Overview

overview

3

Static

static

1

F0nts/Plug....0.dll

windows7-x64

1

F0nts/Plug....0.dll

windows10-2004-x64

1

F0nts/Plug...64.dll

windows7-x64

3

F0nts/Plug...64.dll

windows10-2004-x64

3

F0nts/Plug...86.dll

windows7-x64

3

F0nts/Plug...86.dll

windows10-2004-x64

3

F0nts/Plug...pf.dll

windows7-x64

1

F0nts/Plug...pf.dll

windows10-2004-x64

1

F0nts/Plug...re.dll

windows7-x64

1

F0nts/Plug...re.dll

windows10-2004-x64

1

F0nts/Plug...ss.dll

windows7-x64

1

F0nts/Plug...ss.dll

windows10-2004-x64

1

F0nts/Plug...om.dll

windows7-x64

1

F0nts/Plug...om.dll

windows10-2004-x64

1

F0nts/Plug...el.dll

windows7-x64

1

F0nts/Plug...el.dll

windows10-2004-x64

1

F0nts/Plug...pf.dll

windows7-x64

1

F0nts/Plug...pf.dll

windows10-2004-x64

1

F0nts/Plug...pf.dll

windows7-x64

1

F0nts/Plug...pf.dll

windows10-2004-x64

1

F0nts/Plug...ta.dll

windows7-x64

1

F0nts/Plug...ta.dll

windows10-2004-x64

1

F0nts/Plug...on.dll

windows7-x64

1

F0nts/Plug...on.dll

windows10-2004-x64

1

F0nts/Plug...ns.dll

windows7-x64

1

F0nts/Plug...ns.dll

windows10-2004-x64

1

F0nts/Plug...ms.dll

windows7-x64

1

F0nts/Plug...ms.dll

windows10-2004-x64

1

F0nts/Plug...ng.dll

windows7-x64

1

F0nts/Plug...ng.dll

windows10-2004-x64

1

F0nts/Plug...gs.dll

windows7-x64

1

F0nts/Plug...gs.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1fe9b5742e7afbc73a48f18fa0f479a4.bin

  • Size

    35.4MB

  • Sample

    230423-bhhgasbe4s

  • MD5

    1fe9b5742e7afbc73a48f18fa0f479a4

  • SHA1

    32e972167e485ab7ad99cef817eb254dc10c1328

  • SHA256

    506da932f06c1b88ddda7133a5a0711254f24dd6d7dd2ecf4ecdd3c4e780a307

  • SHA512

    f3206994426af4697c991971185a7a81a83cc9cf79d2a3f8287c6f4b85d51da8e7f07f178c8d0e8a2027f121acc36f1a4b842e89f477fe73ec3667ed6a788120

  • SSDEEP

    786432:JhJBDNiplHoEkIlud5hlMeNBplHlZXrJlIjdM1/hVlr9CEtjC8kexfgdkeiePc:9f0HR9lEB1JHr7JoM15VlrgEtSdkebPc

Score
3/10

Malware Config

Targets

    • Target

      F0nts/Plugins/libs/revulytics/ruiSDKDotNet_5.5.0.dll

    • Size

      35KB

    • MD5

      e193ca1087140964f067d6080dee0524

    • SHA1

      a2de4647dfa53d97713a0bf92ccf00dc42cd3a76

    • SHA256

      cf8008e21c579aa7d85775fd3d8834bf5169d21c42cf45a658960dd5ddc81cbf

    • SHA512

      c9bbc03b4133abc08c18a363afa2917a25a830b52de763b0ef5b9c93ef9c9ba5146108437e59ea7d21d6a6de2bf35af12b0607c3ef2d150c9fa81ef0f759d942

    • SSDEEP

      768:yLHMpVV+3fznMubsXiJjwpZFiktxPTNmo3cG/ttTIY8GV0G8:yb2PYs1R3cG/ttky0G

    Score
    1/10
    behavioral1behavioral2

    • Target

      F0nts/Plugins/libs/revulytics/ruiSDK_5.5.0.x64.dll

    • Size

      991KB

    • MD5

      952d5953b1eba13d08f4f47a872be3d8

    • SHA1

      9519fb0fd8d5da4876d128d15e0e443f93d81f5f

    • SHA256

      ccc36d32ff08693439efe53112a196e5b22c7fc92f23604c3ffb8224554eeff4

    • SHA512

      2ed4b0f65b24974dc58c44806130768940d05dff9e444ab40c28de1731547bc6c96445c324dcee864394b107d742507b9eccc4723cd8ea8b3f2f971f08838ed2

    • SSDEEP

      12288:jF/GT3B4hhkZFn8VYASc2DFbp0/ULZYwa/nVWTwaJ6FRjX8jW:44NFScVAZYwa/VWTwaJ6FpX

    Score
    3/10
    behavioral3behavioral4

    • Target

      F0nts/Plugins/libs/revulytics/ruiSDK_5.5.0.x86.dll

    • Size

      754KB

    • MD5

      f883c90d9c7f3e78aa198e04a87ae709

    • SHA1

      b417944bc976ba1e60dbfeb803d25e73bef20872

    • SHA256

      947940a221666fb066cd7e795ffa1ab868bd77e8fc0b06c9aec61a99fb63d00f

    • SHA512

      2e46e42e6bd1c6f90554c7523047bd19bec8238d43636ea600bd4d9602d549258cc5ef69fd2c9f2d3e38dbef6d398f28ae160486953ce9296967d1abd46477ea

    • SSDEEP

      12288:bNOa/XnNTEFk9I+9wMmhXvoXbZO8AbdGfOMmJZmxssN5TfneYQfD3w:Mae8I+9HhO8AbddLjSssN5Tfw7

    Score
    3/10
    behavioral5behavioral6

    • Target

      F0nts/Plugins/libs/sharpvectors/SharpVectors.Converters.Wpf.dll

    • Size

      83KB

    • MD5

      c84a6ccdff94b4bdfb84530fa2b2eed8

    • SHA1

      d6ae74e1e0028b941a5cfd60921ee9df421c0398

    • SHA256

      5886e52b5213b13d7573e6ed10e3108cab5e3f034e0bc77ab2ad6dc855a1b428

    • SHA512

      bf9512d16101c089db37d8277e290368bef1e5b8e68a6c48ffc7bea3d7cdf7f3bb427dd19e5e360d08efe15ef2d33dfea83dd2024d318a95330277cdb14b06bd

    • SSDEEP

      1536:ZgEFHmeA1uhe2yPoff6UvMj8yBZJ4i1G8r8pLswr:Z/FGeWhRQnG9Q8rgLswr

    Score
    1/10
    behavioral7behavioral8

    • Target

      F0nts/Plugins/libs/sharpvectors/SharpVectors.Core.dll

    • Size

      104KB

    • MD5

      f45f093d5188ba1da264b16b29b5ee6d

    • SHA1

      b7e0b722cc1e961d8e9428418afe2a4553544060

    • SHA256

      ccec1da0815426db030ce5fe791af8cfd7d61de6e097277436f7b176b4161c15

    • SHA512

      53c6dc326995979120de8a6bf4f0cca7aa35f78c7f86bcffeaedd7deeda0a96ad4b4b20fd98a8a9b033ee4a1c12d98d3b592d769f37fec73a9377dc5c5358e7c

    • SSDEEP

      1536:41gNlgeDfL1aFyf41ffl4lLUVTnT3psWvZniz4m7F06FEyXMSOEteGP:4euezEQ41ff8eT3psWRnizV75OijP

    Score
    1/10
    behavioral10behavioral9

    • Target

      F0nts/Plugins/libs/sharpvectors/SharpVectors.Css.dll

    • Size

      76KB

    • MD5

      d3edfa206c422b10e6dd3ff321841eb9

    • SHA1

      eb3a04e12690c934e4ecec866e0314bdda027350

    • SHA256

      a7b4c331c1ce0d2feafb67f210811367e8a128f1a6da4b57190ccd5013b29b8d

    • SHA512

      88afbc3f75029bf2414698b109a9cc317df65893efbfd75a6f29c8dc73a467bfddcb4bb58de4daa8be123ac3c9b0425414e9c43fb39d2ba24b7b6f93deac3176

    • SSDEEP

      1536:hnMj/O7Ym8lSKfTIKYoWZM29Enlp3lxB8jm16yCzR+RHK/08yXkkkpDVtYn48WyK:ui7YLlSKfTIKYoWZM29Enlp3lxB6m16f

    Score
    1/10
    behavioral11behavioral12

    • Target

      F0nts/Plugins/libs/sharpvectors/SharpVectors.Dom.dll

    • Size

      44KB

    • MD5

      95b569ee8649476e5e0ecc0c2dc4c1cd

    • SHA1

      a8bc5d719835d644bb9f17a117b3efac4954090a

    • SHA256

      e949bad16384f362d7b1bbedeb38d69e4e74fda37a5dcf1a32575d5ee2877355

    • SHA512

      a49a3a40ad20612e4b741e6627d0e00218451f351a000e40c5701287649a837365a818c152dbd92059655dc3fce5251cc46c00ccc844524bc179ea40f0043abe

    • SSDEEP

      768:xwnkTjAYcCH0TYC9SuuN9nwN30ocoijQ2SsawqD4bQWdUWLOEX0L:aij9NlGhtEXQ

    Score
    1/10
    behavioral13behavioral14

    • Target

      F0nts/Plugins/libs/sharpvectors/SharpVectors.Model.dll

    • Size

      988KB

    • MD5

      fdea6b18984caccd01394f95921e54af

    • SHA1

      b95965c0224a1b6311c2b7dcb3db8bb1422b198c

    • SHA256

      8cf1378a74fa3638edc446782dedede857cf13ec026e2c109b0055c3f0ba17c9

    • SHA512

      06a67621b3e12448a1cc2c62563613cdedd1acd04168cab74efec0ee3b7b4576525c7790b823e8fd255e2ef7f82adc07250742ea82d94d4cdf43bf2bfe7a8d03

    • SSDEEP

      24576:GgOXKcDWN1btskZprso7pFeqZN1TfQh51lSuPZlVsAJ5XEjh5KNvkNsWYgyN1mXO:GgOXKcD

    Score
    1/10
    behavioral15behavioral16

    • Target

      F0nts/Plugins/libs/sharpvectors/SharpVectors.Rendering.Wpf.dll

    • Size

      109KB

    • MD5

      0970c1067423a1a03ed84edcff5fa31f

    • SHA1

      62dd9c97bcd5992bbfd48ceb4c7f9b052b7d6f7e

    • SHA256

      6cacbf7ff5ccb67ffb39098e534f9bed066ad7627c13f464e0beb5c76e68279c

    • SHA512

      0410cfca330bb4f5795bd97067f4bc5cf091999b3c0a29c44396791d39d45109435c5b27141bdd148766f73e5997c3950663d22d780e3f3210c29523f4bc9f61

    • SSDEEP

      1536:GwBze2EaZTNdLjlSlKtBCLo1RtOatgC7EMEUQs4S4zXDFNcmJFrRqKJ:7BbFZTN9jlmGj5ttbQsgz/JF9q0

    Score
    1/10
    behavioral17behavioral18

    • Target

      F0nts/Plugins/libs/sharpvectors/SharpVectors.Runtime.Wpf.dll

    • Size

      45KB

    • MD5

      b00983fce519793d6b6155eba630470c

    • SHA1

      241eefab6f53d7cbd85fe7b45cba874e9bae6136

    • SHA256

      581eb994c0335faa1d6a3d4bba66d3a4da187d708fa084e85aca6354d8035351

    • SHA512

      c74e8822918dd8656aac23ed059e5ec72be9a6211903993edd3452cd954e9b9684803a46b3b395e92a0658c381142eb6ec783db1adea994085bab81037e482d0

    • SSDEEP

      768:bp34FToQUFJJJ96+dXVlExM08d+6W32IuH80QJbzwVpf+O:bt4fUfJS+dXVl86W3XHVwVp2O

    Score
    1/10
    behavioral19behavioral20

    • Target

      F0nts/Plugins/libs/telerik/Telerik.Windows.Controls.Data.dll

    • Size

      340KB

    • MD5

      0a65c846f2094e1525b0b47b874d9fe2

    • SHA1

      9aaba578bb246bbcfe9a9fd472c789aff5965332

    • SHA256

      24ecfc32096603cec49399c9f982c17e2a8ce33a9221e73e75a742d23e6bd5bf

    • SHA512

      4c2eee130c864d8f706f55fc18c823d94f2f6d2eec55d255b25510ca991e32ce5cd7e3b825c2a3a3a222dca56e93d058acd9ec67dba5fe4b02c0e2312dd5740d

    • SSDEEP

      6144:eDfwXHEF9uZ3GSrf5V9LkgK57UCvunRJwJySpqZ:lpwIZ

    Score
    1/10
    behavioral21behavioral22

    • Target

      F0nts/Plugins/libs/telerik/Telerik.Windows.Controls.DataVisualization.dll

    • Size

      2.2MB

    • MD5

      38c290b1b6044088570dd5123a51a903

    • SHA1

      61e3be209d12a1756a1bc979bd977833c97b6898

    • SHA256

      ba1953e3c82750602843de45d0a6204187693af594beeaedbec0d8c2e4b85306

    • SHA512

      67b20e518e4f51e5b540debfc54a62dbfebb02320017175ef73b66b4f2934d4541e4c6d05840ef3a33ad90502d51cda10d09b449e104866caa76e74a3bf8a754

    • SSDEEP

      24576:Z/KGKLspVYZT5bW+0etVdS3SPrFNYbumF2x0IeCh7G:Z/nP7YvnNzx0IeC

    Score
    1/10
    behavioral23behavioral24

    • Target

      F0nts/Plugins/libs/telerik/Telerik.Windows.Controls.Diagrams.Extensions.dll

    • Size

      252KB

    • MD5

      f59ab41392799635d894824d3fb32b55

    • SHA1

      a9993759174dac7ff87b4340aa9472b49a400fd9

    • SHA256

      f42b183f8b15506c9929aea59697ea35115951567cd82cfd9f63b3def614c2b9

    • SHA512

      6d453fbbb1b8e6af4be46f02d9bccebc40cbb4138466855348e440301ec2ae0451b137e47c27d54eeaddf1ddcc480504717c839fd022a61879cf675efa0bb78a

    • SSDEEP

      3072:xRw1prz0HSKX4ye4bqNokv9VdBl/JI/F0MOPXEJKHaln1dkPwetSZO6vMPsNJfyg:bVbquwPcqXPSdwMMPsNJfV2mKH

    Score
    1/10
    behavioral25behavioral26

    • Target

      F0nts/Plugins/libs/telerik/Telerik.Windows.Controls.Diagrams.dll

    • Size

      433KB

    • MD5

      7c38b6dbcefb9c703fba39020302b5e6

    • SHA1

      669d332816fb0abd6676e2f4ee625efe06cef734

    • SHA256

      077574c693ac80c20b8c631f7c554240cb71c9091f1b316a82e38b1ac4d5049f

    • SHA512

      8160d1bf43ac33c4d8c499f1cd809418ec8a9a429aa8fa17f060f90c90239e9676cd866503f1e07bd9a758f8af397f857236706e27dcfb8125b78cb29339148b

    • SSDEEP

      12288:7zlCxdlzkvfgixO0tlgga9aIRYQy1+3QhAD0xJFWP:vYkv4UO0lgDQ

    Score
    1/10
    behavioral27behavioral28

    • Target

      F0nts/Plugins/libs/telerik/Telerik.Windows.Controls.Docking.dll

    • Size

      232KB

    • MD5

      9a20e941f29360b7d0fb504d7919a904

    • SHA1

      25825365d26a91bc6ebbe0647392a5d9b5540679

    • SHA256

      1e6df4be21deffbf8039b7f9918256698d248a4d0908d9b39ffc76c8f789d4a3

    • SHA512

      fb83c48929b8b22abe558d549a3239433acf67d8db0a08d2505ffc46f6b2b8fe74d1ef8824f1e94d7ceb0926d27843e5b29f8b4fe701bd544701a7a23657a5c4

    • SSDEEP

      6144:kAFgWWyoll3I+Q8wYb82WSyVBHuW8DfgYzDN:zR+RnJSALN

    Score
    1/10
    behavioral29behavioral30

    • Target

      F0nts/Plugins/libs/telerik/Telerik.Windows.Controls.FileDialogs.dll

    • Size

      230KB

    • MD5

      e153d726a0d2fd3976364d74ef5d1812

    • SHA1

      7fa478ebc45fdec71cdb524680f143864161482a

    • SHA256

      60db547fc1381db61c277bd63fb538f8cb10934785d2dab6c33bad5e1a82d05a

    • SHA512

      c3ea4fe1df0f3ba4e8e4fed9b24984797095fdc4b20a791aec487af13a8955b3dd65cf065f4b93dc70fd1f535d1a97b144eafb9f9f931eb1e2103611c797cb22

    • SSDEEP

      3072:wo3vKFoJEoo/9CwMf7s0YVtj2jJeYye3s+kcTSoTZWMSbGNwESn5CA0/qZDv6Tc:wQvKDQwK7s0ot4zPIMSySy/qdv6

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks