c60bb04b2de461f8cb36ff1f8b54ec7259a43f4efd03a8b972418802e98ef3b8

Sharing

Copy URL Twitter E-mail

General

Target
L.A.M.S._v1.0.0.rar
Size 65.5MB
Sample261102-ghxtwae18s
SHA256 c60bb04b2de461f8cb36ff1f8b54ec7259a43f4efd03a8b972418802e98ef3b8
MD5 3f914dac7fa9242dcb2d9df4d6594344
SHA1 7de94b5c493d271aa085e775bd79058bcc0b816e
SHA512 c8a617600924b91fdaedfc76b1284cea92f2777e66703a92802648a1007190beeb8e09745b9f807dd32c0446372626797e5e884153804020fbc5e08da1603320
SSDEEP 1572864:uXe8RuBcQcs2JiT/R5+VXTKVXMLehhRc7CfsJi/BhcSIA8a9VCcVI/kS:5lyQ6ELT+VXTWXMww7CU4n5IA8a9V+cS
TLSH
T1B4E733C1B991A4B7FC04F3BA4026050AB715C5B5BB80C74739FEC1E6AF9E6906E658CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  L.A.M.S/L.A.M.S.exe
- Size 27.0MB
- SHA256 508f0f3a5818a4c2af9c6bd976a65aa5e9eaab1fbc10ffd0dc79151cc41734dc
- MD5 eb2a1585c87f6ee8317289f5e60b9f7d
- SHA1 64c75b2d618e448c1e452a8d2cc7348ae9ac2aca
- SHA512 90f91d5f1557486ded593f561b0d0c535e88dd04a16ee52af63dec4768d00a02d6cb828ba2fc20ae680cb4590766a7a66a1087ae913529b2a17b9620f5a613ec
- SSDEEP 786432:bIbTAwjwTuzm1Vf81BGXGZJQo0VSdNPO6qbx2fFqbg:kHJcTqm1Vf8TqlTSHPO6o2f0bg
- TLSH
  T1FE5733A1DEE700A7E9D5443EC876D038B5326DEB433285BF1374811B69A3ADC9933978
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution
behavioral1 behavioral2
- Target
  L.A.M.S/_internal/MSVCP140_1.dll
- Size 34KB
- SHA256 206c931bf90fdad8816de3b5e2ef80b2bcaa9406c89ecc05fe6fddffe251e982
- MD5 d2b43663ed95d09af78bfab3484b1916
- SHA1 52f87dc7563078c0b9f839ecb1f9bea11ad608df
- SHA512 8984cff1c8f6eec407dd4cf7599950f42fc7dc9926e6ed3120cb1a4ab9f4f6ca5b3d040c8451adf2113ecbd4301d21f1ca88c9878618ceb5f3da3b4edce71663
- SSDEEP 384:FtXxBY5SA78zxAXUaWdWcu5gWAJk6St+e2KxaoR9z/bcIH2y4GlN5vEMgYR9ztDh:FtXrAh74RsuJc009zZXdrgE9zRh
- TLSH
  T157F25BD6A7688442ECA6183482E9CE437C7DB7D60F20A6DB12A2E51C0C937C5FA3595E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  L.A.M.S/_internal/PIL/_avif.cp311-win_amd64.pyd
- Size 7.5MB
- SHA256 58f5a34480d9c1fee201d00fed15dee15d216b54f35d25cff2eb23f457610121
- MD5 b9ca8cb092ae565c3a2967801eae49ef
- SHA1 c6ec8ca09367bca0281aa11b745dba4a9779249a
- SHA512 0b9123ab9f5c95a6234fb3af1e32cb1161136d884787146ff0164d4478b897e0677a0be36c5b2e0d4ffd8d2d32625e319c8357600d88aa2ba404daa82d6bb483
- SSDEEP 196608:9JnInaFb9R9F1IIAbhcCEgJ2oxj59z2TfeZUpmRdQz+5YWJz00EtvyDMa1BKmjPG:zInaFb/9LIIAbhcCEgJ2oxj59z2TfeZO
- TLSH
  T14876D08AF19391E8D23384B4857BA716FA24342E9715527B33E6C5297F937E05B2EF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  L.A.M.S/_internal/PIL/_imaging.cp311-win_amd64.pyd
- Size 2.5MB
- SHA256 7c14103a82135642a53f4ab9151d2d685aa6ca35dc7fddcfde6e9ec4d9d10b72
- MD5 70d34b9eefc98cf97143430ec4910115
- SHA1 2bbfcee61afd6c096d3318eaab6c84d76d420764
- SHA512 e0d1cf5f61cf9429dabd6f57e7a7754233bd252013166f0092f37ffd9ec5bc0ebe5c9a022ca10b16db32b67064e1d9ef49be996852314585553c3c2212274953
- SSDEEP 49152:5xImZ1PcdCTUgQpeV4yw5GBixGV5idCf+dwzJDpcD:D9jPBdidCsiJN
- TLSH
  T19EC56C06E9D19499C6B28034CDAAC616E3B1B80D17F187F77684A7F53E23BD0353A396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  L.A.M.S/_internal/PIL/_imagingcms.cp311-win_amd64.pyd
- Size 264KB
- SHA256 fb9587059467c48b3af19901bd9b99ac62dcc3582298da1f0c119ba99cd913ec
- MD5 531044346f70dda5fa7ea6469904a266
- SHA1 ce5a90be1bf7934d212169ebc80656f01a961f19
- SHA512 24d5ae390aebc4a138e304578964436a1c7a0e543c1c94ac2c6d4ef1e33f26be95c950ca87261fcd3d23c1a30a954e7d6b58747b85a7aad38628ad979a5dac68
- SSDEEP 6144:Cj0U/91NmBC4RI7OjhELmLg9uP1+74/LgHmPr9qvZqhLaHLTLrLfqeqwLjPjx9F3:gN/9HYhELmLg9uP1+74/LgHmPr9qvZqo
- TLSH
  T1BF442756A2982CF9D077E03AD193A50BD7F138150321D6EF47A08EAE1E17BE5693F342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  L.A.M.S/_internal/PIL/_imagingft.cp311-win_amd64.pyd
- Size 2.1MB
- SHA256 82f6c61f72079197eda1a4ec10e66f00b64a29550303743f7a873daff3313f7b
- MD5 6c3ca3ad769995ef9cfd8cedffb1d902
- SHA1 d7895f77fe1e6f4fe8d2f14e574b04e1dc9ade79
- SHA512 f19cc0780a94b1b9e55e29484af0df60fda1c538c266c4396e9562555e55556cbea66b10eaf355c4d44b05086276823466537fc0c35c86554535e4221e449b77
- SSDEEP 49152:+193n4LCO+JodulGoTjyZuiST5aR5KJunv8Y45:dMpF
- TLSH
  T127A5BF86E29611A8C97FC174D293861BE3B574010305ABEB65E09B997F23FF11BBE314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  L.A.M.S/_internal/PIL/_imagingmath.cp311-win_amd64.pyd
- Size 24KB
- SHA256 a8be2335b3d093489b65ab5643b991cdff7a267736fa744a6751c14b31733c9c
- MD5 cf7fd0c92cf60cd445bc81c5dd03d9cb
- SHA1 b5e194b2b269b155d4f106faeb1a32da11d967e2
- SHA512 b7bfb524f08dfe4228c690b51960a33c2755523b6c300e6d932f8dc2c931ee6917779f113a8061360bad5fd493f061cf47115659286de390245d0c076e05c24f
- SSDEEP 192:IdHAO6wv81mOmBtlkL83lXwdbc58hZCoWofHA+N6cCXdt4tTjUDxQgeAAJQFxOUz:YAM81s716qyA4HAltrDxsAAJGOU
- TLSH
  T154B2F9696F901499C92F473E88620A558129381313E45FDF82E2F2AD2BD3FC3663EF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  L.A.M.S/_internal/PIL/_imagingtk.cp311-win_amd64.pyd
- Size 14KB
- SHA256 40cbc62751344a01912412f195797d4abfb102da70d4cd1bbce46946c4f92a61
- MD5 9bd40aedf7b5ba32386749ef04fec7ca
- SHA1 d4b68ad0a7311d281a341438fe2b866fa0a9c235
- SHA512 76cc777b2cf748760dd7958d2a6492f4ed885cd6e6d3fd323e0127e694362548dd1fefce87e8175b05c70dbe0018cdb922550be2833932c77808dcebf53773a1
- SSDEEP 192:z5LSFtgQf8p8RYFomnlolBxJRREBZYhajoo6XgTAU:1LCu8C7lGdRWNooVAU
- TLSH
  T1F0622819BB640CF7D5248175C8B72EA6D276F6346332A3DF4370821A0E727D26F36A49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  L.A.M.S/_internal/PIL/_webp.cp311-win_amd64.pyd
- Size 400KB
- SHA256 846fd983e957f200c6df734e79a24aed8cc2f3318d5ad8d85a30dd0faa61a07a
- MD5 dcdfb675a75500a8fda2707732e86683
- SHA1 ea731c5ff33d3a5a55d28c0f36ef5886738e57f5
- SHA512 26f2501a1324ee74e58e5b68c768be89d7ec62a5bdb24cdc7e782076dbbf98e99016919eb93afa310e56c02fb852a2b71d2af8dc25a26041778bbdd520afff8a
- SSDEEP 6144:9AtfDK1ZcNg/92V3VzwqBQl198HlSZTCNiy6TporL6wz5ENlMhdg3:GtDOlE3Vz9DFS4Njco/6w2
- TLSH
  T115946A46E5A625E8C4ABD078CAEE555AF6A53C1C035096EB47E0FE393E33BD0563B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  L.A.M.S/_internal/_asyncio.pyd
- Size 63KB
- SHA256 746bc8fa88282afe19dc60e426cc0a75bea3bd137cca06a0b57a30bd31459403
- MD5 07a6e6dcc30e1c4c7e0cdc41a457a887
- SHA1 53bc820b63d88cbe889944e242b50662b4b2cb42
- SHA512 837f1e40db9bdf1bc73b2a700df6086a3acdb7d52afc903239410b2d226ffd1dd5e8b5f317401bcf58dd042bd56787af6cdc49af96fcb588bcf0127d536b6c6d
- SSDEEP 1536:/0f8MOytWQazE6XWpkJONIYOnsO7SyLzx1z:cf8X2sE6XWpkJONIYOndx
- TLSH
  T174538D83E2808595D957A074D8B30F56E771F6500B0403DE62A8D29E2F733229BFFB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  L.A.M.S/_internal/_bz2.pyd
- Size 82KB
- SHA256 00b8ca9a338d2b47285c9e56d6d893db2a999b47216756f18439997fb80a56e3
- MD5 aa1083bde6d21cabfc630a18f51b1926
- SHA1 e40e61dba19301817a48fd66ceeaade79a934389
- SHA512 2df0d07065170fee50e0cd6208b0cc7baa3a295813f4ad02bec5315aa2a14b7345da4cdf7cac893da2c7fc21b201062271f655a85ceb51940f0acb99bb6a1d4c
- SSDEEP 1536:CX8z7RFgpNVu5eYu00NI5OhgYNxx8bhm+uVIYCVH7Symxs:CszlF+uyIkNxebhEVIYCVHL
- TLSH
  T190839E93E3605AF5E45B92B9A6A04357E331BE49035093EFF75883162F13F813D6836A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  L.A.M.S/_internal/_ctypes.pyd
- Size 121KB
- SHA256 c148292328f0aab7863af82f54f613961e7cb95b7215f7a81cafaf45bd4c42b7
- MD5 565d011ce1cee4d48e722c7421300090
- SHA1 9dc300e04e5e0075de4c0205be2e8aae2064ae19
- SHA512 5af370884b5f82903fd93b566791a22e5b0cded7f743e6524880ea0c41ee73037b71df0be9f07d3224c733b076bec3be756e7e77f9e7ed5c2dd9505f35b0e4f5
- SSDEEP 3072:QjyeQXVhflFZtc/uTfLImTi6pX5DJIYLP0i:QGeI+/uTfLIm+cXxp
- TLSH
  T113C36B0B23581099EAA7807CC5B35F17C7B1B859171087CF02A4CAAD2F637A36E7E716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  L.A.M.S/_internal/_decimal.pyd
- Size 249KB
- SHA256 980a63f2b39cf16910f44384398e25f24482346a482addb00de42555b17d4278
- MD5 c88282908ba54510eda3887c488198eb
- SHA1 94ed1b44f99642b689f5f3824d2e490252936899
- SHA512 312b081a90a275465787a539e48412d07f1a4c32bab0f3aa024e6e3fe534ac9c07595238d51dc4d6f13c8d03c2441f788dff9fe3d7ca2aad3940609501d273bd
- SSDEEP 6144:E7W/Dmi0FD5KaN7VqqO9a3juVQt07Ou9qWM53pLW1AT3Otjm1+Br:L/Ki0FdVI9a3juKeqcO+Br
- TLSH
  T11C446C57A2490CA4DE738474D89B9B47FBB278854320C3CF03A48AA76F577A323B9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  L.A.M.S/_internal/_elementtree.pyd
- Size 125KB
- SHA256 02e30b6a2bee5be5336e40a9c89575603051bde86f9c9cdc78b7fa7d9b7bd1f0
- MD5 e31fd445c65aec18c32a99828732264a
- SHA1 1e7e9505954b8143faeee6ce0b459712f73018b1
- SHA512 20802cae1b75f28a83e76b529caf16c8d00bc050e66f6d8665c4238c4579e391c78f121dccb369f64511fdf892619720f8c626a39a28c9aa44f2bff7472cf0f9
- SSDEEP 3072:DJeqwp57DnMInmugVdkub0cTGugGdWp/g1Ap3ZrBvdL5bFIY6fvmU:mnMInmuoNb0ci0opQAp9BvHbk
- TLSH
  T146C34A6B6295C0AFE462407C95674F06D7B2FCA50E4083CF6284F6AD9F333923EA9355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  L.A.M.S/_internal/_hashlib.pyd
- Size 63KB
- SHA256 87dd0c858620287454fd6d31d52b6a48eddbb2a08e09e8b2d9fdb0b92200d766
- MD5 b4ff25b1aca23d48897fc616e102e9b6
- SHA1 8295ee478191eb5f741a5f6a3f4ab4576ceec8d2
- SHA512 a7adcf652bc88f8878dae2742a37af75599936d80223e62fe74755d6bafaafd985678595872fb696c715f69a1f963f12e3d52cd3d7e7a83747983b2ee244e8a2
- SSDEEP 1536:r5m8HQNUbaxjTvKzl9mjNLOjxNHeuNIYOIa7Syuxrm:r5m8H79mJOjPHeuNIYOIaum
- TLSH
  T174538E46A69544A4D96781B9CDA34F57E9F2F1001710ABDF0368C18D2F233C3ABFA766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  L.A.M.S/_internal/_lzma.pyd
- Size 155KB
- SHA256 f5e01b516c2c23035f7703e23569dec26c5616c05a929b2580ae474a5c6722c5
- MD5 b86b9f292af12006187ebe6c606a377d
- SHA1 604224e12514c21ab6db4c285365b0996c7f2139
- SHA512 d4e97f554d57048b488bf6515c35fddadeb9d101133ee27a449381ebe75ac3556930b05e218473eba5254f3c441436e12f3d0166fb1b1e3cd7b0946d5efab312
- SSDEEP 3072:esdh8kZbsOb0Mt4zorT81qjznf09mNoqCPAaQVIYZ1Ncf:esdhBZbsm0hi78YOqtX6
- TLSH
  T122F33A92A394F4D5F7628C78D6624F17DBF678090310929A02CCC36D2B1FB759A2E727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32