f46aae7a50e9fcc554184e69a191d553b6287aa604f5cd5b2713d19363e318e7

Sharing

Copy URL Twitter E-mail

General

Target
6790683810ee472724ff6b72edaecc4d
Size 597KB
Sample240119-n4rnbaddbp
SHA256 f46aae7a50e9fcc554184e69a191d553b6287aa604f5cd5b2713d19363e318e7
MD5 6790683810ee472724ff6b72edaecc4d
SHA1 1937cbb3b78651c14a654372b8e3e8bf7b59d16c
SHA512 ecdfe76a90570ca495a3d47b8ce35c56ad74aa9efe6c7ec3214206ec857dc7e58e47e5cf810561fd5777db946d36f2c680427f1921bdca890805e0043b473ad5
SSDEEP 12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg5t:AtMCkmOMXJbFSv/JivQsG503
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  6790683810ee472724ff6b72edaecc4d
- Size 597KB
- SHA256 f46aae7a50e9fcc554184e69a191d553b6287aa604f5cd5b2713d19363e318e7
- MD5 6790683810ee472724ff6b72edaecc4d
- SHA1 1937cbb3b78651c14a654372b8e3e8bf7b59d16c
- SHA512 ecdfe76a90570ca495a3d47b8ce35c56ad74aa9efe6c7ec3214206ec857dc7e58e47e5cf810561fd5777db946d36f2c680427f1921bdca890805e0043b473ad5
- SSDEEP 12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg5t:AtMCkmOMXJbFSv/JivQsG503
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  $APPDATA/Internat Exp1orer.qnk
- Size 1KB
- SHA256 6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- MD5 9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1 39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA512 eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  $DESKTOP/Internat Exp1orer.qnk
- Size 1KB
- SHA256 6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- MD5 9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1 39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA512 eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
- MD5 SHA1 SHA512
Score

3^/10
behavioral5 behavioral6
- Target
  $DESKTOP/ԱմƷ.qnk
- Size 1KB
- SHA256 23dde6d591dc39c8b7901a49ce2edbe1591ef2b68d69700a4c81fd741f2d714e
- MD5 3801cf5240ef322de5fb53224f763068
- SHA1 e4286f9b6e5986b6a237bc70fdc03e8a36287e11
- SHA512 3d26058c20050e236cb78533485dc2dd02ed6be0ab7037e8eac5916b75abe189d38f57ed45899787cbe69318ec4d6763633d1a8a96600fd0b20b83aaa9f03ef4
- MD5 SHA1 SHA512
Score

3^/10
behavioral7 behavioral8
- Target
  $FAVORITES/Ա.lnk
- Size 1KB
- SHA256 248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- MD5 62d588bdb74e4e2e5d1689fa9272ce39
- SHA1 9d0db515d8f65e57353381d707060f7343a74da7
- SHA512 cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
- MD5 SHA1 SHA512
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0
- MD5 107737e3282fefd85684f2fa3df6d1c3
- SHA1 3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f
- SHA512 439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4
- SSDEEP 192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 49437f4b9fd38007f3b2735f0a8a12830b995305c75118b440202980183d5c6a
- MD5 0ae9c427fe7bbbbf1368c1c6d3933ae7
- SHA1 c8e5131613302531c88512dada29a18886259268
- SHA512 59b76b00f2b0d6242dc5bc3cb36d3ff78867445f502e34cea890c6f493c2adf9b97cec539963204ddd1c641e1a77139f46fc33dec4dc636f4b06d2edffffec6d
- SSDEEP 96:vCCshwlpqUsYghN/9uvZ7CLWNCSiiVTQYBGVXRvuBDlSriklbuba1iLc+cEyzo7e:BzqUuh/uLCXIkYBGV9uVlSblbubbwtl
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  $SMPROGRAMS/Internat Exp1orer.qnk
- Size 1KB
- SHA256 6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- MD5 9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1 39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA512 eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
- MD5 SHA1 SHA512
Score

3^/10
behavioral15 behavioral16
- Target
  $SMPROGRAMS/Ա.lnk
- Size 1KB
- SHA256 248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- MD5 62d588bdb74e4e2e5d1689fa9272ce39
- SHA1 9d0db515d8f65e57353381d707060f7343a74da7
- SHA512 cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
- MD5 SHA1 SHA512
Score

3^/10
behavioral17 behavioral18
- Target
  $STARTMENU/Internat Exp1orer.qnk
- Size 1KB
- SHA256 6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- MD5 9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1 39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA512 eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
- MD5 SHA1 SHA512
Score

3^/10
behavioral19 behavioral20
- Target
  $STARTMENU/Ա.lnk
- Size 1KB
- SHA256 248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- MD5 62d588bdb74e4e2e5d1689fa9272ce39
- SHA1 9d0db515d8f65e57353381d707060f7343a74da7
- SHA512 cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
- MD5 SHA1 SHA512
Score

3^/10
behavioral21 behavioral22
- Target
  $TEMP/remote.exe
- Size 67KB
- SHA256 235d9e96c68a262c1d6093fa499c8ffc14f41cca8c79dc289bdb27d70b7411d3
- MD5 71c0a16bad347349ea62d30b76bcc326
- SHA1 841087fc28fb4812e0c2898ec8ac9049d3bcf593
- SHA512 7d4ddb4e70d49cc1c221abf68b71f579200adefb1d79fdfd414494b32f11a004aafb3715e8131e382c61277a99abbc374ec7448f176d235bd2da581d71610fc5
- SSDEEP 1536:Mppv5CNE2E/n/fn8lvOvNOH4KJJ6CR4Romu/BsKO+sqCZnAucg8s:Mppv5CNEhf8FH4KJJ6045y5CZ9Is
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral23 behavioral24
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0
- MD5 107737e3282fefd85684f2fa3df6d1c3
- SHA1 3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f
- SHA512 439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4
- SSDEEP 192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral25 behavioral26
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 14KB
- SHA256 f144d17060052ce6205fdf717a647f6b4e20c268fea14e81efc26356d00bbaab
- MD5 01776e92060ac00338d0367e49518384
- SHA1 928f7d41e59a1f9fefadeea6226c5a223ebcd699
- SHA512 2da8cb9c0cb7ff983b137d321f48f5ecf24600c1b52570691ed527531cdb61c98f8b2cf0c53446cb4e7f98d571f8e2591a3f3570ac9722abbac25648866d9881
- SSDEEP 192:SpM3f5sTMzoU7Fs0+/tcDm0tzailQvzwTaoxs+/rH6hqCeHtpflVp6kn2VgsTwp:SpM3xcMzRF4/Gv+H+D6hqbgk2rTwp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral27 behavioral28
- Target
  $TEMP/sobar.exe
- Size 468KB
- SHA256 d99b6bc977d6582ea46791bdff2460e8ec933f2ef1591b0fc8161fa1e2c129e5
- MD5 cfdf042273956dd8d102605d46c1d027
- SHA1 033906dff759c2fdae95258765154103ddf6ebae
- SHA512 0178eb0144c5fe77fd71fa277941b8744577a8a55f36b933a1649c9be4efd0c0cc27b621c22c6a45a59216d2ab11dd48806262a16b1d0b56763a5f0f7a4342eb
- SSDEEP 6144:Vqn/RLQoaQOgOk0JYE9ldDbVOC8G3vfFuJAcSpXsaYI6eTb+VLyrgkXoCGdBW4G4:S6oCgAXtDbQCh3vtuuDp8SqV2GjMTtza
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30