Overview

overview

1

Static

static

CAD绘图�...rt.dll

windows7-x64

1

CAD绘图�...rt.dll

windows10-2004-x64

1

CAD绘图�...rt.dll

windows7-x64

1

CAD绘图�...rt.dll

windows10-2004-x64

1

CAD绘图�...rt.exe

windows7-x64

1

CAD绘图�...rt.exe

windows10-2004-x64

1

CAD绘图�...ib.dll

windows7-x64

1

CAD绘图�...ib.dll

windows10-2004-x64

1

CAD绘图�...��.xls

windows7-x64

1

CAD绘图�...��.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a5affcaaf77599f725bfaabae18beea76d0d8167226bd56b4e14c224091122d

  • Size

    774KB

  • Sample

    221124-j5mcrsdg41

  • MD5

    ef2e9d78cc161a15327ddc4658328c92

  • SHA1

    bcee7097b76b6cc04944d393bb0395a61d96aff5

  • SHA256

    3a5affcaaf77599f725bfaabae18beea76d0d8167226bd56b4e14c224091122d

  • SHA512

    89a83888b146244911040b0fd89b2bb0855328dd8303712d3ae976264e59f7949f12d7cd62bc4bc461c77ae23b68cb244837217492768259125f1638e9e53e8a

  • SSDEEP

    24576:xKXouJ0H48tBjXwztUcRDkCdJI8P/u/rBtQbR:2ouJ0PXXwTpkaIoC+bR

Score
1/10

Malware Config

Targets

    • Target

      CAD绘图助手/CADChart.dll

    • Size

      28KB

    • MD5

      3c908e33c37df457bee95c51eab19fcc

    • SHA1

      d713689d0bdf5d94c9cc15518e6b5202218bd0bc

    • SHA256

      6eca396d737e1f6f44b3acb49b20ae01f0168ca5609f367cf7a9166ba32e8b38

    • SHA512

      b7954b1b5a2d2ec69778995cd212703e93eb2bed29404cd4ec5b5db54ba8b22cc1fc0d40c9bfdb1dacb123cb88b2b282f0e8865ee51faf58964f0bc9e93794e1

    • SSDEEP

      384:0OGiYTa5PMzkQKJhgEcTIBhIhP8M9h6SNDRPNSdj7W:0OGiYTaXQKJZIh0M9hZa7W

    Score
    1/10
    behavioral1behavioral2

    • Target

      CAD绘图助手/DXFExport.dll

    • Size

      76KB

    • MD5

      f24d6a87c68d116fb141b8c4b2bf5d29

    • SHA1

      653324ce4f1ccb52cbd6545f5cabf0eb87cb1fd6

    • SHA256

      413388f79261b3f1ce004b7e34b1ab3d475deaf0eaf89dd12d82bad9aed23e48

    • SHA512

      5de99eaa0e1937c29856010b8204a551a2c60df361b9389e53dea67708a62900aa8a32883c94a7cd227e0d7a5a028c9e7ac8882b27fa0c849b703a6400fe3604

    • SSDEEP

      768:+ZPew+qDlbUTde19mDqGfwHLpze1GkD0u0h0/zlmc6caL2eQ4H/ofFwoU0953M6q:APeClgXDHoRerpaLPP0won9534J

    Score
    1/10
    behavioral3behavioral4

    • Target

      CAD绘图助手/HydroCADChart.exe

    • Size

      2.6MB

    • MD5

      462df7302f773597e7d005424d0e3493

    • SHA1

      51202adf75d31471a6cb24e9449c013df25a56ad

    • SHA256

      9f6bdc8409c480fda4f40b0a51b673e4b29e074c93dc3073278a5c92737007c2

    • SHA512

      ddb6164f49f2ca84c9dcfb954e2c007b07051c4303e275e76e103e5197f3bb06617eb1dc715372977dd4fe70167ec3a8e626c0ab1ad0484d9bbe9c99eccf8a6a

    • SSDEEP

      24576:avfP4TZAPGv4NShfCSErR8wuGNwCsS2aryvfP4TZAPGv4NShfCSErR8wuGNwCsSz:KQjv4ECS40KeQjv4ECS40K

    Score
    1/10
    behavioral5behavioral6

    • Target

      CAD绘图助手/HydroLib.dll

    • Size

      200KB

    • MD5

      a2bec38b60dcc5f7feb35aeea7538c57

    • SHA1

      0bda137c9f121b4a2d0f41a55a7fb29f69394c10

    • SHA256

      ede4ab89eecac6d44fc63bcd41243e4155c0cb2055b162a1e567ac8fea6fdde7

    • SHA512

      58a3315f9aec56130c3b48db8e838d6f4c66a91aa83af4c9b08b0075b3ef9615a69c31507380717e588b1bc838a53ba10ee586a6e62b6cb535cf822e5ce63378

    • SSDEEP

      1536:BJXqaRK/9Psux/c5qP0BAb7H7E4AJfwA/DAIPHndddAzzSoGcEA/iPIBa+zDN4jP:P6V/937OwkA/xDMdqiJdZ7LK30id21/

    Score
    1/10
    behavioral7behavioral8

    • Target

      CAD绘图助手/原始数据.xls

    • Size

      92KB

    • MD5

      6e7e333d7c24115eb650f2f976acfdb0

    • SHA1

      f3dc31f316ecbc2fa0f30da89df89d2663e85d5c

    • SHA256

      74c4139eb61ff721780c6f84bab8f1b775f6fdc79ff0394032ef88707f6ba6a2

    • SHA512

      9cdcc3722ef818d081bc78a15a54be07031c61f874881314a2b95bf85dd23b39bf5d88b72f89030f8a9c3d20f332c293a1beb0fc73656590396e0d9aad343ed7

    • SSDEEP

      1536:vSSSW80Q2jZNCpafLYcYaP2vbYwjaB8in7G:7jDUc/2zjjcna

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks