Overview

overview

9

Static

static

9

�...dm.dll

windows7-x64

1

�...dm.dll

windows10-2004-x64

1

�....0.exe

windows7-x64

7

�....0.exe

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7b1d655c69ec1aa63ba49ebf1b552856bed058902e214e9830e4eb2be8b6e72

  • Size

    2.7MB

  • Sample

    221125-yclcbsdf2z

  • MD5

    b3e61dfa7f78f8098cd6d22727cd5ecf

  • SHA1

    1ab1736631990fe966c1ad56f69994b108993a30

  • SHA256

    e7b1d655c69ec1aa63ba49ebf1b552856bed058902e214e9830e4eb2be8b6e72

  • SHA512

    551d64a3f867f5db8b21de595a69ca77d958307711bfa2f390443efc26919395921482d3925520816d777e31a8318e504025a33512271b3735cd0a6ddb6681fb

  • SSDEEP

    49152:XhCk695HuZEREd/Luf1KyEbPlsyl+goN1YnfeJheNsDRxLTxhDF4SwnYu1PsADHh:Xhz694EWDuwTlll+ByIhTDD95iF1PsAl

Score
9/10
upx

Malware Config

Targets

    • Target

      ѻ︨v1.0/dm.dll

    • Size

      804KB

    • MD5

      c578b6820bda5689940560147c6e5ffc

    • SHA1

      922e50d89c9c44bdc205ef17aa57212b64e58852

    • SHA256

      3b6ddc32b800a18b21a819e842cbfdd57cb065fd92cc69545e0ef29b97cfd389

    • SHA512

      9f2a1bb5788ad245242d12968bbf198af2694a87c6e2342f14672e8c14e8489dd3319434592fc9b20f620557d0fa58482903d19c7f5ba32456a1e4076dc1bb85

    • SSDEEP

      24576:3rhlxaCsVb6KoTpZCFg6DTk1F2RjkjCQG:VWCsVb6KUpZ+hDg1F2d6

    Score
    1/10
    behavioral1behavioral2

    • Target

      ѻ︨v1.0/ѻ︨v1.0.exe

    • Size

      2.0MB

    • MD5

      e92e8dcc5d234b6b2bd79ea5a7a34160

    • SHA1

      1d53ef8e7f93f1a187fb703043d67d48719312c3

    • SHA256

      1162b08c74b4da6b1f6fe067869b4c1c3784fdd2d279e0e0e9ca268609c1f231

    • SHA512

      1288d78a25482fa611e1c078a8bc4ef819003d4363c3681b080a6d4a6d8b68cf10b24e5349df46749df859df3a7e7cfbaa25ea94de1687fefd6a815d4f42f46c

    • SSDEEP

      49152:vn1EsMZVZkoR6UoNF6Z70RXIlCDxxL9vP1zAmG5YuNFI29p:v2DZ9R6FIaX3Dtx3aFNFI2P

    Score
    7/10

    • Loads dropped DLL

    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks