d74fee10090cae17655d137e060398ce6fe52eb811ebc67a439ef37297e5014f

General

Target
Integrated_Assessment_Indo-Pacific_Economic_and_Security.zip
Size 227KB
Sample261111-sdc5fsg15r
SHA256 d74fee10090cae17655d137e060398ce6fe52eb811ebc67a439ef37297e5014f
MD5 d44d5eb600792f1723edb0287f926748
SHA1 e25c240511a75876c0d5c2dfa82114449a0eb291
SHA512 680033e2439125d17e0facb7b998f494e9fb9d7c770c9bb10c75be4a7934e0cabad732a8b4023583eeee48c638dc71ff6d45390417492119c0d8dd86fac0a3ae
SSDEEP 6144:8qYcRWVSPvnkRYFZc8+rwB76IInuVrYPjlk5:8qYiWVe/kRv8+kBmduV8PZM
TLSH
T1B73423768BB5C33FF0555932F8DAB4EC301A69D19A7C5E572D28810CB60BA2CF56F809
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Integrated_Assessment_Indo-Pacific_Economic_and_Security.zip
- Size 227KB
- SHA256 d74fee10090cae17655d137e060398ce6fe52eb811ebc67a439ef37297e5014f
- MD5 d44d5eb600792f1723edb0287f926748
- SHA1 e25c240511a75876c0d5c2dfa82114449a0eb291
- SHA512 680033e2439125d17e0facb7b998f494e9fb9d7c770c9bb10c75be4a7934e0cabad732a8b4023583eeee48c638dc71ff6d45390417492119c0d8dd86fac0a3ae
- SSDEEP 6144:8qYcRWVSPvnkRYFZc8+rwB76IInuVrYPjlk5:8qYiWVe/kRv8+kBmduV8PZM
- TLSH
  T1B73423768BB5C33FF0555932F8DAB4EC301A69D19A7C5E572D28810CB60BA2CF56F809
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Integrated_Assessment_Indo-Pacific_Economic_and_Security/CommonLib.dll
- Size 460KB
- SHA256 4748571d98c6af34f4967a3886f73b4421239a1203f048140d3bfdaf8aa78937
- MD5 ea968b0e9f955968be1ea099da738a63
- SHA1 4c04b199eecfb6c54ba616e5b99a9f305ee673a9
- SHA512 18f6d55e8cee1fc0af1f44e514a5ba4c5268936dac7d867eb776a630eca1a94209b0265b9a1aa2fdb00e41c1f2765204282d5484e3dae06a0a0f8022f07942c9
- SSDEEP 6144:96IYRZM29WZjsvIYSPOGWN2ubwn25WrmHo0bP47G0QyJlkcLWPGT7A:96629IcEmHBqEcLCGT7
- TLSH
  T156A418C83BECB641E3BE26377467D584473A9907E1D6A3BF5898F4F52CA632068012D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Integrated_Assessment_Indo-Pacific_Economic_and_Security/Integrated_Assessment_Indo-Pacific_Economic_and_Security.exe
- Size 771KB
- SHA256 33cf56f15b9e069e3f21d23338ec96c2aaf6edd4f2baadcea2af39e1968515ea
- MD5 3a975c55b88079d51e3526af216da2dc
- SHA1 a92d10b9cbc16f534290d1a6ce5268845a04c972
- SHA512 e709aa040a611677fd7821df342720f729c58a47d78a480e96d18a8f0a3cf53bbb89512dd68beebbd11f87a568114428f6d374396c75b7620f2ab720ae2dd29c
- SSDEEP 24576:2vGiuLgs3T1Q8XLdYvGNuLgssT1r8XLduK:2vGiuLgs3T1Q8XLdYvGNuLgssT1r8XLb
- TLSH
  T148F4BF191E205D85D5F5C834E674591899BAFCB3D2B9839108B73CA0CFFF7B26A628D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery privilege_escalation
- Suspicious use of NtCreateUserProcessOtherParentProcess
  defense_evasion privilege_escalation
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral5 behavioral6