Overview

overview

3

Static

static

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...st.exe

windows7-x64

wow64_micr...st.exe

windows10-2004-x64

wow64_micr...es.dll

windows7-x64

1

wow64_micr...es.dll

windows10-2004-x64

1

wow64_micr...se.dll

windows7-x64

1

wow64_micr...se.dll

windows10-2004-x64

1

wow64_micr...in.dll

windows7-x64

1

wow64_micr...in.dll

windows10-2004-x64

3

wow64_micr...ts.dll

windows7-x64

1

wow64_micr...ts.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    923793b5ebd17ef82d44d152c1f34b0010f366a8ee84a41d86dd7ad4ecf6e153

  • Size

    1.6MB

  • Sample

    220927-hlf6zadhcl

  • MD5

    8fc7aabc5c700fece96eb04c816b9f1c

  • SHA1

    fd17647dfeebd8c500d52a259cc9f20d881ba53d

  • SHA256

    923793b5ebd17ef82d44d152c1f34b0010f366a8ee84a41d86dd7ad4ecf6e153

  • SHA512

    2d655ea33d5e8e41aa9aeef527c272d6ca1b21a4b41f4fa280a20719b2060668973ddd5948ce975ae7a1a1b7d407bea0f70336601bacb4fa01a29ab6e1787d7c

  • SSDEEP

    49152:FGrvs2FO6LyCgDUJrBR4ztW00CGyWZgiSinRB66zou:FGr025L/6UzR4Jh0nykXku

Score
3/10

Malware Config

Targets

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_ru-ru_6bf4e51b04300436_memtest.exe.mui_77b8cbcc

    • Size

      44KB

    • MD5

      22cb8f311af1359fc1415601faed99c4

    • SHA1

      f1a429a012fc726fcd63a267644cb071981c2313

    • SHA256

      eb8327a74e882502b491302e2c94eeb3d109b853aebfbb249f33edb0cb5f3c92

    • SHA512

      ffe4ad72c8a00b648d57e32960dbf7dff1ee36adcd06c3b8aa3ccf6c327b7da2f3bbe506a49a03b1d495ca7a912d673282bcc25249004503e180c3b5c8ed90c9

    • SSDEEP

      384:kzQouJzuN5x0mVZHorzHlvL7WSGHrzBpRv8TgXbAJ3Usq+zRg+z9q+JxLDBRJDG7:kkouJzE5LH+8wL1PDoed9zux

    Score
    1/10
    behavioral1behavioral2

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_sv-se_07efcf8ffb590e91_memtest.exe.mui_77b8cbcc

    • Size

      44KB

    • MD5

      5c60b1bb1ef5bacb32cb4f36949e4226

    • SHA1

      b12fc13739de31e2296d8356a619c24bf19e59c5

    • SHA256

      9e8f8ee8e61cd76a5734a58a02c9c3214992baec9f035b4c8d5894a7571b0e6d

    • SHA512

      5821529a4a0e10472d86dc70209fe01a5ae7e5b05d684368bcce153e9ab54b8e097be96a09a1ad6009a8a6e1bd077bde743808f22bddbf005f1d3e29a1053f16

    • SSDEEP

      384:tQouJzuN5x0mVZHorzHlvLeWfx9rzBpRv8TgXH2VTktGDBRJnEo1x85zR9ztpIj:6ouJzE5Y9+8H2VTsG1Pn7109zTIj

    Score
    1/10
    behavioral3behavioral4

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_tr-tr_b0fd19d6ea151082_memtest.exe.mui_77b8cbcc

    • Size

      45KB

    • MD5

      c2bbcbddd20380b0537f5e59691c8c43

    • SHA1

      4178ba8d641274cdb4b2b2d323f668ec8d62ea28

    • SHA256

      911a0c2f1affea5f0972fcda1099272f8c6bd2e59577c2441f73ab01d882d752

    • SHA512

      22e44ca75b7fd7e19b2beb3cc4306ce3d760ca09df56ec2decb01962ed3c8ee04747818c1f11ffebcc087e362bd742a5ff42fdb5647d3377c87f92bda41fb536

    • SSDEEP

      768:douJzE5Nc+8/OE6wXb/wdbLwVbCMNMda2fU1PfTiDcn6K9zro:douJwDz7BwbwxwIMNMda2fkPf+DcnXzk

    Score
    1/10
    behavioral5behavioral6

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_zh-cn_825a37d49a4ce2a1_memtest.exe.mui_77b8cbcc

    • Size

      42KB

    • MD5

      b49c448b163ef92127a8515a5c4cfa73

    • SHA1

      094f7e19cf220c76b8fb34c9172a5d1351c98c84

    • SHA256

      8c7130cc09974e030090f9563080fe7260353c2cc73c0a55b18ac34bc07166e1

    • SHA512

      33a67f50c06fef8a4d2dd3a09e3f8e50070ac17391866c6990aa38909c357031260dc2ddbb2cf5dbceb3c4e8543e94218e826fe2806bfaac1ce65c97d0af58ae

    • SSDEEP

      384:aQouJzuN5x0mVZHorzHlvLHWHOLW7rzBpRv8TgXDTZotjJsDBRJ20dswR9z20lY:douJzE5FOi+8DitjJs1PcM9zplY

    Score
    1/10
    behavioral7behavioral8

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_zh-tw_8656752a97bdbf11_memtest.exe.mui_77b8cbcc

    • Size

      42KB

    • MD5

      f1c6b2f4e4ca39a625e6f01e6034d2c5

    • SHA1

      3f15769ee5a8e34cafc2190324189a2abacde104

    • SHA256

      28a6f0d2e7932b251ae34636249d4401a171171deb0677bf4d3baeaf926364f5

    • SHA512

      8440e604ddccdea382f07ba4c31924035e9953c5dcee0fde4cf6c304aab0930f450c50e5659644496d33acc18a7240acc4e9efe901ad8e4e1a05a0db6383715d

    • SSDEEP

      384:wQouJzuN5x0mVZHorzHlvLrWkLWnrzBpRv8TgXEP/8vB5ODBRJOleLR9zusRK9P:3ouJzE5+u+8vvB5O1PQed9zux

    Score
    1/10
    behavioral9behavioral10

    • Target

      wow64_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_10.0.22621.1_none_441fc4702cbc4cf8_memtest.exe_01d80391

    • Size

      1.0MB

    • MD5

      95c6e7ec29cf72fb23458fcdce266f4e

    • SHA1

      851a43716492a93fcd8f6df0be89d3849775f482

    • SHA256

      2e871f551de5d739c71abdee1d301d9b19eb9e833e93e1b7543900a8279c4be7

    • SHA512

      cf1d0b3b3480ec74bc6c622fd90dd0ee6247d93aa9572028857ca7b71268a9664982463a2a2e1ef7c5b3bb77ff70a2796f489da7b7ebb69307b56a15365c857e

    • SSDEEP

      24576:2Kl1DvmeDy9umk1MCHJqJ0obfL9GC+j9J38pXSSR9VvO71x/ja07+A/Kocp9f:2KlxKrJ0o4CoC/vkjl7rfEf

    Score
    1/10
    behavioral11behavioral12

    • Target

      wow64_microsoft-windows-bcrypt-primitives-dll_31bf3856ad364e35_10.0.22621.1_none_7e1bef6b3f293f16_bcryptprimitives.dll_5dcb347c

    • Size

      389KB

    • MD5

      89773b4c49849b526e59c958f9c03bb2

    • SHA1

      2bddf49a72622800dcad7e5dbba100198b52280e

    • SHA256

      e9817ab05123e1596b395569b95f6efe303dbba35a1f1232160c7b8bc18be616

    • SHA512

      c9b82e4fd1609eadf13dc1286818b88ac8d62c8d57d03d29e150bca67b5420090fc5664073e6bd406acb54fce640af3303ee07cfea863ac914c7511aa185ea95

    • SSDEEP

      6144:rCxGooolqqDX5m4rnGoB/pA5EM18g+FKvWS4jEKEXcHihlv6wKepP:1oIqT7596ENg+FKvgjEX6ihlvOet

    Score
    1/10
    behavioral13behavioral14

    • Target

      wow64_microsoft-windows-kernelbase_31bf3856ad364e35_10.0.22621.1_none_92ecee59dcb302d4_kernelbase.dll_7f3dc5f6

    • Size

      2.4MB

    • MD5

      82d4855798c72aeda7ecf8f006ecd357

    • SHA1

      9a3150fb7ec26fe243c85c2abbadf774cb7f1b1e

    • SHA256

      49a405b7256100a5fc2597acb3a7771bdfdee166a5cea3251c3e1bf291f22c6d

    • SHA512

      f0e32cbb1c515dff69951e0cef7d4358a4a4010021017f9d3aa0edaa2d86926302df2df52e455763ac8d0a9e6146ef9a5419fd5afe0de4d5ffaaa78a38961eba

    • SSDEEP

      49152:4FypjWU5KGTthjCHIxGioZm7VUnYpe7x3JHA+Luw1uhznWMJ6cRvbPVFyiFzgbw:pzCHIoioZX7xtdPchzQ0

    Score
    1/10
    behavioral15behavioral16

    • Target

      wow64_microsoft-windows-msvcp110_31bf3856ad364e35_10.0.22621.1_none_59a0c10b9934ff9d_msvcp110_win.dll_397cf9b6

    • Size

      408KB

    • MD5

      f91e3f8ef242c9f0bdf837d07aab797f

    • SHA1

      5069aad45e2c2ad88bfe6c455a2b9969660183c3

    • SHA256

      6ed71a6689f3ce0de57fa3b2179767264917f3329d462e5c9f78816a3f331664

    • SHA512

      d36e0578ffe6619bcc781965bc3077d15aa49ee9cf9edfd4487022ddf4578db2ba722920993120f2477609c1a6a7bb71b8f875e83e0f8b0fe92891489c1bb645

    • SSDEEP

      12288:qWUDzopINU2lFnQ9I3HijHhUgiW6QR7t5sa3Ooc8fHkC2e/Hq8T:qW5pINU2lFnWI3HiIa3Ooc8fHkC2e/HP

    Score
    3/10
    behavioral17behavioral18

    • Target

      wow64_microsoft-windows-s..ertificates-utility_31bf3856ad364e35_10.0.22621.1_none_f4e8223852c8cdb8_fvecerts.dll_cca35228

    • Size

      21KB

    • MD5

      d96c05b0f4f7770e8758671afcba84a3

    • SHA1

      5541120414fcba136f964406cd0bdb50520e0f4e

    • SHA256

      ac01aa5f81bbc997dff6089ad665ed1a506fed7d863ac68af5d3c16aaf1ae3f7

    • SHA512

      12cb2b5550abf60fb0551acd637a237fe38c74fe36de79d26005d994ca23ec40ef3ad47312244d47cd80c741db0a253440a7fef49b23daeb82782f24bb2ba3b1

    • SSDEEP

      384:2JXvhf3t7MCVNTlrlk7GgGlZ+mVsroXqAmpWmoHLqrQJNYWwvWOG:+fdTHlrlk7GnbyX3rQJNSI

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Matrix

Tasks