valleyrat_s1 | 550d08c8459ef11e6177309526c0738848d064f7de5c91e0760255fc93159f99

General

Target
sample-malware.zip
Size 3.0MB
Sample261023-f44nwacc45
SHA256 550d08c8459ef11e6177309526c0738848d064f7de5c91e0760255fc93159f99
MD5 001178d7c1039b53f11051e7d5422e90
SHA1 ba05daaa438dbfc670dd2f6cceaf7c957070ed3b
SHA512 9b3d232f666b69f7236a86db729bf3b899be2b621237e18e116df49be4384a1590cf4b876ad084e39741e054a1d1b6fda3e8f6153c011d22550d533a67469236
SSDEEP 49152:wzvekx58EyH3lzjwrTb+9d0n9r2Iwf4sKs4cpjWPqO6MOawHwDbgz6Os6/z+X17S:wzVxh6Ab8cp25beuMOvHub0674qF7Ahj
TLSH
T168E5333D152FAB46DFCE39F291B81A71A348485399FB166490106C7BB8E32F4EB5805F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  H4752110510.exe
- Size 1.9MB
- SHA256 c74f55247aa2c72001024bd977c869cb5adce6f8604a4d32329f015b73ae2a49
- MD5 711cd47d4524145f9c488afecc85ebc7
- SHA1 2f9e5368c039db49018ec41bbb20a3b085788b24
- SHA512 8bf03abb818d6d11f210e17a7e8c8f3c941774390cf0c5e679cb18331089341d43486cdc7af1203b29eac476f2f802f789f17ec6926d17fdd099d13172a79a15
- SSDEEP 24576:DitHbptR5UngkbfXXqO7jiugTdtHxVAuN9AGFwzojqnIXxXi2+QV8epwMGqtc:WtR5UngkzvyPtHxWzojqnIXtl+NeBGqq
- TLSH
  T105953A203942C13EEA9113718D78EAFA565DAD102F35D1CF63987A6A3B78DC31933627
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  RImE.dLl
- Size 3.2MB
- SHA256 539b49f6ddfa070d25adbd8cd47c10bbba5cacf5bf27fddfe89d96f0c729b2fb
- MD5 d8bfcac4210a052c6f854700ff2669d1
- SHA1 7d90c2c955129de90e1f6d4985fac245f1129401
- SHA512 5bf23a7cbf36aa02a1a087675eb7ba69b2e3868439588d59ed6288101afb8464729444e33aacab4273d45f03009e66ca4b5ee66d2fd45d9d42ae2159f6f699d9
- SSDEEP 98304:wta18lrlwoBlOTBJnfk76qhNKKiRMdnj7KT90iV3xahOF:7tO6qhNiRMjEx4
- TLSH
  T182F5E02379C580BAC26B13709F1EB76E72FEA1700C3405973AD45F3C7DB196266296A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  hidserv.dll
- Size 29KB
- SHA256 2da61980a54cf44081a111e319ee7ab2165743383a4dbb0dca811389779721ba
- MD5 2d7c07c233ad93ec397393e274c85f38
- SHA1 f5a0b630356efafefb81664665a38b04a4ec5011
- SHA512 abe90964e5dc08de9a97fc184cda70add1994659ee2242ee51e2fc2c82594596a8e6be2879095bcf579a2c655dcbd5ce697b3080c738169b9e8e389eff1ff0a4
- SSDEEP 384:OiOdnCzPsPAX66JaKSzMslUfDZMQQw5C9VmN70rtB2tft44ri9r0HsjkW+eW6dZ:OzyEPduVqW65rtBT4+9r1g
- TLSH
  T18FD22B5171E901B3DADE737891BD6F7B0A2FBC940FE104C74AB327A9E871AD56834142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5