f741fc47adb7058c5f4547e90178f53b68917497561d9b584b411dd336b0878d

Sharing

Copy URL Twitter E-mail

General

Target
PavementJogger_v1.1.zip
Size 28.1MB
Sample261104-s9lrgaxy2j
SHA256 f741fc47adb7058c5f4547e90178f53b68917497561d9b584b411dd336b0878d
MD5 0d99a5f76d8085cfd6e97b1d84358889
SHA1 d0965868bad163548582587ddfe82ee8dafc5d02
SHA512 cd4edecdaffbbfd75c3000cb41e71c438a4dfcfd37b16a632693cbe3d10259665e396781b14f99cc440e36efcd687afa9809dcac7b102a24c5d9312389ea9961
SSDEEP 786432:kWm8ZYfP3usPNp2NARtLG+FySIABXZeyR4dlAs0OB/T:kWm8ZYffusPD2NARh5y+ZIs4dlAsJB/T
TLSH
T1BC57332E37592C08EE3A72F3AB37041FB12F98D523EDD86D109A96F52439C304DA955E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  PavementJogger_v1.1/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 596KB
- SHA256 b85b4c4d8dc0438cbaf6e8e5b0669434cbb166bcb363cfb9e41b82e2b2db230e
- MD5 5f5adc5d97713b28596280c479acda86
- SHA1 fdd72a68c159a0e928617fdc3073e3e380c92cb1
- SHA512 307b7f7981881b0ba068a573f3c094067aceee05ec181239acafdc56cbd580caa7f7f583635b59b879194feec3e858d77a6414baa3b0c28fd51bf8f499aeab8a
- SSDEEP 12288:6OmYAmdeVH9Mwe9Ek/7jY4hOTBPyh9GaU:6+AmdcMj9Ek/7jYSOT87U
- TLSH
  T143D47C56B7A402B9E577D138C6834B5AEAB27811572093CF03E897AA1F137E11B7F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  PavementJogger_v1.1/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 7.5MB
- SHA256 5078e34e4a641dc2efbdaf65a236195aa4fcf79fd16b2c63c1e9aa06a783ea1e
- MD5 0067e99b79455bbd8b8eb3ad5e84415f
- SHA1 c63eaa6c2daabda0e738c27e8a18598c722511f7
- SHA512 e6bd549bdc518f02484dcd83edeff3c5a55b4ce6a6b75f2e7be81dabd960ceffa3b525b7ce3a90568bc42d2a1919208d5ad8bda695b9585961844c60fae54c87
- SSDEEP 98304:pQQN7uNnkXbVwTm06QR64C/gOtKFKGTlqgPZoq:pz7EkrVwTmsF2wKGTlqgp
- TLSH
  T120867D5A92760068C8ABC23DCB676B33D775700443306EEB46905F6A6F23AE1537E7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  PavementJogger_v1.1/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  PavementJogger_v1.1/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  PavementJogger_v1.1/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  PavementJogger_v1.1/PavementJogger_v1.1.exe
- Size 651KB
- SHA256 dcd4781b3a48aad48df4c04e88db153966ce9bb065400f2531d9a095410002c1
- MD5 cbacfffddf2fa67839a1bdc73eddf94c
- SHA1 c038ae5151fdccf80d0dee9099c7b3ced79443d4
- SHA512 74d60ff5f47df1a637885e5bd3f604f54686a422af97790f3f76c777863b4bc06d88f7a2a11d56bb624ede9121934eac695100b3030e95109f9c50125ff3c705
- SSDEEP 3072:FQJ/VdFgIW9mYucJ/OD8JlsI9mTI0RWctzEyyTgYX218sCBHUuMb/AeKJIFaTOg:O/7FG9mpcJ/OD8zp7mbjFk
- TLSH
  T126E4E871A7A1E665F5541078CD80DDF463A7FCAC6621C90B4AD43EA33B8F2638D292F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/Assembly-CSharp.dll
- Size 93KB
- SHA256 3585bf2fc45ac40dd4931007dcf34ae408ced34a61cab517ec0239a0a80503ba
- MD5 57931250ebd2efe8fbba7e1e919668ca
- SHA1 04a6c93f48ec8ba32a5e1751951808a6d7ead61d
- SHA512 5bf443f5395c09ba3a362082e28b8da5c838db9c6bfaa1436757c95f50489740e16d5a98b101134003b4451fdf07ae91c6a9b103121ea90f467dffe899ae1120
- SSDEEP 1536:JdqGzXsF1MZ2S87tayWa9z1GHWOs1gfkPHI2jXQc5AEYJf:LqGwF1MIS87tzfBU2hI2scqJ
- TLSH
  T149934B15B799AA33C3AE06FF08F4860D2374412AB59AF7DA1DC525EF4FD6B4018027A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 b092fe368431d0da453fb7136c6943ea30d468b76ddaf7206b4de662fe7f6605
- MD5 332364108e96867134be02a56753985c
- SHA1 acc171509cc2804a5329e7c48712060ef60b4654
- SHA512 bad74f72f2e9eb8d6e2e0c31cc6e413a95d69241f158a3b7f1c4e59f7eb4901a06f18b34d0dd67e8702185395b35715d4560abf9109f1147894786656cdd7cda
- SSDEEP 6144:lUjTQ70cnf8MoVRxS9iJdBF119RJXG2yg+Q:0EiH119RJXr3
- TLSH
  T15A344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 6a9acb0b24143ec3f9a8c17217e6c3d51bf052e7029571f1d7ce26b7a790c716
- MD5 b784201be798781e97b863a341de5648
- SHA1 a758448cb5ff587b5ef83301669e3eac23ce8a66
- SHA512 097932999668c7981b15c50cb6472052bee98cccb1e7bede67e996ff557db0130315368906e6afc20fc5e0ed1ba435d1d9fe60bf77c3d8c66faa34bab3170e65
- SSDEEP 6144:jkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:jkwkYfx8ZNCxL
- TLSH
  T13544281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 83e5c4c39a5f46158e3afb59d340e452b52f5d9c1ac1ca7be9e7f6fccf1db826
- MD5 163532a7c4d213b0d4e7c2690ad640c8
- SHA1 dda74d2ad2e2df118898ad5153c413aba6a01614
- SHA512 9b46908eaef195121e8d162ad72456f50e6cc3a578042bb9d745fa17d7b8246f08493f80e2b280e69660023f6b82f8acf388b8299b99ee873858e8ce03a8c226
- SSDEEP 3072:kGHTFkizuGCOE/htnREcacWown5WJGL0MIeJgNe:kGHT5+H/33vJ5
- TLSH
  T194C3F92563EC872BE2EE177EF8B515100FF1FA0AA436D74C5D89B1ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 f06485beb3d6b67e4eec1325882edb83e54a85eb39bfb3b5843371d0a253d41b
- MD5 43155a84acf3d89ca79e93774a2afeee
- SHA1 7f334ced237313fe933f17077635dfaaa2d1e07e
- SHA512 cdca354a2a04d3e57cf2726b705891d0f67e353e7f2015510c88e5a561ec45e05a36db4ae40b7e982f8c7f8a98d2b6c4fc5a221db4c8bd3d8f08f20ddc84ff69
- SSDEEP 12288:/WK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+TxHzR:tl/umv0Z15PyC9vMNV1+TF
- TLSH
  T13C354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 e7cfc27e4350fd3f995f1cb473074e425d68546ef2e0b8eb826d0fba9a2ad8cb
- MD5 4d4bd56b247a1b072d8d7d4ae60c6022
- SHA1 64425dfe75b28a5530faf8d8771f3f98ca8d3c9b
- SHA512 77c16c8f68be7223aa388da780a0c2937f5bb411629167e841de9361520c5fa0d978bf1ef43bce07205d017b1e13c0835c499eda66c0cce8ebcd54960ed0e92d
- SSDEEP 384:tEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxZHsnRbli3ESmMadMkrVr5Ux:tcZC8Ll4LiMXkv2Y2McdTsj5Q
- TLSH
  T10CD2C915D3EC4311E3B727B57CF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 41b7c2cd5db34095c5391d1a89a12aba1f1fdb074e6736521b886fccadac68b5
- MD5 3747d441a7a984f86837f3f2aa23bc12
- SHA1 5659295529ff0fcd6bc11e4c9eb648b82698188c
- SHA512 589340f0d4442b8d24c591c949c9b0f3487f65b3ea8caa72a9f2cdb94b59e481099d42653c3673759cbcb155dc2f0ce1c360962b96712ff887200c76accf49c9
- SSDEEP 49152:HsWVZLbth7+KwFOlXJJWO/wjDqhxoZCkUBojiJ:HsWPLbth7+KwFOlXJJWO/wj2hx
- TLSH
  T176A527007BF86A1AE6FF7772A47424140BF5FC56A7B2D38E6904A17E0C63B508D617A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 bfea942f8d2147952c54058f5fd4ef3b47ebc3d94497a0188de6ba4b17e3ae61
- MD5 0ed54598432da5bb4a2653e67df3bb8d
- SHA1 96a7640210f15d5b2c2498db08edcf2b9b9067c7
- SHA512 a863aff69c7b9f5dc274dc53aa1e9d43379ae7808e894f1e78cbcb38d0f0acd46c8c80d77e7f30f5da2ac574164586c8d14f265581ba9fd2b865aa295967e2f6
- SSDEEP 6144:rHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NY7c/nENZ4k7cheeEL:rOtOmVsXjt/PicgEN/MGq4k
- TLSH
  T154A44A1077B4592BD5EF2B38E0B24968A631FC076B26E75F4681B62D1CF2B809D417E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 40971c782e7767671e6871672b3afac95dbd3022f7e64b2c3f90983119e02eb0
- MD5 d5ac51c51102caf1d6aa28fa0537cb3d
- SHA1 da47a45bc68bd08ea87a12ccc4f55dbcae771334
- SHA512 8dfa8f0ebae43cc037e9a5c834ef27a3669707894be62b8becf6898cdb48e802663a32b352d29ea40c32b9f280ecda089c5255a1d0fda1fd4a6b7bafbe7edf2c
- SSDEEP 768:lT7LlB8tFJutlA/kUTr8yI32JVmugdQVwGHZgm5S:Z7BBk8tlA/kVy7JVmuguVwGHZgm5S
- TLSH
  T16013D51043D48B7ACAFB4BBAFCB342264676BB026F37D3EF2605D2995E4374C4412666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  PavementJogger_v1.1/PavementJogger_v1.1_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 bc17d27138e3875bfe2e1ed6ebb80c146f124d92f9be8b5f328caf8d78fbd4a1
- MD5 ccbc1b26618b73265c5f0396fd5b6a3b
- SHA1 fa4153204ef531036855f44d949d0e38808fb29f
- SHA512 db45424ae483065cd2974171d98532d0b737bf8884642fc0ae8daa12a283733bc60913ac3372aa57b4a60e25a27a3becfc70d4a7363b22dc74e0f54c0db4c0c5
- SSDEEP 384:3PQA4DgKGRwrtLsWkRbli3ESmMadM1vz2a:3oA4D/J/q
- TLSH
  T16182602493E44315F6FB4BB4ACF7428686727D13AE36C79D298A135E0C327884D63B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32