d93306f40f65205ec235ccbbdd6d037c69471b6c273382623468c7438c1e056b

Sharing

Copy URL Twitter E-mail

General

Target
Формы.zip
Size 3.1MB
Sample261029-a8acyahh62
SHA256 d93306f40f65205ec235ccbbdd6d037c69471b6c273382623468c7438c1e056b
MD5 c58b3488c2971233674c177d8b7213e0
SHA1 2fc63c07402219621930908d9357142593de2ea0
SHA512 961ee73afe19fccec3f1872435ee616637a25b5972a004e81381eb1ed90454658133e1e63d77c45f08081a78ad59cb9670b24a6a3a0ad5c84ff981b53ef85db3
SSDEEP 49152:XwHqoLWWyDa8y6blMASs59IxHLLTOuSqZDIM084D4SPhp8iqkV0K33bLvJqlg/DL:AKqWWyqyMllPTOUPkZhJNO0yusm
TLSH
T1A9E53356DB4E16B7CD3CEA36A82CFBA1041CCD9A764B18582B522D211B3739BDF34361
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  Формы/MySqlPractice/Form1.cs
- Size 6KB
- SHA256 3e02f3e32d13b5f7caf8a26a1d33fd7fc17dd2673a4e03d546298efd574ed20f
- MD5 f6ea7e4afabfa32db7508635acd5ddfe
- SHA1 0284b3f6c9f2e48c36d0b99baa4811b8521a9beb
- SHA512 bc4bd0016b7522223b6fa2ba3a7b90c5e8185a58680ab8b5c426a57e02ea5c56cc3d6d2d401c8ec4cbd073e6134afe2617c3e0a3f35f7d784824c5845566d74a
- SSDEEP 192:wdzL7Eqm3I7+TSSC7p8m9HAR83i7XiciSC8HbvyL:wdzL7Edc5XSbG
- TLSH
  T1ECE1409956F76A4801132039EFDBB90026B1928F138DAC30BFBC80998F554949FB67DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/BouncyCastle.Crypto.dll
- Size 3.2MB
- SHA256 f42b8609854d80d7f81f276340504aa5e82bbe4d73d05080fef1fcca2444b4d5
- MD5 9fe1a31fdc7b67f5480e936d359ef6c3
- SHA1 576269a42c0991e90f5e83c8205eb808d7b4d3ba
- SHA512 7b7cae9fc0afccee7533971f97af11e5dedb54775bbfe45ad94b82bfda6122e65fb378bd27b2390bfe45af89438dbb550171f6939febcf742034a405b49339a7
- SSDEEP 49152:C50b59Aj1ZLCpTT2TzAOeJ+KaGxHIkMNqo5wW0DlI6eujzc3:y0b3AjaFZE5WIR3
- TLSH
  T196E56C1437F81E27D1AB97B7D1B1411293F0FC5AB363EB5B698163BE4C22B505C822A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/Google.Protobuf.dll
- Size 399KB
- SHA256 7950bf1bd9a8cbf6b24331eba3aba6104d4583876e7c012752b88f4807addca8
- MD5 af48b45fbde196e634e4a3715a6b112b
- SHA1 f9271e953f9bc04b794f6048490677e75b226c39
- SHA512 4b3f7775884a0773f1a0bfacf6736d5bb55c262b37233c30bb74c4a402630887dbcfc4b6f5fe5a35c36e268bb30f94a18d80f5f2e12f8de751bee2ede16936e5
- SSDEEP 6144:Qvkn20mk+FJmgZT+eumdG+E5Ms0ibR9wFg0I8w9P5kCGH8iWeASey:QvJk+nXfuMs08wLcSrMeAFy
- TLSH
  T126943AA02AEC173CEBBF6732E8B4941557F1FC02B199D7AE5580A5E64D63740AC8027F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/K4os.Compression.LZ4.Streams.dll
- Size 78KB
- SHA256 2e1a301a11aa3a4f317200babdb3c104be32cd89866ef65e752684580aa54704
- MD5 887e6c173b790ca996187ea9bc461c07
- SHA1 83da0b7314c4aab5bf9e3f4fc3fe4925bbcb78e7
- SHA512 6aae98688a1b66b781bff04b1a0f1299c5853f8081a4c20118742afe82e396867561228fa945f063e83c1543ec352ca50c83fbd659c6f4f5f098eec2d418742c
- SSDEEP 1536:7zqNxziSb8+kDiXsqhnclfY/bR9OLO6cpPs2f:7zqziSb8+HXsqhncpY/bRYLO6cpPh
- TLSH
  T112732910A7999F33E69F47BFF4A0436A8BB5C246F816E38E4DCCD4E924933546C1039A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/K4os.Compression.LZ4.dll
- Size 65KB
- SHA256 b9c9e23536276444041907511e9c11d1ee24bf6319b1ac9383e754bfd7d4a690
- MD5 8c0908b1e340e389b1c2ff1cfa133412
- SHA1 d4163886de09a9793ed898ae5b6ace0cc3c4863c
- SHA512 b492f6f0061885ced97eb080ae4435a240344ea0952769b9ea59ee4b73b009160a263ace104a16516b98a837c44467cad0bcfa940466e1f847428dbcea17059b
- SSDEEP 1536:o29b0bPVQzNrgWQ7HvQUa/cnX148G3VsbZSg5qh64b:oyb0bPVYKj7H4n/IGebMg5q9
- TLSH
  T1E2535CA8A7EDDB37C62D42F9606A40C6C632D326E293DB177AE8443129873DC46613D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/K4os.Hash.xxHash.dll
- Size 13KB
- SHA256 4d55692506f0dd1488420b36211b25129f3346033e7cd6224c48520e07acf446
- MD5 2550af87f9a5f76d61366b4d9e092018
- SHA1 8325689e8726f10337c59cdfe2d3f0b61d518c7b
- SHA512 f3f90e2c096853360b5017144deeacac31f02103ecd29874435285ff406998d20634fb6e061021b261041608d19f104ebe9f21a49ef0553090aaabd4ed2f1904
- SSDEEP 192:q40yHDQbg+d5zaAkqA5wu4AAYiUalSW50dAheVxS4QBlUic1shbBUIbC6AE/sWM:BHDQ7Yuu7AYiUaXV4QXzWsXpCvWM
- TLSH
  T16052F8168B988233C9A70E76DC6147274235F2259D128329B2DCE0B56C073D65BF2BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/Microsoft.Bcl.AsyncInterfaces.dll
- Size 18KB
- SHA256 299ddf949035e52e4758732c202029e2c89a16174d83904bef0cc04205e097b7
- MD5 63ba9decb458af533852ac81baaedc0d
- SHA1 9c962de551c9a894001d410a23e0336192c6cbaa
- SHA512 058b148a90eaf23398ffb384175fb41abc4f7b71ae68811acda2841324dc83e7138c63d4303b86ea1b4c7c8abe497cc2d8a987dd4f8d9cbe7868464a0fc96895
- SSDEEP 384:0VZMofhkB49ODDquWeq/WsXiXvHRN7LFa2vH3rPR9zZ2ADb:0YekBOFXofL33l9zHb
- TLSH
  T116825C5197AC8203CDA73FB0A675D6523E39BBC26C22D57E4589F10A0CA3781DB34B39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/MySql.Data.dll
- Size 1.1MB
- SHA256 ccd78d36ba4f103806dad2a99535c0c0b023dd46af5f7e03050ab96797eb7d2d
- MD5 96ee42c749d6f3e80006986b6149d3ff
- SHA1 340bc19019f3dfc429c4d59bfd4c73c5ee6a5365
- SHA512 ba5612c2b3e0025b2343c372f220c5c0c6834dacdc21140c310557bed22492358295106ae025dc1b8efa33272e96cc7cc182a611211488cc15201efba3a3c2ed
- SSDEEP 12288:OpuVY2CPOhbLzcZs9kYyLe6YMAyJajB1fK3lG77tq0jfwJReMF2chcP7L:YuV2POhbLzb8LmM/s97tq0jfuR/nw7
- TLSH
  T194458D2077F8DA39E1EF5379E966C6199BF2F046B612DB1FA508B28A3C117819D00377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/MySqlPractice.dll
- Size 17KB
- SHA256 6076ef2fc995397f902f0eda0168c6ef42708d2083f7e34f51e458834640ef72
- MD5 10d9b2c4a24ed5136bbec3f9170ed1ad
- SHA1 b03ee21d6c457fbbb698040ce6fa4c556ef0b399
- SHA512 ddd2a30194574337e90b58a5653d9c3193a460c4c0fbec8788cbb3998c9f386daa7a742364360128d7091ea6462078151005d03405ab219ac6ff327105e2cd1b
- SSDEEP 384:Z8LcrPibByWnALmCS6m3wsmsqkfkRracD3EI7c9:ZXrMYWALmCSHuOv
- TLSH
  T17582184463FCA723E87F17BC9CAA81C307F07A39B211EE1D1E8924CA5963B91465235B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/MySqlPractice.exe
- Size 123KB
- SHA256 9cdceea01e8b3a6a9387d2c0dc29f1ea83bf4bcef7367a258cf076a4d08268a7
- MD5 a71e799b1c220ed098035566aabb5a5b
- SHA1 304077ca77d87100e2be3923eeb30ecf52775dca
- SHA512 aceecfff10720baa2a3d62b9749260a180b8b7c90f0bcf0abf1dc0c1ea0452fb441ed86e6089e8eae069a611bf883b402d8b852375aea496941b4f01e30a5e7c
- SSDEEP 3072:CHl0xIHQmEb9liHk29+E8Ufjz1BNOG/QJpXvjxtkt:R9OwG/QbVtk
- TLSH
  T101C33A0BB3B901F8E1B7A23885A24646E7767C664771E7DF03A0426A1FA37D0DE79311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/System.IO.Pipelines.dll
- Size 78KB
- SHA256 bea2c678dd3e0e0ebaa4a977c40b48f02ae25bcc247d9f96f43d2b44dd31be45
- MD5 1f5aa231dcc6153b89196862b5e05575
- SHA1 c8a88d2c305626ceefa6d85c4921b7793e59fe26
- SHA512 eab74a4b37a211474e06b95570b9bd005eded8b540bb18f7affe6e04e8d833a57b40efe04d31b62a001873a4e14e4bd99260f2166c44b67a307a9332fad94199
- SSDEEP 1536:LTS5YjSH5FYGJDCeEnCKqQ4C5h8Tfe4bgN0x3RxevmAWPJCCfPD/QxXzI:/S5xgHh2fe4bgN0x3RxevmAWhNfPD/0M
- TLSH
  T114736C2957AD4B27FB8F5ABDE1A081130FB6D6117623E74E984CF8AD1CC378042152BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/System.Runtime.CompilerServices.Unsafe.dll
- Size 17KB
- SHA256 a533a809b4bb8b0272c7338fa2d455eaa75eb38d8a094e9c3a6baf7e626f5c8f
- MD5 6ea728751192bbaf25403424fd5634fe
- SHA1 9b076e5f2d3869e3abf5422055ce8257255f1618
- SHA512 774b940429a1f45ba2c7851f3ff105d112cb6f60c905b2969da685fc0eefa59a127ae15b46620b73c836fef194a10eb98e11e25e44631c85b081dfb99d3fe5fe
- SSDEEP 192:n7dT9kMCwisyGkbUbbmVrxpBWB2WDWOL8/pCuPHnhWgN7aYWKVOCqqnajqVZ:AMC9FgbbWpBWB2WT/uPHRN79V+luVZ
- TLSH
  T1F5826B50CBD80247FD636B3456ACD543FD3CA3961D12A72A3985F57A1CC6BC9AE20A38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/System.Text.Encodings.Web.dll
- Size 77KB
- SHA256 fe3005585ca1521d5a3d37ba30ddf423471b6aa12220367a35755559613fdf39
- MD5 2c5a16695dac76f8e31a7d2b9e4db5b1
- SHA1 68e46b870be3e8f88500c9de880ef2c8150fa4fe
- SHA512 9779ef8d33841bfd40bbfaf3ff62784281e2fe9d96fc3c149bbc1933b9a9c6921a971bf23564decec2d3c11f54c3f1d16e10594d190579554cdb9ec62ec1afb1
- SSDEEP 1536:SOO7OOOc2yIDmBkKQh3rtntGPyabM1ox46nG/ocQRin72Ho0V9zz4u:ByMmXQh3rqPXbC6nG/ojRiaHV9zx
- TLSH
  T1E9735C11A785C71DC75E46315AE08165DBF4AF6B1323E78A1454B82E2B737C9B30E2E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/System.Text.Json.dll
- Size 557KB
- SHA256 fbb131786485333cb80109f2ba1cfd1e5ed082d33d990a46a46eb24002d44aa1
- MD5 a71ac6a676b6f733167e2e8e3ca83646
- SHA1 1ba95750a1650643b9e61fe7df7cca5b5950ecc1
- SHA512 c294cb4cce26354f7704d0b6fbef486e63dcbb9efd87e63dc26e3c2495700364783cbaffe9e2a3aca6ce886bcea62ababd9262965882f54bcef245579c3b3b88
- SSDEEP 6144:xhsmjsy0uiVj6xn65cBvEWSQ6C0hPqcJQBVrhKtt7xk/KVbk0F+LfPk739LbNjLA:xhsmBiVjsUXgbAtt7y/K+Z7Pk79Leq2
- TLSH
  T157C44B1073E8AA2BE6EE4774A0344005CBB6FA5AF77BE74E100895ED2C937819D117B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/runtimes/win-x64/native/comerr64.dll
- Size 15KB
- SHA256 cc576c5f64c98c757453b24bc1bbcd275c745dd8462085d20f9def513bc2c983
- MD5 6dd6db53f77a46b6bc6a6b5fece9ca2d
- SHA1 301a17cfaef27ceccb2e3936b3f210d858b6a9d7
- SHA512 cd1d9e4dba90c589fe1cc254640bb6e709023b6187c26ec842b35ebf637d6a94734fe96740a5fe5d1caa9d2bd5b708ef2ba922b9fb8f337aa2303b354379f5f5
- SSDEEP 384:Vmrdz83BZcIxnYCkGvD/Bp37BPPFo8NgzzDT:4dI2Gb371dkT
- TLSH
  T12B62B44677D062E5E6B6567AA5B3233BF8713960D77187CF0A00644A0B32AD0E93DF6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  Формы/MySqlPractice/bin/Debug/net5.0-windows/runtimes/win-x64/native/gssapi64.dll
- Size 381KB
- SHA256 e80cefcd9357eaf4fc09ee556f1044937ca3113ac0d31164d71af66a8f52ef0f
- MD5 f41ccfa9f196aaa2a6f1b9dcdbabb11c
- SHA1 34f60dcb945d9e8a61200da561ce1b37ff8756f0
- SHA512 9baf38d07456fa4e6c5996d668996f4e49825a9d0f38aeca63b00e15662215e36fba5886674de8fe772e94f46cdb6b82ed5a546678fa076dd363daf94339768b
- SSDEEP 3072:eOmVGFWfzUCutQbZuwlLZx8i6/j+BQcIYnRxtsEwTLum/N2DHXbVFqn809d7EolM:eOpMICut+5ZxfASxt0qMN2j/SEZ/
- TLSH
  T132847247FAB721E9E9F6D13486637237FC71789587349B8796145A060B32BB0EA3CB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32