a393c3b4fb74a01d596eec1aa39729f379cde22e410ab4c1f9ec116901693e50

Sharing

Copy URL Twitter E-mail

General

Target
CostBuddy-windows-x64.zip
Size 17.3MB
Sample261017-maftaa1ybs
SHA256 a393c3b4fb74a01d596eec1aa39729f379cde22e410ab4c1f9ec116901693e50
MD5 c8bfd4d27a1bac4042b891fe81f101e3
SHA1 1ee087eaba5103cf8f03da88a8e2cf4955deee59
SHA512 31daf96b1933c88d86b4ba75217b0b873077b7123988d6be32713aad2bf5d44c0f44daa32f4ff9ffaefbe936f9377582f25e3f7208835a01f99b14d127dd5d13
SSDEEP 393216:k4H2IDP7bKZsiosrM0DdRFQ/2svTfWIZjsiTJXDaqJgn6:k48/rHdRFO2STfWQPXDaqJgn6
TLSH
T186073371E0F82440FBF7497A498BCBA957BA24C26653ED7F5998C4132B1BF98C8DC181
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  CommunityToolkit.Mvvm.dll
- Size 114KB
- SHA256 a2ab2e94556733b0bb8a56c7f79e8ea0a363f984c49a0ae757e329a273a45774
- MD5 d6f719a63d795a3cfac0d85815d472f1
- SHA1 30f53c8cfa0132c2f4e85a5b0965e0d17fab6fe6
- SHA512 fe200bdadf5f6a1704b249a39e5cde523234b152b6d0350948b5a2e4ec3e53d6430d98ec15e99d55b7504ffdb028af302153fd161d1a28a0dcbb459e2d9c53e6
- SSDEEP 1536:0EK2AOHkvCW+WEYD6AaTiBUu7E3iDEMp9YJKlglMXVCsPXA2ziXslPx:NkEYDmmBUjSD3TYJKlg67AyF
- TLSH
  T107B36D0273E85A27EAFF1EB670B451864B72E64BD576F34D148CA6E50493BC09E807B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CostBuddy.Core.dll
- Size 92KB
- SHA256 b3159c3343b8df3a5b143e3efbf77f4487f9993dea0d6adefeed73ded4c4f9f1
- MD5 fd702c4e1389ba902a201be85b9ad9b3
- SHA1 6bed540dbb1aa5b089713c44364df62c9f3926e5
- SHA512 4999bb0bd4ac1e19846c8e9b1f01db29a918e31807d7bc40c291289687cff2469c94d2c902642104b76a71d5d76227e180afee85c777e12bb57c36b007c020ed
- SSDEEP 1536:g/9pfaWq03uwxV6dnQNBTi28dbxv307SrcoUAVhTRWFq7dv01lCeuLFJ8GnKFNqi:gVuwBTTk1/PrcoUKkCeuLFJ8GnKFNqI5
- TLSH
  T14593C720271A4526D65A01BCF4627428C7ABE6153C37DBBA8E0CB89AFBF770150717E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CostBuddy.MAUI.dll
- Size 550KB
- SHA256 444d830b439c498577a6a983f5753ee823fb3f747a6fd548fa6bcb927fd39984
- MD5 82d282e3a34657031f1f570f8a17913a
- SHA1 6f8f29a6eb96f44c0a52ef7dfb715db64ab83a41
- SHA512 9b043ea53151574026bb7e9635d119f612153f2ab70c341b28aa7edc67d0add3b4aa637123306e72a84da7b931be5546cdab88fd694fdbdaca78463e79ba31e9
- SSDEEP 12288:qt72HlcaWooitqkCI3Sg9zptO+bAuMaTj6sEVLBgS6Yz3aXWXi3XMP3cyaTN8nBR:XFcPYun9
- TLSH
  T166C4C7105068A9BADB2627B616961C85ABBE87C74B5CCF0D793D10DE8F773838702673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  CostBuddy.MAUI.exe
- Size 245KB
- SHA256 bdd281ace9d97d92ed2ae18fd76ee973c7ae03561284f5e03476315335eac4ec
- MD5 c1c9ec8f3f2735af98f9a3ff708ae5f1
- SHA1 a2762dcca1f70a5a5c2f6c4210bbe46d70aa6637
- SHA512 f862e70cdb2308111981d0d0c8a26e855879ca68ad37997bf39c8df8de2c8c84aa23004c06b9adfff7ff68930cfccc73ea2ea6509d9b5c26944398f8fc682ea1
- SSDEEP 3072:eqeXA/4yIbHkNPN+6H6xCYOiVUE265LJwDULgivO1b0PxmAZA506GBOWU9WI96bO:evdHkNFdaxmVErJwMgZYPpQ0lB8H96m
- TLSH
  T117349F07A6A851BEE1B6C679CD924941FB7278594B71B6CF03504EB60F63BD0AF39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  Microsoft.Extensions.Configuration.Abstractions.dll
- Size 27KB
- SHA256 fefcdb267a73099cb90e5af56b5ef2bca59bed974339b3a6810352bde23537a6
- MD5 e1f852e450395bd9cad83625ca41afab
- SHA1 8a5c6332c4208e319e648c8850ab709c82efe48d
- SHA512 54fd5acaa24c426b42aee7b855b6614c9c1e2676d0f54683d4a2b059db7c9bda70988c6ceb43f488abc34759f575cbdb75c3f0649cf932cf5fa2f53a66cf2881
- SSDEEP 384:Hxrv7hVmaET50kv96TG/FwzzRjz6qMvckxGMCWsfNWCx5kHRN78DuNNPR9zbKrQV:97hUaETSkXZp32No8D69zQGF
- TLSH
  T1C1C26C6953AC9327CCAB1F71F5F1D4412E36E7E27811DA2E589EF1090867B805B32729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Microsoft.Extensions.Configuration.dll
- Size 42KB
- SHA256 b5cd9da2c3364a5b201cecb0c80e25227d27ba44d96343d2894ff8ef3fd81550
- MD5 ebf181ef6f8cbfdd9149d9d609059051
- SHA1 05cd721a76c1afb00df1b6417e6b8b1a7f344e67
- SHA512 fa2f59833721fb50500d89ae5a3c8c7474e247a684440c01bd30d46a8962cbcbe8f216d41bba9ebc075ac2e1ee19c37a46d0e1db922db23a3e261b5c68155877
- SSDEEP 768:MLJOZTEW1WTsTeVnrI/yqCtHUafO+ukucyOgn9zT8B:MLJOpEQzTp/AX2+uMyOg9zTc
- TLSH
  T1D8135D5A63AC8B2BC67E0B76F5F0A9451F39D2477912E71E4C9EB09609273C04B1273B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 62KB
- SHA256 a0106a638facae621f870eda720cb6c980c1d5d49c2f4351134e3fe043b9291b
- MD5 38236f9c2408bda46c13efef364326fe
- SHA1 03178026c200fd723bb75d08b9a4b70e93f6a45c
- SHA512 4abadae40a459be932359d6964c30e1e5fbef300736943bab42c1d66b5fa56c45ed10910acf6b36c302c8a40bc364df444220e2af8ff5854460c6a9542ff88b7
- SSDEEP 1536:KCYbKF0XEQqb72cfdGWQAE389HD6dDCN6rzf:MUbQAKuj6dGNAj
- TLSH
  T1C7534A54B3FC6727CBFF5A70327250219738BE4B2041F70A796BC0B509A27D855A1AFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Microsoft.Extensions.DependencyInjection.dll
- Size 90KB
- SHA256 8d6e7b64cce554f0a0fbdb2ba80745895fa0b4e6cc378b9fedfe8ce86f0d8ae4
- MD5 7d40b6217fc409171015d905a22f8e85
- SHA1 27a31ec52498d9db2b09707ef603860a80fdb2cc
- SHA512 e998ab21e2a7f4df84f33c5d7bcb6d04c11481633362f4988f3a22820aa1f84744f51503947492217668b9db39e651d13cab0ef09d804b961aea2434314a3d66
- SSDEEP 1536:6sS1Tz5tF1bQWVsdJCKTvZEmwbyQMUiEVzz:3QH5tsWUvZEmNQMAVn
- TLSH
  T16C936B2467EC4B33EBEF19B8A87440044BB9E55B3102E74D5DD4A4B91AE7FC20B712B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Microsoft.Extensions.Logging.Abstractions.dll
- Size 63KB
- SHA256 29e6bfaf5ce079ad4d70dc547d966038992a7428df6e726084eb9010ec837715
- MD5 f48c45d592355ecc709677347e7f053d
- SHA1 3e39ab7134f3ff4d1747e2fd46734826de4787e8
- SHA512 7f0a48988377a1dcb49b4a56a897c05f70ead34a08788ce8584be0c326b3debe56cb8e7225710aee5e676c02a0d1c4a51160056b98189abdaf2cfd9b4a61e4b2
- SSDEEP 768:Uz7ouSrbVozuvi53ReiJd/zk6cuAJU/JJeUuvBtkJJQiH2hsm+YY/iDHji9zVN:vuoVozugRhTeU+AQ5+Ywi/+zVN
- TLSH
  T15F536C119BDC5377CBBE4C75E821D6934BB8D3676802D35B3CCCA528681BBC84A613B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Microsoft.Extensions.Logging.Debug.dll
- Size 19KB
- SHA256 798b0714e3dfe8e80d12e2faee8257bb5d05e4432c975cc510cb83b33ff60048
- MD5 3253a09c97dfb4a04798afea95d54943
- SHA1 d1d7ee70461e7b8e033a996410788ef23cbd44d1
- SHA512 af9b94b9af8f1c4275e0a0a0abbab5aa6068f52cbf5fe93e006e410dfab97fdff3c3c738bc17539e7c59fa5d6dfbbd36e132cab129767f19f4d03ece7c01aec0
- SSDEEP 384:HMFDkHCuH8PLmMYWJlVMWITb2HRN7CR9zr5:sNWC1Tx3a/iu9zV
- TLSH
  T1FA925C91EFAC424AEC7A5EB0D7B5DA423D3DD783A811DA2E158DE1040CA77909B3533E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Microsoft.Extensions.Logging.dll
- Size 49KB
- SHA256 4330a5efe9d110afb7f8e567d5b43eee976e0f7f6802d13a211b65d747529179
- MD5 5d938dc7ea664a133622c549c75f34f9
- SHA1 31be5da67b58f47282f4581a587bb39d9cbc17e7
- SHA512 b38899246011715224c32ecb6ccb41c4fa338aa32a72c3ac20da8e1fda4a2237c5812b1ce6a4f327f2ebfd878f7a25cdf6c2ea60315fda8469d15e0dcbf5d57d
- SSDEEP 768:SbyNvwqX2LvG84aSFWZNSYv6VmTygGPSikiw64yw64Ibdez7+Rs7XTfWDs/idaiy:nd2C9a2+EYYbgGB4ImYYWDMida+zET
- TLSH
  T11F336B4153AC6327DEAE0E38F9F4A8415E39D7537402EB6B5ECDB0911CB37D486212AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Microsoft.Extensions.Options.dll
- Size 63KB
- SHA256 5f9b0e589f1ce9ca656588cd92cc0bd53803fdfad258fb2916aaa14aedce682c
- MD5 2f6f0c47136e38c0587d70b71d1b14fe
- SHA1 67bb0af9a1ad1b273d3c2d7be753ddf4656fe38e
- SHA512 2e15cb0f2f9934ac849c965b663f25b6fb15c4ce3bf674b693e481b92679e48af5f4013afda69595f0e3308803632578579bd45e01ca54037949c9f42b94367e
- SSDEEP 1536:GahqHoZX+NmzYUGrCUidKHPhwMEyBoXeMi0zy:GYXfFGrCLQvhwME1XewO
- TLSH
  T1C4537C06E7888712DFFF8971B06CA6620F30C35BF543B76745EDEA5429633908E6163A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Microsoft.Extensions.Primitives.dll
- Size 42KB
- SHA256 446ff16e903e7479558816e213a3adee9a1c1adad65a56d853801b10933e29d7
- MD5 f45226e320f41097397b1ba7468c2d1c
- SHA1 1181845c7d16ac4c525eec67ec3a6dcfaa78a433
- SHA512 417466f57fa8c6d942be5d86b14da5915d507dfbd7aa8d2700b4dd79a9668897a6a6abaab225be45076bdb8d86ccf4777bb3c699b4002a081e4407604f4e2f87
- SSDEEP 768:CKEGbmbB0QERF7v6EtkKS+1ke97a1O33ttBOP7yW5yfyqTuia+15OFyx/iCL9zRv:CpGe0QERFhkKSM7ag33ttBOP7yVfHTuu
- TLSH
  T132135B52B79C8333CEFE9E34A4A4D1442A38939A7923EB5E5488E4651C737C4873227F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Microsoft.Graphics.Canvas.Interop.dll
- Size 1.4MB
- SHA256 6b49ac74b0b6c872ce135cdb2212afd28c1bf4287c2f649b81a98e690dbd0e19
- MD5 c87b4854d31b0183a8d5b29aeaef9be2
- SHA1 5d1fd3f63ab274d91ee0014a6ac5efc4013ded08
- SHA512 92234f7ab2d5e03c38338656d501da6b52e80653a5fd362037e2a26be63531631793dd29dfcf1ceacef4d8a3eef63e1d72337ef0b3b8328d3921cedd10391302
- SSDEEP 12288:OD6BolOwkHGTyZHorqOZPuiGXB8OCV20tahzVE3aSh6E+0hKVqSRkxk/YdxafFWz:+SoloyyIXafWlijDM8XPZ6LRTWzV8
- TLSH
  T1C1650780B7DDED2FC45D3BBA8077F814C221D40BB1D7A38768759AA4BD473848E066DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Microsoft.InteractiveExperiences.Projection.dll
- Size 1.0MB
- SHA256 263b903c01fefb2203f781abf76dc7eed13c4c1bf9305bc1117adb0d9a627ebf
- MD5 626a310be10db1b482ce1bccdeecc199
- SHA1 00bcf103b9e62407a3d79e40a8ed1bb57d080143
- SHA512 162f9fb1b8a5da318ba06e0db3378b2cc66a12e62f41772f50692c1c2a09dfc3c5a92e86c0d6f32d140709127e6ee60b9f3732403a8013f894aa37d04606da49
- SSDEEP 12288:u5RSryj4nzZ24kRoEcx+wTZ+d6XnEwpYMmxKv9oaJkk7SZH:PA4kRoHFXjXtOAiH
- TLSH
  T1D135190877CD863ECD9F6BB4B2A48919557CE603A11B972F245688B00F933887F552FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Microsoft.Maui.Controls.Compatibility.dll
- Size 449KB
- SHA256 307a8089467910b9350c3ebd542073aa38daa5b3d11bb5f42b4bd7d4dc4c77df
- MD5 06a3d738f7ae0eb673fec3e31d0670fc
- SHA1 22845a86f5c122345576b2d6629abe1dac58dd87
- SHA512 5f8b216f5a3419433ef2a7bf32a169ab42bbaf1a0847cd28765a990cfa55578a11ec85a69c9cb58b710a8a2ac7d8b14fd895c3c4da5c1678be6b6ecac87346b1
- SSDEEP 6144:WqpEM/kToSAl+/Av7qegfr0SiD85Sedct1+xgTXgNsP6NFcS:nEM/kToS4+/LV/8t1+xgqH
- TLSH
  T198A44B6033F5CB29E6FF073EF16408184A77EA0399DAEB5D0905A1ED08E77628D21767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32