Overview

overview

7

Static

static

3

VisionExte...al.exe

windows7-x64

7

VisionExte...al.exe

windows10-2004-x64

7

VisionExte...e.html

windows7-x64

1

VisionExte...e.html

windows10-2004-x64

1

VisionExte...t.html

windows7-x64

1

VisionExte...t.html

windows10-2004-x64

1

VisionExte...gin.js

windows7-x64

1

VisionExte...gin.js

windows10-2004-x64

1

VisionExte...ain.js

windows7-x64

1

VisionExte...ain.js

windows10-2004-x64

1

VisionExte...ss.bat

windows7-x64

1

VisionExte...ss.bat

windows10-2004-x64

1

VisionExte...en.bat

windows7-x64

1

VisionExte...en.bat

windows10-2004-x64

1

PIO/Vision...al.exe

windows7-x64

7

PIO/Vision...al.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    VisionExternalCrck.rar

  • Size

    35.3MB

  • Sample

    240106-yevnsafhb6

  • MD5

    685a12ca2ae1a3df9637dd1e07fb879a

  • SHA1

    c6ee0d168060cd1ef78601ff39945a6c0737c6da

  • SHA256

    428af3a8f62e4582eb3a29364deea809baba4389ff00629c16285bf263f623c4

  • SHA512

    2eaf76c8a067ce937d06dbd1ec749dc892c7c462979bc804f4a6c6eff0c0ab52688bab072c8903fcdbc8c50ade48fca6f184bc9904e8be8020c864b9eb8b4400

  • SSDEEP

    786432:F09x36HJnGgR/7GR9YTe07N93ypGUg9x36HJnGgR/7GR9YTe07N93ypGR:F0nCnGgRzGRm9kPgnCnGgRzGRm9kS

Score
7/10

Malware Config

Targets

    • Target

      VisionExternalCrck/PIO/Vision_External.exe

    • Size

      16.9MB

    • MD5

      123aff079cacb45262fb1dd386565ef0

    • SHA1

      7460881e0f66d3784d9139e695ef434263bce310

    • SHA256

      814d3e3b618a2443784b214ac0d1e12684a3456fec4dbbe7bf34ea8115d9e86e

    • SHA512

      913e5e0ea9b34f47e650a01dbb840fe8cb8c4a6060a907170572fb319eca843aa6dff80d015cb98a99d5f951b443540f54bedb7c2b2bd54ea8f707b28a0e56d7

    • SSDEEP

      393216:Tmm5UUHhf5UWyu2zW5746cljiwSPnH9KoB95WDO4w:qY15cu2zW5M9hSPnHT

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      VisionExternalCrck/PIO/home.html

    • Size

      26KB

    • MD5

      cd91bb681e57855da043e87ce3acfdbe

    • SHA1

      0dd1edfeaf528b2733b0b6d280eca8cbdec05dcf

    • SHA256

      f277350bf2464339dada6f15e2b70a5542fd2b97a292263e9613d961a6a7c625

    • SHA512

      af6252d1ad067fc81eb71ebeb03873ce98595a4b7178e17bbbaae3009c2a75680c59077fa7419efe26bbd0bcc6a1084da006c574b1b991618575a7ff46e6a564

    • SSDEEP

      384:y/+QZ7PxSxrQFJwuSxmQZ9DHF7HtOfQZ7:yPTJrOL

    Score
    1/10
    behavioral3behavioral4

    • Target

      VisionExternalCrck/PIO/init.html

    • Size

      1KB

    • MD5

      031e8f906c6d490faae6b1ab1c8b878f

    • SHA1

      a5189dcf5cc6991d478177604f2965ae7f5ce520

    • SHA256

      ecd781f74f3997041ff583a6b1d6b7d38678d95c8b162c797917804c29902a9d

    • SHA512

      09ccc7a33dc4bb9373015e4c9023b27999ef357867f0ed6aa31db5b9e88eeea4c6d903ec3efb36c94be511ee96d1b6a8594b5ee869bd619a2ba9b3767fe68a6b

    Score
    1/10
    behavioral5behavioral6

    • Target

      VisionExternalCrck/PIO/js/login.js

    • Size

      3KB

    • MD5

      e555897c39aae97aed1c5f25e5f5a287

    • SHA1

      9d38ab3cb683c568154e0f8856c54ecd7ca740dc

    • SHA256

      e13574123f075553a20c8a6cf983273cbbd01c87132227550b63f7ef8fd52c72

    • SHA512

      a317201db55fda640c2c5319c181dc379013b069493fbb00cec1a3b2d4255d15639026263bfdc3d3700c68a30462ef849c91e5e51efc3023c027c0b73a3f90a0

    Score
    1/10
    behavioral7behavioral8

    • Target

      VisionExternalCrck/PIO/js/main.js

    • Size

      21KB

    • MD5

      d7503071acf773254cd5ebf496ebcb10

    • SHA1

      fbd0ca294d97c545c2ea2cde29ecc41b3cc0a4b1

    • SHA256

      84a50c67e65af41e31fac81ddac873e95deda457b7f4d399bad581e9364111a5

    • SHA512

      196c193fc1e68aa5a7e34cfad168a1761d6ac37334732b6d1df95eec5c5936c3f6db94a58859708e5a4b4c1f47dd53727d93939a4f64c33668bee2e2791fbf3f

    • SSDEEP

      384:oY+3N75o4N2ElEq35Ol/lpIczFJ+qdGvNUVicmk2qitDQ9elbzi5biEibP:oYE75o4N2ElEq35Ol/lpIciqdC2Veqwt

    Score
    1/10
    behavioral10behavioral9

    • Target

      VisionExternalCrck/VisionAuthBypass.bat

    • Size

      81B

    • MD5

      72a1053a82cb78da31d780fec71dda6b

    • SHA1

      ab14f8308b0701c8428aeeb5cdebd331152e0e96

    • SHA256

      734f6911721f64421877be9658555755ae6aacf0686537ad6f1627ff547d16fe

    • SHA512

      6c26ce4968359d60ce12f43240a77ed8b23180204e9c309eb67410962e29a99031005cf23a071ff03d9c015fdd8442153e7c39f12751a8244978e37f1bd8ecbb

    Score
    1/10
    behavioral11behavioral12

    • Target

      VisionExternalCrck/VisionKEYGen.bat

    • Size

      605B

    • MD5

      4fb799b17eadabbbea0bb74d42866242

    • SHA1

      e89031347d86fb98d35b0cf780d45b0bf1d89c7c

    • SHA256

      87143fcfc481522b3c2216374483b7285bb278c5599c0ec3b172883107e7c9df

    • SHA512

      53ce3cc857adaadbdf788e4dc5b331500e78f55b55b594e21da45f024f89c6e835341ceeda2fe613699a589d33e8ebb5a6a4780b8aef35c51e6226f599a8db8b

    Score
    1/10
    behavioral13behavioral14

    • Target

      PIO/Vision_External.exe

    • Size

      16.9MB

    • MD5

      123aff079cacb45262fb1dd386565ef0

    • SHA1

      7460881e0f66d3784d9139e695ef434263bce310

    • SHA256

      814d3e3b618a2443784b214ac0d1e12684a3456fec4dbbe7bf34ea8115d9e86e

    • SHA512

      913e5e0ea9b34f47e650a01dbb840fe8cb8c4a6060a907170572fb319eca843aa6dff80d015cb98a99d5f951b443540f54bedb7c2b2bd54ea8f707b28a0e56d7

    • SSDEEP

      393216:Tmm5UUHhf5UWyu2zW5746cljiwSPnH9KoB95WDO4w:qY15cu2zW5M9hSPnHT

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks