9aa56f92a6332cec118e96cb10d2910a3d443581d2549f3285e52d4260e382cd

Sharing

Copy URL Twitter E-mail

General

Target
HDM-2.1.0-FREE-Exact-Source.zip
Size 3.9MB
Sample261030-krkgpaea64
SHA256 9aa56f92a6332cec118e96cb10d2910a3d443581d2549f3285e52d4260e382cd
MD5 ac4122514f3d6ec90644c98c3d971733
SHA1 d82c26ff11fe81fb89a8e4845300f3177813f3c5
SHA512 113482c71f4ded3afa53bab156a1b33bffb521e9cf3f4ae1128ca6aeda728a4a7544fbd4b6d5cbf301b29d15641b935ad0842d155e3ba9d06358a0ae8b4d8e97
SSDEEP 98304:vNIwFSprdlNS3qXivlkWa9e7WwgRkYZFb7Wp0/:vP0rdlNS3qyv+rFwg2YZdWC/
TLSH
T1921633B8C6187474CF3DB4B7D1187648C26954830891E03DEA3A2ECD177AA9BD435ABF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  hami-download-manager/HDM-activate-Hamid.py
- Size 1KB
- SHA256 6ac4e02b2bd9167a4cc460fb1e446d70a4f87c01b5db9fea90e2c7774c101aee
- MD5 983832fa1230f82f6dc7316f541ab628
- SHA1 bda298dbc1b84f158c1a350867fe3baa7dba6a59
- SHA512 b2e9782fbbfe08253d3d523286e28af155ee57ea52395aaf6accaeb75270190be30523a9bca3f0ecbfda9d43bda3d4b729ac82c92528fee4d55e6f4af9d3e960
- TLSH
  T1E0213FBA297118F1D6E14EE3C119282933672C07029EF2B068510BE086B56F38BB8537
- MD5 SHA1 SHA512 TLSH
Score

4^/10

antivm discovery execution
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  hami-download-manager/activate-standalone.py
- Size 5KB
- SHA256 a9b4837259b4e614f8bee43ff33ab68b8245a8811f569d9e5d6158c92f1bc47c
- MD5 7429f116797782a0ddb652f3dca00e73
- SHA1 ef2351a9b6b8daf208047b55bba96feef3d81dba
- SHA512 983a2438222db96abf40866988a1a4e48780eb4183f28c1f42b2f62966b9dc33d1e588767705f6519613054bdc5071a9c635ef7131c098ea8326054aeb8bb05e
- SSDEEP 96:L5TA4NJZ/XKgqV2F2XaXcPdF/x5anZcJG3g/Lri0oaRsH9pkdTjuI:ZH/agqV2F2LPdF/x5anCG3g/PNoaOdpa
- TLSH
  T19BC1D601FA1958F2D7234AA4443BC00262267D6B7E54F138FAEC82686F6D431E2F467E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  hami-download-manager/build_installer.bat
- Size 1KB
- SHA256 319cac37339eb763adbce3e408e66326d041b5e53a68ce29767f49cfa43f5f02
- MD5 048a703b12944920049b4077d049883c
- SHA1 74be9988d1103fb4200e0e8461ce7281d6e4b0ea
- SHA512 72a9e369218db3face4d719a9aa0fcb9d994fd00772d10d5a057103810a79c6498be1f063cd74c688efac44a723b4b277e7677457d23901f3bee4bd15d0dc839
- TLSH
  T15811AA1ABB0FC2D1A5B031D93FB529519305816F31BC0E3A12DA09AD704FBD498EF1E1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  hami-download-manager/build_windows.bat
- Size 1KB
- SHA256 d04f8278fd603061ec9f24333ace8b6075e95db403a9151d9224ffc95bea370c
- MD5 4fdde593c01965b895e0c042e9b49c72
- SHA1 2f0b944845a3d10bd9f94a55e52c829ef49713c3
- SHA512 57a839c16ab2b13ae0042ec276117829701a512b68acebcdc235c24a56e2a9733e645ad68c0d2c1853aced3643f8ed4a2c7702ff5a498a22f9332ac0022027d8
- TLSH
  T15611E16A23D89AB0A9E101CF1D3B12E4E902116F5211097232D701EA716F344AAFF2EF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  hami-download-manager/chrome-extension/background.js
- Size 1KB
- SHA256 2052a653d1758e54f6463776d59665a64ada2b24e9857d29f0e89ef5af3c1856
- MD5 cf2b2ce11b64be5b63d1b161bf0d9b50
- SHA1 ae8c355d2437666146a76ae883eba487ea04f1d4
- SHA512 0e7a1402f52f93258d8b1ee22aa0000c2ae42bddc062d73dc4e55add9775622dcbdf1c4cfca58fdf1fce334f2fd0cdff3d7f88f95480b63d473956c17ef2285c
- TLSH
  T10641329F14FB683607B730034A5E420AB727D1278A89CD6075EC025D7FE977681F568A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  hami-download-manager/chrome-extension/popup.html
- Size 724B
- SHA256 6b563f99bdf59bd78ccddfe7de0df2480fd03f791513e4bc865557f354dcff19
- MD5 54a6df48218ea3b937a8fa323e6dd830
- SHA1 31f0e7531fd9704d497e25b4744688a4cf2e3b4f
- SHA512 a71f0c36559043c1fa161349b78ff4a7e2e157293d72d4d1ed4b05d3b8e6e34de8c008ab6e95b85cdd67ce8088cd9887f42220c621661c9a4c8482014860bcc5
- TLSH
  T1CA01651F1205902DF423A0DB6925A39DF0010A8391C14E2188B02B79F890C3BA2237CB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  hami-download-manager/chrome-extension/popup.js
- Size 217B
- SHA256 5dc06c2324f485c699b020ec0f2f65e683c7f93127d1c6b072b621353361af81
- MD5 b6705eb7e8484760aef25b0f9af1af84
- SHA1 5ca653e6bc027ce8ab3d72ed3973c7032924c39a
- SHA512 0533b4495f331870b8369c54231d5ed001556b094647944b9473fddd00f157a800570ef266f53f14269c96381fddb37a9a58055c769bdece0e123c75f7b6bfec
- TLSH
  T105D0C7FB5543093C59F5458B7040DECF2D21115061D94D5194BA547DCCC6DADD43EBC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  hami-download-manager/firefox-extension/background.js
- Size 1KB
- SHA256 2052a653d1758e54f6463776d59665a64ada2b24e9857d29f0e89ef5af3c1856
- MD5 cf2b2ce11b64be5b63d1b161bf0d9b50
- SHA1 ae8c355d2437666146a76ae883eba487ea04f1d4
- SHA512 0e7a1402f52f93258d8b1ee22aa0000c2ae42bddc062d73dc4e55add9775622dcbdf1c4cfca58fdf1fce334f2fd0cdff3d7f88f95480b63d473956c17ef2285c
- TLSH
  T10641329F14FB683607B730034A5E420AB727D1278A89CD6075EC025D7FE977681F568A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  hami-download-manager/firefox-extension/popup.html
- Size 724B
- SHA256 6b563f99bdf59bd78ccddfe7de0df2480fd03f791513e4bc865557f354dcff19
- MD5 54a6df48218ea3b937a8fa323e6dd830
- SHA1 31f0e7531fd9704d497e25b4744688a4cf2e3b4f
- SHA512 a71f0c36559043c1fa161349b78ff4a7e2e157293d72d4d1ed4b05d3b8e6e34de8c008ab6e95b85cdd67ce8088cd9887f42220c621661c9a4c8482014860bcc5
- TLSH
  T1CA01651F1205902DF423A0DB6925A39DF0010A8391C14E2188B02B79F890C3BA2237CB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  hami-download-manager/firefox-extension/popup.js
- Size 217B
- SHA256 5dc06c2324f485c699b020ec0f2f65e683c7f93127d1c6b072b621353361af81
- MD5 b6705eb7e8484760aef25b0f9af1af84
- SHA1 5ca653e6bc027ce8ab3d72ed3973c7032924c39a
- SHA512 0533b4495f331870b8369c54231d5ed001556b094647944b9473fddd00f157a800570ef266f53f14269c96381fddb37a9a58055c769bdece0e123c75f7b6bfec
- TLSH
  T105D0C7FB5543093C59F5458B7040DECF2D21115061D94D5194BA547DCCC6DADD43EBC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  hami-download-manager/gen_license.py
- Size 1015B
- SHA256 6fd7963e6c7b625e0dfdf98544f7344354c820d12de340c22d047cd4732a1dfb
- MD5 c0ee04b611b578d348233866932e7fa8
- SHA1 b2d199d088cc9d36b0ddec51bee3fc5f2f703c48
- SHA512 3b0d6a0b1fc009b5d4baa479fa4aa343af4169cba414cf95dc3eb163d9b82106e7e79b9f9709058fb284180b4fcded2023b6dc07e81f38f45ad689fdbd41ba86
- TLSH
  T17E11B1119795AC7797A4643C2D34B809C7725E170648142A789DB4566FB8F11C370C68
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  hami-download-manager/hdm-activate-server/hdm-activate.js
- Size 16KB
- SHA256 b80eea8a049ec54cf056482d0fe83dd38c93968431fd26e075b02d0ba00f87ac
- MD5 d5c56399889a59a5f6917d61b056f696
- SHA1 d4c8a6ffe7e28b9c2d5ff60fe266e123d788903d
- SHA512 93d9457ab875d3e23139794fb93d314b8a657ecc60e4f04a66ae484f15d79ae7e063bcdef0cdfa67284c0c1d8b2644c42c27fd1fc3d327a58875d2ddbc13652a
- SSDEEP 384:E9yAJsLH1QzHEcHHTiAg5q4i3jeNRvO1KmOzFhj:E9yjLVQzHT2tq4i3jeNRvMKThj
- TLSH
  T1C47285B221E67026B792E2BE9617914A7735F403B45AC464B25CB2203FDD168C9B7CF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  hami-download-manager/hdm-activate-server/hdm-admin.py
- Size 2KB
- SHA256 3f7edea5605a36b6485e4c01758485e3645d34c4e3e50774d688c04272cbaa84
- MD5 ccc0d964d0226afb6c6a6814f9257eaf
- SHA1 9947d169ce1a320c3d85532a21c6d8ab8a3dcc61
- SHA512 0f13aa83fc08258af3c2513afe445b75c86c07c19d1545706c3c06b8e05cb39fb056aa8bfc06dff09b5810da63bfb7be1a542a047a632057d65307d94c4a7e0e
- TLSH
  T139513099AC56A857D3C3B8CC4C52DC04B76EFCCB7144A8B9F49C96901FE4131D2B2AA9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Unix Shell

T1059.004

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32