877fe5cc0a4cd534b550b7e6090d84702947e61279f5a5970d3e1fd93d647ea8

Sharing

Copy URL Twitter E-mail

General

Target
MarkdownMonsterPortable.zip
Size 23.5MB
Sample261029-zn2dcsf18m
SHA256 877fe5cc0a4cd534b550b7e6090d84702947e61279f5a5970d3e1fd93d647ea8
MD5 39bdb994c1308cf2fb52c1db4d4914fc
SHA1 a0f5713f7e174cf0248f8fd84e7ef93e74aef982
SHA512 f1e5449b065d5232d039a5cf3f0f2c891d3eafece3e796665359c3c15223ec11a4447cbcc374bfea25be56471f5decc31c426c050299e9da86b44ab227ff0f33
SSDEEP 393216:skq5d9C/WrIrudjZc2l4MGyOM3AVBi0jEaC0WXWkuldZlRXX6GSWjXuh7bpN914G:skEvKvCdy2zGyx330jE8WX0ff1hTUb/f
TLSH
T1814733D5F120DB02D1EEDB3389A9E21C656111B9FC53D209BAD420EA6903CC16FAFD5E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  Addins/ScreenCapture/ScreenCaptureAddin.dll
- Size 62KB
- SHA256 b4c39b62b0dcbf8979fed48a7e8e662ae785949a9e0057333820106c6a2c38b4
- MD5 de763f5ba6c21c00b09126bc11cd18f3
- SHA1 cf008bb1cc802128f5019d8a77b70a62e7410d02
- SHA512 39995c090fb1487c589e72d34ae36f1e435d4a25050eb49c9e7e128c60468c19f0ad3b01a561c23f984c19bc1e4dd9ccc2104c8b119505aa17090a90d2fbdcc9
- SSDEEP 1536:1tDIFA4gTZOEqQGCKG7HNCa6ezlovmLtvkY:XIFGxXP8ezx
- TLSH
  T1BF536BA677BC862AC6BF07F960B282028F72A50B7751DBDD0DD8649C6C9375243127E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Addins/Snippets/SnippetsAddin.dll
- Size 54KB
- SHA256 f081e9d82b73bf329d1b2e76fe2e06977e0ed5aec01bb854b07eb8c0749b82dd
- MD5 1f33490bdfb04bc573f82b17df8bcc4a
- SHA1 3bd7e99d526a91701cf0b1e3afe9d0402f708487
- SHA512 dd4324ab86c5a624b96edbe3b58821eb85fcfdc8aad3b197e7e9606caa595e6a4e63b91cb2d15378641a414d228ae0668f6b986923995f5c0785b39394482638
- SSDEEP 1536:wWGr20lqqEoooooooooooF1CVgZFn3+zyjEs32JXFkefGJBVVH:irFqqEoooooooooooF12gZFnuzyjEs3n
- TLSH
  T185432B2173BC877AC7FE4B71EC22111A0677B5663532CA6D0A8DB88C4AB77404631BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Addins/Snippets/System.Web.Razor.dll
- Size 257KB
- SHA256 691fffbad1090021127637b9366ea654ac3541e73c4b0329d07ba6eed34809be
- MD5 d0b59e211fa3df654ab803525c65ec38
- SHA1 1c9c9cbc930ef78867e28d04c69c6b9ea790afd7
- SHA512 17f49149e3f3321672d600d72d9885d6403aaa167cd50d83be6044ac112c40c29bcc7a6bf58bf2f9f53d34b5c6d727b68a913bfce86ff9ed99f3ef7c466b7b71
- SSDEEP 3072:OtIMQM+iLUepBNyQki7zbGx2w1vp3EKt0wnZFwE3o6ia5ki0R0KRXjU4JZ51pPp9:WSS7+5lEg4EMa5kdR00zU4fXycAo
- TLSH
  T155446C8063F8073BFAAF4771F479102986F9F58AB9C5DF6C9C4474EA2923744A912633
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Addins/Snippets/Westwind.RazorHosting.dll
- Size 50KB
- SHA256 d4758d5c4f1bfbc45b8db421f0eeffd53e5eb76f3b554dc2fcd6751dbbc6512d
- MD5 31d9a418064491228c01bfea9f0b34c5
- SHA1 d0fcc86639e39cd25b0bf3a3f9a6a6640afdcef9
- SHA512 919fbca1a26374f632969d03698c07babeaea6669d70e7349d266ddf9d1ce996812ba8f0444a18249a57d1a8a803f6ad546c74fc636bfb68b864bbd9e32c154d
- SSDEEP 768:kMIbLCWftLwDX+5Cco8v/iBPuMQJBVQ3cGJ0qdoehyGjmzYlvyiEh:kvwz+3o8ygJBdGJ0RNGjmclvyi
- TLSH
  T1C2335C2A23F88F1ACBBF0BF5B4B0511041B3EF067551DAEA9DD4A8DE6D633401621AE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Addins/WebViewPreviewer/Microsoft.Web.WebView2.Core.dll
- Size 169KB
- SHA256 5a520d2875850b09db854a60b4551a780fb6501418a2274ba3433395174a6d4f
- MD5 ea3dc338e355edcbb2df3a622bfbd7be
- SHA1 cb7742991072bba2eceedb21a2ce92f2286b6ee2
- SHA512 b6132c60cc6b7189daa7a5cdc934c29547d7325809396dde119ba550b3d6703fd2298242b107a27b6e5fa171b1a0ecadecdb777837c4daf3037f4ef593880ec1
- SSDEEP 3072:PfpBJJwXktiv6INek9pRFCepM1SvLgQsPPkX/4WHktW+6ZUq3Wjfn0adkwtx0Zrd:prI5ek9pRFCepM1SvLgQsPPkX/tHktWh
- TLSH
  T1F204B61627FD462DF9F76FB8A47012644B7AFC9BB935D74E0284116E0EB2B909860373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Addins/WebViewPreviewer/Microsoft.Web.WebView2.Wpf.dll
- Size 31KB
- SHA256 f6863577f74c889063c644aa467309d0ae8c43655f020fc52e87e6e3a2e45a05
- MD5 edd4c76c0b1e03912679cce29a995711
- SHA1 ab93c4232b28fd6cda9aace668b01aa1d7c6925e
- SHA512 9aeee0269bf7498c1967fb76ff1199affdb197e2c60d959b6596c19e40248f4fcaef886e625f0c54cd6e61345c50fdbc2581b1f48a8cbe77f667fa612c3ed1ef
- SSDEEP 768:cYFNXCMVumQ2a8CDPLryER05O4JVrcYrtUBDkwh/Ka5/Bi/W+v4bwzTNC52Ko:cY7XCMVPa8CDPLryER05O4JVrcYrtUBc
- TLSH
  T178E25B9683BC8927DBEF6E78A1B1D2461A74F3833860E7C509C9A5E51DA33E115403BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Addins/WebViewPreviewer/WebViewPreviewerAddin.dll
- Size 48KB
- SHA256 54d3ef62f280c4c27efda51c2c488b6e0bff12c6202d3c7489c1763df1208d82
- MD5 1cd23106c479676829e2a62b06e1268d
- SHA1 8cd57257e7b7e214ec57be7dc11ea43c73527ed7
- SHA512 2e36fb49b47a32e961ac3f06fbdef4c0aeba467a084276f14e5b4189ca0e3fec66eed1373774ac3af6b96811b94f2cad2a46947b87c28d3f33f84505e6931bb8
- SSDEEP 768:9CJLo5SJGAfopPM2x2sJ6Z0J1fmyC0ef725FZuv8Kb3F2:9CJnBf5sJ6Zy1fmyBi8c8Kb12
- TLSH
  T115234B4193AC8423DDEF2F7EBDF1979206F0BA4775A1EA4D8D8C609C08B738199147B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Addins/WebViewPreviewer/x64/WebView2Loader.dll
- Size 132KB
- SHA256 6db06648a749eba26d859fad4d4e2625c28b8c60e8770bc76c7ea445424543f5
- MD5 3c103f2ff8bda5528b3da3cbaabcc241
- SHA1 961c9a250d007dead806bf058e795b1d7be3c416
- SHA512 e9530aabfb34303530437630dc4bf97b3e10fd86a4771b6731ada2c2d457942eb1d6d16e1f91b781116456241b77fff365890e261d5d20b1d5c32c39e06e92a2
- SSDEEP 3072:ygMrTPTNy56J4JQSfB6yRkkGvaYhfls6DREtfw6aQ5O:y/PTQ6Ga+BtakGvVEtCL
- TLSH
  T1DDD35B5773A5407BE1678174C4A34A06EB76B8511BA0DBDF07A442691F63BE0AE3DF30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Addins/WebViewPreviewer/x86/WebView2Loader.dll
- Size 107KB
- SHA256 77a2a3097c0af6e884d2f7643dfe38094453309dd2433c33730fca10a0477411
- MD5 0fc6f5b0b3babdf352024844d2a756d5
- SHA1 1b58e7c0ff1d1cd83d9aed80c8d75d8bc2b163e8
- SHA512 81942fe24fdb0977ffc4e19046af49cdb3cfd4660d75a4e8f5a5db399275c9641a2615bf01c94b74fed044730144b0969160a2eaccf274ee4aae6c595e5abe15
- SSDEEP 3072:ulzhJmad5M+ekPfJFVwKrSDnuP7HCt+/NyIDfEtPsn/j481+y:ulzqaHM+eCTrSDuP7ZbEtUnr51n
- TLSH
  T166B36B5075D0C071E6AE193D08B0EA656B3F7A60EF709DEB675516AE4E303C0DE34A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Addins/Weblog/CookComputing.XmlRpcV2.dll
- Size 120KB
- SHA256 9cb43419715a694a60dec4c02737e366be6e29b69cab0f0d231aa571df4175ef
- MD5 0ebebef09b0e740261024c5b290f5e64
- SHA1 0af0b22b45c76c4cb86c3466dce3d771ba83ce12
- SHA512 3a4c1bf594d0f157fafdf9771a83072cca83d31c5cc2813877b6f0974f8b1ddeae460acd181e387b4125a869768652ba35d010ce30e162acdc0079269c95fd8e
- SSDEEP 1536:SrLBqmAtoKDKVwzCz9nHGyPbp0U96gxi5EhPOymuDFyhxqcvgI:0dqhtrDKVwzChnHGyDpD2gTIhxqcvgI
- TLSH
  T1D0C32A2427FC8B3BD3AE57BDE8B1066007B0E5127267FB4A9D48A4AD2C677507912373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Addins/Weblog/WeblogAddin.dll
- Size 173KB
- SHA256 faf8ca5a3e16f5037e5cbab597e845c419dea21c7534d4fd14abfe18b5f11a5a
- MD5 1bde6b36989dbd8cfa62c957e90f4b00
- SHA1 06925e13da36921769cbabf53f93a96b35e52ac4
- SHA512 845d7209661c3ff9d345885f7da4e674674c38e2efc9f358400359caf18d2cba7f344a52946f85c6bfedf9088ebd396c33eda7e257767970aedd397c3a5c98d9
- SSDEEP 3072:afB4xDJSZGrekEAG5A22uJWwwMg1F7+sZSEvUsLgJS:DWGrekEAmA22uVQ+sZSEvU6+
- TLSH
  T132047D7753FC4269E2BF477DA42601A447F2E68D312ADBB99E8478CD1C223878411BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Addins/Weblog/YamlDotNet.dll
- Size 215KB
- SHA256 0ef4f8ab2ee8c446b68fd97acbbc70b1a1407944b5b1bd0d2fc145ae2c90f946
- MD5 62e8f7093c2ca62ef6100554b18c7eb8
- SHA1 15ff19e9e4dcb5181393bc0ee7286c892f6b9c95
- SHA512 2733cecca26a857e2432e8b231f59da32682b5ff68f74ea33fffb814573b5b95a1f40e708c869c71ef92219331cd6517f5de51aad8238886aeba74df4ea6479c
- SSDEEP 3072:r5A7BlM5V1LubmUjCb03pPM/4Nkf1fBFKDuhVhdVnnqD8iI0h11NJCAaRt:QliKzufBUD2ns1
- TLSH
  T1B124180163FC4726EAEF67B9E87455044BF6F91BF4BADB8D488494E91C1BB018B113A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  ControlzEx.dll
- Size 244KB
- SHA256 f15d89d9720eedb94c09b1db32ca6a514e9eff2906da91396ffd7f877714911e
- MD5 37dbeb3e804d61cefed67d1a60dde873
- SHA1 31fb981cc429cd24066363160e49c85fd74df8db
- SHA512 7279e2354a9e1a583098bc9f6ff9ec05bb2b526ca151265d4c8c2bb42edd15b3d157425bc76e01b9f0e03cb1c87cb46bc94f9a1f47dc2a79daee784d6122f3fa
- SSDEEP 6144:M6bRKhjsomR8PpY82VG7gP2rxp+7vVNviPF1WANK+5/:M6Yye9
- TLSH
  T1BB349F2533E88A2AC5FF077AA4F041148771FE56E7A7DF4E19C466BA4C93702AA403D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Dragablz.dll
- Size 233KB
- SHA256 6c5724efe19f5945143626a8270c9c3a188d4886eeaca083c57c742a985c7338
- MD5 5a9583a7bed76b2e94091f9b74716f68
- SHA1 60552dc4ed629b32a7c0e7b31406a21829bdc38e
- SHA512 8ab70fd60a27a80e43a270a401e8772833ad0a11ade1ea13483b37b1a02dbb70679bbe200fceca632ee1ba8df66a95a51a2fe65671eb3ae596682d3e1ee1c0d5
- SSDEEP 6144:fTuK/5J3BPYcKHJv8ahfgfkMMafGfCfDf2fE:fKKhP+Dhfgf7fGfCfDf2f
- TLSH
  T123346D4033700775C6BF8BB5EA615528EA30E4D2F262D74539C92EED2CD37908A653BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Editor/editor-helpers.js
- Size 1KB
- SHA256 0cbdf18b6dc165f0a7a57b8264893c1914fd13c6c8f22c7addaadc88cc3448dc
- MD5 e437f97eb6d8b83c85f4c7e3eac2d348
- SHA1 700d04bb038b32751cce23f5bc2b7c4dd6e21666
- SHA512 2c7a93b24e9490b442bee59e485f198624ce9e3aa9df38d73467ddb695a5f8975253bb3f96e1a07f251f812adefecac61694bc360471990f1ade310fc51f8473
- TLSH
  T1E441BDC95DD7E635977923BC4A1B940EF37A0D1204E95782F859A0902FE0B28C2F9ED9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Editor/editor-keybindings.js
- Size 4KB
- SHA256 309138775c6128db5064f0a15f6bb00d46191e82d182745a42a4f0a8c912ad73
- MD5 55fb6ff9ed8b9f8c1887b4f4570287e9
- SHA1 8430c474d57c1d77b60bf42aeb9d2ecdf40430ff
- SHA512 a579733332c283cd0ec6136fd113335fe02e4b4d869ab276be4fc23f13fbd9550771e32e9551d4084c35adc0f265cc98603608759f3f8fc209697023f7ae1512
- SSDEEP 48:y4Wdj4yZRyCRTi7j9FIPtfSFHd1uP6zMHj0zJUwaU8pP/P61XWyTVRcjoSgH9TBv:Ch4yZRyCgJSZSFTaIewsXgGxotgnE
- TLSH
  T199A1124E659E195AD57AB2B5A7AF420CF7F202737815C68238FD99500F328341397EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32