Overview

overview

1

Static

static

1

DirectUSB.exe

windows7-x64

1

DirectUSB.exe

windows10-2004-x64

1

Driver/amd..._0.exe

windows7-x64

Driver/amd..._0.exe

windows10-2004-x64

Driver/x86..._0.exe

windows7-x64

Driver/x86..._0.exe

windows10-2004-x64

install-filter.exe

windows7-x64

1

install-filter.exe

windows10-2004-x64

1

libusb0.dll

windows7-x64

1

libusb0.dll

windows10-2004-x64

1

sv/a5s/a5s...d2.xml

windows7-x64

1

sv/a5s/a5s...d2.xml

windows10-2004-x64

1

sv/a5s/bst..._b.xml

windows7-x64

1

sv/a5s/bst..._b.xml

windows10-2004-x64

1

sv/a5s/bst...ut.xml

windows7-x64

1

sv/a5s/bst...ut.xml

windows10-2004-x64

1

sv/a5s/bstconfig

ubuntu-18.04-amd64

sv/a5s/bstconfig.exe

windows7-x64

1

sv/a5s/bstconfig.exe

windows10-2004-x64

1

sv/a5s/draminit.dll

windows7-x64

1

sv/a5s/draminit.dll

windows10-2004-x64

1

sv/a7/bst_a7bub.xml

windows7-x64

1

sv/a7/bst_a7bub.xml

windows10-2004-x64

1

sv/a7/bstconfig

ubuntu-18.04-amd64

1

sv/a7/bstconfig.exe

windows7-x64

1

sv/a7/bstconfig.exe

windows10-2004-x64

1

sv/a7/draminit.dll

windows7-x64

1

sv/a7/draminit.dll

windows10-2004-x64

1

sv/a7l/bst_a7lbub.xml

windows7-x64

1

sv/a7l/bst_a7lbub.xml

windows10-2004-x64

1

sv/a7l/bstconfig

ubuntu-18.04-amd64

sv/a7l/bstconfig.exe

windows7-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DirectUSB.7z

  • Size

    5.8MB

  • Sample

    230412-zb49gsfa23

  • MD5

    6e04f4a681931b51c7de97478181f197

  • SHA1

    22e119781bda20ff41f428297bc88f94f7d1b362

  • SHA256

    4a6f13834fe680c1b250f411631cfbdc2ba79b4890178c98e2d6c7191b5e63e6

  • SHA512

    1aaba50c21cbb0aa4cb646f5fd9dd8655d5abcc08645b17e2961759b7a9d904f306bf96ebf07d3b28bd52040104e8848000996bdee1e3f693ca0bc74cda7bdbf

  • SSDEEP

    98304:5TINj8MUz+gJiAjuTo4EtYcOD/Dawb3Nlo8oSD40PanHpe4GiM7bGrmcBinkJLSo:9SjZUz+gJi/TodtCzDb9fo+uHiJe/gk7

Score
1/10
linux

Malware Config

Targets

    • Target

      DirectUSB.exe

    • Size

      391KB

    • MD5

      0f1b457e9d6a68a658c8a4ac7ad6e9b0

    • SHA1

      8c4a4f314edd6cedef95576f0468d50f1c8bf05c

    • SHA256

      62b83a456c978d972ecc7414e21bdb36102be89e33f544fc3c4ac11e2aa87faa

    • SHA512

      c336090c783f5023eedf5ed464c92a93e916ed487f8adb86c6384a9cb999a8a8a3116edc25950d67235b0524be5bd6f5c9334d6875b9733f91551c908402235a

    • SSDEEP

      6144:27/F0ZAZvKBuuB/ul6/cg/lvQqjzDosqAi7aFto3C3/J:27/RQXYUAKiitoq

    Score
    1/10
    behavioral1behavioral2

    • Target

      Driver/amd64/libusb0_ambarella_1_2_3_0.sys

    • Size

      43KB

    • MD5

      3fb980988e87fac3295748ac841eb674

    • SHA1

      ce73f1dd99f875f9bcf864aea536cce5ec7426df

    • SHA256

      89b2b69c57d7acf8211c9f865fc81e3fa14e76a6b9589792812dacf9afc35f8a

    • SHA512

      f5997bd63c83ce0cf81c0d452c8cb2140f9c1e3c72d929cc0159701897fd5256338df93d29dc01b7207d9f54339deb44af322fcf5d26c020a97a4087f77167e1

    • SSDEEP

      768:MeEu0mKQo38zF6QFi9qY6Je2Yo34+fniC+yipCZU:HkA9yTpAdfniC+yipCe

    Score
    1/10
    behavioral3behavioral4

    • Target

      Driver/x86/libusb0_ambarella_1_2_3_0.sys

    • Size

      35KB

    • MD5

      76569411eabf42663530639d7cd049b7

    • SHA1

      3f5360db5ca763af403d2c996f52513bbe200a70

    • SHA256

      fa8478b60d049019a4b1f735d0e13e8d3bea1210993a47f4f352a0c241b55131

    • SHA512

      0bc075756209269bb40643a310aa97b6979214acdb285587838640430ea793545bf0b4cb56d77153a262ad3a2add39db2f38f720f05251f887040e4e77d149b2

    • SSDEEP

      768:OtiEFdfqinC1iHTubwj99GKOcytUKC+yi0oyf:yi+CKTGwzZytUKC+yi0oyf

    Score
    1/10
    behavioral5behavioral6

    • Target

      install-filter.exe

    • Size

      45KB

    • MD5

      4a03ec231c82c6ebe53fae8b853bfd11

    • SHA1

      7211521f621894e2d5e6e5bbd36a980cb73ee252

    • SHA256

      2a92c69e3440208e220cf2d12185540216b39a2316749b66924a627ad4174271

    • SHA512

      fdd614c471975a6f4391d80d3f9b6a67aa6b7f9f3293b75c75fd935b493a5037bc0f84b5c0b0033cc9ca44afad3f6b0dbe91f112c70f7f4148273249ba40e65d

    • SSDEEP

      768:6DRy99G8dq7x6ZFdC72/WkFUg0JzhlLBHxqpy7:MRy9tc6rdnFFF0JNlz

    Score
    1/10
    behavioral7behavioral8

    • Target

      libusb0.dll

    • Size

      65KB

    • MD5

      1b8564ef01c31f63ceb22bbe75bd7e44

    • SHA1

      f5fe5ff793ee12fd75e29424b62b826350d9a79e

    • SHA256

      9c06d7b5997f49faa6ca4db95a09300e2a18b98e3108ae32b516a3ca0b7466b8

    • SHA512

      88fb986a5ad76fc271262273f0939cbb1c39c9a8bcb9f0dbf38afbacef3c0762ec33f7b360056ada9abaec5d016134438817dee3f9dcde5679b2cc9d6696c90d

    • SSDEEP

      1536:Ey9pmU733XNX2lXKS5iMpgoPnD2f1Mz053Laos6C+yibXTk:EwmUxXY+Mpr/05bZrW

    Score
    1/10
    behavioral10behavioral9

    • Target

      sv/a5s/a5s_gopro_hd2.ini

    • Size

      1KB

    • MD5

      65e9508f5aaaf8e9e926e30ee53bf398

    • SHA1

      83785dc18a866468dabfbc00f28d463cd3c3c7e0

    • SHA256

      2ede666cca93cd927c7a45d5cd8472c42e2ecfff8abfc7bc65f63af0956f9bc0

    • SHA512

      4744903b8382582de5d5eb00de14dc97ff3485bc32321ae66009d39a8afa3b4685d4ff5576f5b22c34b81551d338742851ee4028c91057475e464a36bea6a2ed

    Score
    1/10
    behavioral11behavioral12

    • Target

      sv/a5s/bst_a5sbub_b.ini

    • Size

      1KB

    • MD5

      8f50dca16db28195f1a354fe19c1f9c5

    • SHA1

      28c15bb18275ea813dd621fe92738e3c6dbedd2e

    • SHA256

      e5c786c1223efc0df46322808615cba9104c4513a343b94b98ccd03f12cfc590

    • SHA512

      9c4b1586921d09db9dda6055c010c9417e37330e1ca4d8d1d58d2db1be1b7eefc58ca47ad42f7c881ca235e53d549af5a3f723df477dd837011e07df8d96d027

    Score
    1/10
    behavioral13behavioral14

    • Target

      sv/a5s/bst_coconut.ini

    • Size

      1KB

    • MD5

      86d2321ea7551041bcd44bc11dfd131c

    • SHA1

      d98b3b4b23cf6adccfa2d6474e6ae1483308fec0

    • SHA256

      aab2a46581a89d9fbf4a18cb18df0511a8fe282356f3aa79cd105d18d0810782

    • SHA512

      ee6bafaf415b1b2a866b20df31150017246b29eec6207c95d9ddf9e85869e15d592a4b811a29f41573bd6bacf4b2a8e48634df5fb5c10d834eaa94a8a145c4e3

    Score
    1/10
    behavioral15behavioral16

    • Target

      sv/a5s/bstconfig

    • Size

      4.6MB

    • MD5

      b1e70f395418064bfabb5b3efeebf5b1

    • SHA1

      93ee193ce42f57c23626b776f6505da761f0aff4

    • SHA256

      4513eb9612aaa394d17cb6876e2308a8aa52d6cabaf5f18b01a8883aab0ad1e2

    • SHA512

      6543d746578d862622740f9cb282577b275ee7b600c871763cd1106523e7570bdb9b3cabf377685fac9f0f69779212c2a3b0c93f46ef0221908ea36e8cde07a7

    • SSDEEP

      49152:7paQHWWSPG33fGOIBfbOVbOY4xPfX8BvfP1pkvmMNdt0A5dDXQ7K0F8rwPMLfjYw:7pB2WSVQnRVQhUM5DZiU8gjFB8kQYt5

    Score
    1/10
    behavioral17

    • Target

      sv/a5s/bstconfig.exe

    • Size

      5.2MB

    • MD5

      224828550adb8ce0ff5a0475f82e59f2

    • SHA1

      210be4077efe1f3c271ce4160e487f6de118fa00

    • SHA256

      4b6bc04182f79c1d652589d6d62385b8d1732c0bbbeb2a011a4a4be0518f9c03

    • SHA512

      4c321f3ff4b57eace51e9ca5f02bc9d87310d790c19e13ca60daad0dfbdaf35efbcdbce21990e32d75b20295a08ed09f1e2a315a0dfd3ab007a93f8d907661da

    • SSDEEP

      98304:mfvzxa5iOq0YXFAPnMnhpsIWr+fiPPmUGv54BzyGi+OOVtNQHzFVSsY6Z71MaMVo:UvgnMnhJWr+aPry5X+ORzFdyBLjoFdRr

    Score
    1/10
    behavioral18behavioral19

    • Target

      sv/a5s/draminit.dll

    • Size

      33KB

    • MD5

      19ed1a88ada5a5041de9e4974805cc56

    • SHA1

      a08bf2c43b296bb67d06a8ebf8b3857266905cdd

    • SHA256

      7068ab57d9ce6d981921dd126bfee32e5b0680110dcfbb9728fafb624c315263

    • SHA512

      5c2f6d4e9f53e0e445cacd0f4f36b48726b9c9bb4e011425f0961707cc7c6e2c712b1219b0a73e12c73053d714780c485922cff7f9c4e4db3e68b713d4dfbc4f

    • SSDEEP

      384:ZryevAXuhY+LRkiV+lL8CxwIsXGSzidgDTQAWqUTwU72ErNw6soY+bHkd8d:lD1RkiECCPs1nlUTXNwhKSy

    Score
    1/10
    behavioral20behavioral21

    • Target

      sv/a7/bst_a7bub.ini

    • Size

      1KB

    • MD5

      8909cade1f3a31cbd0d3ebd121e7af1f

    • SHA1

      82644b2342cfff25830ca719fd833820433a4448

    • SHA256

      af30be0983142a97e5706863271219dbc7b4d4a4f4210b6a13927ca2f18c5937

    • SHA512

      5232ea3af041071848592e02ae4ecaac9a1b75f913976c48f953a4eb7be504fad6d049575c154a5432ac641378ca76ef06d5f0d637a33d05bb963748daf9f69e

    Score
    1/10
    behavioral22behavioral23

    • Target

      sv/a7/bstconfig

    • Size

      3.7MB

    • MD5

      479ec594d312a344f1c5204425b376e0

    • SHA1

      8d5a13f6769da1253fb8662d0f71b24f62f3a9eb

    • SHA256

      1b788c61cfdfc2618ec9eb9574c15dc70d8e207520beed66165aaee2b7ff0f01

    • SHA512

      8d64169880dfe26082e2dd22bd79527045553899815f877b5e46b4ce870302748313c7e5fde21d535b0315e48d537c3581e17517998116857dce05a06afaacd2

    • SSDEEP

      49152:Or39Gii1G0CpHoY6ADVXcq08BB2H/PnJMHQttosMdxQ7p0U8uCPwvtWXPdXaAaN4:Or37Jm0Roxepwr

    Score
    1/10
    behavioral24

    • Target

      sv/a7/bstconfig.exe

    • Size

      2.9MB

    • MD5

      431be7f7a145c71e210449c66b5751eb

    • SHA1

      13e48e385102791004c79297ddf31007d59e5934

    • SHA256

      b0a728448da77287663a58a9a88a5cae108dc64ab5bb4863caae63f1a33301d1

    • SHA512

      1fc2dbbbf822e672c629e6ebb41d1c2f2dc18fe8a6a6d8ae9c74ee865419445860292bf245bb579ca65324395ec30192add58578140c274e0047a41560a8c4b2

    • SSDEEP

      49152:Ix6RH7A+U04lpBG+bSAolnEoud/IVyULVqlhw45ugrkAOq+zeHy/skByx6ycqX82:Ix6RH7A+U04lpBZbZolnEoud/qyUpqgD

    Score
    1/10
    behavioral25behavioral26

    • Target

      sv/a7/draminit.dll

    • Size

      35KB

    • MD5

      399e5676a7ddeb6bc7099ea57c08be77

    • SHA1

      6a339cd02cfcb660d416d0f7f125080773b95d23

    • SHA256

      81316fdd4246b3aa540ad78dd06701292252d405a62bde229649b073c992667b

    • SHA512

      37886fd8436affbf60bf51fc451cd906e15e82fd4cec88b04767a9b9a0626b1e67184fc54afae7f04900f653ea678e940de1106a3d24dd5f96c8610dd1e0eb69

    • SSDEEP

      384:MfHiV7MbAVwCbnIpmKr/ZA8wIsXGSgidgDTQAWqUTwU72ErNw6sorv198a:MqZnIp3r2Ws1WlUTXNwh6Xp

    Score
    1/10
    behavioral27behavioral28

    • Target

      sv/a7l/bst_a7lbub.ini

    • Size

      1KB

    • MD5

      e2b6e72b90724a4af15c5ad02ae696e7

    • SHA1

      e10713881c6c269bf20dc3967a680c716b5c9d9a

    • SHA256

      67a72540e40c69282f41a4c6791263e8fd471e9476babe7a5e603a9fb4456eb7

    • SHA512

      546f4c41fb403c558ac607b64a028680949d7d0c1936bbe001b228a8f8611a9f6966254460a977b83ad8ecc34fa51dab10871480ccc761b8c09bb1c6d68c500b

    Score
    1/10
    behavioral29behavioral30

    • Target

      sv/a7l/bstconfig

    • Size

      4.6MB

    • MD5

      65fb838923c3faa50bbaadf3120311ae

    • SHA1

      61f8f2aed8e855372645134c1a3ccfad8672f0ea

    • SHA256

      00837f29083536684ffa64f2a6c5aefd04e952d843f3600f7204ef09c01f18b6

    • SHA512

      d1fe934c9f73888d16ce5dea59becddbf9b93a2e53998d2cb85e58676336115d6784881a12beb650fc3a1580ff83b17f878bfed1d70a172ca7905c0e66578a26

    • SSDEEP

      49152:ozyEWSPG33fGOIBfbOVbOY4xPfX8BvfP1pKvmMNdt0A5DDXQ7K0F8rwPMLfjY/Qi:o+EWSEPu714Gw3grXKZBdQ/lF9yLsta

    Score
    1/10
    behavioral31

    • Target

      sv/a7l/bstconfig.exe

    • Size

      5.2MB

    • MD5

      468ea5a39dc7c40efd04a440c2c684cd

    • SHA1

      5294ace798cfb5f96daa539088a66fb3c5376c7b

    • SHA256

      385c083cd94c84d8c4d30727ba34fb3837d1684d4c0d03ce65da5597fdb93303

    • SHA512

      43f15358bc5f9e0f2b2be1f14f0d752809988576cb48fe29c20dbbdc6af3779734ee40a26af8bc656235be116647af95d66aa0fe304ecaf253773ee10dc18aae

    • SSDEEP

      98304:wb2yEisw5oCd5PmjEd0eNqVdjikfg+JpxeArzneMYs04/QLBB1fE2U+r45ccVGiT:wAjEd0pVdj3fDbeMYsqBjiZ631oiRm

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v6

Tasks