Overview

overview

7

Static

static

3

598d8090d2...3e.exe

windows7-x64

7

598d8090d2...3e.exe

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

daemon/raven-cli.exe

windows7-x64

1

daemon/raven-cli.exe

windows10-2004-x64

1

daemon/ravend.exe

windows7-x64

1

daemon/ravend.exe

windows10-2004-x64

1

raven-qt.exe

windows7-x64

1

raven-qt.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    598d8090d2a1794f8e5511a19444723e

  • Size

    15.2MB

  • Sample

    240113-1752bsgba8

  • MD5

    598d8090d2a1794f8e5511a19444723e

  • SHA1

    4882dd64aad260fa9018345720a531eb49dc0f4c

  • SHA256

    2cece40eb92029ec8222ddbedc4a3541056cbe3f49ddbe9d0d99942b76b4a0ad

  • SHA512

    6ca7346ce70e64124752a16dcffa473b5e06ea32e6e4d4990272216a6208a54d9c3d438b1af99aa2d67dca56ca0f657260e2d9b002853db8b94d545f09edeca7

  • SSDEEP

    393216:B2zCjN/ogxQmqdrsoUjmn18ZlAfbqm7U3bf4Gst8qMQN2g1Am5:BUaljxQm2s/jmnwlue2U3FjNSAG

Score
7/10

Malware Config

Targets

    • Target

      598d8090d2a1794f8e5511a19444723e

    • Size

      15.2MB

    • MD5

      598d8090d2a1794f8e5511a19444723e

    • SHA1

      4882dd64aad260fa9018345720a531eb49dc0f4c

    • SHA256

      2cece40eb92029ec8222ddbedc4a3541056cbe3f49ddbe9d0d99942b76b4a0ad

    • SHA512

      6ca7346ce70e64124752a16dcffa473b5e06ea32e6e4d4990272216a6208a54d9c3d438b1af99aa2d67dca56ca0f657260e2d9b002853db8b94d545f09edeca7

    • SSDEEP

      393216:B2zCjN/ogxQmqdrsoUjmn18ZlAfbqm7U3bf4Gst8qMQN2g1Am5:BUaljxQm2s/jmnwlue2U3FjNSAG

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      9KB

    • MD5

      c01df0ef605f284813f15da8779d79ff

    • SHA1

      d44d9ad01584053d857e033dc14f4e5886bb412e

    • SHA256

      c6388b3742bc1591415dc789959c0ed7141cb3a5826e2de0c9f4c964b21ce64a

    • SHA512

      b7db647c307fb507e453cbca252d67a9f9e9c3fd42b1684d6e9f5f7826ae7c677c0a81f2301a9187d07084c5980ba4ea7491bf6c2b1ae3b161af3e197fa42b70

    • SSDEEP

      96:duceK69IiAmbDaEEoq/X6qN9gRRAQDTdnlPVng1UlcPkT+TwPTgbmj:ZezEEEoqSw9g33DTdlPdI0c90

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      23KB

    • MD5

      8643641707ff1e4a3e1dfda207b2db72

    • SHA1

      f6d766caa9cafa533a04dd00e34741d276325e13

    • SHA256

      d1b94797529c414b9d058c17dbd10c989eef59b1fa14eea7f61790d7cfa7fd25

    • SHA512

      cc8e07395419027914a6d4b3842ac7d4f14e3ec8be319bfe5c81f70bcf757f8c35f0aaeb985c240b6ecc71fc3e71b9f697ccda6e71f84ac4930adf5eac801181

    • SSDEEP

      384:TsuiXfwnOEFMUgKWSeMPe3+6a+A6PcPpntKfh00g509nj:efwnLFMUGMPenA6Yuh9Xj

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      11KB

    • MD5

      79a0bde19e949a8d90df271ca6e79cd2

    • SHA1

      946ad18a59c57a11356dd9841bec29903247bb98

    • SHA256

      8353f495064aaf30b32b02f5d935c21f86758f5a99d8ee5e8bf8077b907fad90

    • SHA512

      2a65a48f5dd453723146babca8d047e112ab023a589c57fcf5441962f2846a262c2ad25a2985dba4f2246cdc21d973cbf5e426d4b75dd49a083635400f908a3e

    • SSDEEP

      192:rAki5P7AA9Xm2Y3KkdMG95Kt0qk+PdIgb9rdTiUdH7hs:Ekg7TNm2GdMG9ISx+P99rd+aH9

    Score
    3/10
    behavioral7behavioral8

    • Target

      daemon/raven-cli.exe

    • Size

      2.9MB

    • MD5

      29313f4b7bb2c035019e6c657a55ef37

    • SHA1

      9bf315c16cbbc972334d44b632ee28882de24698

    • SHA256

      91769fd34a43055915a30b861f80d957df5f4dc5fb1ff7dcc291f5eaa2f16250

    • SHA512

      c19d9e5555722aba7d50d5f1c91c95b2528ad70d7a01919233c9304079968de3a534d652cc6fb969b5fc162f6897e7ce9dba0ef08b38c411165525bee560a69e

    • SSDEEP

      49152:sXdlcjszChwItOkj7Ciw7g0U80rTGsDrd3Hkds7UA7gUiBUZjI5a7+fEk0zo:QvbWwp5etrd3HkaVsAB

    Score
    1/10
    behavioral10behavioral9

    • Target

      daemon/ravend.exe

    • Size

      11.0MB

    • MD5

      79e58e58c0d5e9b4042cb10c7670cc6f

    • SHA1

      2808caf818b0d19c65ea7af2259f465d2e6fef01

    • SHA256

      c61fadfa1f85977002045279f2e83673f07ceb19ab464bed0a7dd2d69dc787c1

    • SHA512

      4dd50dfd81baaabfcfa80ec37d00b88536a38640bb7649f8269de8a5baf579936586e53489466b855b10d719060ef950ab590ad57080119a764b13e9fb1e8617

    • SSDEEP

      98304:a/utgtErVX4xcrfQ1nvZql14wEJy4sLhGeAlxpQSLg5KDm:a2gjyXlSyx8f

    Score
    1/10
    behavioral11behavioral12

    • Target

      raven-qt.exe

    • Size

      34.1MB

    • MD5

      931025e6fecfd98b3411cd5968facedd

    • SHA1

      5af1e0c9100e4b5af00b11fdf44bc8ff9d73574a

    • SHA256

      8e08ac8fc45673c339cd780b0831f57d49f84d7e07fba9e789cdc7dcd62e7f94

    • SHA512

      bb384be7b60257c8842976c29393d17d23b96a920b03cbeaa4ca4072e80895feacd8912aa49b09e7875f4f9d0c5a4372215d68feab4dac46c02779f70802329a

    • SSDEEP

      196608:XcXN2JgE2qp/nsWmdp7kWle1qpjwwYLWw08hSbQVu1LJsv6tWKFdu9CnXCglZ+:Z2bwnaQS38BiwJWdRJsv6tWKFdu9C/6

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks