f902b03bdd7a835f1cf589efe6ab519f8987341ff16f966ba4f1f673c7264d21

Sharing

Copy URL Twitter E-mail

General

Target
portmaster-rg353v-addons-v0.1.0.zip
Size 35KB
Sample261113-wezavset7t
SHA256 f902b03bdd7a835f1cf589efe6ab519f8987341ff16f966ba4f1f673c7264d21
MD5 88b4e731f37318ca24a3417f414059c3
SHA1 478c82faa02dee39a669f35bd30bcafff0cef835
SHA512 2f55f56848cd21ddd39b8b42b455279acf32d70d35ded8f920b3bb9b7d18152f4344c8eddaf73ab6f4bb98082f70b8c01400e79c4e3f3cccdced635a70197a64
SSDEEP 768:hJ5hgsUrqPBgkOq6l8mlS5HytOKA1Aev2kX4QsjBqBOs:hJDgsUrqPGkOq6l8sS5Hy8XbeQsIV
TLSH
T133F27C56FE942F94CC7360FEA418998BD3A9E751210984E42CFDCA76B93B19C1F2163C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  portmaster-rg353v-addons-v0.1.0/install.py
- Size 4KB
- SHA256 825e126707fde6e6b35759b9c117eea14605e786e7f90312312cc6739e5cd6e5
- MD5 93527abbc17488069b7f3ab8eaf60f0b
- SHA1 60c1effd293e7aa2071b10791a9046f326fe959e
- SHA512 10a86f7799a9f65fea48b53ffebb11493df48e0e00faab6fd0f0c172fcc0210ab6fd37cbb7d25532737a81f6f4fcc88d02e69ce4f5802ea134e73a7130e5d8d6
- SSDEEP 96:Z472Nl5NxfX7rM7BrGI+nR0xKGN9f1DTfaJpwc9N7QgSz9Me2:Z472N3/7g7BrGI+ikGN9f1DOT/72z9Mx
- TLSH
  T187A1A62A5A551E62C32316CDBC3DA2326B06AA1713109431F8ADF7603F5817FACF48BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  portmaster-rg353v-addons-v0.1.0/mods/PortMasterRumble/PortMasterRumble.dll
- Size 20KB
- SHA256 b9c0d4b1f89fb09f63b0643c8f1088c39840e26b4905c471d51708d095fc9e33
- MD5 8ddfca3794a0f4bcf7d4cfe201b7268d
- SHA1 1a062a1ff674c0eafe478cdaca0fbdd74d53c55c
- SHA512 09ec823d3481e5c997d2ca662a70d8b7504b742a678b13ad0e9876e332e655bcbbbeeb465ad395b0ac6d3a079f67c558c54aa4afa14b134696108cb7358db164
- SSDEEP 384:aRYRmQyLnfEFxL4quLV6YeqcUwOkhun5LEABD+6lopvKG:aRLncFxBuCA5opvl
- TLSH
  T17292A5595ABD8137C5EA0B39ACB593854F3A9C46BE14E7084F8972CF980FF0059D1B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  portmaster-rg353v-addons-v0.1.0/mods/PortMasterTouch/PortMasterTouch.dll
- Size 12KB
- SHA256 0d07e16f00b1aee0e21c35d4d365acdf5ba28a23e081d1018eac6b67ba8afab6
- MD5 bcd2c5ad708036ba0796c53e5cae0357
- SHA1 d934ecfe4036b67f35cd5d86c71a11401f632531
- SHA512 22a557823a9439ee998ed3d4bfb0d40d37de767349ea173e2c188904039409aa744303414e026a7f381bd018981f3fe7309ee9a75d49506405362ce271f8ed48
- SSDEEP 192:hlfHV6cgag01Z0u7zcUTtaxrkZL/nHcFgkEzVb70Hl1mC3cvd/FWy:jHVbLg07NwUT0BkVPcFPEzF7WlgOy
- TLSH
  T16B42F749AFEC831AE97E4B7895B316201371B6077231EB9A0ED8A05E7C23B411553BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  portmaster-rg353v-addons-v0.1.0/src/PortMasterRumble/ModEntry.cs
- Size 11KB
- SHA256 06d2ec0085681dfb47e78c120a279739b5bb521408fb7cd08fa69ea2d6aa7017
- MD5 ab7932237e387f19b2c6070a7d85fa45
- SHA1 a145c4104a84043ea67a49e2dd1f18aedf04335f
- SHA512 ac77051e9ac140898b4c445dd8f5249df2489ea2a1bedb0647fa8486ad6e64858a1b771c6ddf777ed39a3833de776baeb14c7034b7d930c156d6c19402cd21e7
- SSDEEP 192:ibauaB39Orpyu7YdYjR9wM/Fg3pYJF5NRv5445CLru1tKjV1AOS48dWNhQKDXq3E:iwGoW5Lv64EqLeK48dWNpDkg
- TLSH
  T10C3254020BAB656649134134EE9546632F244A0F2787C4BD3D8C76CB4F8E879E4F6FB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  portmaster-rg353v-addons-v0.1.0/src/PortMasterTouch/PortMasterTouch.cs
- Size 5KB
- SHA256 5171c8d465ac57eb0e696fe0371e24f1f0365693dc157619fb37f3c6a92d95ad
- MD5 2c6255972541c022c89d9787aec18a21
- SHA1 5a52ee517a70be92a3ef4561ae86e3918a7593c5
- SHA512 0b670d27e6f60294b8b9ab93f76162d6632181845b13b516e04793328456c7c144175233158cf850debe8e975073dead72bff78d033130577b78b036dbf45aa6
- SSDEEP 96:Cj4aP26MMVaDUDt6xpD0ZwFCT8T0CsANIdYNG9mMSyLCjWPNChHELYMjZhhFcFOM:tRE9rysT8TJZIdJoMrejWPNChkEMjZha
- TLSH
  T1A7C1A64E095706628653B030DF9B151A7F3B922B669FEC60BB2C06547F491A0DAFCF1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  portmaster-rg353v-addons-v0.1.0/src/PortMasterTouch/TouchDevices.cs
- Size 816B
- SHA256 8827cd64652df1978d41b04b330ac0bd310a0695785f9b7f7e7b16c45ef25671
- MD5 c7d5e6166135ce583f0dfb528d9b8597
- SHA1 8981f31cccc16d0e6bcbab5ab76b83d513d9e4c3
- SHA512 508b3e22172fa724b72aa7d9ce59e55b8b259bd4bca858f83f72e7874fb13e9829349d18ee483c60924c1d43bafa52e68fee2f13ca9ec85bc76a6c170cb57eb0
- TLSH
  T19D01C066321383941F0754151F8A7140A7236957562CD144FFEDF601FF9933A42B6B5B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  portmaster-rg353v-addons-v0.1.0/tests/test_install.py
- Size 4KB
- SHA256 2a883ef27a09bace3754b7ca6a9e73d9dd00703347bbf11625c2057aaad0f4ef
- MD5 b2fd15719df6bd6e797b4b020512db72
- SHA1 eac9de083cf125aa9bb8cf0423cecd6751fc1821
- SHA512 27468d9ecb04a5e36fe5c52311cd1659e3e99b5ed01fa3a1441c6a69bf9e877a80816975863d00883115e8a3ee91acf4b2b3d1ab6ee569c519d5e9fb59750999
- SSDEEP 96:e6K5vRkoaSCvQkoSsn3lkoHWO4b1sGVMU:e6cGoVcob3aolIKU
- TLSH
  T117A1743190822D716E334BFDE41EA67E15265E1311048879F9BEC3402FEF128E9E2C7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  portmaster-rg353v-addons-v0.1.0/tools/launcher-addon.sh
- Size 1KB
- SHA256 80c45e678302bb74191fd48b8750903e3bd003c54c6aab6210909be28b47604e
- MD5 3cbb43c700d8636aea11ea4a597e27a9
- SHA1 0086866c62f9bcdd8e3f00986205cec33da1f2b4
- SHA512 5970631fffc3ab340c1db20ba66d4e3a50b78fb60fedeccb639822439fa43e2f74bb82eb7e3472ba553c4f927ae132f403840d75e007f193913b537127080fd8
- TLSH
  T181317A1398822E707D7620DCFC9FEB4D811CF2B291A26250F8E8A2A5FE646D255D062D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  portmaster-rg353v-addons-v0.1.0/tools/rumble-helper
- Size 5KB
- SHA256 ef4a8976ad60e61bc4ce2f4b003231f57f384002f333c580fc9f152334ab4c38
- MD5 a55f7569f6533ec18bce1c4224798ac3
- SHA1 4c86d0a3a822f5b0ff0866eb76bdb8a778d283e8
- SHA512 ff960c94a74184d5192f572fbd1928d52d3011100c88a5336e81a7e6d03e26a1c7ae24aaefc912980e7429c4d28d3ad54c94770043768ae687904f2955e46ef6
- SSDEEP 96:hOkFNmwmTDwqHcsc/FwcrSRZKursd4cibCpmts38T+2q6:hBswmT3ctwc+RQursmcACpmE0q6
- TLSH
  T113C182424D721911C347C2DC9F11C8629629FDA7DE4A26347ABCD7622F482B1C2F8EB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  portmaster-rg353v-addons-v0.1.0/tools/sudo-shim-for-hardcoded-sudo
- Size 984B
- SHA256 b768aef996df94d7f7e21f5ae9304b9f0c39e63b35140c283d171009a46e82f1
- MD5 7f653bd8e3caa27e4485259d5ffc1480
- SHA1 f1ed808697e1198c857dbf0b30d2284dbd41f97e
- SHA512 6390b8a459cef732a93e480ea0b91c4f95b76fa75d94ab046b0166fefa1e5a25cabaed04c3919253190aeb2b1053609c0d3078b1ecdb2600edab60d32b9044b0
- TLSH
  T13C118951FC664120F51843EC7225BCC4F0B0BA7EF8F4763065F98874196EDE960CB969
- MD5 SHA1 SHA512 TLSH
Score

6^/10

defense_evasion privilege_escalation
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  Abuse sudo or cached sudo credentials to execute code.
  privilege_escalation defense_evasion
behavioral25 behavioral26 behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28