85fcd21884369751838bf36698e2a6b93c65ca51f097b522b55c5e4cd49eeca8

Sharing

Copy URL Twitter E-mail

General

Target
真心20260425-1增量包.zip
Size 51.2MB
Sample261029-1qfp4stsct
SHA256 85fcd21884369751838bf36698e2a6b93c65ca51f097b522b55c5e4cd49eeca8
MD5 15daceaa3e28e3c307d28cecea734596
SHA1 35d0629d25602d5ff87d0c89c913652c41b152b2
SHA512 77d073704d4309e41675143bb96a1bbaf66f315a14bc8d818cc823a242160a8614e01ec7dd5c8a6603c0caa7d2d81a3c359167cdb0bbc0bc28be62321991b695
SSDEEP 1572864:SsmXR6gzHI6/nfRUmJ36Ab3sPH1zTETOTF8cGInUc:SF3zo6PJ716m3sPH1zTOIxGfc
TLSH
T1B0C73324451DD0B2EC3A5CBFB1801FB6D8D08AEAA4A7B9D13E51EC92C365FCD1E1E161
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  custom_spider.jar
- Size 1.9MB
- SHA256 1ae0d1a3f2e742d3186651e1fb3188c0db41513dfd13df847f4423e16353d175
- MD5 9f0f10fb162ccfa135349cfadaeb95c4
- SHA1 5fa7c8192306299e862d88eaa8b018c50bf71c70
- SHA512 f22399ac26fbdad493f43f85102b93b2c569d733f5d6f73c77fd8954a3fcc437b3b850ec57702a025a8b60e5e7e2c52db15e45bfed1c08cf67b41341d37f2cb3
- SSDEEP 49152:B+Mbqcshayg2sSBQRfrX5reZ2DcAq87PcRw8MPVRd4:B+MbqVHgkUfrcZsDT7PWw8kVRd4
- TLSH
  T1D795334A78829BE8E45ADAF670686E7251C85E270854A714FFAC717CC60B9870CF7CD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  lib/goProxy_arm64
- Size 5.2MB
- SHA256 3e030b54bb0723bbe8fc6f94208686615f7a70006365699153a31bb9f482f163
- MD5 55d4a5e6b55e3be99698eb92392772c1
- SHA1 3b934053069d8ae94c1f7b6f97ed413bc93f2f88
- SHA512 5d49e4f4481a9114a672367ceef63e9ea84dff730b739a0a181d05bfb019b87cb96ffd016b7e45283e960b14f937a2b35c6f1eca2c432b9bdc22277f8004bd90
- SSDEEP 98304:G7iZ2MtVm/7staKc0YWmk43oYfTmdsuxUCH2q:G+tvC7PKc0YWmT5Tmiq2q
- TLSH
  T1E64633774B332041A7699B3DE2890652EAE8E4BD40F48F99435FACE1E9728F477E0474
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  lib/goProxy_armV7
- Size 5.1MB
- SHA256 5c489f3782aa23fe0a4731d7b3e23b4dc110e25ddc1eecfecc40ccdeac5c71e8
- MD5 a52b5f76d80cb7bfa9d40c7e7642dacd
- SHA1 59839c0a6b9297f0ca9ae9747df8b21407a4a58b
- SHA512 1ccb20050a8abf828ce925792229d5ddd12cfe7f341286552c362d8b517819d469d75f9e743045af0f96782b7767b7ff0d940574ddca0ac96fcd30d756a2c22a
- SSDEEP 98304:XoGxeM+UgPbxEV/QFi1nKBymQ1HuAq4EWl0mJzmVmfhN6IgZ1gXtw8hMwF:JeDzxEUi1KVQvv0qmVmJEZaXt8wF
- TLSH
  T19B3633FABDF1190E57A8512EE29D7776C289DBB17FC05D05439AA4D086EB0BDE280DC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  lib/goProxy_linux
- Size 5.4MB
- SHA256 b1ee0d787c5b7f50b184274d2c4f4cc9fe2d153b528564a08ecd3de827fd6823
- MD5 76f959396006d65d60499b964de2d2df
- SHA1 1f980875de1436b310b0d8f2eb3722b597274e85
- SHA512 39bbe46c1ea7b1f7295946db5afa7b201b1eba84431528dc8e67b6aa0f2db249d8676580c4136100681df2de250a441a4c05453142086d3d9eab0d855faff5c4
- SSDEEP 98304:2162qNmrJ3aDsRU89AlqQNgxbUVPnbSTV2W8PTXTDN4RAqpeDF:jNmrJqMU89Apo0ckL+RfpeZ
- TLSH
  T1D04633E63AF70AB359BE91BB36B190D50492133E486454038195E7E252FDF83B3B58CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  lib/lf_live10_min-output.js
- Size 237KB
- SHA256 dc3418c24b2590e755597df6766fc8323f4342f7b09bde12eb60db03e160d2ed
- MD5 2d77041713667d455ae2bb69323e9807
- SHA1 aeb6aff9b24bee2f1d8c64fe5a566e2d3d0b1ffe
- SHA512 379738fdf68ca8a2a739078fa495e404300bbe4d6622051081a8ec7b3b7f7a4af588d2b78605dd2c038ba9c50180335c04eb058a1ccb6e3d624e1ea2a8f453e6
- SSDEEP 6144:bVlxWmnnO0k915BvIunM56cMFi2oX/oPdlwLJYF1Jv0d+uMc2osO:BlxWaCXIunMPMFjuoV22osO
- TLSH
  T10834618177C5BC42174B5B76731BB1F1E92A5DE9AA88088EF214BC94F0ED613FAD0670
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  lib/sing-box-arm64
- Size 8.9MB
- SHA256 5dccac999a38863d295b2169df3b95edb2fc08a25391e5234d85ee5864871378
- MD5 c53d2b31cb662aea0b2b102ed02a27ce
- SHA1 5691cc9922a2a279987da61d2cd154e04f9f5d36
- SHA512 10306c3c66ebf4d2c74f0488089f4d735314963dad3ae3bd6884260177badba8f406a6e09ddf21fba52e5e41fcc31bbac6ec88aaa8964395959ad51f76010ca7
- SSDEEP 196608:DzhTHVPHGAeQqjNXJQMuRh7yYIXrRAqvKS/CPJO+441DrYR9a6PK:3h1XwBX3subXr2qEJOf4N2PK
- TLSH
  T1329633CFC6273A9526C3C85767DCA16EF70DF318A2842D2E381C4628E17293B616FD65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  lib/sing-box-armV7
- Size 8.6MB
- SHA256 d5f5713bf9586705a1eb26bc5f8732da0a137e2d4544a4ade7ebc32cf5c81016
- MD5 efc8b36b5bf76883539d31929443aa15
- SHA1 e2d8812efdbb32f9b2228f616ff4d3d227602ebd
- SHA512 ec7090df8dd31579c2bff7c43ae23af4bcdb5ead3b4db3fc1624c292aa85f3374134e6799abeefa809cf8435955a71c1ef4f4cdfe02ecea65489bfb2bdb3bcde
- SSDEEP 196608:j/oB1XynA4eujaT7LwwHSdb8nXMmoXzrBYh:j2wAX6rwkYh
- TLSH
  T1139633CBE9C5738A3072484DC29D8A9DA6E37A01D53CDC1B6B31A7F0D5C85F252972AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  lib/sing-box-linux
- Size 9.9MB
- SHA256 dffa7f62df6202fc1f21fa06ed936f85294db08dd63b5190c72b71c068a0edea
- MD5 6b079d4ba9468ae45ce28fffd2cedc77
- SHA1 4867c23a464fc8f9ff513a43b8900654d561eee1
- SHA512 6057a7895afed34815b0b17b93455f823dcdc51b0707cf07fe060b1bd64bc932b32c62afe47fe4faa752fb28f145450fbbefe18a405cf7e54f873b2c2201b620
- SSDEEP 196608:l1XsEzkoPnFJXE3EpvRwiga3xDc9aVvCIb1eYMNzpNwNdPM:vXzHPnbXE3o7sdIb1e91V
- TLSH
  T141A6338307C6B7EEA3E35263E5981745FD2DE33680685995BCA97310F7FA67800192EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  lib/tgsou-go-linux-amd64
- Size 2.7MB
- SHA256 7fdd6626e8b1dfabe6f88dd854de6ac1e9cc7a02e78a4603026feb3190f6c6aa
- MD5 d86cbc9516b3eb4ce56109c34ddf9cef
- SHA1 13ccae7cebd2f5a482d9f39946e8ef69c6c5e887
- SHA512 54afd9dd8699ffcf178d4f54303fa5d7548862663dcd0bfee8855a5e5e2d7c63d5fb88200afdeefecdcbc16d5dd6e94dc08beef4f4cb66db0d5cbf5b3953064a
- SSDEEP 49152:Y+ZplLZnGVg6pc9k7i3KflQG5BKM/0NnpyyZ6OVAg8GO6h0Fzho0K43t9MCvIo:hLZGG6pcS76cQG5Ia02yZ1ABGO6ShA4h
- TLSH
  T13DD53358F6288A60C03D30BD2D8B4C958B71DD4264E25D6AFCDB61E5BA2DF883F5C5E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  lib/tgsou-go-linux-arm
- Size 2.3MB
- SHA256 1ed260f151f5a5512047946a9c034e4845849a390331074f8af23c63ac8342d0
- MD5 e506240b141dfcfa89db3a8c8e0f377f
- SHA1 cdc17d918a2133a7155eb04285f1a7fbd0e58925
- SHA512 32f1013db1cbe66663335c95145f61d9a39b9b7e765ea1f0989783623326f5f2a734ab9cf7aeb27abecde4c523ec2daac844aad2ee529509b9453f30158890f7
- SSDEEP 49152:SJiaaTw2muAV/gHdqO2IJ6FpG6CMNPBrI8KIYFFrtZ1Wc8SIJNx1hxv:SJiaaTw2eV/gCFdzbrI8AFGSIJNNN
- TLSH
  T104B533C0DAE0F91CFF03D63FE9C4A6B6E5A08AD5673761F0352A2446A3E5ED41A0B435
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  lib/tgsou-go-linux-arm64
- Size 2.4MB
- SHA256 12dbd37fc3e47599eb914ba82d3c1aa581bd81a4bbcaf924f59ff80c2a18d744
- MD5 0bda8135458cc963b341149b3fe05cc8
- SHA1 04b1d523e4a4321c00888a59422acc98b5bc9834
- SHA512 e44302b2ab075305c204554a4c2517eb0cffd4341fd3d3c181ca5d81c7bd28d7c882d2ef5d0639fc58d5f202e3f111d761ad9b674c100495753e0c81df5a9cd6
- SSDEEP 49152:TJV2LHEU2cOWHUJNu938XCLCbmUKi7JWx+hVSx/nXGMUElapDf9p5uOJjc/:T6oUoWHUJhCXC5SxPXmElaw
- TLSH
  T16AB5334DE873B473FDB9098A70806EE5CCCD334934226296B88164F253D4B5EBB5A5CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22