General

  • Target

    be6e01f7fb6858f084f7cbf5476295f2e9ca5df6205ffa20ae3c4866ddf6b2e7.zip.zip

  • Size

    65.2MB

  • Sample

    231107-rw2p4ahg4v

  • MD5

    62006697a4c405da09aca13a43e258de

  • SHA1

    ab0933267e26ce3997488f8d7f5ae75b0aca1be1

  • SHA256

    f9de69f500316f89884b9809943388ea1c7bab6e9164316f9e880e4bbc2fa469

  • SHA512

    66bb0a9bfe96e45fde48321ab111f76df16e71f9c0a40bbfb4e5a9d4bc4912863e8ff796b7f6ffc3081beb079d36e2718aa4db2f039f4f1075d1264b1caae993

  • SSDEEP

    1572864:3jhK7XxGvI53z/ANlG28FwM2MFDSK2qhojwWdwne46weveebJ:dKdl3z68GMFDh2qhoEWOxu

Score
7/10

Malware Config

Targets

    • Target

      MiniUpdate/Antihack.dll

    • Size

      1.5MB

    • MD5

      ff9210458cf691af551fa9da514fb74e

    • SHA1

      9339f4c143ea53a8226d2ee249cda9bec35aa8a0

    • SHA256

      844040c83dabf840e64d9a29040ee40605094183bdacb90c5dd2815e2384bd3f

    • SHA512

      afec2acc89fa9b9cdf0cbd6a980cfe7d11f48f08e609212a324ffd9266cb2e480d004d6e051b251cfb8027a50e1f89f12c5ee4674341011f6dc01a37d8f0fe5a

    • SSDEEP

      12288:k7scHHZ8Sl+Nngb24YnCw3KAE/XAf6IkHe:4+hEdYCgJE/Axk+

    Score
    3/10
    • Target

      MiniUpdate/Camera.dll

    • Size

      32KB

    • MD5

      42465f843505d364268c1912ef3aff70

    • SHA1

      502c7112e412a340985a4a32d6765eb2aff861aa

    • SHA256

      784a2d152d2e4ca266e2574cad0c6186fe7c081e803dd168dbb4ce5124a9a3ee

    • SHA512

      628308eaaa0742ece67aa4ea89a77917b9f73788052ae667854a3c107432c685aafc647d7d3aed85c839cb3bae4fb9cf9e7be4226b21c394806733786f5170c3

    • SSDEEP

      768:Z2BtA54Ju7A8+3NIMGylJkdSWX1ziLFagcrwVo:EBu5CuEhZGylJEXpiLFaXwVo

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      MiniUpdate/Data/Object98/chowall_Snow.OZJ

    • Size

      45KB

    • MD5

      66f58eb21b6c8949b5ac2984b47cfb59

    • SHA1

      9d731fd767ae979e79177a9568d516b8d65e53d5

    • SHA256

      805f80fade1d2f58880a6d16662d90f9faed66d96c5b405b433646fbd86fd4e6

    • SHA512

      533e41c13add688abdadc64ce059557fd8debcf982a8ee7e6b31c3545519a48fa2a673f31dc9e9455cc2969c041204bed832757f577995f65bbf10b1df18afc1

    • SSDEEP

      768:YQlyijy+e8nMjp4JKzDhJGCiYG4ZKB5WDafME7HZqdEbPjHtxUw:vs+edDqxYG4o5WDaXFfPnUw

    Score
    1/10
    • Target

      MiniUpdate/Launcher.exe

    • Size

      1.6MB

    • MD5

      cc682a532576076e6cb7b9a8f04ecaeb

    • SHA1

      04188d0e71435f71c6226c280ee21767aa45449d

    • SHA256

      d685497b455ffdef1c4195dd4dcfbf647268145d2da784cc24d2aa1364fe4eaa

    • SHA512

      1ea50628a4e9905399c21fdeec747834b3b13dc3a759608523535d0a5cb27402bddc0658a61af2f5cef1fa2706e71ee116ceccc0c9783caaa6e7195400f98375

    • SSDEEP

      49152:VY0Ahn1DBfQZh5TyJrwuNlZD57MXDw15BPX7xQBLy9+mDwLD+/7elwel:q0cvf4h5EUuNlT7MXDw15BPX7xQ1y9+U

    Score
    1/10
    • Target

      MiniUpdate/MHPClient.dll

    • Size

      702KB

    • MD5

      1f10c8008934c0cc2efd274d81fb5704

    • SHA1

      0002902623d18154a3e3c59ef497378598c03bd3

    • SHA256

      011e21d2084750a9c04693505127d9eb08ff7ac2b04dc20a2881b1b5912a1d3e

    • SHA512

      c116a192a50d27c2dd87d6aa6bfe66e20b0bc629feaceec66c6c187397ab30ffdb0e2e3ecb96b015e899c0f86f7270517e6d24716a17a6ecfd0f2a72b14a6ced

    • SSDEEP

      6144:hG1kLvclLmFFWr+YOZQSYyVZ+vKD0fWQ8E6C4XIkWy7pZGx:SkLvcliFF2+OyHDwWQ8VX/v4x

    Score
    3/10
    • Target

      MiniUpdate/MHPVerify.dll

    • Size

      54KB

    • MD5

      aa4b5fede73428e54f2952516e72e123

    • SHA1

      7f2adbe28a9c50aac750f93871eec5acf7e3f14a

    • SHA256

      93f255d3e1aae1eb0a4203675895ada8861aa7f9446b5b5211f671567cce737f

    • SHA512

      28e90e677d6638144b29b13ee1491ff3ca4b0a0e6262f26b33a29f9410a8a246789300bfc7a442c63398ecf88d7ce675f701705452b07395759e853082425f2a

    • SSDEEP

      768:ELuDBwF7pP2nWqBYckJR3RcpZh+kkPlEdnTEDYYOioa8Luj9lm:79wJ2nMckrc+k0Ec8Luplm

    Score
    1/10
    • Target

      MiniUpdate/Main.exe

    • Size

      3.4MB

    • MD5

      a7a82952b1b3181f4897bd5f3d8d96ec

    • SHA1

      65295233c9a54223d94ae4dbb7006cd9a76653e1

    • SHA256

      ff08a99195b843a08b00dd0b852397f704dfb97f0d86dcdb4c6a113edadeb47d

    • SHA512

      b946be0333b9802173ecdf87ec91e1457e366e38158d4915f8c896f69e5265664448d7e75b4ea203a924855f151d1b9673cf1c6051fa332369eeed6b67b1a22d

    • SSDEEP

      49152:MX3hyEm6tY4j6bcb0LdXp/Y6+G0vZKMh2kl3N/1Zqq2uq6Y9b3sXaE+ZRBut0HJy:+33jYr3Yd2IOebddgRButEJbP2

    Score
    1/10
    • Target

      MiniUpdate/MemRelease.dll

    • Size

      7KB

    • MD5

      70a2ca65962c8d5d45368056f52390f9

    • SHA1

      5f29fa25f429d0398cda9bf271b5be8143c93694

    • SHA256

      52e95660ce6aae1615782ed73140b909963d7c58b3f0fe16a5d7e3a17e66b328

    • SHA512

      ea45ed585edd5777108286551a877a00b9403adb18fe2781f7c4c644243795e0af37c8049136d486349b1aa0c526b25f3bac08b4c7b1ca6469378f712b52bca7

    • SSDEEP

      96:UtlmidFFMwRNm6hegzE27uyx+8Thu3Ec3Xsrx7GY:yRF1bNE9Gzc3X

    Score
    1/10
    • Target

      MiniUpdate/Parcer_MiniUpd.exe

    • Size

      71KB

    • MD5

      f1fe3842900f19ecee3602c733965f46

    • SHA1

      d481260ee72b55d4cfded099b937e64d530c844e

    • SHA256

      8f640027deada90eb9ddcdd3e2c0f710774e25e29c15e6cff155f512977de43f

    • SHA512

      47bf81e41983c8de20e17f39268f2aeaf09158814dcc0c174253120f9b5c5d23529257589684519db725af664260472ed413c7ff1d0e1656bb737c612da6f5e4

    • SSDEEP

      768:4ujYsPkWg6kI7i64onQRNwQRD1cNeoldwllYvfQ81Yif+K7LgXDbkhMnQRNwQRDT:iLWZkI7SobM819+3XXJbM81z++XXI

    Score
    1/10
    • Target

      MiniUpdate/Xor.dll

    • Size

      3.2MB

    • MD5

      670606f82f9397e194792a27ed81b5be

    • SHA1

      295e7775d033ccf053de835b1be0c98c558b6e0f

    • SHA256

      09b0941f68fa3c66ef1acdf31c008cc163ec1f8c0dd16fae27f33b1223636b87

    • SHA512

      d8878d0dc5e52c785a8a2df8ab4802e3e11ee440364e650404eb809e942219f52bb02303a9d40c250531f18a3bf78dbf8731a7bcea3b85dbcff614a4fb3c76bf

    • SSDEEP

      49152:NNTM2u7uusjldYuNEGp5fHMGHnN1RdCWz:euplEIHHN1nC8

    Score
    1/10
    • Target

      MiniUpdate/Xor_Plus/Settings/tga.bmd

    • Size

      54KB

    • MD5

      48907a9fbd22ce4c93cded3fd37abdd1

    • SHA1

      48c36e02f44e05524064934e4bf1d1474e43a320

    • SHA256

      bab64e9fc60c0419b76f0826b6508c25204b9bc4dca872241e7625978983b095

    • SHA512

      4dd2b7e8d6e88abfc7b8e0c2629dbd58fa1efd17d3cb71dba9940ae62098ee6d10b86ef677f552fd8baec2768c3f9f5fe9c3edea7ef3e213d60afe98649d6417

    • SSDEEP

      768:Yx88NNxBCjNTsTlAqnin7hxkkSwZDynTEDY98xhadPv91T:ClNNahg4xkmgBdPvHT

    Score
    1/10
    • Target

      MiniUpdate/msvcp100.dll

    • Size

      411KB

    • MD5

      03e9314004f504a14a61c3d364b62f66

    • SHA1

      0aa3caac24fdf9d9d4c618e2bbf0a063036cd55d

    • SHA256

      a3ba6421991241bea9c8334b62c3088f8f131ab906c3cc52113945d05016a35f

    • SHA512

      2fcff4439d2759d93c57d49b24f28ae89b7698e284e76ac65fe2b50bdefc23a8cc3c83891d671de4e4c0f036cef810856de79ac2b028aa89a895bf35abff8c8d

    • SSDEEP

      12288:iHEqYsrMWIqz473PTiPoH/aGhUgiW6QR7t5qv3Ooc8UHkC2eKq87:iH9YsIWIW4rPTiPofaDv3Ooc8UHkC2e8

    Score
    3/10
    • Target

      MiniUpdate/msvcr100.dll

    • Size

      752KB

    • MD5

      67ec459e42d3081dd8fd34356f7cafc1

    • SHA1

      1738050616169d5b17b5adac3ff0370b8c642734

    • SHA256

      1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067

    • SHA512

      9ed1c106df217e0b4e4fbd1f4275486ceba1d8a225d6c7e47b854b0b5e6158135b81be926f51db0ad5c624f9bd1d09282332cf064680dc9f7d287073b9686d33

    • SSDEEP

      12288:fQmCy3NeRjkpQmj3oaMtQqjoygfXq3kon9IlbgaOxQdVJJ6j5EBKX8hR5:ImCy3VQs9MtLjTgfa3kon9FaOdEz5

    Score
    3/10

MITRE ATT&CK Matrix

Tasks