d88463693524329a1fa614bd3408f653f64d34dece9badca4324be549d92032d

Sharing

Copy URL Twitter E-mail

General

Target
Randm64.zip
Size 16.5MB
Sample261102-pm82pstvfz
SHA256 d88463693524329a1fa614bd3408f653f64d34dece9badca4324be549d92032d
MD5 0e98c36fdf7a16f34ffcc167918d36d7
SHA1 d2d71ba2d8621c802d01b97a0a5dcbb641ba8c1e
SHA512 5718a85b374fbb84636298f9d753f5c4111366528e97614d45c524f400093264b3801a6d0f9d467714d3d839aec1bb5653f16cefb143f09bac4472e211d0d739
SSDEEP 393216:8SYDRh6Z7R5n94g9lQ9fMQYl/X0rrS4HKsQVev/44PjhXyR:8SsL6BR5n9bHCfMQYl8rrS4HhQn4P1m
TLSH
T1C60733B0F693D6C3DACB593ABAF7C1D349726E54B382ACE5DE4C4102068790414BF6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Malware Config

Targets

- Target
  AssimpNet.dll
- Size 196KB
- SHA256 744d229b164946ff37d761a9db082348c2c208d9bf00d0ce7905639f91edd897
- MD5 aa30560acf776bba2398bab72247707f
- SHA1 803b103da7d3ec46226740f4b9a7174b2535aa07
- SHA512 3e70e5da9d4b7c0f1b141557b08e83c603f0f77d4dbb04292906c2dd4afb5be768c1d2f238d40eb750c45c2bf3b6ffec090d85bf278f5e3f24bf79658e4a5dc8
- SSDEEP 3072:XqR6kYf6oIBvQC3av1cAmMQ74bnZXkzbxG+oETUngKkR9/Pk8HTrcXEFtYi6Y4Xa:PtC3aNcAmVbbxUETdPk8YG9
- TLSH
  T188144B1063DC899DF7AFAF39F4A84CA64336A75A252FFB2E1084A5FC25477448D012B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  OpenTK.Audio.OpenAL.dll
- Size 86KB
- SHA256 1dff9a6009e5ccea0643a26c4c615445f2123961bc14f0c38412652ca8570e73
- MD5 935a90d9ebe5876407a78435aca8aae1
- SHA1 fd8911514bf7754bc0393d36ab89bc7c3f53ad11
- SHA512 8ae8424397d5fe12c8bb54391c7c95e7444048226e7467810769bdf830f54df099d866ae8f2c706ae910a724d67b69962351fff9721b921f82ee7dc14b7cb721
- SSDEEP 1536:IOEKKD97K/KyB84Vw5wfRnsM5+7YGYX41LX:eD9+Ka84awlsM5uYGYI1
- TLSH
  T1E183293993E80EF4C4971A788869CA017B39F15C7D4BB31B54E7B9AD2BA7FC0408169C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  OpenTK.Compute.dll
- Size 44KB
- SHA256 bfd886ba0c9c2271f4ecf2659414553fb841686bf7be6aa86c8f615a3b1f9ada
- MD5 96384e1702fb86aef8c9320bb7493289
- SHA1 a2c1add621542522eb78380da4daf51f8290a544
- SHA512 d89f22fea7f8d037b21a6f8be4b918fe1d36a87952b414c550e6dbca3eec3be06b2758146088e8cebdd527b4e4da1ab7b14416dca23858adc511404c01e2aeb8
- SSDEEP 768:IQYmSlzZKWW0geZrRkO6B8qOVKLkyHaBdKdJrcl2:QhIqTZru8qOVKLxLcl2
- TLSH
  T1042329079384851AEDAE027A1DF14E3797F2E88666131B0B1386AD5DBE93BD0072CBD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  OpenTK.Core.dll
- Size 8KB
- SHA256 64451371b0a76e2ff57a633eccbba9f590f5bd98217363c1fddf1a46472d930d
- MD5 2d696db113980e635874b18db0908a7d
- SHA1 071a716d83898b73a707bb9c6bcf03be0a290be0
- SHA512 900aac7813d4531991d791969a9cb975982cabf8c074d6f1c6dceaaaee462404b46e0886d6353740f6d9e1589eb639e152c7ac14581daa923e568a38ce2bd6f6
- SSDEEP 96:MLpew0+Mz1lEzt9XIhjtBfR7oZtLuBLctGuOe7pOBo9M:tbEzt1cfM24tbv7A3
- TLSH
  T10702C620A3ECC375EEAF0736AC7287504539F744782BEF6F878E50062D1674556A1BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  OpenTK.Graphics.dll
- Size 4.3MB
- SHA256 f2db37254f303686a33159c9ae521cf8ce1c1a189db10173fd6b5fbb1856dbe9
- MD5 8c2e72929d77de9ac7f77067eba3746a
- SHA1 b5b8ff99d1499676e069109d56a6c1ad26143cf7
- SHA512 0274c27f2e87b85117b84f7ab279c6b8af290ffa9fd21e6aa62e57706976a395dcdafd69bde242116fd7f3fdd7bf43efe4250aa43c4c4058638148068dbae95b
- SSDEEP 24576:CsmaEJiOak+GCak+Go9S8JyKQ+V73HBQBFosxZz33aRZuvuYEsANlYwOy:C4Mak+GCak+Gkj4AV6bz3/TEsAN
- TLSH
  T13226B305FFC18E6FD6DA92B1806B251115BED8189777930B620BF27E6CF1B8C6E994C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  OpenTK.Input.dll
- Size 8KB
- SHA256 bd305f24f17a23ae3080ed3adb9ca9af09ad502dbc627af7768679855f28b82d
- MD5 9a20a270bf8193cddb1021bc7c967865
- SHA1 f9bd9dbd3caaf67d9eb9deec23b443e2b486a009
- SHA512 764f30cd1bed3de0977dbbc12eb7995935766372800a1cc3edd2d992cf38417cd7448299892c907c85b8750cd8bc71be913b4ebe7b1c9da7ffa9df2069320c99
- SSDEEP 96:x7B/fUjTAMaUD7nDoAzR40qsznAreSyZ4FlEMCJi6tlTOf6bV:dJ8jTrDnbzu0qsunyZ4EMUtlCQ
- TLSH
  T18EF1A610B7B84337D87B177679E78A2461BCBDE1DD63961FC1C4260AAC7054847B3B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  OpenTK.Mathematics.dll
- Size 308KB
- SHA256 ba28f6df017170cc4530db13124280b8eaf30e02ff4e2601645b312f64d17874
- MD5 38453411958733b8aec37f780a8fc611
- SHA1 54884717580092a257f83ec209ee24684a2bfe90
- SHA512 5dff2fcace031775b1197b62e25b0034981aa6eb61ea3b690f3cd4c21f016f6b95e58450140a7a14527d79fd9050704da25638afae7221705f51d6d4de912dac
- SSDEEP 6144:vtX3zCrr57s3xnaN/pH0p05U2RCQTwY/PWM7iq8Lpp:vpmrr57s3xnaN/ttNsY/PWM7y
- TLSH
  T1466481998E6C463BCA5B1AFCC1914963B3708035A353D7E3258CAAB13DC7B1BA45B1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  OpenTK.Windowing.Common.dll
- Size 12KB
- SHA256 6a9d4de8792c24d4c0dcb9ce00f96ea8bf3b7617e4e6f7603e8fe4c765a2caa7
- MD5 9a1e6d91ee0297a5ab8bb6a9203161c5
- SHA1 d5c14b11d831f5ccbf8a8a164af59aa9e5ed47ce
- SHA512 beeecb4339a392664a8efa205fc17d182456cc023a9afda7305205fbf276f98118410b3745978a45b4d4c66352e1669a6d495a41ee76ef50d703a9eaa6d3aa76
- SSDEEP 192:4FydaEN9OJbm+RZGncpESpC+rkpIm3ywDGEtj8b93EQY8MEOWQt74HAfC:4NEsDNkKmDqESb93EQY8MEJFHAfC
- TLSH
  T17A42E92A933C437FCA7B0B3BB57603200277A7487E13DAAB5B55A8467E067456602FF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  OpenTK.Windowing.Desktop.dll
- Size 51KB
- SHA256 b42d3d59e14156e5e804e594c7e57d57a03d57a3d9068a2e5f3bc341450dc80a
- MD5 cc10057d4901dd7fa2809863c75d6822
- SHA1 e63fe530dcb387e54cb805b5d7a6e444e41c10b6
- SHA512 c2a258a46431022784fd1a75cb383f7edf1457a2767bb6a8f8650f7d678ad80d5aa64a3cc6845e1e78d2fc67e34006e77047cc5ec95ff1387b646713c27d0bda
- SSDEEP 768:aWYxTasHSp+ztJu2UU7DPD+bp4G2RvZ1u6Nuy7+tqh5O:aW+Hju2UUrmp4HCy4s5O
- TLSH
  T1E733292113ACC33BD7AE373EE87202121277E5853933EF869592B0996DD37929C106F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  OpenTK.Windowing.GraphicsLibraryFramework.dll
- Size 47KB
- SHA256 87829b495aeae49bc5cea08a12fde6764e8bd3b07f0a6c3e1b8595c41e9d3f6c
- MD5 c5b98dea97a50107efe12be514cfee3f
- SHA1 a31b3755f4afeca774488f99fe6ab566e3bb86bb
- SHA512 5b9bc7b6d7cb3f59e4a43c6a9618d0b837ab12d7dbd66ba1264d5a7651aa76b05596c52aab044fc2e9cb26fe288b2513291aad63a5bba8f3bf8ad466fd305243
- SSDEEP 768:NUb9rIfcL+R1jJy8uez6YtCuR5s4sA7DLPrvbcv9bJTjV+rrZNr9LyPOM:NUb9kldjFrQy5s87XP3ol5V+rtx9WPJ
- TLSH
  T18023086983E44F6BCE9C413564371B49E7B0E2876803975B3699A2B0EED338905736F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Randm64.dll
- Size 3.6MB
- SHA256 51071b5802b3630e3b689b5760f1df18077fd3296dadc0635d61f1a3323c5ac4
- MD5 beeb5a7f6b95b4d2fd2ffb91f7061e52
- SHA1 a7448a7890436953710f7d75d340cd0ae27a5d5c
- SHA512 6dacb5e3928cd699a25e61a6c47d9a249b5672c50edac648c3604ed79bdce81bedcda50838bf4cde02b8f45839a34a142f5b2dac5e3fa6361f4bc3e96893c4d8
- SSDEEP 49152:kRkQcNMJgodBsFnZcugUtJfgIIT1Ur/uJ2t:koy1dBsFnZcugs/mvJ2
- TLSH
  T1AD06AE6033F80605E1BF2F78A4B2426847BBBA56AA76D74D165F358E2F677008D21373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Randm64.exe
- Size 252KB
- SHA256 82f2442d28fc86d1424c91054b9f21d7170eabb33442f2f4ae366ecc46c9b22d
- MD5 a3688daf10757a346c7eeeaeecbf9f26
- SHA1 8e7347c3b14d0a0ce9be4e299ca0fe56770a98b2
- SHA512 cc51986f45cdf7d8584260f64b92e841ac0a705d6fde45852fb64337575c3a8ac1721462630b3a53c470137a6c001918895ffe01fbe04c8550814277afe25294
- SSDEEP 6144:FLp44j3eO1aYtRY5sFTK7uAsCWBvHyOBnjAIDmqtYV:FXaY3TyVWBZBnj
- TLSH
  T113449E07B6A950FED26BA678C9520901FB73BC964BB193CF035049B61F62BD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  StbImageSharp.dll
- Size 74KB
- SHA256 5cd5e5b038998360d597bd2a5e3c57f932d507c038a186bb5675e9ac9fcdf661
- MD5 59f0eaa422da11ace4dabfe217aa1f42
- SHA1 0815049a3884efebdd20ef95444022a476651372
- SHA512 9efa9d8d3bd0a296e1236d2dadc08ae114011670d448e3cb4082afb57d7df64d8e1c20d1f5538c9176c7008bb046a9796525de61b4dc1eadad816a70a2eeaa6d
- SSDEEP 1536:nwWnmWamYiOQfNNKX+n8zSzr8UwDlCrdebhIs64F:waYifNyXEADlCrdebhIs64F
- TLSH
  T1FB734BCCB7DCD976D91E8ABA88B056D543B270B2F673E78E69E902211D413C88815FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Tools/RomCorruptor/literal_mio0.py
- Size 627B
- SHA256 38dd7c8df4d7fdfaadf9e393b58c491a7bcd39ac85cf4329cd4a0d2c705b3b97
- MD5 2d7e286272cf81a05507d09cbd030883
- SHA1 330c9adc6107788dc86391ca6ccebfcecde2bcd4
- SHA512 e51b26b11c3d3a290839e2d4ee86b1c7eb6710952ce888df7fe871d750a5f686050472702d9fb2e3669c93fe014f1a05699cbaee2a878d36ee36baa4972f0c23
- TLSH
  T1C2F0024BF3D407240353A17FA0B452018AF03C07D74106756BD5CA30CFB60385A26B79
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28 behavioral29 behavioral30
- Target
  Tools/RomCorruptor/write_ranges.py
- Size 3KB
- SHA256 b9bcdcdaba3aa67ec4a447a7afd6141f20ecbd0455e3577e556fc053c5bf326a
- MD5 008bc6ad3bfa9c3e727520e56d03ebca
- SHA1 cf36a4ac9707d72d5ed7e907ad6eef0c07bc9d1f
- SHA512 fad9771d9f0e3804503c00f77288f261f199bf35e98717f51aa91684cef48d5c27d98e5e63c86e655d4243ab7dc29dbfd07361a73bf64a2a511388c525690e98
- TLSH
  T10B8186374E970012C2DB91DA8E2C9B119B20775771423630F98DE768DF91BFAF93A168
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32