General

  • Target

    Expensive-2.0.zip

  • Size

    76.7MB

  • Sample

    231111-1962eabh2t

  • MD5

    99e9fdcd4cca95086260bfcab9166e05

  • SHA1

    6aa14d299bccce6640cc9ab0ebbe007371dfb7ae

  • SHA256

    565e3abc2f08e6231bb981c366fccfe42796b6ff530bdc66d1aaa5f7e23b05f0

  • SHA512

    2e4bb94709a7d76e07f2b0789d229b2d0a3758ae10d6ba4d2a1cd090354b09b36b94e960c2b4cf8cb5d91eb0ab561d17fbf4640801dd6f2eb475a25b677e396d

  • SSDEEP

    1572864:3fawu0n/faKWSo3JwTAeQyUM7L332Py12Fg4zPFiUUFDv+iB8:hugfdg3Jev5f8y1U7EUiDv+

Score
3/10

Malware Config

Targets

    • Target

      Expensive-2.0.zip

    • Size

      76.7MB

    • MD5

      99e9fdcd4cca95086260bfcab9166e05

    • SHA1

      6aa14d299bccce6640cc9ab0ebbe007371dfb7ae

    • SHA256

      565e3abc2f08e6231bb981c366fccfe42796b6ff530bdc66d1aaa5f7e23b05f0

    • SHA512

      2e4bb94709a7d76e07f2b0789d229b2d0a3758ae10d6ba4d2a1cd090354b09b36b94e960c2b4cf8cb5d91eb0ab561d17fbf4640801dd6f2eb475a25b677e396d

    • SSDEEP

      1572864:3fawu0n/faKWSo3JwTAeQyUM7L332Py12Fg4zPFiUUFDv+iB8:hugfdg3Jev5f8y1U7EUiDv+

    Score
    1/10
    • Target

      Expensive-2.0/Expensive-2.0.json

    • Size

      34KB

    • MD5

      12f6083d7bd0ebfd6b55cf593cac8f1d

    • SHA1

      2a0f6f4199353db2d851d6ed7e79f7c64302b39e

    • SHA256

      ced3b928c09ae62b82db67346938e0bd83fcf14f103435a8bd505c69381913e1

    • SHA512

      51a6049b5ba121ab237a8fdb80c21d27c02436a93abec2bce1d05f7be9220be47cc6b7cfc6ec8550b7a121970cf596c785bf859ca3a629ea9fb9bf2a9449ee2d

    • SSDEEP

      192:gsukdxGa+aLaTsyvassia5aRPada2aeaRa8ma3NagVajaOyapaQa9axaRaSa/laU:gsnrg6+1pfbSqFCSdkI5U5h

    Score
    3/10
    • Target

      Expensive-2.0/natives/OpenAL.dll

    • Size

      1.0MB

    • MD5

      a21338306c8027ebc459c57db8459777

    • SHA1

      dc8f7a5704164fe3dff3631c326bab7159a9358d

    • SHA256

      1e128050e6ecd9da7a030f76b24d93a1dcb7de55b02d80cd2e2683818e895b5a

    • SHA512

      eb80fc1924985db488175ee87389cf8ce7e851f78370f339a77ff09d7323ce5fee2e63e3562d299a6436a4d5f31cce0194fe2d1c9c4cc47809ba6d3cfb8a47eb

    • SSDEEP

      24576:Xr0+fjUIVeMqRF/HuYDstAyAS7vUipuBuAEgFpti33Ja:PjF7qRF/HYrZvUnBuAjpti33M

    Score
    1/10
    • Target

      Expensive-2.0/natives/OpenAL.dll.git

    • Size

      40B

    • MD5

      aab7d521c776b290c5eb725832d0c2b5

    • SHA1

      711ed36fce3edf284d01c0657f0cd56154cd1fb3

    • SHA256

      6369f0eb7ede17f649b06cf6b34bd8a1e5a44edb69e93c975aada2adc683a4dc

    • SHA512

      54b10d77df099c1a0e36e43a4bc87d6d206ea1bec345385d3d38b8cea8df9cb98a168bc95b1ca3fd03afd4584149858f3bc15e1337bdcdb4a6f0bfdbc5aedec7

    Score
    3/10
    • Target

      Expensive-2.0/natives/OpenAL32.dll.git

    • Size

      40B

    • MD5

      aab7d521c776b290c5eb725832d0c2b5

    • SHA1

      711ed36fce3edf284d01c0657f0cd56154cd1fb3

    • SHA256

      6369f0eb7ede17f649b06cf6b34bd8a1e5a44edb69e93c975aada2adc683a4dc

    • SHA512

      54b10d77df099c1a0e36e43a4bc87d6d206ea1bec345385d3d38b8cea8df9cb98a168bc95b1ca3fd03afd4584149858f3bc15e1337bdcdb4a6f0bfdbc5aedec7

    Score
    3/10
    • Target

      Expensive-2.0/natives/OpenAL32.dll.sha1

    • Size

      42B

    • MD5

      6eef8babb8dd2c3ab1940937aa387ad6

    • SHA1

      4ef1b45ff9e0875820c3095f03c2b081e20911f8

    • SHA256

      13c3437d5de6aaf18f3a0e16a6f552ee7ec128c5e4bcc45986f92e9dc8796acb

    • SHA512

      77e7b0a3565d2b372456400d20784caca4d47a5031a75359a4b003f4a1c9b56d9cbdae730014a5014192a0f27720c7e54ba4d5adb1b9797d8cd623f2d03850d9

    Score
    3/10
    • Target

      Expensive-2.0/natives/SAPIWrapper_x64.dll

    • Size

      83KB

    • MD5

      214a0bc5ae5882495d94f7779d64b323

    • SHA1

      c4a293116e7531d950db2d5ea737e61a9912b61d

    • SHA256

      a8b701f1ed640bfc7e842f9bc07dd493fad3284f15bc1fa9dfc15371733d6326

    • SHA512

      0da432d50569f753c0c9831b8854732c0e23fb382ef36d17a1d460e8e4c431495ce0358cc658da87d19e39c58230370423a58adabdf3f92a578a2279d84a7e58

    • SSDEEP

      1536:/0tGA00KTHlHZeCbxnnQOzAGg1wsWjGpRsBQ+8/iJyzfGdc9dlVkloExc:/0tgTTFHZj9nnQOz1I0GpRsBQ+8/iJyZ

    Score
    1/10
    • Target

      Expensive-2.0/natives/SAPIWrapper_x86.dll

    • Size

      70KB

    • MD5

      3d47e750e4ec109d441a427ab8b37614

    • SHA1

      70e85ab3f880a7c3d5f0a9aae0f65661cb8af5a6

    • SHA256

      fa69dab9c06f3cdeb8bd7c1b017fb072ba4262682ea21a2e723f00a78f86dc29

    • SHA512

      c24579b0ec34bae0533997b3b4511fd3d590fce0d7881e6f6cda3c763437ecf525aabc203a6dbea4b3c912c3d4f989580ffe2021e9c482fa65d3f53117fe4ea5

    • SSDEEP

      1536:Gw3pkA45KEsgSCd5m89ZqQQ4hxsWXGcd38haRoD:asFwHx1hj38haRG

    Score
    1/10
    • Target

      Expensive-2.0/natives/glfw.dll.git

    • Size

      40B

    • MD5

      9d58a11052847be02502653b9fb9c9bb

    • SHA1

      e3744233ac832b0ad9a64047eb5a94628513ad74

    • SHA256

      61b515bfe67f2fb251566dade93ff3450ee0123e58bd94231bcab3ac255608b4

    • SHA512

      8456753d30cea67fb4a8aaabc71f5a4dcf1999f9df7ede7a551e083060c957774d10a7534e3f11ff5227707a8fc35350744cb248210a28076889cd383c85f01c

    Score
    3/10
    • Target

      Expensive-2.0/natives/glfw.dll.sha1

    • Size

      42B

    • MD5

      f6d4f19a41f245991382bbec2b787919

    • SHA1

      3a77059db5c1f40e3d201919e1a4d2720fbc00f1

    • SHA256

      7dc57d4c1876df5d36f0185c6653ec320c8243b9f660873c611942bd838ae180

    • SHA512

      0f413f38d6efd65fb1c1dc450a06fa7721d5c43b68fc001ef31b1941f931e25ffe224af0fc314262cf9715a1632956e7212a74a52f71261ea214bb97775a1a07

    Score
    3/10
    • Target

      Expensive-2.0/natives/glfw32.dll

    • Size

      326KB

    • MD5

      5c7b7a7e9ceedd779ddf531ea58db8e9

    • SHA1

      b9a18c65931b474a453cca5b20903220975f0fc9

    • SHA256

      db38ee25b700dd4228f844ad22569c155cc3b13ea3940576832a8a9051acfa05

    • SHA512

      fb5e42cd087776b9fdbc55fc90e2345c7735a9dcf52dc3c9917df344e9b4a84b338e15192a648d480bad27544176ee4430440f3f94c181870708b8bf70906b6a

    • SSDEEP

      6144:KP2tJ7heVTpbUEazsvJezmofinyAOYTi2O:htiTpYDoJe6SIO

    Score
    1/10
    • Target

      Expensive-2.0/natives/glfw32.dll.git

    • Size

      40B

    • MD5

      9d58a11052847be02502653b9fb9c9bb

    • SHA1

      e3744233ac832b0ad9a64047eb5a94628513ad74

    • SHA256

      61b515bfe67f2fb251566dade93ff3450ee0123e58bd94231bcab3ac255608b4

    • SHA512

      8456753d30cea67fb4a8aaabc71f5a4dcf1999f9df7ede7a551e083060c957774d10a7534e3f11ff5227707a8fc35350744cb248210a28076889cd383c85f01c

    Score
    3/10
    • Target

      Expensive-2.0/natives/glfw32.dll.sha1

    • Size

      42B

    • MD5

      ea86d55e20e0f21818750c211f45339c

    • SHA1

      b2b28033818b03951b3e908a3d6e1a0b4d59d238

    • SHA256

      4e9f87c23599ec4f7a4e0f525130c5386f53265c7f977fe9ccaa85e7b2a96e6d

    • SHA512

      36a3530ae8cc9a487dc9e30416d42527c2c24bb2ffe42b7f552538124e4c291533c5a1c5bcd758b803deaec725ecb49b918c80e4f49aaba1ff596f22d6f6c465

    Score
    3/10
    • Target

      Expensive-2.0/natives/jemalloc.dll

    • Size

      248KB

    • MD5

      cdcaa2d4874a0aaab526c52e1fff2fea

    • SHA1

      8a6eb00b934da6c97b0dc9d2dc321843076c8987

    • SHA256

      b147a3cc1fce8a514a558a030fe647a4a91761769eedec1c1ca2be1cd712a9e8

    • SHA512

      270ae883818c2cea891c3efae717aa3f455c902721ad80441b0f2b28e58bf9aeba67bb1fb65d76f20d09a4c937a089ee1018439b3815b9fcdb7d7fdcce704853

    • SSDEEP

      6144:5ISPvZG+86Mzlpb2mnk5uIXhy3hKT4W5i6wb:5n86MppbkxwKMb

    Score
    1/10
    • Target

      Expensive-2.0/natives/jemalloc.dll.git

    • Size

      40B

    • MD5

      6f4c13fe58b839ee7f057c0213688d38

    • SHA1

      497d2f86f4fce8d743c6f405683aca504874bc06

    • SHA256

      f6701bf0645e8b4fdc10cdbff75bd1a5b5270c000318d41e4cbf091c6fad53a6

    • SHA512

      8feb7c707e1c3eee175970f2bf71275091da79b1de6e6682ab9e5082a5719771242d9d6c3eeb022549bc455f80e7ab046e7814b301c018460454a5ef0fa0d651

    Score
    3/10
    • Target

      Expensive-2.0/natives/jemalloc.dll.sha1

    • Size

      42B

    • MD5

      c75adb723dc1e8da6882e971de1a409b

    • SHA1

      47b93ba6ff7003387791188c2c4dda71c18c4c1e

    • SHA256

      05c0fb73b71476c9885baf76fcbf1e9d6ca70d7eee6218145f86152e422581f9

    • SHA512

      b19d170f058959090c4ac59f2d18d8a45ab929d8a9008aebca97be82af9abeb75c78d335b61f598d44510d6d7d121ae4e97defd60bc98b0a5d67584496910807

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks