General

  • Target

    6790683810ee472724ff6b72edaecc4d

  • Size

    597KB

  • Sample

    240119-n4rnbaddbp

  • MD5

    6790683810ee472724ff6b72edaecc4d

  • SHA1

    1937cbb3b78651c14a654372b8e3e8bf7b59d16c

  • SHA256

    f46aae7a50e9fcc554184e69a191d553b6287aa604f5cd5b2713d19363e318e7

  • SHA512

    ecdfe76a90570ca495a3d47b8ce35c56ad74aa9efe6c7ec3214206ec857dc7e58e47e5cf810561fd5777db946d36f2c680427f1921bdca890805e0043b473ad5

  • SSDEEP

    12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg5t:AtMCkmOMXJbFSv/JivQsG503

Score
7/10

Malware Config

Targets

    • Target

      6790683810ee472724ff6b72edaecc4d

    • Size

      597KB

    • MD5

      6790683810ee472724ff6b72edaecc4d

    • SHA1

      1937cbb3b78651c14a654372b8e3e8bf7b59d16c

    • SHA256

      f46aae7a50e9fcc554184e69a191d553b6287aa604f5cd5b2713d19363e318e7

    • SHA512

      ecdfe76a90570ca495a3d47b8ce35c56ad74aa9efe6c7ec3214206ec857dc7e58e47e5cf810561fd5777db946d36f2c680427f1921bdca890805e0043b473ad5

    • SSDEEP

      12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg5t:AtMCkmOMXJbFSv/JivQsG503

    Score
    3/10
    • Target

      $APPDATA/Internat Exp1orer.qnk

    • Size

      1KB

    • MD5

      9ffaab5f197ee38cf1fe65e19d4bb217

    • SHA1

      39ee57d785cb31b75fe79879ab5dfed14eb1a28e

    • SHA256

      6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca

    • SHA512

      eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b

    Score
    3/10
    • Target

      $DESKTOP/Internat Exp1orer.qnk

    • Size

      1KB

    • MD5

      9ffaab5f197ee38cf1fe65e19d4bb217

    • SHA1

      39ee57d785cb31b75fe79879ab5dfed14eb1a28e

    • SHA256

      6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca

    • SHA512

      eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b

    Score
    3/10
    • Target

      $DESKTOP/ԱմƷ.qnk

    • Size

      1KB

    • MD5

      3801cf5240ef322de5fb53224f763068

    • SHA1

      e4286f9b6e5986b6a237bc70fdc03e8a36287e11

    • SHA256

      23dde6d591dc39c8b7901a49ce2edbe1591ef2b68d69700a4c81fd741f2d714e

    • SHA512

      3d26058c20050e236cb78533485dc2dd02ed6be0ab7037e8eac5916b75abe189d38f57ed45899787cbe69318ec4d6763633d1a8a96600fd0b20b83aaa9f03ef4

    Score
    3/10
    • Target

      $FAVORITES/Ա.lnk

    • Size

      1KB

    • MD5

      62d588bdb74e4e2e5d1689fa9272ce39

    • SHA1

      9d0db515d8f65e57353381d707060f7343a74da7

    • SHA256

      248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef

    • SHA512

      cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      107737e3282fefd85684f2fa3df6d1c3

    • SHA1

      3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f

    • SHA256

      21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0

    • SHA512

      439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4

    • SSDEEP

      192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      0ae9c427fe7bbbbf1368c1c6d3933ae7

    • SHA1

      c8e5131613302531c88512dada29a18886259268

    • SHA256

      49437f4b9fd38007f3b2735f0a8a12830b995305c75118b440202980183d5c6a

    • SHA512

      59b76b00f2b0d6242dc5bc3cb36d3ff78867445f502e34cea890c6f493c2adf9b97cec539963204ddd1c641e1a77139f46fc33dec4dc636f4b06d2edffffec6d

    • SSDEEP

      96:vCCshwlpqUsYghN/9uvZ7CLWNCSiiVTQYBGVXRvuBDlSriklbuba1iLc+cEyzo7e:BzqUuh/uLCXIkYBGV9uVlSblbubbwtl

    Score
    3/10
    • Target

      $SMPROGRAMS/Internat Exp1orer.qnk

    • Size

      1KB

    • MD5

      9ffaab5f197ee38cf1fe65e19d4bb217

    • SHA1

      39ee57d785cb31b75fe79879ab5dfed14eb1a28e

    • SHA256

      6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca

    • SHA512

      eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b

    Score
    3/10
    • Target

      $SMPROGRAMS/Ա.lnk

    • Size

      1KB

    • MD5

      62d588bdb74e4e2e5d1689fa9272ce39

    • SHA1

      9d0db515d8f65e57353381d707060f7343a74da7

    • SHA256

      248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef

    • SHA512

      cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e

    Score
    3/10
    • Target

      $STARTMENU/Internat Exp1orer.qnk

    • Size

      1KB

    • MD5

      9ffaab5f197ee38cf1fe65e19d4bb217

    • SHA1

      39ee57d785cb31b75fe79879ab5dfed14eb1a28e

    • SHA256

      6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca

    • SHA512

      eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b

    Score
    3/10
    • Target

      $STARTMENU/Ա.lnk

    • Size

      1KB

    • MD5

      62d588bdb74e4e2e5d1689fa9272ce39

    • SHA1

      9d0db515d8f65e57353381d707060f7343a74da7

    • SHA256

      248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef

    • SHA512

      cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e

    Score
    3/10
    • Target

      $TEMP/remote.exe

    • Size

      67KB

    • MD5

      71c0a16bad347349ea62d30b76bcc326

    • SHA1

      841087fc28fb4812e0c2898ec8ac9049d3bcf593

    • SHA256

      235d9e96c68a262c1d6093fa499c8ffc14f41cca8c79dc289bdb27d70b7411d3

    • SHA512

      7d4ddb4e70d49cc1c221abf68b71f579200adefb1d79fdfd414494b32f11a004aafb3715e8131e382c61277a99abbc374ec7448f176d235bd2da581d71610fc5

    • SSDEEP

      1536:Mppv5CNE2E/n/fn8lvOvNOH4KJJ6CR4Romu/BsKO+sqCZnAucg8s:Mppv5CNEhf8FH4KJJ6045y5CZ9Is

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      107737e3282fefd85684f2fa3df6d1c3

    • SHA1

      3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f

    • SHA256

      21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0

    • SHA512

      439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4

    • SSDEEP

      192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE

    Score
    3/10
    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      01776e92060ac00338d0367e49518384

    • SHA1

      928f7d41e59a1f9fefadeea6226c5a223ebcd699

    • SHA256

      f144d17060052ce6205fdf717a647f6b4e20c268fea14e81efc26356d00bbaab

    • SHA512

      2da8cb9c0cb7ff983b137d321f48f5ecf24600c1b52570691ed527531cdb61c98f8b2cf0c53446cb4e7f98d571f8e2591a3f3570ac9722abbac25648866d9881

    • SSDEEP

      192:SpM3f5sTMzoU7Fs0+/tcDm0tzailQvzwTaoxs+/rH6hqCeHtpflVp6kn2VgsTwp:SpM3xcMzRF4/Gv+H+D6hqbgk2rTwp

    Score
    3/10
    • Target

      $TEMP/sobar.exe

    • Size

      468KB

    • MD5

      cfdf042273956dd8d102605d46c1d027

    • SHA1

      033906dff759c2fdae95258765154103ddf6ebae

    • SHA256

      d99b6bc977d6582ea46791bdff2460e8ec933f2ef1591b0fc8161fa1e2c129e5

    • SHA512

      0178eb0144c5fe77fd71fa277941b8744577a8a55f36b933a1649c9be4efd0c0cc27b621c22c6a45a59216d2ab11dd48806262a16b1d0b56763a5f0f7a4342eb

    • SSDEEP

      6144:Vqn/RLQoaQOgOk0JYE9ldDbVOC8G3vfFuJAcSpXsaYI6eTb+VLyrgkXoCGdBW4G4:S6oCgAXtDbQCh3vtuuDp8SqV2GjMTtza

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks