71ac0748ced5817cebc052a1f88414ad53e2c842725ea1a0cfc5b9de93bc7261

Sharing

Copy URL Twitter E-mail

General

Target
AutoHotkey.zip
Size 6.2MB
Sample261027-jm38kada48
SHA256 71ac0748ced5817cebc052a1f88414ad53e2c842725ea1a0cfc5b9de93bc7261
MD5 08dc4d6b562bfcf0fbf30f0169250489
SHA1 f9c459bbc1b7fb742d10bc21d4d4f460529e827f
SHA512 1aeb3d81b1f58f533f2013fc1f212e87b74391158bbc2a6aa914bd5518af9c7b92706d9e71341dd9a4fc76b7dcce673b1ed4babcded22e118cc662cd9c9ff34e
SSDEEP 98304:gu7Z79Vh6Y9PMLzSfMZKCJiiV8pCk4CJ82GTW09HeKoE9ZxgoUz/miUe9ZxgoUzm:L99aOKK3W814pxx9He7E9ZeJLb9ZeJLu
TLSH
T1BB66334739322415FEC267EAF1D387A30241A98FD0ACE8ED4716C5AE41DB2CB9A3C557
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  AutoHotkey/AutoHotkey Website.url
- Size 108B
- SHA256 195bbde39cb8c4f3217a02d20e3faeb1115782f87346f0f289949aba13d5f55a
- MD5 62799f43888408e07655ac2a041ad106
- SHA1 27d5d5180a0fa3f5c46b731f783b203884a2229f
- SHA512 8057d88202e62ce675cb1846c50b8f8a24b163af90058dec22bb4508623986bbd3c0e472bc07db636d1c60eb36b05254bba634fe33dd12980aa7730d2c1ccf86
- TLSH
  T19FB0121323B34704F713039C80BD20B1BB3735055014D68D0670484C00E4811CA61763
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AutoHotkey/AutoHotkey.chm
- Size 1.8MB
- SHA256 982da174108f5f1d9c1200879ceb3ea0d6f081be77a2ee687b9b87b418d0d750
- MD5 d57eeb3b1b1dc23c25fc89a4e2ff6444
- SHA1 02cef3fd733dd88adfb68a8549d0d88cfb7e1758
- SHA512 d914d24127c1871d758d0b6b8c438e73d209832e3e9e242a110fbadde524d59d63a4a4030e265b2452c8275bb30753edef278687be32835085c1e49761406056
- SSDEEP 49152:tWuD/gymgE+fXRkRiahg71VAhFXoL3cQTiLZlyRN:tWuD/LxfhOI7HAzXoP+LW
- TLSH
  T16F953305D8B36411ED625E3982F11A52B108FF6D921FB5C787CDB9B813CAB9A44ACB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  AutoHotkey/AutoHotkey.exe
- Size 1.3MB
- SHA256 7f36d9f4d60864266b5efe83ac37ba23b464e4dc15fc82889c8ef90dba418793
- MD5 835c24d817c673c7dab0eef9797e8c37
- SHA1 8ddb3c9b60f5b742c52881a4a5df31ef712ac68e
- SHA512 60d150f17b127dcf84fe3cbae75c014bb2855ca1a0f9521014935ad290a756e85acd7527cfb8d0461079f24d6ab7ad7c2829ae141fb98b206cf418afafe15df2
- SSDEEP 24576:A987DBu4XY9j5volUZlUbH+zkZbqqsahGx9EYqjnlJDslJbpl1dIgh7zB2qZ:A987FTXY9jxouZlUbH+zkZqqsaYx9Vqm
- TLSH
  T122559D0733D6C1E8DEB391F6C525A623E772781107389BCB25E0592DDFA3AA05B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  AutoHotkey/AutoHotkeyA32.exe
- Size 772KB
- SHA256 eecdb8568b4fcd8758f27468efaeba7700f8729db0a06b8fdd2e20d01e0a3674
- MD5 6f6bc3c733a886475ff6030af1f2a2c7
- SHA1 02c3e7d959778facef26a3252ab895c93e9657fe
- SHA512 46749f861bc5e9bc7e23abb78b09f2422a7b102493eedfd94a6653ddcf64cbf90e21bc3f6b650802687f8cef60ce2773affa511c3a99887b6b1d5abe4251136e
- SSDEEP 12288:Jm5fJwP6E9QSyF/Es4ClZGwQwzoQASvbCM/aAKQ8azNwbktbw8jrtADy1XaOqiuF:Jm5WyF/pzQEBA+HADYXa5iuTgf57EZJ
- TLSH
  T1FFF4AE51F68540F2DDE234B152BABB726939AD28033049D3B7A83D790B726C27D7934E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  AutoHotkey/AutoHotkeyU32.exe
- Size 889KB
- SHA256 de87c8713fac002b0b0a0f9b02c4e3ebcccf65282a22f5ab5912a9da00f35c2a
- MD5 03c469798bf1827d989f09f346ce95f7
- SHA1 05e491bc1b8fbfbfdca24b565f2464137f30691e
- SHA512 d95aed75dd7b2470d4e5052b4b494ad9efbb9eee42c63cf0b38f1d0275ff7b1bb8ee4cbc69d1bb219dbbf33ad3b01cea97f87fa8fe69be7f943aa4417a603238
- SSDEEP 24576:mjSsPIqS9jL0rJ3n770E9d8qTtE4n4CucuH:GzyH0ZOqTGQ4CDu
- TLSH
  T1CC157B52B3C3C0B2EFA219F2D5B957361939BC38173889DB73D4382DC9A06C1AA75356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  AutoHotkey/AutoHotkeyU64.exe
- Size 1.3MB
- SHA256 7f36d9f4d60864266b5efe83ac37ba23b464e4dc15fc82889c8ef90dba418793
- MD5 835c24d817c673c7dab0eef9797e8c37
- SHA1 8ddb3c9b60f5b742c52881a4a5df31ef712ac68e
- SHA512 60d150f17b127dcf84fe3cbae75c014bb2855ca1a0f9521014935ad290a756e85acd7527cfb8d0461079f24d6ab7ad7c2829ae141fb98b206cf418afafe15df2
- SSDEEP 24576:A987DBu4XY9j5volUZlUbH+zkZbqqsahGx9EYqjnlJDslJbpl1dIgh7zB2qZ:A987FTXY9jxouZlUbH+zkZqqsaYx9Vqm
- TLSH
  T122559D0733D6C1E8DEB391F6C525A623E772781107389BCB25E0592DDFA3AA05B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  AutoHotkey/Compiler/ANSI 32-bit.bin
- Size 703KB
- SHA256 f41e6cfee66683c30006cbb1a7f33aea1912faea5a28a2ebed42dfc450fe65e5
- MD5 ede133190f07b58c7aa4e3e867bbb153
- SHA1 dd90eb4cf82dc68b47c56ee605cbf35d57fd2004
- SHA512 629b975bfd88f48a5ae5642193d2e1c95a8fbc91c9258594188aab0c57c7663d94def41bc15836d7b82b7d35066bdebcd335e3997abd0e18b79cb255f15e7861
- SSDEEP 12288:UjNWpMwtWSDotua6MR0IKWaEm7D7Zo5hVzmxxHGzyNzsA4+Tp4ZrMoiFip9Qmr4:U4pMHtua6MmuaE2sqp4Coignr45tu42X
- TLSH
  T1DCE49D61F69940F6E9C138B011BAE7325839BA761334BEC3A7E43D791A311D2AD3934D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  AutoHotkey/Compiler/Ahk2Exe.exe
- Size 956KB
- SHA256 de24a0364a8479a29bd350027ff5830b02216bd69faded29816c7b3cf51f58c5
- MD5 669b42cab39d25552906127f534f45a6
- SHA1 6b3e30c64d34b713f784057cabc1cf4bb4fa84e9
- SHA512 d33b5a45cef54c9eec38a37eedd47c2add3a31d68dc98320dc83437339bb93ee800879e2d8bca292e9d521d66ca7465ea02e6fa3a22461a1c11e7ef913bf7e95
- SSDEEP 24576:hjSsPIqS9jL0rJ3n770E9d8qTtE4n4Cucuds5C:5zyH0ZOqTGQ4CDuf
- TLSH
  T1AA259C92B3C3C0B2EFA215F2D5B95B361939B838073C89DB73D8283DD9915C0A9B5356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  AutoHotkey/Compiler/AutoHotkeySC.bin
- Size 1.2MB
- SHA256 f393c0e785758cecd11d222042ba9cec7ab733512946386be4c98d39597d6054
- MD5 8f37b3a3a358d36a7001dd06e1c68fc8
- SHA1 d7320af1083bf32765fc0b17b6f8439b1b8cfe20
- SHA512 19dd804a3cf81b4917f326503d2bdb01c11176cad9d5edeb77db95d85845197862c401db2602f92f1fed94941d58ec7c4615617b31983ab434f358fc016fabff
- SSDEEP 24576:QcWvEkqZRLJ1bVUqk1ovjVX3EBLgeWEckj/EJq8rp1mibDk1c+Lqk:QcWMPZRLJ1bVUP1ovjVX3EBLgerckbJ3
- TLSH
  T13C458D0733E6C0E8DF6790F2C6255223D772781117289BDB64E06A2DDFA3EA15B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  AutoHotkey/Compiler/Unicode 32-bit.bin
- Size 819KB
- SHA256 e6bc4e7bd473494ea8803ee2ff32e8cdb35229f6f3a888e940a3ada81829ce9e
- MD5 96c54c207dfd4d94a07ef2209d9b38cd
- SHA1 ded1127bce3c20a052cd340977c834b4b02283b2
- SHA512 f75d69c04b21d5b43e7c09b8e40148dee836b4418bfb7097c8268adba02081e5faca864595f337e7afe0eb5cdce3e491ba82521cad67eb175b9777d2369e2e0a
- SSDEEP 12288:W+ldKhooajkd8OqC1YYs6SePwPNRqJYyUNptUAqnjtB3n:WqdKhov5OfYYs6SNxptUF73n
- TLSH
  T15A055B52B3C7D1B2EFA225F2D6B493761939BC35133C89CB7390382DE9A06C16A35395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  AutoHotkey/Compiler/Unicode 64-bit.bin
- Size 1.2MB
- SHA256 f393c0e785758cecd11d222042ba9cec7ab733512946386be4c98d39597d6054
- MD5 8f37b3a3a358d36a7001dd06e1c68fc8
- SHA1 d7320af1083bf32765fc0b17b6f8439b1b8cfe20
- SHA512 19dd804a3cf81b4917f326503d2bdb01c11176cad9d5edeb77db95d85845197862c401db2602f92f1fed94941d58ec7c4615617b31983ab434f358fc016fabff
- SSDEEP 24576:QcWvEkqZRLJ1bVUqk1ovjVX3EBLgeWEckj/EJq8rp1mibDk1c+Lqk:QcWMPZRLJ1bVUP1ovjVX3EBLgerckbJ3
- TLSH
  T13C458D0733E6C0E8DF6790F2C6255223D772781117289BDB64E06A2DDFA3EA15B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  AutoHotkey/Installer.ahk
- Size 65KB
- SHA256 7218a733512e7a808b715b0ce9626361b5dc58ae73972d42a913f2738148464d
- MD5 431996714a2b5aac720aee718d8313ea
- SHA1 691cc6ade8ce04bc1c67240f1806028f7ddd4e60
- SHA512 9d233fd3959c87e70799f6ca0ea2ff6203fd6918d8406ceef9e2c397b66a2b17878cc0f4fa0b45278fc9d711e672c852304532a19c04a90203e3e6f023477881
- SSDEEP 1536:uha0PbLo/88KSAn4HJzlbfuxp7NaBNZ/MXtM:uhJYxbfuLMMXtM
- TLSH
  T115633B02BA0A4536D673635DAB336903FA16851F569706007CEC41EC2F7B52E83A9FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24