Overview

overview

3

Static

static

TFMV_1.9.2...ip.dll

windows7-x64

1

TFMV_1.9.2...ip.dll

windows10-2004-x64

1

TFMV_1.9.2...on.dll

windows7-x64

1

TFMV_1.9.2...on.dll

windows10-2004-x64

1

TFMV_1.9.2/TFMV.exe

windows7-x64

1

TFMV_1.9.2/TFMV.exe

windows10-2004-x64

1

TFMV_1.9.2...xe.xml

windows7-x64

1

TFMV_1.9.2...xe.xml

windows10-2004-x64

1

TFMV_1.9.2...if.dll

windows7-x64

1

TFMV_1.9.2...if.dll

windows10-2004-x64

1

TFMV_1.9.2...ip.dll

windows7-x64

1

TFMV_1.9.2...ip.dll

windows10-2004-x64

1

TFMV_1.9.2...ry.dll

windows7-x64

1

TFMV_1.9.2...ry.dll

windows10-2004-x64

1

TFMV_1.9.2...on.dll

windows7-x64

1

TFMV_1.9.2...on.dll

windows10-2004-x64

1

TFMV_1.9.2...ct.exe

windows7-x64

1

TFMV_1.9.2...ct.exe

windows10-2004-x64

1

TFMV_1.9.2...ib.dll

windows7-x64

3

TFMV_1.9.2...ib.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TFMV_1.9.2.1.zip

  • Size

    14.5MB

  • Sample

    221127-tmzv9aag25

  • MD5

    b656b9f5c2e74c3df1e6a7088e4f447d

  • SHA1

    68aed44a342e3dfe40164b7e1183c44ed9ca245b

  • SHA256

    e6cfa71cb4a2a92bf6ea476faf1232df540aeb7282d2dd2717732c4518a296a8

  • SHA512

    6b4e302a112d707285ee2265f0211a99cdb247144d513f768938e39e07f605a07c1dedb536d7946891f1cf014076dbe973651c7b9d9513af5b2f445304744fb6

  • SSDEEP

    393216:vjZSf7K5Qaz+E5f5R3cQL5kJSlLqPfKYnqKPm7Hi+Q63SNA:vjZa7K5n+ERcQdkJocjCC+Q63Sq

Score
3/10

Malware Config

Targets

    • Target

      TFMV_1.9.2/Ionic.Zip.dll

    • Size

      451KB

    • MD5

      6ded8fcbf5f1d9e422b327ca51625e24

    • SHA1

      8a1140cebc39f6994eef7e8de4627fb7b72a2dd9

    • SHA256

      3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd

    • SHA512

      bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4

    • SSDEEP

      6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9

    Score
    1/10
    behavioral1behavioral2

    • Target

      TFMV_1.9.2/System.Drawing.Common.dll

    • Size

      50KB

    • MD5

      de6c429b39bffceb5b04ad9ef469cfc4

    • SHA1

      f683f2acc67e9e048b5bd9ac835a24707f8835e1

    • SHA256

      738e8b543e8eac64189a3fbb0f67ce058a9f00a58f2be5b549a1443f83824681

    • SHA512

      33465ec19d696be6ecbfff0cd9aa743bee25acd25431d89a4d3b764efae102dc77468fcc3b27d7045470ae0131aa65343ee9d810d85f446e6121f53825c0505a

    • SSDEEP

      1536:MCXYMIE3O/nAMJhuJiykNeCYSprHAzevVjTh:MCXYzE3O/nAMJgJiy5C1AzeNHh

    Score
    1/10
    behavioral3behavioral4

    • Target

      TFMV_1.9.2/TFMV.exe

    • Size

      1.4MB

    • MD5

      6cc1b52ea19e11a6e40a1fc95c9c3ca8

    • SHA1

      a3f09d823305c83bc90715a696936d23e3f38978

    • SHA256

      427331327518c4ad5890ce6188b94e5f5fdd20bd79516631429fb9d10036f07e

    • SHA512

      930f7fc38defb12f0649c95db953e5807b031523a5f6fef59a75f72aff70126bef86a0c99cbbf37b464c424922c05a159b02bc03a152bef2a37c542147b35270

    • SSDEEP

      24576:+PbbJ9qnYzrRFudRxDifyi7CIszLSIObdhU6s7Difoi+wOsTROdGEb4B:+unY4Dif97C7OIORh+Difv+wl0dGEUB

    Score
    1/10
    behavioral5behavioral6

    • Target

      TFMV_1.9.2/TFMV.exe.config

    • Size

      303B

    • MD5

      ee179113e9cd95ffd8baad464c65e065

    • SHA1

      ab9aafab8a2cd12b18bbf89a333cddc110400b52

    • SHA256

      bb6c7c9d37b7bcaadbed5585185ea27e6d1f66bb9a4df0ede93261fa0a0640db

    • SHA512

      4ed491d4960129ff82f957d39cf702f5ad64bd04d62c16f36ff766aa03b51db9033b7536179dcaf730e72e20141260be8a892c2b68cf567efe81aaab8772f434

    Score
    1/10
    behavioral7behavioral8

    • Target

      TFMV_1.9.2/libs/AnimatedGif.dll

    • Size

      21KB

    • MD5

      fecc3bb91fe7c3c4cdd1747d9d65cb8e

    • SHA1

      ee5481cee0a5a0505cd44ed1d731c4cf0ca1a055

    • SHA256

      be2faa161d9f433945279b57b7956b4cbca7b1aac45b5c677f0d9ed6d8d24e76

    • SHA512

      65a3c19cbf2d87717a4a63e68f9793d256bf53bb670f7a35bf079959edc333ee390b701701f053dcf377287aee0c816bf288e4cfe7f052b61f7c2a802ad138c4

    • SSDEEP

      384:oZJP4f8RNNUBdjiMZAMTgy9hbux8s61BD5fE79EdwYL:oZJgf8RNeBdjtaDEbukZ5ld/L

    Score
    1/10
    behavioral10behavioral9

    • Target

      TFMV_1.9.2/libs/Ionic.Zip.dll

    • Size

      451KB

    • MD5

      6ded8fcbf5f1d9e422b327ca51625e24

    • SHA1

      8a1140cebc39f6994eef7e8de4627fb7b72a2dd9

    • SHA256

      3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd

    • SHA512

      bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4

    • SSDEEP

      6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9

    Score
    1/10
    behavioral11behavioral12

    • Target

      TFMV_1.9.2/libs/MouseKeyboardLibrary.dll

    • Size

      13KB

    • MD5

      2aaa555136ebe932523fc2a882cf3594

    • SHA1

      e15ef10766d4ff1258673d2e78a226a6e3ed7819

    • SHA256

      aa6c4b15a02b5ba24088387db0e90185666ad6dc18335e403a0aab50e85c3204

    • SHA512

      d45dd0d042117fe42f6149247a07a8021516882b7b6eb6750578681243ff94241a34b736b2f373fa336ea97466d050fb05f53ade8f7061d8415ba58aa6eb6244

    • SSDEEP

      384:a4zux8vqgySKqRWc0iIEitNw1Gtcjki/U:a4zuxwqm5D1ii/

    Score
    1/10
    behavioral13behavioral14

    • Target

      TFMV_1.9.2/libs/System.Drawing.Common.dll

    • Size

      50KB

    • MD5

      de6c429b39bffceb5b04ad9ef469cfc4

    • SHA1

      f683f2acc67e9e048b5bd9ac835a24707f8835e1

    • SHA256

      738e8b543e8eac64189a3fbb0f67ce058a9f00a58f2be5b549a1443f83824681

    • SHA512

      33465ec19d696be6ecbfff0cd9aa743bee25acd25431d89a4d3b764efae102dc77468fcc3b27d7045470ae0131aa65343ee9d810d85f446e6121f53825c0505a

    • SSDEEP

      1536:MCXYMIE3O/nAMJhuJiykNeCYSprHAzevVjTh:MCXYzE3O/nAMJgJiy5C1AzeNHh

    Score
    1/10
    behavioral15behavioral16

    • Target

      TFMV_1.9.2/tools/HLExtract.exe

    • Size

      99KB

    • MD5

      bc84c5e5ca098f3d4b20185bcba2f265

    • SHA1

      2d58313b382d30d74c9dc566f080b69192c59724

    • SHA256

      ac1c456e0399861db110727023c3008ec2e164b82b2087ca47b5e55879f10f98

    • SHA512

      41165889b858f5fcffbe1cc35ec957d143d8305120579973f32f7809d860dd68244c4d3f458acc91b0dd5fee9f563f3d042429192250b523609006298ea0898e

    • SSDEEP

      1536:jph6M6NP6lwy9MA48yXEwN1gIHTMgOldM4Mj+feKQN5+QCq08v5M+ss:FgMWP/y26aEONM1Xxekzqhv5Mns

    Score
    1/10
    behavioral17behavioral18

    • Target

      TFMV_1.9.2/tools/HLLib.dll

    • Size

      263KB

    • MD5

      6fa2b501f821dc2533ffa257d4fbae39

    • SHA1

      c770eac7c4bb9dc393938891187ed6c0c611ef3f

    • SHA256

      0260e26c5804a131aed80435fa8e6c04dc360008f4af22543d16ddcea420b4d5

    • SHA512

      efce26af626b86b125a9025db8c4c89e639b731f506abb7a62e22fa1631a5d93fee3d4be3e2701d6534c0717138427470df9c7de303552b7c77595741f92790f

    • SSDEEP

      6144:Xf+jHc+H+yoldBmLG69TB9Dz7dVQbMgixwGBBL2Rf33CtANu64:Xf+jBaiLG69THDzRVQbMgixwGBBL2Rfa

    Score
    3/10
    behavioral19behavioral20

MITRE ATT&CK Enterprise v6

Tasks