Overview

overview

7

Static

static

7

7cd4618ad8...f3.zip

windows7-x64

1

7cd4618ad8...f3.zip

windows10-2004-x64

1

PanData/aria2c.exe

windows7-x64

7

PanData/aria2c.exe

windows10-2004-x64

7

PanData/sc...on.dll

windows7-x64

1

PanData/sc...on.dll

windows10-2004-x64

1

PanData/sc...rl.dll

windows7-x64

1

PanData/sc...rl.dll

windows10-2004-x64

1

Pandownload.exe

windows7-x64

7

Pandownload.exe

windows10-2004-x64

7

libcurl.dll

windows7-x64

7

libcurl.dll

windows10-2004-x64

7

lua53.dll

windows7-x64

7

lua53.dll

windows10-2004-x64

7

node.dll

windows7-x64

7

node.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    7cd4618ad829487c038ccd9aaf63951494147f796c00e280fcf9499c32b992f3

  • Size

    14.4MB

  • Sample

    230418-ysw4rsdh69

  • MD5

    039b7dc191dbed1a217de7bc7317d106

  • SHA1

    fff4ffeff8f72047a446aa567959358000863ec8

  • SHA256

    7cd4618ad829487c038ccd9aaf63951494147f796c00e280fcf9499c32b992f3

  • SHA512

    4c02a0a5d54b4132c347f836565722b373ae0210c423d7a967bc7a836f115b4a57ef6f62198dd875ffd5748cf80a35921178608bf8c651e9b7f313246503b2ad

  • SSDEEP

    393216:EaMrxThtb14qk72jhp2ZCxHZUlDpAWNXTlB/kzcpnV:EhFbNk7A8+H0VZTlB/npV

Score
7/10
upx

Malware Config

Targets

    • Target

      7cd4618ad829487c038ccd9aaf63951494147f796c00e280fcf9499c32b992f3

    • Size

      14.4MB

    • MD5

      039b7dc191dbed1a217de7bc7317d106

    • SHA1

      fff4ffeff8f72047a446aa567959358000863ec8

    • SHA256

      7cd4618ad829487c038ccd9aaf63951494147f796c00e280fcf9499c32b992f3

    • SHA512

      4c02a0a5d54b4132c347f836565722b373ae0210c423d7a967bc7a836f115b4a57ef6f62198dd875ffd5748cf80a35921178608bf8c651e9b7f313246503b2ad

    • SSDEEP

      393216:EaMrxThtb14qk72jhp2ZCxHZUlDpAWNXTlB/kzcpnV:EhFbNk7A8+H0VZTlB/npV

    Score
    1/10
    behavioral1behavioral2

    • Target

      PanData/aria2c.exe

    • Size

      1.8MB

    • MD5

      6d1fe9171538df42e013e6ecf330ec48

    • SHA1

      a85203e77419c484a4434d56f96a0404b73ec588

    • SHA256

      ef342516f4e2c211cd70cef033e558d598229c75e39292b668ae4ea7bf09eafe

    • SHA512

      6603d1a60aa610c3269f9592877ef1a56f4dfe0f2496c017434ae1074fe8c3d0348386316129607d5dc09af1e7ae35f67e12fd72131652dc95e308b5581e1fbd

    • SSDEEP

      24576:PmJskgkn52UNo5xIoWyKhrYpnVSusT/r8f7qcSeKHY9w8YH+K36QLiSxGJ08liXX:eJ3NmPxJu311YwLeI6C2aAxbk7R8E

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      PanData/script/lib/cjson.dll

    • Size

      74KB

    • MD5

      fa97a5abbaf3cd898f1d3d6f13f172b2

    • SHA1

      7fbeeda68c862c20ad6609e89384bda1e46d109d

    • SHA256

      a91373899fb900fc474c0970efcac8bd2042723f19556915d76c62554013dc72

    • SHA512

      29aad07740afabbfc6b6eef618a9b1d0d9a1d44c9a318bdb36770d01e86f5eaf4d393626c1e2e652e023f476359f360b3e408f577bf3c203062f7e1669097dd4

    • SSDEEP

      1536:LfxKTPVu81gTxeS4DMPyJqwRUbXGGQmKe7StJFEw2mP:gB24SRSYDKmKZDEw2m

    Score
    1/10
    behavioral5behavioral6

    • Target

      PanData/script/lib/lcurl.dll

    • Size

      82KB

    • MD5

      a99d3aa45356ce3fa2e3e49f539b8611

    • SHA1

      4abca01699730e07c6f01c07f80ec310f8adce3b

    • SHA256

      ade2bb29740171f33b7ed1e1d90eca497e410e9f189826784de9896eac436802

    • SHA512

      1631533adb01257a42e9b144b7e78af26f896b4363e263b237ce5b47a8636182f5b1eed4fe02a3d81af44e2ced18f2e410d741fc266178abe990faa86211b867

    • SSDEEP

      1536:GEpufnB0Sa+Au+QOYYfxmVodeijt/YkdQDw5mYX:GEpuPB0/+5+QQ0VodeipoDw5m

    Score
    1/10
    behavioral7behavioral8

    • Target

      Pandownload.exe

    • Size

      4.9MB

    • MD5

      4c323f8066e19b08f06bcb1e395634e8

    • SHA1

      b6b3c321bea0d26527515a31980a13bdc4b630b0

    • SHA256

      0b0d56d433f51c04e32be10d91d21ad0c1622a64f3e9ad4a004fc0064eee4581

    • SHA512

      fb0b16dff1839bbf389176d3e7f999551795a4f19540d371cff04719a3e5ecbec7969f8512587c91ab784d42750286acd200fc57b9592722b09d49ed154aff51

    • SSDEEP

      98304:x/SfYmicVIY7k0q6zsMJqCWvANcvwrOMw9K/XFWQqBAT+nq4:IfnicVH7kx6zsMzWKcvwg9K/XrqaTy

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral10behavioral9

    • Target

      libcurl.dll

    • Size

      346KB

    • MD5

      ad451a14bb15e5ee30f56a8dc9fb6a07

    • SHA1

      d0c060be8cc0ba349869b63d5222adab2d94d904

    • SHA256

      e0f702c93f06ae10be5bd01009a9e599136edc1ae944bd577157865b3cdd707c

    • SHA512

      b27d652eb2d0c86323bdec36682d0e263fe23e592f00356a1cd426b4607e31e75bb240fa5b494bb7afea182802980012e853b1bfd9f1322f105d7cd91f4c7a8b

    • SSDEEP

      6144:d4BmzNj8QMkAFYhKBMaTOSnPBymNYQ/3qDI9O5IMUbkx27TBsxf:mc58QMkuasOSnpymiHI9O5IMUAATBsxf

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

    • Target

      lua53.dll

    • Size

      213KB

    • MD5

      977ae7186da6ea5cdecb2b125bb0a68a

    • SHA1

      a5fca7cee9ae41a4254075eec32046e40761f4f4

    • SHA256

      2b111762ce61df2732dce97d9de2dd18d6bf1924274a183fd681f1d585f0ca19

    • SHA512

      258e0b3820f0343e63e685c185e2dfb8fc0c8ab7749c4fd3f44f439fd38e2c2d197181a13367c519b86ba9b1a21c94b56b218a847222ebf633772e0aee55de94

    • SSDEEP

      6144:FvKKM0YZ7M0NcCQaXEkXiFeZL7AdY2yBcnhS:JhnOM0vQaXEkFKHQcnhS

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14

    • Target

      node.dll

    • Size

      8.1MB

    • MD5

      04a4b044c29d2e53d4dc5744d19ca974

    • SHA1

      dd29c0e95933f4c359eb83b495c96dd52362d9d2

    • SHA256

      30b85e314bba93c4fd977b1c986d65e24cea08ac8db34c3d8ef1dbb940490667

    • SHA512

      66c5d56acc1fa319b54a8a7ce682dc2babc29cbb885764033b9ac83ba906189a3ebc9eb3a081f6f04470513b5bbe02043b3a7e8f29e7d7646bd9e123a9187bc8

    • SSDEEP

      98304:n5LHoFAEa4PPzCGnNDTm7TLeZbhMN4tBhdBqOFSI9mvexS6KNGYTudCC2spOLNbI:n5LH0hjJnN2wkkB5FrM6KNDAe+ORa5

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

MITRE ATT&CK Enterprise v6

Tasks