6a5fded63483742e10bc8c01aa5aa9bd5151deab1db8def403c3586143a16c01

Sharing

Copy URL Twitter E-mail

General

Target
ProTech_HR_Portable_v23.0.1_MIT.zip
Size 38.4MB
Sample261113-cbfvkaew7t
SHA256 6a5fded63483742e10bc8c01aa5aa9bd5151deab1db8def403c3586143a16c01
MD5 b1442df8149ad74edb53336b06895f4c
SHA1 9a72d4036500bd96bc47a58171f80edbf2594c1e
SHA512 0627d6831b130bd663482bab3f8f4d5c7e4f80d214724c8fd322d30c8ab64498e0cb19cf787c0a0292d988a534c31aee416ce7279f879b2a4af7fface5debac7
SSDEEP 786432:yOMWX+NszITWyIB4aygZw536Vtvi3Uoa+WNCl2ODUJgiIFDm:L+6yIBnyz53+Ji35a9xODCgiIF6
TLSH
T1A09733FA7E1F1885E0DEF871012C4F085240686134DACBA75DE82B4548A75E6FB9FF98
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

pyinstaller

Malware Config

Targets

- Target
  ProTech_HR_Portable_v23.0.1/ProTech_HR.exe
- Size 7.2MB
- SHA256 ab88f30ce47f0f366ee37efcd29af064803dda7fb9a7d760e0d4ec1e3dd8f401
- MD5 02c79160e73ea920af6eb3a3d50d06a5
- SHA1 67e140152ded030d809d2ea177ae6eab82c5bbbd
- SHA512 69d9c850565b150c9ec12604c98432c016a7d0254937ca45fa33522cde6a58c73df22745c4166d1ce01a20cccae2f32355760bd9ebe34289a77c4a7d87e41195
- SSDEEP 196608:Y2M9mR50FPr+kh7jMDgfNZYjgIGehIdHiu0lG4Me:YbmRm5Kkhb+cdLd4
- TLSH
  T162763399B78200AAF9F306394566C044E7F6399A1734D0EF1B096A3B3E175F52A3D372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ProTech_HR_Portable_v23.0.1/_internal/PIL/_avif.cp312-win_amd64.pyd
- Size 7.5MB
- SHA256 6731dce52baab0b96b0eeb3c664844b5b42c2168ea8668af2430e2fbdd2dfbd8
- MD5 a4a4aca7b1d70395ac351904496455a9
- SHA1 cb9e03e402af73c0cff89a14bce0d5a2fd9095db
- SHA512 2d7dc793db3297c5e7c3b8f6336f107a8a88f432c3a7535d1d64a5831224c5d9f2642f397a8350a1e6fa0e2c787f0e0f3b8926f7176c5f4fbc93618481181886
- SSDEEP 196608:br2+X6aw26wQW7MhOt1U+u7M2wxmjHvbfvRCA3elg4bW6h9/pKbSH0kUCGMy00Z9:PX6avJBt1U+u7M2wxmjHvbfJCA3elg4O
- TLSH
  T1B786DF4AF29381E8E12384B49577A715FB24342E971A527B33E6C5297F937E04B2EF40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ProTech_HR_Portable_v23.0.1/_internal/PIL/_imaging.cp312-win_amd64.pyd
- Size 2.5MB
- SHA256 c8c519ec72bf75b2945b4fc4afa854af2fca8b970a403134f9ddda3e164d85e9
- MD5 6dee210478d38d5eb66686345f62b2be
- SHA1 ee4a86615251e497a4191d132bd4ef95d381275b
- SHA512 435ab66982e52c67da49d0745decd3b7deaa7568a838cd267b27fc30278a72145c704de696b9ca91e85bdba3758b8c97cbc9c3efe77d73184a2a7cf43a721a8a
- SSDEEP 49152:Fn/3k4D4WWEdUNbnSN2Q4b180vUK/qlzA01:q4cWWEySIQvKQ
- TLSH
  T1A1C56B02F591589ADA724034CDAAD626E371780D1BF186F7B684A7F93A33BD03937385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  ProTech_HR_Portable_v23.0.1/_internal/PIL/_imagingcms.cp312-win_amd64.pyd
- Size 266KB
- SHA256 c89c633ae1bf3f26a327d14ff688db66628e19c9866ab925479f27dcb60a2d6f
- MD5 f3ab565843b39e3f429d27a1ca8bd89d
- SHA1 83356f67d37139644222044e9da683f5c95bb889
- SHA512 bdf4f7973d9c6fd2e008f08f14d43d8821f54ef9f23eed238f5fcdd6045b6d9478a9a570624fe4c7733bf48e2f74feccd33e8d3681247a5e7ac8d4373bccd127
- SSDEEP 6144:ytAav7Y+3Pk7FslQubT+ORI7Oc7WZrIKynLg9uP1+74/LgHmPr9qvZqhLaKLTLrG:/avMMPkUnbA7WZrIKynLg9uP1+74/Lgn
- TLSH
  T110445B46A2580CF9E537A179D2A3A50BD7F078151311D6EF83E08E6E6F17BE0693F242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  ProTech_HR_Portable_v23.0.1/_internal/PIL/_imagingmath.cp312-win_amd64.pyd
- Size 21KB
- SHA256 82ac45c41a008854d05f67deda298b65a7bed850d0d79a3af861ed583f6e7d62
- MD5 494123b6fa7707084fdcedaa88435c9c
- SHA1 7ca611219cf7832a864d229fe2a19e6cebecd1cd
- SHA512 96d2ac81ffbb9f30512bae91bf66b68f03ac744474e97ec89828720b9404d6704f3d105771f1d67a9bb5c7c73ca8d99550be16c571df2e8659768ed03c741666
- SSDEEP 192:DGIgHMGowYicXPYu32IBESZjA1hFjGoBIYUPGRrEtRCQgv2oXLTux0PCHKizrVk7:WhSZjsBIYcGRrEtgvVXLCGEzwgUDgZG
- TLSH
  T175A2D8262BD55455D61A033F80510F059892BA25A3C6EEFF07B2E56F39A3EDF163EE00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  ProTech_HR_Portable_v23.0.1/_internal/PIL/_imagingtk.cp312-win_amd64.pyd
- Size 14KB
- SHA256 690cc1cae4a2dc8594a342b9241e691dcc89d81dad4cddcefdf285275365a2b1
- MD5 10be7e06316faa5e14fc6d9a827b96ab
- SHA1 a9261ffbf162667377e13297fd5fbbcd33622e4b
- SHA512 bc202368cd11beb42c9cdb018bdf7cc4cde44f08716fb819fb059d500b9fdb14c98a558a51550630c40caab9d9f191f4c7a1a6e10dbcc7b1289a5323eee0fcfe
- SSDEEP 192:gBegtpQwFD8y1QH+BCKuLjWiRpFkF5LEAu8B7cp9Txc9HXSL:gBzMIAH+gLaiREFJEAuOO9T2ZXS
- TLSH
  T12A62F706FB5508F6FA66427EC8B30F6DA5B1B134576253EF42B0901A0E637D22E3D94D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  ProTech_HR_Portable_v23.0.1/_internal/PIL/_webp.cp312-win_amd64.pyd
- Size 406KB
- SHA256 9823cebb84f425af3ac1e7437259bc176e7ad7e25d7fa829b0e1a3e55c11be70
- MD5 d038b13e4ac95f6c7ea6fc2235c0daeb
- SHA1 431b33d8258dd810a8611596a8e387c4076306d0
- SHA512 771c1b82ed3b6c0c72488773c0c8ae4f4491e8046c3e2bc304e1035d1a5086a55f09a408871d81d16a892912b6ffcccff0cc20a0a5311a02168347774307cad7
- SSDEEP 6144:RUn+yHuPc23YbzQ6fotTkhFfPY3XlkYFuvbXLUtjySO6lh2CsbEvFD:O+yOPc2obzTfE4hBin5tllVJ
- TLSH
  T138947C46E59229D8D9ABD0748EEE525AF7A43C194314A5FF5BD0FE253E33BE0523A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  ProTech_HR_Portable_v23.0.1/_internal/Pythonwin/mfc140u.dll
- Size 5.4MB
- SHA256 643ce7fe6a203c53a96a00f272a1a5b42d5b0c320c84364a6fe866307a19bb65
- MD5 2eb07f3be1f3c40145829fbf64e8678e
- SHA1 774abea1ed131747848b29f2c09ba0e50ecfb984
- SHA512 88a8069d236a90cca454ddcc54f4e1d90d08929e2c4e9018bdae514a70bda006548da421d7e22104b8726cb5a45754c93590761a1db7d926266a95f5339427c8
- SSDEEP 98304:Sge34c9o4bw/SUaKFLOAkGkzdnEVomFHKnP3:SgeIbKRWFLOyomFHKnP3
- TLSH
  T15B467C867AED0494D965D07A86678E5FE7B2FC00136293CF0161679FAF337D2493A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  ProTech_HR_Portable_v23.0.1/_internal/Pythonwin/win32ui.pyd
- Size 1.0MB
- SHA256 5f7b34623a17f357f21cdcaa05b6cdc5cf8cf15d25c6406c3f0c2d9002b72b7f
- MD5 04fbd97eba4852323efca91b92ae630e
- SHA1 e97b665006d07374fb33af7f578c0ac2e221efc6
- SHA512 3ea8d49987b7ab3b3f5ac4e1af863ad8774ed9b515e0a8be39e1aa593321ede7c82019f94992fb27ff76626981df4d7ba40c0956c31c7cfab4bebdfef31302c6
- SSDEEP 12288:tmqn5K/4S+BX6xWR9ON3KrpcWof9GFBnvO71W5:tmqn5K/HDNNaeWpJ
- TLSH
  T13C25D449A799008DE57A907C89275B36F3B2B8114B41F3CB0265975EFF2FBC62439782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  ProTech_HR_Portable_v23.0.1/_internal/VCRUNTIME140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  ProTech_HR_Portable_v23.0.1/_internal/VCRUNTIME140_1.dll
- Size 48KB
- SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
- MD5 cd1b08f4930b276ad78853580b76b5c6
- SHA1 a0330279d3d0d47f19ed984726e25260b547a228
- SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
- SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
- TLSH
  T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  ProTech_HR_Portable_v23.0.1/_internal/_asyncio.pyd
- Size 58KB
- SHA256 42597fc17f9b065f49b3740d41254f0c1ff6b1e10b4a2abd512f51efb2a4ba9e
- MD5 1add68f4b7da9d07a997e98f267c24e2
- SHA1 4009d6f43d91c1afdd5efa52daf5dd6357461690
- SHA512 9779dd45905e95ab3b5b707038639691a58e72c4faaddb7dd47df348e1883e5cea849bd8d3b8bf50c29911a0c41e5c4198b77dca3098e12d30135a184dc0606c
- SSDEEP 768:xI2mjInGL7yV4YVSuqMZB22YxAQO/hfW0ISI7On:+2m0VV4YVD22XQOM0ISI7On
- TLSH
  T178435C86A294419BCAA7B178C9232F56D7F1F4511B0157CF91A8C14E3F637E242FEB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  ProTech_HR_Portable_v23.0.1/_internal/_bz2.pyd
- Size 71KB
- SHA256 2046a236f6ec1858e514cbf1ceae05ad8b62797e3b9080ed833f71cb19d6131b
- MD5 6c9b169659d342786795ab230f518277
- SHA1 db237d4a494f94256a2eb2d9c59c38c5fe040adb
- SHA512 e440ef0145630be5e82f4302f4f271203f1358dfed7bd040035e44681ca0e1d3b855286de921cb7dea188f26dc3fb2224214906db5b52ae3337a55ed54bb42fc
- SSDEEP 1536:AsUnosyz7fTfarwa+uU9zZZe+LQ8+S8Jspi9y0IqI7CV:IosyzrTaU9zreyIlJii3PI7CV
- TLSH
  T1DA635952F3B662F5F46F90B98A510363E730BA54035063EFE248829A3F12BD1AD78356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  ProTech_HR_Portable_v23.0.1/_internal/_ctypes.pyd
- Size 113KB
- SHA256 7b1298bb2f3bc2703893c6be4423d656c273516637349c75c8aceb3402c43d9c
- MD5 9947f709eb23f351268ff1417fd47c79
- SHA1 91981290dac7a1ef9da31f8d74574b566070bf63
- SHA512 f98f8d050406e4ed9d06df4ddd2e2a89188af61fe2c54f27d416be40c108df3ad4c4ccacf6125e4de122bf04cb842f071caf0d5ff4bf97668c4b66315b9cfb91
- SSDEEP 3072:6/yWzlX7wyfxHffE+/32ipMNhwMfKrRVU7XDBXrI7LP:66WBrNffEK2sulX
- TLSH
  T164B34A0B379810AAD7A34179C5736E07DBB1B05A172193CF02A4C6992F63BE79D7E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  ProTech_HR_Portable_v23.0.1/_internal/_decimal.pyd
- Size 242KB
- SHA256 837ef191baac4bfacb5238ee29235ab226871bfb2868608f97ca69e40cbe44fd
- MD5 3003e05fb9bd71df0796b4673c51e64b
- SHA1 3628ad273b982e56feaf5d0ada8f75266e59127b
- SHA512 319706026a1fef15c92d478fb93d3a92cf4fd2153df6f06eecdf947b8daa3b9c912ebbb70a030c41c16b4dd199062fe7907477bca9a6470644aef1bbff969d19
- SSDEEP 6144:TJlIVhBaOoZwa/6RmlrGAV3c39qWM53pLW1AyXLM3M3MXtMhf5nq:TJOXBalaawmlKAV3cKEM3M3M9khnq
- TLSH
  T197345B17A2890CA4DE73807488979E57E7B2789A0360D3CF43B48A967F577A3237D748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  ProTech_HR_Portable_v23.0.1/_internal/_elementtree.pyd
- Size 119KB
- SHA256 6d8501e130b2b879e983b3b9d8be031acc879b844802606f1539a0a3c5ed2584
- MD5 9c0f4c151ba4af39a2fb37657f521100
- SHA1 ba70a624385990f2a83418a66a7c1eefb0f3530a
- SHA512 668e1f862cb9fa1a76eeb345666464902dc2bb908ca4519c53f63e78f2f8f41f3e19e926cfd836019946126321dc3c9a24c0e85cc45b5c70b179ae32b3e4929f
- SSDEEP 3072:8YKsoarG330MRWG45C5t41VBVQOeiBguJe14v6/I76f:u30MEBC5t41JJds14i
- TLSH
  T19EC33A4B72A5C0ABE0A2403DD2674B16DBF6F8620E0083DF5284F69DAF733917E69715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32