f0034a8f96abbf909e03e0dacae5491fad501afae23b1bcc0629541bb5982bb3

Sharing

Copy URL Twitter E-mail

General

Target
aether-0.61.0-windows-x86_64.zip
Size 601KB
Sample261102-vdjncabw4s
SHA256 f0034a8f96abbf909e03e0dacae5491fad501afae23b1bcc0629541bb5982bb3
MD5 42a92806af94acd8dd67161f8d599cc8
SHA1 80e252b4bef63c63d61a4a25b6d22e6b7303a84f
SHA512 7a1308c8b8ad39c5c2eff725238ab9f5db5d3a11f2688c0bb173c4c05e94c70be9dbdd90b28b1a4d6de806c0206b334a67524f88264612ed14a70736d233fe9e
SSDEEP 12288:+ZC48b+9mnac7auc/vVlSdaw7tVBJZsTxmb7Ve9RtQgY:rx+m92uGtlIaw7tVJs1IZeTtQf
TLSH
T1C3D4E1B6A5182934C90EDDB66447BFD3348A93D66442345F3F9203A2DB8B2D46737B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  bin/ae.exe
- Size 96KB
- SHA256 62ca0ccebee52011523d41778fcc3c3b14a36728b5add1ac3692a4a3d77be92d
- MD5 8d006a632411fe89b4c3855330155a1b
- SHA1 c9d2c2d1816509f0a4bf2300297af73a142d7a24
- SHA512 07f3b77dee48ffabeee62ffe0b9863e6acd395a346696410123027c99cd2cb1e33f3534953d1fffc5b55ec25a4fcf16ac4fca33dc7f50eb22fcfc350d179edb3
- SSDEEP 1536:6btDsyeuKsLWJ7Z5AsLqmmePfOKL8BX/YoZQ+sfQ44Btb7qERW:6btDsoaJLSePfOKLywo5HCEM
- TLSH
  T17FA33B16E24210BCC647C2B8DD979371F271F4B40374F97F3B98CE356E22A449EA865A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  bin/aetherc.exe
- Size 334KB
- SHA256 709aafd0421886cfaf483c53261966274642b09c0e8d216bd2d8bb4afc7657e1
- MD5 58b0789e47c9c65fb5d9159824639642
- SHA1 d476ea39ba119e5003e2ef33528475143775c3d0
- SHA512 5cc35f09fb66c5ce464ba4f0dbaefbcfb0d1380cac26a6e2bc308ca1f0b7c96cfec5318b1de6df71c0a5c1ba82f981f51d24829f8c52cc9309bfd6e98d0e0174
- SSDEEP 6144:6z+02BrsjskUVHICOc4Oq48+WB5x0lLKa6QRkcZ8o9:6K02BrYNCOc4Oq4TWg0k9
- TLSH
  T17A743927E28764BCC66BC134C2979371B871B4A902707CBF2658CB352F12D905BBAE1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  include/aether/runtime/config/aether_optimization_config.h
- Size 20KB
- SHA256 6f2cad9a75fdc5ec0528aa5cdd9c2acc0ab5694e7e513d5706328aa7fdc7ec20
- MD5 8b2dc528baf0b28e44259414c34c9d83
- SHA1 00fb4e8d974332fb0dca5bb8c13d341bc59fff5b
- SHA512 cfc3f478879d9f0aebf0d7d08e2e8bc69f5e7fe28f68fb715052bf251e6ad26b0d04ff7234653fa043011c3252ffc1248029cff0d476b4ffde0335338e66966a
- SSDEEP 384:dvppXupxIOVlI0k5RQW9xVLl+BoVpeeQZP9HxfgLaN8:J7EGVpeeC7d8
- TLSH
  T16A929687259A50B266764F21AB8DA4A2E3D8C07F57E414E0F04E43681F3D78C53F5AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  share/aether/runtime/config/aether_optimization_config.h
- Size 20KB
- SHA256 6f2cad9a75fdc5ec0528aa5cdd9c2acc0ab5694e7e513d5706328aa7fdc7ec20
- MD5 8b2dc528baf0b28e44259414c34c9d83
- SHA1 00fb4e8d974332fb0dca5bb8c13d341bc59fff5b
- SHA512 cfc3f478879d9f0aebf0d7d08e2e8bc69f5e7fe28f68fb715052bf251e6ad26b0d04ff7234653fa043011c3252ffc1248029cff0d476b4ffde0335338e66966a
- SSDEEP 384:dvppXupxIOVlI0k5RQW9xVLl+BoVpeeQZP9HxfgLaN8:J7EGVpeeC7d8
- TLSH
  T16A929687259A50B266764F21AB8DA4A2E3D8C07F57E414E0F04E43681F3D78C53F5AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  share/aether/std/collections/aether_set.c
- Size 5KB
- SHA256 0169af4f0c21e2d4589d81fb8aaa13869cf9beb8dbed173bde15e383147346b9
- MD5 f17b964d8ea4c9414a7250035d13dd3f
- SHA1 8c335b03d0e4f84eb0c5872e7eed20d45187ef41
- SHA512 fe54f336039cfc884c68ffa8ecae032ca19e8e6113697c55d60e61170c7ca40c08143e9ed8caba62a2284a1204e6ce2311d5a7d1ac5709236e34a202939be749
- SSDEEP 96:XIbD/bRMZ69FapZ3MqzZOctzKnZkx6ZZjEvlYjvOHc6:SD/b2Z69FmHVOctAkxOjelsvWc6
- TLSH
  T185B1BBC7B8D175522379E33E4BA29008F676E8039D6FC541B7BC4108BF768186AE5DB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10