837ec0e9287fcb56331695971c618ce18f14dff0107ccd5749bd51c75bccc6d6

Sharing

Copy URL

Twitter E-mail

General

Target

Rift-2.2.1.0.zip
Size

7.3MB
Sample

231023-wt77bacc2y
MD5

fc332b7d4d15da6be0615be37e280789
SHA1

5e93ce41c14a784734c381ca49385a2c57130995
SHA256

837ec0e9287fcb56331695971c618ce18f14dff0107ccd5749bd51c75bccc6d6
SHA512

962ab673d36d3e3856fd3ec5de3671eeb9c11039e34d988b98765d42f6b75ab460ee83ad32d6bd39e21ecb01b6a0758caca19956a7a33543e25810497ddaea27
SSDEEP

196608:PwGDaaZl64V695I+yJWwbKgeX90am24lT18kR87C:P6aX6g69GJ1wUZl5R8e

Score

8^/10

upx

Malware Config

Targets

- Target
  
  Microsoft.Toolkit.Uwp.Notifications.dll
- Size
  
  140KB
- MD5
  
  5eaff1a4fbf02eee4dcca8a83b8aee3a
- SHA1
  
  5a049498520d69b38d8f2aedc152a81134ae51a1
- SHA256
  
  865de778f7884dad42e9746cf8de5600836151b2dfa7b836281c354a3db2820f
- SHA512
  
  45fa96c6a4f789a3afc8d8fc66afdef0c6473042bcf860ff4ba437ba10571d5b949be3967b47359c6ad5e624240ce071b6f313539ee9b9f26c814dae8590c047
- SSDEEP
  
  3072:J9Et3TIuTM0ijrzTaS+wOjM1eYLjB1+Qx7Obi:bO3Tszl+DM1NLjB1+Qx
Score

1^/10
behavioral1 behavioral2
- Target
  
  Microsoft.Web.WebView2.Core.dll
- Size
  
  118KB
- MD5
  
  6d00e2fb7e62f152aac2a358abd1eac8
- SHA1
  
  2502077ef1dd214711b7e0a6db23c2df33fa4e62
- SHA256
  
  d727cc9f7cab7aa841cf869dfe58febd2c9d48cfe0c06728d87a3a9887e97aa0
- SHA512
  
  ef70094725cb90bfa4575488b69922cac195261489aa4167c42075841aff3ce6326a79c3630311c3701f2f2936b41cd071123bac711687de9a94d1fb76cd79f7
- SSDEEP
  
  3072:TGm0fMRvGrBMuy1SuNlIa+WkZ9amDCbvmhYzN+N9OJ0uJFUcK7BRxt7Tlrdou21r:d0DBMuy1SuTIa+WkZ9amDCbvmhYzN+NE
Score

1^/10
behavioral3 behavioral4
- Target
  
  Microsoft.Web.WebView2.WinForms.dll
- Size
  
  26KB
- MD5
  
  c82a38f2adaab1272a02e7de79539749
- SHA1
  
  60c9fd0ac555b8c888eab0e7410169d39bf2ffc4
- SHA256
  
  bae99d5352d13a99b0624e68a644f15dc150f52aded49fe9b6f4a96469e74098
- SHA512
  
  a4cba9ce8c342384a55abbe0065327e316a977a13a81a2aecb39c5cfaec72e8403eed8f9c383fc9aaf4a84b5bb0742e74231c4756f4c63c70b77beb14e75e440
- SSDEEP
  
  768:M44o+v/xXxaVCbzt2ZDDcULHhrwWSZXu59+Ja5Zi/dRCfIgzMe6wU:M44o4BHvt2ZDDcULHhrwWSZXuD+Ja5Zy
Score

1^/10
behavioral5 behavioral6
- Target
  
  Microsoft.Web.WebView2.Wpf.dll
- Size
  
  29KB
- MD5
  
  11e643ccea8ff624ce4b043a83c41931
- SHA1
  
  e9e982339dd2570c552b9a5335a844ca799854b1
- SHA256
  
  d77266c0661c5cbd75a053cf53de8013d3119d7956ff2e67dce5db356f7827a5
- SHA512
  
  948709d82ee0ebfe46626affe3fcd37ad8ec38a744841dad3ef3d93657ae64c5fba8513d3759025418d1e8ab3a9487edb9b00d2a744ddae3fe5d28f55f31de57
- SSDEEP
  
  768:fBc7Lzcdyicp82DPLryER0SOhrTYTFUJDkS/Ka5Bi/t7v4F4fkzsFaZzM3Y:fmXzBrp82DPLryER0SOhrTYTFUJDkS/3
Score

1^/10
behavioral7 behavioral8
- Target
  
  Microsoft.WindowsAPICodePack.Shell.dll
- Size
  
  501KB
- MD5
  
  1b21df01ef007434ca92ef3149580af8
- SHA1
  
  1e47a4bb685afbb84129665d47b5fef89f6ce662
- SHA256
  
  567d1afab390852429dd0c34ee5e8824d8eeca9c171898f7ca94e002ffac4247
- SHA512
  
  9ef20a264a59d02af4d082975d1599b443baf8f3e42354da9951f8d28ef1b375435cea16e0ee2d2a22eb7f62bc8058143a9334e9687e38358110d59d3653796b
- SSDEEP
  
  6144:7JBwN3xhQrLnj0YVFJ5EoTBjkvupVeWQXh1uVjBtw8q/RcIEggbtE7T7pY8f++R:7DQYOoTJbQXh1E1Et
Score

1^/10
behavioral10 behavioral9
- Target
  
  Microsoft.WindowsAPICodePack.dll
- Size
  
  101KB
- MD5
  
  a176427d6f2c2e537dadf5cfcc86bf40
- SHA1
  
  7daf14ac08a053d1cd58cfea1d43dc24fb59f641
- SHA256
  
  0d6d0daf607fb8222fbd5129ffe41bebdc570ad7a1ed1cb10f548f35e9909c56
- SHA512
  
  12d94746d9ebfeda808fe3ad24a5fa303b7348b76e56366d3a259f7e3f8096cdcb44ad322414a013cb450da5203b1f0673e2939b76f753de7655b5f622bf2972
- SSDEEP
  
  3072:wC4ZInw4ZevMV7IAXGCR9HMcPcwTQFfxorliIz9/iq:wlIZevMZITCRpPcwC
Score

1^/10
behavioral11 behavioral12
- Target
  
  Newtonsoft.Json.Bson.dll
- Size
  
  95KB
- MD5
  
  46944e52dbb2982ea49a297902b91ea8
- SHA1
  
  0ed43a73f49e0df7b2fa681a627cad7e25074165
- SHA256
  
  f3c56166d7f90296bbe6b03f64335623c3165ed25948288f1f316fa74dd8327f
- SHA512
  
  7cee82d78afa41f343f839a057b327070b1fafd61ae521905271de635ba3291fd6f14fa6225d71c47de8b6748433e9a2010e6c53d28b0e57899c759cfc1e6d15
- SSDEEP
  
  1536:pLYHa6RMWseWPKMF5us3wuhZrGpeZknuNvAY1MYgI518gcabQN4Fw/rKIWK+2Gi:qNWHss3Dupe2/gMYgI6aQNoKN
Score

1^/10
behavioral13 behavioral14
- Target
  
  Newtonsoft.Json.dll
- Size
  
  679KB
- MD5
  
  916d32b899f1bc23b209648d007b99fd
- SHA1
  
  e3673d05d46f29e68241d4536bddf18cdd0a913d
- SHA256
  
  72cf291d4bab0edd08a9b07c6173e1e7ad1abb7ab727fd7044bf6305d7515661
- SHA512
  
  60bd2693daa42637f8ae6d6460c3013c87f46f28e9b0dbf9d7f6764703b904a7c8c22e30b4ba13f1f23f6cbee7d9640ee3821c48110e67440f237c2bb2ee5eb6
- SSDEEP
  
  12288:1eos/POdGV5jfWrV/9Yeh9eRcyLfLYtT5mWxTZ/B7jW5JMtRRpKzQk:10/POdGV5jfW5VnhFyvOB7jW5JMty
Score

1^/10
behavioral15 behavioral16
- Target
  
  Rift.dll
- Size
  
  391KB
- MD5
  
  84e2177359dc88269301a91c81eeeea5
- SHA1
  
  5e46632e20df07ddd47febcc47a7a41194861d6a
- SHA256
  
  c67b30b311dbfe5a816b3192c4cc77a93805fa7f6f8a82794fc36578bf93d1dc
- SHA512
  
  1075ee0400393674c9288bfaea0b6d4420db43fe8151a3095e5ad9389fa4adc7c458d94c2cff685440d23c3ea97b22b63a73e8196e8bb5141f8e88fc2d566017
- SSDEEP
  
  3072:rYs/JYI9MQsiuCsoAhwcNnxl9SiOv/la9VZ8t9rdA1+Qb1pVqI4Yf:rYs/JYI9oiuhoAhrl9hYx
Score

1^/10
behavioral17 behavioral18
- Target
  
  Rift.exe
- Size
  
  279KB
- MD5
  
  53079cfec7e72232789416f1adb5e41e
- SHA1
  
  7f9099600f8bd745cf020a93ae3c4b9278624a8e
- SHA256
  
  9b2661b1eefc555a5ccacc9eef7285d3fe288e71d75351eb2e7b4f4fcba9b945
- SHA512
  
  e752de02a5b8be11dd243c9eed341247b0a3302b42371a6e51932c64855dcc428e2ffd2076b9a7faa798c6544884576b0df23b82784d09f5b9f0479bd47624ba
- SSDEEP
  
  3072:D6eSqsywT/IiODn5Ikt8pKO9WpheWyutIRMQc59uxmZx:DLDn5I7p8hen2n
Score

8^/10
- Downloads MZ/PE file
- Drops desktop.ini file(s)
behavioral19 behavioral20
- Target
  
  SharpVectors.Converters.Wpf.dll
- Size
  
  125KB
- MD5
  
  173b2e2a6d822c82bda057bbc1faefdb
- SHA1
  
  1507cf0de34b0880fd7b3ac02d2d81b8135dec58
- SHA256
  
  dd4ff7e65dd824703a0eb25699f432bfcf25460629215ffa277241981a2f7711
- SHA512
  
  a1516f94e29405e55b5da2c9eb1d4caeedef0b11080bb7f9303dbc9032b151a62b8f5bf2390a6bd37738c94a5f3b9fc0dbdbe42a3e15d8aa1ed43063e1701d01
- SSDEEP
  
  3072:WGwfOAfXsntRB6LXxvnfhKjBDOiil8MVBBEaw:WDfOAfXEtRItfhGDOrv
Score

1^/10
behavioral21 behavioral22
- Target
  
  SharpVectors.Core.dll
- Size
  
  179KB
- MD5
  
  a0f54b8425ab1f56427add17a506e8b0
- SHA1
  
  a2330c7bb566441645707d6761ff37f8427cc0dc
- SHA256
  
  1a04da83f43bbec16102a1538aa8d631c0e9ed4d462308df380f931030811233
- SHA512
  
  a584005c10f4c45494a1850b3cde710a5e2cfe34709ac207648854273992491705b0e2e3b3c124e1df3c86b5b1eb4e91501f3480d07d51c5f24c7ecc69b43e1a
- SSDEEP
  
  3072:v2A+Zjv2/1lPnxgg2eI+3/H4LKO9xLpJxgW22LnLHSQP7brOZ7lu8nz/6l1ai0BJ:v2A+te/1lPnxgg1I+3AVvLpJxgW22yQY
Score

1^/10
behavioral23 behavioral24
- Target
  
  SharpVectors.Css.dll
- Size
  
  89KB
- MD5
  
  a0da8902707fdd78ad845330d2bda536
- SHA1
  
  521d70b4966239e988fd473930390dbdf047cd5c
- SHA256
  
  02cb5263c2735eda1f16b57aa98e69cbfed3504d9a2e063e91cbf788c99a9a85
- SHA512
  
  43545e6fd8375fb8336a774a68e2c86a1d8827bd55877738ac102db81f7ae44bbcf24d2d8f66a9979eb1da6d1ab068f47d37589cdfa1fcfbfa7937bf23c6033b
- SSDEEP
  
  1536:wgCG7UE6BFQkhshDVVQZZTNuSOPSKk/0Pnq4nvY79Omz/9f2PXINrwviAiX9YEsj:wlG7UdBFQGshs4nzWPRyc6T9JP3lb
Score

1^/10
behavioral25 behavioral26
- Target
  
  SharpVectors.Dom.dll
- Size
  
  32KB
- MD5
  
  af4a135a4695a99727444dbd080923a2
- SHA1
  
  55a9c4c18e096ec535e8b91b89df89e7ab547b5c
- SHA256
  
  50121490324cd8d2d5aa696f2b7ffab8fac5cdb82de4ac0b003d6348ac904943
- SHA512
  
  23fe59d69b5ae1e2617028ba4cf8b3fbcfa0e95da7e9fb5c85bfb39d35229f06865bd808069db874ab8574619d9d2a521c80dcf18f6bb40f21d88d605cf19a4d
- SSDEEP
  
  768:EwnkTjApHH0T+9nurPeQmjmvISsawqD4bQWdUW/OES:kPeAveGBVES
Score

1^/10
behavioral27 behavioral28
- Target
  
  SharpVectors.Model.dll
- Size
  
  1005KB
- MD5
  
  ab0ec80d26ed46fcad50a8f88f0d4f11
- SHA1
  
  e6982587dd1a2d29020872cd4e2b90fae3e3ab4e
- SHA256
  
  0d4a3b4b00f562fd614db51359d312fc5db1f9634222456c29901af8287de6bf
- SHA512
  
  ce0309da43c8156876129e79b1b3a609ce7c2a55a4ede2db8f582d18c327c610f0dd01026c81a56773b9c9bf393ed49577a8d91f976603d3ea43d2d8ff411733
- SSDEEP
  
  24576:YB8r3SXEOXKcD4/cBepqwV1jnQxZdlCG3pFb6KtXX2nrfSNT6v2q6w:YBgOXKcDoD
Score

1^/10
behavioral29 behavioral30
- Target
  
  SharpVectors.Rendering.Gdi.dll
- Size
  
  111KB
- MD5
  
  0467cd159b4a59d1d2cb2546dee4418d
- SHA1
  
  ea8eab88a037eff3e548154c3c09fbaa3f230f09
- SHA256
  
  eeb1875f27ac6d9dc03885b72b946244b2ab54b88bd256d579bca6f27a2f9396
- SHA512
  
  c5db3a5bcbcba61f7570372f8014aae25cda2e9c475a7909cf6ebff5ab8d34b26fa9bf5c91eb24d1291aae35e6736e25e9652c895388f45f6f9a3d3cae8b463b
- SSDEEP
  
  3072:dQUvy5g+Vhw85fI771BEmCypUhQ6HWqAy9OXmN:by5Lw0fI7QQW
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32