e2ccb269d3f432375a5cae6a8fd50157505ad6324f25a71d2c0badc56422d4a9

Sharing

Copy URL Twitter E-mail

General

Target
components.zip
Size 4.6MB
Sample261030-1ns8esff36
SHA256 e2ccb269d3f432375a5cae6a8fd50157505ad6324f25a71d2c0badc56422d4a9
MD5 ba3fb1258e4264b20b64d2be24e51ccc
SHA1 981d916e1c40a4cdd9a4d062b01d028ba7056bcf
SHA512 77224c6f95f4c1aa999237caa00ad71a1f72f1b90fca325ef5309cb56e8d392426f2d5beb767fed990964761bb162b74a931cad047155332b15408fcb8eb39b1
SSDEEP 98304:osiyP2maEq6SqkcomSUHnyyKRrZ8R4DM5dwF0ybM1Z3pVKlEFRz1t:LP2vXqDomvL2Z8RaM3qnY1tpV+ETzD
TLSH
T1B02633524826BDA2E54355F6213B0BAE3A531291DED00F513B7F3D207AC3DA6F1E2963
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  Google.Api.CommonProtos.dll
- Size 439KB
- SHA256 329cf0f2b66c5cbf675321f0d6b33c17d1092e5761f32d3d2c1307a110c0dbbd
- MD5 27cf07a1aa8e3baec8e47cdb3e546b3c
- SHA1 113d109c239470d55960e841336e40667b6aa322
- SHA512 12dffa767c42e535d1da923350cdad4ad11e46a8e39c7d8b083a2c6bdf6b025679e1d792ef089cea7df2001c4e44da1a3fba33953723c97ef4314533c12ad75a
- SSDEEP 6144:PjsN7HRTxutgTsZcO3tdIeGG1XqXWTdgbrMQ/sqZ2sQw6MVLgnVSPY78jfF:QfwGwZefBZ2sQw6MVL3P3f
- TLSH
  T170A4D71C5E98F229F1AF9AB1B8C45EF5CAF0E1137005E66F99E0E2A68D43750DE81077
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Google.Api.Gax.Grpc.dll
- Size 199KB
- SHA256 895e406b21b4ce8bdff1791107116fb5f23ab3b9981e2b5bd4cb4fc747fe4972
- MD5 8c8db7823dde911f7ca5923b85ad6a75
- SHA1 6c39dc900d8dd189374c6cb75daeff8643353728
- SHA512 10be1b4866e3842239145c12166e8fd0515118c983ed892f03abfd896e833ec16ebb5227de12ef9eaf9a08f70c481505a6e2f16834ae996761c277040e8fb815
- SSDEEP 3072:4A1t9HidvN0u2pIxoY5COCxvwoR/MVeYXPrX93WogFCNQvH2jC09zKhLxtP7ZaAT:EFrxJgVvwCEVLF9ZKP
- TLSH
  T194145A14A3E95B16E5BF5BBAF47056184BB2FA02E49EFB8D488CB4E918D3740D940373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Google.Api.Gax.dll
- Size 78KB
- SHA256 1adedac4a241a93c34a41a8939151cccf35381fc6c4d4cc890216eb191032639
- MD5 3cc6c20060f4699368ff46c93a39d43a
- SHA1 e437c447632dc86e58befd9540b105700b4d1106
- SHA512 e27473f49daf1e51a695e0a087dcb8ac9a3983598de88e38214d9008a876333bd8409c6d5dc0d589ddf09b2b279247aaab10e9b30d4bdeb0e84996f415a362cb
- SSDEEP 1536:S/n7ZRub7p2lq/Q2zOupdk+zV/89x7qTmbL+2y2zLV1ISGYyvK5CyeOajuyk:Ylkb7p2lqf6YdJV/89x7qqbC2ByvK5CG
- TLSH
  T1F1733A50B3F84B2BEBFF2B7DA47061410B73F55B7463D71EA84865D91826B800E91BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Google.Apis.Auth.dll
- Size 240KB
- SHA256 a2a4f688c1e34bca248c2a589e73a20ac3c834a9615c13bcb08a317a78842609
- MD5 56b4f7f40efb5265af9d15576a0b03a4
- SHA1 716dad0802d71544d3e1bb873f4b84e273e3402d
- SHA512 8f791929d7d7ac21009c614e6a3b81966ca179d59376a75028fbf43b21822dee6489b1203331b1580c7d2c580f5edc51008520a512d5749d9d56ab6a31a23466
- SSDEEP 3072:iBdI+tgmvDXP9GzIk01GZys81KcuX3YeGsR2bV1oKznhAbzIWRVO8X8gk0Qt27LM:GdltgmP9jkMG3tVIeGs+bObzb/Nb
- TLSH
  T1D2342B0163F88B21F7EF6778E5B04121CAB6F646F87EEF9D1A88D1ED19127429844723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Google.Apis.Core.dll
- Size 84KB
- SHA256 198f959ef53b86d9c6f4b3305503960995cfaaa096252dc7bbbb803c57c58bc7
- MD5 32b235caaddc83cdf23708bc7592ee38
- SHA1 72cc51243fec3530bab4cf6b656648d31a4f5da1
- SHA512 086f02d953dd6ca8eab9c2ff8636dee4ad6908c4eb37891f2051627a32e6ae7c8721899eb6ebec7c49a8622215eb6329b018b2bada061e5325f8ee0ecea74ed5
- SSDEEP 1536:4DcIyUpC8WPjQQPSrQ+U5KH7fn/GGwnD:4DvzpOP0mSrQ+uKH7fn/GGW
- TLSH
  T12A835A1563EC4A97D7FF6AB8B0B041358372FD0D6417E78F994CA1CD189AB8188607A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Google.Apis.dll
- Size 82KB
- SHA256 7d9abc7e9b29b2414d7ddee9286a4ce997d12cb6a55badcc1eb975ed5e1d4092
- MD5 0a8358340a205daa492d8bb1078cf532
- SHA1 ccee1965d4092b548262d7d8c93b3f86aa7b7150
- SHA512 69bf0e8f1518f39b5107c5b561f82ce47ee908ac0dca767becef5845a39f00e6619bba2b41b5021bf6c6c6b39d447286da18b6de4ef2568091c0e9c22f09d978
- SSDEEP 1536:OdPCVuo40vApOKMWSNblq0BW+FfkzHk07rCjZ:OkF40vAVR0JFfcHvo
- TLSH
  T133834A1263ACCFB3DBDF9B7CA83056A24771F606F502E78E4D4C99D918A379019913A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Google.Cloud.Firestore.V1.dll
- Size 331KB
- SHA256 3e3f5f73daf8fa443a3c81b99454195f5b526b5b976c3dcd9399999ca8c9cea0
- MD5 3a0427da76854cb23c8b008abee41db4
- SHA1 d3e02d239402947fb6065d8deeeaf6f15fe2a14b
- SHA512 e2218dcced98c97e772714cb22969c5e080454e21a11b5cdc8a3d7a0ce68811a576f721c888ff0fad8b222dccc965f44a1494476507347b54a323010ebec1e10
- SSDEEP 6144:T5YGYPzfq7+tjj2vTGP23HnZFNJT6nLGiYo5PvHFbcoT9NjH71T8xPHPPbNP5xfl:FYwG2vca7cS
- TLSH
  T13374F7241DAC652EE39F6FB1F89425D486F19217320AEB7F688857D20D03798CFA117B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Google.Cloud.Firestore.dll
- Size 177KB
- SHA256 57a01883496e180314ad892814f745d807d0088a6289c2661d25e51b4da162b3
- MD5 2cdfa5e0a4c1cfab52c570cdd785852c
- SHA1 b7ab118e66567840edde28f7c15dc274a0cce532
- SHA512 6a6a490ac370f7bff401d6c0176811e353e7fb5c5fcef4be2504d45c298217846138e8bad42473037891f8191cb7152eb5a73517473dc688c942723afe4c08a4
- SSDEEP 3072:ChuE/ZaOJjpj5fOL1WDBKBVdAR2YNHbAF6TZ+5ZGo7bTt+:Chu1Oj1OBEyd526t
- TLSH
  T199044A5573F88722E6FF2B75B4705A584BB2B983E5BBE78D5948A4ED08037C098503B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Google.Cloud.Location.dll
- Size 35KB
- SHA256 35a2c85ff192d479dfc57e4870a58616b9e641c90d1625f0842146642fc7c6a6
- MD5 3230d9036ec1a84c19137bdeccbbd12c
- SHA1 c53155c08cb9aa445e68cc4c5fd2e00201f85284
- SHA512 8574b169ff22bcc04bdab1d79be3fd8cf119813835ad73d8e7743e338d18bf02adb7671635912118dd31416d03986f96f8c646df262c94abcca7c9156e39747a
- SSDEEP 768:zidJA4DuKPLmS7FI0Euz71F2qmf8yVScgCv0cy:zqXI0171wf80ScgCjy
- TLSH
  T1F6F24A19EBACA33ECADF5B75F8D1528802B3E36B7501EB175C88528609837C05A527B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Google.LongRunning.dll
- Size 63KB
- SHA256 f28db50842aaebe022b837be016aca0a77bcf71b2f371a785428c1ab504b919c
- MD5 039443c3175dc23e059847b4a39bc867
- SHA1 39c7a0ebcdffb15d5fbeb6d7efa0e365b9fc369a
- SHA512 d0ba9f01696ab1c8d8d0c55140d2e928f9ca944142fec628f144eff323205f88a13274c890afb71d349441bf1d380ce137a5f38e2a01092e12999c97523e7eb9
- SSDEEP 768:uUuCxAFcusujJoQHFnSdvR1B+QnTSXxoljdTSy9nMiW5okb:uUuCmPN1Svd+AT6xofFxtQdb
- TLSH
  T1845339156ECC6766D7EF9B76B8D0659009F2EA137801E326988C9EC60743FC09E921F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Google.Protobuf.dll
- Size 484KB
- SHA256 dbd8f2ff0822d2fc0164ae255c0661ce84afc9ba328a30a4a50ba5f54ffee896
- MD5 38cf40c56171b78e5cf051abc525d4ce
- SHA1 1b00585711e0acc1793e647794e9231a119719cc
- SHA512 b3622157d1d820a50c3d767441a7d4c3abf5a61e8725efaa6b4a7152458785dd71276c052978e0c1e0a6fab0501a53368af1bc6598e4aa01c0de272b9d5ba312
- SSDEEP 12288:d5MEUF0pkPEnVIWI8rAUcRqix41oJcvpXEr2xy2ZLNO:d5MEUF+9n6qiKGKvWrZ2ZLs
- TLSH
  T1AEB44C042BEC5168F2BF9A71E4F4286B5AFDF6237129A76E5C4062AA0D47750FCC0277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Grpc.Auth.dll
- Size 21KB
- SHA256 d9f18b65825caaec7242324cb96f03d263aa9086d1ec747d1d28242bf8f58db2
- MD5 72d6601c4a212b59dd862fc9d426c2b0
- SHA1 9927a88489283e4a8611e18925ebaeb54afe7a69
- SHA512 9da594583f2032fec21068e88903d0f2da9a556750fb5ebc5dce870052772712d0583816586acb59fa2eff07ae5c2da5c136509278c64ddf43ad33f8da4d6cd1
- SSDEEP 384:TTnFaYjsrvEzHRZKs/7lJxeNtzcLo2aoNyb8E9VF6IYijSJIVrlqZtd/:TTFaWYMzDDJ/8cLo2aAEpYi6C6J
- TLSH
  T111A26C12CBC84913EE6B6F79F6E992225E71BB06DC50C6D6210DC1068FD63422FD63B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Grpc.Core.Api.dll
- Size 68KB
- SHA256 c14ac4d4c97e03cf1f05892caeb6346457ac25c8b1b7ee3e12a720fcaa1fb2e2
- MD5 670b18ff5192cf0d926a4cfc4411b615
- SHA1 29ea49e45a28cb45fc5ff78d48999625534db505
- SHA512 d45cff96af3c3abcc90b7fcbd9b1cf9ce18555595f5ab51b001fc1ca266c0131909eaa85311cac8b6fde1afe05e0becc26ada08ac481680e5769a80df895d68a
- SSDEEP 1536:hQncr5S/MF2YqumbXA6dbKQXSyHuToVsGRT5u6ayDYGQUyNeaP76ClI:2fbX/KgykVsG+6ayDYGQUGPM
- TLSH
  T166636B05E39C0B67DBEE5778F86465A90B72F5863513EB6B6BCDF0D80E833448A51223
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Grpc.Net.Client.dll
- Size 351KB
- SHA256 75fe0ec43986ef6e78cf41268728909b9819263273fb1e84146c1c6ef58e0028
- MD5 e226d9a80d9e6fbad140410d37725c87
- SHA1 903964f97d748827174a545444a276d7a8062ee5
- SHA512 0af4495b4299d8e5b71460f833b9a69060a5c317c446f68523cf45a2ec0bab125a085a3617f6ba34a531adc90b30ce62883aa57bcbd5236cee5b0637434532bf
- SSDEEP 3072:vfHQ2gTzgV4OfjQvsJsk/SyLvkZbgjouEVGW7Hinbf+PHYzoKa4RFjigipClg6G6:HDzuLGpnb0pCe7jdJ8meg3nqob5FcF
- TLSH
  T19F745B1097D8532FE5BF1B76F8B015548B79BE82AD6AE38C598854DD4CB3742CE203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Grpc.Net.Common.dll
- Size 21KB
- SHA256 c31a578aed06bd7723ec24139882bbd10e18b79a6fe190482c771113ce32bd43
- MD5 6aae6da463c259087cb3ac999139f10e
- SHA1 236de0a91e3f8befd2f971876d5df568e3a7ccf6
- SHA512 095f813c64480e4e3074610d7e5037187c17f5431bdf59cccf2971512440cdea6a6ff98c1e940951c44342e1d2f26bc632a2e033a9e090c55b8f34157d0b069e
- SSDEEP 384:UCzHMwf1KLVFqEY5Z2RCj6DDGDQsNyb8E9VF6IYijSJIVrlqwooUl:UCzwTDG8sEpYi6CKvl
- TLSH
  T139A26B36C388481BDC2B5EB9B8D885255770FB46A9C1CADB714DC2454E473052FEA2FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Tools/AdbWinApi.dll
- Size 105KB
- SHA256 9a56e72fe1372cb722a80c00b79dcecf2b37165884e470ed05f00c668c0043b0
- MD5 6b0fc995feef8043a0e043609d52da36
- SHA1 6a233e10d13b8a46a99eadd1bbf94739415d5c32
- SHA512 e2879101e02643bdf243463d76a88717ac4c76989ad313cb4c3c1d0c3d3d2b0433eedb120accdc0f53559d7287ded809b3c7ca73edb5daf77a2d2655627af9ae
- SSDEEP 1536:Awqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCP576CM:AwqD3L8Tezq0et+ui1y6S
- TLSH
  T1AFB36A227891C072C8D361B91AECF76593BEF5A10B3589C7339803DACE653C25B7529B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32