Overview

overview

3

Static

static

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...xe.dll

windows7-x64

1

wow64_micr...xe.dll

windows10-2004-x64

1

wow64_micr...st.exe

windows7-x64

wow64_micr...st.exe

windows10-2004-x64

wow64_micr...es.dll

windows7-x64

1

wow64_micr...es.dll

windows10-2004-x64

1

wow64_micr...se.dll

windows7-x64

1

wow64_micr...se.dll

windows10-2004-x64

1

wow64_micr...in.dll

windows7-x64

1

wow64_micr...in.dll

windows10-2004-x64

3

wow64_micr...ts.dll

windows7-x64

1

wow64_micr...ts.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    923793b5ebd17ef82d44d152c1f34b0010f366a8ee84a41d86dd7ad4ecf6e153

  • Size

    1.6MB

  • Sample

    220927-hlf6zadhcl

  • MD5

    8fc7aabc5c700fece96eb04c816b9f1c

  • SHA1

    fd17647dfeebd8c500d52a259cc9f20d881ba53d

  • SHA256

    923793b5ebd17ef82d44d152c1f34b0010f366a8ee84a41d86dd7ad4ecf6e153

  • SHA512

    2d655ea33d5e8e41aa9aeef527c272d6ca1b21a4b41f4fa280a20719b2060668973ddd5948ce975ae7a1a1b7d407bea0f70336601bacb4fa01a29ab6e1787d7c

  • SSDEEP

    49152:FGrvs2FO6LyCgDUJrBR4ztW00CGyWZgiSinRB66zou:FGr025L/6UzR4Jh0nykXku

Score
3/10

Malware Config

Targets

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_ru-ru_6bf4e51b04300436_memtest.exe.mui_77b8cbcc

    • Size

      44KB

    • MD5

      22cb8f311af1359fc1415601faed99c4

    • SHA1

      f1a429a012fc726fcd63a267644cb071981c2313

    • SHA256

      eb8327a74e882502b491302e2c94eeb3d109b853aebfbb249f33edb0cb5f3c92

    • SHA512

      ffe4ad72c8a00b648d57e32960dbf7dff1ee36adcd06c3b8aa3ccf6c327b7da2f3bbe506a49a03b1d495ca7a912d673282bcc25249004503e180c3b5c8ed90c9

    • SSDEEP

      384:kzQouJzuN5x0mVZHorzHlvL7WSGHrzBpRv8TgXbAJ3Usq+zRg+z9q+JxLDBRJDG7:kkouJzE5LH+8wL1PDoed9zux

    Score
    1/10
    behavioral1behavioral2

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_sv-se_07efcf8ffb590e91_memtest.exe.mui_77b8cbcc

    • Size

      44KB

    • MD5

      5c60b1bb1ef5bacb32cb4f36949e4226

    • SHA1

      b12fc13739de31e2296d8356a619c24bf19e59c5

    • SHA256

      9e8f8ee8e61cd76a5734a58a02c9c3214992baec9f035b4c8d5894a7571b0e6d

    • SHA512

      5821529a4a0e10472d86dc70209fe01a5ae7e5b05d684368bcce153e9ab54b8e097be96a09a1ad6009a8a6e1bd077bde743808f22bddbf005f1d3e29a1053f16

    • SSDEEP

      384:tQouJzuN5x0mVZHorzHlvLeWfx9rzBpRv8TgXH2VTktGDBRJnEo1x85zR9ztpIj:6ouJzE5Y9+8H2VTsG1Pn7109zTIj

    Score
    1/10
    behavioral3behavioral4

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_tr-tr_b0fd19d6ea151082_memtest.exe.mui_77b8cbcc

    • Size

      45KB

    • MD5

      c2bbcbddd20380b0537f5e59691c8c43

    • SHA1

      4178ba8d641274cdb4b2b2d323f668ec8d62ea28

    • SHA256

      911a0c2f1affea5f0972fcda1099272f8c6bd2e59577c2441f73ab01d882d752

    • SHA512

      22e44ca75b7fd7e19b2beb3cc4306ce3d760ca09df56ec2decb01962ed3c8ee04747818c1f11ffebcc087e362bd742a5ff42fdb5647d3377c87f92bda41fb536

    • SSDEEP

      768:douJzE5Nc+8/OE6wXb/wdbLwVbCMNMda2fU1PfTiDcn6K9zro:douJwDz7BwbwxwIMNMda2fkPf+DcnXzk

    Score
    1/10
    behavioral5behavioral6

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_zh-cn_825a37d49a4ce2a1_memtest.exe.mui_77b8cbcc

    • Size

      42KB

    • MD5

      b49c448b163ef92127a8515a5c4cfa73

    • SHA1

      094f7e19cf220c76b8fb34c9172a5d1351c98c84

    • SHA256

      8c7130cc09974e030090f9563080fe7260353c2cc73c0a55b18ac34bc07166e1

    • SHA512

      33a67f50c06fef8a4d2dd3a09e3f8e50070ac17391866c6990aa38909c357031260dc2ddbb2cf5dbceb3c4e8543e94218e826fe2806bfaac1ce65c97d0af58ae

    • SSDEEP

      384:aQouJzuN5x0mVZHorzHlvLHWHOLW7rzBpRv8TgXDTZotjJsDBRJ20dswR9z20lY:douJzE5FOi+8DitjJs1PcM9zplY

    Score
    1/10
    behavioral7behavioral8

    • Target

      wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.22621.1_zh-tw_8656752a97bdbf11_memtest.exe.mui_77b8cbcc

    • Size

      42KB

    • MD5

      f1c6b2f4e4ca39a625e6f01e6034d2c5

    • SHA1

      3f15769ee5a8e34cafc2190324189a2abacde104

    • SHA256

      28a6f0d2e7932b251ae34636249d4401a171171deb0677bf4d3baeaf926364f5

    • SHA512

      8440e604ddccdea382f07ba4c31924035e9953c5dcee0fde4cf6c304aab0930f450c50e5659644496d33acc18a7240acc4e9efe901ad8e4e1a05a0db6383715d

    • SSDEEP

      384:wQouJzuN5x0mVZHorzHlvLrWkLWnrzBpRv8TgXEP/8vB5ODBRJOleLR9zusRK9P:3ouJzE5+u+8vvB5O1PQed9zux

    Score
    1/10
    behavioral9behavioral10

    • Target

      wow64_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_10.0.22621.1_none_441fc4702cbc4cf8_memtest.exe_01d80391

    • Size

      1.0MB

    • MD5

      95c6e7ec29cf72fb23458fcdce266f4e

    • SHA1

      851a43716492a93fcd8f6df0be89d3849775f482

    • SHA256

      2e871f551de5d739c71abdee1d301d9b19eb9e833e93e1b7543900a8279c4be7

    • SHA512

      cf1d0b3b3480ec74bc6c622fd90dd0ee6247d93aa9572028857ca7b71268a9664982463a2a2e1ef7c5b3bb77ff70a2796f489da7b7ebb69307b56a15365c857e

    • SSDEEP

      24576:2Kl1DvmeDy9umk1MCHJqJ0obfL9GC+j9J38pXSSR9VvO71x/ja07+A/Kocp9f:2KlxKrJ0o4CoC/vkjl7rfEf

    Score
    1/10
    behavioral11behavioral12

    • Target

      wow64_microsoft-windows-bcrypt-primitives-dll_31bf3856ad364e35_10.0.22621.1_none_7e1bef6b3f293f16_bcryptprimitives.dll_5dcb347c

    • Size

      389KB

    • MD5

      89773b4c49849b526e59c958f9c03bb2

    • SHA1

      2bddf49a72622800dcad7e5dbba100198b52280e

    • SHA256

      e9817ab05123e1596b395569b95f6efe303dbba35a1f1232160c7b8bc18be616

    • SHA512

      c9b82e4fd1609eadf13dc1286818b88ac8d62c8d57d03d29e150bca67b5420090fc5664073e6bd406acb54fce640af3303ee07cfea863ac914c7511aa185ea95

    • SSDEEP

      6144:rCxGooolqqDX5m4rnGoB/pA5EM18g+FKvWS4jEKEXcHihlv6wKepP:1oIqT7596ENg+FKvgjEX6ihlvOet

    Score
    1/10
    behavioral13behavioral14

    • Target

      wow64_microsoft-windows-kernelbase_31bf3856ad364e35_10.0.22621.1_none_92ecee59dcb302d4_kernelbase.dll_7f3dc5f6

    • Size

      2.4MB

    • MD5

      82d4855798c72aeda7ecf8f006ecd357

    • SHA1

      9a3150fb7ec26fe243c85c2abbadf774cb7f1b1e

    • SHA256

      49a405b7256100a5fc2597acb3a7771bdfdee166a5cea3251c3e1bf291f22c6d

    • SHA512

      f0e32cbb1c515dff69951e0cef7d4358a4a4010021017f9d3aa0edaa2d86926302df2df52e455763ac8d0a9e6146ef9a5419fd5afe0de4d5ffaaa78a38961eba

    • SSDEEP

      49152:4FypjWU5KGTthjCHIxGioZm7VUnYpe7x3JHA+Luw1uhznWMJ6cRvbPVFyiFzgbw:pzCHIoioZX7xtdPchzQ0

    Score
    1/10
    behavioral15behavioral16

    • Target

      wow64_microsoft-windows-msvcp110_31bf3856ad364e35_10.0.22621.1_none_59a0c10b9934ff9d_msvcp110_win.dll_397cf9b6

    • Size

      408KB

    • MD5

      f91e3f8ef242c9f0bdf837d07aab797f

    • SHA1

      5069aad45e2c2ad88bfe6c455a2b9969660183c3

    • SHA256

      6ed71a6689f3ce0de57fa3b2179767264917f3329d462e5c9f78816a3f331664

    • SHA512

      d36e0578ffe6619bcc781965bc3077d15aa49ee9cf9edfd4487022ddf4578db2ba722920993120f2477609c1a6a7bb71b8f875e83e0f8b0fe92891489c1bb645

    • SSDEEP

      12288:qWUDzopINU2lFnQ9I3HijHhUgiW6QR7t5sa3Ooc8fHkC2e/Hq8T:qW5pINU2lFnWI3HiIa3Ooc8fHkC2e/HP

    Score
    3/10
    behavioral17behavioral18

    • Target

      wow64_microsoft-windows-s..ertificates-utility_31bf3856ad364e35_10.0.22621.1_none_f4e8223852c8cdb8_fvecerts.dll_cca35228

    • Size

      21KB

    • MD5

      d96c05b0f4f7770e8758671afcba84a3

    • SHA1

      5541120414fcba136f964406cd0bdb50520e0f4e

    • SHA256

      ac01aa5f81bbc997dff6089ad665ed1a506fed7d863ac68af5d3c16aaf1ae3f7

    • SHA512

      12cb2b5550abf60fb0551acd637a237fe38c74fe36de79d26005d994ca23ec40ef3ad47312244d47cd80c741db0a253440a7fef49b23daeb82782f24bb2ba3b1

    • SSDEEP

      384:2JXvhf3t7MCVNTlrlk7GgGlZ+mVsroXqAmpWmoHLqrQJNYWwvWOG:+fdTHlrlk7GnbyX3rQJNSI

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.