Overview

overview

4

Static

static

3

setup/ACCTRES.dll

windows7-x64

1

setup/ACCTRES.dll

windows10-2004-x64

1

setup/AcSignExt.dll

windows7-x64

1

setup/AcSignExt.dll

windows10-2004-x64

1

setup/WcnE...xy.dll

windows7-x64

1

setup/WcnE...xy.dll

windows10-2004-x64

3

setup/aaclient.dll

windows7-x64

3

setup/aaclient.dll

windows10-2004-x64

1

setup/acce...pl.dll

windows7-x64

1

setup/acce...pl.dll

windows10-2004-x64

1

setup/acledit.dll

windows7-x64

1

setup/acledit.dll

windows10-2004-x64

1

setup/acppage.dll

windows7-x64

1

setup/acppage.dll

windows10-2004-x64

1

setup/acproxy.dll

windows7-x64

1

setup/acproxy.dll

windows10-2004-x64

1

setup/dswave.dll

windows7-x64

1

setup/dswave.dll

windows10-2004-x64

1

setup/encapi.dll

windows7-x64

1

setup/encapi.dll

windows10-2004-x64

1

setup/ifmon.dll

windows7-x64

3

setup/ifmon.dll

windows10-2004-x64

3

setup/msacm32.dll

windows7-x64

1

setup/msacm32.dll

windows10-2004-x64

1

setup/perfnet.dll

windows7-x64

1

setup/perfnet.dll

windows10-2004-x64

1

setup/setup.exe

windows7-x64

4

setup/setup.exe

windows10-2004-x64

4

setup/winrnr.dll

windows7-x64

1

setup/winrnr.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4e49ccdf0bcb564ef5ada1ea430ce34b

  • Size

    3.9MB

  • Sample

    231226-dfrcjadah2

  • MD5

    4e49ccdf0bcb564ef5ada1ea430ce34b

  • SHA1

    141fa299bf02a627aa683a3d9b20073e891310c2

  • SHA256

    46e327ef571621d208eb6c7e75b9a86a52f9ad1bbeec4def3ac237cea99669fb

  • SHA512

    10bb6675a53020075dff9a577ebc5b40ebb2e4c11202d5334d2a6c67ffdf74a82705c0a756f3979a5aece69e37240525d73ab202af5a091c84b8acc3fa66dacf

  • SSDEEP

    98304:oWe7LYIkVvl0zWISzGZGzybkn2CeYvwCTFaaZV:E78VIWDy4n2HyaaT

Score
4/10

Malware Config

Targets

    • Target

      setup/ACCTRES.dll

    • Size

      38KB

    • MD5

      494e31f87662c486ef2f2048d599ac46

    • SHA1

      d360cd0faa4e7a163796b48e817095a105c75350

    • SHA256

      770fc0c01d7b705278282c7a010ba34edf26abd81ad04879e3383bc9f07c90ab

    • SHA512

      426a280b73367a6b2d688edae2be40ea855ff45e9e0bcceffd7b89e0be68de6f165901eb2768ab638ccd5073ead8151311e4c137ac5ed5d6efaa02cdb2a8b6c7

    • SSDEEP

      384:0IW7UYIWEoPTofHx+1nIQUuT5CkllwP7ndqkkLBD79WF:0hOoPTofRqIQzT5Cx7nckkLN9W

    Score
    1/10
    behavioral1behavioral2

    • Target

      setup/AcSignExt.dll

    • Size

      29KB

    • MD5

      001e81a8f687915d72aaa03e6f1914d2

    • SHA1

      bf199dfa66e1afd5d908dcd447f88492978e3b23

    • SHA256

      2b67c2bec1dcbaf389b3f05b4910fc5f10c6d2056eea5c862be7693ce956ab3f

    • SHA512

      5e078a686a099664cb7a8127b9594db46cf266fcd04d272ce650d895528f05d16c219b7b9305bc9aae7f025dce47022687da0a301696da272bbdbdeea921b74d

    • SSDEEP

      768:kAgHHuBNb/lP+L85V2mmZhdsEYs4FOtqFLfflbCP7:TgHHQ/lWL8SmmZhdsHs4FOtqFbtCP7

    Score
    1/10
    behavioral3behavioral4

    • Target

      setup/WcnEapPeerProxy.dll

    • Size

      20KB

    • MD5

      25d8cb47b680c6760de1fd35c1faae22

    • SHA1

      f3b7dfcee8dfe5bacb156af608952e5206abcde8

    • SHA256

      f56bd1c4b1276a04445c6b741948133d466a360fe1ca698a6e501daa72152bba

    • SHA512

      3ca4646c85d80aaa6a359cbcacb623e3e7141d6612c024883f30a46fa4e9abdd8ad8a27ed5dd108ae4e0c1303fd32b33f5da98c5642b994aaea84fa25cf7ce7c

    • SSDEEP

      384:zZpMV2VO4djQxGb9ebAyoguiRpz+ox6q8ApmCWwXWmbBWuDF:Lf1iGbk+yt8oWclF

    Score
    3/10
    behavioral5behavioral6

    • Target

      setup/aaclient.dll

    • Size

      128KB

    • MD5

      cf15e7b164e5824e731665e83cfcf536

    • SHA1

      62c6c0aba47a1c7d733fe5c41400b508d1fba6fb

    • SHA256

      82c44f42b8643d78fd9a57ee609b656a998279b55891bd3aed3537065497d5c4

    • SHA512

      409a2b68c32f41507b2ad6bd79109af7bb2cc897b5a4b84925d5f839b4db5795613381d65e02cf00772c1e740b246565ba7122851eac7fb4a4b6434e49dc9bc2

    • SSDEEP

      3072:/A1DG9qkuN9B3G+PG1Hfo6B109bOWe/151eTY1sWAmoxF4:o1DCqR9B3GXFfoWq9et51e81sNP4

    Score
    3/10
    behavioral7behavioral8

    • Target

      setup/accessibilitycpl.dll

    • Size

      3.6MB

    • MD5

      45c0df404182850c21749af7763c095f

    • SHA1

      16454793eea3b66fedc7b46850a74b8c1a617493

    • SHA256

      bfa71a592476bf399e420ff9bced8554c448a04a7586c8e8ca4c19cbcd2fc5f1

    • SHA512

      b98d4f4c70573644f778d8e726a09b4bc953bfbf42432b934f3f0b2f996fc1a87e6701067dbb159f0f4e4e7d6c602db46d958784457e2924901151f0442ca399

    • SSDEEP

      98304:ye7LYIkVvl0zWISzGZGzybkn2CeYvwCTFaa:n78VIWDy4n2Hyaa

    Score
    1/10
    behavioral10behavioral9

    • Target

      setup/acledit.dll

    • Size

      7KB

    • MD5

      76828928a893d595ef5ca2c53b2b48c0

    • SHA1

      59d254134c88f6b90a5f98b202d95a5f2a76bba9

    • SHA256

      7fc551e7874fe11563805d205630adc2b88cb9b9fcc83b020a313108a5f3929a

    • SHA512

      eb74eb9ca86b6f8f85251c8eecc235c2c40fd9256a0a24c254f353181e897dbc46edd0dc705dc773629ea7964e2aa49b474a8aa24e0b8a6709e814ee527d932e

    • SSDEEP

      192:6aypygh2lXPA8PR1QaOVT6ETWiRTWbZw:6aAygwlfAQPOVRWiRTWbZw

    Score
    1/10
    behavioral11behavioral12

    • Target

      setup/acppage.dll

    • Size

      44KB

    • MD5

      b57053cd59114d36952461ee638d3784

    • SHA1

      8756cb09cbb7a5d32c37ad10880e08298d4cfcef

    • SHA256

      f5c54321a7a8119215e525cad44b723dd9699a13f754669d29761833c3936575

    • SHA512

      f4454dcc7efe720f405f4e59f0eb5b9ae918c9726cc6a5b9da06609067a97fdfd2c18cb5c1162f9743aa1791fdbf83e5b69c4677b57b76a1161290fa32153478

    • SSDEEP

      768:513qaPojvi9lyujNNt3hk0yJLKJFoLOlVTZ8stb9nlqOnMQKMxs:/h2i2ujNH3sLTLO3V8st5lqOnMQFs

    Score
    1/10
    behavioral13behavioral14

    • Target

      setup/acproxy.dll

    • Size

      9KB

    • MD5

      3a9fc5d24053769ed9b710b576deeb8a

    • SHA1

      c448b07d4bbe191c6a8e01307861f8d500cba3c7

    • SHA256

      f6409d4ab94399429266a926821edb5ab3df3d8f9fb99bd0675781a8637054c0

    • SHA512

      31c95d57d6936b06d13d6fad7a4119e06d5626ed43f4ffdd8ec5bdd8e811ebee9d4b702f62d432ece047b2e86a0cd51589a5221a6fa798c352867cd8e9000574

    • SSDEEP

      192:BJoIamBZJTiMgAErX3aOtGT6z2JaWOT/WW:bvlilAs6OtG6WOT/WW

    Score
    1/10
    behavioral15behavioral16

    • Target

      setup/dswave.dll

    • Size

      20KB

    • MD5

      31a254ea7eacfb3a7abafb178c3c8efd

    • SHA1

      921c3c29d72beb063d3fa5cddc53f8b3b77b7ba3

    • SHA256

      88442261a999cd90d7d142254ad6ba6e5a911a5aa47196fde4b41ec483d33e08

    • SHA512

      d8395f47280e3e4010280df8d029bc43a470d2eadd6d94db6326957052cb30d11837b6a4ab4a546d4f50a5c91cc5ccb1ad3dc277a35c61c928f3c95653a87f5a

    • SSDEEP

      384:P6c3+8mLUG+mIvfgLd0VOMMsaorF/sWsysAbhxBu66PRXSRVMlWhPXUW:y8+XwGlIQ9FZox/sWsAN6EvMg

    Score
    1/10
    behavioral17behavioral18

    • Target

      setup/encapi.dll

    • Size

      20KB

    • MD5

      f33a58b7a0e85786ae60e53d4c48c654

    • SHA1

      cc9b6b790f5ef2ca10ffa04daa33f7355c9ff34b

    • SHA256

      f8184efdcb38d0e70479a5edbba135327a7d570ac8197d8a47fdb9a89f160376

    • SHA512

      5bfc544dcbdc65c4a5bf5e7b463cf6792ae35926a7d5f887d65f4cd7fda0e189b3401cfdeae30beafaa29b106c0339c472b89b2704cfec8d8291a2a8edadd27a

    • SSDEEP

      384:VezmAmJyQncTcWgi4uG0Txg7pVN8L6z87cRxr3W5jZWT:VeuSTcIeVCLfcRNqg

    Score
    1/10
    behavioral19behavioral20

    • Target

      setup/ifmon.dll

    • Size

      20KB

    • MD5

      019c500dbd380cbafe5417de8cd267f2

    • SHA1

      ed77e3ba242f9d3b3db2783095ad3a291df38e35

    • SHA256

      a6fb0ac3082de4122b3ea6202c581a8dfeb9ba5ccae7495e5ed46d451031910f

    • SHA512

      0aa3e77c4e5799ad80a6834771b1831cc48bfde917003f371b825c93e859256b7437c6143eed48d660292ae0a972bd95ff1b26708b859d9fef401a16121f5841

    • SSDEEP

      384:g6agyNZH7HYIEXGlZHMuvDm3jchvGxPAS+SE8rmjUDx1MXXPDqJW3WSWJhnaB:gZtLYtXGlVMugoa3E8JUPuXVha

    Score
    3/10
    behavioral21behavioral22

    • Target

      setup/msacm32.drv

    • Size

      20KB

    • MD5

      07393a09c46083588e751b63b03c8301

    • SHA1

      3a2901d1e9189601b2fa2a269aa29ab09e9676ae

    • SHA256

      36e2351cf5fa05feaaeb340b5e04b107b53c8174f8333559d8aea40beb94f678

    • SHA512

      2394df3b11a5412119023e9bdfc0bd038384441f07582b897dd99b39c10a720c5db75b802c90d519008f3386c828f71c7f0bc2830e9ee17cddebe2e6044a1eba

    • SSDEEP

      384:3LSdTTcaXTNSgRFaQPMG6iWG7eehORVMIknAKRWQdGsvfjEN2WVoplIyWIa:7IIUTcyFa/S97M3k3WQdGsvsU

    Score
    1/10
    behavioral23behavioral24

    • Target

      setup/perfnet.dll

    • Size

      20KB

    • MD5

      1acc2484f3f111d577abe4ffb1caf2a5

    • SHA1

      d52970dce6af86aca0a1c1a2ec11007fe1c83028

    • SHA256

      7b93481dd6be2021c7c7b939fb90c430cb70e1be4a14e24a8d4d34eea5ae5f15

    • SHA512

      09e5d4977893a5df4401f74200b2315454579b127bde4b9bd2bc04ad99d458c245b76e90482983a0e62167f30be05d46070639a5952c0a56bfe2034739e932bc

    • SSDEEP

      384:Jks1yFPVt6r08RqijhUxNwNFA1zm5Suy0444RbWn9XW:JU7S0XijeE6Z+4J4

    Score
    1/10
    behavioral25behavioral26

    • Target

      setup/setup.exe

    • Size

      179KB

    • MD5

      6ddded15285511c16509c6e80a484ad7

    • SHA1

      f303fcc8953442a29005a416caabcb3b55702358

    • SHA256

      bbac72ffdc821156d5528a509bb3280927aa569fd96f423ea2c9f74938c65ce4

    • SHA512

      7166140b2f3064738c3141238bd7be344ab64843f6730706ee2f5c3c8d016c94a6741c353a1d5827afa229952640cdb8b70d253f0c769e095507d4a3ef5dec6d

    • SSDEEP

      3072:SBAp5XhKpN4eOyVTGfhEClj8jTk+0hcAmpIw:hbXE9OiTGfhEClq9pAmpp

    Score
    4/10
    behavioral27behavioral28

    • Target

      setup/winrnr.dll

    • Size

      20KB

    • MD5

      5df5d8cfd9b9573fa3b2c89d9061a240

    • SHA1

      4f67768a0e6124aadab495e8b5d873ccb22b4ffb

    • SHA256

      990ea273b640df2d7e800c0cff18550259c605a4951cd82cd9f1e7b6ff0c9533

    • SHA512

      88faec0ae701767a992b16006865ba8aa47c93bf1803a51b1adea156b9f1d1bf94a5826d742742363ef790bbd9216eb0f27da0eaece794ea94ca90e4bb94cf19

    • SSDEEP

      384:Kd3Ni7dakzAS52UCUjDZi8fTmoOfbcC7kWg6eSm7ICWhXlWVx:K907dIm9CwZRKzgmFlE

    Score
    1/10
    behavioral29behavioral30

MITRE ATT&CK Enterprise v15

Tasks