14b084634215db7254c2e89cdb7f80b91e9d13396a7442cfb768eb5a43f68099

Sharing

Copy URL Twitter E-mail

General

Target
MindbreezeTestClient.zip
Size 1.5MB
Sample261102-g3qlasec78
SHA256 14b084634215db7254c2e89cdb7f80b91e9d13396a7442cfb768eb5a43f68099
MD5 38ce869bf32e609f2594d1d658ffed73
SHA1 d1dbca702da2744334502fdfc535eb6cd544cb03
SHA512 b523a1d94ca455c033be04e340d8ee55c322863502c2c1fa1fa9674097dd7ae6a99d8a680aa251b508b04c0a5ae6d5f9ca0f018de5f14ce04fef436899b22dc5
SSDEEP 24576:EniRZcil/APhbXXK11Hl79yUTqFkbGAXx4n1zfPbUsMwQazSRaqyZ5xN3Vn2Ay:EkdQ2tTmkiAXxAIxkLA
TLSH
T1457533CF8A798FDAF577D8385E94E4138AE050131647CD4F929503CAA4CE7E9369B207
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  Microsoft.Bcl.AsyncInterfaces.dll
- Size 26KB
- SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
- MD5 ff34978b62d5e0be84a895d9c30f99ae
- SHA1 74dc07a8cccee0ca3bf5cf64320230ca1a37ad85
- SHA512 7f207f2e3f9f371b465bca5402db0e5cec3cb842a1f943d3e3dcedc8e5d134f58c7c4df99303c24501c103494b4f16160f86db80893779ce41b287a23574ee28
- SSDEEP 384:cOJWqnwCBbNAP0VES2j0cX6dAl+NWpVzrdcoquWeP/WxR5kHRN7dDFcYR9zPrf8O:culwCBhdVv2wK5fdcUtFFn9zT8pY
- TLSH
  T14FC27C1A935C1317CEAF2EB4E570D9422935E78A2C22EB3E1588F2950D97345EB31738
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Microsoft.DotNet.PlatformAbstractions.dll
- Size 23KB
- SHA256 26c5e62c1fa37a38710bb3a4cc8e98554039e5d60000c1eb9202f3407adf5047
- MD5 a2d46d4a7bfecb514313dfdeb67941da
- SHA1 7c41023dfa9732be95898aada4e18bd506937883
- SHA512 cc5efcf915a7ec1a2f9f739ae97f3cda6769926e62e06bb358659a3c1dd71bf56acd39b7595388d2c25f284315960a5cafae1617dbd90716d3f8d1828756622c
- SSDEEP 384:bY5O4f7DKxIDJMV2c8fevZRW2SwWzHRN7IlDx7U:bYzfSgJMfQJexw
- TLSH
  T1D5B26B848BFC8517D9EE1E30A2F5F5562939B7830CE1DA1F0558B68D19237C8AB30B79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Microsoft.Extensions.DependencyModel.dll
- Size 57KB
- SHA256 7a2fd8109ecb6552793ef6da4746d826d5617a303f1cbe1cac0f77087e30b577
- MD5 ff372dd7ad58790c2de3cfa85002005d
- SHA1 cf034f0bdb002ff52aac139d0351f29bf6563290
- SHA512 94e0c4ebfb3888efcafc3662b180095b2f65700d74478b9d369ecd5c156db6db8d16e9c2afd13e25cffb4010810f557553ffd0b5a579cc804931804be98309d3
- SSDEEP 768:NqK7Oqf3c1W0zf/RkE3B/G7Ly/onAS6tLjvoq9S0+:zhc9f5tQaLjvoMS9
- TLSH
  T161435B4467FCA316DEED1E79A8B0A55903BBE2CA5412FB5C4E8894EA1D1BFC50600F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Microsoft.Extensions.Logging.Abstractions.dll
- Size 64KB
- SHA256 154a5cac85be0c7d144f4e46bc8f054550405ab8c14444b8872cf904f4750b8a
- MD5 7e4077b1de8c84de9bda96cc580d8cd1
- SHA1 d0c8df2043dde5b8ed2c57a0db6d188cfcde630d
- SHA512 e7ee138510a5979c947b39544e5281fbb3838333f7b4d80c7f3f655baf7c2ea213c3ac64ce760ec8add0715e1eeed353e76f5bd621307784e417866727444ae4
- SSDEEP 768:YJSQpn6Ge9qAeIbNGgc+EnOZV2k8tDbBJKrwMuwZ5XseUzh54eZBTJRBttYNh0kt:YbyqwNGgTtHXWz0mttJOoatfuzS
- TLSH
  T1B3535A115B8C5363CFBE59BDE161B603573CC6AA7003D35B5CCCB2252D6BBA84A106FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  MindbreezeTestClient.exe
- Size 14KB
- SHA256 afcf3c5e1f1875ee7537ec94998222cc62a805eb072fa1ea93c307977058a57b
- MD5 4a2fe615b559394fbd950b9ab0cf20ca
- SHA1 0b10b945eec34f2fa28b8a901daa357ea17b584e
- SHA512 4f2ccddd6f6dba4e0b50462afda4e6288b76a149e0516193c4eba5eee7aa3ab7797ef4315c20c519febc68bc5e4d5d7c6bb761576eb9588d860ff39ab54c0774
- SSDEEP 192:Rc0FPrcoVBV7XuGL7azinEylKR6wPpl2jp8R7d0Mjc6hTWP:ZPVVBxXVSCBKRPFFd3c6hTW
- TLSH
  T1205208047FE88B3ECB2F0B7AB473925042B1DB14B103EB9EAE98B49E7D5374901156B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  System.Buffers.dll
- Size 20KB
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH
  T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  System.Diagnostics.DiagnosticSource.dll
- Size 169KB
- SHA256 7382a455ddbaa57e6471d1fcd37c4d7f495d9f009618327ec5c477f9497c431b
- MD5 ac324378cdfa7a39346f9005066770ea
- SHA1 c008a256c38605b4c6b17dc0902875619b1d9efb
- SHA512 e78b54e58fce17c9d63bf7b4006a5d4fdb539020e87cd6efa577e916a41b58087ecf68386ce3e08c60c25c46a8b0f58cd532acf5e8fd799591d27c69348179b5
- SSDEEP 3072:lNcL+aNAwQ3Txj7LV2VGAgtCcIbf9WYD5wjbg2CuLlwNa:TwNAwQkVrf9WSJu
- TLSH
  T14D047D1033DC076FCEEF9B79F16458024772E947B116E76D2A44B9EE2923B818A1137B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  System.Diagnostics.PerformanceCounter.dll
- Size 38KB
- SHA256 493a23d60953b21bc0602d9958c7ad85890861d14524b37742f757a7cb1570c0
- MD5 d7a6f4d6619b02516b7d3879a0382986
- SHA1 ea8d49e9198335bf8d212626f18342dddafe52dc
- SHA512 2798aea8611fb3b55e9529b90e7c3033e6a17bcf5e6eb41086745c0de9dfd658bb9d3a098d613aee1bfb3899329c1255727d1fd2203d7be50f8ce9223bc33af0
- SSDEEP 384:INlQ5SXVXAgdm87DBfVmVYSGPzPzaacLVxJV5Qo6B1ZPGMJvnNWplWmDcW8lWYDh:MlQAXHm+3cHfMJvnI7DShDCViKLPZeD
- TLSH
  T18F03F71AC7FC001EFDF74F703674D5536A39BBA26D30C95E04A890DC18A2BA5DAB1726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  System.Drawing.Common.dll
- Size 43KB
- SHA256 0b1e23603f49613b623a82a2b04260642ab8b118d138726dda6556bead77b966
- MD5 b4278b55d65bbcf999985da86de407f0
- SHA1 36dfe8986daab7be6cf2eebc11aeefaead43e5d2
- SHA512 b60acbc393739d5012dc70d62a7da1f0129eed122bbff528e3eb6247d6f33d41a20c9dc11fd898128a86e70db97cbc06fa489e675e162b6be96a9fd202fc58b2
- SSDEEP 768:L3cXN6zHQbt+EjlxO/LFMJhZcJinNkkU8eCYSpwEitDy97qe0tlz9xqegGw4Mp:7cXYMIE3O/LFMJhuJiykNeCYSpr/9q5+
- TLSH
  T10213C502B7F8051DFAF70BB03DBA89125EBB7EA13D32C79D1454418D19A2F949672B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  System.Memory.dll
- Size 138KB
- SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
- MD5 f09441a1ee47fb3e6571a3a448e05baf
- SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
- SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
- SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
- TLSH
  T1BAD37D6857C6DE56DB5FEC70E02052016631C52F5742BBEE5DC8B8F026923EA28193FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  System.Net.Http.Json.dll
- Size 71KB
- SHA256 56f51736571f694409acaed608fdd4d7bf55adb00e72bc63ec73d08e43d8acff
- MD5 0de12ee2c9e50b9281ae34ea8a26177b
- SHA1 346375f9c2e4ddf450070a8f74183b6e174b461d
- SHA512 c28a39bfe144aec900d1f1806a5f7dbd26900315bc2237f2435a4b6fd861643d9d207127ab5f95dbbf6b3630f0789751771489dbeff36d6c70d90e26938297d8
- SSDEEP 1536:SNLOOOU45ST4k5UVVEo52s/B3VYvbS9FlXABDMia4zE:q8sqE8FYvbS9FlCDvY
- TLSH
  T1D8637D1867EC8717DA9FAABDA934AB160B35D75A5A13FB5F318C91EC14833040B503FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  System.Numerics.Vectors.dll
- Size 113KB
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- TLSH
  T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  System.Runtime.CompilerServices.Unsafe.dll
- Size 17KB
- SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
- MD5 c610e828b54001574d86dd2ed730e392
- SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
- SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
- SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
- TLSH
  T1A8824A21CFD84503FE627B344568D183FE38E38A6806A36A2586F57A1CD63C57B31E38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  System.Security.AccessControl.dll
- Size 38KB
- SHA256 05a7e96022c76f2e6b013a564beb8f3c795d1b87e99809eed2a29a5d3b0bef61
- MD5 531d5666fa83d15b0f4cef3dd94ea890
- SHA1 2a5d381a58be6e7bab1172524873ddfee162019f
- SHA512 25f519f5053cff5348507f1edfda241f17f2fcc331444ea069b5fc703257f4a3dac3c6e7e15a66b2db7210738f8cf9a5ad6f5646b406e07cd7d69b82982db918
- SSDEEP 768:fTIuMNQ2Rm1rM13XIfUBz9zA+4JgVFkRYWcp741+09J+e1dZoMpwnBGWBky/hQDu:kuMNQ/pOBPhQjujV+7y
- TLSH
  T11B03E802A7FC1159FEF74B706AB89E522C7EFBD63D22C51D0054A5CE19A2F84CA21736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  System.Security.Cryptography.Pkcs.dll
- Size 15KB
- SHA256 390bbf1fb67b4483de81cf904f6a157aaf0208554665647623d9e1e4c8bf5af3
- MD5 c67461adf40afbfd6d01cd6a0055862b
- SHA1 e774b8ba6eeaae61b8fba4451508e62e98aa912c
- SHA512 46b0b8060913d6ae272b9bcf5038abb996fb676d56761748d6843f64f2acd8be2a3d00a30de997ee7d7304d51d4dd8f1e756bc3e8733602e9ff45da79f497372
- SSDEEP 192:1bK1Dtrw+Kwx4Y5qhiWtDhW6W65FdQHnhWgN7aJeWG5uE7MqnajG3TL7m:lK1Dgu4Y5aiWtDhW8QHRN7WOuOMl636
- TLSH
  T1E6623B51D77C5553EDA72EB0A6B5C4423E3EE3C668228B1D1585F28D2C537C8CB24B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32