Overview

overview

3

Static

static

1

bugreport-...03.zip

windows7-x64

1

bugreport-...03.zip

windows10-2004-x64

1

FS/cache/r...t_kmsg

windows7-x64

1

FS/cache/r...t_kmsg

windows10-2004-x64

1

FS/cache/r...kmsg.1

windows7-x64

3

FS/cache/r...kmsg.1

windows10-2004-x64

3

FS/cache/r...msg.10

windows7-x64

3

FS/cache/r...msg.10

windows10-2004-x64

3

FS/cache/r...kmsg.2

windows7-x64

3

FS/cache/r...kmsg.2

windows10-2004-x64

3

FS/cache/r...kmsg.3

windows7-x64

3

FS/cache/r...kmsg.3

windows10-2004-x64

3

FS/cache/r...kmsg.4

windows7-x64

3

FS/cache/r...kmsg.4

windows10-2004-x64

3

FS/cache/r...kmsg.5

windows7-x64

3

FS/cache/r...kmsg.5

windows10-2004-x64

3

FS/cache/r...kmsg.6

windows7-x64

3

FS/cache/r...kmsg.6

windows10-2004-x64

3

FS/cache/r...kmsg.7

windows7-x64

3

FS/cache/r...kmsg.7

windows10-2004-x64

3

FS/cache/r...kmsg.8

windows7-x64

3

FS/cache/r...kmsg.8

windows10-2004-x64

3

FS/cache/r...kmsg.9

windows7-x64

3

FS/cache/r...kmsg.9

windows10-2004-x64

3

FS/cache/r...locale

windows7-x64

1

FS/cache/r...locale

windows10-2004-x64

1

FS/cache/r...st_log

windows7-x64

1

FS/cache/r...st_log

windows10-2004-x64

1

FS/cache/r..._log.1

windows7-x64

3

FS/cache/r..._log.1

windows10-2004-x64

3

FS/cache/r...log.10

windows7-x64

3

FS/cache/r...log.10

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    bugreport-KE5-GL-QP1A.190711.020-2023-05-09-01-02-03.zip

  • Size

    12.3MB

  • Sample

    230516-snw1baad8t

  • MD5

    52e9f2b99a560970c602b18d82ac1483

  • SHA1

    8e44008da840eeae030b083cf08d2406b05cfe5a

  • SHA256

    8fc52df7b6f8c39c5c7efcc75c2159570a6aa6beb27e01c4a13b742ab59f0a17

  • SHA512

    9565fe4e132b26eb55cdef5b85027c98723a27a697c7cbe455fb98f6c2d8b53ac6139911e047b798de949f79c286305ed9c14a18c976ef3d83d062d1efd964f6

  • SSDEEP

    393216:e0sWnsbavmVlh61K5iKX/YRqZvrK5adcDq:e0sWsCahp5iBR6cNDq

Score
3/10

Malware Config

Targets

    • Target

      bugreport-KE5-GL-QP1A.190711.020-2023-05-09-01-02-03.zip

    • Size

      12.3MB

    • MD5

      52e9f2b99a560970c602b18d82ac1483

    • SHA1

      8e44008da840eeae030b083cf08d2406b05cfe5a

    • SHA256

      8fc52df7b6f8c39c5c7efcc75c2159570a6aa6beb27e01c4a13b742ab59f0a17

    • SHA512

      9565fe4e132b26eb55cdef5b85027c98723a27a697c7cbe455fb98f6c2d8b53ac6139911e047b798de949f79c286305ed9c14a18c976ef3d83d062d1efd964f6

    • SSDEEP

      393216:e0sWnsbavmVlh61K5iKX/YRqZvrK5adcDq:e0sWsCahp5iBR6cNDq

    Score
    1/10
    behavioral1behavioral2

    • Target

      FS/cache/recovery/last_kmsg

    • Size

      278KB

    • MD5

      f0530a65e9e965412e1120a4ebebc238

    • SHA1

      4c4a931fe973f5072ac32aacb7bcd7f7b5361fef

    • SHA256

      80b587e5b962d506e47d24f58b0dd8887c45b68203b0c209145fbf3b6be1c3b2

    • SHA512

      32c75b48c8bd6312364ace2568e766e5ecf405fa01db1d729423b8ee577ac3249cb8bb111d1197e4f03118caa5f2610c72951b818e8ea6ffd72047a7c6fd9a9a

    • SSDEEP

      6144:ai05sMXFBHV3mnrl74sokoVocjON6euSx:x8HFBHV3mnrlMsokoUn

    Score
    1/10
    behavioral3behavioral4

    • Target

      FS/cache/recovery/last_kmsg.1

    • Size

      512KB

    • MD5

      9a8d2d8dfcdde49bc238a2039f160e81

    • SHA1

      d6770edbfe6c5e37363fc6c15627d285a7b9f73e

    • SHA256

      81a78726c5f4a01378b5e05511c636e63c6f3af6d63ba1576116a94595ebe52c

    • SHA512

      b6b84eb3108712ba2de013c4c970ef586f80f7e8fe9bb3dbfb482e89410510c648a0eebb497bf8fed841b01cdac4188286042f4512bd7fab4089d7963a903e45

    • SSDEEP

      1536:4y02Ahz0sTDuNANco1faZYloZKaKs9HeAxk+wlW3oAKt7bpTjnclrJly10M1GS9+:m18Amo4Yu9Ks33yT70eY

    Score
    3/10
    behavioral5behavioral6

    • Target

      FS/cache/recovery/last_kmsg.10

    • Size

      272KB

    • MD5

      06435a5d45ce54836ca7bd81245e1c9a

    • SHA1

      eb538a4a3b5fa0d74c223052cc79d9cf46b682f0

    • SHA256

      9b2fb399cbd37080e2edd94887153b06a500467d42dd9c13f0567623def89eea

    • SHA512

      6a65b25f356faff4176ba5c0df0a49abb1fa3bfbf86f38490fa89d99cfcd4e96b460cbb5339bc9226736bd28d1fd71a81c89329f149973b76b7f1e49d97aefce

    • SSDEEP

      3072:ACj1wHxp3hCcP/CRVRvbR6RkXReRbO5y45lPDiuT+OuxTWvVbSbylDaEq2BUXsPZ:ACjqmcHCfNb4KXIpO5y45lPm49rrG2kS

    Score
    3/10
    behavioral7behavioral8

    • Target

      FS/cache/recovery/last_kmsg.2

    • Size

      512KB

    • MD5

      922ceb06e44e6118d2b94d4f014e8cf3

    • SHA1

      958040288524eab6c8ddf2d7d4724eb5ac4040e8

    • SHA256

      e30ebe7f2e29bfd8f56fc2582f45e6245522f6e01149bf26949068a19eeba466

    • SHA512

      fc15d1f566010877fec5d7047bedc0b0137fab19cc6b9f2f47d0ae4876e5641705b392b6ca45b8810cf57eeef1df4c28ec5803ead88981fc13fe70c281ec10ff

    • SSDEEP

      1536:Yy7YYPPqkoa93tnNSjsMMtdqLQZwuvJD+DLe5e:Yy77Pqh8tNtMMtoQZpB6ie

    Score
    3/10
    behavioral10behavioral9

    • Target

      FS/cache/recovery/last_kmsg.3

    • Size

      512KB

    • MD5

      4351d522bb424755481360b6ba2abedf

    • SHA1

      9ad868cea7a11f7127270ad146ffaa363a1369f2

    • SHA256

      8dd6cca2c3818df30bca5ab41de90ca23c9a22afe2c4005f81c4590af7c0a213

    • SHA512

      e4b950e0fb8bebbdbc4753afb8b2322941abb459daf5fc78c2e6d7b4f39899ee609747c63b8a23715cd30940389c3bb1b79e364197aa729e0d64877f7f796e37

    • SSDEEP

      1536:JacHLreum0m8BRl46F86gjJGurt2XNw1kb+v8Pj:JameuFXBVDiJGur4XNb+v8Pj

    Score
    3/10
    behavioral11behavioral12

    • Target

      FS/cache/recovery/last_kmsg.4

    • Size

      512KB

    • MD5

      3590b1ca4d2daf4d7db5a09000190751

    • SHA1

      a6505fa60b22a7a1bbe6f597cb964a6128d21add

    • SHA256

      daa668c7b7db410ce6c4a662a8f89dd74618ebf873be9367710ea5b07927d1fe

    • SHA512

      9a6ce3e6771764be48777651670759e1d706e1efa4ebbf01aa67ff66b74d4563faa054db8f50dd6aabcfb3cba2c7f3da6dda605eec086fc898e1a45864179e24

    • SSDEEP

      1536:4jfqVnqCl7/JVokxSMm118PoCtK12k3EpDiRsgDekV5:eyqI3C1vr1PUpMsg/5

    Score
    3/10
    behavioral13behavioral14

    • Target

      FS/cache/recovery/last_kmsg.5

    • Size

      512KB

    • MD5

      0197125b37ebc333b0f9fe39913646fe

    • SHA1

      56c34a29786adb300d7df8ba8db244662358fe03

    • SHA256

      9a9927ba0023208172c0650cf9ac3342fc36bd7c0609b8566e93e4d51b8eaf31

    • SHA512

      1ca4da9627f9e05dd4a045e765cdda6be0049aa8e68967236fc975c867b7bb224c988a20038e9462715c82a8dd3288882f325bbde32c7ade42e1dbcf4bab6180

    • SSDEEP

      6144:gUZq9nqPABVcCe336Be7I3SvP6jPlDFK+nKfPYzyB/9FnT:VZKqPABVcCe3KBe7IH8

    Score
    3/10
    behavioral15behavioral16

    • Target

      FS/cache/recovery/last_kmsg.6

    • Size

      512KB

    • MD5

      5f8d4642268be1fe98fb27d66ba5847d

    • SHA1

      ed2400af96e75828f76f18000857d1a68328fd19

    • SHA256

      290541c7e68f1989f19bdedcc24b5c903796767c6fd90d5cae50788f4a51c2b9

    • SHA512

      2f1c871f30d39633a41a3d01d12e48c7fcb7c8a7cf66fa1c419272ddfad5b4388a457bcf19fc7bb9fe9f85caf6851bdb1b6dd002288e730e4d0ca80ab75effb7

    • SSDEEP

      3072:erxmFLN4g/FVQquatltF4HBkTRSJnWjVE:wmFLN4g/FVQquMltF4HBkTRSJnWjVE

    Score
    3/10
    behavioral17behavioral18

    • Target

      FS/cache/recovery/last_kmsg.7

    • Size

      512KB

    • MD5

      c4ff9395897a840c14a29de3945f5af3

    • SHA1

      17a895f9598f1f84497dd4a4c7a3606e2ee9dd34

    • SHA256

      350b92dbd52a58559a86c71e49f8e2fa394ea3edea0f3a4d21a2d32b8ef43c05

    • SHA512

      0eb06877f72adc8dae02c06dc0fe374d84b205abf1e93be2203eb5d6fa0708086b5e25b45b295efeb7243f86e0f2789f3b3c812ea90d236261f6909abf81388c

    • SSDEEP

      1536:M2Gb8KweaVRbTU8PhbHkDOIQBECz70dI1QqikgecL0Dp:k2eu7bHk9QBECFHjgezp

    Score
    3/10
    behavioral19behavioral20

    • Target

      FS/cache/recovery/last_kmsg.8

    • Size

      512KB

    • MD5

      dc7d8b8dea0dde79e9c351045cb426dd

    • SHA1

      b373ef7e65d0de1714c882a3b2727f8d292382f1

    • SHA256

      7ae04f3273eb4d235caae0e1aa05aaea989ce186f67a525ba68f15017820eb39

    • SHA512

      75fa8af3209293dae48f48a88af29d53868d1a134120e8c40677a5496283e26111f9d22159f61c77df1f464170d2b8c13bababc6cc3a95452dacd6806e7d643c

    • SSDEEP

      1536:bftVb2XO6Wem7fmNCmuRTcFWiKp+XLjWG6yMydkSG7yiR9:LavWemUOQFO4fjV4P9

    Score
    3/10
    behavioral21behavioral22

    • Target

      FS/cache/recovery/last_kmsg.9

    • Size

      512KB

    • MD5

      bf71edbe59bf0844571e1cd5b90fdc63

    • SHA1

      2ea91454eeb43065347fa78b3998fbd9443ea98d

    • SHA256

      50a34b32329013e57341ac01857e74952e15c9094538b0381212a384b87a5252

    • SHA512

      72331c327d458a589069998853973100163fa27ea8d663934fa8eb9ba2cbe82a862d40f45421f0b9903a90ec3ff244383d5afe5b52fbd82f6b65cad64645757b

    • SSDEEP

      3072:WDGTrnZOMZ0dJ1bWbJDnag+BEXNIfhZsYFIep4ES7lzLvwl1l:WKHA3sYFIep4ESxzrwl1l

    Score
    3/10
    behavioral23behavioral24

    • Target

      FS/cache/recovery/last_locale

    • Size

      5B

    • MD5

      cce16c45e622d9ceae4b626c9353ecec

    • SHA1

      5a7bd4149d0d34d3ec86181cdab1cb8dd3f441d7

    • SHA256

      5c49f88dafe66e0ecdca8f682ae0b38c38ccd3ad464e3358e899beca88c18560

    • SHA512

      49bece6ba2cf39624a2947d9660b44c0c0f3f6970e6671b02f2050fb954cef700b3bad782c00b7e3fd196ae541f0d6c684fd0f77704bd9c9d68d35b94e89a755

    Score
    1/10
    behavioral25behavioral26

    • Target

      FS/cache/recovery/last_log

    • Size

      54KB

    • MD5

      2dfa4c2625f78cb51b29dc636399251d

    • SHA1

      6bf4a700109c3b98a062899f29848738bc32e88c

    • SHA256

      94673b253a221ca6b0ef8fd7f0ff0a178a46ca8e0f31a6f1d50e62c0864eba94

    • SHA512

      02569b218f67de33b1beb944e13b4368fd032aeebc348c897dbd247d3ce1274317165af35f83712f09728f332087f221f4208a66797eeeefa38e5caea8ec235c

    • SSDEEP

      768:bZPpsI11XtmkCMdJhDaMJo6xh8vUuwT48GyU6fiWa+S/pYj2XySmvzK98pIWUJV4:th11okCMdJh3xhzuwTKQVUgzTEYEG5

    Score
    1/10
    behavioral27behavioral28

    • Target

      FS/cache/recovery/last_log.1

    • Size

      512KB

    • MD5

      6083685863531d56bad3eca9151676d5

    • SHA1

      2d72efa958a313a025b86556ef45d72b320e5f9a

    • SHA256

      86e3f4d5cc0fe82b31bd222cfedaf9a7775f3420a401aa47a8aa40f0c2069c1f

    • SHA512

      a6acd9addd029e94698e33206709dc8d158c204a9d6eaa5c9d6c2e2a273c38a92124e5e25d8ce6aa40ed0d95a9e33e7afe72afc5a92f7bbe904d4cdaad16168c

    • SSDEEP

      6144:Hl6wXpB0WlaHMb9IL3vDZ6yvqp8n9k2ntib9/DH7nMC1ujwRm:F6wXpBVaHJsyvqin9k2ntib9/RAjwk

    Score
    3/10
    behavioral29behavioral30

    • Target

      FS/cache/recovery/last_log.10

    • Size

      53KB

    • MD5

      978a11fd7a93610d98816df9a4574bd1

    • SHA1

      e582db86920e931bd1c6b503b64c8c4ceb598d2f

    • SHA256

      9f59f77bb0fc542b3543ba7298407d81df92a30aba7af34d309947bdf38f889b

    • SHA512

      d156ded188db1c185402c09edea944cbfb7d18b066f2232820b6977756681238286ea6a19634f34e8a002dafaed2d5efc1d80c5fe33d451829cc33d70a5b60bf

    • SSDEEP

      768:QPrk+b62gDtCUrOdaokuaouXnDWTrZdc6/8U8Lrq9kil27y/VvAVsXonlILV1d7A:QDJb6ztCUrOdaLXnDW4AE7m97kq0r

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v6

Tasks