Overview

overview

4

Static

static

3

windows95-....1.zip

windows7-x64

1

windows95-....1.zip

windows10-2004-x64

1

locales\af.pak

windows7-x64

3

locales\af.pak

windows10-2004-x64

3

locales\am.pak

windows7-x64

3

locales\am.pak

windows10-2004-x64

3

locales\ar.pak

windows7-x64

4

locales\ar.pak

windows10-2004-x64

3

locales\bg.pak

windows7-x64

3

locales\bg.pak

windows10-2004-x64

1

locales\bn.pak

windows7-x64

3

locales\bn.pak

windows10-2004-x64

3

locales\ca.pak

windows7-x64

3

locales\ca.pak

windows10-2004-x64

1

locales\cs.pak

windows7-x64

1

locales\cs.pak

windows10-2004-x64

3

locales\da.pak

windows7-x64

3

locales\da.pak

windows10-2004-x64

1

locales\de.pak

windows7-x64

1

locales\de.pak

windows10-2004-x64

3

locales\el.pak

windows7-x64

3

locales\el.pak

windows10-2004-x64

3

locales\en-GB.pak

windows7-x64

1

locales\en-GB.pak

windows10-2004-x64

3

locales\en-US.pak

windows7-x64

3

locales\en-US.pak

windows10-2004-x64

3

locales\es-419.pak

windows7-x64

3

locales\es-419.pak

windows10-2004-x64

3

locales\es.pak

windows7-x64

3

locales\es.pak

windows10-2004-x64

3

locales\et.pak

windows7-x64

3

locales\et.pak

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    windows95-win32-x64-3.1.1.zip

  • Size

    323.6MB

  • Sample

    240103-ybwrnshcdl

  • MD5

    ecf7e9acd6f8d464448ccf6a66d308f5

  • SHA1

    4dc3d0d1902ac38cfa4f61704b24eb9feecbf504

  • SHA256

    c2e26ecea5f1261a2d81205271e534d54b7c445e8e6badefe11c12dae4d63baf

  • SHA512

    4e0ba38d66a6382ab230d9619169f13eea600809060d92ba1db1e3cdc00e4ac4bb89e5515980a0f986c9758f72a093c29d473fc4c508b718673ee2ece02f544d

  • SSDEEP

    6291456:la8YsaabVj1BpxZvbrqwPIHr12l5kY1BUqx60wwk0L9E3jiR4dfmSVAg9B:E82iVRPxtnPILc5kY1BLZy3nf/6sB

Score
4/10

Malware Config

Targets

    • Target

      windows95-win32-x64-3.1.1.zip

    • Size

      323.6MB

    • MD5

      ecf7e9acd6f8d464448ccf6a66d308f5

    • SHA1

      4dc3d0d1902ac38cfa4f61704b24eb9feecbf504

    • SHA256

      c2e26ecea5f1261a2d81205271e534d54b7c445e8e6badefe11c12dae4d63baf

    • SHA512

      4e0ba38d66a6382ab230d9619169f13eea600809060d92ba1db1e3cdc00e4ac4bb89e5515980a0f986c9758f72a093c29d473fc4c508b718673ee2ece02f544d

    • SSDEEP

      6291456:la8YsaabVj1BpxZvbrqwPIHr12l5kY1BUqx60wwk0L9E3jiR4dfmSVAg9B:E82iVRPxtnPILc5kY1BLZy3nf/6sB

    Score
    1/10
    behavioral1behavioral2

    • Target

      locales\af.pak

    • Size

      327KB

    • MD5

      f78831d4aec1d0e1735ad630f9e8f4ce

    • SHA1

      4afc52c9d2e0fba6aff22596bf876621a7d88a27

    • SHA256

      219d94355d0c460516f9baa83f4b8dcd3353ce13e7648f019810047ee8eecb41

    • SHA512

      ffbf51a4ff656edd65575ae4d1f489281e3ef08e1e5bb05daac9786958d1af832520e6ed77ed197e0160e368fb56bf303f8779bcdcbe77d995364a433024d65f

    • SSDEEP

      6144:ZLgVKc+kVWlEvC9Z5D49Em7kLjB6oAYxjYgDbwxesB+xSK1qA3y25tHwDwv22iGe:ZEdclEvC2im4LjB6oAYxjYgDbwAVSK1Q

    Score
    3/10
    behavioral3behavioral4

    • Target

      locales\am.pak

    • Size

      531KB

    • MD5

      8e8fbaad0de95893785875e20cfbe5f3

    • SHA1

      f179e4db197a974e1e428f0bcb9cb1bc09df04f4

    • SHA256

      f62791089b07bb9796292e5e3fd81eb1e68f3adba0fcc88fea4df744dbad6775

    • SHA512

      93cfc2f82d3f83dd992ba758d067055cc26bae5c2e9b1ecd6974f4143c22da405bc6845d2d2a811ff043ff1cd55929ed04a6f929ae01ac211c781d4786a90246

    • SSDEEP

      12288:oI+uzxX8xMzKsE1gI5z9SBeuWqQ9x30jH8+I:oIVX8xMzKn1gI5z9SB6qQZ

    Score
    3/10
    behavioral5behavioral6

    • Target

      locales\ar.pak

    • Size

      573KB

    • MD5

      cbeaafb259a3a0ad76739186e9b2bf75

    • SHA1

      11b348534a84c9648eb86c9790bfb7703cde242f

    • SHA256

      c28e612cae27402f2a75c9699268f1781b286748b0590d396e0a538e3aa67e49

    • SHA512

      2c91f17343d947cd4eb4d8d339e5932a3331445b4e826915d54196c29ce548b7e98a9b5f9857146a9a956ce20d3e624fb04b7c44d3c1a2593e8b6e2cb12662b0

    • SSDEEP

      12288:eCYtqr0jXjiRp/DvYUBuGYurA5SNbr+ATg5Y3MgSENFh:Z1Cuk52+k

    Score
    4/10
    behavioral7behavioral8

    • Target

      locales\bg.pak

    • Size

      608KB

    • MD5

      96372403a9ded96f3a699262029a4580

    • SHA1

      07069b20fe303f6eef1fb6c8c0a19266a0c705c9

    • SHA256

      6c10b64d31e0dc2c4befc6703ac17343ca473b4350cfb3c6e01833f505b69590

    • SHA512

      0df60fe13818f0c3c6838e77686c5de9fa03b97cbf0943f7a2a4ae2f3a0890d3d64b3a7652d8c81c23de876ac92e4c6b71d584fb106c3520c96ef76ba30250fd

    • SSDEEP

      12288:dPnB1xlYrdAs1alUDpzaVVwsl867mFyY3SKN3rsbDxXs7Jfu64KGzrFSZp8VqJ5O:dvBjlYrdAs1alUFTsWoY3SKIVcdu6pGB

    Score
    3/10
    behavioral10behavioral9

    • Target

      locales\bn.pak

    • Size

      780KB

    • MD5

      cb203032925be270222dc2c20fe771e2

    • SHA1

      2f2f20bbbd07ee01cc996247bd9c2f40037dff80

    • SHA256

      297d52b252df0912490ddf26fa58706895e70c2a0f3f09d0dc756706720095ef

    • SHA512

      052be75c51051949c84216566b462733b61026ba74e212b000cbed7d93cb852e74ae83d64d2eaadc3093af4265b6783184cf8e0368a75e077d4b75daba40f9b4

    • SSDEEP

      3072:Kw+ZjJj+E7z0eC6HcvR1kgBbdawSU5ZwXll4:4tJXZ78vRNBbdz5ily

    Score
    3/10
    behavioral11behavioral12

    • Target

      locales\ca.pak

    • Size

      371KB

    • MD5

      6d6f760b1fd64e4b83536a1ac4713e4f

    • SHA1

      929a965b0ad9b8062c64ae940064260b13d05c2a

    • SHA256

      9058aa0f327ff79b62e730d72a06351380b21dc9217f565a94acffa73abfe2ce

    • SHA512

      ffb2fa6d6e809e4ff527d682a9eec422f2a123826529793b85ea0fdfb3f358d1e321f49ff707fe3777494e4043019ccf0e0f545670d4d29216a8aba56c7951f6

    • SSDEEP

      6144:moaCg6tj6OdSIs3cehEYBC2l3nbh9aGHQl2SwAGwXZM0dLbpuQRBtryBocaGIleR:Hg6tj6OdSIs3cehEYBC2l3nbh9aGHQlO

    Score
    3/10
    behavioral13behavioral14

    • Target

      locales\cs.pak

    • Size

      377KB

    • MD5

      3e2c49143f4718ddd9c1c74f8599fac2

    • SHA1

      7cce45de66a3895c3493b998fef7bedf045b29e2

    • SHA256

      08e40f5efc616cdc0588fb4b1a706d997c69d17ddaf97eb91a4aabafaa11cee6

    • SHA512

      a849ca0d09e0d4c025d9de6c8008c13e13581961c321f53a552deeaa210db891914386fd51673615aec8b5d8d68a921a968db5d0fe447963892ceb0948861e3d

    • SSDEEP

      6144:QhKH/gwYPl/XACAjRe15q8+Y1zAXn5q8QM:9fgdPl/Q3e15q8+Y1AXnF

    Score
    3/10
    behavioral15behavioral16

    • Target

      locales\da.pak

    • Size

      342KB

    • MD5

      6c24baadc460e788486e336ae505a224

    • SHA1

      dd1aad964c24f46c69a81ea29a12a69bb0290767

    • SHA256

      e20628baac73a284b2cd6514fb396d4e0a22f4f6fd193d5d7d45190a0944e4fd

    • SHA512

      287bf70065ff99f20cfd150562b022762e2e61858cf0203d7272b5cd8ecee9c0567b8910913effc291162243833d445d13fc45f02b4b0f26d30611ad9c8d0376

    • SSDEEP

      6144:moDww1XXv/f1hwlE4KJwRXNGZO2Z5nYryGzO8i05TWwc:fHH9AN85YrZT0

    Score
    3/10
    behavioral17behavioral18

    • Target

      locales\de.pak

    • Size

      367KB

    • MD5

      4c83231e20122f26e0a81a91ba6146ab

    • SHA1

      4597efc299df26a0e6db5db622921eb7b66c6b16

    • SHA256

      2d4130e036290ff3cd938c664fe0bde8755fed9658ff84ba09c926829fec3c2f

    • SHA512

      ca872465b222a145c90a314f44671a7efcd3e18ff072b1855a509a56e34854c4aa80ba1ab5ab5f9a3650e32a98d859bd80e52762ce2da57a40bde83092a80303

    • SSDEEP

      6144:FICifZl9UPnzaqSFaPjON3Be0mzUWCj0Xs5HgIxBI0gql:eP3+PnuvFaCN3mzUd5xy0gql

    Score
    3/10
    behavioral19behavioral20

    • Target

      locales\el.pak

    • Size

      664KB

    • MD5

      8f5a15560710db2af852512b7298b93e

    • SHA1

      30a13ebef10108effbad8c24b680228660658415

    • SHA256

      bc07e403272a4d65305fe24a827404d7b931d01cda547f8c07a840d19e591430

    • SHA512

      e3cedc0eaa82b10a68a40aca8ec1379a6bb924766e1c5abd97e39c621dcbc195d6c1ff80921c2320f0f1c87d160bc2a6258108399876339e5104f98d90a861de

    • SSDEEP

      12288:RdquNwK202pgaZH4q5OaPY3HvO9K63/fgBsbfFnxHuhWTT9rkv0pfBtMMkffFZig:RdquNwK202pgaWqsaA3Hm9K63/fgBs9I

    Score
    3/10
    behavioral21behavioral22

    • Target

      locales\en-GB.pak

    • Size

      299KB

    • MD5

      05ac84aa6987eb1f55021b6fba56d364

    • SHA1

      58cb66bba3af0c6cc742488ccc342d33fc118660

    • SHA256

      e1e357c853eed83fb6c4133f8f4df377a8eda4fe6f0e55395f21c5ab6e38faa8

    • SHA512

      c615e1eb01412c5e2c0402242d442a6cf08965318d1c0d261ca5bc6df9acba5efa2c87ade20e1e4740d2239ea56d1ce4d3fc7a4c3eabe81b876ecb364b3e91b6

    • SSDEEP

      6144:WJeP/KOb6vG8GGvDJAgdMP9ectcaAfaYEnG2J05SSvqo:1COb6ugdMrcarnGf5SSio

    Score
    3/10
    behavioral23behavioral24

    • Target

      locales\en-US.pak

    • Size

      302KB

    • MD5

      3fef69b20e6f9599e9c2369398e571c0

    • SHA1

      92be2b65b62938e6426ab333c82d70d337666784

    • SHA256

      a99bd31907bbdc12bdfbff7b9da6ddd850c273f3a6ece64ee8d1d9b6ef0c501c

    • SHA512

      3057edfb719c07972fd230514ac5e02f88b04c72356fa4a5e5291677dcbab03297942d5ecdc62c8e58d0088aed4d6ea53806c01f0ea622942feb06584241ad2d

    • SSDEEP

      6144:yoaiWmH9xPN6DacNMP9elahdQfaYejDJDsN5ySMZswS:taiWF+cNMbhd7jDJi5ySEswS

    Score
    3/10
    behavioral25behavioral26

    • Target

      locales\es-419.pak

    • Size

      366KB

    • MD5

      527210238ad4c2f1b079cfd8857b08e0

    • SHA1

      b779d21fb05cf8e6e9446fac4634d71e48a18113

    • SHA256

      fdf3a44e1fe4fe753c196921f700014c81280464f99e15b8a6137804ec14ca19

    • SHA512

      fef1cc7fab7816fc1e3ac5507f875ad592dde63509b7d738c96a010ff1a2e32ec1c9d1188023c5b92eea63fde72aa6bf990e9b89cd05788baa46e5e3b5198d4c

    • SSDEEP

      3072:3k4wjwbC52iXhfmcv5jrqMCOyu0sdzPh7buhwwJ9Os57lLfGLFg3WSozHG6:3+752YJv5rYQQJx5sLFg3WSoTG6

    Score
    3/10
    behavioral27behavioral28

    • Target

      locales\es.pak

    • Size

      367KB

    • MD5

      96bdc30c826aca4fc7e5e6adfd889b75

    • SHA1

      aa71721b78ab54a99b97b580c4f6d1610b198df7

    • SHA256

      cc423403f5bab00309993241125577d5e64a1a4130a44979b4c8d3e07428953b

    • SHA512

      30e3df376fe06d60388afc13a421ab335a75bf05651f2ce83c8eb80653f29180bb89154149136e3c5009de62bb62ba451a4aaff65f1de9cddb6fe3dec8e90706

    • SSDEEP

      6144:SCcds7km2U/qCngfr56ZUb5R7K5zrT7zUl56AN6PZmz:TkckmyLr0+FRW5zrol5Fnz

    Score
    3/10
    behavioral29behavioral30

    • Target

      locales\et.pak

    • Size

      330KB

    • MD5

      054865950b3b9e8312a7f9490268eaca

    • SHA1

      28b0176112eddb7af58386b4f8aed4a49b9a2661

    • SHA256

      3599e7138a24a31839da877cc9718b9c0c9522437ea93a6222a119080f108d14

    • SHA512

      bfc72f19ad1a52c0da82409accb33a27b2844ed29010207268c7d695ad7562a8867a87b70ac50142909b50b81a5c84d6f6a43968353ae7a72bc042aea8cbb59f

    • SSDEEP

      6144:GPJXg42WkHwGkDmzZpDM0djry2zuJbT/RcLvihV15Ujc43ceLfLPQu:6JuvymrDbWF15Ujf

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks