07880ee7403f4b866a197aa15d52ef50d1bc295fc483a01d3f2a853c75e38de4

Sharing

Copy URL Twitter E-mail

General

Target
RC7.zip
Size 9.0MB
Sample261024-w5nl2swtfx
SHA256 07880ee7403f4b866a197aa15d52ef50d1bc295fc483a01d3f2a853c75e38de4
MD5 e6a6884f7b6b1ab5d95a9b9c6ffc3c1c
SHA1 9b045dd3962cb463c209ecdf91c2cd5b3ecf2d56
SHA512 b71bbfc5dbed4db75ff52472b2b68ec166e3b74b415db8552d82b35df4c4da0569ce30d0ca6f1a2744fef274157d8144686b9fce9312a0783401567e2cdc8728
SSDEEP 196608:MVB3xR5uC2SBpDUcoyJTxS1QKAmtp41QKAmtprnSfjnM:YR/2SB1oyJ81QCp41QCpTS7M
TLSH
T1C8A63318CE73591ECF25173290723A39FBE5908850B449BB63B58CD40EA69F6DB62F43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  RC7/Form1.cs
- Size 16KB
- SHA256 46203f7125c93a07d6fe2c423b5e99890f613ff0c122f30a45fabab490002a40
- MD5 d8fae6c218db6a1a018c6792d9a7278d
- SHA1 defa51abd24b7cb48c1ef7fd6aa20e2fefdffe32
- SHA512 6c5a41997635fbd8326a085cd24c1223f014265824eb7a3914896681399c346234546a898474355961499a9d7258ff56c72238ec782f052a049d909dc0317a45
- SSDEEP 192:tF4UN21W8QkR613W4y0kDVttBCA3Xc5weFbp5TZIDk1qUG7vPX35O5:tF40giUKNCtt9ncWeok06
- TLSH
  T11972319D426B8F5B58F36218EF43996DFF71011B1A1553293EAE41A48FB023443B8FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  RC7/Form1.resx
- Size 746KB
- SHA256 5f1d3523322d82c28f1b961b3afbff0c387926030bc61414778fd86ce1c7b87b
- MD5 9179900ac282d8b074b37f2e1291f828
- SHA1 5cab58374ee845522433cf00fe3dc00b9fbc61dc
- SHA512 9adfa17933605e8156340c43471427048fa90d046990c6ccf9adf267c6c5325a469d1d3ba954e35986c3da93fbece28bf55735f1c55cf8f140b9a4e4e887a3ad
- SSDEEP 3072:qjeIoVVnaB+s4SwOxo7zYrL2PEJYp2uXem4bnIeaD0CGFW:qVEVZSJxn2PEJYp2uOvnIXD0CGFW
- TLSH
  T1EFF413761CC4D25161B1A49A32376A85E930F6D71B9A667CF08DAB40DFB8E804FFCB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral2
- Target
  RC7/Form2.resx
- Size 816KB
- SHA256 418e66081b679bb2a4281535b5efadcd5f16bd7cd376a8940898e33dab5e8e07
- MD5 b32d3d7864b37a43d4c65b26a60daf08
- SHA1 01d38590eadbfa67fb4fc3650e9073734340dae1
- SHA512 a055de71ffd4784e861db8400d52e05bb89b05d87f93cf47a636d5da973abe73f1d48728c99c0817f838aa3aaf3f64e50c0ebe499e291d2d08111d1fa820dbfe
- SSDEEP 3072:qje3oVVnaB+s4SwOxo7zYrL2PEJYp2uXem4bnIeaD0CGFW:q0EVZSJxn2PEJYp2uOvnIXD0CGFW
- TLSH
  T1F10541761CC1D29160B1A49A313B6A85ED31F2D72B8A667CF08DAB40DFB4E814BFC751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3
- Target
  RC7/Properties/Resources.Designer.cs
- Size 2KB
- SHA256 ea61d9afe0c9437af45535d1b57cef8c7a588bc87024ade147a49e7c1d9b7894
- MD5 b796f010d0d7bd910d663743f657176e
- SHA1 4c56f6904d94cebdbd811dcd40bf781b1ff50508
- SHA512 61e24ff70c715337211f9659f1da6cdbf58596b056c3cd3a802281f883bd3a5fda3688f4e2b336be05f4d1922feb6cdbf80fdfa2baa24d895235ff23fe29485a
- TLSH
  T1EF51BCB75F94C1324C34D6AB9700F451CB662123C63DD874F8AE02655FB639443AEDAA
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral4
- Target
  RC7/Properties/Resources.resx
- Size 5KB
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH
  T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5
- Target
  RC7/bin/Debug/net9.0-windows/Newtonsoft.Json.dll
- Size 706KB
- SHA256 a28c251dfe36d881e9e2462e171441b8b0ec156fe3f452602c9149b1b9efe05b
- MD5 c252fe44b67a08e6dab4eade3764db49
- SHA1 fcf801c0915cb47f400c74b1b459eb55ff4a5f9d
- SHA512 40656f812e273cd828b41ec58cba21dfe0cab186b8f5847744602005a9ba7caf1267729af8d37a420ea26f50221dcda85cc9695019a83f271fb81b6c32afc9c8
- SSDEEP 12288:BJJdZj8K4VopGZ5kYNkx8mJ0YHlyGBty0PJxqDo+3:B1J8xNe8MBBty06
- TLSH
  T159F46B0533E8CB2AE5EF6775B4314A1547F6F41AA2B2E74F6904A5ED0D83BC09D40BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  RC7/bin/Debug/net9.0-windows/RC7.deps.json
- Size 1KB
- SHA256 27bb209fa05c3923c9dfe657b3933ed54411808169da84160d42813886b5a4ff
- MD5 6083ebbed4a1425d358d369d4bd3c81e
- SHA1 f9c15b01769d4a39167bc2e01aad77d3019df781
- SHA512 4f03057a6d825cfc683ef825cc176f6bf8edf1ff24b97616a9ad8812fd4280aee6561ff996370b771262d8662ad9318b75f1a388235f56687c6ae7ec229e5bab
- TLSH
  T1E621F319C4A84D7705B627B5A43A4382FA62A37F6018184BB8FC24DC8F73F676081FB4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  RC7/bin/Debug/net9.0-windows/RC7.dll
- Size 1.1MB
- SHA256 f0366e8e9644ac20a7237ca89b3e8b733ca3365d2b43e4ffa121624236b22f1e
- MD5 6477943d4ffc9ff76c5d65bc342daf75
- SHA1 fe825a8c97dc7666e1ba5f420b47ffcfa6a1e280
- SHA512 bd3ffa9df9a3fcbe6e2da45b3668c89800c95ad3c3220b5a0957b683b12ebde5dc46bf1307316dc22ebc2b33d2085d334e2dd1533638a19885d0ca506627d00f
- SSDEEP 6144:lV+xuCEENmMXWMQYxy3JJ7uCEENmMXWMQYxy3JoYxy:fLCpZQYc3JJyCpZQYc5oYc
- TLSH
  T1DA358D8EA463EDAF863634FE222BF93A172F73EE0551334695810C4C78599608EF657C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  RC7/bin/Debug/net9.0-windows/RC7.exe
- Size 184KB
- SHA256 c2a4289c8eb4f07009deca705215a67249e0c9d2085676ed111825e211f67ef0
- MD5 815e6ed3799a0db70877f1be9f984900
- SHA1 209734dbd721ffc41e04a9a8db58bc3f06f17be6
- SHA512 ea6225721991cedeb4e85526d3ef902bc5dbb17e631e3eda9529a95b11d243fd4cb0039fbb126c2d657abd869532dc74eef46cf59de28d623b3b0272cf95fde7
- SSDEEP 3072:k9G2U1qr+Len2dIrOaWkQI1RcCtZKeF7GVs5TvBSGYxk1J:kMOgIrOa17vDty05SGYxy
- TLSH
  T12F046C07A6A840FEE1B7D679C9924941FB7238594BB1A6CF07504EB60F777D0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Downloads MZ/PE file
- Loads dropped DLL
behavioral9
- Target
  RC7/bin/Debug/net9.0-windows/Xeno.dll
- Size 2.3MB
- SHA256 64cf85638d35d5fa741dc67866a31fa8a2f9606e501b22dc266214041a52b07a
- MD5 64f86791ddd2e64ea2c6878517c26c5a
- SHA1 0f7c8b2c7ef75bff80a8ebea251533054a85d1f2
- SHA512 934da22fecd205917b827c2aeb742093744a3d47d225b04c9d91d7eb835bd03cd82ab5e012c24d252df23cff8758cbec5f6d348ac628799b990c328282cad7ce
- SSDEEP 49152:Ho/h73ywvIn2CFolrUJXvxNZONxncaAeaO3sENKbv01S:QeMwvxNUl0tPEu0o
- TLSH
  T153B59E26F59901FCC076D1F8CB6BA623E7727849033056EB06E0DA653E17BE55B3AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  RC7/bin/Debug/net9.0-windows/XenoUI.dll
- Size 145KB
- SHA256 37524c816a6b7fcd79dd76dc78020de3497073220fa041f4ad7aab7d6bcd53f4
- MD5 308c6b055255212a8c6193d3f2962d3f
- SHA1 5969258b7efcb0ff10ea3a5886f1afffee9c0045
- SHA512 7bddf4308e5fbebfd889e5c15184c49319f65ca1314c4252c7d559027ed06dd43fe0a9c094ed4bba5a1dc4b3ac958a5c8536a6a56711064fbcb360bf0d0bfafb
- SSDEEP 3072:ZBMd4YOG6EEaScUrlP2TbyGS6CMz7Pby6SgV9Sj0LC55dVPOdX09MheI:44trp2HyGjfby6p9Sj0Uh2dk+eI
- TLSH
  T149E3B041376C8A22CABF0FBD54B652955A71BF16A563E70E14CC349C2CF738286523AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  RC7/bin/Debug/net9.0-windows/XenoUI_Readable.txt
- Size 58KB
- SHA256 4d56fc2b7ffb5f3372226158e2b5d95f69b3975d8111138a127834929ed10d73
- MD5 a724c14717f86e4506d8cd5988b673c4
- SHA1 8319b86b3f09f9032588c9c718c418a14441b33c
- SHA512 89df0bc7cc14fd96cf537474bddf6a2d34a00b8273f657e6fc113ed8b5b0cd81e4fba9666465d7ed3bc42dca4e3b3fa28cd6ad1765eb40f8473615e4bc284404
- SSDEEP 1536:dPR7Itkjzp29OJ7KY5FQg9O4609OC2NatseB/:d57I0Q9OJ7KY5X9O4609OC2Natse9
- TLSH
  T1BB439499734ED6BE07E42148D575B295DF2ED128436760F2B1CF9088D8D848883BDBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  RC7/bin/Debug/net9.0-windows/libcrypto-3-x64.dll
- Size 7.1MB
- SHA256 16e85806333aa3b3a4fe8c31c9402b78ee01a4a143e9031db165c48386dd6289
- MD5 b47c9988a203a596803837c128853517
- SHA1 2f669bf535dde5727989da919ffa5c36cf9d78e2
- SHA512 24874b5902785cea67d3781e59471e6b8fb8c9d9e6e33e8c894745eb4324bfa1ab123ff2809269e1a7b2eb604343efe556183479c0e0d30214dec252c31fb69b
- SSDEEP 196608:uHhm399Xki0GiR/8yGX26ui1CPwDvt3uFOxC:uHhm399XkifiR/8rGfi1CPwDvt3uFoC
- TLSH
  T164767BADA67C0109E8AA81BDC2979327D771B91957F013CF186196F80F23FD92B7A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  RC7/bin/Debug/net9.0-windows/libcurl.dll
- Size 637KB
- SHA256 8645f1b6bec48f061e54941ec1d9c5e4b8096ce1a80d8ea0a0353e4cb557f8f5
- MD5 8c14feded4b94c4b72af1f710f236778
- SHA1 62dd8f17cff9916faa792a8188f8e82ed6edf9c8
- SHA512 c0222d788aef2be7eb205f923302a79b59ec6018210944cf6d807b073fcd2c08182f42e4a1766b7e42e190ac4ebb090f6afe026a52e5bb11f585db180bbe0fc8
- SSDEEP 12288:EzbJ84IyhxblduSGHhphyfiuEkatR5YI80OdnmqKENG:EzbJ84pjbWSGHz1uEkatR5YI80Odnmqt
- TLSH
  T13CD46C56B3F414A9D1A7C17CC6538227E3B2B0542361A7DB12B4CBBA6F13BE2573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  RC7/bin/Debug/net9.0-windows/libssl-3-x64.dll
- Size 1.4MB
- SHA256 bfc059e16951fa90cc14489a8263f35c6703e762f2f5413682b4f7935bbced57
- MD5 754fff93ed112eb26bd4a6b0e8300deb
- SHA1 de9edf5c9ac80b1f26dcc91d89791065097a7d23
- SHA512 05d215d1e0cd65a98cf55a2a5e123992e5719006eb346261c0c03a629cfe2cde910765a1a87a3f5a93d2371ea9c15d677277b903d55c24731bcc7c7eed87a71a
- SSDEEP 24576:CV6b+rLptrBSFH+tK8olR+WmXWdEVB36eVE:CV6bedt9UlIzWdEVB3a
- TLSH
  T1F1656CAAA7B8019CD5B6C17CC2934B23D2B6F4162370A7DF0A658A781F63BD5173D384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  RC7/bin/Debug/net9.0-windows/xxhash.dll
- Size 46KB
- SHA256 73c84884a2ccde1d10bec0820a6661920e70e4b53fa99ad510acf5ed1b36af97
- MD5 0e9fecea29b2b3d5ef064e112436e9d1
- SHA1 69423218652f7837766ce03fe9edeaf751266cc5
- SHA512 bd57bc9b8298faffc091b928537794a50c81d985d60edba7863e2976846cb08fd469c6054ff7ec574df6f0a2aea1fb72ed9cff44fa219e834129876293cd2e93
- SSDEEP 768:SAziPp7yW4k3QDn24NuDUSu0MKQVMNKuxYAuogba4Mk3Qi9fCCFmj6I2:SAziR74kgDn2rDRuIrN5mAvgbTgihCCp
- TLSH
  T146234B47ECC94ACDE967EB7CC77B49CBE4D9362827114AE3C6E654A100A37C06737682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  RC7/bin/Debug/net9.0-windows/zlib1.dll
- Size 88KB
- SHA256 f6b58fdde3bfef2c25c7254fadfed12d86d81c4a5c962262715868c48063fc76
- MD5 68cf6f98cb8b227814a59ff3f909a0af
- SHA1 0383a4d7a74417d3ec90526e61b7637256e0bb57
- SHA512 b59f9eeededd1f76f048b57ae753f79227aead32006fc649532a9bae3f441515bab85338d25b26e5002c54c65d661c0c3048f5c3c1ded6274638ee950afb4744
- SSDEEP 1536:QvkS6XmTzqbKxfXOTBpp/foyUaDmjGI23aIOcIOZhhkxBJNJ5:PdXozwBppnqG3oSZfkxBJNJ5
- TLSH
  T1C5936B4AAAB412A5D6F78178D8D207ADC331701407A44BDF9648A7691F23BE41F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  RC7/bin/Debug/net9.0-windows/zstd.dll
- Size 638KB
- SHA256 6c63d08182dede465c95e48a235894e598a61cc24e0ba4556637cc9c1a1e0951
- MD5 567198a0119e3e2ec94208f1cda7aa28
- SHA1 350224b13d1cc2f944a4a2bdd951e9ef80be5784
- SHA512 ed01636af37932dca7aa7709389dba184e16f93aa3be4fe622850df0f791c85111367a10434edf0c986079069a3574e0acdbbac4d9cae9c58fc01f9f034f40ec
- SSDEEP 6144:IbauYl+rrR8uT4uB5uWYfO16oMynnjDHM8YHb96pddEybNFZeW8aLx492bDKIbbW:IbauYGT5BYMxjDHM809sddEyb9eWo2W
- TLSH
  T19ED49E83F69542EDC07BD079C6564327EBB238061310AAEB83A4DF652F17EE55B38391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  RC7/obj/Debug/net9.0-windows/RC7.dll
- Size 1.1MB
- SHA256 f0366e8e9644ac20a7237ca89b3e8b733ca3365d2b43e4ffa121624236b22f1e
- MD5 6477943d4ffc9ff76c5d65bc342daf75
- SHA1 fe825a8c97dc7666e1ba5f420b47ffcfa6a1e280
- SHA512 bd3ffa9df9a3fcbe6e2da45b3668c89800c95ad3c3220b5a0957b683b12ebde5dc46bf1307316dc22ebc2b33d2085d334e2dd1533638a19885d0ca506627d00f
- SSDEEP 6144:lV+xuCEENmMXWMQYxy3JJ7uCEENmMXWMQYxy3JoYxy:fLCpZQYc3JJyCpZQYc5oYc
- TLSH
  T1DA358D8EA463EDAF863634FE222BF93A172F73EE0551334695810C4C78599608EF657C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  RC7/obj/Debug/net9.0-windows/TempPE/Properties.Resources.Designer.cs.dll
- Size 3KB
- SHA256 98d7d56cd965317b11183ff493a5299279684e9dd21bd94492ecbe3248827a06
- MD5 bb597b1c5593b13356d80b64f37da21e
- SHA1 b6e83d03d16b7fdf0e26e65aea5d1fdeeab53fd6
- SHA512 1265e423429170b636c1aadad2a5bbd08b5aed08f9dc73cf9eb1551093e80997fb3760229d1b3d5156b7c5d975c697debaac0d236bd16afd59781381940a04ed
- TLSH
  T1A3514237ABA4837AC42D07764EB3A54057F5E0889B176F1B6CC8A002DC5A2640F62F64
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral20
- Target
  RC7/obj/Debug/net9.0-windows/apphost.exe
- Size 184KB
- SHA256 c2a4289c8eb4f07009deca705215a67249e0c9d2085676ed111825e211f67ef0
- MD5 815e6ed3799a0db70877f1be9f984900
- SHA1 209734dbd721ffc41e04a9a8db58bc3f06f17be6
- SHA512 ea6225721991cedeb4e85526d3ef902bc5dbb17e631e3eda9529a95b11d243fd4cb0039fbb126c2d657abd869532dc74eef46cf59de28d623b3b0272cf95fde7
- SSDEEP 3072:k9G2U1qr+Len2dIrOaWkQI1RcCtZKeF7GVs5TvBSGYxk1J:kMOgIrOa17vDty05SGYxy
- TLSH
  T12F046C07A6A840FEE1B7D679C9924941FB7238594BB1A6CF07504EB60F777D0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  RC7/obj/Debug/net9.0-windows/ref/RC7.dll
- Size 39KB
- SHA256 e5e42093bf20851b7160604796c3ca3ffb635eb8d43972e1eee670b5a0911681
- MD5 ceb93e95eeacfa5f8fd9577ac672f25a
- SHA1 74e5327a560a7aa3a5a7f3e82a9d5633bb369613
- SHA512 0953b5c909558e0999be4cba39d421b965a52dde3519f6363d87144b61551abc5cb086f51636ca15c0b2bab6b84f651bb458d54fc57c2b4e350b71b2fc0f9248
- SSDEEP 768:RhsIBX2QVV2xEtsNjY8psLSw5LJi1Wc5KZ:RqIBXRVV2eYY86SwXi1CZ
- TLSH
  T17B03D1F2A3E5C5B3CB6B1838A79B4B30CB7182A575858773ADBFE4571D006381DD1690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  RC7/obj/Debug/net9.0-windows/refint/RC7.dll
- Size 39KB
- SHA256 e5e42093bf20851b7160604796c3ca3ffb635eb8d43972e1eee670b5a0911681
- MD5 ceb93e95eeacfa5f8fd9577ac672f25a
- SHA1 74e5327a560a7aa3a5a7f3e82a9d5633bb369613
- SHA512 0953b5c909558e0999be4cba39d421b965a52dde3519f6363d87144b61551abc5cb086f51636ca15c0b2bab6b84f651bb458d54fc57c2b4e350b71b2fc0f9248
- SSDEEP 768:RhsIBX2QVV2xEtsNjY8psLSw5LJi1Wc5KZ:RqIBXRVV2eYY86SwXi1CZ
- TLSH
  T17B03D1F2A3E5C5B3CB6B1838A79B4B30CB7182A575858773ADBFE4571D006381DD1690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  RC7/obj/Release/net9.0-windows/RC7.AssemblyInfo.cs
- Size 1KB
- SHA256 1813cd5cd5204c7cf4bb8c43abc08a3ca682e2009396a14589bba16602897f21
- MD5 6e4bac78b6cd134415d8847ee2f8ed2c
- SHA1 10c17a93bf6295a3cd3f3ba9f9fc72e8b7fbc9f5
- SHA512 6a9254bab289e97ad50ddc41dac8227b8fa7cf1ea63787fbd1272626244724f57134c5beaf27dd90d6a5f234dbe35bb70e9ee72688d8f2ac1978cf05a29a3648
- TLSH
  T15721E1786FA0973BEF11C1C3AD87A4E5C67E331442AD9C1830DC9D03EA2E838412E567
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  RC7/obj/Release/net9.0-windows/RC7.AssemblyInfoInputs.cache
- Size 66B
- SHA256 b73b8c1dc5dd422126263df799804c0277f52cf06361097a254219b3ba8e3b10
- MD5 147a7b7cd8efcaf4aaa9bcdca81b1b97
- SHA1 71e6698ed02b7c8d0a5b6af02ae4e98fdb1095f2
- SHA512 dac5260663eb294c6242a3d62a5e9aa04ae53a8f3f7c8d8ec68815076853719536ff84b0f82905b7c15c68863f6b27cc6c0ab7d68c44721e7b00ce180e00496c
- TLSH
  T1B8A0223FC3803B2E200EC003808230C830288E80C28808CC0BC00200A0302200C08000
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  RC7/obj/Release/net9.0-windows/RC7.GeneratedMSBuildEditorConfig.editorconfig
- Size 1KB
- SHA256 31505d2555e9cd81234e27f746291a3f50c2aad668379966418c99394176cca3
- MD5 ad9af5d550780e7ef3ca5dfe93d07e1c
- SHA1 34cb0425d2f6a6eedc2164ecd85edcf7868ac3b1
- SHA512 1b08f21dc626bc27d9086c791c55584cebe55b709f933de352b1ec10a5f61ef7445ee0570783e9d9bad5d0f1a0877cb6eac5a9dbd28d0ab35bd4f79c4d8eade6
- TLSH
  T1AC11C774F201FC81D1E220536CB6373AD0BC01FA59F320A6B3960E055963A5E43A7A7B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  RC7/obj/Release/net9.0-windows/RC7.GlobalUsings.g.cs
- Size 249B
- SHA256 d3a5d602eb6c59425412b82def49d310ff096d51902ddd730baf10631ebcd2de
- MD5 719aa7990b29c5fa615915fc5e76e631
- SHA1 e19b821b15810f63e04e260a30852f7ea90e0522
- SHA512 f46f390b9aa258413c29bb0a690beceb4a6d81d2269ef951919b7a11cf826ca916336f01ec9a96fb192f842d2478607be7d24c04b43bcef8ad872728a499942f
- TLSH
  T1A2D06C3A361AAB580008085C9C05A1B83333E323A2ACC9847CEC4181D91AE090670C55
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  RC7/obj/Release/net9.0-windows/RC7.assets.cache
- Size 866B
- SHA256 e984469a82f7f95c7ca23fb22ebac767eab1473930cb8b80413256d9626a9586
- MD5 c7420820a191c8a5c489c5756f08333d
- SHA1 e36de46d6310f25aac57ec3e540c589f0cf1f750
- SHA512 3c209f9b807bccea4e22a4653d62d7905d2d8cb70e584b941babd1ecf1ecf2bd0ebbdb098d50ebec1e6f0145d35b212812c35aa85274ee83e461e973b9d82e4c
- TLSH
  T1AC11F9445F115779CC6E2D3A6DBB77253396A0D06A02A3C7370C88DC0B52B6719F73A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  RC7/obj/Release/net9.0-windows/RC7.csproj.AssemblyReference.cache
- Size 820B
- SHA256 bc849942de662c2a00882140bae36811ce1fd2a8856230a2e1597a17192054ac
- MD5 e476efa44279f2a98f22022894bc3c9e
- SHA1 14a29fb1181d34a3760c280aea69c49107676538
- SHA512 925e1e19c655a3c44f7876ea9dcdf67edb5368be60eee31f47957b689799de4bad6b1410d4de30dcfd6c59b173706265f8e67e6eecdaacd7d4019a60cb1cbe9a
- TLSH
  T11D01152427214855CC4D9C7765BF236F3FCA4B448A5422C6B7AC00880F91B5F8EE2BF1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  RC7/obj/Release/net9.0-windows/TempPE/Properties.Resources.Designer.cs.dll
- Size 3KB
- SHA256 98d7d56cd965317b11183ff493a5299279684e9dd21bd94492ecbe3248827a06
- MD5 bb597b1c5593b13356d80b64f37da21e
- SHA1 b6e83d03d16b7fdf0e26e65aea5d1fdeeab53fd6
- SHA512 1265e423429170b636c1aadad2a5bbd08b5aed08f9dc73cf9eb1551093e80997fb3760229d1b3d5156b7c5d975c697debaac0d236bd16afd59781381940a04ed
- TLSH
  T1A3514237ABA4837AC42D07764EB3A54057F5E0889B176F1B6CC8A002DC5A2640F62F64
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  RC7/obj/project.assets.json
- Size 4KB
- SHA256 17b6582ad9352fb2272b9696a1b18fcc7b980a83e926a06b5b8661743d7fa871
- MD5 5d4b289a18b05e1fd36e445fc4c8152a
- SHA1 bf015077e57b100d40b71689631f22eee90387c5
- SHA512 a0cf49d2514ba6ecb5d49948fc2abb5f9c3c8888ed81e88e97b877b906787f17a86db8bd9beb54362f189bc67633b9475286268f151ad2c9d9e17cbe2e2a3322
- SSDEEP 96:w/xdo+YdQThBg2G3+wrM0NqxEVvUNQcjyMNm:wJddThMBQxFzm
- TLSH
  T16F914427C9048DB719B93B78957E5B46F612036B22402C8F36BC16CC4FB1F26A4A5F65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  RC7/obj/project.nuget.cache
- Size 820B
- SHA256 162c54d950ef18139350df68a6f7f877061744cf07c43b06c05ddfc12fc43f46
- MD5 1473fd29f9bedcdd051e5405303b30ca
- SHA1 54843d5fb58dad4c81a72b7dbe02e00051249891
- SHA512 714da30123d9e2e53f45e9217f6a3376ff661ea1c3989ebc154cf3616bc99e85a17a4422fe0abd026dcdf408f635ec1493ff1249b8569a5db9294a648a103acd
- TLSH
  T12B012C52DA10A2D56D703A0C5E3E350AB184172B50B024C735A4BDD0E723F5FF91793A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Downloads MZ/PE file

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32