General

  • Target

    d1505a8ac2409207637b344848d53a2e189a04873ebc87ac3155f7cd05b0e348

  • Size

    2.0MB

  • Sample

    221123-zn5e1sdd55

  • MD5

    65df90b37a4fea6c70ac5456438a2d2e

  • SHA1

    7f6173d28e26bcc0e3ff15d50f57582da67ac1ff

  • SHA256

    d1505a8ac2409207637b344848d53a2e189a04873ebc87ac3155f7cd05b0e348

  • SHA512

    9167ceb781711b8f07bcaf5461491849b4f4fb3d8013f9dde1ec5583c8b476364fad92e98ff77200c02c22b90e5876f192b69260a4d789964dcac10b6ff1a1a3

  • SSDEEP

    49152:euL+35wxIWcwmuLtFb7rQQvo1sS9BxXuFydDRRRRRRRRRRRRRRRRRRRRRRRRRRRI:e6JKwftR7UQvo5BxXusdDRRRRRRRRRRS

Score
9/10

Malware Config

Targets

    • Target

      browseti.dll

    • Size

      170KB

    • MD5

      d6cef69f5d36e11b80d471325e459d9e

    • SHA1

      83e4894b90afac4e22abd0c6ebbcba76d44f3a7f

    • SHA256

      55a168464d6df1a62a8cf437f303350990e00031db4ea34a98402045c843e437

    • SHA512

      2550bfc95b88e630edf01f94db8c06638f27238a78a5ed06378a922130ac214d861828d967991633cb1fa9b884535cf99f2dff05ac4c9d8aa66f56093bbc974f

    • SSDEEP

      3072:d3jcSdKopgjQjI423eVDjXG3JvPk7n9LrlZ4xl2EZacUs:d3QSdKo2jOIf3epjX8k7nsZ/

    Score
    5/10
    • Drops file in System32 directory

    • Target

      hintBroswer.dll

    • Size

      329KB

    • MD5

      53620daed9b3c55452982a78b2a15409

    • SHA1

      dcdcb54fc58aace0d5edf69a1ead9fffe72453bb

    • SHA256

      d79993f18c2d83f8e68c31b2f0d8de9ff2d37dd2ea2305599ad0b9f3e4352d94

    • SHA512

      0379395f69d1c2cd4869dc50c125a827b5e3c10161aa8fd16d861e550ea3cd8525610808ed08993250c432323adee11d43a8270d5cf702a3b475fd3cdd069e5b

    • SSDEEP

      6144:Q9zGFLwQepS6G8CXf/hDJXliZatSZNfewF61Un4mGyj7IvB:cpS6xCvliItSZNfl61UGhJ

    Score
    1/10
    • Target

      hintbhoii.dll

    • Size

      162KB

    • MD5

      114294a07ba54610f097d910a5df69ce

    • SHA1

      9e14b5ecef65fe70f0ce9348a7d689ef0e342361

    • SHA256

      66ade4a38c75f8986554c99b5a417193e43edba36daa65522b7635d751fac4d9

    • SHA512

      e6b81780ab464f5eb29f9409cbb0fbb2e5873b2b8f8bd339141c9a1fbbf09abfd6c08dc989217365a48e156957e13e6fabd7ede7cb4625011d2e54d876fbd08a

    • SSDEEP

      3072:ctt0V5516sJQY9Hu9GL1OHnEdx4wlIz6Lmw:IEhQKO9GenWx4B65

    Score
    1/10
    • Target

      hintcver.dll

    • Size

      134KB

    • MD5

      94526e3b91b2ee984565da2b23262291

    • SHA1

      8e8e8d6cd1b07701869e8ccdedbe637c1ed15492

    • SHA256

      d492715ff65768fbdb9928d978954809254a12976364c5768529af67ec0e32b9

    • SHA512

      dc0722615d503d2d725a78bf7cf17fd17398518a4f010fea583a2af3404ee867aec84e71295789160a77d350a3cc83357e8548afb7162d6b3a720a3cdeeb8f05

    • SSDEEP

      3072:SiL3w3NV5WGPbBVGQOpoht8lnEc4+RIM88SVy:VzOYGPFVGpLEKp

    Score
    3/10
    • Target

      hintdm.pg

    • Size

      218KB

    • MD5

      bcda7604a68ad5061daf9cfb38fa0300

    • SHA1

      d85930ef910a5f74d16eb2e308c5a2550bdf19d3

    • SHA256

      74b0f7a9d2225d4d8580d801957d05b8229d5e8098327772150ea071ecc9ea36

    • SHA512

      796a60a937651efbbd6ca30fcb916177f0bf594343a8a8f2a3efbe47f791f5145c2844e3adeb6248c26fc1173f843902bc82993fc6a535d57d838bc211ad3a36

    • SSDEEP

      3072:4qP97WTO5gUYWT+wE80CrzgMz10fjgPPLZcpLg2Ra7mxxTIik9glk7JRBD2t+qG2:VWTOq9WTj/n08Pzyq9mxVIz9FzI+a

    Score
    3/10
    • Target

      hintfangyuan.dll

    • Size

      216KB

    • MD5

      02d0dee55eea809b3aa90a84fa3dd0fd

    • SHA1

      d85620fef48f538e9438c285ee6d24485dd0db15

    • SHA256

      f90302edb75f29c7709ec5146bc58a9022e0f1d485d0278666f1a3d7b284be36

    • SHA512

      06e6ef2f599ce0cc2eca9842d97068dfff9f020289fe6d16ade14a4f4ee114290039538a11fb9024c4e00268c6030761c2756a5f1a80a1cbb6b8c37f01fdfaa2

    • SSDEEP

      6144:hG7ukMaLDlBbC/R15+R1hgUUTBD6+z9aTz:h58DlBbC/5+R1hgUUTd6xTz

    Score
    1/10
    • Target

      hinthk.dll

    • Size

      294KB

    • MD5

      7c7f335a02c809eb413c205bea052fcb

    • SHA1

      097d0ceee286b186db5e7a6a2e9999892fb2e62b

    • SHA256

      30eef512c68fb262702b5109ef0136f041a5e747f8c792cadcda2f6581fe5d47

    • SHA512

      90d7b66ad60df2ea63f24b4dbde551b68ebac07bbb9f8350a998da75dc15f20f1d261c0eeff090ab68ea79af3cad0f93d1cf4b2851f4024d3b7427100515ae90

    • SSDEEP

      6144:NF0yWBJ4WkMzmfTeuAomWJ2o2ajVlHEBE8uHi6:L0fBa+mr5bmKBlI6

    Score
    1/10
    • Target

      hinths.dll

    • Size

      82KB

    • MD5

      105a7ce0e8b1abc9d4b68bb431307414

    • SHA1

      2f4c89e208686cb4cb7d88822786b5e2d0f4385b

    • SHA256

      5d3aac6b6a4476c9b94316cd0cb2075a77fd1bf1d91c8ac6c14a816932c8f0d2

    • SHA512

      d3ddb7645b663229e773d320a6420e53516415bf865777e3942cd4b378aa850a22406429934ca3b8a37cadcd79ec117b30bf01afba8a9f99afe67229d91e2f80

    • SSDEEP

      1536:xM0izkvOAkCU6ypbZLSlFkwGmAlJkTsqrm:xM0iz4kxTLuzAlMrS

    Score
    1/10
    • Target

      hintlittle.dll

    • Size

      109KB

    • MD5

      8940d97f4e7edc259623bf1726f2a5ed

    • SHA1

      8457cbcbcbe04f64ee1947c92c6b2f761a177afe

    • SHA256

      25da918a0f34429c942bb9c8a9fcf1771fd339657a350d6e1393232a42a11753

    • SHA512

      cdc1011e1df1fef06aac7514abff303daa2c2643c44861a0f2d62a2021bf3ac2f35bd076d226331270013ef0fc822c4f2485ac33324fbb66662a637f4294752b

    • SSDEEP

      1536:uU3ix86yLaRRU6yPOrJG5o8t77JIT7M3RC6+2rdwD4ok++v5wJICYoZ5ipIkimrj:uxy6RR/drJoNkogkircLCYe5ipbTP

    Score
    1/10
    • Target

      hintnobho.dll

    • Size

      114KB

    • MD5

      f6c801aec83ec81d81c9f92f88b9667b

    • SHA1

      3e7041f074b120748d9e64ccb1c6610d5e4d77cf

    • SHA256

      05f1a854b4d377121bec653e06e024cdb1376b9778615157a6e38d0cc7f763ca

    • SHA512

      0d251217a7fd93de61e396eb2f204d8870db0cb20b547f46c1d3d4c7ddd42b7527dd87f8c9cf60368762043752ea04bb7c997202538c8027bb075bfd94f9c906

    • SSDEEP

      1536:7hlWeFGpGVy2bIt3fzRhgXIYWTpsQ/UDbt5TRy5HA5DEgVMCInIlbInb2errj:LFGpijgf7WIPNZ/KOgVMbnIlb+2ern

    Score
    5/10
    • Drops file in System32 directory

    • Target

      hintreg2.dll

    • Size

      62KB

    • MD5

      3daa3698fe53ed03fa5f95ebbc190e47

    • SHA1

      86781d29d01574e4e28097589e7ec52219fa8050

    • SHA256

      31f625e40d6e0476231ffaf4e01bbb432202de75d93bb517b247d6dbb5103f01

    • SHA512

      a28cbbc6c12110d365ed119c86d674a6eb5a611fbd9228890d7fc3b57f869d38b1a10babb03e57f28726cfb5ac159d577cb8aa8d022a6629add12ee6f9df7e8d

    • SSDEEP

      768:nmc/cCCcd9DQDOA0BNucA+MZvMtcv9Jv+t+lrgiR:MCn8DOA0BNuZRJvqQrh

    Score
    1/10
    • Target

      hintsnake.dll

    • Size

      112KB

    • MD5

      f4ba30629f1d7a5c16d74a64232ac56e

    • SHA1

      552f4513c58aadef99123459c8a3f9a27e6fc6b9

    • SHA256

      ca45f4440297b0755509a1a8998903e981c520a5bf85141d8c0930396a4ecd06

    • SHA512

      d3bb7f3957baeb16682f351e42d5c29a1d20a0ee9ef7a2b98ec96fb8bea9792ba4409e2466e0fe760db1027c17b0c7987b3f7c7229eeefef423a525107137630

    • SSDEEP

      1536:qFNKbEMQQ+JcSxmvIafvYFbju1Ifn32KEJ/kmyNYB1vxhOS6SL5GkNNNNUe71kPQ:q6qdJcSmPbIJET1jd15GkNNNNUe7vf

    Score
    1/10
    • Target

      hintsok.dll

    • Size

      274KB

    • MD5

      a285e5f846809642c0bf7900bab1216b

    • SHA1

      bfd55653ae8ae1eb32a6a6207dbc5df46195517b

    • SHA256

      f9cbd173e31342657247856037dac44e7ba1398b0c15aa4bb19784811e0fc0fd

    • SHA512

      c677421406696bd766b02b6367ea29482232b0216379e43dd2fdaa4acac92962061c48898c38ac227fdd0263eebb23a4295575c0664161fb166ba0abe17d1ab9

    • SSDEEP

      6144:oR52MsvCyT0hnT8Q4oHY3Spf6Is7X/zC/xwsI3tgIYtVd:I52MsvCyT0hc6SIsb/zCAgI4d

    Score
    1/10
    • Target

      hintua.pg

    • Size

      226KB

    • MD5

      275e544e07fd4be9fa2e764de3a694b7

    • SHA1

      96081ae257795d41f80a55959237a7b7f90282ed

    • SHA256

      5954e0b732ce92bb9935c3a03191bd9c19d935e4c972b93a99d2f4b77c4d8a82

    • SHA512

      ec9aa52d4816fdfc1f7c2140e269029e39c7cf8153d1ca728e3fe1ed9d236b29156168990882a1f9161610044bb7fcb457329c7f5c98871e4a032db1e15fa1f9

    • SSDEEP

      3072:TDau3b0JWI9kaAli1yXi+Gb6yQ35bCf6QrPNLCVh1f4Kchy7I/WlZrgJRcDodPjV:6u3QJdfoXiDbNQJefPrPxS1fEcWyqjNZ

    Score
    3/10
    • Target

      hintui.dll

    • Size

      454KB

    • MD5

      2921cf2c9341fd87d01177af3db7d9fc

    • SHA1

      5e4790ca4d0f617aad39fd247687087689afa791

    • SHA256

      54827e55704dd1551b5d13fd6404913d2dc229d9316ca995538f39cab60b3198

    • SHA512

      891b31fd62faa91c4b1d53d179a6d2ef6c3f5c564eaeaf26ef4366234775299454f6f46c7c611d9f8833ce8daa1d7589491b1d94ea7da8d7f87ba95de66322be

    • SSDEEP

      6144:9rNJONfNjXk6gW3v1yQYg1ktw1cmH7BnE6V2deXqOga2NOLKib:9ZJON269yqktw1cm/Ke6xNCxb

    Score
    3/10
    • Target

      hintva.dll

    • Size

      354KB

    • MD5

      324e44e4f0e91062720b00afc3a3c793

    • SHA1

      82cab7a4b78394a3750a2b87d5bf6e920fdc31b7

    • SHA256

      e0fa9f34b89e6f7db93aae638bcd89f61134756dcf57cc77503b1016fb7e3322

    • SHA512

      ed90aa1e0b58c250ff73cb25c8ed2053bda8de69eccfb17bf5f239a6acad2e0e58546f175737c2d1f4508d5187b3ffe0b29e6618c8ef8e0d99e1aa590ff21aa4

    • SSDEEP

      6144:DBmL10IepiB8Q4oHYblllQ7UrlUHQCJwF7tAM0tpRqprHWe9bxcUqUR5X:DB010Iep7bllOcqHQCaF7tAM0tGpXxm6

    Score
    1/10

MITRE ATT&CK Matrix

Tasks