ac0d3890ff8ed6dfa2594c4db5ec9020c7c6353f1d21ffbaff1a79c1ce738a17

Sharing

Copy URL Twitter E-mail

General

Target
nebula-client-1.21.11.zip
Size 8.4MB
Sample261030-a73yvsvsfz
SHA256 ac0d3890ff8ed6dfa2594c4db5ec9020c7c6353f1d21ffbaff1a79c1ce738a17
MD5 c695ef57ac6237abc41fa7b7e0f5c8b6
SHA1 34175fb0c60540102874f7f9183f9277c5b9245f
SHA512 340e002163c7d14e0bfca623902fa57f5748ff53c2684d08889b91864a44e644a76f397ed82b7f55ec70aa7d951dc975b59efa8d5f5323f9de4934ecf24e3bc9
SSDEEP 196608:Bp0QnHJsUE9VJmXWqJrfvNIfVWBx9VHCjQ4qK700sMLIz2EG:Bp0QnidV4moDv+fVebHCXqK7NIKEG
TLSH
T1C796336BD35C4474CFAEC336F59881E43720AC7C9D647B9817584DAB2DABA928F93301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  gradle/wrapper/gradle-wrapper.jar
- Size 45KB
- SHA256 b3a875ddc1f044746e1b1a55f645584505f4a10438c1afea9f15e92a7c42ec13
- MD5 e6d91909dc85b85f8be20daed748d7bc
- SHA1 acb0e15fdf618e7342f7fcf9306356c8e18b62ce
- SHA512 599055dfbc249a4a573f818ec51365e811de83709750861d83c16457f205f19aac5ab125bbc6fe5bdcdfa13048673e16084f184a5fa5a6e59a788a03476614c6
- SSDEEP 768:u5nlGFtqMyYDNx86vQEPTufJf6Jpn07XOvmVoXpYCpuuMbAU0pkTdgy:mnlGFtq3k8KPifp6HeejZYC/MbA56gy
- TLSH
  T18823CFA6A4A89465D147023F213BCB915766D36F0C9DD93F0A3A134C8FC0A5F8B13B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  gradlew
- Size 8KB
- SHA256 fb68debc1b1acf8ec55dc0d5e5495e1dedd0bd6b61f304bee61613eeb2bd9b92
- MD5 780b1d3e23a3b82154795f73df943a14
- SHA1 db4497934951ffdd9f8ff35551b6d6537b79d4c1
- SHA512 9a8d9ce15fb6674b802ec02b9c9c6e88e027469268db11bb8e5ae59526ea2f3f3cbe92c15f3156b88fcffe48bb7b2c53e8282daec5f16c9bff91be698dfd597c
- SSDEEP 192:Sjm7H8yzJ1XnRy2305hI+vyHD7oRDeZPRQ5WW:Sjm/zJZRy6mhbnR+R09
- TLSH
  T159021B6357802378074506776E9EB0EEA72163BF1F43651C749C960C373692A61F2EED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  gradlew.bat
- Size 2KB
- SHA256 fedad02c18e266ec094995a5751b7fe1eb6e74f66bf75db64fae2e50eb22c234
- MD5 e828135c17650a1ef9e5214fb75a23fe
- SHA1 483bdee17a45112d5b6521203afbf43073a8d4f6
- SHA512 73dd6183a87f476eb5fba5a62fe97fe8083f1a3889b52eed26a1d556fe64226a9f1128c81c486d90dfbdb88effe69ef3aadbb1b007439e2ab8e0e37a048adf34
- TLSH
  T1885165BB7B4742761FBC27967E1C4982B213A2662F4FA30CB45F850D313174A51C2E9B
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Loads dropped DLL
behavioral7 behavioral8
- Target
  tools/train_neuro_aim.py
- Size 11KB
- SHA256 80df7729f4d5dce03087ea5f1fa5fd4ffb1c43d7e090f7e85127f21d0f0a6dbf
- MD5 41704fd33d7c2c404773da6a8a5e674c
- SHA1 c46a6e3918798150b1ae951d447b0cd6c8e5cb9a
- SHA512 ac808c9cc5c7fa93c5567921cce1a8966f2c986152e616830763ae6b969576d06e8c4abaa7b4acfa01b7ae1846b58c11ef4aadd2c668fd74d9c66fc323cc6a32
- SSDEEP 192:XiJjOgwAJQ3VcYfpdR9oAQwGuNq5PnsqjhuztMGZsR8O4RTccMWI8M3uArLR6zfl:XigFAJURfpfQwGsq5Pnsqjhze+85TJMk
- TLSH
  T17532B5239D6324669383D12A09968501E72CBA4322571EB4B8DE9B783F0CD75937DEBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution discovery
behavioral10 behavioral11 behavioral12 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12