f8e19113894abc72eaa840a949e265c41e0b7587464781e649c493b23455c3c8

Sharing

Copy URL Twitter E-mail

General

Target
Protogen_sex_mod_x64_v2.zip
Size 930KB
Sample261107-txps2azvcy
SHA256 f8e19113894abc72eaa840a949e265c41e0b7587464781e649c493b23455c3c8
MD5 5d872a5554c6bb6dd59eb5f785092eb1
SHA1 597917c0d47e5874a2b560c36f3c134d75acf983
SHA512 ca25aa3e1bba65c33fd7bc017544898296f7d3cea5211e483ee5de83009eaece028981b5c8d17babf79519ec3ac727ad8e96295b9ee6fb5f9f6962e0d6f1be53
SSDEEP 12288:HoILfsRx26gkWcQ9OMe/TPE0KEPnIfRNTPR9ZXKGWjRQQIS3wVk9G1OpeD/gZLLT:Ho6fsRx27OMGRK0nIz9xXeQo3wU7wK
TLSH
T102153310A87F70FB433700D75DB05E2B26D7853C0D8B69D938083FE5EA9BBE625985A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Protogen_sex_mod_x64_v2.zip
- Size 930KB
- SHA256 f8e19113894abc72eaa840a949e265c41e0b7587464781e649c493b23455c3c8
- MD5 5d872a5554c6bb6dd59eb5f785092eb1
- SHA1 597917c0d47e5874a2b560c36f3c134d75acf983
- SHA512 ca25aa3e1bba65c33fd7bc017544898296f7d3cea5211e483ee5de83009eaece028981b5c8d17babf79519ec3ac727ad8e96295b9ee6fb5f9f6962e0d6f1be53
- SSDEEP 12288:HoILfsRx26gkWcQ9OMe/TPE0KEPnIfRNTPR9ZXKGWjRQQIS3wVk9G1OpeD/gZLLT:Ho6fsRx27OMGRK0nIz9xXeQo3wU7wK
- TLSH
  T102153310A87F70FB433700D75DB05E2B26D7853C0D8B69D938083FE5EA9BBE625985A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  0Harmony.dll
- Size 288KB
- SHA256 70e7647876b6c3d874ea99b56627a95d1dce2e1dd791981a002578a2febc9bbd
- MD5 1dddd96a0a3ad2c4a800cd6215d88f37
- SHA1 72a94174c94cd414406eacb95caec8497c7793de
- SHA512 7243dae091166fd641646949d12d1b66e6f4b85b72ef50946405577bf8b8c3a1c0f4558916801f5d3ee4dc82c974d64199ddfa2a01b73d9ad8263213198a9b17
- SSDEEP 6144:t4zaS+Nn+hix/IRhHaAA0KpyipLq5jDLg97sl:8aterFLKJWtM9
- TLSH
  T105545A9453B85E59DABF8B78E43004948770E8A6E9AAFB5D5C85D4E80CD7B40CB123F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Mono.Cecil.Mdb.dll
- Size 39KB
- SHA256 28cb367972bdc1cd43e4006306af2fd96d37f4ed4b239ee90e1dc7237a93af7f
- MD5 7287a874e5384c339299b7f3a7588141
- SHA1 ff5ca316d3492b5d306e334ea92dedb178f00fed
- SHA512 e0b787056a6e282158b6e27adb9156503fec010b7e524aff145ff1394f5a9bbbb31c51993613e598ff448637e159a6764c03f4ab3d7326db19604e973e079f45
- SSDEEP 768:08b1qk4Ccx+fcVl41qWa1FacyzS33XSQvaCCEHHTQVAWGmx:nSx+fcVKEWaHyzS33CAHTWx
- TLSH
  T14B033B047BAD8B2BD9AD4AFCB459120557F1916A6623FB8B8ECCB0E3BC07F401543667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Mono.Cecil.Pdb.dll
- Size 88KB
- SHA256 a332332633fbcb20e8d50e49b4db7bd1557721417122cf0c5f4c42f2332391d0
- MD5 6c28c1e5cb24f0955b8ad1620c7ee794
- SHA1 92d5959bd6006211e7951711fec37b7deebdd69d
- SHA512 f2e089604d541a9360608e76ecce0a6d5b4e8c8ebaf739965099d75b86e0fe53ce5eecfa50a62ebec47315ccf75f56efd5c5eba118bd7971145bdec1cc3a18b8
- SSDEEP 1536:rexcDkwB3u9jX9FIYzaTN9Q+hwV+BwIfrhALYKXN7JG3OSkiAvs:rex+kSe9nzztowVIwI1Ar1JGBkdvs
- TLSH
  T1A6939E35DB94F767C3ECA9B624590D040BF1D26AD163AB098DC95AF8380FB7506323A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Mono.Cecil.Rocks.dll
- Size 26KB
- SHA256 bf992f3dce364ebcc3200fa7832ef07e20b4e2dbc3a8a6213ce44e3d239db984
- MD5 c73fca71d0872456a8c909e969bb63fe
- SHA1 fa38c450742f8f63865649117c1224fbaf88db50
- SHA512 ca1a017f58a5148f47b44abbf54f6b5df4e9c47df6900321d0a070ff56be15b9d6f01d46065021e73eea7a7c350700647b5cab28c9f1c3690492ed38ceddf2f9
- SSDEEP 768:flHJ9KA2pPfoyE+lzNvVyhRORU5euXekYTkj:f9xePfHl6jORU52tTkj
- TLSH
  T1E6C21A0123A5CBB7E2EA413A78E2961402F1C14B6813D74F9DCCE1AD99CFB456731FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Mono.Cecil.dll
- Size 353KB
- SHA256 831dca77470d85cb6ffbea3072daa7a3df5b7c9fcfd9c3f43674a9be99d4bfcf
- MD5 1743a1d9a9fe195b24f8afc7a71d86b9
- SHA1 9693faf12cb4c25062bf3197ab01b1c69be019cc
- SHA512 89c7fd4613c0bf426a9f3ed0734683073048c9d5b55e466cf20b724d4d1f99487e582c7b6b5e57762503ea82b283afa70ea50867c14c2a92d1d3e37c98d4b2ac
- SSDEEP 6144:DT2p1QxCThYRykN1creGO/bo5sE/G9mq63iyxZA4JPwVI7TtSi:XI1Qk10mUbo6E/mmqM04GI
- TLSH
  T12F747A3923FC536BCA8F93B6E06A043D86F5E005638BEB5D59C0E6F55C43BA25902277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  MonoMod.Backports.dll
- Size 27KB
- SHA256 ac3f32bfd44aab83abf71abdff6dde548d57b7c0f8a1fe6d8964e348b4eeafb1
- MD5 f94c2e77fcd91fd3557cdde111d91733
- SHA1 d9290e2b66de1d5fe0796f2b5c9af1347206e589
- SHA512 f239152369049deaeb135fdf17bef1934ea133d0cf081d26f7f346d5a5da6240d484d1ee80c3b0b45a08dc7e0b9b4c2b6141d4272a5a3098d051dbfd3907d298
- SSDEEP 384:2nBenfGWkTGnkySoMYMMAbGfOyZD+gt4imoE+MgAJNCEmQRf9iwLry:2B0G3TvySoMYMMAbs+rkEJp9x
- TLSH
  T1C2C20A18FFAC8233DFDF1BBD9CB1524146F1E98038726B2F310CD4A95816BD8659636A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  MonoMod.Core.dll
- Size 436KB
- SHA256 8f9e1e88e408e436027ac14a1d2ff00bfbbc2603a78959c34ce92af8f7875c65
- MD5 75771efbd07da33433d1ae3a7b3a3a5b
- SHA1 0da9bdbea578c43e3e0a7c8e9b070bfb8f254cd4
- SHA512 a0f92c9d54407508f0bb73cf28c3e354560e1b0fb43f120db6ddac798b5ea542700831ec31282c889b3b0b2f062910bd2ca7b46a11d4a13039255c434859ec86
- SSDEEP 6144:Ccy+inQAwZkKH2M3IYPisskHy7rwoz0n28ZObXit6M3mFsz+5Iz:CcfAql2bnSGwoS28ZObXit6McI
- TLSH
  T11A948D2437DC1A1EE6DEAE38E5181060537EF8502226E3AD355153BDDCDB3E0AA1A773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  MonoMod.ILHelpers.dll
- Size 4KB
- SHA256 fdd0e3538340fd78b8f521e62b8cac1ebb7683ac1f27f6aaedfc1044b14bf4bb
- MD5 e9c4bc42d2c2f5b8dd4000fded147f79
- SHA1 5561426b3d2bf6c5665a92e11754b002b95c9460
- SHA512 c8d6733fa2b6d1e3b89c38711a24ff15deacd1e910b32d0e21cc6ef2b152f953c06c9a1c8ee36816b17b3773b3cc63408346c9f5c4c915ccce6055c3e9c21c0b
- TLSH
  T18F816276979363F3CD1E0B369957F3919B78C21546076B3BAC48A707EC4A36C0923AA1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  MonoMod.Iced.dll
- Size 630KB
- SHA256 e9016ceb961ea07d40f6c9ebdcfd08c88de70b9a0d561fc08689af430b16dfc7
- MD5 6f5b98bf55e4ccd4a061a099ed806347
- SHA1 5db1ee39a9f746fa285f3d299dea35710a39ddcb
- SHA512 8aa7fada56c2f334fad6c7ff676edd496772d14bf74852ef4ce6e479b0e0bdf2b9b9a415176def892a1b670e65029ef0a17f260b3cbaedb19875406cbc04a157
- SSDEEP 6144:AObPoNQOXxt4GKBjxWFjenLG8/DhxgzexhpKe1NpjZOQ32m111/R7u7G:AOjoQax2GiEexhEANpj0Q32m1B7ui
- TLSH
  T116D4E828F992AE53E16DC7B184F102E26E73E9C8620D9FFA1508542CD8D73F795621F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  MonoMod.RuntimeDetour.dll
- Size 71KB
- SHA256 d386067b00a87db31d1fffc7486ff9b3773c8a56a5678d41b2ac65c3a2dc806b
- MD5 94d26f169752861353f39238a02b8ffe
- SHA1 8c151a6405b9173efa41055e86fdc940bc9241fb
- SHA512 39d582edeedfac079321d583d4ffc06c33cd38297c97441c6e29e95c8ba8042840713d37766faffd1e9ae8c3f63b1bf07b4785962400bac6772aca37497e719a
- SSDEEP 768:RyJpbLNfMRZsXqGStdTcBUnnPf+jbi4SyJxvB45d5t6Uji/gwX0Y24ph5kdPZzWa:UbRpXiPTfnPGjbiy4prjjwfhkDWX4RP
- TLSH
  T10663271827ED4A67DAEE1B7AF03921424775FE47A433F34A9C8C91F859937840A813B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  MonoMod.Utils.dll
- Size 338KB
- SHA256 61d352e5fd3391bb059e64fe4b90aaaa6267f9b0dcfc875f4fc8aaf78f890888
- MD5 b555e8cc234515ae7029da1c47e0ee05
- SHA1 0c220d8363fd29b67fec435cadaf0902bfc26cec
- SHA512 66fa71c94193680d0f68f17c9635a9488eef306b0fcd6e12c3ffd6d802e423b7debe381516bbca13733f27370080755e4b56069781db902963e9d7ae74afee14
- SSDEEP 6144:a8kXrx/1kgUhxsZNZID9fKgFVbaCbAQkK:a/RsOgf9bT
- TLSH
  T11D743C681BD84B56C7BFCB34E4B018344779F603E26BE38F6916E2E41D47B449A123A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  MusyaGruntz.Inject.deps.json
- Size 448B
- SHA256 ceec8459bd7040a6cf1da707773b389825b84bf766a447b5bf69ff8f52e8c069
- MD5 5c340f2a660753d62da4a263dfc301d4
- SHA1 52c6926e44b617b4a894cacd46d807988a3998e5
- SHA512 d55b86f6ad22dda98104f468e52c944a966529ef6019586b9fdd8854b19366b0e3fc997a22c6ca4ddf4a49e03efb1a4a4ec84a2d5f69fd31544ac2ab74314c80
- TLSH
  T1C6F09259E1D45C9302F2A3B194764787FA7356232011298AB5FEE06C4F7395B9810FFB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  MusyaGruntz.Inject.dll
- Size 7KB
- SHA256 4700bd5bfb7d5682cb7d481eb53dc6ed077d4ee965633a9586e05ad27b601723
- MD5 f7dd75ac584ae2f54bd8b85e197af333
- SHA1 82404f3e929aa02c0fdd09706e733ddb3fd298e2
- SHA512 5fa06659a8c99a7f018543fb4f69b690d474b96b8030fffccad31bf4cef724a8e422ffff028eaff45be18f1691aa6c68668d467eb5113d6e5037b4860da46b3a
- SSDEEP 96:QENDeGS6yphncYfaqCP15ZzVDl953xxViTV9:RqhcQfCP1nFl953X0TV9
- TLSH
  T129F1C71137EC4326DEAB4739ECB222444677FE179822D76E48C4923E5C41B5A8FA0BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  MusyaGruntz.Inject.runtimeconfig.json
- Size 377B
- SHA256 2e1693f8326910b07be4292d78dceba9cb49952c500afab1860d09b4d5e54047
- MD5 5aa0a5654d3b22e7ae5a4bb59fec4996
- SHA1 4d4ce9ea1b20e76bac10ba0e4b63ea9a4f518a4d
- SHA512 3ab97eaeb1dfd5721d60912731dd435e527ba9a62bb259078e079eb486669e70a83d5bdcea8c6c012c37dc25761225f778390fe0943a201b224c4842b722bb5f
- TLSH
  T15DE0DF66DE106DA705FA727AD571C182EA30A32B10202895B4FD1C0C6F776B50212F9A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  MusyaGruntz.Runtime.dll
- Size 77KB
- SHA256 283b84be16bef518f3c2d6ec7b825ec3ea05ab289cf7dc233acbeb0cbc49c9bc
- MD5 51c53c624fd1d684ed03551441a3f632
- SHA1 a6d15aea7b4a8e8fa01a94b24d43a67c71b05d93
- SHA512 fec862ae41e48e625c9d3ee8fb3f310cdd982e27b09d7c310795bcc0f51fdb6ad6ef655d933db0de160e531f832fbae671fbb4365b8cbbeb8c097ffe1a47e485
- SSDEEP 1536:5bfz4f8+IKrWywsOscPhrEtY6rKLL/0Rj:c5tTpGhr4Y6raL/Mj
- TLSH
  T1F973F71AB3EC8250E2BE57751972449A4677BB036332DB8A418F28590B2F7F05E25FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32