Overview

overview

8

Static

static

3

GifShower.dll

windows7-x64

1

GifShower.dll

windows10-2004-x64

1

RealMediaSplitter.dll

windows7-x64

1

RealMediaSplitter.dll

windows10-2004-x64

1

WMFDemux.dll

windows7-x64

1

WMFDemux.dll

windows10-2004-x64

1

asyncflt.dll

windows7-x64

1

asyncflt.dll

windows10-2004-x64

1

atrc.dll

windows7-x64

1

atrc.dll

windows10-2004-x64

3

cook.dll

windows7-x64

3

cook.dll

windows10-2004-x64

3

drvc.dll

windows7-x64

1

drvc.dll

windows10-2004-x64

3

msvcr71.dll

windows7-x64

3

msvcr71.dll

windows10-2004-x64

3

pncrt.dll

windows7-x64

3

pncrt.dll

windows10-2004-x64

3

raac.dll

windows7-x64

3

raac.dll

windows10-2004-x64

3

vjocx.dll

windows7-x64

8

vjocx.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b98530c9782cf8ac549b47e93c87f00

  • Size

    1.6MB

  • Sample

    240108-q1va5sbhh2

  • MD5

    4b98530c9782cf8ac549b47e93c87f00

  • SHA1

    5257fccd3b6ce3cf65d8e01b240490324b953a3f

  • SHA256

    e7e50678a688b5a7bd3b76ca1e948809590ebff535881f9d245dafbfb8b3dc11

  • SHA512

    7fb13b3b769809ec23df15b29f53b09f480f182af957845ec1f41b7abc94842b875f206bd51688403a4460c2ef57cccf5a9464086c59d41a378fe3c5519419ba

  • SSDEEP

    49152:PQ6SE4AxDsjQu+CY5LcemuLJKbLcrRs5POh:Pv0cD0oLcjWz6lG

Score
8/10
persistence

Malware Config

Targets

    • Target

      GifShower.dll

    • Size

      144KB

    • MD5

      75521d06182e890a60c4c1dff7315ec5

    • SHA1

      8d9705f81ccd8a41f4314b260e503ae154dad344

    • SHA256

      91c97a0a67ad3218bda9a49df29fa45589041f793aabdfb0990949aa26178eb4

    • SHA512

      8f4a0402daf42f3c92c5d14d75c972e06d7c6c546cbcdaccfe3efda4065ae9e3e288a9ef7c97b401ac4a596e1b07bc9eb3beac7b41720ef625de9125dcd6f651

    • SSDEEP

      3072:bAK30yQ4jrQef4nSADg0EVWpPmVlRWUrI:z3BpzVWR+W

    Score
    1/10
    behavioral1behavioral2

    • Target

      RealMediaSplitter.ax

    • Size

      360KB

    • MD5

      aeea88436f977d470735763e8219dcee

    • SHA1

      da0046e643f05bba45f2ba4b7a972570a00fd9dc

    • SHA256

      be3c4fa646686fef1af3f15c930a496a0e1c2146232d9abe4e139922ca4ce624

    • SHA512

      68b62e7370f9859497f1c9c3f13ae86f5c45d699771d5c3b65d32af3c009689b373df96aaa6e5bc2ebb56fa3aac1445ccc9d94a2ad6410e6be152ed76eb089c1

    • SSDEEP

      6144:e78dRsJrLRqdRIS+ZUuq4YBLxzudLZCkegz5/AuVu0yoRaGe:N6JEduSwVybzuRZxegd4Wuf

    Score
    1/10
    behavioral3behavioral4

    • Target

      WMFDemux.dll

    • Size

      104KB

    • MD5

      5e06cd629712576a32fbcd8a0c62b4dd

    • SHA1

      fd5cb2ce5e8d9010715b57b0c8a939e58697afc6

    • SHA256

      58eb294d7fa3907dee24647aaf0a9ccc409f8f39aa9e03269cc8ea381c012feb

    • SHA512

      09fc01869f59c1583d25d5aee6dbfcd4e3443fddcd751b3eade2447c6220263f7f83aafb174a026a0cebea904b67b9a256a02fa152f29d847c3993737642282a

    • SSDEEP

      1536:4DjAdbvJ8f+XWJgPzgIO34eI86beCYbwtfH4Gxijh94l1vthK:4YtvJeTSPO4eLIKV94l1FhK

    Score
    1/10
    behavioral5behavioral6

    • Target

      asyncflt.ax

    • Size

      52KB

    • MD5

      5445da4d5b8f345ce027b76a534ab5c5

    • SHA1

      d2961815278d87b229cfe28cadaf3095b37da14d

    • SHA256

      99413bbc40252370d75f087b203d6945846602e54c5ca29f642324f19513a374

    • SHA512

      68550e861feae8b6390efe50fc290ef6dc39e1ee75007e01ee07a2fbd9de7d41fbcc0909c4a17303fa83b41a7dc566de85a1882d8d515fa9751ef0adeb71cee2

    • SSDEEP

      768:cYEc7vXK64uE6mwUkoBeyH3OhbYffB4hv+d6VAM:cYb7va69E/5LelYfSho6Vl

    Score
    1/10
    behavioral7behavioral8

    • Target

      atrc.dll

    • Size

      76KB

    • MD5

      143c1b061c29e8e6da3223591561837d

    • SHA1

      e7542e2668e69ef8f159a7f2e7207d7552b4fb74

    • SHA256

      98bc8d1425b7e2ae944074cab85f1b75ac86f4243420e088e0f1685009107a8f

    • SHA512

      df8299935f8401368af7606a544213fd0662c67aed6819d0ee29e9266fc51349b08990fbf5a1a7a95eb09ad73173123b31d0f0bcacae852640adf5934451497e

    • SSDEEP

      1536:yiIYskdn7pp5XIHvU/zTnw/unZ+NQvExk:DInap5XOU/vAIZpvEO

    Score
    3/10
    behavioral10behavioral9

    • Target

      cook.dll

    • Size

      64KB

    • MD5

      fa220dae3898b8578c34791648321a38

    • SHA1

      12bdd5396e996d071368980d36ef6f6c7b39f936

    • SHA256

      f8b5898569a508e370eb25db27c1cba440c9d559529850c05589e56a93659835

    • SHA512

      9c2ad73fd43de7ca16a1d75b2974a737dfe1478d094783861ff5e3f994e17bc9e36e31f130296b497bb8955849be31db526018c0621cf5b09496fc6e5c3d6f34

    • SSDEEP

      768:79rczOVJc8avUhcRxV6Sz+b2G90YnGZosMwCJtVSk7K+t6tj6tVDWVp3Ghv+Xb:7uqc8/aUSz62G9LnOnMK+t6tR

    Score
    3/10
    behavioral11behavioral12

    • Target

      drvc.dll

    • Size

      280KB

    • MD5

      6da31285ac7271bbbfe0f1ee76882383

    • SHA1

      1b8b6cb6ad37dee958be9e0e2e273eb44b61dbb4

    • SHA256

      b172d6680db022b03e8e109d41c271fc644418d0bc3add32513346364d0e8850

    • SHA512

      5bd5c5952c9f6c5711cf3c328820a782abd59641821b1c9d9c1fd492b3350834cfe11e177affa9de27cc9457514c10aff45f41646c3df7ccedbb46247c21b402

    • SSDEEP

      6144:ml06HFrzhnwBxHBxrFPprBxrFBxrzWoEeflc/AljEzz4:mSEFrzhnIWoy/AlYzk

    Score
    3/10
    behavioral13behavioral14

    • Target

      msvcr71.dll

    • Size

      340KB

    • MD5

      86f1895ae8c5e8b17d99ece768a70732

    • SHA1

      d5502a1d00787d68f548ddeebbde1eca5e2b38ca

    • SHA256

      8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe

    • SHA512

      3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da

    • SSDEEP

      6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E

    Score
    3/10
    behavioral15behavioral16

    • Target

      pncrt.dll

    • Size

      272KB

    • MD5

      13001eb0a58b4de96126b16ab15fd8cc

    • SHA1

      4dfe6d2d02e9fa194f4af3d054b458b5a4bafbe6

    • SHA256

      e983aa97fe1ce6af92f06433a71e03f54d3fc78392e26691cace927094bab8d7

    • SHA512

      1a7c052bc1e7c824a3aff5e27c5cbd0720893e341dfb93062021b82c3a6d940c4ea23cbcdfaaeb174d90f51c36f0d8c62f693766f42172f894b6b689d26f49b2

    • SSDEEP

      6144:3m7wHLiH0k6OgfjvQ0mvlxZ/PeT8Ah8EoHiIKaGo5RpTufufVvtr+dj7GcuT1JOy:3m7KLiHl6OgfjvQ0m93/5q+iIKaGo5Rr

    Score
    3/10
    behavioral17behavioral18

    • Target

      raac.dll

    • Size

      540KB

    • MD5

      9576ca40a2adf61af685962c87bc24c1

    • SHA1

      07681e114a23083e1deca59c5e4797cfbfdba34d

    • SHA256

      62147521ab0b8a28859cd7ea42ee652597715487679b2b675a0ef665c41942e8

    • SHA512

      f3deca561380731456fbf0610a3fca03134d9c920446c6b884b16f6212d3f846ceec2a9fa2854a65c0ab28c78df73c95edb83ec03874ca6ab70d003c7d49ac0b

    • SSDEEP

      12288:Y00VpiOM/D2Z4689mx4oEmuCkDizKZSWNcKKKKYYYYYG0fJsZydmixv+g:Y0tOM/SZ4t9mxNEmuCkDeKIWNcKKKKYN

    Score
    3/10
    behavioral19behavioral20

    • Target

      vjocx.dll

    • Size

      1.6MB

    • MD5

      a4917c2686f8aad36ca825e538fa205a

    • SHA1

      988c12cc21e960b50a1ce1041a75efef7d5def4b

    • SHA256

      cc92b8e35bb53c2aa47b8050c33b68c3f53208d11764b4b1b446ead933b33782

    • SHA512

      745381166a32b432e0ed6ba3ddf3300ce1e3b10f264d3d77d6f6d1447be4e6cf2c453ee63e972b31062951fdb831c0e1873f1a155efa39f55545f5452a187052

    • SSDEEP

      24576:s5iDxabKrQZuId5xVH9kVSDj+Jh9UfictRwsVvhBr51u:G5ZyMrtRwsVvzu

    Score
    8/10
    persistence
    behavioral21behavioral22

MITRE ATT&CK Enterprise v15

Tasks