Overview
overview
7Static
static
36790683810...4d.exe
windows7-x64
36790683810...4d.exe
windows10-2004-x64
3$APPDATA/I...er.lnk
windows7-x64
3$APPDATA/I...er.lnk
windows10-2004-x64
3$DESKTOP/I...er.lnk
windows7-x64
3$DESKTOP/I...er.lnk
windows10-2004-x64
3$DESKTOP/�...Ʒ.lnk
windows7-x64
3$DESKTOP/�...Ʒ.lnk
windows10-2004-x64
3$FAVORITES...��.lnk
windows7-x64
3$FAVORITES...��.lnk
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$SMPROGRAM...er.lnk
windows7-x64
3$SMPROGRAM...er.lnk
windows10-2004-x64
3$SMPROGRAM...��.lnk
windows7-x64
3$SMPROGRAM...��.lnk
windows10-2004-x64
3$STARTMENU...er.lnk
windows7-x64
3$STARTMENU...er.lnk
windows10-2004-x64
3$STARTMENU...��.lnk
windows7-x64
3$STARTMENU...��.lnk
windows10-2004-x64
3$TEMP/remote.exe
windows7-x64
7$TEMP/remote.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/sobar.exe
windows7-x64
3$TEMP/sobar.exe
windows10-2004-x64
3General
-
Target
6790683810ee472724ff6b72edaecc4d
-
Size
597KB
-
Sample
240119-n4rnbaddbp
-
MD5
6790683810ee472724ff6b72edaecc4d
-
SHA1
1937cbb3b78651c14a654372b8e3e8bf7b59d16c
-
SHA256
f46aae7a50e9fcc554184e69a191d553b6287aa604f5cd5b2713d19363e318e7
-
SHA512
ecdfe76a90570ca495a3d47b8ce35c56ad74aa9efe6c7ec3214206ec857dc7e58e47e5cf810561fd5777db946d36f2c680427f1921bdca890805e0043b473ad5
-
SSDEEP
12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg5t:AtMCkmOMXJbFSv/JivQsG503
Static task
static1
Behavioral task
behavioral1
Sample
6790683810ee472724ff6b72edaecc4d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6790683810ee472724ff6b72edaecc4d.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$APPDATA/Internat Exp1orer.lnk
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$APPDATA/Internat Exp1orer.lnk
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
$DESKTOP/Internat Exp1orer.lnk
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$DESKTOP/Internat Exp1orer.lnk
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$DESKTOP/ԱմƷ.lnk
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$DESKTOP/ԱմƷ.lnk
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$FAVORITES/Ա.lnk
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$FAVORITES/Ա.lnk
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$SMPROGRAMS/Internat Exp1orer.lnk
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$SMPROGRAMS/Internat Exp1orer.lnk
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
$SMPROGRAMS/Ա.lnk
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
$SMPROGRAMS/Ա.lnk
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
$STARTMENU/Internat Exp1orer.lnk
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
$STARTMENU/Internat Exp1orer.lnk
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
$STARTMENU/Ա.lnk
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
$STARTMENU/Ա.lnk
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
$TEMP/remote.exe
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
$TEMP/remote.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
$TEMP/sobar.exe
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
$TEMP/sobar.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
6790683810ee472724ff6b72edaecc4d
-
Size
597KB
-
MD5
6790683810ee472724ff6b72edaecc4d
-
SHA1
1937cbb3b78651c14a654372b8e3e8bf7b59d16c
-
SHA256
f46aae7a50e9fcc554184e69a191d553b6287aa604f5cd5b2713d19363e318e7
-
SHA512
ecdfe76a90570ca495a3d47b8ce35c56ad74aa9efe6c7ec3214206ec857dc7e58e47e5cf810561fd5777db946d36f2c680427f1921bdca890805e0043b473ad5
-
SSDEEP
12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg5t:AtMCkmOMXJbFSv/JivQsG503
Score3/10 -
-
-
Target
$APPDATA/Internat Exp1orer.qnk
-
Size
1KB
-
MD5
9ffaab5f197ee38cf1fe65e19d4bb217
-
SHA1
39ee57d785cb31b75fe79879ab5dfed14eb1a28e
-
SHA256
6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
-
SHA512
eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
Score3/10 -
-
-
Target
$DESKTOP/Internat Exp1orer.qnk
-
Size
1KB
-
MD5
9ffaab5f197ee38cf1fe65e19d4bb217
-
SHA1
39ee57d785cb31b75fe79879ab5dfed14eb1a28e
-
SHA256
6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
-
SHA512
eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
Score3/10 -
-
-
Target
$DESKTOP/ԱմƷ.qnk
-
Size
1KB
-
MD5
3801cf5240ef322de5fb53224f763068
-
SHA1
e4286f9b6e5986b6a237bc70fdc03e8a36287e11
-
SHA256
23dde6d591dc39c8b7901a49ce2edbe1591ef2b68d69700a4c81fd741f2d714e
-
SHA512
3d26058c20050e236cb78533485dc2dd02ed6be0ab7037e8eac5916b75abe189d38f57ed45899787cbe69318ec4d6763633d1a8a96600fd0b20b83aaa9f03ef4
Score3/10 -
-
-
Target
$FAVORITES/Ա.lnk
-
Size
1KB
-
MD5
62d588bdb74e4e2e5d1689fa9272ce39
-
SHA1
9d0db515d8f65e57353381d707060f7343a74da7
-
SHA256
248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
-
SHA512
cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
107737e3282fefd85684f2fa3df6d1c3
-
SHA1
3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f
-
SHA256
21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0
-
SHA512
439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4
-
SSDEEP
192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
0ae9c427fe7bbbbf1368c1c6d3933ae7
-
SHA1
c8e5131613302531c88512dada29a18886259268
-
SHA256
49437f4b9fd38007f3b2735f0a8a12830b995305c75118b440202980183d5c6a
-
SHA512
59b76b00f2b0d6242dc5bc3cb36d3ff78867445f502e34cea890c6f493c2adf9b97cec539963204ddd1c641e1a77139f46fc33dec4dc636f4b06d2edffffec6d
-
SSDEEP
96:vCCshwlpqUsYghN/9uvZ7CLWNCSiiVTQYBGVXRvuBDlSriklbuba1iLc+cEyzo7e:BzqUuh/uLCXIkYBGV9uVlSblbubbwtl
Score3/10 -
-
-
Target
$SMPROGRAMS/Internat Exp1orer.qnk
-
Size
1KB
-
MD5
9ffaab5f197ee38cf1fe65e19d4bb217
-
SHA1
39ee57d785cb31b75fe79879ab5dfed14eb1a28e
-
SHA256
6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
-
SHA512
eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
Score3/10 -
-
-
Target
$SMPROGRAMS/Ա.lnk
-
Size
1KB
-
MD5
62d588bdb74e4e2e5d1689fa9272ce39
-
SHA1
9d0db515d8f65e57353381d707060f7343a74da7
-
SHA256
248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
-
SHA512
cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
Score3/10 -
-
-
Target
$STARTMENU/Internat Exp1orer.qnk
-
Size
1KB
-
MD5
9ffaab5f197ee38cf1fe65e19d4bb217
-
SHA1
39ee57d785cb31b75fe79879ab5dfed14eb1a28e
-
SHA256
6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
-
SHA512
eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
Score3/10 -
-
-
Target
$STARTMENU/Ա.lnk
-
Size
1KB
-
MD5
62d588bdb74e4e2e5d1689fa9272ce39
-
SHA1
9d0db515d8f65e57353381d707060f7343a74da7
-
SHA256
248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
-
SHA512
cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
Score3/10 -
-
-
Target
$TEMP/remote.exe
-
Size
67KB
-
MD5
71c0a16bad347349ea62d30b76bcc326
-
SHA1
841087fc28fb4812e0c2898ec8ac9049d3bcf593
-
SHA256
235d9e96c68a262c1d6093fa499c8ffc14f41cca8c79dc289bdb27d70b7411d3
-
SHA512
7d4ddb4e70d49cc1c221abf68b71f579200adefb1d79fdfd414494b32f11a004aafb3715e8131e382c61277a99abbc374ec7448f176d235bd2da581d71610fc5
-
SSDEEP
1536:Mppv5CNE2E/n/fn8lvOvNOH4KJJ6CR4Romu/BsKO+sqCZnAucg8s:Mppv5CNEhf8FH4KJJ6045y5CZ9Is
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
107737e3282fefd85684f2fa3df6d1c3
-
SHA1
3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f
-
SHA256
21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0
-
SHA512
439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4
-
SSDEEP
192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
01776e92060ac00338d0367e49518384
-
SHA1
928f7d41e59a1f9fefadeea6226c5a223ebcd699
-
SHA256
f144d17060052ce6205fdf717a647f6b4e20c268fea14e81efc26356d00bbaab
-
SHA512
2da8cb9c0cb7ff983b137d321f48f5ecf24600c1b52570691ed527531cdb61c98f8b2cf0c53446cb4e7f98d571f8e2591a3f3570ac9722abbac25648866d9881
-
SSDEEP
192:SpM3f5sTMzoU7Fs0+/tcDm0tzailQvzwTaoxs+/rH6hqCeHtpflVp6kn2VgsTwp:SpM3xcMzRF4/Gv+H+D6hqbgk2rTwp
Score3/10 -
-
-
Target
$TEMP/sobar.exe
-
Size
468KB
-
MD5
cfdf042273956dd8d102605d46c1d027
-
SHA1
033906dff759c2fdae95258765154103ddf6ebae
-
SHA256
d99b6bc977d6582ea46791bdff2460e8ec933f2ef1591b0fc8161fa1e2c129e5
-
SHA512
0178eb0144c5fe77fd71fa277941b8744577a8a55f36b933a1649c9be4efd0c0cc27b621c22c6a45a59216d2ab11dd48806262a16b1d0b56763a5f0f7a4342eb
-
SSDEEP
6144:Vqn/RLQoaQOgOk0JYE9ldDbVOC8G3vfFuJAcSpXsaYI6eTb+VLyrgkXoCGdBW4G4:S6oCgAXtDbQCh3vtuuDp8SqV2GjMTtza
Score3/10 -