Overview
overview
7Static
static
3MyIVpH.rar
windows7-x64
3MyIVpH.rar
windows10-2004-x64
7Bentley.liclib.dll
windows7-x64
3Bentley.liclib.dll
windows10-2004-x64
3Microstation811.reg
windows7-x64
1Microstation811.reg
windows10-2004-x64
1corr.dll
windows7-x64
1corr.dll
windows10-2004-x64
1toolsubs.dll
windows7-x64
3toolsubs.dll
windows10-2004-x64
3General
- Target MyIVpH
- Size 283KB
- Sample240110-k98l8sdfa2
- SHA256 81d7a32eb3d9f75a3e334d6b6052c9f8df5958ec9b6d2c16253bd9a82411b7ea
- MD5 6de43302179238d21e829bba4974459b
- SHA1 585bfbb919862c8bb31a989d193cdb5467fda42a
- SHA512 8a2c4104431193dbc128fa9e9c04da0e72e274caf4f848976638e9b54ec4aa78ad81f3271a746c50112f230fb9df6a0e5f96c782e09c9b0e2fff3aa94530fa7c
- SSDEEP 6144:xF1qG1pT1jn+uQczizYXhehPjHGbdwkGly3YosP3Fe1dRNr9T49g:xLJdniGhwLHGJD3YoUA1dR5h46
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
MyIVpH.rar
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
MyIVpH.rar
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Bentley.liclib.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Bentley.liclib.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Microstation811.reg
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Microstation811.reg
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
corr.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
corr.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
toolsubs.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
toolsubs.dll
Resource
win10v2004-20231215-en
Malware Config
Targets
-
- Target MyIVpH
- Size 283KB
- SHA256 81d7a32eb3d9f75a3e334d6b6052c9f8df5958ec9b6d2c16253bd9a82411b7ea
- MD5 6de43302179238d21e829bba4974459b
- SHA1 585bfbb919862c8bb31a989d193cdb5467fda42a
- SHA512 8a2c4104431193dbc128fa9e9c04da0e72e274caf4f848976638e9b54ec4aa78ad81f3271a746c50112f230fb9df6a0e5f96c782e09c9b0e2fff3aa94530fa7c
- SSDEEP 6144:xF1qG1pT1jn+uQczizYXhehPjHGbdwkGly3YosP3Fe1dRNr9T49g:xLJdniGhwLHGJD3YoUA1dR5h46
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Bentley.liclib.dll
- Size 285KB
- SHA256 bc563ceac43608c391362537042a52f5a4e3793aa67ef7172ce696f9eb8129cb
- MD5 bbf9c8989996a68e8ae2e7c1d41edbcb
- SHA1 4e6a49e9dc3fd3c41c04feba625a1264c5b598bd
- SHA512 46c8a5dcff4ad12cf89e4d4b7d3406606fce06a8afe2d99674da74276b38aa418188b5c5cf4dcc868167b63eabaee3089b74d64a847edde4f8daa4872893c107
- SSDEEP 6144:3uJX2Zvdh0MEl409gRiZeq8jYAOD4HnxMV:+R2ZTEl9goZr4HOV
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target Microstation811.reg
- Size 1KB
- SHA256 46b19a019d4d01ae470d3b8482cec3c414753e01843a72235defc5691d0b8586
- MD5 5c8a4da96567c69b63dcb6107aaad052
- SHA1 dfc08963fe4d124d8cb182533884c5fd8ef5da27
- SHA512 4ac01d00bb2ca122ee1f0395c987698c2d7b392e06628748b4918bce982a6a0fe601590c1d9fa487a4b58c87811a28169c6591fc9e18d8ba35aa88a01bd7bfc1
- MD5 SHA1 SHA512
Score1/10 -
- Target corr.dll
- Size 27KB
- SHA256 97a4e0160e87a4e2bcd6e6b7354016a2e56fb6c59aa87216aa3c27a2f91e0203
- MD5 389ce87a3b93641ec6a275a551016670
- SHA1 b0e0c15e85cfb2e6f52bbab9761f486f6ed9859e
- SHA512 92c9fd02f8c30ea0cb4717eaff26f7a3475ef9b8bfbdba41e24562ab37ce70659f7c1de33e24dc59baa27fc091d61a53ed817dbd81c82b6bcdd980bcb102d4ce
- SSDEEP 768:yoi3ce0qByOCNG1TRyvTpujzLvYh5LSXGn:7icqRT1TRyrpYTo5LSXG
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target toolsubs.dll
- Size 210KB
- SHA256 3bb4136deb5e5830c53f659074b5978db22d71108e34100976ac3ebd28a0276e
- MD5 8d83358e80c471060cc82751a79f4188
- SHA1 75e38e301e9af6fcd8b576e609fd8105ca0e37a5
- SHA512 751b23cb8e8af1f55b3405ccd296e6117c88a11b053fd75fe54bfe4ea535ebb16abd65a9b434a385105462f02c01b9d770b74976ac3852b78b1d25d30217afbc
- SSDEEP 6144:S2ANNCDxWamHGSOejsoUuhveinn2GjjRa4BrTE:iCDxuHGeAoesnN
- MD5 SHA1 SHA512 SSDEEP
Score3/10