66cc17d44799c6c27af99c7f2fce4695b4aa4863d4f4891e3a7a0de1d4f2dd4f

Sharing

Copy URL Twitter E-mail

General

Target
AN_411_Source.zip
Size 678KB
Sample261113-3xa5baas7v
SHA256 66cc17d44799c6c27af99c7f2fce4695b4aa4863d4f4891e3a7a0de1d4f2dd4f
MD5 8e75609fd581957f913ee8e0f101d00b
SHA1 c92db00c9762465a761919fcd0ceab26d8bac812
SHA512 3bb2bce769eaa90e2fcaec297ed13b40c4c466a99fbda4a4617a0c22c9c4b2c953f1b34bf35bbf2f397a687be81d0378a19a12bd1135d29d58e43577e89ae3de
SSDEEP 12288:Lb9/NYaewVxh9eeNxM9Lq9LYa8w0vdsXRwISvdunKf0lu5D4L7Mb3kRJ8iPjkp:Lb9/urC9er9G90jtVGpSgn5M+UUHrkp
TLSH
T1B4E423736DC8346EC445E3B33A171A8BAD46E71237B42C4E9E9943049C73E5A1DE21AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  AN_411_Source/AN_411_Source/FTD2XX_NET.dll
- Size 71KB
- SHA256 d3ed250d833a71de8eb1d2c876b9716355505db51e4c878ce16028e3d8638028
- MD5 0a70edc6582cfccd671bb7f59b2f6152
- SHA1 78be8d01f9bb64fe3f2a41baf2c13a5e13e1426a
- SHA512 a3ea86fccebeb8e084d3c674d7cc14f680bb1a24f49e32abc934fcfcadff8beb157e1a578232ff16439ec96099452a3ae51496b304354e8a0699927a3bc4c8d6
- SSDEEP 768:+LLWHMpfbBmtbWtmhm8syGMyg5pbYDulFOadbXK6St1f1zNeQCGmaEhdWemRJJqG:zEBmtcs3syGMJ5lFOardbmRtz7
- TLSH
  T1D963C68157FE5B26D3EE833C39A944442677B46B00B3DB3E44E095E63B2AB5446433EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AN_411_Source/AN_411_Source/FTD2XX_NET_v1.1.0/FTD2XX_NET.dll
- Size 71KB
- SHA256 d3ed250d833a71de8eb1d2c876b9716355505db51e4c878ce16028e3d8638028
- MD5 0a70edc6582cfccd671bb7f59b2f6152
- SHA1 78be8d01f9bb64fe3f2a41baf2c13a5e13e1426a
- SHA512 a3ea86fccebeb8e084d3c674d7cc14f680bb1a24f49e32abc934fcfcadff8beb157e1a578232ff16439ec96099452a3ae51496b304354e8a0699927a3bc4c8d6
- SSDEEP 768:+LLWHMpfbBmtbWtmhm8syGMyg5pbYDulFOadbXK6St1f1zNeQCGmaEhdWemRJJqG:zEBmtcs3syGMJ5lFOardbmRtz7
- TLSH
  T1D963C68157FE5B26D3EE833C39A944442677B46B00B3DB3E44E095E63B2AB5446433EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  AN_411_Source/AN_411_Source/Properties/Resources.Designer.cs
- Size 2KB
- SHA256 2834e2b77b5aad52e705c5168019d06e2197aabf67491c0c6c966fcd3c05a3ac
- MD5 325cda2623cd018b3b0d1722d4f22364
- SHA1 f5051ba102f23c50839802dc9efce832cb2e8bed
- SHA512 77d517a903567f63659c9cba92720a8f4356a85508945763658f0a464c8cbe4d6e0a21813c0ee9ba912e61cf48b265cf581537f5b44a7db5d59a96ebf9754e5f
- TLSH
  T1B151CCB71F94C1320834D6AB8700F451CB662123CA3DD834F8AE03655FB6394437EDAA
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6
- Target
  AN_411_Source/AN_411_Source/Properties/Resources.resx
- Size 5KB
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- TLSH
  T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  AN_411_Source/AN_411_Source/bin/Debug/FTD2XX_NET.dll
- Size 71KB
- SHA256 d3ed250d833a71de8eb1d2c876b9716355505db51e4c878ce16028e3d8638028
- MD5 0a70edc6582cfccd671bb7f59b2f6152
- SHA1 78be8d01f9bb64fe3f2a41baf2c13a5e13e1426a
- SHA512 a3ea86fccebeb8e084d3c674d7cc14f680bb1a24f49e32abc934fcfcadff8beb157e1a578232ff16439ec96099452a3ae51496b304354e8a0699927a3bc4c8d6
- SSDEEP 768:+LLWHMpfbBmtbWtmhm8syGMyg5pbYDulFOadbXK6St1f1zNeQCGmaEhdWemRJJqG:zEBmtcs3syGMJ5lFOardbmRtz7
- TLSH
  T1D963C68157FE5B26D3EE833C39A944442677B46B00B3DB3E44E095E63B2AB5446433EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  AN_411_Source/AN_411_Source/bin/Debug/SensorDemo.exe
- Size 27KB
- SHA256 90f5aad4ca53ebd50d2b4500f06cc13b6f36a89f794b01511133069df3758195
- MD5 97d7d2c66a7714d18768ecf1bd8e7000
- SHA1 68fe73578b17471cda4e1372edef8ab56ebbbd4d
- SHA512 b9d89039e647f1df10ebff8b0d61e50fcd28683604c00cb56f7f44756dcbaa02ff3bb84ad35e31df719a7c5b6c9daa7f16e1991c3bcec26ca6b744b6c3d7b636
- SSDEEP 768:aC32GemG3HGENG4GKxeh4xLDJAeNwjkWOznqV:aU2GemG3HGENG4GKxeh4xLDJg+Y
- TLSH
  T1B9C28411966AFF37CCF287F59863789193719157BB52C11A0DE710CB3AA1FC0A984AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery spyware trojan
behavioral11 behavioral12
- Target
  AN_411_Source/AN_411_Source/bin/Debug/SensorDemo.vshost.exe
- Size 22KB
- SHA256 327983cff9c61c976b1cd64386a40ca18858178a2029ff4ece2c19388d0c61bd
- MD5 da4e23aceac38213052dd9dead13571d
- SHA1 66e689243342762dd64f9bab998505d7cc453b6b
- SHA512 7b957cda964a27c2c0b3a5ecf48fe2b01710dea3d01f444c0fa865d1c2bb8a0fb50faca55cb698bfb661de33fbc9d02119029f863905c644db7c013eba4432e6
- SSDEEP 384:OfIW5aWMS1q//0GftpBjAE+H3HRN7NslYa0dj:e/A58iCbHJao
- TLSH
  T155A24A95C67C8143DD935D7066A8EAC37C3DE3D30C20A51A249EE6DD2E837D4DB24928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  AN_411_Source/AN_411_Source/bin/Release/FTD2XX_NET.dll
- Size 71KB
- SHA256 d3ed250d833a71de8eb1d2c876b9716355505db51e4c878ce16028e3d8638028
- MD5 0a70edc6582cfccd671bb7f59b2f6152
- SHA1 78be8d01f9bb64fe3f2a41baf2c13a5e13e1426a
- SHA512 a3ea86fccebeb8e084d3c674d7cc14f680bb1a24f49e32abc934fcfcadff8beb157e1a578232ff16439ec96099452a3ae51496b304354e8a0699927a3bc4c8d6
- SSDEEP 768:+LLWHMpfbBmtbWtmhm8syGMyg5pbYDulFOadbXK6St1f1zNeQCGmaEhdWemRJJqG:zEBmtcs3syGMJ5lFOardbmRtz7
- TLSH
  T1D963C68157FE5B26D3EE833C39A944442677B46B00B3DB3E44E095E63B2AB5446433EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  AN_411_Source/AN_411_Source/bin/Release/SensorDemo.exe
- Size 25KB
- SHA256 b5393b4188056b569b4adf7ec90e89ca4d59c4b140ecc757231e315de5a3b15e
- MD5 c82aef7b489079495896c8ad62b7c96f
- SHA1 9045261f5281e19abdb86e41674ac3e4eba18ff5
- SHA512 c27e1658b11c2b6600cce47eb0832d164d25bf36923365c390d1c966d5b47717b8558aaf034457916e23d0827b42bf34461c9fe1bcb7cc4af5b53140e534b337
- SSDEEP 768:Lgj6A8GkqG3HGEOGAGTMdy2Mys4ggN9LQOd/26g9:TGkqG3HGEOGAGTMdy2Mys4yi+9
- TLSH
  T152B26281B72BDF37DCE286F188A77597C7B1212ABA51C1858C9710C729E2F816981BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery spyware trojan
behavioral17 behavioral18
- Target
  AN_411_Source/AN_411_Source/bin/Release/SensorDemo.vshost.exe
- Size 22KB
- SHA256 327983cff9c61c976b1cd64386a40ca18858178a2029ff4ece2c19388d0c61bd
- MD5 da4e23aceac38213052dd9dead13571d
- SHA1 66e689243342762dd64f9bab998505d7cc453b6b
- SHA512 7b957cda964a27c2c0b3a5ecf48fe2b01710dea3d01f444c0fa865d1c2bb8a0fb50faca55cb698bfb661de33fbc9d02119029f863905c644db7c013eba4432e6
- SSDEEP 384:OfIW5aWMS1q//0GftpBjAE+H3HRN7NslYa0dj:e/A58iCbHJao
- TLSH
  T155A24A95C67C8143DD935D7066A8EAC37C3DE3D30C20A51A249EE6DD2E837D4DB24928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  AN_411_Source/AN_411_Source/obj/Debug/SensorDemo.exe
- Size 27KB
- SHA256 90f5aad4ca53ebd50d2b4500f06cc13b6f36a89f794b01511133069df3758195
- MD5 97d7d2c66a7714d18768ecf1bd8e7000
- SHA1 68fe73578b17471cda4e1372edef8ab56ebbbd4d
- SHA512 b9d89039e647f1df10ebff8b0d61e50fcd28683604c00cb56f7f44756dcbaa02ff3bb84ad35e31df719a7c5b6c9daa7f16e1991c3bcec26ca6b744b6c3d7b636
- SSDEEP 768:aC32GemG3HGENG4GKxeh4xLDJAeNwjkWOznqV:aU2GemG3HGENG4GKxeh4xLDJg+Y
- TLSH
  T1B9C28411966AFF37CCF287F59863789193719157BB52C11A0DE710CB3AA1FC0A984AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  AN_411_Source/AN_411_Source/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
- Size 4KB
- SHA256 f3d706b5ecd2c3be45d50fdde55548e2b7f8ea1948e9f75f5b12c8788f722691
- MD5 1cc1c36dd89a4a471b551d61772ad7d2
- SHA1 94367162ab40773bb3915d09594ba5c3eb799b09
- SHA512 99d9958f338f7e21ac5729f69d9e07ac98e7e2763156ca5d725998270cf372bd94daef34a9b4237bf311701e0db7e8f131001a319ac20dc14837ed7ca19b1ccf
- SSDEEP 48:6TO3IfwoC7p78U/b6nI1GtJBNZDijTtIECwdXA6OXiDOsauliSC75q:6Od7tuI1ejieECfiP7C
- TLSH
  T11991622267F84BBAE5BA0F319AB302150B74F919DE7397AE4C84411A5DA23508B71F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  AN_411_Source/AN_411_Source/obj/Release/SensorDemo.exe
- Size 25KB
- SHA256 b5393b4188056b569b4adf7ec90e89ca4d59c4b140ecc757231e315de5a3b15e
- MD5 c82aef7b489079495896c8ad62b7c96f
- SHA1 9045261f5281e19abdb86e41674ac3e4eba18ff5
- SHA512 c27e1658b11c2b6600cce47eb0832d164d25bf36923365c390d1c966d5b47717b8558aaf034457916e23d0827b42bf34461c9fe1bcb7cc4af5b53140e534b337
- SSDEEP 768:Lgj6A8GkqG3HGEOGAGTMdy2Mys4ggN9LQOd/26g9:TGkqG3HGEOGAGTMdy2Mys4yi+9
- TLSH
  T152B26281B72BDF37DCE286F188A77597C7B1212ABA51C1858C9710C729E2F816981BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  AN_411_Source/AN_411_Source/obj/Release/TempPE/Properties.Resources.Designer.cs.dll
- Size 4KB
- SHA256 d8d67a2a4e86282de4e46105f2fe9f7e4aa25c2b4c120e6b4f436328ed2a192c
- MD5 4cbb392af51d65d6c6d0508d01cff5b8
- SHA1 ac0960d2cf76354c771657b25376ff24eb5b482a
- SHA512 9f1893cf512352da77c52ab1b295f6ef21b11a6b7b053f70e44d4d5e81286d857e318c508073492151a1c02221c963c98ddf68fe5c701cf14ccc9037c4fab8ef
- SSDEEP 48:6WO3IfwoC7p78U/b6nI1GtJBNZDijTtIECwlXA6OXiDOsauliSC75q:LOd7tuI1ejieECziP7C
- TLSH
  T12191732367F84B7AE5BA0F31AAB302110B34F919CE7397BE4884411A5DA23508B71FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  AN_411_Source/TCS34725.pdf
- Size 237KB
- SHA256 acf2584428f14e925436c0038c863041fd73a6a10efc87049fdd3da60e466295
- MD5 0f331211964701fe283758ab7bcbea38
- SHA1 a499f157c2d27883a17a2fc4b14ac194fa0c2ed3
- SHA512 5aa3cb31f76387758545a4ba75e2281e7dfbed72ebdb74ec6a32d08c8e742727965d2a507373270e1bbb0a04c3a1f2afbeec1b0a652c85cff9653570761d4bf6
- SSDEEP 6144:METR/vdxRR8qLunB57eAXS+hJtUW531kb:METFdZ8qann7eAXS+hJtD5310
- TLSH
  T128340267C69BFD991086E2C2B78CA133514ED0F96748545832FD8FD7AF80DA11A8C8E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  AN_411_Source/vcnl4010.pdf
- Size 204KB
- SHA256 6af7b8b5fb42171dd3b8a6f4a84a9c4076beda079a48a6c3cb594586e4dce651
- MD5 2477cbeaa51cd6dcfbb02d80c3fd9f8c
- SHA1 b9e0896ada99c8ae55df85cb54fc695d0d1a4796
- SHA512 28c9e67652cc183587fca200b4b9c3168e4cff11c5380aecfe3d69fd2022435f64a3209f8a057896df003452cf5150246e7977d7c3d16170164809c69dfb5e50
- SSDEEP 6144:R962VuBR7eB+z9s73z3zFOGwLTTKZ+QEGYQkfiV7596:R9n2VeBL73PFOZ3eV3ku596
- TLSH
  T1BE24E128DA56DCBDFCE2C6419636363CB60CB3A767CC64F43C380B96E140E45E9669D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32