c91c6c4c1162115c8d7f82f2d9f4098ee61fbe9051d3350b0a2f97fa2ce3e6f2 | Triage

Resubmissions

02-09-2021 19:12

210902-xwla1aeefq 10

02-09-2021 19:09

210902-xtsbjabea9 8

Sharing

General

Target

Anime-Fighters-Infin_734316524.zip
Size

9.7MB
Sample

210902-xtsbjabea9
MD5

2206849ca275c100c18d6feade905ad3
SHA1

61d1a76826305738845c286d5c7078337d8b2d35
SHA256

c91c6c4c1162115c8d7f82f2d9f4098ee61fbe9051d3350b0a2f97fa2ce3e6f2
SHA512

69784817974e5fadf7cf19455fdb164ce90aeb2a1d86164ecaf226316b118ca187d01188cf4d06f7736358198a6e12c247bf8a5e5b0e60693d9295996a33578c

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  Anime-Fighters-Infin_734316524.exe
- Size
  
  3.9MB
- MD5
  
  bd2b73492acf20dec004360b1605032d
- SHA1
  
  60ddf3c107d94bbeb102a2d7ede945eb5edd2b35
- SHA256
  
  12b6272825140a15eabec58f97b49aed3ce5db7816a0b3c2674f6ae8746367ca
- SHA512
  
  dae236259e32a9e4b789f020dbd8082b376e3c2b56fd94523a44cf4b5a557f3661aeefc24b5605218ba0479ee1b9a8cb7b5c1df6c103673a99f13bc4210c90da
Score

8^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  
  __xiibsjtw.kau.exe
- Size
  
  5.9MB
- MD5
  
  57520f580ba9eea9cf87fe5d597af880
- SHA1
  
  47fd9f66c205dfa28212ae60b3640861c8634a74
- SHA256
  
  795df135da908b0f6ddc88660741a38ebdf34914296b1dd6326a337cf35ed22b
- SHA512
  
  6a8503435eedd4a98d3ec4fd71af5ec797d8f6fe1c41e1c1cc0e24dea8ce4894f2df64a96d29ca478e85276d0810bda21b299273dcb14ba96b6c5fa4f6f0799b
Score

7^/10
- Loads dropped DLL
behavioral3 behavioral4

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4