cbc4379bf78d023f49034573b12d01a2c810bb462213f6e9caa193ebd61b93ac

Sharing

Copy URL Twitter E-mail

General

Target
command-vault-v2.0.0.zip
Size 235KB
Sample261030-wehccafb34
SHA256 cbc4379bf78d023f49034573b12d01a2c810bb462213f6e9caa193ebd61b93ac
MD5 bb5679e4b29788ab8153d0984092face
SHA1 70fde612c69813cb7fc9d27a62ec8c317f2a767d
SHA512 f0be2a3089070db56693e01d17d89193124e30a0d8f9e80203f2e99e59a0bef26360816eadce13aa74291b41fb6ef498ad747e0dd780c3ece500da8c5073c862
SSDEEP 6144:f8LS+84cMjSOfZZdGnza6fqqOgVhgFOEgQAjj4:f8uSSicza6fqZCgFOEgQAjj4
TLSH
T1CF34021B5FEEE0ABCD618D71C412FB1A729A2E3653C3B88B193D3D4619039DE875861C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  command-vault-v2.0.0/client/eslint.config.js
- Size 616B
- SHA256 4efe97b16d1200fac0eaf07aa00930a8668b1f96a0be1891ace8c1e712ff0ccb
- MD5 b8893da386a89dfd3672dad848f4ec7e
- SHA1 3116d59387be2d09c009a58063e5ea17c4165148
- SHA512 506e7ea65a0e76f361491880cded46b2f429bd7f1a4780f9013c9250ce052dff5b97a9db5827ae87d8ad6ea822085554a72174f6859081d526de5bcc1518456f
- TLSH
  T13BF04C47615F54911A9258EFCD1A3A835AB8538B2D5E7861F1FFA7301F4C29C21B4344
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  command-vault-v2.0.0/client/index.html
- Size 520B
- SHA256 2da94c11d816c1709b03930d7599b2109ab29b6ea557cc1f04102bff8e23657d
- MD5 851ac596afc923b17d521ff18a05417d
- SHA1 8e364513141d089630350f03994972067011d1f4
- SHA512 108cb5110bb96f77dcc230a9e2a9117b53cbfa58e7ca6435daa3b43d474651b18e9daee08514fc17679b8f04dfc6fde7ac64a37d9b8e65a501550b3be52adec2
- TLSH
  T19DF0598388F6CD09423046A55DD1F25D4D81C39AA3895C4636DF696A4FC47C6CEE71A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  command-vault-v2.0.0/client/public/command_vault.svg
- Size 1KB
- SHA256 eac65cea196c24ceb56dd1a640a52bea68ee296451578e470524fe628c17c0a4
- MD5 98e7d6ed405ab6f1e43e2a1b45d62b9a
- SHA1 879554ea2be1c75333c495b9037f34ce63132cd3
- SHA512 b91d5cf8e9aef6a60598e30f825c70ccac3d6562dd4727b4a7b4fad376e94f6257d732bb3c2e27b8842a81f71eb5de775d6ec38356b8455f30d49d6b04ef4621
- TLSH
  T19B2101DD83ECE158F3E25B3A6F587C515B0CA1ED69F209C9D22D196214166FE88C78C4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  command-vault-v2.0.0/client/src/App.tsx
- Size 45KB
- SHA256 64d4acff46ef4c0394c779bd9e549574dd527969a2c42afef0dc0193466b9b8b
- MD5 85ca12e6bd932bd30e450427fd440af0
- SHA1 9cc8709a92055a5f40dad402957f2cca061d0ddc
- SHA512 ee6b823d39bff4b6442538e1598034173794535c37b317441ba70cb121793dbc2d5b8da396e4ba9334166fab7047ceadb7c4676058301923a10d41d590480e9a
- SSDEEP 384:b8LvinTKEQE4EzEZERXRx6LpTiNlnhiHquAkWerxyGWuTl8Y+OEPvAj:QviFD7Yq7xHNlnhixWeUQ
- TLSH
  T1AF23730174FA3E295063D075AF6B900E6BB5D1075A8CC8947BBC7B905F9BDA0C8D3A8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  command-vault-v2.0.0/client/src/components/Login.tsx
- Size 2KB
- SHA256 04d4178644ad721d425ade670114bc3892017e0173f90df2fde253c1d2973a6b
- MD5 3fd7e799c1c22825d39540731111fe67
- SHA1 f63312b8e3229df6baa46ec972b40e41571c4417
- SHA512 bbf23ab45dcea2e647494d6492f10083cccb83ab52b3cc439c7bbcf2e6351f4f991778fc3205eeb9d836efc337a0fd813b24113c1db9604f5631c96ec379d62f
- TLSH
  T125510D0024B61E884063C0B05A6F590A6E36DA437E4ED94CB77C7B615FEBC56A8A278C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  command-vault-v2.0.0/client/src/components/SettingsPanel.tsx
- Size 9KB
- SHA256 2a2630b0cecd000e9a808a5fe5db5b0086f374d989ca739ba8a9e3d9c6aa43fd
- MD5 f2c254afd63a19206a6f1dc0e54ee973
- SHA1 26270a32015f4bf00ac6cb1bad412b848cb6bf22
- SHA512 52a75b7a303c34b83859fd88829591219571d291abe42ab72f18f4e3d6740c89e7a4c5aa93f02325d773deb686dc23a5a446046b0eed278baa6e1eaaa3e028f7
- SSDEEP 96:o3uK+RBYLJK7dtEJiCFc4CYtewS/NeQS/74+/kJGWn6VT8UUJ2TCI:oKRCLJ0tQbFcVuewSleQSj4+8JGWnCN
- TLSH
  T1B012521568F32E918093A0646B7BA90E3D32DA433A4DC954B76CBFA45F96C51CCD368C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  command-vault-v2.0.0/dev.ps1
- Size 429B
- SHA256 8886d7d1bef91e455f205fd974b782dec6762cd5335202a2c02924deda7a203a
- MD5 7c5774bc7343bccd9f3d9f61f5ce38cb
- SHA1 82b1d8b660aae69c85bc245de849c83dff2b388d
- SHA512 f146e69012f8ee859e95475d5d83eb9eab37950006ee3842d0801d199a8b29a2ba51b7516b05777057f8eb67cab08837fd397b7b78b07e51ff49c346c673a18f
- TLSH
  T142E0D42B5384011687F3064B4186435D991306A6A0CF05489004AE08708625F41D332D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  command-vault-v2.0.0/dev.sh
- Size 436B
- SHA256 2fc69c8a43e2c1f24b1135cfbaa6af31f7df81fa7666cb5cbd5354d7c83101c2
- MD5 b7a613d3ac163db2e25543f6f7f4e5f3
- SHA1 c4767cffe9a98e705eebb0f09eac98d63a2ce41b
- SHA512 7713466d77b4266c4767cbee9f2c0716ea191dea50159db19745cb6da1bcc8057d5c3bf2e1c27242d48001c237fe5082a71e8423fd4b5ebbe220e015a512e234
- TLSH
  T106E05C572B905222C6A34B29AA43826CB7A5539F500D5B1C9145DE2CC1D469F34D932D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery antivm
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  command-vault-v2.0.0/install.bat
- Size 641B
- SHA256 8a943b1f38e37e058aa541e8a0b93aa2b16e5442e173a8c72eb36859c5326aaf
- MD5 44af21d73a5bb6c486c35de3c1156ab6
- SHA1 e6fec54df18caf8b1b9a5684051e42e9986e4e9d
- SHA512 0d88e123f960e8757f67e47210e7b3091b263c3428750bf3873385422328878b823cb6d686906965f6c6d76def491a614457d13243be0181c236093ddc097135
- TLSH
  T1BCF0DD0736EC831F2FE66C6C59870228F405404F51154D46B0E704347D0ABCCE5A90A7
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral19 behavioral20
- Target
  command-vault-v2.0.0/install.ps1
- Size 8KB
- SHA256 4157765ddec78f60980648679f86133006c1e57a9a332d27af7322d605064656
- MD5 72377c6f3a52bdedd8a2667e812f11cb
- SHA1 295126747c6de02496058ba23d008cc1ff987c06
- SHA512 cc7447f15162dca0a9f08f9a2f025513dc62c0e7f9bb4d463d3c124ed0835910b40f6dc197dd79641a0431209246b6bf6e357d8940a26e5e01c625044113905c
- SSDEEP 192:nAJu/U+i/+4W/ofPQqtmH1aQDqqp38fdREZLiSFZgS:AMiQhakZLiS
- TLSH
  T19812B526AC44033665CBC2AE8C83E352F5D44237A01D1D84B84E9469FF8B5EDC72C973
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral21 behavioral22
- Target
  command-vault-v2.0.0/install.sh
- Size 8KB
- SHA256 6fa8ee4b2ecfeed08b07c1ea4aa1c34f5db4b10acbd4157a2fbf8bb4f8586957
- MD5 f46046daf20be1e74b74401269f48754
- SHA1 e5e8dcac0d9cbeca44419f174a4bd6874fae8cbc
- SHA512 706bb96db536d8518109d812f3b5b0564bcef170434165ab015db27b704ab36a62c3ba59a5e25ef1c30a1e462b25fc61b5c8b4328c60022038c7edcbf3c05bfd
- SSDEEP 192:bvUTIs9dB3dWjv0xVsciLnelqj2I0efiq0JbBFbqbfGCF0Awn3:C538j8wakgxrn3
- TLSH
  T18812B7636CA81571364DC1BC6A935153E38612278C182458B0FFF9287F6B5E8D3BEB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution privilege_escalation antivm
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  Abuse sudo or cached sudo credentials to execute code.
  privilege_escalation defense_evasion
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  command-vault-v2.0.0/scripts/command-vault-ctl.sh
- Size 1KB
- SHA256 b91924c69ddccf7e3a7bdb645f7f2349139e50546c55868642bf0c968eb717bb
- MD5 25326ea9f552cd151b09169a897caaf8
- SHA1 26ed62952beb480fed2f53150c7015d42e673132
- SHA512 e7606fcadcd2e3963c3e35d7ae059df0a02a2c278db26baa8c2de13a3b3283c1b8814968d187da8543c2b567f9ed12cc761f3a5928a2ccd1c28fdbd25441050f
- TLSH
  T13541DF1569DA71788F4F80255267B002B5983B1F90099D25B2DEF70A9FBEDD063EC8B4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  command-vault-v2.0.0/scripts/install-systemd-service.sh
- Size 3KB
- SHA256 7b9211d353555c1ab721c0cd3d8f0a6b051baeb929dc48f987ef5956b05871b5
- MD5 a332f416e130e23caba369a51614947e
- SHA1 3b74b15def82856067177f87cba8a8ce7cb311d7
- SHA512 ebfcfabdb83453bf02d577e4a6903e4e0cd6358d66bba6cd0b7a9f24474e95f6baef6ab620aa1faf46c6cc38e2c6490e5cdc04beaa59f8e916c1581158ba069b
- TLSH
  T18C7193A6F998227C3EC742688D879105B269320B900C8C1271DCA56BB7FD8E533B8D76
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31 behavioral32