a382ed103dc6bc0b832355916940e27fded85cd31c52d532c54ec3e6ed02a72e

Sharing

Copy URL Twitter E-mail

General

Target
TheExecutor.zip
Size 1.2MB
Sample261102-ymrl4ay12q
SHA256 a382ed103dc6bc0b832355916940e27fded85cd31c52d532c54ec3e6ed02a72e
MD5 f45b49ae5f4388fd412e758f93d228d6
SHA1 9d083290530b89ab2809a7c3108dbe9eb7088e25
SHA512 d0c0303fb6beda032b2cc18530120d3ff697dd04938edfc463f844dad541ff12fae0d1e24493c41d6ca1f3d084151087eb9d61d490a140c492f3b9fa508d9927
SSDEEP 12288:ri3JhzaHOWrmy37Ogr2VAHx7JijBZdPfP+Q4AFUBNgVr7FMQPlZg:07za9rdS3VAHxKBZd3PT4AHfFMml6
TLSH
T1C5457B4527FC8727E6FF1B75B434421647B6F846E96AE78E1A48E5EE1C637808C00B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  ARMClient.Authentication.dll
- Size 66KB
- SHA256 9931b5d62e7fb38eeb8f86f6204b6055f7eeca08cba780698167c8846ca90647
- MD5 bc1b4885c1bcc757113a7e2c000f4821
- SHA1 e1153f6423567ca4a2b7d4947cbdb1aed5ca11d8
- SHA512 5fcdc9d31956437a4bdf459e337b76f93070bbf430121a651e52517e833d79f38ce3c3c124d099bda5e039252ccb32f40f64ae3517250a47f73134402e0433c8
- SSDEEP 1536:M9vycbM2Ur9ozNPl9kIzGcGJVOvALlqwhuPDmLNzR4INnS:Pcj7kIzGcO0DSRLNnS
- TLSH
  T196636C85A7FCCA23E6DF5ABCD1A4D1471B72E7966810F78E1C8CF4EA244338046416AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ARMClient.Library.dll
- Size 32KB
- SHA256 90d4ca5ab2baf128d46a3f5d5a71bea524c413f40bdbc4a03668436bcfcce5f3
- MD5 d6bb28c67f08bead73403ae90787b64d
- SHA1 449086e0b990918fc4f15c8ef9e8d48a6486b7d1
- SHA512 6b29dec43b7ccdea3c74afe7a40d6391e26702238f4a9ecfd0fb223d279021ebbe0801723006beadf340bcd50ea8752adb696622dad83e0b32a5e75c6663fb1b
- SSDEEP 768:OZmbSucRuI3sUeaHj2eQLUrDj08BkaXQyu6ewxaaicmhH9AIIKqU:vbj3yeaHjTQwHPkGQLNaa2IdkU
- TLSH
  T1FCE27CC48B6C9523C98B5EB896A8C1436E35D3DA5D21E65E08DCF8EA1CD33C9970473E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Autofac.dll
- Size 205KB
- SHA256 792c4c63e36b571e9d2d1afb4bb500185b6bb98c02381248b13400741eda7934
- MD5 2111c791846c2782b0affc7f67de015f
- SHA1 9b52851e4e93486f11c71cd29845a44f3f81a48d
- SHA512 38e71571b517536c0b7b16b9b457e19d51780c382dcdf119ef2aab14602554901d9b818f197606eddf9ed476ae70085b4839560dc6602d095ba98213c74bbc31
- SSDEEP 3072:47EmzCWx8C7mZB/A05nGALO8cS89FJbv2NBJzCNz9UG9AWbX7w9DlUmK:HVDb/pS7S8dO7MmGHz7w9DlUm
- TLSH
  T158244B4763EC1336D5FF8F7E787820024BB6F846A44AEB4D5E8451EE1662F049DA07A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Newtonsoft.Json.dll
- Size 531KB
- SHA256 7b1bbdd36dfccf96d8b941782bc79a43072130989331242548c3553d5c8578ea
- MD5 859adf11b4d2a656a8ee2d070b726743
- SHA1 d53682045cf3b3d674b0c957643bc2abc7fa42c4
- SHA512 6540acb9f3e8884af60394aad8e17964d4cf1469d7f0df589dee86a672f711588b70d3fd4033ecef5d954ef4cd7ba8581c2855d6311921da68a6a9b7c20e0eba
- SSDEEP 6144:YeC37wbJmJ5bd4m15M+S50cK7q2UGu7WEYEaWdDBLH5WHxJ16Wi/h4aBTBFFu4J+:s37Ogr2VAHx7JijBZdPfPi
- TLSH
  T19AC43A502BF89726E6FE2771F438061557F9F45AE67EEB4F5A4095AA1C837808C00BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  System.IO.Abstractions.dll
- Size 53KB
- SHA256 7da16ef846948a94f665b694b9b65e6882496dbb27ba57a17abfbb51f7cf07be
- MD5 f239405f612d8f172eaa8291be224ff1
- SHA1 3328282fd11c277af4e55747dcfda358243d9942
- SHA512 038d20ea3aa0419032b34c7dea4e4b613fe4f7bc75256820c94cbaf7bb8a5dc5f6bbcc08d21f3a6129cb5fb9773100d11bf7561dc11844a04dcaf3d6bb6ef0b4
- SSDEEP 768:Dui8/DurjNnJRqqjqqBqqjqq5c55c3dxgYk9A9yu6eTLSnEKmh0QSnE5:Dui8/DurFc55CjgrA9LNHCIHh
- TLSH
  T19B33F75C2FF4E157DC2E05B479A0C22A6B38D682C803E31A2BB5BDF56C733A5C61245E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  TheExecutor.exe
- Size 305KB
- SHA256 576b74eb4ab1287fc39e4f1dbecc478deb8b0bd14f7104ae1c6446946ffd4a28
- MD5 6d9dcaa75e1846e79d6f0eeef87aae10
- SHA1 0d6231f8ed4445e7b1e716bb34b55e5e362a825d
- SHA512 eb8edd40ff7881b15c809febdcab209ebaed7a6ea1098425f035d2b0cdac3f4e0ce832ef35b5e3802e7cbb4c7df661c38f471145c584ec3ff167654ca6c4f88e
- SSDEEP 6144:jIQ4WYGDlFUBnNgVUq19v5pwOMw1cilZg:0Q4AFUBNgVr7FMQPlZg
- TLSH
  T14C644B86636CC7A1E16F1F76B86282EA8733F9069CA5D7DD194CE7EC18637818C10727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence
- Downloads MZ/PE file
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12