3d800b7dbdcb6874e29ddd2e9a1313f3d82b323e89a720c632c708098a7ca0e9

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_3d800b7dbdcb6874e29ddd2e9a1313f3d82b323e89a720c632c708098a7ca0e9.zip
Size 7.7MB
Sample261107-1debhsfv8y
SHA256 3d800b7dbdcb6874e29ddd2e9a1313f3d82b323e89a720c632c708098a7ca0e9
MD5 5f9c1a9fbe1209a2cce19f0a84fb9c3c
SHA1 84d6ec328bf227443079c4da6e26344b1700bdbb
SHA512 70ea0c9da3f590bda0f572b1b90f12a9d3f7e5c111973cea12f2f3fef308cfba3f22dedb8fd75e0dec1b5e084cddabd5363fbf626e1f9b7a50b47065feda88f0
SSDEEP 196608:fS04Vf2vSTHnGlQkEQjWNkbAAGLBLkEokwYIPCuf1vTdRw7:K0ofw2Gll2kIRMk2P9NbHw7
TLSH
T18C863327EC6634B28AB41ED2C65484179F07C46BCD6D4B31BB28C262CF93941F76A17E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  0.0ximkut6lhk.node
- Size 1.6MB
- SHA256 c5f81f4623559e4357508468a6509eb8e9b214e7ccf466bef5f83c694822b652
- MD5 4f3747b52c6a15d487f89e5b791e5817
- SHA1 8b99a9953d5179b2dedc9494bdcfb33e5831fe69
- SHA512 d17ef4eac4da4b152829aeeab3f914473a5b9afabcab11c9ed0f4697e0f5547a228d6015601f1ef29f8c5a786ded78f71f0c044bab3ee0ea10f8884042889c42
- SSDEEP 24576:M9JZo2B/EspTCN+afsF1uheFYwTg5BhuHDGjMsbyF1lChR64fdky9pW:EoSna0FfFYwK6HDKLhs4lQ
- TLSH
  T1FA758D46F2B900FCC46BC278891B6607E7B2740517749BDB55A08AAA6F33FE1167F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  0.22tybcjqvw7.node
- Size 214KB
- SHA256 67c5ccb589f6c30f5e2103c960722253d9c09d46e28555514eea0a0b159a2218
- MD5 3cc70e273768ca7ea3c6c10026c2649b
- SHA1 c8a689239748df49370520e3b0151b1116f27318
- SHA512 6d5d55c96a97b744f7f005995fa8a3ac8fac5bdc44878960cf130fb7bfe1180f16ec679cb186c6b63d68079a1618df6f72b922347ce17b824d319ed9fdd0308d
- SSDEEP 3072:+O3uM8JhvlCBHZRyN6t/Y8McDLWy7RD2TRXF1D66wOs+B9NTDGLvdy:r3V83oRyN6t/Y8MWqydMrm+bTqL1
- TLSH
  T1F0247C46B2A504B8ECBBC13C89534E02E67378550760EBDF07A0477A9F5B7E1A93EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  0.9z6ed380lnd.node
- Size 415KB
- SHA256 cc7fb651af0ee3f5ff219b10e46d1456c71521fa92fd9ff5a3b2eb59a17bdb72
- MD5 3c0376a1310fc0774f3375b4d2f604fd
- SHA1 991a248199474b1e05a612d2e85fbc1de6fc1372
- SHA512 3b3a5d0cea9ed88385d26cd0c53f6be27b5b6a13fdf640ce00860f428541e5e2adc35fe80f5ec75472ebaf0b5dc74e09f3f3a109f70e640fa180f1a57c81002b
- SSDEEP 6144:0Mp4YJMPTI7hEMfyeo9g3S5/Th0C3BR+LoMYlsViNte7W:0MA4E8yeo9q+/Tf3BR+J+sVM
- TLSH
  T1E6947C15F79404B9E4B7D27CCD239A02E6B6781A0370D6CF03E49A662F277E15A3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  0.e00ypq8qhln.node
- Size 3.4MB
- SHA256 58b9b21f81e89a03b6bcbb0bbf3dd65c94983c71629abb5262990d4d00b94ca6
- MD5 3a39ab6fae8068f9aabed4a4606ffa43
- SHA1 8cb654d604654aefac5662c96b3a1830e65c0bb6
- SHA512 d60fcffcf37bfd7a79b4fcfde6271be7cbc56f7e75617150d71465e4af95c19c3830069e9061e1be544a4900304101e51f2686fa4b351e0a3337b77f655e3fc3
- SSDEEP 49152:LuZFjZpr9IJZXDMxuMyX772VvmXwgjcTJsv6tWKFdu9CUPTvG7y2f+4Y7iGjp2u+:aZFYC9tHgAJsv6tWKFdu9CUi+
- TLSH
  T1BFF58D83B2A65264D8B3C13886A7D55BDA327C02CF249ADF115CB3496EB37F0193B725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  0.l1j7g2laz7n.node
- Size 1.5MB
- SHA256 4f42603e864aacb060ba6abc27f072723163bc25114c806a93836c1b22762d6a
- MD5 b23c406ecfaf6d1a5ff22468b8cd99c5
- SHA1 2db69ee25d7f19a7e5db38efd841663bb9964da7
- SHA512 b1163e4badf254d37f0be99bfa235a054cbc353ce100601244975664fd800769909827fc3f6cc5c7a1a118b6f8f809d94ce568b99fc641d2bfcca94bf8e1efcd
- SSDEEP 24576:9s9+ZqNyD34Fo3wJrSloI3VZtmpM7geGEjVleb2ubzAgEETsxg/ScrqfwjajKjsK:9s9+ZqNyD34Fo3wJrSloI3VZtmpM7ger
- TLSH
  T1A1755C2FB1F540E9C0BDD078D62BA507EB7530994B2892EB11E585963F27FF06A7E201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  0.wdzcov7dsab.node
- Size 258KB
- SHA256 f927cc7e32127597f21768cfc18605b638b725cea06146363f7bed2d4eb954ee
- MD5 b8eefbb2dfedfc6d0440ef70e7e4df54
- SHA1 b158fdb5d651850c5cc24d8c37f860d978ba4948
- SHA512 11f91e093929ac55826bff94da8bf2d646bf4375f3240599e95499d4d284a63c6a3162769220a9656ab12fcbac7bdbcbaafc1a34c5341c5025840c2d2820b001
- SSDEEP 3072:ZHcV7YJjQVL5C+iYKd5t+VeBgGQ6TcpbLcgOomMs1LMDiJJ72XQXcFK+i+INYqvf:Zi1K5t+VeBg3dpbADxLJrHxiqvjr
- TLSH
  T1E3447C5973A40CB9EAB7823C89534A06E7F2BC1607A0DBCF03A046AB5F277D1953E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  0.yqnjc1u99y.node
- Size 525KB
- SHA256 80d534b732872bc08822a1e7ba956c4302675fbe35ff91e3016f516578be7aaa
- MD5 b7f335d9595b99b71042e1fe8c2226c7
- SHA1 12dea2972485adec045397263c4fc15263efd214
- SHA512 6e001959ea81c566b2f76b0db500ab401b956162c50f7d554af5dcce187d04ee15340b6095d812816e51ab7217edb7a5539dd92eca315666d96b25740ddf1e34
- SSDEEP 12288:RMB+pLE42AfklLxSXEufOV4IQL7hnCH8qH:RMB+pE4RWtiOWnL707
- TLSH
  T10BB46D2AA6A807A8F1BB917C89674D06FA7678860364DADF03E087365F177D14F3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  preflight.js
- Size 1KB
- SHA256 fc3ae90921bee53a04dd49475aef3cb07304c1ac483cc336e70e3b1288c6c0ec
- MD5 64eb605c96635206891376968a7cb264
- SHA1 695d91dcfe6c62e331d12d4dcc8e80a4222b663d
- SHA512 44cc7674d8a00acde2142a2800820a58713b85a264704a0067cdf606e0065639dbfbc7659cfe43b31df46305bbf3f566cc8fc8f7fb091d3accfe47dd9eaef2ee
- TLSH
  T1C5211DE423D8F6A1264020CEC17F9647F261D4399118FA84F3C8DCE696C58270966F2B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  winpty-agent.exe
- Size 296KB
- SHA256 204405159682b784d39fb7721cc84b6cd3bbd2baf81ac46b90ed92c3a9155a41
- MD5 00bf8005efa56acbb4b07763f3f8ad0a
- SHA1 d56dee7b943cca62989a203e9238f7ca514c362c
- SHA512 fea1436c11a56feb262cf9c05244e7cf20f2b4bf288867dc910f6c2a581cb5a9b27dd603bcca6d36c287bcfb3c291c927dc5d6ed838b80c9abfd1021c8b8811a
- SSDEEP 6144:f3lHz5KTVG+RQliOkri9IYTU88CX1hzBfwiu2dGOHJhPca:jKTVGEnBri9IYTU8NX1GOphPca
- TLSH
  T1B4549E1AB3A814F8E867C17CC9469903E6B2784A0335DBDF17A447663F276E05E3DB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  winpty.dll
- Size 245KB
- SHA256 dd4c290d6b2589f71f7c53b6a94a56d69d0d4c3ad96b97496da2b6632ca8007b
- MD5 5029b21d2108810c69befa937bb89c64
- SHA1 efacb363c93805f614bcf4aff640d94750e66a28
- SHA512 0b1a3791f5a8370d1f67263ecb53e456d93d9206ad935739d23fa0abb5437ee67fbc9344abc73c222e4bb6419642cae22a85996e1cac50e0d4d43b824b8e3142
- SSDEEP 3072:6Nle4hzC+1KDwmzKMNwzPdlkmc47Y4ghGy5xX26cWM9BXg7+6ZYTb5Vo1m4Sb4vI:UlbNKDyywzPdlWSYrMsGp4voyC
- TLSH
  T14A346D0973E50CBDE9B79279C9638906E6727C054730D6DF03A0466B9F2B7E0993EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22