2093f10d3b80d80ed2c0332fed2dd560980355d2f4aaf121a4cef13e6353867a

Sharing

Copy URL Twitter E-mail

General

Target
pg-cloudconfig_0.11.tar.xz
Size 26KB
Sample261113-e1q3yafw3w
SHA256 2093f10d3b80d80ed2c0332fed2dd560980355d2f4aaf121a4cef13e6353867a
MD5 7614ce299fc5d95dacddfeca41004eac
SHA1 b681923b27a95014b624769c7faa468ca561f3f9
SHA512 03d840a19790dd21c17e9d7d2081e4a86248bce00635a864ac31979a8049eb62e81749a5a59ef1e12ad2b25a612cdbc8a9642aae566f3743e9c25f84f5bbdf05
SSDEEP 768:4t2VKSNB5Q28pttqHEo8yUFp70/RfgZhQzM:3VK+/8X+phhpfgb7
TLSH
T175C2E1A81A1CA2E28BFAD6EB60DFC37844B71D77000641165DEE372F1052679ACDCB66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution linux

Malware Config

Targets

- Target
  pg_cloudconfig/Vagrantfile
- Size 1KB
- SHA256 146a9507c216cabfab807c22a12d1a4a5140b20b96fbb40e140510c3a0099599
- MD5 07d2ac7ddc106b450c882554ea8a0a93
- SHA1 e50167131ec195193d710374e07577a0928df888
- SHA512 a3d92641f4af97942eb4a1900c4bfcf71b723f7cf042953c834ff8d84976d56ab6b6efa8fc88c45975a22517d7a33e42d2836b37290e7624be5fe37f72eede1b
- TLSH
  T1CE1112374017AE3F3FD9CE52F5F2E6281E95D5E7124F085C76AE30290F0A558A6A2701
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  pg_cloudconfig/debian/rules
- Size 441B
- SHA256 ad683c3633b2389503ed8638ee5d0610eca91f502d5d29a625b61cd2e2364418
- MD5 5f253990e8c8f80fb637b837ac3ae084
- SHA1 d3d0c7ceff793765370f7c15082fde42f5ef19d2
- SHA512 ab764b68262357d8e46636a962a0cbb3831706ba6e1bed5cec772932b5bdb57519d001e28920d12070517c83ee2427c562935fd02db663c7af5023afadfc07a1
- TLSH
  T1A5F02745C088DBB2AE800B127A300E037FF197D8656B38222AE33685928A351625593A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  pg_cloudconfig/debian/tests/run
- Size 238B
- SHA256 856d2732e9d89559dead320e3b406a0e19220f599983b1a5d5ab8014a2d94fd5
- MD5 2d0e26f7f8c6c20edd5c36a0ccfcba5d
- SHA1 5920e7e6169770cab2ceaa07e2880772ac96b2bb
- SHA512 22628529684906cb51f9ddd7255639f13a87192b3dae5b32c9034f8fc3171bfebd7fe727ffb15e1b2942a1e4f77903d2d241c079590f815c6a72ef4b3957afb9
- TLSH
  T1DAD0A7B620083A627ECE7898B670DB68524524C41A8A845C11A271954A28B6E656F05A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  pg_cloudconfig/pg_cloudconfig/__init__.py
- Size 725B
- SHA256 7bae44441f99635d7f8f418f1cb24e86bafd21d6127641616b35d647db3a7372
- MD5 a7adcf8dd73003e6b907a19ffb22905a
- SHA1 431c26e71540501e4b21eaddf2ed447055a1ee6f
- SHA512 d8adb228c5a71ac22eedf85d6456a1360898cd465274a88f983b8ea85210c13edf1b203da73cb88eadefc9f4b7680f9ea3f3c23a69d9aa979621a54ddad3111f
- TLSH
  T1F701201D2450CBBA8C8002C9358361DAF36AA64771EC88900609D39F8506E7219FA084
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  pg_cloudconfig/pg_cloudconfig/pg_cloudconfig.py
- Size 16KB
- SHA256 8db0fc6258edd59202392134cd47f273f35771226613a740183f0f9cb2bc57e5
- MD5 1b67fd113059e24bd07a64208c46e3c7
- SHA1 f1d10c5b52f23ed536c52ba6b2b92432275dd69e
- SHA512 08df9cc539f4f87165c2d421e231b384c1187ad71da6d7a26928f80ba0ba69e870e88dc5226c31621179b0198acd41e415db73acab830e804bc9e8581e43af2c
- SSDEEP 384:kLkQGZ/HNntZ8YfJR+86CGKQA7Kjj2KqX:kLkzHNntZ8Yfz9GKQA7Kjj2H
- TLSH
  T1A672E61BE21B297E9643419DAB4AE1216330E89B13055478B7ECD2142F14A79E3FFEDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  pg_cloudconfig/setup.py
- Size 1KB
- SHA256 8bc3a5438bd2c2cbdb052f0756d21f7f348f9a9282276afcc45a73a2f3b32f79
- MD5 5f682d4e386d9a3c6a1d5dad30a5271c
- SHA1 e9b27e1cb15ffe406f083ec50d448797e63c4895
- SHA512 e67bddff1f17d946fc27f118ef8dee3e18b6ce34c10af29027694623a69a77f387524d7c6f05ed040656a259f06fa3654f2a4edc3dcd553f3532b87390805699
- TLSH
  T1573166634CABD5771D61820AF81F19126F3156B32E0578487B5D93186F5C9AC53FC538
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20 behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Visual Basic

T1059.005

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22