6c0e868e5f7221fd942251784f8aad1e0da1b0b6abbbc52985845d8c1c7a316d

Resubmissions

07-11-2023 19:57

231107-ypfmlsgg75 7

Sharing

Copy URL

Twitter E-mail

General

Target

t.zip
Size

95.7MB
Sample

231107-ypfmlsgg75
MD5

2b2e9d4e615328252af0e281efdb5b0b
SHA1

7ba0660b7c5e784e07854eeae78fa576406482f3
SHA256

6c0e868e5f7221fd942251784f8aad1e0da1b0b6abbbc52985845d8c1c7a316d
SHA512

bd3447df808499c9e3893d967d3d254a57616af11ea9da6a8cebbe5964f01fde38853f53d19a0b685a483fbcfbee6fdbe227fb2caef64efea5f49c6ede781eec
SSDEEP

1572864:NJeyO6J1H9L30ATThck0yUQE4RsGV/lUNj/AAlgVuLDaWaR4DKfKmVZird:hhJNlc3y3EQVm/nlgKIVV8rd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  GD 2.11 paint/GD Paint.exe
- Size
  
  6.5MB
- MD5
  
  fdf231f7dc5d1c57e023f4148227edae
- SHA1
  
  dbb13500a972217b801d5d7656a19ebff1a24524
- SHA256
  
  a2b2424171870437cd55743572dc717982a0b2f33abe4f6e1ff7bc3cafb9ab3b
- SHA512
  
  5a133c3318e694e699428f9e9c7a94e14e7bcd4aa997f4ce52a66bc70d527393a037e93183fde230bdaffd5b92fc9a6a209bb5c63312a12c38356d206eae7813
- SSDEEP
  
  49152:Bug8dPHi2XXq8dWlHIuKO77iX+4kVoVNG+w6xfS+w6xfSExfSRaTQAYjzDTjE:QDnq8W9KO7e2GVNVVxfS+VxfSgfSR
Score

3^/10
behavioral1 behavioral2
- Target
  
  GD 2.11 paint/Resources/xStep.mp3
- Size
  
  1.3MB
- MD5
  
  57390e094c37599a790095af692cc039
- SHA1
  
  3d08f483e1a43f029164eb06d89693446f314f48
- SHA256
  
  9164bf3594a2b0d2ce80e80927bab95d8cbc2e80f5a0198112c178957b0a1621
- SHA512
  
  54ee65cb2965c89c54b85358e0769bd0d361f804a7c29183d11d89e6fffe2374016b68affcf7928f76e2c28c506103f6047f09883537607476c0b47062a07fd8
- SSDEEP
  
  24576:C/QH9dD0uc1tKjUvoCcHvtui+CWoIADt4BqgepaI+lUlAOhYfe4gyAKNOR7rFUGM:C/M5ueUvodHvtuYWDAmBFeP+lIhYfvgY
Score

1^/10
behavioral3 behavioral4
- Target
  
  GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x64.exe
- Size
  
  9.8MB
- MD5
  
  c9d9eebccef20d637f193490cec05e79
- SHA1
  
  15d032d669078aa6f0f7fd1cbf4115a070bd034d
- SHA256
  
  cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223
- SHA512
  
  24b56b5d9b48d75baf53a98e007ace3e7d68fbd5fa55b75ae1a2c08dd466d20b13041f80e84fdb64b825f070843f9247daba681eff16baf99a4b14ea99f5cfd6
- SSDEEP
  
  196608:n9A3D5MBD0vwqMKgL29M2JWMWiKV/nPlnqIaAAVINqsAsbPnpCxmz7dU8:23D5MBwZMd0b4oSQ7VSrAs1gEdU8
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral5 behavioral6
- Target
  
  GD 2.11 paint/_CommonRedist/vcredist/2010/vcredist_x86.exe
- Size
  
  8.6MB
- MD5
  
  1801436936e64598bab5b87b37dc7f87
- SHA1
  
  28c54491be70c38c97849c3d8cfbfdd0d3c515cb
- SHA256
  
  67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d
- SHA512
  
  0b8f20b0f171f49eb49367f1aafa7101e1575ef055d7007197c21ab8fe8d75a966569444449858c31bd147357d2bf5a5bd623fe6c4dbabdc7d16999b3256ab8c
- SSDEEP
  
  196608:e9A3DAnfudQZKuNK0kMp2Wxw2tr3aA5Jegn9kaK6Hj0aaNz9ZBJ7C:t3DAnGKZKuNK0SvAn9kaK6gaaNRZbC
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral7 behavioral8
- Target
  
  GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x64.exe
- Size
  
  6.9MB
- MD5
  
  96b61b8e069832e6b809f24ea74567ba
- SHA1
  
  8bf41ba9eef02d30635a10433817dbb6886da5a2
- SHA256
  
  e554425243e3e8ca1cd5fe550db41e6fa58a007c74fad400274b128452f38fb8
- SHA512
  
  3a55dce14bbd455808bd939a5008b67c9c7111cab61b1339528308022e587726954f8c55a597c6974dc543964bdb6532fe433556fbeeaf9f8cb4d95f2bbffc12
- SSDEEP
  
  196608:19OaQ54oYY7jLwXjZ41OON2uk3bQWgtyccMEL:Gz5x7jLXkmkU4cFe
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral10 behavioral9
- Target
  
  GD 2.11 paint/_CommonRedist/vcredist/2013/vcredist_x86.exe
- Size
  
  6.2MB
- MD5
  
  0fc525b6b7b96a87523daa7a0013c69d
- SHA1
  
  df7f0a73bfa077e483e51bfb97f5e2eceedfb6a3
- SHA256
  
  a22895e55b26202eae166838edbe2ea6aad00d7ea600c11f8a31ede5cbce2048
- SHA512
  
  729251371ed208898430040fe48cabd286a5671bd7f472a30e9021b68f73b2d49d85a0879920232426b139520f7e21321ba92646985216bf2f733c64e014a71d
- SSDEEP
  
  98304:hQEKzHx15bWUuBrNatjJh2eNUrzKRL/RaIswn7aBOC5qZxVqFb2iExMc7FvxwGvf:WRDnuBotjJh2emr8L/YIsG7MOgqHG64
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral11 behavioral12
- Target
  
  GD 2.11 paint/fmod.dll
- Size
  
  1.4MB
- MD5
  
  9a9fc4fea3bdd3f3fa09b0aa43dfee07
- SHA1
  
  b2c3e267ac33a50c3c5b69208ca1fb76cb4fd658
- SHA256
  
  9cefee362589ed05b571ad3b61a2b37c8bf593be0a6a560638c2b79986776368
- SHA512
  
  53c56cc01e03f74d82b3acc4afb91044df10058643ba179d50a9b8b86f9f49770ff7eb8f804d42fb94096f7fa16a40ca7c3144103451cb1059a2156b3007a732
- SSDEEP
  
  24576:QUumAPpnkv2jg91qDQXIq6paXK2oGCV0y8KZFpVMS6Xcyjj:QUuHyT91qU+pmKZjwKLmLj
Score

3^/10
behavioral13 behavioral14
- Target
  
  GD 2.11 paint/glew32.dll
- Size
  
  324KB
- MD5
  
  7399bc6fcbcfe81b6437d37d45d27e00
- SHA1
  
  254ac4f5e56cd5ce14d31f824de7949b09597c78
- SHA256
  
  1ea8aedc46418e08aeabcb91c16fb4a0ab669924dd0a6071d143f13cd932a022
- SHA512
  
  bfffdd518b1a7a4890762e38861db465e187dc197aa6b02f2644ac798e0e03e6f6b2543e24e92e3a16a82ee3d9f795ff12845caf174b2d1b5f6800d7ae1941ea
- SSDEEP
  
  6144:GzLQ5Ht2YVVlGSAkApyg8YifaTzaOAz7Du:6Q5HkUVzH
Score

3^/10
behavioral15 behavioral16
- Target
  
  GD 2.11 paint/iconv.dll
- Size
  
  868KB
- MD5
  
  73af5773bf5627fe771bf6809ec839f9
- SHA1
  
  69d9597991dd0d1c6b478174aaa85b0e8175d0a7
- SHA256
  
  6cd69191469bf13f0cea70837bac9b1e7871c116f5f6f18bef5a6a9575c020c9
- SHA512
  
  64b631454d1d16709ae96cca95e8e3dd6049841c53ef6c4643b1a5b28a32fe6bfacb86337e93b5f9f2abf43d0233b094646b8065d3c1fafeaab7c3d6e371b864
- SSDEEP
  
  24576:Vf2VfWlcKu6Gavkg3NydIbbbI4IBAUZLY:ZuscKu6GaXUT4IBAUZLY
Score

3^/10
behavioral17 behavioral18
- Target
  
  GD 2.11 paint/libExtensions.dll
- Size
  
  280KB
- MD5
  
  a4f4fce308de7f85fcddc7a35c8b3e0b
- SHA1
  
  595928dceca7855b10b55c4579820fbd1e69845f
- SHA256
  
  cde619c28e7ffbc7374bd2c5e62344ff0687d5922e721717c89ea56af3278b46
- SHA512
  
  b3f884da642ba1af8a1c8e1838a1bae5f60bd64eba33c4467e8ae333a60d2b0809cda451c3dd9477077a39b331db298127784690cccd0af9c9794d4fef613350
- SSDEEP
  
  6144:ujjeDzyKCMijQaErrHr5CG7D7gcGRCsJvsrK5QQMe2:BDzyBjZMHr5CG7DPgGK
Score

3^/10
behavioral19 behavioral20
- Target
  
  GD 2.11 paint/libcocos2d.dll
- Size
  
  1.7MB
- MD5
  
  29cfb52b30b2f487e30da873a4f20abf
- SHA1
  
  385b53196dc5e2a1a009bde23551faf9ba1d380e
- SHA256
  
  c17c4eddf891c3c1f2e24129e9d9dc49a027c5c7827f77e20cc8fd311be327a1
- SHA512
  
  fd520051c48995e527fb57799f2e7f58d4a0b26eae820afe41e7e1c9dbe35b41772cd870ac92feb640ac23270ef46b789c157733c97d3bf8af04c1ad5dc09824
- SSDEEP
  
  24576:cVtR9yxzz3nJYZl4ZbtMCeGg7dP6BXt/NKl9vl6Wm8y0vrJTQYOVPKRqicw0:cVtkFX2SgMdN69vlhyOJTQYOVPecw0
Score

3^/10
behavioral21 behavioral22
- Target
  
  GD 2.11 paint/libcurl.dll
- Size
  
  1.1MB
- MD5
  
  a629bf05e48171a7152b15c479727da3
- SHA1
  
  b39c487c3a8ece83ef8bdecd2e37537c6617f9e6
- SHA256
  
  db4e84c77b41bd0e40e3b29db518faa44d4a40df802299befc21f87c16ec1124
- SHA512
  
  13596fc1f5be8de92177e7ee5e09a37e7f829ebc36678ff5233b627b7f798307270c69c9dec05407c1d758ff421484b66261a9e2c3abde7cf24fb0b5b15774b9
- SSDEEP
  
  24576:LX/2J+LaOzIx2uPOAr1faOn4fv7oonBUzPnAbcmTEp/y9qQ1II:KmaO8DOwfwf+PucmTEp/8f1II
Score

3^/10
behavioral23 behavioral24
- Target
  
  GD 2.11 paint/libtiff.dll
- Size
  
  513KB
- MD5
  
  c741db91cddb32c0ccd1fab980b1a5a4
- SHA1
  
  08f624cff407b25c6ecca087f763bd02e69231bb
- SHA256
  
  2d7b7f76089829aac2fa043d712e3a908563bf77f4e7da6e82d86bb0467a9feb
- SHA512
  
  7f92e7cdc0feb16ca42eb9f588a92a481b402ef00c0e02b8236f8925bd828507a4e6c1b576d9639184a15322107d0d3810817d1529ebf6f94ff18ea070c67e76
- SSDEEP
  
  6144:SymBVjFxF2nv2aY+NUXgJWnjUz2XyGK77f4NJrzNfQv3vCJYiY2IGEBg6CD:cBVp2Y+W1jUzWY7f4X7JYiZH
Score

1^/10
behavioral25 behavioral26
- Target
  
  GD 2.11 paint/msvcp100.dll
- Size
  
  411KB
- MD5
  
  e3c817f7fe44cc870ecdbcbc3ea36132
- SHA1
  
  2ada702a0c143a7ae39b7de16a4b5cc994d2548b
- SHA256
  
  d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
- SHA512
  
  4fcf3fcdd27c97a714e173aa221f53df6c152636d77dea49e256a9788f2d3f2c2d7315dd0b4d72ecefc553082f9149b8580779abb39891a88907f16ec9e13cbe
- SSDEEP
  
  12288:zNb8zxr1aWPaHX7dGP57rhUgiW6QR7t5qv3Ooc8UHkC2ejGH:zNb8Fpa6aHX7dGP5Kv3Ooc8UHkC2eKH
Score

3^/10
behavioral27 behavioral28
- Target
  
  GD 2.11 paint/msvcp120.dll
- Size
  
  444KB
- MD5
  
  fd5cabbe52272bd76007b68186ebaf00
- SHA1
  
  efd1e306c1092c17f6944cc6bf9a1bfad4d14613
- SHA256
  
  87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608
- SHA512
  
  1563c8257d85274267089cd4aeac0884a2a300ff17f84bdb64d567300543aa9cd57101d8408d0077b01a600ddf2e804f7890902c2590af103d2c53ff03d9e4a5
- SSDEEP
  
  12288:uZ/8wcqw2oe+Z3VrfwfNOOoWhUgiW6QR7t5ss3Ooc8DHkC2e77/:W/8wVwHZFTwFOOos3Ooc8DHkC2e77/
Score

3^/10
behavioral29 behavioral30
- Target
  
  GD 2.11 paint/msvcp140.dll
- Size
  
  612KB
- MD5
  
  8d55109b9757f997fce995b2020eb8ff
- SHA1
  
  a92330cb5bbec0310f3cfad3ccfde6b7b01cd377
- SHA256
  
  83efba3ef0f24b3018cab57a2236c81be61623d7fac5b4ec21666d9eec699bc6
- SHA512
  
  9a64a5593fa546d2a3158374f301163c2e9464f48ad95b19e1cdf2601071877bd3fc220272869d82563e588c7dae4ced8ff9930eb6e1056da589d7c1dce6abc7
- SSDEEP
  
  12288:HKud5zgdkWhgdq/fazwEQ96d2GYGyQEKZm+jWodEEVmHu:NKqzwEQ9+2D9QEKZm+jWodEE0O
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Loads dropped DLL

Checks installed software on the system

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32