Overview

overview

3

Static

static

3

portable/MSVCP90.dll

windows7-x64

1

portable/MSVCP90.dll

windows10-2004-x64

1

portable/_hashlib.dll

windows7-x64

1

portable/_hashlib.dll

windows10-2004-x64

1

portable/_ssl.dll

windows7-x64

1

portable/_ssl.dll

windows10-2004-x64

1

portable/bz2.dll

windows7-x64

1

portable/bz2.dll

windows10-2004-x64

1

portable/ffmpeg.exe

windows7-x64

1

portable/ffmpeg.exe

windows10-2004-x64

1

portable/ffprobe.exe

windows7-x64

1

portable/ffprobe.exe

windows10-2004-x64

1

portable/python27.dll

windows7-x64

3

portable/python27.dll

windows10-2004-x64

3

portable/select.dll

windows7-x64

1

portable/select.dll

windows10-2004-x64

1

portable/u...ta.dll

windows7-x64

1

portable/u...ta.dll

windows10-2004-x64

1

portable/w9xpopen.exe

windows7-x64

1

portable/w9xpopen.exe

windows10-2004-x64

1

portable/w...bo.dll

windows7-x64

1

portable/w...bo.dll

windows10-2004-x64

1

portable/w...s_.dll

windows7-x64

1

portable/w...s_.dll

windows10-2004-x64

1

portable/w...e_.dll

windows7-x64

1

portable/w...e_.dll

windows10-2004-x64

1

portable/wx._gdi_.dll

windows7-x64

1

portable/wx._gdi_.dll

windows10-2004-x64

1

portable/w...c_.dll

windows7-x64

1

portable/w...c_.dll

windows10-2004-x64

1

portable/w...s_.dll

windows7-x64

1

portable/w...s_.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    youtube-dl-gui-0.4-win-portable.zip

  • Size

    36.0MB

  • Sample

    230425-rdy69aag52

  • MD5

    dff45bc3ef837f9bbea51b58d467d5b4

  • SHA1

    dd20175b41f1b1955237cb9feeab53363b213736

  • SHA256

    5642d1ae53a6dba7a084d997ca76305e40b897e90b1f7a932e08d980ea1a2ba0

  • SHA512

    6b68b160643a1e499a4946f5ebea594b754b45fe3e4ebd2234c50a0967968d290d7c749659de06e7fdc39870dab50238a2bfc0cc660653e6e74a640283b918d6

  • SSDEEP

    786432:bwuCQZWm7I8LbdHH8T/zjnCAFbNV7jy68/KKebnFsJGDWc+O6d1BuPf6:bZhWm7IwZHH8T/vCAFbNV7+nyKeaJGJg

Score
3/10

Malware Config

Targets

    • Target

      portable/MSVCP90.dll

    • Size

      555KB

    • MD5

      6de5c66e434a9c1729575763d891c6c2

    • SHA1

      a230e64e0a5830544a25890f70ce9c9296245945

    • SHA256

      4f7ed27b532888ce72b96e52952073eab2354160d1156924489054b7fa9b0b1a

    • SHA512

      27ec83ee49b752a31a9469e17104ed039d74919a103b625a9250ac2d4d8b8601034d8b3e2fa87aadbafbdb89b01c1152943e8f9a470293cc7d62c2eefa389d2c

    • SSDEEP

      12288:iUmYoJC//83zMHZg7/yToyvYXO84hUgiW6QR7t5C3Ooc8SHkC2eRZRzS:iUmYoO83W0y8yeO8L3Ooc8SHkC2e8

    Score
    1/10
    behavioral1behavioral2

    • Target

      portable/_hashlib.pyd

    • Size

      993KB

    • MD5

      b1dbd52e5da083e5b5613a2b4c17a4ef

    • SHA1

      0ed87f9e0b572f88e102739daab54db03fade416

    • SHA256

      fa57bf3173f2d636984305401c06f1618b8119fea2c311d1173566ea236fa0c6

    • SHA512

      dbe14802ff53e8fb9f35baa1c1bd0dc55c1073e0f96b59b5cc3783760e23c645cd453a39b2b4d0ab79ee871ba1cb81154a4cf5c54b67dde7ea14008d72dd2cae

    • SSDEEP

      24576:oQhOEvtEWiRLcoTUIEPmUsOE0iUadcBoO0kAB05bSpUYPGDqul:1lE74EUXrZ6O0kXSpUhDqul

    Score
    1/10
    behavioral3behavioral4

    • Target

      portable/_ssl.pyd

    • Size

      1.3MB

    • MD5

      9b59be1fa8427368c4e0e763f578d74c

    • SHA1

      7287fe431a0a67aa41e9952906759746ddcffad1

    • SHA256

      4ba198e7f53a37b3a825ff2ce4d3e6ca00ad96e62852f0127a46c57a9a4a3026

    • SHA512

      6905c5f80ff723ff79863332dd8d20d4cbbe224d355ba9b824a6f29ead62ebec16fa96ec664bdb56a2688847881a53c34459311c156f35aa887b2a808a6e9032

    • SSDEEP

      24576:SOLQ6wmWFH7Z1FLijZprcaTLqsdBzV480Z7TaYHcByzanswkS+KpPVcWDBopJJ1Q:S4wVF111KprcSN0Z7ecy/DDapJl9LAkU

    Score
    1/10
    behavioral5behavioral6

    • Target

      portable/bz2.pyd

    • Size

      69KB

    • MD5

      58c57a662cde57fea311444cc8dadc24

    • SHA1

      1c3a7b564ec9abc4172c98db7069170e50b70efa

    • SHA256

      69b4ec17de1368a9ea62313954629e1ace3f414a7eaedcedbfc79b110cadbaac

    • SHA512

      239584de4d57d8f4e92d7dee8ba99f3964b9b30cd3642a38f536dd1aec35e1747ca1555ca13fc2b872a9624685117646ca3d2407ea91d19915d2a9aedfab0430

    • SSDEEP

      1536:InfB9P4y4yhXYjrKV4S1uB8xguvaG+6r8S+f0PP8zKTiL:IfRYn04Su8xguvaG+64Zfm5Ti

    Score
    1/10
    behavioral7behavioral8

    • Target

      portable/ffmpeg.exe

    • Size

      34.3MB

    • MD5

      3e2cc00ab351ebff82baba3f4559a01e

    • SHA1

      b46ad035ef1b07c2c97e608871485c3a8b6ec775

    • SHA256

      888a6d72ec2355012545866942583bc17bd055f3aa98553557aa8e864554956f

    • SHA512

      9aec02e327239b24d3fe4d468bc7683bcac27ce4bc66679b7dc356396d18fa705167b4413b22c26b966353fa06077a66f132fcebc5a6d2be2d400f438a6cb6b3

    • SSDEEP

      393216:6zwAmnBWIFmCLlJ2AuA28IYieICwkPTq0B/XPQ0JovzU7dlztrp8JZl:6zwAYln2aiMV1pD

    Score
    1/10
    behavioral10behavioral9

    • Target

      portable/ffprobe.exe

    • Size

      34.2MB

    • MD5

      5fd550699ec3543d933e52884cbc8777

    • SHA1

      06b1e3370505ab229c50fae8f5969b318ed733ab

    • SHA256

      a73b373187b9437832d3ad76cd851aec9083e1ac18f564c7ee47335eecadd9c0

    • SHA512

      8b51b07c34a01da9d1c37f4257234851611459fba09ec5de4ee7356de11e2557f9eaa8f052c5266485d05e6aa81bba30caf6fb2f2d21b487165629a6bf695857

    • SSDEEP

      393216:LllG2sYK9jj8xhEmIu1iQY9O3jCu/ZzFYw0Q+GShHLW2CUuOlDgLw8n1nplIt:LllG21fqm8OOWYgs8

    Score
    1/10
    behavioral11behavioral12

    • Target

      portable/python27.dll

    • Size

      2.5MB

    • MD5

      b3ed66d9feb5c35b674fd3da07a382e1

    • SHA1

      bf04cda92f16c226a1250b1292e9efeae1e135e8

    • SHA256

      f25366c11e63c4912bb46bbaa60d0a98e6164ead586f125d9ed4255d04d914ae

    • SHA512

      fc8d656a407265320053c213591b4dfda720b5115857d068b587356bd686d77ef94352c1f62e0238c6df83caa53d3a5bbe8a2b6051909a19a72796c9e0a4d94e

    • SSDEEP

      49152:RpG1BkE5T3Ezr57DfqPRHfVX8dswLmwbr5oLEdeOPln4MdWHFdtSIqOTDjl+ey3e:W17HfVX6sAmwX98Q4MgHrt7qYZF

    Score
    3/10
    behavioral13behavioral14

    • Target

      portable/select.pyd

    • Size

      10KB

    • MD5

      efb6435cb9fb6462132181738c729885

    • SHA1

      0931e3aa2682fdf676b9b6009e8ca8f92f014e7e

    • SHA256

      039981e17c2eb88cb2d08e50f2d323027e27683a7b3b3bc042e76fba40d34ab2

    • SHA512

      6d7ad34390579e98cba75dfdbd3ace5af26ddf7f62675e33a29322911e94d1382ea84c8483265644866384ead64ffa55a1a0dd7c6d0787524fa972735f44f015

    • SSDEEP

      192:qd35RZ+QmbQNw7MPDNqcSUMkDXUnv3XDVR6ycXc1U5:qd35nLiAPDNSvGXoPzV5mu

    Score
    1/10
    behavioral15behavioral16

    • Target

      portable/unicodedata.pyd

    • Size

      671KB

    • MD5

      a13020f231b588d46aaf82fe9314efdc

    • SHA1

      fa43858266fbfa564e98fba78f7e8634659f2dfe

    • SHA256

      426d241e6480cecaf55a23ac686311a362548377edcfbfc920ac4cfbe3ea479c

    • SHA512

      ed759afde4cf4960f059162b945c5de0e8270780004309c85093684ebfba93cfbb6e642e9db667ed852e8ceaa8c7c4386ff303db08713af4b31a4eeee45955f0

    • SSDEEP

      12288:N/373AxoMPBt8FpQsVdFiI5mZMPXubUxktwd:t3TxM8XQsVdXSPAxLd

    Score
    1/10
    behavioral17behavioral18

    • Target

      portable/w9xpopen.exe

    • Size

      108KB

    • MD5

      e4c52c1a0d67a12eb22417264c8e585d

    • SHA1

      d5522448825549c924fb5610502ee169c174a223

    • SHA256

      243c34e56805f87f0254d59826fbab1d062da19308644046a3a92997d86d0bdb

    • SHA512

      7bf6e4ec0812cf8366cb30bd3d47f458bd91a57bea9d61483fa3d44c7706c0790298cfb8f897d93b20b7e0547658e02696edcbd63a0cab347d13a7c792d785c6

    • SSDEEP

      1536:p8cRe9po9Me2JBAnTJTfla11vg7X2X2L+8JiYQM8ohdpr19++wukg:Sr9nJBcflaEJia/19++19

    Score
    1/10
    behavioral19behavioral20

    • Target

      portable/wx._combo.pyd

    • Size

      174KB

    • MD5

      75e2bf22726d0f35960df2cc41650ca9

    • SHA1

      bf163c6f8fda50efb2507b461bfaa43a004eb61e

    • SHA256

      87aab7fd3b63cad3a0366ccb114c5651d71e30f742c1e94753baed55ca41a123

    • SHA512

      85cc3263735ac3d2beba0764ad896d453176fa46efed22d9fbb2732233ac30d753eef1ba1b9da376b00e75d5a266a7b08c71d02345c9f7546dbdbcaf4eab00fe

    • SSDEEP

      3072:7+KSttdSd9bSNhoKtlYCKylHMedythsPn78SSFTS2h/Syx4KgoGhpjWAdSt4NgWS:7+KSttdSd9bSNhoKtlYCKylHPdythsP/

    Score
    1/10
    behavioral21behavioral22

    • Target

      portable/wx._controls_.pyd

    • Size

      1.0MB

    • MD5

      95b25cf88488dde0e57cf51e1676f896

    • SHA1

      a56fcdcb5349ac2a9c797bf579c5463c2a4bc008

    • SHA256

      18033042a732d06eff3ef05917167e8f7337c159a053189436902be141171b3d

    • SHA512

      950563eabe8260b9e26eb9bfee6dadd11fbbb627ca0c59cb32448dd3e0bd993e23e01a31c60113154081f4b0bce1309a264d27326f791efcf611dab965c1b254

    • SSDEEP

      12288:io1GAX5Sa3rNiWzj5MdGH/1gx+Ner07tXlw9eZoygsVd:nyGVlwQZo

    Score
    1/10
    behavioral23behavioral24

    • Target

      portable/wx._core_.pyd

    • Size

      1.1MB

    • MD5

      0ab6486f7a1413ba49ed266e5c7e16f0

    • SHA1

      4aeea7cb33b2c21bb79d8e4a0a65732801a14642

    • SHA256

      ddefef06b778f43939ca23551eda10196e9d256ece0651e234429ff09c8bd0d7

    • SHA512

      ce832b37e3d5114cecfbe78a53bd4fe7a55bb6ff98ef9df88053246979c20bdc1285821ecc42d242a37ba539e6c66a04862fc8e3f52cf2bbc06133a6e1a4e515

    • SSDEEP

      12288:UrjyGDwPJvPQjVJXEKSQQ19XbHGKb+6bL7rbL:EyOwPJvPQjVJ0FQQ1FrXb+

    Score
    1/10
    behavioral25behavioral26

    • Target

      portable/wx._gdi_.pyd

    • Size

      787KB

    • MD5

      092ff91d310da2e7ba61d31f1c2cd29e

    • SHA1

      0e244348d2722deee8acd2c9cdb6c561ce475f45

    • SHA256

      568e2431880c3aa223962da2e71b6e2b771cc6bfd2190e555eeb107350a0cdb9

    • SHA512

      24bdde91782b5cbe341b3a301cdb61bad2a3cb8cec44e2ed5af9e6681fe2b948540dd2d4860d628e3b6f54d1517bac92ff0eab2c97afdee199c56e5f914da64d

    • SSDEEP

      12288:kK9HzhHKvHwpUdp7mm2k/ok/Oyciy4RuAeCMrQVE1SDWJNl+WmMi:jVdKvHwpUdp739tuAeCMrQyWWJ

    Score
    1/10
    behavioral27behavioral28

    • Target

      portable/wx._misc_.pyd

    • Size

      716KB

    • MD5

      1e4649cb160a03697ae1e61b0b6cd981

    • SHA1

      2e5152cbc7460ab55da7c2538e8d18d203bf2c0e

    • SHA256

      abdfc5cdb1ef9b634162c415fc03b1d4cf715341939a43c30ead2ba26602a96d

    • SHA512

      be6702db41712987a60a6fa1146dd8078c00cb4a2dc81c72989851b5705ec938fcc9b016d79556eb6851d7b539b436b5fefff1bfce9484e4d7634c95852149bc

    • SSDEEP

      12288:Jah2oAI8lR/6X5lVetx5A3tQdZIL3RtFihI0Q3DMLJI:o2oAI8l0J5AWyQ3g9

    Score
    1/10
    behavioral29behavioral30

    • Target

      portable/wx._windows_.pyd

    • Size

      797KB

    • MD5

      98566a15d4d5a95c7490e5b0fe11fb43

    • SHA1

      e0f2b0dc93396e6616b09b391c4658d0bb6a5a58

    • SHA256

      c21d6096a7aaa0ec8bf39ebe97c8e365e57b24717a13ba88e8e42f5625257549

    • SHA512

      dad5566d6252a344eba654b001b3349bda7759a93a7515e8ed55e47b8c88ddfe65198ef139b63c669b419e15ffea9bc6ee0ac5f899542e84166b24c09c2db6ff

    • SSDEEP

      6144:5GSP3XepvKqY3nwyTQQD8PDzXQ2ysSDY3TmFGZ1SmakETALtPu9B4yT0kuTpQV7L:5BvXe0qY3nwyTQQD8PPFiUanpKCGG

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks