Overview

overview

8

Static

static

8

2018051817...er.exe

windows7_x64

2018051817...er.exe

windows10_x64

GGLanguage_HTML.dll

windows7_x64

1

GGLanguage_HTML.dll

windows10_x64

1

atl100.dll

windows7_x64

1

atl100.dll

windows10_x64

1

iSignatureHTML.dll

windows7_x64

1

iSignatureHTML.dll

windows10_x64

1

iSignature...cx.dll

windows7_x64

1

iSignature...cx.dll

windows10_x64

1

msvcp100.dll

windows7_x64

3

msvcp100.dll

windows10_x64

3

msvcr100.dll

windows7_x64

3

msvcr100.dll

windows10_x64

3

CaLibraryPro.dll

windows7_x64

1

CaLibraryPro.dll

windows10_x64

1

GGLanguage.dll

windows7_x64

1

GGLanguage.dll

windows10_x64

1

GGLanguage_Pub.dll

windows7_x64

1

GGLanguage_Pub.dll

windows10_x64

1

GdiPlus.dll

windows7_x64

3

GdiPlus.dll

windows10_x64

3

GoldGridPublic.dll

windows7_x64

1

GoldGridPublic.dll

windows10_x64

1

KG_Crypt_API.dll

windows7_x64

1

KG_Crypt_API.dll

windows10_x64

1

KG_Crypt_COM_API.dll

windows7_x64

1

KG_Crypt_COM_API.dll

windows10_x64

1

KG_LicEnc.dll

windows7_x64

3

KG_LicEnc.dll

windows10_x64

3

MakeSignature.exe

windows7_x64

3

MakeSignature.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20180518171910472.zip.zip

  • Size

    34.0MB

  • Sample

    210730-tdgrtyffw6

  • MD5

    2767fa19ec39d4807f61acbc6cab7dcf

  • SHA1

    55f1845884e6b6b15a4a5d85d9f5d1f3caf046ce

  • SHA256

    91a8d66f5c1f651e0f60c456fa8dd06347f69be8ba5542f9c6781e6714962fa9

  • SHA512

    62fcf41fce18b4524cb9cb73e82e300580a647f7b7e41379a954a67c57a44c5f6544d9d1e31a80659316628d710bc2f36f721c7255f8151bf63f7503f0f95b12

Score
8/10
aspackv2

Malware Config

Targets

    • Target

      20180518171910472/CAǩ��������/iSignatureǩ������/Installer.exe

    • Size

      1.5MB

    • MD5

      efb57427674fcc8b051eb10cf420b87d

    • SHA1

      393a7f32b9369ea2f4f78cac66049b12191f10d8

    • SHA256

      b0ef61817399d2ba37c53ae9260fa1c5a57f11945c472859dbde15f8745a5898

    • SHA512

      2818e84c734392d49cdb9c347c79675bf1c43cceb144171c6bde55ddbfc6e45a1a0443e0f4544ede6343c672b70a4d417a490e154d5192046c8d5f1a68094e93

    Score
    1/10
    behavioral1behavioral2

    • Target

      GGLanguage_HTML.dll

    • Size

      60KB

    • MD5

      fb04e50563078ef6a6d0ee0e108fb3a0

    • SHA1

      411f9502328d1745e1710b31d70d666a19162fb5

    • SHA256

      25637a737f560efe9be557d199db2c129d5324a99fbd2df028c99814a41a7eaa

    • SHA512

      f5c7f541855c55e6c429802ed41beedd1c4cedadc537397c22de28c69c4073fe2f9cb7c82f2060d19f4cc4011051695443cd8bf958a343517822cc8c1df10c33

    Score
    1/10
    behavioral3behavioral4

    • Target

      atl100.dll

    • Size

      134KB

    • MD5

      c85670ab64068f8080998aeba6c5019c

    • SHA1

      ef762c375486594f6604f39311d32442156ac8bb

    • SHA256

      87d88235f69c062e5b759f91253abaf7bd055937dd119bd26858237f812d3ded

    • SHA512

      870a27585f72e444fa9a2b46ab53ed420932952be8a3c4ddd0d831d72be0ac1b44992cf757de76d0cd667cd5b6150e9eb96ac2a8e7161a22c7d557946a12e5c6

    Score
    1/10
    behavioral5behavioral6

    • Target

      iSignatureHTML.dll

    • Size

      1.2MB

    • MD5

      9b672a0998c10063f2783072c5152d97

    • SHA1

      a215d0bdf6f1ca4249cb1195366c71b477fa023e

    • SHA256

      f5dc0bd8aac59f900c804d442bb0dfabf40a1ec9c2deb251c89cae4b7ff9cb24

    • SHA512

      8e4d6630d7d0b028efaff9a901159c47abc9d4252cb34304559141a78d1bbefba6294e986dc2a12470aa6562a3b7a23c9e6dcf8463389bb95242f7a09da0b775

    Score
    1/10
    behavioral7behavioral8

    • Target

      iSignatureHTMLAddin.ocx

    • Size

      1.2MB

    • MD5

      28b4fd6497bbc422a9c9d214aa1e6a8a

    • SHA1

      0e5be0d1530d3b27a2664ccfc52e02c462903ccb

    • SHA256

      949593c8971f660e2783d1e2a533579ab8767416bfc109b3ebf9885ea65807b4

    • SHA512

      afe69ac3f61fbeeb08f9e715b8be8486fdd78634ebc41f3a6ddf07e40b594a2fb18a5ca6786fb5db990e7d7cdb0a6b2b83a39407f78bbc60c545b016cb8c206b

    Score
    1/10
    behavioral9behavioral10

    • Target

      msvcp100.dll

    • Size

      411KB

    • MD5

      e3c817f7fe44cc870ecdbcbc3ea36132

    • SHA1

      2ada702a0c143a7ae39b7de16a4b5cc994d2548b

    • SHA256

      d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf

    • SHA512

      4fcf3fcdd27c97a714e173aa221f53df6c152636d77dea49e256a9788f2d3f2c2d7315dd0b4d72ecefc553082f9149b8580779abb39891a88907f16ec9e13cbe

    Score
    3/10
    behavioral11behavioral12

    • Target

      msvcr100.dll

    • Size

      755KB

    • MD5

      bf38660a9125935658cfa3e53fdc7d65

    • SHA1

      0b51fb415ec89848f339f8989d323bea722bfd70

    • SHA256

      60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa

    • SHA512

      25f521ffe25a950d0f1a4de63b04cb62e2a3b0e72e7405799586913208bf8f8fa52aa34e96a9cc6ee47afcd41870f3aa0cd8289c53461d1b6e792d19b750c9a1

    Score
    3/10
    behavioral13behavioral14

    • Target

      CaLibraryPro.dll

    • Size

      292KB

    • MD5

      6f06fe635505abb6811885210c10b1bf

    • SHA1

      62d5a79c575e8a12bbf6cc60999d172edf774368

    • SHA256

      0318676264b86a477e3404ef0a09ce418768d8f893f6ccc44dbe072afe057ecd

    • SHA512

      9eb256d0dee801e29d6097b5d15fdd55d15e76b44dfc52c3587a7b3bce709b319125e0ae34eb99f3284884ccc243add9a878fefa0f31a9de6f2f1d2a0fdadc1d

    Score
    1/10
    behavioral15behavioral16

    • Target

      GGLanguage.dll

    • Size

      148KB

    • MD5

      48cfefdcd1b9f0246e47e224491c75dc

    • SHA1

      2d34d41bcca5757849b752b4845462fcb7ca1b3d

    • SHA256

      089e472bccecf674ed5a08fff38d86be4b74ef7a64ef7aa0dbd2d4e3e83e25fe

    • SHA512

      61b24536f4f37f4320d5167a984bb18f2c47c493a76dcd8a7602f64c12c1c9df5ffae26f8bed59c4e1034d17efc6de2d57d3357b5015327299b57640dac09957

    Score
    1/10
    behavioral17behavioral18

    • Target

      GGLanguage_Pub.dll

    • Size

      178KB

    • MD5

      c15964d74d3f6d3376a751c7095110fa

    • SHA1

      63b0e8bd2d50ae1a3b9d416dcc3adabb9cc9777e

    • SHA256

      c1592a3d46e87dc684cf1a2de547ee2ec68023e7df219c85d2cb1ab71c6267fd

    • SHA512

      b728516df4113e24635ccc42dec51cf003ba668836370e9f3ecc39b3655b70c339b6edd0aeaab7b4035c549a2f698ef80c5f13b9f2ebc643f0d3105557277ca8

    Score
    1/10
    behavioral19behavioral20

    • Target

      GdiPlus.dll

    • Size

      1.6MB

    • MD5

      a49decbfaf009c82e5e414f885f181f0

    • SHA1

      33e718389544dcb4cb645641e4f6d8591707cda6

    • SHA256

      085696538c772e4a09449a3046293a59b6a72fc096d777c47511285ae5e53b80

    • SHA512

      e267ecd74de5c4259dc4fa8214bda73c9b8a1f090032a411dfd4514c3b99fef40d77faaea1716d1bdb91a16b5aca085fc603d7b708c417e3f938274416a4ed3e

    Score
    3/10
    behavioral21behavioral22

    • Target

      GoldGridPublic.dll

    • Size

      2KB

    • MD5

      7f7ed12b9d865fc6c46ed541591c0d66

    • SHA1

      386502d4402c1afb2c66e8d7a73f2432d82a44c4

    • SHA256

      cd141860e6769a9dcf03a2b483f7da3b930f43fd3fb383a151d5cc767ab3fb83

    • SHA512

      f6ba393fd62f9f592ff50862cc346d397ade26f541dbc2481317f84992a5cd44af794e90303e116383550565e4a24f670f9cc04ae17e784a84171755e37fb336

    Score
    1/10
    behavioral23behavioral24

    • Target

      KG_Crypt_API.dll

    • Size

      53KB

    • MD5

      c8b5751886fb1fbfd182e225ae01aca7

    • SHA1

      a7a88a4eb732dd4f71c938ba27e015e4438fed1e

    • SHA256

      886e3dcda7fdfa1ece28894d87f45c0a0ed73bdd5d8ca31c741e90a74dd818b6

    • SHA512

      c6fd4b54c66ca5faf5b242802fdaacff50e1cd74117a8238d15e2cd04987339aad4a8c3ee5418f0da8f05a046fc20fccdda5a8943d0e9cdc35732692e97285f3

    Score
    1/10
    behavioral25behavioral26

    • Target

      KG_Crypt_COM_API.dll

    • Size

      52KB

    • MD5

      fa4389b7349c2afa6008cfc3fa5207b1

    • SHA1

      97909978a5cb1415d948aea8d250ddc1742451b3

    • SHA256

      d1679d84a35bf3563256d1215f4b7bf07b406356b6dc513e95fdff02161a250d

    • SHA512

      51753777d707682ff6d639b0a303f99c83ed479e396bac972bc8b0616fa17979638a9574ae92f24d8998ae51e55dcb8b608df3b0f611ee1701d27394bafd57d7

    Score
    1/10
    behavioral27behavioral28

    • Target

      KG_LicEnc.dll

    • Size

      372KB

    • MD5

      8a922c5995f02cf1cd6b503711bced13

    • SHA1

      ffd6b9c710bee5abcbf357532f12c28fe5e897e5

    • SHA256

      4d1ecc3574947768c4689ec0a603c6eaf5974aebfbd3b1b415a27f62cc50091c

    • SHA512

      7fc18c2eae42ce4b0d299e661bd661b59d2d293a58a433385b7e18034d4d915f6226c33c3a15a62632df8e08de0d681530f88e808fe5f88c894fc23ab11ce731

    Score
    3/10
    behavioral29behavioral30

    • Target

      MakeSignature.exe

    • Size

      1.5MB

    • MD5

      65050987d23fc2645b902be63251c88e

    • SHA1

      938402d9aa8984218cdf1ce2c7de10d743186522

    • SHA256

      209dd4c6724dafd5efa5547ca539fb77577b3eb53e5b8f49880083e9b5654505

    • SHA512

      028ae64d29f467602f99c37080c1aa2625c236417a1858153431c7196aa549c53521fdb95eb5602adb8d5bf304d6941f0901d3bd13dfd1a9dd09761c2d50bbb4

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks