21fe1d41f7e76cc4f5d409f0a1c754374f112d025d1677cf2716c1e80f0a0721

Sharing

Copy URL Twitter E-mail

General

Target
zapret2-discord-youtube-vrchat-1.10.4r4.zip
Size 1.7MB
Sample261027-wevmnsfy2l
SHA256 21fe1d41f7e76cc4f5d409f0a1c754374f112d025d1677cf2716c1e80f0a0721
MD5 52d928f607e820a679b6d77f0b461d6b
SHA1 009b369773485de3b36c745853deb1ed64438258
SHA512 ac2116abcff46d21ec41d81543c9fd10b30d6719b315e85be277d429406ba9d54abc7953d64793f0b7ae3d6c2a8a78de057ad3bc8a5224e1d61f27f656814a4f
SSDEEP 24576:4cjh9+TiOV9A7D0AtWL+kcatqOCRcKNEiN5GrZPD4qkWSAzicaz4QGu2eWOOZKY:4cL+uUAtWfxtqOQ154PpjSAeXGu2eAQY
TLSH
T1C1852335E12E540CDF83B47008D9BA5E130665860CC32A74621291FCF9EEBB776B8E97
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/bin/WinDivert.dll
- Size 46KB
- SHA256 16abd6a029e65557c6a309bea7b13bf81fff4e193567582e1cddbf6719f323e0
- MD5 407f321a43415b878b727e2c38152950
- SHA1 50aa3cc1cb575e057b335cad83a0242f31fc6d46
- SHA512 8d2235920a21b4142e1b561db181acb5c6a5725a5c9ba0f506e913ff5a0809fc8f7648a474318bc5837e37150ae82718a444954b71f29495c6fa5b90cfeb6eff
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH
  T13623D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7992D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/bin/WinDivert64.sys
- Size 91KB
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH
  T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/bin/cygwin1.dll
- Size 2.8MB
- SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
- MD5 a1c82ed072dc079dd7851f82d9aa7678
- SHA1 52f26fa1aee39476f1c13438aec8bf969c78da45
- SHA512 22993e7cee1e7aa69ffe45adf3a329abced7e53d54ffea96dab42fe273c81522252c7b7e98e5af36d2fdec0346c51540e977c6e56b8c08835bac86fa6d04ca59
- SSDEEP 49152:hGniafRcs02/oSqCmB5RMiCwDjUZQjuhKv+TLRlURxKc+tKaZrpu8dhcy1u7MHz:YniGRcsVJqCmB5RMiCwDIS4TBrppUy1J
- TLSH
  T165D55C1BF3A350ECC967C138466BA372BA32B82441347F6E2958CB701F72F51666DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/bin/winws2.exe
- Size 641KB
- SHA256 ba4ceccdea3576da0a0991a50d7893ea911de197281338132dbec02a5b2fcf58
- MD5 9d6589930197aa1609fe428b689af75e
- SHA1 b7d9fff2d7928d7eff87de037eabc8ba1c3f798c
- SHA512 7ef04d622c4b6c9b67f334308b11d998136b1f8fa7694b0bd72020497ead5d047f6372c5f4f009eb4e70646a12fb68af303a45364b27d2d74d4a0aebcba9090a
- SSDEEP 12288:/dre9GRrrDYC1rhFV48ZzpJhZPRWwUOLIVpBlF1ZM6:JbkC1rhP48xpJ7RTJcVr
- TLSH
  T11CD47C06E2A248BAC46291718B9ED732B731FC491324AB1E3B64F71C1F35D605A9F76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT).bat
- Size 4KB
- SHA256 b33e6f5c5793ce1f4f749d04095ff60e81e55a0fe0f9c708571c22c496ee6823
- MD5 8ae4c31458d5b1421b58bae88f4d2f80
- SHA1 9bcd9fabfc788ead79b193622446001704299a57
- SHA512 ae65b1e3134572eeb7f2580e0830393288c38e23a5d3216d9a07b2ee9474a087ab8d03280d74c93d19818f0c3f9ff56f6855f7091530fb12cd105a5a3734e73b
- SSDEEP 96:nL67x6CqMAsQM/EuhEl6avt6nTH/EuhEr2vBv2euhElYeuhEr2vBvFtz0ZEeJhm1:Ax6CSlM/EuhEdvt6nT/EuhEr2vBv2euj
- TLSH
  T17DA19A56D00CCE1AC188C73FA81DEC586187B8C30BDB919257D6EDD5EB83D9E98C98C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral8 behavioral9
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT10).bat
- Size 4KB
- SHA256 22f27c6b8803eb8a5fec2b74b21f91bbb624ce993b54c7f78780bd3a09f9f759
- MD5 190474d34e16d416f1b6c82572870a6a
- SHA1 9377f9aca224c8344e550626a75453d75ca1e678
- SHA512 eea450ada26b2a9134ee6a86cc4c50e83842c08b1117fbec08f4708761f7fe49bf8e20c0536c55dd6938e625d91a430a7353b1ae6b592c5108cdde9f40195939
- SSDEEP 96:nL67x6CqOBzsQM/EuhEl6at6TH/EuhErKNueuhElYeuhErKNttz0ZEa6JhmChm1x:Ax6CVlM/EuhEdt6T/EuhErKNueuhEqe/
- TLSH
  T1AF919A56D00DCE56C4CCC73BA84CECA86206B8C74FD7919257C6EDD6EB87CAB58C9488
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral10 behavioral11
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT11).bat
- Size 4KB
- SHA256 5f8fd2375b2ef31c6e259a04d590ad7fa1772fbb78c61e948811d5490b5a4503
- MD5 9e9a1c784b4d35c6e9caa0dc1d64b7bd
- SHA1 ca0cd864dcf7984aa4f0c5c833012b18a4c3d776
- SHA512 303216a0041225c76a2cb5fd03c1c353c5b7693111b018fa5ddbfe751e9f0f04ecd2609664bb6cc8180b16b149ea9addb29ad5c112347bc377933f818829d0f8
- SSDEEP 96:nL67x6CqO7sQM/EuhEloYD8V4r8bH/EuhEnED8QjD8QeeuhElGeuhEnED8QjD8QW:Ax6CnlM/EuhERy4u/EuhEnED+euhEge9
- TLSH
  T126A1AC5AC00CDD1A81CDDB3FD858EC946107A8838FCBD18297C6EDD5EB878AA5CC9489
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral12 behavioral13
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT12).bat
- Size 4KB
- SHA256 ee3c40d5cbe3960d23d812d3982129dd420b549a003e190d3df3b9e6137aa8c8
- MD5 5c4b66a548346986eb50dd9bcb7f4f39
- SHA1 12c41f6f58e9f80bf30500dc221bfb39f6ae4726
- SHA512 128c2ea8f3d0f8612f6b1c592c1cc5d35f0419fc7f55dc6beb929c2f2d633a16e6e2cdaac7fdf5828803b91264f270e8262a9df4613b69b6df126893eb4aefba
- SSDEEP 96:nL67x6CqtQsQM/EuhElohBrD8VqTH/EuhENED8QjD8QeeuhElGeuhENED8QjD8QY:Ax6CvlM/EuhEYyqT/EuhENED+euhEgeL
- TLSH
  T144A1BD5AC00CDD1A90CDDB3FE85CEC985107A8878FC7D18297C6EDD5EB878AA5CC9489
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral14 behavioral15
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT13).bat
- Size 4KB
- SHA256 56553b809ea333cf0c9f0bad045aeea7c926ab284e05e211f129e14bafc61b57
- MD5 0b30dac1053e3077b7077b131d29e88c
- SHA1 207d877a7ce4d545364869c115c49393bcd4cb8c
- SHA512 ff1a8be0d8065b3f49a24b74163c43f868b1aa0e2d48ff43c1fdc6bbcc8184c093795e5b8e2bda8c277dccb1ae83b96a5367091895fcd7c603f04058a10c546e
- SSDEEP 96:nL67x6CqOkDsQM/EuhEloSD8VqTH/EuhEo+IHueuhElGeuhEo+IHttz0ZEeWhm22:Ax6C4DlM/EuhELyqT/EuhEo+IHueuhEf
- TLSH
  T1FBA1BA66D00CCE16D1CCDB3FA81CEC645207B8874FDB918257C6EDE5EB87D6A58CA488
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral16 behavioral17
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT14).bat
- Size 4KB
- SHA256 e71de7641c37aa32255ffe923bb6a5edd40298ded18deb04d92c5b1874365834
- MD5 9ada6f45dae12db4e3fdedafdc52ce5c
- SHA1 23c94ae4bc17e044e76ecde579304afbf1408a44
- SHA512 6646dff9c10a551418850792611104b2cc1dffb214395becb587c35ae032201ffd88305bf802097c5a0def773ed175f05cd82882004cce2867ec65a6936a3295
- SSDEEP 96:nL67x6CqOkDsQM/EuhEloSD8VqTH/EuhEo+6HueuhElGeuhEo+6Httz0ZEeWhm2m:Ax6C4DlM/EuhELyqT/EuhEo+6HueuhEn
- TLSH
  T143A1AC56C00CCE1AD1CCDB3FA80CECA85207B8870BD7919257C6EDE5EB87D6E58CA484
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral18 behavioral19
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT2).bat
- Size 3KB
- SHA256 468e507bcc2a9d1770864169107cdd5dbb43ebab3dc02b46eab46cf2d1c9a9dd
- MD5 8636ea3030c2755a12aeee98be50ec16
- SHA1 1bd1c369b5de0b75d6a69c507dc8071719778b41
- SHA512 2570318768f48a2827f469ea07ae45ab44efdda76641a9a7314fa4932d60a50eb7caa8629769dc2d6d9efac9d8a1b2fa4f56da1d30da2e57fa7eef377f53988b
- TLSH
  T12D819757D00DDE0604CDD73BEC48D8A8520698C78F97A0929B97EDD9EB87CAE5CCD488
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral20 behavioral21
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT3).bat
- Size 4KB
- SHA256 cb89e48c83be54125a5ff8f48d420bc72f963ec6556de899832e435f09121ba5
- MD5 4639d3d564e3b45030528ada518c6956
- SHA1 797e079f5cdc23b476dce03ff57dcd1f322c7f56
- SHA512 44edac10a542146ca7911fb6602d1cbdc298a79eb3d9fda170e099efa62c2f00eeb1d556a1633497676fd686b6a8c4cca1c626be6c07bf2a11e0a1e965a61a13
- SSDEEP 96:nL67x6CqMSsQM/EuhEl6XiCt3iKTH/EuhEtUACueuhElYeuhEtUACttz0ZEe7hmH:Ax6CQlM/EuhEqiCt3iKT/EuhEtUACue8
- TLSH
  T10FA1CB47C04DCE16D0CCD73BAC4CDC985206A8874FCB919257C6D9D6EB87CAA68CA485
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral22 behavioral23
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT4).bat
- Size 4KB
- SHA256 6e73a276b5fbc95dcb82e42b3ed716ba950ff89b1c26818732ce3822e2521d78
- MD5 a7bab64bc11b4f04c3a81e0caa23678c
- SHA1 e5bc3209d71d6e6a228b72dfb7f94de469a78f32
- SHA512 21e38b7760207d23b9870458f006c11719be85c2daac135c27044e54d78de06966f6e20dbe527eca0123a7324feee814b52a5cd6f2fd9ca915548a5c3b497807
- SSDEEP 96:nL67x6CqMAsQM/EuhEl6h8WCG+8WSH/EuhE28W4euhElYeuhE28W3tz0ZEa6Amrd:Ax6CSlM/EuhE5g/EuhEBeuhEqeuhEOz/
- TLSH
  T1B5A1AC57D04CCD1680CCD73BA859DC982247B8874BE6914257D6E8C5EBC3E9FA8CE4C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral24 behavioral25
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT5).bat
- Size 2KB
- SHA256 954ee7c996e15bf5fcd51a0abc75eb8a68dda35076a06c6584ca7fe151c5a586
- MD5 991aec0603dce74506e47591ca2af656
- SHA1 7e54d8160acaaa40289c8d5cf064b458056b3a58
- SHA512 3e3dbebc060c4d3112195110e2a22cd7273a93dd3f9714cf0fbc9008f0791ed9801b7bbf5186a73c33f0fd13afb53b9c2c9ee4a77ad3bcb857ca49a2f3ef624f
- TLSH
  T14251BD4BD00DDE0680CCD73BAC5CD8A4620698C75FD691925BC6ECE5FB8B9AF58CD488
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral26 behavioral27
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT6).bat
- Size 3KB
- SHA256 144825bbd8e19ad568b3e0ddaf72b4d2f6d6f2386242ac404996bfb8f476f43a
- MD5 05693fc5f2eb28e122ec97700665afb8
- SHA1 df1fc150dce578ade3f302d1c74da5690e278ed4
- SHA512 bbfe3b38111570842c728b853b1ccb752d3f35f9ec0d2dc3a3306c28048ebc598ff3b01b98fcd6c36c84379bf73c878b15a2c14ae20889ebec333e76919cdfd5
- TLSH
  T1A2819A97D00DDE0A04CDD73FEC49D8A4520698C78F9790925B86EDE5EB87CAE5CCD488
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral28 behavioral29
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT7).bat
- Size 3KB
- SHA256 9194551454e40880c07b61e97a23b6e650805ca986a84b50e49159ff5a68d050
- MD5 9309a210fc71de996608f9b7d49b18f2
- SHA1 6f3fdb1c0df33921a6eee3e0c1923060955629d5
- SHA512 00f1b33c58854976102f5d8d231b6b20bec73bbc9a492f73208fec7413e1f76f51439c2173fea7e9b518ed0183a4b78d37893f444176b5dad8effa6c9151d457
- TLSH
  T12581AA57D00DDE0650CDD73BEC48D8A8620798C79F9790929B86ECD9EB87CAE5CCD488
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral30 behavioral31
- Target
  zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT8).bat
- Size 3KB
- SHA256 59fbeab9205dd42b651605f80a7ba3e2f5320541c6e444a099749dc41807f935
- MD5 3c02ca4d5469b0aaed19f240c80322b0
- SHA1 15eae80b69637fc3bec5b4accea5bf44cb9d8da4
- SHA512 a9e7ec161a1d5dac9bcd31b44fc3c5293fc905b903677698d6393825063ed46239d026483d7a91d9fcdc8930696c4e89e343999c003092159bb5ba2057402d6a
- TLSH
  T19581BC57D04DCE1144CCC73BEC49D8A85206A4C74FAB91925BD2DCD6EB879AF68CE488
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Privilege Escalation

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Defense Evasion

Credential Access

Discovery

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32