Overview

overview

7

Static

static

1

Installer/...20.dll

windows7-x64

3

Installer/...20.dll

windows10-2004-x64

3

Installer/...20.dll

windows7-x64

3

Installer/...20.dll

windows10-2004-x64

3

Installer/...er.exe

windows7-x64

1

Installer/...er.exe

windows10-2004-x64

Installer/...32.dll

windows7-x64

1

Installer/...32.dll

windows10-2004-x64

Installer/sfdvd.dll

windows7-x64

1

Installer/sfdvd.dll

windows10-2004-x64

Installer/...dd.dll

windows7-x64

1

Installer/...dd.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Installer.rar

  • Size

    8.5MB

  • Sample

    230210-zazbvabb9z

  • MD5

    b7d6383a6689d9e2b30f1a689e425979

  • SHA1

    8b6de054e65f139c5945b670d8dc59724b65138b

  • SHA256

    d1d283a5f8c43bf46bffb6e6b5704754383fa5491185468e4c31d7ff5cda6233

  • SHA512

    b2e26f90a4b18c7ad8ca523ed7cd4cb4418de42f75cea4007dd84a74069588240ef0ab09b8e1b0873aff3238f8f90bd5adf5da14f4de74e92d663447e7098ce5

  • SSDEEP

    196608:3m1iL9IwznBw5OhLHAHkor5T8h59cH4R+qesjEjA:3m1gIwi5ELXI5ghXaQ+qeaEU

Score
7/10

Malware Config

Targets

    • Target

      Installer/Data/msvcp120.dll

    • Size

      444KB

    • MD5

      fd5cabbe52272bd76007b68186ebaf00

    • SHA1

      efd1e306c1092c17f6944cc6bf9a1bfad4d14613

    • SHA256

      87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608

    • SHA512

      1563c8257d85274267089cd4aeac0884a2a300ff17f84bdb64d567300543aa9cd57101d8408d0077b01a600ddf2e804f7890902c2590af103d2c53ff03d9e4a5

    • SSDEEP

      12288:uZ/8wcqw2oe+Z3VrfwfNOOoWhUgiW6QR7t5ss3Ooc8DHkC2e77/:W/8wVwHZFTwFOOos3Ooc8DHkC2e77/

    Score
    3/10
    behavioral1behavioral2

    • Target

      Installer/Data/msvcr120.dll

    • Size

      948KB

    • MD5

      034ccadc1c073e4216e9466b720f9849

    • SHA1

      f19e9d8317161edc7d3e963cc0fc46bd5e4a55a1

    • SHA256

      86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f

    • SHA512

      5f11ef92d936669ee834a5cef5c7d0e7703bf05d03dc4f09b9dcfe048d7d5adfaab6a9c7f42e8080a5e9aad44a35f39f3940d5cca20623d9cafe373c635570f7

    • SSDEEP

      12288:LBmFyjLAOQaYkxGXPfY7eiWWcpOKnpTVOIxhK765qlRRb6x4pI23IbJQV:dmFyjLF847eiWWcoGZVOIxh/WxIAIbGV

    Score
    3/10
    behavioral3behavioral4

    • Target

      Installer/installer.exe

    • Size

      726.8MB

    • MD5

      0d7d8819e8b0e0cc774a8ecdb263eeb9

    • SHA1

      e392e0dec6286beb977dbb54dec5ab991615d7f2

    • SHA256

      7553cfa18b3a410c11b38b1153941448d67eb5d767809c49488cc1492a3aefc6

    • SHA512

      1f931675176dc8e318d98e23997fa7e14029a9d91ce402b60273c38beae581da752d611726d29717d00ab7c17fc0e73f21a1d5c862ba49d322862cc97cb19ea5

    • SSDEEP

      196608:mXeFUgOHVoBWWIkY+MYg99J0ZWCY5i852R:MS3O1o5Gh93nCY5/IR

    Score
    1/10
    behavioral5behavioral6

    • Target

      Installer/libeay32.dll

    • Size

      1.1MB

    • MD5

      67130d64a3c2b4b792c4f5f955b37287

    • SHA1

      6f6cae2a74f7e7b0f18b93367821f7b802b3e6cf

    • SHA256

      7581f48b16bd9c959491730e19687656f045afbab59222c0baba52b25d1055be

    • SHA512

      d88c26ec059ad324082c4f654786a3a45ecf9561a522c8ec80905548ad1693075f0ffc93079f0ef94614c95a3ac6bbf59c8516018c71b2e59ec1320ba2b99645

    • SSDEEP

      24576:CBULPHc9UKJayhv6uaDGXcRY0Pt4eY/qL6I4tPxVCBfe6w:L09UpyuDMaoHI4tPxV56w

    Score
    7/10

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral7behavioral8

    • Target

      Installer/sfdvd.dll

    • Size

      8.6MB

    • MD5

      50379c194ebd4f7d50b732e3ba89e58b

    • SHA1

      325de808a1df378e3058543730ae79b6293e3196

    • SHA256

      1154e9c0099ba50f6dd92149f1a0189e38b179311d5e73b596c31929c2a7b331

    • SHA512

      caadd724868bdd88782b4e88217e6b2ed5e3658d53d1cb92dd6e2e45ba756511945571a742207c38929d10d77b3865f30a4720fce189f6265a1bc77e2d085076

    • SSDEEP

      49152:QIbIaI6MsawQSR7dlFYmwlzCY1dGJwtNqJ2F:z+K2TtC8

    Score
    7/10

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral10behavioral9

    • Target

      Installer/sfld.ldd.dll

    • Size

      6.7MB

    • MD5

      81e8c247bf3fb2f14507f55f8eae3ccc

    • SHA1

      27e0b214128de14bc57bb0ab382aeb83222c0088

    • SHA256

      678949578fec823f923856d28f616240153c4aaed12b7bbf4dc7df52e394827a

    • SHA512

      e5abd1c5175ff7e6b6d88b01efd527fc77be70151fea4178d1c7aafda4364587f52cb7c7a026d398ab014312819b40c6a5361bae4d053fe5d40e6f1194e204b5

    • SSDEEP

      12288:Kyocx8dhafoN3dIUfaMMPEQW1l2UDR47psBSE7wW6fE5M6FPYN++rbfWqY3iiI62:LZxqJUO0UDRmsBSEMW6fE5M6mxpiI62

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Matrix

Tasks