Overview

overview

3

Static

static

1

Greenshot.exe

windows7-x64

1

Greenshot.exe

windows10-2004-x64

1

Greenshot.exe.xml

windows7-x64

1

Greenshot.exe.xml

windows10-2004-x64

1

Greenshot.ini

windows7-x64

1

Greenshot.ini

windows10-2004-x64

1

GreenshotPlugin.dll

windows7-x64

1

GreenshotPlugin.dll

windows10-2004-x64

1

LinqBridge.dll

windows7-x64

1

LinqBridge.dll

windows10-2004-x64

1

Plugins/Gr...in.dll

windows7-x64

1

Plugins/Gr...in.dll

windows10-2004-x64

1

checksum.md5

windows7-x64

3

checksum.md5

windows10-2004-x64

3

log4net.dll

windows7-x64

1

log4net.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Greenshot Portable-Mod.rar

  • Size

    487KB

  • Sample

    230312-drqkdaee4t

  • MD5

    8e965e73006ffe07a5d53c471c412e9c

  • SHA1

    9944c56078e11f6b5cc7c4b769845bfb79674dcd

  • SHA256

    d311715788711fba67a34f9a192c79dd5856980f2c51ad9a1d4f6068094ff0c5

  • SHA512

    c9da94c38bab6107c5df507f966d8bfa8056a88bcaa91037ec9e1f7d7c15b2c4e8e157c387e233f682f4d56c1b6a9cf6d6d1097e167b579053c583aaa190348e

  • SSDEEP

    12288:Cj6t9IwCIma4Ia6yqu8MgZDbw8m5eicsAoN6N:Ic9IwCTPrwu8TzmcizxNs

Score
3/10

Malware Config

Targets

    • Target

      Greenshot.exe

    • Size

      515KB

    • MD5

      346d22939e3079901f0dfac7add71c94

    • SHA1

      67ea9f4f56c7c4189745aab05c614a6e615d9e7e

    • SHA256

      fdc3900da9cf5b4b7f4b461eb54f2f7abf2af104de8bfdd0b7f6a46f092f9cc6

    • SHA512

      3d845aee807f6fc711f212229595ba2dfeec760c649b7b0f4398cba8091fab8eb63dd551b46f49840a2de2c2b872130b4b5e90f95ff2757381e96be4b066122d

    • SSDEEP

      12288:qIska30pZKIpno9eKXt2w3Po52QIUtMbYKUnwLu8m3mkDGYP8/Gc5oTr6zG/P9PI:YxUR5LgcOoINdSjQk2

    Score
    1/10
    behavioral1behavioral2

    • Target

      Greenshot.exe.config

    • Size

      423B

    • MD5

      607cf0cb207fe62914afb1d252002de5

    • SHA1

      7e9979e5244f6cd3640cf5bc429c29ea9f80c656

    • SHA256

      e1f91b7391b071117b03be8e8a21fb644e83a624bfa9ea76a4389e8f2ea7027c

    • SHA512

      552c0b846b8a9a487aa27a9158ec01dc35f47f4cf932540adbf3bebad34ed85422213e73ab9f826648d9340ab0d867eab71d23c4b7b06ca1f0775aab9683d096

    Score
    1/10
    behavioral3behavioral4

    • Target

      Greenshot.ini

    • Size

      11KB

    • MD5

      c1bf33d9a63b15d7c5e574fc427fc4b8

    • SHA1

      9fd46d189adc1ff707c42e1d44d1e074bf619b94

    • SHA256

      c731a8367b2813e440a2006512874bce60eec0f98d5ca006669f41489f1cfc26

    • SHA512

      2d9758e64633c7e1d01640f8accdb5dd003d58ca6c72f6b0747f4f83cdcfd4d6de776423d25ff7b53dd55da2a5acb754a549b7060c6d44b57b698c1a5fe537f8

    • SSDEEP

      192:nBLDNxtSZhn36p84NxLUl4w6IbAYnsOIOeruHs940tt3jcEs6tuLF:nBLxxUZV36p84NxLUl4XCnsaKx9RvjfE

    Score
    1/10
    behavioral5behavioral6

    • Target

      GreenshotPlugin.dll

    • Size

      447KB

    • MD5

      9ffceb225f44cf2aeb6fbb51c77fd12d

    • SHA1

      3658d7ec2f0de037f909d59c8a51783fa2ec885e

    • SHA256

      697f06fe82a419c2a32d5f8819ff857e70c2052e253389780469ce114bd8efe7

    • SHA512

      8ba2910c71b347eea24650b996bc26dff3393c0416be0ac8a6fb6014cc61a9e705e770bc9909c2247dae025e1c13738c9a4f249ef9414ffd8ef668a4caa9eeb1

    • SSDEEP

      6144:r652oSnP4SLoGCZoI5MB40dpvAniHqd47cTSsR8yQ+D5fp9KG6d7RWI+3RXJfSdT:bP4SEGC7EwGs7Q+DEj+XI

    Score
    1/10
    behavioral7behavioral8

    • Target

      LinqBridge.dll

    • Size

      72KB

    • MD5

      8786edae35ac469b8a80e443d387e968

    • SHA1

      cd51f58c61c8c8a8ebd4428f6a2e4b98a446c215

    • SHA256

      e9d98dcf877357127db02dd36d2a0c6eb6c8561ea802d910b6a9c62c75243e94

    • SHA512

      ea0074b3b0ae46a8c9faeba13305147748104787757b5c78e1915be73d5a33e39f108cca2c5e6c70e3b0f76f3a6adc7365d3a14afd16de198201a7f31e245571

    • SSDEEP

      768:Av7jPTwNjih6NhbY5/U+R+ghvgUu4Wlx8N8eh/HyoaH3Eozfv92cLvZFsEhlGFvh:ALKji9VvhvgDx8THyom3xzfffsEr4GEp

    Score
    1/10
    behavioral10behavioral9

    • Target

      Plugins/GreenshotImgurPlugin/GreenshotImgurPlugin.gsp

    • Size

      59KB

    • MD5

      479d3f726ed607b6bb818d13c8781fed

    • SHA1

      8285875543ea3ce72b6c6f96d241a68b93a762ed

    • SHA256

      51a036a4dcd6f082d8b0122c93b5b1fdfc8ac6eee572edbde3f3e873e0dbf3bf

    • SHA512

      0609952308ab876d401f0de1e5faecd35e3351d6e4216bb414a943c53b7bdba54e6044bda56ef9779a2a643165135fc0790a915bc0fec2187c1e663f1d40934b

    • SSDEEP

      768:bE/EBXbDG6SZjdBd3kPOjpRBgzirUgyeo4G8WXFxEhR4FqQEhx3:48WBdU5ziAgvH/WVxEnCpE/3

    Score
    1/10
    behavioral11behavioral12

    • Target

      checksum.MD5

    • Size

      976B

    • MD5

      3a358162338d119abacb04f793c9d6ea

    • SHA1

      4632e350cb16b52a5004bdfea2634c29967d46bf

    • SHA256

      68338580c8fa91a8ea188ec035c6a966419afdb748a7f84a8ead02910c9f932e

    • SHA512

      69178433c3a6085a22a2f59fbf1de5b653aecc2a445f8cb7e86e400da737e3b8c6c853e4ae5096eebc6b80a9d34cf70471412c9cbd24f3ed22757a8de86c3d1c

    Score
    3/10
    behavioral13behavioral14

    • Target

      log4net.dll

    • Size

      216KB

    • MD5

      c10193a05427df7e422abbbd733e059e

    • SHA1

      d8db7f68218bd39c0e758fcde4a7c0f18ce1cb81

    • SHA256

      b44c644dcb302ef0fe827a40f947c68e689cb20a162defed655599e90a47fba6

    • SHA512

      12ec16a5127deba51e5e35b63645f7ba710cac146d4969b35545f0aab01ed3f9d32e887fa6b5187195d65df9b7a7a7da8764bf0e5a69887a2002c0b8a0c7a13a

    • SSDEEP

      3072:XmxqYLmzgdIC+/IycUSzunOXutmuAo9lii532On7GqzsnY7:JYL9dwgycryhIeoi5gY

    Score
    1/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v6

Tasks