f0c403a3d9d4331cb2c7a5d40ff0a183e082edf5b8b2afd9a23949f5766ca41f

Sharing

Copy URL Twitter E-mail

General

Target
MonitoreoSilos__2_.zip
Size 1.5MB
Sample261107-vbmbfsdt3s
SHA256 f0c403a3d9d4331cb2c7a5d40ff0a183e082edf5b8b2afd9a23949f5766ca41f
MD5 11383b0e49b401cbca72a7abc3179f32
SHA1 615e8e0d7c8e98b75476fe35f608ee7fe65d03ef
SHA512 35686843ec5de73f26c8d280e39e8305be95fed10824a9b10204822636a89234564a691fe84be54cb34822060b3d8321d85e114dbb40a7d79d15b1843c98efa6
SSDEEP 49152:1fPnMHmum/1AGPI/Zs3h1D6Iog7nWUHWJ86T0I:dPSmza2IWhpzogL686AI
TLSH
T15675223EC51CBC43C97B7A39952D4349B1978F58BBC1484664086311B68FAA43F36BAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  MonitoreoSilos/app/src/main/java/com/example/monitoreosilos/ui/viewmodel/PerfilViewModel.kt
- Size 4KB
- SHA256 27b02f8b6e2be60eec14b9b0042a294c08db1be1f1510bab13a642e7378aa4cd
- MD5 7b7014c537ab30b37dbcd959da489f30
- SHA1 a866d2a8e4dfa27f4145dd7c096da1b1f00bc5cc
- SHA512 94323daba8af7dd152f425a31131200e6a9941ca381469ec42918bf55e761c80c44575fdf1e61557109ba8705ab79d20ddc5cb4378396d2f8755005a4f13e4cc
- SSDEEP 96:cBxki+capNVyAbn13xgH91ut+Im8wwss9Bs1j1k9VkHD:cBT+caNVf1BgH91E+Z8wgDsB1kQj
- TLSH
  T1DCA1ED01D59918324A13067B2A6D11312EB4E3873F68B898FE1CA7541F9DE18DDF9BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  MonitoreoSilos/build/reports/configuration-cache/3mgjr0nsq75uiivex861k3agt/6pqz9vnuds3gj9wauire1o53u/configuration-cache-report.html
- Size 215KB
- SHA256 6116abe62c19e2685794c1de09b1b9b2757bc352643a2c5b0afb820b4797be7b
- MD5 716dc8df9663d8b746f1eff3b7acf8da
- SHA1 bc584cfbd9e901e148dad307d69b599b24c29cd2
- SHA512 9efdbb19abc2af8971abb96be762f9dd2aabbbe1b318814a39dc0417912a65dc9c8dd4aa16c552fae1da880d4de9f3dbf4da6417c49703d38e98cafe3dc7435a
- SSDEEP 1536:NzpnlZkXXKtdTEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:c8kDO4+w5TllLJDHyuksvRJL
- TLSH
  T1CF24638A63D6B199228EE461846F2587B1BA01CE84AC8058F725DFCD7FD531C4273EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  MonitoreoSilos/build/reports/configuration-cache/3mgjr0nsq75uiivex861k3agt/btvkb55itgpz834nneejh8od5/configuration-cache-report.html
- Size 218KB
- SHA256 2c1311d14d55a001377d5ba7625ffaa85ebe152f4eff0a1c1bd55bc5c0066034
- MD5 c7d2476724dffc3d055a295356e16a59
- SHA1 51936d9f9730b4345a0b64ed85a23426047d54fd
- SHA512 7de8940ae7184c1725036d7839cde4278893d89338dc904e1b69d7111839aa6dd2bda2bd7419f79452ca077803bc9b8dba0f9fec41a38cc600cf0429d8a484fb
- SSDEEP 1536:NzpnlZkXXK0xUEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:cukDO4+w5TllLJDHyuksvRJL
- TLSH
  T16324638A63D6B199228EE461846F2587B1BA01CE84AC8058F725DFCD7FD531C4273EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  MonitoreoSilos/build/reports/configuration-cache/5euu4xxzsk8xwl0xkfvrpqkqs/3i0snl52hhwt3vwvyda2abg1a/configuration-cache-report.html
- Size 215KB
- SHA256 2fbfcad9d64a958ff810428ec86cb6848fab0737c0600f6280608d9732a7dc24
- MD5 3b212c15f2cdfbc79f7c88509bbb97ee
- SHA1 515f5ddcd4fb818ff05118a93cf8f4db3bda789e
- SHA512 1587520737d71c7abf8d72af91699c3a737ecd03a9417e2686ac0817477f7eb7ea2ee44fa1bce56d0a9c4fb2ec7c4a7e49e58bee6551681c55503e0b5e1799ad
- SSDEEP 1536:NzpnlZkXqKDUUEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:XckDO4+w5TllLJDHyuksvRJL
- TLSH
  T10724638A63D6B199268EE461846F2587B1BA01CE84AC8018F725DFCD7FD531C4273EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  MonitoreoSilos/build/reports/configuration-cache/5euu4xxzsk8xwl0xkfvrpqkqs/cibjsd4dz5ai3uljnhxeqefci/configuration-cache-report.html
- Size 215KB
- SHA256 844df05b230e9e66c35da46004fe79b5e2598a9eaa54016ff442c23f641a94ad
- MD5 d34a6150c9d90b776a3a587388cfe732
- SHA1 a2648128bca8d2b4774734d4eb46f7bdf864f68a
- SHA512 00f9ccabca25d41a276b1492bd9acd25766d229ef9f51a2d3504426a16cd6ef0eca2648e0e7caa853a798a3cee1e55a37cd6287b1ae0d2fdfe55c90a39962b57
- SSDEEP 1536:NzpnlZkXqKDUTEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:X7kDO4+w5TllLJDHyuksvRJL
- TLSH
  T17224638A63D6B199268EE461846F2587B1BA01CE84AC8018F725DFCD7FD531C4273EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  MonitoreoSilos/build/reports/configuration-cache/dnz61sheh4h8ee6v91xa6d4n4/ex3lnur1ym07vuirkgekcmhwo/configuration-cache-report.html
- Size 202KB
- SHA256 1fb4bceffbe02ec11edc9c722a327c585bd063228adb563308d677597a6a2bd1
- MD5 fc01e285adc1babdb7061521652f4028
- SHA1 f5b8bdcef534cbb7d8dd29df11c62bfe0593bcb9
- SHA512 7119eb67ac8a824bf83b7f9536c042edc0fb325243db47e543e5b19c55c5af2ed1877c61cf38ba16acfe0cec85f06cb726916c496306a05d9f0f81fb588e965c
- SSDEEP 1536:NzpnlZkXjK0tLEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:IJkDO4+w5TllLJDHyuksvRJL
- TLSH
  T17B14538A63D6B199228EE461852F2587B17E01CA84AC8068F725DFCD7FD531C4273EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  MonitoreoSilos/build/reports/problems/problems-report.html
- Size 146KB
- SHA256 0ae100a3b2780dc2a0276dfbaa4f11a79a6b2c5ccc665ba17ff6b267c48f13e4
- MD5 ea4a5610a551ac8b46bf3de437436379
- SHA1 912ae24bd7b19e0740ea3d593681766ee424b259
- SHA512 6cdc72970218f8a6ae20405e204795d4a0e0b4bf02af276f7fdee3b28f41418f8c3e7ee61bd34e03714673768924e98b502d4607ef137001f4322995c10bdbf7
- SSDEEP 1536:NzpnlZkX2ARGJCxxmeEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:ykDO4+w5TllLJDHyuksvRJL
- TLSH
  T160E383DC76E6B598534B94B0417F008BE33B99AA485D906CF119E1EA3EB845C9233F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  MonitoreoSilos/gradle/wrapper/gradle-wrapper.jar
- Size 44KB
- SHA256 76805e32c009c0cf0dd5d206bddc9fb22ea42e84db904b764f3047de095493f3
- MD5 00fbfe071a292b2cf0bf1613035eef10
- SHA1 9b90d32f1e62028b17ed508b43a9f7056bc0356b
- SHA512 dbf73c3090ae540006eb206a5965a19c286142e1a4f7e1bc8604b680e318b52e6b35b60c9091dd70963105be48ddc98575436e96e756c70ecc48b06034ca4b48
- SSDEEP 768:u58feQ8OP/QRfq1WQaAgv8p/KlS/ypSE0lUmMm80HxCxJLqGlbJ+THM2sgB+S73v:m8Fn0y1WMyphPmMm80HEJmGlb4THMWH7
- TLSH
  T16C13AF2AA9989D28D153093F606B8640A721E31D449DC77F1EB9264CDFE072FA713BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  MonitoreoSilos/gradlew
- Size 8KB
- SHA256 3238afb2aed5cb16eb7d6718077e7138059108f007b54179e9cc157c5a6e0e89
- MD5 266606e78242737ef3da02a80ea0564d
- SHA1 b3c51f507db69f76b64f34c24210bcebdedc61d8
- SHA512 754efec61b54eff318013058c4a309e04f67f245c0aef9b54bafd0880a813866cab816a3aabc1c8e8be2c54ddb497047882c14f9455603034ef4648af45001e1
- SSDEEP 192:Sjm7H8yzJ1XnRy2305hI+vUHD7oRDe7PRL5WW:Sjm/zJZRy6mhb9RKRt9
- TLSH
  T12C021A6357802374074506776E9FB0EEA72162BF1F83291C749C960C373A92A61F2AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  MonitoreoSilos/gradlew.bat
- Size 2KB
- SHA256 1d297e00bd21de3ace22b4d7f2de1f9dfa858883d66bbf7c1ccbecccec8f4f3b
- MD5 7dd1a1fde1043efef3d624e3cb720522
- SHA1 33356fb0e882906e1b013ada80fd0ef1286c79f9
- SHA512 c865ca86c88d844dc59c7313885846c0105ea50326a13569b12e9b7b69bca009cd2cbcb8a83965cac219043a568a48af15e5c5e5e32547c127b2e77b2b840134
- TLSH
  T1405155BB7B4743761FBC27A67E1C4982B212A2662F4FA30CB45F850D713174A51C2E9B
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Executes dropped EXE
- Loads dropped DLL
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Enumerates connected drives

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22