Overview

overview

6

Static

static

1

Update/1.3...er.exe

windows7-x64

1

Update/1.3...er.exe

windows10-2004-x64

1

Update/1.3...64.exe

windows7-x64

1

Update/1.3...64.exe

windows10-2004-x64

1

Update/1.3...te.exe

windows7-x64

6

Update/1.3...te.exe

windows10-2004-x64

6

Update/1.3...er.exe

windows7-x64

1

Update/1.3...er.exe

windows10-2004-x64

1

Update/1.3...64.exe

windows7-x64

4

Update/1.3...64.exe

windows10-2004-x64

4

Update/1.3...re.exe

windows7-x64

1

Update/1.3...re.exe

windows10-2004-x64

1

Update/1.3...nd.exe

windows7-x64

1

Update/1.3...nd.exe

windows10-2004-x64

1

Update/1.3...up.exe

windows7-x64

4

Update/1.3...up.exe

windows10-2004-x64

4

Update/1.3...te.dll

windows7-x64

6

Update/1.3...te.dll

windows10-2004-x64

6

Update/1.3...am.dll

windows7-x64

1

Update/1.3...am.dll

windows10-2004-x64

1

Update/1.3...ar.dll

windows7-x64

1

Update/1.3...ar.dll

windows10-2004-x64

1

Update/1.3...bg.dll

windows7-x64

1

Update/1.3...bg.dll

windows10-2004-x64

1

Update/1.3...bn.dll

windows7-x64

1

Update/1.3...bn.dll

windows10-2004-x64

1

Update/1.3...ca.dll

windows7-x64

1

Update/1.3...ca.dll

windows10-2004-x64

1

Update/1.3...cs.dll

windows7-x64

1

Update/1.3...cs.dll

windows10-2004-x64

1

Update/1.3...da.dll

windows7-x64

1

Update/1.3...da.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e1dfd0fe2f4be63343c311ece0c39c357bb7341978375661707d1a3bec39046

  • Size

    4.4MB

  • Sample

    231208-wfhz9sdbd5

  • MD5

    b6b808b681d4b843cc188b6f3987fb9d

  • SHA1

    64ee57b099334278bd20d9b0718b364ef0284f70

  • SHA256

    8e1dfd0fe2f4be63343c311ece0c39c357bb7341978375661707d1a3bec39046

  • SHA512

    e772a37d39a4941f715ead0b24c803f239a14bf5f3ac3386297aec7ab15759da10a0e0ab881e715f2b128e214939b320c3eef9d033573126f5d59273f41db6d3

  • SSDEEP

    98304:tSWlmS9jJEuCKsWIuV0lqL1otB3RyRC267SvfbxmTioqfRVnDxdg:t/meEFKsWI60MWt1RmM70TcuVnDxdg

Score
6/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      Update/1.3.36.152/GoogleCrashHandler.exe

    • Size

      302KB

    • MD5

      381c22092074255a291f4c9946a5c28f

    • SHA1

      cfd3817b09553851738818c55a01d18c7591f95f

    • SHA256

      c94dcb40543cb405474597c7e7c9d8ef558b1422797752625db9ca4faf53689c

    • SHA512

      e1f176f4d3f9b7ac057fa427d006e1d6c918e3bb623a713435011e6e27ba7728b22d501789f449cd54e5a58d19d62c25c7f55f8185b022b22cddcab070a385cc

    • SSDEEP

      6144:YDZ2PxZD6LFSqE7lzueGCfgiAPj6SCAOJOTIwc4qQx+DeZAVy6f:YDZQZ57YeGCfgPCzOTIwpx+De6Vy6f

    Score
    1/10
    behavioral1behavioral2

    • Target

      Update/1.3.36.152/GoogleCrashHandler64.exe

    • Size

      398KB

    • MD5

      f1de10a8b9909a4af635112c8866d534

    • SHA1

      c340effbaed989e7f8ffc6f7574856cd8ed0d18b

    • SHA256

      5df635fd14558c0a25ceecd2ad51fbc0d129a8fe681d36ecc9e7254ae0e0a40e

    • SHA512

      a227edac6a6d440da6e13a7d0ecbf42f6ac6acecd7591e0a105bf5e8e417d54e0610d9d28c649c510dc91c454894bdeef7f4c4d3463c57225e1e7cbc142b0924

    • SSDEEP

      12288:JkFUiKmkv2zUM2WJoROZApostpooyEXKwDfq1x+81:qFq/9ostponMKw7q1xH1

    Score
    1/10
    behavioral3behavioral4

    • Target

      Update/1.3.36.152/GoogleUpdate.exe

    • Size

      167KB

    • MD5

      54a010c60be10b65eee5506720fccabb

    • SHA1

      18cfa274db7d6567441db036eb2b25b720d58884

    • SHA256

      9a4b728a0b652056cbd312dd917adc08c72c89b6f666472f4e3d59a1b8039d89

    • SHA512

      afb51acc8b684db72d5ee9ad7c340d852322af0862a80976c6830330c9e094bc77e760a5806ba883b437c0d10139aa783c21cd87acd405c453df98422d6b99ae

    • SSDEEP

      3072:TwzvOYNt5YP/aKavT/DvbEvK9aobNI2B+DlIH3angqtirxzGlB89Vo6FoCG55lOG:0tiP/aK2h9H/B+3ChE

    Score
    6/10
    evasiontrojan
    behavioral5behavioral6

    • Target

      Update/1.3.36.152/GoogleUpdateBroker.exe

    • Size

      114KB

    • MD5

      9482267d8e065d5c3cfe30c69b41b30c

    • SHA1

      b0d7b3b52fc3faac508a01a61ff9e9e7ed8a16fd

    • SHA256

      23085b1bbb7d7b175ee9c4fc9db4e7dd8981a3f5246cd864ab178c53c0612758

    • SHA512

      33c19803c00834755d2a6e75481b0bc0d50dfaeb4cf95d34bc4bd22b82cb58ab72f7e7af9d1e56c19e68374365d4fd095b8a4121c0c0099254a0bdba2dd86c63

    • SSDEEP

      3072:uMxJ7Rfp8K172YPrN4vzT+PgZpsB+I3+EO5C0enIb:uMH7cCxPapsB+w9woq

    Score
    1/10
    behavioral7behavioral8

    • Target

      Update/1.3.36.152/GoogleUpdateComRegisterShell64.exe

    • Size

      190KB

    • MD5

      067c069e3a48184c32333ebbd152eb01

    • SHA1

      e13808892bb9679a81d0ebdf5f51a6df42400149

    • SHA256

      55f4339688f1e72f5da0819abaa1d1f0630f39c496ec1ea0ad8e3458c8df6b02

    • SHA512

      74b3aecbf11f94948264b29481839bdf48d7b37f966cb5e2aa3062e66cf3587ecf247563e3bcc1837e1fb89602d327fdb4f22fa98c695b4d5768bc3f1903a2b4

    • SSDEEP

      3072:HVS38yXLiGySAcz4hp9wuzkHUYqWEybmoY46+pW8UJHqDMC0JGB:HVS31GGySAcz4hUmA0ohnqTm

    Score
    4/10
    persistence
    behavioral10behavioral9

    • Target

      Update/1.3.36.152/GoogleUpdateCore.exe

    • Size

      224KB

    • MD5

      d4b257c01bbaa68d15d8368475a4e227

    • SHA1

      fafae083a882e163cfa8c77258baaab891c17df2

    • SHA256

      dd6dd981c7f1a6673dc8cc3a0fe1fc8a54e059a9fdb0545b0dc9258299c0c546

    • SHA512

      167494ecb32196e8e199d7d14a1c0498eee45ab8e8862e5441539fa569313bb602b9e979935c7cc5ba39300e54e8bdbdf2f502e4ea24b5e8339fd2c3685ca502

    • SSDEEP

      6144:DgiC4bXqsTk90qC1AOb7eswf1Px++fD8PJ:MitXqsTkiR7twRx+gD8PJ

    Score
    1/10
    behavioral11behavioral12

    • Target

      Update/1.3.36.152/GoogleUpdateOnDemand.exe

    • Size

      114KB

    • MD5

      27a531be4e959f1d7772133949832a10

    • SHA1

      da4d3202e33c4a4c9480e8bff7726bbe0bc88e84

    • SHA256

      09b9f613621fa39c97de92265fb886be93be5b37fe0985c54eb358efbf8befe3

    • SHA512

      7e4e78a2f6ad80ed822c40dfc4466da49a4941f42ce92b78f40f0b0d3e22c087985efb134515d5592f7b86a4bc583733ea9eb7d33fe6e29d6e771572d75421d6

    • SSDEEP

      3072:NER5AhC48S1m2YPrh4qR8v7ZksB+I3dqlC00zH:NEXAe6QP0ksB+wYl2

    Score
    1/10
    behavioral13behavioral14

    • Target

      Update/1.3.36.152/GoogleUpdateSetup.exe

    • Size

      1.4MB

    • MD5

      5dfac3b5ad489e5197af2bacd260680c

    • SHA1

      8ce5802b2dd9c52be438291a05fba6b2cd37c47a

    • SHA256

      9e4489a37949e9c0fb92111fdc88386043c4b26267a8e51cc0aa5ecb6ebc79e0

    • SHA512

      bb2d0c5a55a010411fb51eaae131056582d407e61ccfa1f93e21b1488bb130dd5b24f32606d8c2590f35b254f9baf665f51a9364ec13592d585ddbd99e4ca6dc

    • SSDEEP

      24576:Jw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LT:PKjKWQc2b1FVgbjrjxPe1pbPSQm1FloS

    Score
    4/10
    behavioral15behavioral16

    • Target

      Update/1.3.36.152/goopdate.dll

    • Size

      1.9MB

    • MD5

      85c58712e4ec9a730396f6a87f755144

    • SHA1

      b946438a357c445e46c6e11a7d4ff6a8d1668539

    • SHA256

      a249cfdb846f0dd407c14486c173163c4339eed5be208a2a7be12a0ef0e21a3d

    • SHA512

      869820ad084b82f1db2785c1fa6376369d4b8b9cbe059be4592be8aec83077a7452360fd5609fe0dc744af0a220ef0b51cb2baf24e7d2d31e619330575e8c25a

    • SSDEEP

      49152:1idGTn3pgHPqA4vR1WDM0CEzoTNUitBNOLQ0:1idS3VA61WD9HLF

    Score
    6/10
    evasiontrojan
    behavioral17behavioral18

    • Target

      Update/1.3.36.152/goopdateres_am.dll

    • Size

      51KB

    • MD5

      56506fa173857cd2cfedddb756a6ad56

    • SHA1

      7a572db2a2de47056beafe308b5f67c234c2c7bd

    • SHA256

      2bb6e6d59d58479602f19dbf2636acac40a27cef0ed61959a9c61e561363377e

    • SHA512

      4f3116252821882553e5651ae1e7d6a4368505170d19072ca78d00bf3c8674d96a3f9423f8a963e319abfc8713fe88f8beffda49364113aac543f1ad618b719d

    • SSDEEP

      384:4hS4k4sI+h2KtN8hNyH1Mn8E9VFK4iigp0IYi6ym4b94i/8E9VF0Ny3g1Z:sSZJbCaM8EAYGYi6yJheEeZ

    Score
    1/10
    behavioral19behavioral20

    • Target

      Update/1.3.36.152/goopdateres_ar.dll

    • Size

      50KB

    • MD5

      6c58efb273db057822aa7a93d3417bf7

    • SHA1

      54bb1f86cc7ff678aee7c7c2efb2e6f8977aa7aa

    • SHA256

      bad8390f56f21536287008f28fbc855781250a1c30dce64345a8f974117f08fb

    • SHA512

      1cd90f64eb9ef27bbf3b37de1aabd26ac68ada6bea0fb6c74319f7e5617fcc8fdb503fbb7db99185520bea565ff204cfaab84baace29d135b05f67417402210e

    • SSDEEP

      384:6zysanBDBG6tN8hNyH1Mn8E9VFK4iScIYi6yb5q4i/8E9VF0Nyx1:dsanTRCaM8EAcYi6y0eE9

    Score
    1/10
    behavioral21behavioral22

    • Target

      Update/1.3.36.152/goopdateres_bg.dll

    • Size

      53KB

    • MD5

      de51ee7d6abf67cb175defb18778e4ad

    • SHA1

      2c830c982b8c3be515bc49a5cf9a7d4e2683e6f9

    • SHA256

      f1aa2f7f925f43b6fd5d8fd434d245bdaf4782ba0250f5b4a3b5fef6151ffc4f

    • SHA512

      e112a3e49d7c44430f1e4c04322a4a75888773c9bc609447565ba8043c8b981003d95a4228baf14fbe3f90a63bfef0d218628750e517f892ff45df7550efaf63

    • SSDEEP

      384:AQF/pQtck8aGIZBOc/tN8hNyH1Mn8E9VFK4iZFL7l9IYi6y8424i/8E9VF0NyHn3:1FhQl7DFCaM8EAxlqYi6yz2eEp

    Score
    1/10
    behavioral23behavioral24

    • Target

      Update/1.3.36.152/goopdateres_bn.dll

    • Size

      53KB

    • MD5

      c7ce022c59bc281c99877ecf7137b4ec

    • SHA1

      f53341a06bbbeb25948a0178ea5e45c94ce6cc76

    • SHA256

      f80738a1b58eb05d5fde4d45aa1dacabf85f6ce3e1baa278cea33821992a0595

    • SHA512

      834094a639b9e3fb48ff891e957f016583d0c0abeedf9b64f6bc51462b960ee72fc315f5cafa315d5a36b9e3829b733d9b8194d8ac437af434999e43ff433b08

    • SSDEEP

      384:F8bvUx7tVF7qTFoFrTFgRj+mBwHtN8hNyH1Mn8E9VFK4iy/IYi6ypIh4i/8E9VF7:2bu0FoFXFWBwNCaM8EANYi6y+heE9

    Score
    1/10
    behavioral25behavioral26

    • Target

      Update/1.3.36.152/goopdateres_ca.dll

    • Size

      53KB

    • MD5

      85c247e932c900cd6801ee6b9f5447b2

    • SHA1

      e5109d9f4302dcde77c98268ef4f72aa3955586c

    • SHA256

      6605e6a2ef6962229aff407f089189709217a3148cbe627d65ab8a460a3edea2

    • SHA512

      bc7cfc29b9152b759759d0a12de1b980216e52de7be0c4eb5ff9770f5bf5436b2e871774e590dc2cfcda3bf0d84fe02bfd3ee6a3a3309586f348fc60254e193f

    • SSDEEP

      384:x58u2yrzVu/k4bH9tN8hNyH1Mn8E9VFK4igEKWIYi6ygfSJs4i/8E9VF0Ny+kC:b8u2yrBuVTCaM8EAqdYi6yIAseE+

    Score
    1/10
    behavioral27behavioral28

    • Target

      Update/1.3.36.152/goopdateres_cs.dll

    • Size

      52KB

    • MD5

      5a855172a5d9600e96a8f95319c34e56

    • SHA1

      48d198db7526b067adf94536f6bf9a58c81b3469

    • SHA256

      ba0c71cb9828e6e164878f584aeb028ffc4841ca9243f033793048e42ab42e24

    • SHA512

      b083d601a2776cf683853aad587717eef914801e28cc81a71cbaf5eaeb296161621f09a5598d7481b3c5b661b1418af3c3d9523c4280b6498b4148977765b957

    • SSDEEP

      384:dcSIBWDqBkwEAufRtN8hNyH1Mn8E9VFK4ik9ZIYi6yL/mWVT4i/8E9VF0NyKpuo:GSfjfCaM8EArYi6yrmWZeE0H

    Score
    1/10
    behavioral29behavioral30

    • Target

      Update/1.3.36.152/goopdateres_da.dll

    • Size

      52KB

    • MD5

      82c3d98611adfef2f59450d4c26a8cc9

    • SHA1

      23fdb11422da90118d72c84532860f5c8a3a30db

    • SHA256

      1622fe231d4ab333ba7f5a6615e4865ca2f402efb78d95e2ea45da1e0f547e73

    • SHA512

      02645ad58f25ad37cee9cefd27afd2560286ce8201c3aad41b2c2c7c9bd1740f148f646526109a6affaecffe6b3e8ca8aa86deb73652da900d68579ffcc9d678

    • SSDEEP

      384:h1WfN3wtpOcqJLtN8hNyH1Mn8E9VFK4iSMHZIYi6yDkhf4i/8E9VF0Nyv47v:Pi3wxopCaM8EAwYi6ywhfeEA

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

evasiontrojan
Score
6/10

behavioral6

evasiontrojan
Score
6/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

persistence
Score
4/10

behavioral10

persistence
Score
4/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
4/10

behavioral16

Score
4/10

behavioral17

evasiontrojan
Score
6/10

behavioral18

evasiontrojan
Score
6/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10