Overview

overview

7

Static

static

3

570481b434...7e.exe

windows7-x64

7

570481b434...7e.exe

windows10-2004-x64

7

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ON.dll

windows7-x64

3

$PLUGINSDI...ON.dll

windows10-2004-x64

3

$PLUGINSDI...la.exe

windows7-x64

1

$PLUGINSDI...la.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    570481b43474f26ffa169e52c68e347e

  • Size

    319KB

  • Sample

    240112-vkxhsacga4

  • MD5

    570481b43474f26ffa169e52c68e347e

  • SHA1

    4d6325037ec9534f1a7045f1e602566977b17f25

  • SHA256

    c695c23b06fe4ecbe888a2f937ab7cb2e67465219dbbcf3bbd18748b9accf73e

  • SHA512

    6bb8e1c4cca6691c73a12fa394bb35f7728c5b44ea7a3155fdc828c2bd1949e7e90de9b029e5383ea39b94141cf055d4a7863364c4ec7950794a6586d6ea0d94

  • SSDEEP

    6144:So4UpXWoc0vqHIwebkPRSGMznXzvcXYRsCei+Tt5+JVfMnAWmcFuz:nGocwMIfOShPvcX4sCX+B4VfMOLz

Score
7/10

Malware Config

Targets

    • Target

      570481b43474f26ffa169e52c68e347e

    • Size

      319KB

    • MD5

      570481b43474f26ffa169e52c68e347e

    • SHA1

      4d6325037ec9534f1a7045f1e602566977b17f25

    • SHA256

      c695c23b06fe4ecbe888a2f937ab7cb2e67465219dbbcf3bbd18748b9accf73e

    • SHA512

      6bb8e1c4cca6691c73a12fa394bb35f7728c5b44ea7a3155fdc828c2bd1949e7e90de9b029e5383ea39b94141cf055d4a7863364c4ec7950794a6586d6ea0d94

    • SSDEEP

      6144:So4UpXWoc0vqHIwebkPRSGMznXzvcXYRsCei+Tt5+JVfMnAWmcFuz:nGocwMIfOShPvcX4sCX+B4VfMOLz

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/INetC.dll

    • Size

      24KB

    • MD5

      640bff73a5f8e37b202d911e4749b2e9

    • SHA1

      9588dd7561ab7de3bca392b084bec91f3521c879

    • SHA256

      c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502

    • SHA512

      39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a

    • SSDEEP

      384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      9625d5b1754bc4ff29281d415d27a0fd

    • SHA1

      80e85afc5cccd4c0a3775edbb90595a1a59f5ce0

    • SHA256

      c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448

    • SHA512

      dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b

    • SSDEEP

      192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsJSON.dll

    • Size

      23KB

    • MD5

      311f1c457421ca059b31ccc375dc4168

    • SHA1

      f7ac5e383fcae4facf7f16e69d909f181089edb3

    • SHA256

      a17f2d61b8045741af80c656baa4e1296a9a2bbd5f0dc90a55a7389f4c1c177e

    • SHA512

      e45d944b156bbe7f0056945d0ab3628f59f93ef772ad650d9e6dc757d4674b0a1b4a71c586799f2f0f913b5655a831f24acea65e47312c3de240c2f788f07d31

    • SSDEEP

      384:R0qMhNdDqbTmld3uVazkgBIKLNyBjB7TVtTDEHxOuof/yhZyWr2/N:RMhNiTmldfktKgBj55lDVWr2/

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/xantacla.exe

    • Size

      1.3MB

    • MD5

      96238a71e172ea4fc303ecb6500f43e3

    • SHA1

      9b00aa32ac2422d42bb3b8d5b7dcd386d1cf5872

    • SHA256

      0a651dd601df4dd0f87466195a306a1fcf2af60e618db128148a9a5e23b87c4b

    • SHA512

      64dc439de17a16898190931e3bb0eccdf597e6632671b3525b3faef5aa2a65b0a47e22141c934b57531e8b0d0b528b7c658b801fef5516ffd0515ede7c94c8dd

    • SSDEEP

      12288:fjO1WKC09iDT++ZIxCRV2jgqj9FweOBHhc0d13NXVpAbAo:fqolfZDR4jgqj9uecH2cy

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks