a8a955e11ec62e98e3f1e23b0067d014a99daa1b760b99224d7e1cd776f007d9ace7e560031bec
- SSDEEP 1536:8AVPAVPw/gXAPox826KtINfYWRiCl7JIgNHQ75/O0P9f:NVPAVPw/g9S2nCYWRb7J5u9/f9f
- TLSH
  T15A73E1343271C113C7C6CEFB6A66CC97EA94106EFD2EC1E9A3C85AE53670F48169845B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
- Size 75KB
- SHA256 4abd31dbfffeba6f88411f120537f483f8b5026d552b58f66426c2e5e6bb5bc3
- MD5 d6bd530834e65d678888eb0fd224dcbf
- SHA1 1b39e594ddb17e83c09c9e58ed664adb29149801
- SHA512 25cdd886cb4b372a7812131866ea1bb80ff040ad31d621992f087d5c9444ddeb87614cf401a09381ca1b67258607fefc090d21092d66fa049f74a6ce74e294ec
- SSDEEP 1536:9GPx0oKZZ6X9MRFF5Rsbocj3GR9A/1UsFXaS/h2y4wvU:MPqoNNkFF+Dj3giFascuU
- TLSH
  T14D73E0786671DA23D39ADBBEE814809BF590949FFD27D0D022E9B24810B0F4F7638567
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
- Size 73KB
- SHA256 bf3d32385067b09fc942429be65a0f96746101adc929c26ef18a822fa6cbf072
- MD5 fb79dc5e0d2086f8e77ecd02298e23d9
- SHA1 77beb5fd050d127527b087b72cc61a9d9c9a12c2
- SHA512 8a6df917c7dd8486b94f8e2dd1200f5532611818fe1c516802cfaa0ae10775f468c10cc3686ff9e03cee431015132c72b74737fb099063afe42e6283ee50662f
- SSDEEP 1536:MnjuXjuVwVI/LGOnR9/sj7F7J7vWY5rZzq4v70uD06S5R/iPpWbo+Sim:GjuXjuF/KCsj7F74G924IuD06S7/BEBx
- TLSH
  T19673E1B57576D237C3D2983EEE51A9D3CC9B406EFE2ED2E062C1AA3935B4B440271067
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
- Size 79KB
- SHA256 184cba455e9b234af57c2c50cb7cc2321e59f17ee607b63a7bf2a3e4f3c8de58
- MD5 764039fc7c1c21a8095be1d912e917b7
- SHA1 8443e8934ddf0e65e644b2ddacef92bfc90a2930
- SHA512 0e321bc198a14cd31984ae63aa0be5c1a43dd7e959d7b075a058220383de1234c6a8da272167d00034a0e020c7e5ad4fffbdd94a38f3e7b25982dbdedccccff3
- SSDEEP 1536:93/H/t5bFEyftXZtpNE6wDR6y7W7EToR6Q2RrQz6tQ1uGYqpIQ7gG:l/H/tt+CZtpNE3gy7HdleUQ1uGhpdR
- TLSH
  T19183F17C76F242A3D3E9D93AE7A786D3E9B2155FFC37C4C226C5A72829B524800B5413
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
- Size 91KB
- SHA256 4ca60a0d9aabbdb62681b00618a3b3257fc3a29354b69c1110df261449b6bebe
- MD5 16a12239626d918884bc24b9d63d2a62
- SHA1 04e1c661f50a87771e1b9b63d8453d2790419607
- SHA512 45a91d4624c2d6a0f85aaed5356d32f05b7335d1ad656c1bbcacdf02c1ff1d032df78073cf0bd7fe83a997b0404019c279b7d6427b63be8b8e124d8d9eefd899
- SSDEEP 1536:XLBYMBvASC4T9Ax6DficXKAH7NVjrYMCD0FDZOnQULxskVtkmGrFPCaeuCj:bqMex6Dj/NZYfsY79DUF6aep
- TLSH
  T12C9302F634B0C613CBA45FB99ED8A213DD9A0D4CFF12E5E925C5D53A30787009AAA173
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32