c91c6c4c1162115c8d7f82f2d9f4098ee61fbe9051d3350b0a2f97fa2ce3e6f2 | Triage

Resubmissions

02-09-2021 19:12

210902-xwla1aeefq 10

02-09-2021 19:09

210902-xtsbjabea9 8

Sharing

General

Target

Anime-Fighters-Infin_734316524.zip
Size

9.7MB
Sample

210902-xtsbjabea9
MD5

2206849ca275c100c18d6feade905ad3
SHA1

61d1a76826305738845c286d5c7078337d8b2d35
SHA256

c91c6c4c1162115c8d7f82f2d9f4098ee61fbe9051d3350b0a2f97fa2ce3e6f2
SHA512

69784817974e5fadf7cf19455fdb164ce90aeb2a1d86164ecaf226316b118ca187d01188cf4d06f7736358198a6e12c247bf8a5e5b0e60693d9295996a33578c

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  Anime-Fighters-Infin_734316524.exe
- Size
  
  3.9MB
- MD5
  
  bd2b73492acf20dec004360b1605032d
- SHA1
  
  60ddf3c107d94bbeb102a2d7ede945eb5edd2b35
- SHA256
  
  12b6272825140a15eabec58f97b49aed3ce5db7816a0b3c2674f6ae8746367ca
- SHA512
  
  dae236259e32a9e4b789f020dbd8082b376e3c2b56fd94523a44cf4b5a557f3661aeefc24b5605218ba0479ee1b9a8cb7b5c1df6c103673a99f13bc4210c90da
Score

8^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  
  __xiibsjtw.kau.exe
- Size
  
  5.9MB
- MD5
  
  57520f580ba9eea9cf87fe5d597af880
- SHA1
  
  47fd9f66c205dfa28212ae60b3640861c8634a74
- SHA256
  
  795df135da908b0f6ddc88660741a38ebdf34914296b1dd6326a337cf35ed22b
- SHA512
  
  6a8503435eedd4a98d3ec4fd71af5ec797d8f6fe1c41e1c1cc0e24dea8ce4894f2df64a96d29ca478e85276d0810bda21b299273dcb14ba96b6c5fa4f6f0799b
Score

7^/10
- Loads dropped DLL
behavioral3 behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4