Overview

overview

3

Static

static

3

main/KBMPDAZE.dll

windows7-x64

1

main/KBMPDAZE.dll

windows10-2004-x64

1

main/Setup.exe

windows7-x64

1

main/Setup.exe

windows10-2004-x64

3

main/bin/SyncRes.dll

windows7-x64

1

main/bin/SyncRes.dll

windows10-2004-x64

1

main/bin/cdosys.dll

windows7-x64

1

main/bin/cdosys.dll

windows10-2004-x64

1

main/bin/comctl32.dll

windows7-x64

1

main/bin/comctl32.dll

windows10-2004-x64

1

main/bin/comdlg32.dll

windows7-x64

1

main/bin/comdlg32.dll

windows10-2004-x64

1

main/bin/fms.dll

windows7-x64

1

main/bin/fms.dll

windows10-2004-x64

1

main/bin/mlang.dll

windows7-x64

1

main/bin/mlang.dll

windows10-2004-x64

1

main/bin/msimsg.dll

windows7-x64

1

main/bin/msimsg.dll

windows10-2004-x64

1

main/bin/msprivs.dll

windows7-x64

1

main/bin/msprivs.dll

windows10-2004-x64

1

main/config.dll

windows7-x64

1

main/config.dll

windows10-2004-x64

1

main/helpinstall.dll

windows7-x64

1

main/helpinstall.dll

windows10-2004-x64

1

main/klbdax1.dll

windows7-x64

1

main/klbdax1.dll

windows10-2004-x64

1

main/lib/libctvuda.so

ubuntu-18.04-amd64

1

main/lib/l...a.so.1

ubuntu-18.04-amd64

1

main/lib/l...a.so.1

ubuntu-18.04-amd64

1

main/lib/l...212.so

ubuntu-18.04-amd64

1

main/lib/l...ore.so

ubuntu-18.04-amd64

1

main/lib/l...ode.so

ubuntu-18.04-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e7504df9a40b4650d39a7acb70db1c1.bin

  • Size

    1.5MB

  • Sample

    230503-bx7dzafa5y

  • MD5

    4e7504df9a40b4650d39a7acb70db1c1

  • SHA1

    6665fee8526623f2b7154c7a06aee3660b25c0eb

  • SHA256

    9743ae9adc4127c6f54779a8aa609cc8c570c8f794899303e3f7737554389ebf

  • SHA512

    f670198d243a69a527d791674d4e788f6b157367e5480063d6aa9fd0330b5ad53258bc00b65d6bc3888f5129ae6c241ccfb6672ae2f2310f3f63d67c11f7acfa

  • SSDEEP

    24576:he+vqLqyqE+wTVSOcQ3pMazmrY/vXfr6ojVg4bhpDHnwWeGlDPGSoXf2rY2XIOzG:IzTVSLDI8O/fO8ZxnwWflomXzdg

Score
3/10
linux

Malware Config

Targets

    • Target

      main/KBMPDAZE.DLL

    • Size

      24KB

    • MD5

      adf3325ac6ab25391042e7b63acc21dd

    • SHA1

      490b9cec0d6fd656fb41bdb924a7814d3a6a991c

    • SHA256

      6461a6c799df7132fc90e24357ba7a8a3f1ea4e70dbb953de59c9601454b415e

    • SHA512

      44789a035f5cbda4fbaf67df7c213ce6bb4d139626a2139abcbf93c3b5be352d939216f220ec38e7dc9e7a900766ab66d52bf6d7136b3e51f8cba461dd52f202

    • SSDEEP

      96:rM+NFyw+Y6V1DvI6IRq+3ObApi4nj35VWj6Wwuvv:rxNd6fEt4+3kEfWj6Wd

    Score
    1/10
    behavioral1behavioral2

    • Target

      main/Setup.exe

    • Size

      859.2MB

    • MD5

      a2696efe9a61b9e7a9380fa474cc7659

    • SHA1

      8db917fb8fbac9aa0952feb1d28a924c2835cadc

    • SHA256

      d6505fe885be9a002eb25a413e04202249be6ed21772bab3c7689c7a7d222a01

    • SHA512

      3a23daa38f18ede4494a8ea716242023fddecfde507530939f0c1814a6bfb8f04685df091a7046efe47cb18c517fb601b789cd54be8e718ce65d68f1d64a7389

    • SSDEEP

      6144:1knPtg4AbgA2/+icamxzphW1VlOEeZJnpJrtZxGk7Em7fAGSrp:1y1F3A2zkzpOMbrtfGU7fSN

    Score
    3/10
    behavioral3behavioral4

    • Target

      main/bin/SyncRes.dll.mui

    • Size

      31KB

    • MD5

      39fb6b3491c42b5a6582176ea0cab8a6

    • SHA1

      022cb444b87e336bb06724ca7956d1aeb72948c4

    • SHA256

      6141d5c7dd9b200a99049793cd47c065b5b62a345a99136fe6841ccefa9d0fd7

    • SHA512

      33fe8f9d6dd51a88156b3ca834e8a4b1a3bf2faa5ae28e771d468b0d256f7929ceeeea66e5639965701a96a2798a5d037a9f5de0b5425d9923ce723c3dd9a267

    • SSDEEP

      192:qqnnNWYjbIGhI5EB7d4EeZSsBGGSAMNyi1V4ylUIM52fdf0/tYETh7W+FD:tnMYjr5eZSsgccdV47I62fd8/+ET1W+B

    Score
    1/10
    behavioral5behavioral6

    • Target

      main/bin/cdosys.dll.mui

    • Size

      49KB

    • MD5

      43ff6938789aad37318530b0e5dd8891

    • SHA1

      52b05596b680fa667e53f0b5d87823ee08e05c78

    • SHA256

      b2b9b3d33e30a9d626330790fc5512d2f154a1919d7becffe95c7fc60f2163b4

    • SHA512

      9d66026ed438a2a354b450f6b6c666f5cfb70b8203e56274c70df779c145d6468e6b3e867dab451b73b7511f1e57549768b90534af3098467e99bdf99528c825

    • SSDEEP

      1536:IWbJ6chjH1PrZRVgmDyxPszW7yYsznPy3IhWudJUl4cfpHH9e8BVYhIAAInmVLHH:IiJ6chjH1PrZRVgmDyxPszW7yYsznPy/

    Score
    1/10
    behavioral7behavioral8

    • Target

      main/bin/comctl32.dll.mui

    • Size

      6KB

    • MD5

      44ffbce7abb9513356815d3aed837143

    • SHA1

      37e94d2bc3f4081f699980593fa807ddfad070a0

    • SHA256

      e305fa763e0ebc35656bf679d43d085eff9ed9642efa196e3e60d4188d48ddba

    • SHA512

      970e2e2334e2125be5f0f1071d252996075377910cbea03b7f65c0aa1a1d70a7abd86eea9beec62c8950f49238b755b05ceeeccc27b8296e209c61d4afc34236

    • SSDEEP

      48:ypuju2Q5pKQ7FoenGzWZozvPpsplzIbrS/WLaZfblqHATItapkhvWVrikMyglZWU:NjSnnQzzvPpsplmFaZfTktapMrjWy+tS

    Score
    1/10
    behavioral10behavioral9

    • Target

      main/bin/comdlg32.dll.mui

    • Size

      60KB

    • MD5

      6391692f9bbde2c2d2d95f9299d6ba5a

    • SHA1

      22538127c2cc73a03e04f34edeabe33b735af27f

    • SHA256

      3ee23c9ce73d28c50dd1794ad6290da4732fbd8f66c6368f74b8d0c69d5c361a

    • SHA512

      d8c0104faea0754dc6260b90b04de44c5efbae6709d237cb9a096e33ab3e6b09e4fd15a30e6a9f11e142849a230eb6e7a3a06b7dfdc2d6a0519c1f91e8aebc8a

    • SSDEEP

      384:DwsV404/592/QMNHO8CWElaQjvUbXviI9gIK7jxmyDsqTCkjpMpiwzzlzm+zNles:Djq065iQ0HO8wrjvz3lDnq/VEDGT

    Score
    1/10
    behavioral11behavioral12

    • Target

      main/bin/fms.dll.mui

    • Size

      14KB

    • MD5

      6c7016e3863896c17042bd1e4d47bcb8

    • SHA1

      30959c76435fbb235e91995dd272c72bedbd11df

    • SHA256

      9b39b15d2a600debc3107353ff4f2f84310844351e7c2b3be1673d06a459da4b

    • SHA512

      4120ec633d791e5935a1cf5ed44ef719ae3156e5fa8f3a3e16c7a6dd4f1760799b293a3be763880c47a8c90e3c35564133c70fc209ffc76261f6d7bc5f44998f

    • SSDEEP

      192:BGV99H0uU3g7PeWUZeGXd7JzBHEpaQK0PSPODIaV+hWBTCcw:gV99UuU3gCWUAMrayqIaV+hWB+f

    Score
    1/10
    behavioral13behavioral14

    • Target

      main/bin/mlang.dll.mui

    • Size

      16KB

    • MD5

      80631fea253097a583879aebb147ccc1

    • SHA1

      eee2ebc689914609b9404671806ac405a825e46b

    • SHA256

      479a2a8f3a89b7d9e150abfcff686ec342c8ea3b84cf9b356399159f8db90120

    • SHA512

      1cb9ed3e6033749d41a701f1f275cd77c2b5d2d5d54f9efd7ca1882b352f35b4c769a9be7757fb2aba40cb2baaacb242b67722c96d0d20d714a94f0651bc1ba0

    • SSDEEP

      192:EZnSZANRs1i8HhQ4tRj9NFx/OMfBoe0AhNoVGNKsMuOEMn7WCx0gkDhth7dWmJft:2PNOZHhTHFx/scchpidWmJ1

    Score
    1/10
    behavioral15behavioral16

    • Target

      main/bin/msimsg.dll.mui

    • Size

      85KB

    • MD5

      9c94520e443d4737de2d81c1119fabb4

    • SHA1

      485051016dbca15f1a817cd3630ed69a1b4cb1cf

    • SHA256

      9d5d562041156da773b4a439104226423e1b8cfd5eea99bf8e28de6a9c916e1c

    • SHA512

      8186a251a7da6870751a0b0ee14b252253715b272d64edcffc7bf79429382655a5fef9a456bb40fd853263455aa86799d362f7ad29c1403ae034b38d0cac62a5

    • SSDEEP

      768:nuNcIcDweDvVUDQF2m/Byy/CWynwQC33OFwgMes1FwKWMyBs:uNbcD3VNyy/Ckd33MMes1mLLBs

    Score
    1/10
    behavioral17behavioral18

    • Target

      main/bin/msprivs.dll.mui

    • Size

      5KB

    • MD5

      d7581c0d76d8ccdeb509508718c654cf

    • SHA1

      3489b515da0914064a059c59683ab47d4cd82cbd

    • SHA256

      74002ab2e7e0453695f03edd3e524d9e71b2556d262a4a8faaa51fee51923975

    • SHA512

      5bc8deab2bc2c2c999ac5f102df114e1a06c8702ddbae51d78e7ef03208845791aef89c57e11780296f894fd14efef601b8e38909d4c5e97bb9a09edde5fe5aa

    • SSDEEP

      96:ZvZP9fpwrPzcHwMQ2kfE7rC2L+92bIC598o3l9cjWad7:nP0rPzcHzQTZZSyo3qWad7

    Score
    1/10
    behavioral19behavioral20

    • Target

      main/config.dll

    • Size

      24KB

    • MD5

      6de5fac08f709dddf67f7bdb129f0220

    • SHA1

      93b4d965d63605c73f83b5943667277d2952a8fe

    • SHA256

      d087eac1b9c325455bc367350cf2310359905db5c3d626877974d1ee62d7e2d5

    • SHA512

      89be5f090380b0b6d13e1d6c9879de1aad53ae72739714a2c446b94fc2012552ea5b1d10f2f9a04fb33d6f556aa2dd26d52abbe590431003cad447e0b8295f85

    • SSDEEP

      768:V0W2cQ3rMW+g8hG8AH9LavuDfWoF9zuaY:X2rwvuDf9XzuaY

    Score
    1/10
    behavioral21behavioral22

    • Target

      main/helpinstall.dll

    • Size

      12KB

    • MD5

      b9791f2b567ee96b3df7cdaf84275761

    • SHA1

      3374e79d49451ad7882b5a6f9a2d9a42d6f3aaa4

    • SHA256

      023af0636928d0f61e942bc3852dbd93633ac51b9082e1f7ba2e947bad12074b

    • SHA512

      96122ac734199d36bd7e783679d4d665cab369671d3988278a67f554b41c8f8bfd50efb2de688b724198d5027f4016bcf81cf7f2f0d34d6468f9d5fa932c1749

    • SSDEEP

      24:eH1GSpft+YAj1+CRkzgWhLIZW0CHQpwmhNJHPpc9G3pEMv6PN3NL0UkMs:ypfonjnRkIZWRHQPJv+9Upvv23V5Hs

    Score
    1/10
    behavioral23behavioral24

    • Target

      main/klbdax1.dll

    • Size

      24KB

    • MD5

      6618c2115c0f0eb18e5f1b8ff76efc63

    • SHA1

      5bab964fcb87e5bd7488f3a1fd8c3cd78a00999a

    • SHA256

      c273a7b182e3af1bbed0f5b728af5fb0e603b9f1713b72886739345c307a7f29

    • SHA512

      8b7646bf0f750dbeae2ba1104e172518884ed25f6b96be3684b4091a3e7e5b7199bef7fff299b0b5272f1b90f3f660809d8f583865ea6555cde2d5456cbf5bec

    • SSDEEP

      96:r+Z5ZoTwJKha1afv1bV91dlP9f9XmWR3WwN:raZYhYE1rVXmWR3W

    Score
    1/10
    behavioral25behavioral26

    • Target

      main/lib/libctvuda.so

    • Size

      150KB

    • MD5

      bd7b88562453fa1496f8b7fbc0fb2628

    • SHA1

      8fee5b5665650f7423769c3880ca33a6a8abd08d

    • SHA256

      a9c361cb48eb108db9896027726aebfd9f201a485c303b53aadf9aa3c5bf5986

    • SHA512

      84a0c299a5c15e4e93a2a75b4e1bcf36f2bf259859db37f57411bafd34cf15fe3cf97804f76bad24affee1d5beb34d84d50c5c695c2ab904e75e5dbc01310cbb

    • SSDEEP

      3072:ycJQsVo1IqZCLY5tRhmqxFZ/G7DVX608:ysP0A+tRhmqxFZYDVX18

    Score
    1/10
    behavioral27

    • Target

      main/lib/libctvuda.so.1

    • Size

      150KB

    • MD5

      bd7b88562453fa1496f8b7fbc0fb2628

    • SHA1

      8fee5b5665650f7423769c3880ca33a6a8abd08d

    • SHA256

      a9c361cb48eb108db9896027726aebfd9f201a485c303b53aadf9aa3c5bf5986

    • SHA512

      84a0c299a5c15e4e93a2a75b4e1bcf36f2bf259859db37f57411bafd34cf15fe3cf97804f76bad24affee1d5beb34d84d50c5c695c2ab904e75e5dbc01310cbb

    • SSDEEP

      3072:ycJQsVo1IqZCLY5tRhmqxFZ/G7DVX608:ysP0A+tRhmqxFZYDVX18

    Score
    1/10
    behavioral28

    • Target

      main/lib/libctvuda.so.1.1

    • Size

      150KB

    • MD5

      bd7b88562453fa1496f8b7fbc0fb2628

    • SHA1

      8fee5b5665650f7423769c3880ca33a6a8abd08d

    • SHA256

      a9c361cb48eb108db9896027726aebfd9f201a485c303b53aadf9aa3c5bf5986

    • SHA512

      84a0c299a5c15e4e93a2a75b4e1bcf36f2bf259859db37f57411bafd34cf15fe3cf97804f76bad24affee1d5beb34d84d50c5c695c2ab904e75e5dbc01310cbb

    • SSDEEP

      3072:ycJQsVo1IqZCLY5tRhmqxFZ/G7DVX608:ysP0A+tRhmqxFZYDVX18

    Score
    1/10
    behavioral29

    • Target

      main/lib/libd3dd212.so

    • Size

      770KB

    • MD5

      0b760eb0c116038d3ca42c6640ab0123

    • SHA1

      43faf1d909fc2b35151b700c2fa9e3b8b3a67ea5

    • SHA256

      d73837dcb09284b69c34eae3fb6afd3b7d3c2b953cc27b5f15076ad2e5f48a43

    • SHA512

      27626ed159d9e9b45a55ff3a699c4ec1508d8d8ff8e9ebd20b86b2e46e8607689106c9f24e4479575cd66dcd916e11c4c34c524df90ae2e2dd04e6b44877c676

    • SSDEEP

      12288:ZJjURaYLGorgSIVxOvoUSsHORA0FUzmidHP:ZJQ0YrgSIVxOwUSsHO6MUzmoP

    Score
    1/10
    behavioral30

    • Target

      main/lib/libdxccore.so

    • Size

      809KB

    • MD5

      094d2da69c9a1da593bc85f694dd734b

    • SHA1

      a097d9aa7f8fcf3c1669b4087efee70658007ce4

    • SHA256

      cb4b2f448aea8412799df19db5eed69cfccb77428c7d258c18daf681f02953e3

    • SHA512

      23f2eef3abc03b6d01beed90b315f2207a6af8383746bed0b05def85cde686440261b0f838d20c4eb560a78f213077e6a1f5548a91ce1cf451e86aec8191e1a7

    • SSDEEP

      12288:JOJYH1mJB5YVWe07BNn55QWI5Wn3/rkehViE:JOJs1tVWe0Dn55QWOY/rkenZ

    Score
    1/10
    behavioral31

    • Target

      main/lib/libnvidiahaz-encode.so

    • Size

      538KB

    • MD5

      8f39448107874f1541a4838e91710f02

    • SHA1

      4ecff2dcedaaca96107e539f279948c6dbb9eb7f

    • SHA256

      6cf31f2b19ac6219d83fa5e5078d7cdbd237111ee448312a99e032798b4f4a38

    • SHA512

      433dd298f5ab993a57a4ec9ad31f27e1b6543b5d04bf22aeaff5c1d0815359110d264b201d966977148eee39fb5e36d5d3b8f1c8d3faea7271c649ff4ad4ed34

    • SSDEEP

      6144:MsW/udE3Gfl6Tqs9Wn9OJT4toCDEhL0zi/m7NOFK0D5ZdiFQqbs9gLsJhCOtL81l:MsWJ1CugDeyyH5xah7oa22Tgm

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix

Tasks