Overview

overview

3

Static

static

3

FL_richtx3...86.dll

windows7-x64

1

FL_richtx3...86.dll

windows10-2004-x64

1

Global_Con...f0.dll

windows7-x64

1

Global_Con...f0.dll

windows10-2004-x64

1

Global_Con...f0.dll

windows7-x64

1

Global_Con...f0.dll

windows10-2004-x64

1

Global_Con...f0.dll

windows7-x64

1

Global_Con...f0.dll

windows10-2004-x64

1

Global_Con...f0.dll

windows7-x64

1

Global_Con...f0.dll

windows10-2004-x64

1

Global_Sys...f2.dll

windows7-x64

1

Global_Sys...f2.dll

windows10-2004-x64

1

Global_Sys...f3.dll

windows7-x64

1

Global_Sys...f3.dll

windows10-2004-x64

1

Global_Sys...f0.dll

windows7-x64

1

Global_Sys...f0.dll

windows10-2004-x64

1

Global_Sys...f1.dll

windows7-x64

1

Global_Sys...f1.dll

windows10-2004-x64

1

Global_Vba...f0.dll

windows7-x64

1

Global_Vba...f0.dll

windows10-2004-x64

1

supersck.dll

windows7-x64

1

supersck.dll

windows10-2004-x64

1

supervoxg.exe

windows7-x64

1

supervoxg.exe

windows10-2004-x64

1

timermm.dll

windows7-x64

1

timermm.dll

windows10-2004-x64

1

yacs.dll

windows7-x64

1

yacs.dll

windows10-2004-x64

1

ymsg12crypt.dll

windows7-x64

3

ymsg12crypt.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15e39a4d2e645ad11f78d9f647f807e8

  • Size

    2.5MB

  • Sample

    231224-2fcq5sfaf7

  • MD5

    15e39a4d2e645ad11f78d9f647f807e8

  • SHA1

    78b22a3c76471d924e705707874d7ab7a6520410

  • SHA256

    3fffd50a78c6ea6263d684f06e13aff9a230139091b7a9462ec358ceb6a91be8

  • SHA512

    a5ac8a9a93cfa4fd91c1781be930eec1f712d14a83f6823dc5be502a634e03fa4ab517dc52098fb4fa6f0e4acddb0b4b876e5ef6851e51ab3815306700171c26

  • SSDEEP

    49152:GPP3pEEx+OwxTRGW1cG080aUluNYvmfPGxbcTcReaxMJNI8TOdi9yMpAGx7OAJzd:GPP32ExMxdGvGvUlajP6bEqinI8TkiUS

Score
3/10

Malware Config

Targets

    • Target

      FL_richtx32_ocx_____X86.3643236F_FC70_11D3_A536_0090278A1BB8

    • Size

      254KB

    • MD5

      f5943c2f7cd00cdd27ee233b30ebd5c7

    • SHA1

      eba5337b95b9767f062c9ed439798235da77a7a4

    • SHA256

      9b0ea442af9e7e2dd19a009fe0dd2447e9e21835ad98201f677c308fe9bfcf7a

    • SHA512

      4de6a3708aee6aefb311e76c337bb145d54ca612b9a411d2f35a1f0162089176c0547c87ec2368be49c7e89e030676308d1a98c7f37e582780fafd05de12f647

    • SSDEEP

      3072:y2yywZ8NOAf90tLOsFZdASaIaOXUX1RmY1viVb6y/yg9FdYJEhN9dTm7kSkR/Umn:S78vfEBFZdASUT1RmMFkFdYJErWD6/

    Score
    1/10
    behavioral1behavioral2

    • Target

      Global_Controls_COMCATDLL_f0.3207D1B0_80E5_11D2_B95D_006097C4DE24

    • Size

      21KB

    • MD5

      3b180da2b50b954a55fe37afba58d428

    • SHA1

      c2a409311853ad4608418e790621f04155e55000

    • SHA256

      96d04cdfaf4f4d7b8722b139a15074975d4c244302f78034b7be65df1a92fd03

    • SHA512

      cf94ad749d91169078b8829288a2fc8de86ec2fe83d89dc27d54d03c73c0deca66b5d83abbeaa1ff09d0acac4c4352be6502945b5187ecde952cbb08037d07e8

    • SSDEEP

      384:23Fob3slaN3oF1fHICOoMzMv/QTIBjDVquODJXsUW7ftWs6:Yo7s28JnOxzMv/QsBjRqugXspd

    Score
    1/10
    behavioral3behavioral4

    • Target

      Global_Controls_Comdlg32ocx_f0.576D64B0_7413_11D2_B954_006097C4DE24

    • Size

      137KB

    • MD5

      b73809a916e6d7c1ae56f182a2e8f7e2

    • SHA1

      34e4213d8bf0e150d3f50ae0bd3f5b328e1105f5

    • SHA256

      64c6ee999562961d11af130254ad3ffd24bb725d3c18e7877f9fd362f4936195

    • SHA512

      26c28cb6c7e1b47425403ab8850a765ac420dd6474327ce8469376219c830ab46218383d15a73c9ea3a23fc6b5f392ee6e2a1632a1bf644b1bd1a05a4729e333

    • SSDEEP

      3072:3ESIiWD8uq4hCqUt6mqD1gRshBgH/voqJrwo2CocrJbQN6N2TRqEydzdHv2:3ETz566VgRyOJ0oDxQRHH

    Score
    1/10
    behavioral5behavioral6

    • Target

      Global_Controls_MSCOMCTLOCX_f0.3207D1B9_80E5_11D2_B95D_006097C4DE24

    • Size

      1.0MB

    • MD5

      714cf24fc19a20ae0dc701b48ded2cf6

    • SHA1

      d904d2fa7639c38ffb6e69f1ef779ca1001b8c18

    • SHA256

      09f126e65d90026c3f659ff41b1287671b8cc1aa16240fc75dae91079a6b9712

    • SHA512

      d375fd9b509e58c43355263753634368fa711f02a2235f31f7fa420d1ff77504d9a29bb70ae31c87671d50bd75d6b459379a1550907fbe5c37c60da835c60bc1

    • SSDEEP

      24576:K2woQX9+gWX6b+SHQjxnRC33Oej3zR/QhF7OnVz3S7HM7BHg:5kX9+V6KTpcPhkgVSglg

    Score
    1/10
    behavioral7behavioral8

    • Target

      Global_Controls_MSWINSCKOCX_f0.8BB4B550_AA69_11D2_B980_006097C4DE24

    • Size

      106KB

    • MD5

      3d8fd62d17a44221e07d5c535950449b

    • SHA1

      6c9d2ecdd7c2d1b9660d342e2b95a82229486d27

    • SHA256

      eba048e3a9cb11671d0e3c5a0b243b304d421762361fe24fd5ea08cb66704b09

    • SHA512

      501e22a0f99e18f6405356184506bc5849adc2c1df3bdee71f2b4514ab0e3e36673b4aecbd615d24ebb4be5a28570b2a6f80bd52331edb658f7a5f5a9d686d10

    • SSDEEP

      3072:YXMqLvIP75rTTK/h4KtBfqXKPRPRU6/OYqF3+8/xHvd:YDETTq7xPRU3P9

    Score
    1/10
    behavioral10behavioral9

    • Target

      Global_System_OLEAUT32_f2.8C0C59A0_7DC8_11D2_B95D_006097C4DE24

    • Size

      144KB

    • MD5

      c89e401800de62e5702e085d898eed20

    • SHA1

      72fb4f088c6ac02097b55fb267c76fbf5e0fa1f7

    • SHA256

      de83c9d9203050b40c098e4143ef8f577aa90016c7a64d4f2931b57a4c43e566

    • SHA512

      70006d70dcb47361ff43e4f7c458655ad2474b70cb917873aa77d2cc06465a68d375d36c494d154a03dbbff891df7dd6cab3d2c7b08e8650b9ff170e30838070

    • SSDEEP

      3072:h+qD1Cd/Oa5kXFlqkFGr3CAP7LCyInPEggen5Ez:hlCd/OaaFEjCAPKyOE6na

    Score
    1/10
    behavioral11behavioral12

    • Target

      Global_System_OLEAUT32_f3.8C0C59A0_7DC8_11D2_B95D_006097C4DE24

    • Size

      584KB

    • MD5

      7b156d230278b8c914ef3f4169fec1cc

    • SHA1

      6b58e20b2538cb308091da838710f6aad933a301

    • SHA256

      baeb2f7c1b8be56738d34e1d1ddf8e0eebd3a633215dc1575e14656be38b939d

    • SHA512

      e4ec2bc714069e0a6b56d89b52aabad92e5ba741dc6f26d2fc2d72aa9ad2ec465dea523cccd810331ab78b5fb8a1244b2b521303418ead5bd6be5a58b43794c5

    • SSDEEP

      12288:HCKynQWKglDhrUtrvT/NInIk4NDXsR6lMlpGz:HGXqB8V6lMlMz

    Score
    1/10
    behavioral13behavioral14

    • Target

      Global_System_OLEPRO32_f0.8C0C59A0_7DC8_11D2_B95D_006097C4DE24

    • Size

      160KB

    • MD5

      ce0155405ea902797e88b92a78443aeb

    • SHA1

      8adff69050d14a57d7f553ca8978439af188c192

    • SHA256

      789c3c45eda1749bd939f4a96616e1e9ef1b7dcc62a2889f65088954c64d0938

    • SHA512

      3fde09067f9ca8d315de07c8db972f99723ea4c3f997dc58210f9d6565caa9935c79f13e8b2d20adc5609919a381e4c2a90a0b3123a35947997229d7c615e162

    • SSDEEP

      3072:+VrhrwLXcA2Ha/joWklbo/Acjwm4AaW7zozn/zgOh0Z76:fklbsqmyWnoz/P

    Score
    1/10
    behavioral15behavioral16

    • Target

      Global_System_STDOLE_f1.8C0C59A0_7DC8_11D2_B95D_006097C4DE24

    • Size

      17KB

    • MD5

      1b02577f0addea32eb02a50d4a4cdd1e

    • SHA1

      36f701ccec78a5d218fea23fd05351890f14cf7d

    • SHA256

      6ea525bface5467c1045c3708f339a4b92a3a273f70656e061c7f7322c56d667

    • SHA512

      87fd4aa5158d09eb97b6131e651db2a4761546907a960af7792f8e95947c0a825e84f88eccf42ec896ff5bb2bbc461488b898d5f1bd853847317493c44b330c9

    • SSDEEP

      384:cogoEvM/uFrR+X6QNn1pcJIrWocDGWct:cogoEvM0rgqQNn3

    Score
    1/10
    behavioral17behavioral18

    • Target

      Global_Vba_VbRuntime_f0.1E64E430_36E0_11D2_A794_0060089A724B

    • Size

      1.3MB

    • MD5

      351bc7471a9874acacf7d386fa8be227

    • SHA1

      ce82d1ccf593088d09694ef90e44c4ea2761be92

    • SHA256

      20cbf8835f6fd3878acacbb7868f7b95a7aae6c2c9d5d0a926337ed31378fa7a

    • SHA512

      650efe6986a8e4dadd5fe8f95812052e047421c728fb61eafaa4512b12a41bab074171a9e7ab56d37c34fe284491d5cd4d60931a004d40115ced80c4cb56bbc5

    • SSDEEP

      24576:u5gYLuvjckzS11wIJYbvsv9NZHa2kaV7UhH+CJ+oo8lsVhpRZpyi8F3qp/:uOQuvxzS11FjNkaV7UQCJ+oo8SVYFa/

    Score
    1/10
    behavioral19behavioral20

    • Target

      supersck.dll

    • Size

      408KB

    • MD5

      7eb9a74eb8bd33985c59b7cfc74edb87

    • SHA1

      20102b159937c7888979e8597ea059bf21881d83

    • SHA256

      90d00023c094c48c7869038e753c9ded89015ca88c3602ff6558a8f4dd88f81c

    • SHA512

      6b14ebee0743a5ddf525947dc57ca011253a0f40a1730722a9d208d91895fd4c6ff48ffc5ac6caf7020fce25f0189cf1f1714d083883c04f657bb22203266c67

    • SSDEEP

      3072:LJFPkomAcT8/LjwJgzS3DNjFHOsipz+smd5AZu5E4nZvkOkpNhRTnvMoMQzIDPm8:LJTL/oJdjAs+nCs9+1CrDHEF

    Score
    1/10
    behavioral21behavioral22

    • Target

      supervoxg.exe

    • Size

      444KB

    • MD5

      5206fe293f0b24d223e00ffde07f8e33

    • SHA1

      91ecab3d75bf62d8ca3c0dcf105c58b29dd13ad6

    • SHA256

      1006d8febcc11e07e2c16789a7170a059639ef128145c0df140d3e65ebefaab3

    • SHA512

      17209d9238d60cf975d523489a82d87b5eceb8c047bac68dd6a704a0414c4b8f19f989b8623cf3c1353c73b4deea650598273eecad51ff70496bb31cb428f08c

    • SSDEEP

      12288:bcCQSSXVwknEZRyrKiHwTCMFLrGCmUGq135X4xXAM1:bESiwTOfwThVrG/hq1352AG

    Score
    1/10
    behavioral23behavioral24

    • Target

      timermm.dll

    • Size

      32KB

    • MD5

      d0351cbb8d3a946bde5f43fc6ca80868

    • SHA1

      6ec37ed3cbc642611eae9578de8cf0caf1d43c39

    • SHA256

      49c81a8e71b510fde1418c4b2e30fd1120de5468ed7e87de2f555b3590b16ca4

    • SHA512

      54741e28dca55e567dbbed882026d472c627f972ea5ce530c40b1cbdeab0da14c45a2545ffa4290feaa331cbca0f175c665aeae2ca0b69a7de8bd731f663ea08

    • SSDEEP

      384:N951tT0UPdVKcglauHj9yWofnD9sNVFZHpEpM:N9h4ASRlaugWoWTF+

    Score
    1/10
    behavioral25behavioral26

    • Target

      yacs.dll

    • Size

      268KB

    • MD5

      c02266338cf5151c5119f0385218a9d3

    • SHA1

      ea4cbe1bf889d4f024fee57ad5d6a4791fbfe513

    • SHA256

      ca33e0c0e293a6280276198e11f8f9d1f933c570e1b8ad3adb7c94fd4fdbcdfd

    • SHA512

      ba7540a34c3f112cc5eb8853b4fc4bb3ab71d94d0da4e441029497e8b0dcb4aece25b0d319953efc5aca7ad2053577f8b3abad40b45671ac572b132ece3f7546

    • SSDEEP

      6144:Y7BmgVBCE9uBbq8BLxQpjGenP31vjAO0sWc3RF9:GtfC1pBLoGMP31LRF

    Score
    1/10
    behavioral27behavioral28

    • Target

      ymsg12crypt.dll

    • Size

      88KB

    • MD5

      1dfdacb2fcbc8971c936bd8e7e7b2bda

    • SHA1

      50942b6ca4d07acb16953b570929e4195d09bcd9

    • SHA256

      7c39c9cc9c94a608f022c8af5158d1ed54bdb32ee574e670afe11375297588ae

    • SHA512

      8b89f41694ebfc12efd372d15a1d50fff5a96cf99796c9fe6961493e604f134d2e87fc81c7217027b0be224d5f65d0ef2ba718ad689b1a56e81949193385a052

    • SSDEEP

      768:K7ece3tqZtlUqhiJOjtZC6uIn3YAlAyQngc69YdQZNV7coGKeXALn:ptEhh9PC5jhz+VxG1ALn

    Score
    3/10
    behavioral29behavioral30

MITRE ATT&CK Matrix

Tasks