d4dee76fb2592d0b7116de432c33e02ec9378b34efca5597f05e96de9c4e3a34

General

Target
XivWorkshop-0.1.0.0.zip
Size 269KB
Sample261107-vbzlsaet8j
SHA256 d4dee76fb2592d0b7116de432c33e02ec9378b34efca5597f05e96de9c4e3a34
MD5 b7d2dacaddb457142cd81d85e86309aa
SHA1 3696bdbb2149bbdcd3c3da21530062419226b73e
SHA512 bb34067a4236c6dc8027e8ea6d39471a2ae135cf92397dc9beeb7de641c9aeadfde7b2c97b2aef3d719daadf6560d26070285648f7df847550a119d21be0d6f5
SSDEEP 6144:IrixyMhn/YNEXlvlw9MFnOVLqsMQ++MnJw/4/Xn2+2Xa3i5EmK6WlA8:5/YNeXLBujcl/X2RX2ZfTA8
TLSH
T1A34422486F00042209F4B19F5AF7698B334E1724686595C78ADF7760638FC27BEFEA09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  XivWorkshop.dll
- Size 56KB
- SHA256 74de2ffce6a2131eed7e9f1bf29c9f443845cc3160c6010b5608fb9de4ddf431
- MD5 598b399214ddce5c31922369fdb04c1c
- SHA1 d3bb84d19d9f5c095b7f5dce832e60dfe171070b
- SHA512 3a2b497b3804b74d8ea1a653325537ba0ae24d69ce198afd905dc3950e569a1f976e60cfffb6fac5b316a4ff900d190d9de30788eae75b19d34b60d2064152af
- SSDEEP 1536:5PFYnqEcu5YFyVsbZ9P/wx0q+JRE6hB/G78NmGX+QaILWEPEhrdwyWvyXQ56Kr9r:5PFYnqEcu5YFyVsbZ9P/wx0q+JQ7mm+l
- TLSH
  T16E43181133AC9726D6BF077A7470102803F9B8A76532E7CE4D89B4E95CA3B414A617FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  lua/workshop.lua
- Size 24KB
- SHA256 f634f9beccef4bf661c1fd1526563d62d52c6eebb60ae336285d14b58a924ee7
- MD5 47f71f1f52f1c935bb605d66ddd7722e
- SHA1 78561b5f0d2797c041197805c89d9a488e0e1191
- SHA512 73900990c5668207978a3f9c6f9b37549785b5a2cd56f2adbcd2b30c2e5027568d494248c8323559cbfc056f35282842237911928b5f0f86eb6d1e9b66682517
- SSDEEP 768:W7UuaIQ8b+bV7ZPezHpZyfw6nXsairE4L7MxGbo9SHEQk204r3afe3AFvobEEb9R:sUobBwfwMxGbo9SHEQWcr9
- TLSH
  T193B2608EAD419A300793CAB1E89B0416F72D3112611C296AB5FD81E02F2576D86FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  xiv_workshop.dll
- Size 454KB
- SHA256 4092558a3889b536f6f6831908cd4b2c4784410eb3a4d7740abdb4ae8d3c2c30
- MD5 37144f2b38b7726946351c5405d40c33
- SHA1 27ef33a57536ad8633e80c1bba128c3fa3abf766
- SHA512 48265dfd4ca9fade7d034cdef367af85e9a94873faa037c0f7747c17a23994437228c5abc04bcf550b64d4e35ece06fea533a463efbc00f7868acd46f94e4128
- SSDEEP 12288:AbQfKMiU0ehQA/gr+ikPiEyLOzK8QnBScUUM:AbSm4E+ikdyLOzK8QnBScUU
- TLSH
  T1DBA48C0670A2A5ACD427C0744207A635A473785C4770ACFF27D2DB342DA6FE25FB7A68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6