Overview

overview

7

Static

static

7

Advanced S...SC.exe

windows7-x64

1

Advanced S...SC.exe

windows10-2004-x64

1

Advanced S...on.dll

windows7-x64

4

Advanced S...on.dll

windows10-2004-x64

4

Advanced S...an.dll

windows7-x64

1

Advanced S...an.dll

windows10-2004-x64

1

Advanced S...t_.dll

windows7-x64

1

Advanced S...t_.dll

windows10-2004-x64

1

Advanced S...up.exe

windows7-x64

7

Advanced S...up.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Advanced SystemCare Ultimate 16.1.0.16 Multilingual [FileCR].zip

  • Size

    119.7MB

  • Sample

    230317-swd5gagh45

  • MD5

    099e16d021bd5022d024c887c51a75aa

  • SHA1

    aee0d66c9e7fb87f8c3ccf90b0cac6595ba2e4e6

  • SHA256

    805224152e3498356300d6b536c2052aee8a31150a0f4481e10fb0bd1f55e9bc

  • SHA512

    1037b13578fdabdfe23848d90d88f6628921e4e21f4de94170229087e9b56921dd3382c847750f7d7ef3a00fb99c37dac30bd98d6292222e76cebdb1f47791d6

  • SSDEEP

    3145728:Xfq1cYcqxklKgb/Ral5JnKl2GsQda6nnYXrMAtjNMxaR4:6cqT5NyzsQdnnYXIEjOxaR4

Score
7/10
aspackv2

Malware Config

Targets

    • Target

      Advanced SystemCare Ultimate 16.1.0.16 Multilingual/Crack UZ1/ASC.exe

    • Size

      10.6MB

    • MD5

      8d2bffee9507182169230a2e9c8ff39b

    • SHA1

      84c1c01aadfe9ca1665ec503e6adb8b4bfe54cdd

    • SHA256

      93b59c338cf8eb91b304cdd77f075c08f0a2db1d1d36e465a1cb4e0c0fca0af4

    • SHA512

      bc4d30a5b2267b263f703426e55df1d696c3f9435da863811e26ec792cc07dd3484a75feecc16f37c98e26891c6c938e3cea251267fd88c3d38a1b1fbcae786c

    • SSDEEP

      196608:Nb4JDEH3iMEgaWbWVmFdsr0dCeayn110FClu4zC1YMAn4xQeRQRcWv:NbaDEH3ir5WCVmF+Id9ay0+JW1YMDoR3

    Score
    1/10
    behavioral1behavioral2

    • Target

      Advanced SystemCare Ultimate 16.1.0.16 Multilingual/Crack UZ1/OFCommon.dll

    • Size

      649KB

    • MD5

      c99d6ee56f7456186a4a8a43caf0d517

    • SHA1

      07f511d08ff6c727437c58749195e2b145227faf

    • SHA256

      a75bacebb4f2ab50c2058d28bfd3b6e8669fd859c07b807b5409436dff40e862

    • SHA512

      855917427bfd9359a8a5f11e8bf88e3b9f2600716f5b727b67a0b9a20e2859a71bb5d696ebcbd64bb18ac22735ce5de5751a9267881b2d9200ae896e5d552fe3

    • SSDEEP

      12288:BfzBh9db1NbpdfHemVXlC9leeYN7CQiBcTWcUc0LLbsi50Yn2Rtj38888888888J:BfzBhfbT1pe+1ucN7CQiBIWcUc0LLbHy

    Score
    4/10
    behavioral3behavioral4

    • Target

      Advanced SystemCare Ultimate 16.1.0.16 Multilingual/Crack UZ1/Scan.dll

    • Size

      1015KB

    • MD5

      7f820e18f787d8cd7cb1e6673d22851c

    • SHA1

      6941cd04df72ca4cb16854b74b5afb090066f696

    • SHA256

      9597ca6bc4a672a696542933d18bb9e4fb619695c6c9d46ba8b6d9fd4039e42c

    • SHA512

      f459cf4eb5c10a13f079427bccd7414bac5220e59f0c3da8545761cabce7c5b6778cbf1021750b845c8951b2ab059f9fb846756c2b46eb6baa71744faf644ea9

    • SSDEEP

      24576:cemGnWJz7LMHxZSTpaG9BifXABSAUwqwDnNo3+ud1Tsxu3K:tmrz8RYTpaCFRUKNjKTsR

    Score
    1/10
    behavioral5behavioral6

    • Target

      Advanced SystemCare Ultimate 16.1.0.16 Multilingual/Crack UZ1/madexcept_.bpl

    • Size

      438KB

    • MD5

      37ce2594627fea5eba388fac08be8d89

    • SHA1

      c0714cf673bd17c576c7fa68ecf972fea2f20232

    • SHA256

      0e6d8f18644f619716800f0415764b77569efe3cc141d64d54dcf6a01a3a6408

    • SHA512

      4b422c220d9c2e60b07643126f036a7e1ba3db81d66625b0a8df1674237756a50fdddb0358594f46d1224b610864f65887f0c629f3d07a49705756db417520ee

    • SSDEEP

      6144:vlAz49EKhEV30F8sl88nTjQ4Q50gEcW/jd+o72niViNMa4Yn2SZr:vlG4ut30F8slzYlQcW/jd++2nD6u2SZr

    Score
    1/10
    behavioral7behavioral8

    • Target

      Advanced SystemCare Ultimate 16.1.0.16 Multilingual/asc-ultimate-setup.exe

    • Size

      113.4MB

    • MD5

      c7b9560dddfa8436769c5162770ef870

    • SHA1

      7b2ff2731e3966c66b9c5625e67f0aa0a3432fd7

    • SHA256

      8d908e4a84c02e78b5a686d23495911dc8890a1390fa53257d1c086cc1f73586

    • SHA512

      8d704012508116bbee90aff7d7573fcecd0daad48bd06531f258ecc90d2569fec475bbcc670ba5a2e8aab6fc683e57619d98b9a091891b3dcc8883e52df62ad6

    • SSDEEP

      3145728:bpcxWk8OLHSygLsWURNbzy6TLf4T0OttvrWA0p:Db54WUPbzRD4TlSA0p

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral10behavioral9

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks