5a024ae97242be3b1b954f845f7a87a1411c47830f81a2b54f47ec2cf741e2a0

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_5a024ae97242be3b1b954f845f7a87a1411c47830f81a2b54f47ec2cf741e2a0.zip
Size 12.9MB
Sample261107-1gcbbsvxft
SHA256 5a024ae97242be3b1b954f845f7a87a1411c47830f81a2b54f47ec2cf741e2a0
MD5 3d48a83fd884ae23fae1627ef1a20de6
SHA1 9f3e8556862ccca49609299bab2623289cdc2d01
SHA512 a41ca67bde903e715f163b0a58fbdf510587ef3f95fb41b2469b4d74511eb866fd66640a73b7682a1f9caa0c4b0f4aac293e763142ea1227d9e3eb0ca2f44d32
SSDEEP 393216:/nFIQJ/clieIKBxXy6B4acicike1AedJTh5PstOgLl:/FxJEAeD+6rciRAilh5stOyl
TLSH
T1E8D633AB524E494B77681ABA3F019D4CC91401D8AD03FA58D69F7F7218FBDD063CB42A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  0.60iybw52ns8.node
- Size 253KB
- SHA256 267af8b5d1b9ad3930b3c321ea42cb7f1497d9d6410c31b4b08112066cc3bb50
- MD5 8ca680ed1c15912e9e169b1962638986
- SHA1 d32b84ca6a60d5628498cc7059be108a2c9b3bd4
- SHA512 453cf05309fe6c321ef60e080a7c9ef5b441627549789df0e236cbfc5540c7b6cd84d34788c0acb8e44def1e4e385424c5b0fbdc70fd1fe5096b3b6127f0a0d6
- SSDEEP 3072:qqksAxisZCvmWv6TUcd2CpEWkAsqxlHsI6/nfufgpOcmJiSbmiKgvJL94XV:qqkYEYMuzQCZ/Clb3Zvx94F
- TLSH
  T18F447C59B3A40CB4E9B7823DC9534906D7F2BC0543A0E7DF03A4469A5F277E0AA3E752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  0.cmuxyx5pg9n.node
- Size 1.8MB
- SHA256 a006e443a4e94e9aa781ce77f8a2cbe7e1d8ab368146b53725c69d037c7e93da
- MD5 af5554350693c8ac1cc92a9dc7a78573
- SHA1 65467cca33298a5b3d43e5f95dff49f92c39d93e
- SHA512 17fb219261db79e802409861a6f7dbf5f0b3352de04b4d352d01ed949054e6497876b440d109b69c3cf9d498fdf51eca8df8eccb579c4924ad8c26c57e686a73
- SSDEEP 49152:BLsrw0iJtPNjPw3GtVFVVegyRDJHc9ErA8AWNO+BnU+UyPWu0MgvgdrUVUvVx9ar:aV26A
- TLSH
  T17195191861E502BDC17BE077A952954FFE6238948338DAF708ED91322F567DCA6BF108
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  0.nktakimjku.node
- Size 164KB
- SHA256 a4e18d5896c5889635efe31c6f1a0ce8ccafeabe9521e0f92c46a5861e8c290b
- MD5 629497ab98678c5d6f9af76ec3c7a867
- SHA1 3b56d0c4b787a838972d9a304acdf1d5f2b49f00
- SHA512 6d2003903cead41889902ff46ec282503bc234f99c3fbd8124b3e3cb1b1e63bf27e195fe9feb32086a82b6c83fa4e1aab309f8b76dcbb41487c8c987d25a351e
- SSDEEP 3072:S1M26BVoepFkqPPZ3i+wqOmSrRpO+QegC2OAF2+:yqoepuqPB3i+AmS9pss+
- TLSH
  T18AF36D17B3A504B7E5738238C9639A46F772B4110760ABEF07A0837A5F27790AD3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  0.rw8sdiuwg5l.node
- Size 184KB
- SHA256 9faed67b4420f00a565dbf377309b2518da08120aff804cf670985c0f04cab94
- MD5 7c9b99950355777e1621d19d37ebc41a
- SHA1 0bd351dee226456798e9e6f17ab6d991020ec2c9
- SHA512 ef74d70a674019f4f4b9f54638ca1c4df1b20f497f7a314abadd5e8fe438eb88966667f010dce27a11dae7c3fda316c9b5c3228425b6990c292be7f4cb06c7ce
- SSDEEP 3072:ooDPpaLIYfYcrltsoCkMTGLErKMbCg53fq/OyHrSiv5+IuoRq:/DPprl4lSoChePMb7pfq/H75HRM
- TLSH
  T107046D0A73A4017DECA7D13DC9879E02E676744503709ADF07A04779AF2B3E19E3AB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  0.tnkh2xxo19e.node
- Size 1.6MB
- SHA256 6bb5b5f82fd4889331f2e15f2044730bfeb1550db838f8a0b7f552aaa4216ed4
- MD5 2eac03bddb15a8177b58076d4f5aaa00
- SHA1 44b014d8e3aa6ab31044ee5951f1807eca3fcca4
- SHA512 bc6596a7c8f6631694bb6ba3214306a8058a94c1ebaf0851dd38693be9e51024ff5a62acf656683243d9bb8c6d6c6e90068d0ae84578cf209575d504b762cfa7
- SSDEEP 49152:FGhzqxwR2gmGqHDAKYNtKss/v/aIz0mY:FGpqG2g5qHDNcmj0mY
- TLSH
  T1F2758E46B3B900FCC46BC1B8861B6607E7B2740513759BEF55908AAA6F23FE1167F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  0.utmgqqt75bo.node
- Size 259KB
- SHA256 6c0dacd99283f0fff4408938dc49d282f6b19e2161f3619f078a5b64dd49b9f6
- MD5 3c36c8533d6be2a6f7d2088093ca2a11
- SHA1 8004cdeacd6f1a6fe5ffdbef2f017bcaf5b31cac
- SHA512 ddf22c3b6114ee2566c8745429d56d58e211b6bbc754c00fcb9c3d664e57595fd3bdf08cd64d682bafd8792f57283dacfad8113c4074a51e67d8cf86ea6e44e2
- SSDEEP 6144:HaqJS+2zcO7mHl6Q3wmPzX+OMu68kZHow/isi:Yv17mFFwmPT+OX6NZj/
- TLSH
  T18B444C47B2A40CBAEC6BD13D894B4A02E3B27C560760EBCF1350465AAF577D1AE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  0.za8syx90sdi.node
- Size 522KB
- SHA256 40be032fa3c41cd9f54338591ba06e3055f1eac32adbd48011f6315fa1ffcdf9
- MD5 aaeb1edad35d6b0877d523c79fd21bcb
- SHA1 942bac3a2d6aab7ee42b056c40ed18e3a2adf1b9
- SHA512 c9d287deb4843325d3b420a2d87540027a6f786bdc41cca7626e5d1be85b41828aa9ab3604b8aaca67220a1a0727938b2c21a96c5f74b462d20a6568210b7e3b
- SSDEEP 12288:Qb3fQvfP2ANXWqsT7QywHHh3Fef3xz8k21rb:Qb3fQvfpmq87QNHB34f3f6r
- TLSH
  T13FB47C2AA6A803A8F0BBD57C89674906F6B638931361DBDF07D086365F177D14B3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  preflight.js
- Size 1KB
- SHA256 d21e2193f80378603c15bf71b6a7669c8a9266a04f34ea3502c82f1d80532bec
- MD5 28e756c61961b10a026999c80e6f3f9b
- SHA1 5a1b268a75570cbd8f39540b2ea914cdf10c9cbf
- SHA512 0691ead63b5c33f6ac67d84fa8dd0840723c999997f6d3c638f5b647d72ca41dcd09786d15b73458c0e568d947c0732e8ce7d3f73dab5b7542bb1b97ed3628b4
- TLSH
  T1212130E023E4FAA12A4560CEC13F5249F636C03A9129F0D0FBCDDDE393C101746A6E22
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  winpty-agent.exe
- Size 296KB
- SHA256 204405159682b784d39fb7721cc84b6cd3bbd2baf81ac46b90ed92c3a9155a41
- MD5 00bf8005efa56acbb4b07763f3f8ad0a
- SHA1 d56dee7b943cca62989a203e9238f7ca514c362c
- SHA512 fea1436c11a56feb262cf9c05244e7cf20f2b4bf288867dc910f6c2a581cb5a9b27dd603bcca6d36c287bcfb3c291c927dc5d6ed838b80c9abfd1021c8b8811a
- SSDEEP 6144:f3lHz5KTVG+RQliOkri9IYTU88CX1hzBfwiu2dGOHJhPca:jKTVGEnBri9IYTU8NX1GOphPca
- TLSH
  T1B4549E1AB3A814F8E867C17CC9469903E6B2784A0335DBDF17A447663F276E05E3DB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  winpty.dll
- Size 240KB
- SHA256 6e913cb0a19922420cb5887587bd2583c5a63ec5d8348a26844b50e5b02c2192
- MD5 2b734820db2be821cb40d4df1bedf325
- SHA1 b261b6feb6d0bc136eff034a9cf8a9308ecaf40c
- SHA512 3bd3bec70573432ec31876e841c7308b990f58a62a8790d13d0b0375857fe14624097989388d2e731d5ad2e9380e0e1d16cb08c0b0954993959f15b28f840b84
- SSDEEP 3072:28v3kM6L5t8uXrY6ZYQ/tTVBQCWDJtshHdOhb0sWuNIXg3Sw9Yfbr9M1mbebWoVx:28v3mLMUr3ZYQ/NDWJWZIYNEu2/IgS8
- TLSH
  T141345C0976E908B8FDB79279C9A78912D7727C050720D7DF03A046669F3B7E09D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20