328be8f5c27b082ab967daf3e75caec15bda4e80fefe1bc0261543a9d1074d8e

Sharing

Copy URL Twitter E-mail

General

Target
Codex-Thread-Bridge-v2.3.0.zip
Size 389KB
Sample261102-ee8e4azxhy
SHA256 328be8f5c27b082ab967daf3e75caec15bda4e80fefe1bc0261543a9d1074d8e
MD5 96739641d956167370c3274ae035108d
SHA1 18194c1c5e1ec5bad8024c08b1422a6fef214440
SHA512 641e02d1ba8e22cfb1ed72c3e4f5db8d01137a05ed435a98374d0abd8cfd664a91a9906d367a1f0f1b6ccfcd4b3fe66e8e0ea50487eb19e1b8a497844d16fb10
SSDEEP 6144:JC47mKZMAo8EIGRhN38lLp8hAvi8nR5Ym8VmKZWX:Jf7mnV8EJhN38NUAviosVmhX
TLSH
T1B9841202DC1E5A65D1220AF555C93AC1CC5EEA7CCA499805EC81C2EEAB9E3CF47D7F84
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  Codex-Thread-Bridge-Windows\Install-CodexThreadBridgeMCP.cmd
- Size 227B
- SHA256 4bcaacbcd564b4ce8deb9b2855d584fa12836aae6ad800d29b2925496c8af3ff
- MD5 8c6b23a9e84d860a68937be88355fc78
- SHA1 854b3cac6eae5ff4c0ca36d86b612bfcd3c4e11f
- SHA512 bc0d650042f8cb89a229f21ce73e4c6d0ca934873a39873ab36b92b1b9b3bdc45194cbf2546f72abf1d9e01f729b89c06a6c312a388c551c83b33af0587918c1
- TLSH
  T153D0A723636D53AF64FA59B9998D88A0383D969E422A6D9170B641283C4C25DCEC6282
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Codex-Thread-Bridge-Windows\Install-CodexThreadBridgeMCP.ps1
- Size 178B
- SHA256 ca50a26daacc238451e1c0947fb5e2810ca729e5fc05da9155585b0a25b8d898
- MD5 20c9ac6ea7ce1d39c830c77bee822fa4
- SHA1 b2c6f86dc8903e6b14093d1d8b8f291f045ed53b
- SHA512 fa869515d700739b8e14004326db607bb72505388ba7d6b81610599ca41f46c4e6ae3a08295b8a781dde6191c3a8fcbe77a5009037ad063fbab91b9e3da8e6dd
- TLSH
  T189C08C248689757338F8C38F969B8BD8311936AC62309B5090DF480C0E5BB7AFB53197
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Codex-Thread-Bridge-Windows\Install-CodexThreadBridgePlugin.cmd
- Size 227B
- SHA256 4bcaacbcd564b4ce8deb9b2855d584fa12836aae6ad800d29b2925496c8af3ff
- MD5 8c6b23a9e84d860a68937be88355fc78
- SHA1 854b3cac6eae5ff4c0ca36d86b612bfcd3c4e11f
- SHA512 bc0d650042f8cb89a229f21ce73e4c6d0ca934873a39873ab36b92b1b9b3bdc45194cbf2546f72abf1d9e01f729b89c06a6c312a388c551c83b33af0587918c1
- TLSH
  T153D0A723636D53AF64FA59B9998D88A0383D969E422A6D9170B641283C4C25DCEC6282
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Codex-Thread-Bridge-Windows\Install-CodexThreadBridgePlugin.ps1
- Size 1KB
- SHA256 077f89281fecf355e139f10a24ce276f8bd42c209975c0e3f0ec06eb11412f0d
- MD5 1d722dbb1838f9dc6a8c4e53c431ba9c
- SHA1 1a3b83a2bf9bb59cfeef012505f35b8fb87448ff
- SHA512 61598b44ff7faf5675cf642a69422451df7dffe5f9c53165d6cd949325b5a4f95c76a00de66c60945160e2cfc82d76da972e1e9b1bfa2372f5bcb0193491b6b4
- TLSH
  T1043124129D8D286740D102FF4CE713D0E16F62BEE10A8251DD2EA75C368E72D8687071
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Codex-Thread-Bridge-Windows\Start-CodexThreadBridge.cmd
- Size 130B
- SHA256 72e81806e7a29f75d229ed67242c7ed012bf3b45d626d28ac0b24cb6c0e6ad07
- MD5 55952e555d614b560c68c6d88380bf2a
- SHA1 c228b0d1f53beb175e32cef8e0a6b8c45b24f6d1
- SHA512 87ce6ea4421d95f1115795df5fe9cfc057fe06c997ebeba6018b5befa5daf7d05b3cbf0418650be03a194fae70269259302fd4c45e999f2e689ef773c66eddd1
- TLSH
  T15BC02B40404EB35D20538C3915D64430142F410D534D578070D08114344834CC0A1199
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Codex-Thread-Bridge-Windows\Start-CodexThreadBridge.ps1
- Size 1KB
- SHA256 8179dac7fbb05b1b70dc106ad74df663a977c232134c0adb4e29882be84566fb
- MD5 2cf7d194674a04a80744e36296becfd3
- SHA1 986768a54797c184fd03fbb7d82f327fd9327be4
- SHA512 a33d3c75aa212261e51e5fd3f834849bc2a18dc93bf32a2daf3a4c41d7dbec8eee16ed7adc2bed82df002b12ec5209a77961670d9bef2a56559cc73f3a7e2007
- TLSH
  T11B2122A45A90674F2C519BBB88F642F1F7C9802CD2055B90F50C407A7E8A57E86ACAB3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Codex-Thread-Bridge-Windows\app-server-client.js
- Size 5KB
- SHA256 be2cf399140d0f7689b25d727b052684479b474b3b4f24de47299c8d3be10137
- MD5 9c2c74b3e0188ece552a13b258b8ff86
- SHA1 8f2dcd8975f196a631d45dd2e0ccaed10a400c56
- SHA512 430a19ba2e24c5b93ef2e6ca9dd32b7c91482fb59dd161b6657d55f767cae557c701efdb3e86ab8c9d895db88d00d36982076d4e3196bf5fef2e3aa2f639cc2e
- SSDEEP 96:GPVdbxhPSsuUE5SYwS5vyugV7lyEzNoIAauyzWaOOIX6ZWiPYZKY2g5lZcecZs6:YbXPSsuUO5wgvyuOco2IAaP6fSsiPYh0
- TLSH
  T102C1740A16FF242651F3A03DAF974016752AC00F2207DE69BF9D92A07F8923C52B1FB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Codex-Thread-Bridge-Windows\app-server-client.test.js
- Size 1KB
- SHA256 09f687dd97872e8542946bdbf2854568b99a352d849f363830dc06144414a3c2
- MD5 150d5d98d7d577938044197dd02962f4
- SHA1 9aa8ccd0680de29b9de230f3470c0ca2445c4868
- SHA512 a0b91cd2536f4d949e4d8036b72edabf6265ff6b9d4942eabb9703db7e42aaa12b91003ac54503e72b281c3112168c7f34a34bd54a4459b592366ac697f45736
- TLSH
  T1D4214C47107299B601B2719DC641A4A9753B823E7A077C057BCD536B0F8D209937F599
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Codex-Thread-Bridge-Windows\cloudflare-tunnel.js
- Size 12KB
- SHA256 33a6b57e8c6e8767a6ede45793df034d6f9b084108676c56633eb7f5fb74337e
- MD5 1da24323dda7073b80af92f2bc0dbde0
- SHA1 936d451ce9d077dab29fdc209c96230cdbadb89c
- SHA512 5f4f0358ebe23ac854a1c380a0248e9b6f80bab298227af4b737bafd9825af924fc2ab7fea42245a3d61782f5408fcc3569992635c28f6878fb49633f99c46bb
- SSDEEP 384:qc1IxoQ9ushafou+NQsMsR6QbOib96/P6JPNI5iu:qc16afoZzx+r
- TLSH
  T10E42FCE625F351365373A4F5922BE221B36140035A48C991B74D82473FAD36CE7F7ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Codex-Thread-Bridge-Windows\cloudflare-tunnel.test.js
- Size 2KB
- SHA256 55372f46bfe57768fe3c016e48a4563a96352ecee4f2c8021756ee8d3f412411
- MD5 746c5cbfc12e41890e244b28162abbe9
- SHA1 a2f6a2442ad372d9754a56d8d6f272d6c1d52da7
- SHA512 4caccb66ab03a0860bcfb9511c1c03d36574b03fd9a1a421f13915508b16ad0f99333a2a4835579588b21e2ad10fc63205647afbe56e310530f7f482872f39fe
- TLSH
  T1385166D56CE60A20C1B651FE8E17621B2313DF06A60958D1F2BDC1153FCC2A8A35E97C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Codex-Thread-Bridge-Windows\docs\assets\logo.svg
- Size 929B
- SHA256 80ea06982a167634af76a7584dfe2d41470721e9fe8239e1cdcb7e2f99362281
- MD5 56344cc6ee432b5e4ac75763974c526b
- SHA1 55c97c709c087c38b678200bade7dd10cb767722
- SHA512 e2c4288003d01cd446e9329b3b1047f7abfc50f8cf0f8ffdbb2ead23a0db3af2d46eec8352f8259d73a0d301606fd5d4c49f7a29b7e3a9f3fd9aa8c877442c53
- TLSH
  T11B11903AD96DA42AE2188158EF903438965A81C7C6CD5221F588DF7D1B3C5E69C3F2E4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  Codex-Thread-Bridge-Windows\encrypted-transport.js
- Size 4KB
- SHA256 35cd7cd99f148d9eeaeca2b6c369c8576f5a118b0f94f70432782619e89e047d
- MD5 ea79b5d38bd6dab7b30d562eb59e4ef4
- SHA1 497b453b3fa8d1f44f7e5e6a5486360191e5da80
- SHA512 368e41e730bfc9efc6e2d70486c358d3778d14b3373799edbede88bb041eb49c6cee4903e155c1c7baa9a817cb73e01b1c81086d7485385d88b261d37d520faa
- SSDEEP 96:iqNFsBCiN48GHHPl8DDut+4bs0bYwUQcHojeSknR2q:5OBdNdI8DDut+4WHyZq
- TLSH
  T1F49153E17DB4149543E6A4E3485BE052F3D383273648CAE4E38C80806FDD458EBEB895
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Codex-Thread-Bridge-Windows\encrypted-transport.test.js
- Size 2KB
- SHA256 174b171328315982bb62f592f99ff0dd11b3a9731e27c628c2d7e842ad5a124c
- MD5 f9bfeb97048ee64947aebd36aa547949
- SHA1 51fb02099722542b335d8f93db50f90678103bff
- SHA512 d52da3da9bc6d5c7fd8f8100a582b076812612c58a7f48ae4436439c2187d2336616aa851c85b7dac1fbd3001030dcdf76c0b74f5cd58fc735e2afd66f97e5e8
- TLSH
  T159512FD5B8B20C9C4BA241FB58A3D21CA792830F2A45C2E3E37C02453EDD148E967DF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Codex-Thread-Bridge-Windows\handoff.js
- Size 58KB
- SHA256 bbc512967e95a0fca48eafb24cf6e88be74fb3b78cd7cb154d6263afa27b16d1
- MD5 bc8ecea43ff60633521df70e46a5c3ad
- SHA1 adeba11e0821ca2c27ab02801533fed2d5c0f9eb
- SHA512 76d9e8f8afaa8865f29c1172dfbf7c6aa8cebb85d03fb0c35dfa53a25046500dcde520a2e8c25697d0bb909fb79c2c5e5fb105c21a3f9eded9ddaee3df98c814
- SSDEEP 384:nFjLiok4ry5yDRXP2oR95g+T+uTor9+StRC7xyKukpRbJPWH4+ZiuutxB5kq4vZt:nFjLY4ryyg69jpT/d7xyp+tLyVvmJ1ve
- TLSH
  T15443B64624FE2031467321AA2A5BA0057336D1133A4DFD94B69C82946FDE52CE3F7BED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Codex-Thread-Bridge-Windows\handoff.test.js
- Size 26KB
- SHA256 87923c896d931ebcfeea1378f31bcffc330f84e406445adbc1a2be284239e23f
- MD5 65176573bcafc34281ec8f425958edd5
- SHA1 c625f9078826f31843c246e6ab879c38d0a6a052
- SHA512 f6f4f0e4c514f38621ca9464e2f9df54c488b43196040de5fa1758f91c59bc97c8a6b2423eacdefdd30586e3bf601e71829e217e7ec4b6806399d5f29853ea17
- SSDEEP 384:l8r8y0/UPEFmuQbmovjNtctM4if1K8vikipOHBUSlIK5dTmshzviRapjgbihrZfY:luyrQbmovjnctMjvitpOH1ut
- TLSH
  T1D4C2948950BB46244AB7B3BF2A1B500D3732C6072A4DBC95B7BC82543FDC62C927667D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Codex-Thread-Bridge-Windows\install-codex-thread-bridge-mcp.sh
- Size 1KB
- SHA256 0cbbf7c62f7ef92ffea34559fc1536beffb25c7efe4095c8a37cd22924717d1c
- MD5 b3cde54211aedf34deaf46ef61b41c0d
- SHA1 5237be06e345ada4560ba94df0f41310a6d3a4de
- SHA512 c1c4d680ca889743f3ca79aa8f6abf7f4c91087493450670fab672e1eb3ca6523504bd80de857d250b90dacdd898695be6208dc433142f6a07d862279d755495
- TLSH
  T1B511AD21BE1C4DB1352180BB6C5722A4F25F7FAFD5187892C963A19C0E5D3ADC2C35A4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32