General

  • Target

    65f0553a2ec9233c4f97f996ce5f99b6

  • Size

    2.6MB

  • Sample

    240118-y169psgeej

  • MD5

    65f0553a2ec9233c4f97f996ce5f99b6

  • SHA1

    a6b379fcdf15ffe8a9a3ec5dbb94b53b294081a6

  • SHA256

    f910a13226f0cc0674db290c728e0474c91fffd6963e454f83d975014d4a785c

  • SHA512

    08cb478de87c0cfac440e7c26cfc9eb6297f098ec026e7f4ce011bad9f0a7dbc98ae475d55d5ff49ddc17941ca1052f6a6941364fafed454851498149acaf5b2

  • SSDEEP

    49152:CD9XRe1hHIiP8EeGx1jVpOzyex9CPIZJVa63c/SYX/1E0pnggAVK5JyjjXtdHc:CPexesBp1o9Djk51RAxvc

Score
7/10
upx

Malware Config

Targets

    • Target

      65f0553a2ec9233c4f97f996ce5f99b6

    • Size

      2.6MB

    • MD5

      65f0553a2ec9233c4f97f996ce5f99b6

    • SHA1

      a6b379fcdf15ffe8a9a3ec5dbb94b53b294081a6

    • SHA256

      f910a13226f0cc0674db290c728e0474c91fffd6963e454f83d975014d4a785c

    • SHA512

      08cb478de87c0cfac440e7c26cfc9eb6297f098ec026e7f4ce011bad9f0a7dbc98ae475d55d5ff49ddc17941ca1052f6a6941364fafed454851498149acaf5b2

    • SSDEEP

      49152:CD9XRe1hHIiP8EeGx1jVpOzyex9CPIZJVa63c/SYX/1E0pnggAVK5JyjjXtdHc:CPexesBp1o9Djk51RAxvc

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/BgWorker.dll

    • Size

      2KB

    • MD5

      33ec04738007e665059cf40bc0f0c22b

    • SHA1

      4196759a922e333d9b17bda5369f14c33cd5e3bc

    • SHA256

      50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be

    • SHA512

      2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef

    Score
    3/10
    • Target

      $PLUGINSDIR/CheckProVs.dll

    • Size

      7KB

    • MD5

      62e85098ce43cb3d5c422e49390b7071

    • SHA1

      df6722f155ce2a1379eff53a9ad1611ddecbb3bf

    • SHA256

      ee7e26894cbf89c93ae4df15bdb12cd9a21f5deacedfa99a01eefe8fa52daec2

    • SHA512

      dfe7438c2b46f822e2a810bc355e5226043547608d19d1c70314e4325c06ad9ad63a797905e30d19f5d9a86ee1a6d9c28f525a298731e79dbf6f3d6441179a8e

    • SSDEEP

      96:iqCVh8iNqVgRudZczLiJp2tvgaJOnT/323x3XQUPVAm6yBBECtu7ZyvN:9IhJqUudZkLi+bOni3x3X3PVR6yBBfj

    Score
    3/10
    • Target

      $PLUGINSDIR/GoogleTracingLib.dll

    • Size

      36KB

    • MD5

      d8fca35ff95fe00a7174177181f8bd13

    • SHA1

      fbafea4d2790dd2c0d022dfb08ded91de7f5265e

    • SHA256

      ad873f1e51e6d033e5507235ec735957256ebeeb0d3f22aa0b57bb4bd0846e4c

    • SHA512

      eb530b10f137cb0cdfdcd2c11fd9f50f774e0ce44e9d2da3e755f6a6df24fe6e7525c27b109e3e68e9d3e49a889937a22f4d9d78703b1055a83b8a58808a58ba

    • SSDEEP

      768:IWXV2fVEC5h9KclMCumc6plPHY4jq7rOZkdhKZV:8Smh9/BumTlg4kOZ+Kz

    Score
    3/10
    • Target

      $PLUGINSDIR/IpConfig.dll

    • Size

      118KB

    • MD5

      a75e3775daac9958610ce1308e0bca3b

    • SHA1

      d83ce354cde527c2e20fb425415f6d4795dd4cd4

    • SHA256

      fe2093ff4bfa1d7259c922aca1e7bb219c4d234e469942446d9e2f8086b7d720

    • SHA512

      48168a91ec90df262b1e158f32b4bc2a6d6ce10022eb96d4a6f3c755b977e5c104558626adaa214bda29d7f1d246f19e2df59b9a338982aa1c623e1bdd5714c6

    • SSDEEP

      3072:oa/4Ftm9rSlia00FW96LOsWNQmtQ9WVx95+tTIJ:t/4S9raiae8DSDtQ9W3utEJ

    Score
    3/10
    • Target

      $PLUGINSDIR/SkinBtn.dll

    • Size

      4KB

    • MD5

      29818862640ac659ce520c9c64e63e9e

    • SHA1

      485e1e6cc552fa4f05fb767043b1e7c9eb80be64

    • SHA256

      e96afa894a995a6097a405df76155a7a39962ff6cae7a59d89a25e5a34ab9eeb

    • SHA512

      ebb94eb21e060fb90ec9c86787eada42c7c9e1e7628ea4b16d3c7b414f554a94d5e4f4abe0e4ee30fddf4f904fd3002770a9b967fbd0feeca353e21079777057

    • SSDEEP

      96:lNM22eGbMlQMYbDnmaxn/nPm1Xe+KuAaK:D32eGbMlQMuHvqXe

    Score
    3/10
    • Target

      $PLUGINSDIR/SkinnedControls.dll

    • Size

      77KB

    • MD5

      364bb3c9218429dd1315ad1db47e152d

    • SHA1

      3253c1a381161c268bce8c487e892c8e5dd29dc3

    • SHA256

      5f7998711ea856730139c4dac403f11b947ed94a464dc6d2d4b22f928c3a8536

    • SHA512

      d9084068a259acb9a1691d10da8610053d3abdf6dc78d7357d80d1ac794d940478d2b05c3050484680ddee4c832ae30d71a67b2c2978845e298aca48058e01f6

    • SSDEEP

      768:Q0p2dJFs6nYFg0vxrF9jd+IpMCGC8BnmmfJmLVp1aB5tEEThyX7QirbTGgyhTFDK:Q0YsX7vxGjBvJgVTadaXBTeh55axv

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      ca332bb753b0775d5e806e236ddcec55

    • SHA1

      f35ef76592f20850baef2ebbd3c9a2cfb5ad8d8f

    • SHA256

      df5ae79fa558dc7af244ec6e53939563b966e7dbd8867e114e928678dbd56e5d

    • SHA512

      2de0956a1ad58ad7086e427e89b819089f2a7f1e4133ed2a0a736adc0614e8588ebe2d97f1b59ab8886d662aeb40e0b4838c6a65fbfc652253e3a45664a03a00

    • SSDEEP

      192:eo24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol6Sl:k8QIl975eXqlWBrz7YLOl6

    Score
    3/10
    • Target

      $PLUGINSDIR/dotnetfx45_client_setup.exe

    • Size

      982KB

    • MD5

      9e8253f0a993e53b4809dbd74b335227

    • SHA1

      f6ba6f03c65c3996a258f58324a917463b2d6ff4

    • SHA256

      e434828818f81e6e1f5955e84caec08662bd154a80b24a71a2eda530d8b2f66a

    • SHA512

      404d67d59fcd767e65d86395b38d1a531465cee5bb3c5cf3d1205975ff76d27d477fe8cc3842b8134f17b61292d8e2ffba71134fe50a36afd60b189b027f5af0

    • SSDEEP

      24576:3idS2cRQNb9dUcyezFSja7zEwA2BH6SEUVGDKX68zuQm6wwr5mAPepC:SQ2cRQh9GexmCxBxVV56CmWQax

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      $PLUGINSDIR/libcurl.dll

    • Size

      538KB

    • MD5

      ce6ef90122f637328f2ae8759443e270

    • SHA1

      a8c7dfbf3aaa8d3d8bb64fc1daabd03f64d45a54

    • SHA256

      c86a70f6c216c2613c85b0f0a2dd35889222f135546f9384770e4b675f1b6755

    • SHA512

      4d7800df2b33eed0ae47b46c2ca99bf2cfc12ad5eef4b6f5b0e8bc729f9ee0e8910af1529e435d9960f3bd1519bc1de2b0f98cc93efdfca21795a82e668afac7

    • SSDEEP

      12288:C/IHHOrHRdCWHqzUiZSRNNoLykEzhucAddw3NWrPWOoqax2b4Xa06WRb21Jkz:C8sdW97wdWTLocb0X6WgUz

    Score
    3/10
    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      904d8313031ac05e2bac3dd329828833

    • SHA1

      6c8322f76e5c38bc24b0bcc057a510c92ec40b43

    • SHA256

      a7c5516478ab02b5d6c1684b3c2b31ee03331712bcd9f9a8ef8309d2b72c8ec4

    • SHA512

      9d524ebc965f224e1a16f537f71df0963c586fd548cb9a901f8afb1951416dd656d5493cc5e304157dfa6d70d69bcd4c5a5b140fceb3736548e71fe7086b6de8

    • SSDEEP

      192:oR8cxzvTyl4tgi8pPjQM0PuAg0YNyAUIFtSP:IBxzm+t18pZ0WAg0RzIFg

    Score
    3/10
    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec62e1a8d16d8f1b0eb792aa26e5de5c

    • SHA1

      faa219618aec99cffb81c312728dc56c1fdc5798

    • SHA256

      193d396fc7be5fed9d585de3c43e23d640c1dce725499f0274b3898c248545aa

    • SHA512

      cb3f3458cf734ab7b964ed25cac87ff2938292eed9caae1305b2e5975bde885f4d8b06d05d4099ef614982cd55d97e9ddc0f13bbe2cdd9fb642d008788ed3017

    • SSDEEP

      96:O7fhZwXd8KgEbAa9PweF1WxD8ZLMJGgmkNp38:/N8KgWAuLWxD8ZAGgmkN

    Score
    3/10
    • Target

      $PLUGINSDIR/nsProcess.dll

    • Size

      4KB

    • MD5

      f0438a894f3a7e01a4aae8d1b5dd0289

    • SHA1

      b058e3fcfb7b550041da16bf10d8837024c38bf6

    • SHA256

      30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

    • SHA512

      f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

    • SSDEEP

      48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj

    Score
    3/10
    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      313KB

    • MD5

      06a47571ac922f82c098622b2f5f6f63

    • SHA1

      8a581c33b7f2029c41edaad55d024fc0d2d7c427

    • SHA256

      e4ab3064f2e094910ae80104ef9d371ccb74ebbeeed592582cf099acd83f5fe9

    • SHA512

      04b3d18042f1faa536e1393179f412a5644d2cf691fbc14970f79df5c0594eeedb0826b495807a3243f27aaa0380423c1f975fe857f32e057309bb3f2a529a83

    • SSDEEP

      6144:rA9ssOlBrbYr5UP4m3mC/FvBbhQ1JzI+yQKiJGxdNtsm0:r2S165UP4mL/FvBtC8zQdSDmm0

    Score
    3/10
    • Target

      $PLUGINSDIR/pra_uninstall.exe

    • Size

      287KB

    • MD5

      086e1ebee5d94bf3e6c6dcbe2b76a6e2

    • SHA1

      786a56dbcca5d800689c467270f9fb5cdb699162

    • SHA256

      a0da75069cab0f020435afcbf7931671f263fa31584f089a742163d9fba9077a

    • SHA512

      b8d5c679d35ba66532ed5a89e96af220e2952f2917d04fd19a23a844476e268dc7accb222ca747320a54b751616f9b5efa74daecfb2e4d41a20ef08f0f33aaa2

    • SSDEEP

      6144:fzZZSOEngggggggg3a4lnZwvR62VBBp3b:fzZoO+gggggggg37ZwZ6OBBpr

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/BgWorker.dll

    • Size

      2KB

    • MD5

      33ec04738007e665059cf40bc0f0c22b

    • SHA1

      4196759a922e333d9b17bda5369f14c33cd5e3bc

    • SHA256

      50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be

    • SHA512

      2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks