244c693922da65a044f6226a3f05ba26d8055eb210b3f43e64925dc80f3d6a17

Sharing

Copy URL Twitter E-mail

General

Target
7341e923d37930deb38419980bc4d3b2
Size 779KB
Sample240125-arnh8scdgp
SHA256 244c693922da65a044f6226a3f05ba26d8055eb210b3f43e64925dc80f3d6a17
MD5 7341e923d37930deb38419980bc4d3b2
SHA1 130b7c917d72d0ee83e81397cd60ad5684d6175d
SHA512 220a41d08151d1a3b102bbcd1d16c8db313a87a6d6bec80e4f8de5ccba0f4691917d2178dc42523455e5abbe9555fa93aee647ec92c4dc838e93c43d0d86dcda
SSDEEP 12288:gwMDD47E2/bDlvNXK6si6xhMiprWebxTAij1rlAUN4Cvt0RUli/F2mu:gtg7E2NvJAv/dqIxLjAUVl0RUlGYm
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  7341e923d37930deb38419980bc4d3b2
- Size 779KB
- SHA256 244c693922da65a044f6226a3f05ba26d8055eb210b3f43e64925dc80f3d6a17
- MD5 7341e923d37930deb38419980bc4d3b2
- SHA1 130b7c917d72d0ee83e81397cd60ad5684d6175d
- SHA512 220a41d08151d1a3b102bbcd1d16c8db313a87a6d6bec80e4f8de5ccba0f4691917d2178dc42523455e5abbe9555fa93aee647ec92c4dc838e93c43d0d86dcda
- SSDEEP 12288:gwMDD47E2/bDlvNXK6si6xhMiprWebxTAij1rlAUN4Cvt0RUli/F2mu:gtg7E2NvJAv/dqIxLjAUVl0RUlGYm
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- MD5 SHA1 SHA512
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 5552bdde7e4113393f683ef501e4cc84dccc071bdc51391ea7fa3e7c1d49e4e8
- MD5 c498ae64b4971132bba676873978de1e
- SHA1 92e4009cd776b6c8616d8bffade7668ef3cb3c27
- SHA512 8e5ca35493f749a39ceae6796d2658ba10f7d8d9ceca45bb4365b338fabd1dfa9b9f92e33f50c91b0273e66adfbce4b98b09c15fd2473f8b214ed797462333d7
- SSDEEP 384:EVJOXQZkjhm+Np3aWgzxljzbbEUhU7ya4LtU0Ac9khYLMkIX0+GBty3S:EeXQcm+NpqWgzxljzfEUhUua4LtG
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/pwgen.dll
- Size 16KB
- SHA256 82ae08fced4a1f9a7df123634da5f4cb12af4593a006bef421a54739a2cbd44e
- MD5 a555472395178ac8c733d90928e05017
- SHA1 f44b192d66473f01a6540aaec4b6c9ac4c611d35
- SHA512 e6d87b030c45c655d93b2e76d7437ad900df5da2475dd2e6e28b6c872040491e80f540b00b6091d16bc8410bd58a1e82c62ee1b17193ef8500a153d4474bb80a
- SSDEEP 96:Rb32p/4mp563gfdaDf2GEFd69qI214YgU+dXXDtFCOdd7KPcC+pyTY62l2z252NJ:YCQAED61dpEEN5VifUbw2mDG0
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $_2_/DownloadManager.exe
- Size 1.3MB
- SHA256 33ab2810cab812621f8e8bf1d30e49a41570af00693db2bfabff69c6d242bd01
- MD5 31199b186530877b8a853119ceaf39ac
- SHA1 fdb4db880edb74e718c913d477316330f1341b9b
- SHA512 7d5bb60198e03fc1c136a64a1721792805effd66aea593ea64a74b63e3cfa101a96508676abf64a3aa0a53b8e134f7a9da8e80c0def3eac3f5c745acd80b2a02
- SSDEEP 24576:N6f5P/g1xtwthdLc+eqi4c+nEHphwxo1ZAFi:k5UEXFe41Yixo7
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10
- Drops desktop.ini file(s)
behavioral11 behavioral12

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Drops desktop.ini file(s)

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12