a042a019b3b5ed0d827b9e8be68830f46cd99d3c8db3b3dfbbf669a33ab7d0d6

General

Target
MushroomDpi.zip
Size 346KB
Sample261102-glgbaseb83
SHA256 a042a019b3b5ed0d827b9e8be68830f46cd99d3c8db3b3dfbbf669a33ab7d0d6
MD5 cdb87ea9b659ee9d92e6f1faef30ed7a
SHA1 5feb1714a3e17da5d4c2611389efc8d15d8660dd
SHA512 068d35fa79e1325cb062d3c4538069de1a730e4792c89bf0b961e91472df4f02f1eaa0b2a4b9b30ebba93235719c5e2e06627a157bb3ab8246ce630b4e2c9d60
SSDEEP 6144:1BSG7DVKz6pGz+Q/eKKlmKHvZQ+zyXoynLOWnIxiPjzp1mhAmk9T4EvTEm:/V90eKKlmevZQsyYynHIxiHLt9HvTb
TLSH
T12274238FE440A732EADDAA8069422B0D3D11BD3CBE1688EEDF2C5D635CB1C4D7096955
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  MushroomDpi_Baslat.cmd
- Size 321B
- SHA256 45599ca9500ab8e7c6b4652883bbaefe488a33430881766f2b17f0645f1206ed
- MD5 93b569f34e5bbfb936e9701f0f69f91d
- SHA1 a8ebd1f4d6127249cc5bde7bde60226ad3cf5064
- SHA512 ddf19beae667eff8864472bf4fe41629b411af668574bf49f696d20eccb5df91ad2eeef73b3d5915907eeeaa3a1cdc782e07c51ebf2bbef9a7c5bee8e9e738d6
- TLSH
  T198E0262E028C5078E7CFC456206D2412B899D0032E3157D29669A4742B2B3DE81C133A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  x86_64\MushroomDpi.exe
- Size 516KB
- SHA256 c1f250f38c5b6113e164b57b005977cf3ae4bbbb145587ac12d3668946b0b138
- MD5 2de27e16e5a4df2c9040b5aebf75d35d
- SHA1 90cddd6e2fab18060f1d4fce366ba4c656f604aa
- SHA512 499397e791d67e7dc1b79c9122b9a8f03bc811e573af49e45043ba96108cc837e55d9d42cdc72d9673ecdc5869bfa33f9641ed424ec82ba1809137df34febfbf
- SSDEEP 6144:E/Lx1+girCrvpVb1rvMy2QFJlmUZ+WTZgxy+D8seXKP/Zf1VxNR0WJX/NoXOJRt6:E/h5dxseA3HNoXOzt7p/f0+w
- TLSH
  T19CB43A433955A4CBD3403F3C00E7E13DB12C5892F4AAAB046FD2B562EAA9FC56C975C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  x86_64\WinDivert.dll
- Size 46KB
- SHA256 6110bfa44667405179c3e15e12af1b62037e447ed59b054b19042032995e6c7e
- MD5 88e1c19b978436258f7c938013408a8a
- SHA1 09b77c8c85757e11667a7b83231598dd67fe0b8b
- SHA512 eaa0d8369b76fd9a4978f14702716ae31d801cd0dc36a86531f9320b4ddb683265c4f0e07af2b9d2e85f513270d98d1b11ae7d501d08287442bc505176d16e14
- SSDEEP 768:itSVluu2agCfRSB3QEw2VWHxWYuaO6JXtltdUUwhqWB8TicI:bUZWECHxWDABdIyTic
- TLSH
  T13E23C703F64251BBC568C27083AED3526E22FCC66354FADF829FF7952885F42DB1A509
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  x86_64\WinDivert64.sys
- Size 89KB
- SHA256 e69b5ba3f0cd6cfb2983e442636e7f0b342b61b15264b0328317d4559c82cf50
- MD5 6a33620de63bccaf5e5314ee49cd58fb
- SHA1 ac728b339681b2e27099fecc1419821f01d04b34
- SHA512 638d1b8aa4dc0e4ac504f51aaa3ec8375ccc3d69a4d36821f6bb98060b58586007f47966b9d58d222b9f067e12e80755f56559286cbabec8746146acaf24f945
- SSDEEP 1536:8ovgCRgYL/h//oJJw5AdPtey2AyWpdsihch9WXi2v6MuO2:84jmJJsKle9A5pdsiqg/vsO2
- TLSH
  T1D9934C46A2E201C5F9F6C97895B59213EF31FA81AB22D7DF11D0981E4F61BE0BD78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7