a8984634c35b58ba82d0aec078d5a5e6004da01d5a25b3daf822ab5e31c7312b

General

Target
herdr-core-windows-x86_64.zip
Size 3.7MB
Sample261113-katc9ssv4j
SHA256 a8984634c35b58ba82d0aec078d5a5e6004da01d5a25b3daf822ab5e31c7312b
MD5 6db3df68b686b4986cf8b84614b91975
SHA1 1563b26fd1acf4ff36f1fcce18e6265c604334b5
SHA512 bcd09a820bbea26a0da6abb7c3c8e14d0bf30fcb5d7438a1189f857113b36c402c72e92640e2b9ef64598b71774b27888972108c629b500bd9b16c92cce66be0
SSDEEP 98304:uQ4Mq4ICexbxXvbcqkpjsV8M5G0HlOPGH9Vev47qQUnzlpi:uQ4L9C+BzcqkpQGM4ilO+dVe85Uzq
TLSH
T1D10633CAF28A774097A1AAF11E726346CE3E2B757A5C74274C7C5BE06280FD246D3607
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  conpty/conpty.dll
- Size 107KB
- SHA256 39fba2713e2495117b1591ae8c32a3b904bea7aa66069cf7815e2844c76d75d8
- MD5 cbd0fe7c9db8514edbf32ad70e05529a
- SHA1 ddaa27185edd601f8c70d30aee78ebc9a6166b78
- SHA512 73f3ad180922ede0557261b17878fb57027bb13b33bbab2127fe7026c7cacf3310301a2981a34f45c6ec6d9670fcda9a29d70147d55e939b1b15efd834db7512
- SSDEEP 3072:UUaG9GGNczAYJCyrrCTeHGhJwbuzA6yiXFS:UUV9hNQAYRfCq7uzA6W
- TLSH
  T132B37C2BB6A800EAD0BB8179C4A35E46F77174754720A7CF2761835A1F23BD06E3E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  conpty/x64/OpenConsole.exe
- Size 1.0MB
- SHA256 b7fd936c2668b87b9ecf7b3366dc6568afc1c6f981874cba3e955a1c35cf8160
- MD5 5d725f6986d630b96f880fd72db57dc5
- SHA1 d7ff78662fd09ea559fd24e3c37e19143cebaf9f
- SHA512 31362400daa6e8abc6af4d1f2329bbbf51cb8d4ace2d8b018ccf2bdd2fa6a2d9f0082d9c7fe9d3670e453188976514506cdbaa6b0445f719aa4512f3e3898d8e
- SSDEEP 24576:MadD7LlHZ/1iOD3T2OcIm+whOM9F+/bdwDl2:/rlHxfGO5BgOMixq4
- TLSH
  T1A5356B1AAAA915E8D47FD0B9C543C91BF6B27C4203758BCB06E18A562F677E01F3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  herdr-core.exe
- Size 8.8MB
- SHA256 5304b33036e6f83d752751e8e4ca78ea484acf6b9247e72f2d3aecc02f696a6d
- MD5 8b0dc897d4c356de6ef59eeec59a902f
- SHA1 7d3b7588658e1515de465e460977c8a9239f535f
- SHA512 66fb6751ec67ad4c67531dc1367af284075555bdf2d91b4fd264a26185d9d07bb9e7b8870e5018d155af547fc7412f6c5c0d19f53738d73f4ef1e81493e4ee07
- SSDEEP 98304:PC5Q8FtSEaMSt8Kj9qxcb0d9ghNeMNaTsO6EaRE62QT:KQjq6Z
- TLSH
  T14B962A173A9F55BDC596C470834B4B639A2130DB1A26BCBF60C891343F79AF05B3A798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6