Overview

overview

7

Static

static

3

7341e923d3...b2.exe

windows7-x64

7

7341e923d3...b2.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDIR/pwgen.dll

windows7-x64

3

$PLUGINSDIR/pwgen.dll

windows10-2004-x64

3

$_2_/Downl...er.exe

windows7-x64

1

$_2_/Downl...er.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7341e923d37930deb38419980bc4d3b2

  • Size

    779KB

  • Sample

    240125-arnh8scdgp

  • MD5

    7341e923d37930deb38419980bc4d3b2

  • SHA1

    130b7c917d72d0ee83e81397cd60ad5684d6175d

  • SHA256

    244c693922da65a044f6226a3f05ba26d8055eb210b3f43e64925dc80f3d6a17

  • SHA512

    220a41d08151d1a3b102bbcd1d16c8db313a87a6d6bec80e4f8de5ccba0f4691917d2178dc42523455e5abbe9555fa93aee647ec92c4dc838e93c43d0d86dcda

  • SSDEEP

    12288:gwMDD47E2/bDlvNXK6si6xhMiprWebxTAij1rlAUN4Cvt0RUli/F2mu:gtg7E2NvJAv/dqIxLjAUVl0RUlGYm

Score
7/10

Malware Config

Targets

    • Target

      7341e923d37930deb38419980bc4d3b2

    • Size

      779KB

    • MD5

      7341e923d37930deb38419980bc4d3b2

    • SHA1

      130b7c917d72d0ee83e81397cd60ad5684d6175d

    • SHA256

      244c693922da65a044f6226a3f05ba26d8055eb210b3f43e64925dc80f3d6a17

    • SHA512

      220a41d08151d1a3b102bbcd1d16c8db313a87a6d6bec80e4f8de5ccba0f4691917d2178dc42523455e5abbe9555fa93aee647ec92c4dc838e93c43d0d86dcda

    • SSDEEP

      12288:gwMDD47E2/bDlvNXK6si6xhMiprWebxTAij1rlAUN4Cvt0RUli/F2mu:gtg7E2NvJAv/dqIxLjAUVl0RUlGYm

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      7579ade7ae1747a31960a228ce02e666

    • SHA1

      8ec8571a296737e819dcf86353a43fcf8ec63351

    • SHA256

      564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5

    • SHA512

      a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      c498ae64b4971132bba676873978de1e

    • SHA1

      92e4009cd776b6c8616d8bffade7668ef3cb3c27

    • SHA256

      5552bdde7e4113393f683ef501e4cc84dccc071bdc51391ea7fa3e7c1d49e4e8

    • SHA512

      8e5ca35493f749a39ceae6796d2658ba10f7d8d9ceca45bb4365b338fabd1dfa9b9f92e33f50c91b0273e66adfbce4b98b09c15fd2473f8b214ed797462333d7

    • SSDEEP

      384:EVJOXQZkjhm+Np3aWgzxljzbbEUhU7ya4LtU0Ac9khYLMkIX0+GBty3S:EeXQcm+NpqWgzxljzfEUhUua4LtG

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/pwgen.dll

    • Size

      16KB

    • MD5

      a555472395178ac8c733d90928e05017

    • SHA1

      f44b192d66473f01a6540aaec4b6c9ac4c611d35

    • SHA256

      82ae08fced4a1f9a7df123634da5f4cb12af4593a006bef421a54739a2cbd44e

    • SHA512

      e6d87b030c45c655d93b2e76d7437ad900df5da2475dd2e6e28b6c872040491e80f540b00b6091d16bc8410bd58a1e82c62ee1b17193ef8500a153d4474bb80a

    • SSDEEP

      96:Rb32p/4mp563gfdaDf2GEFd69qI214YgU+dXXDtFCOdd7KPcC+pyTY62l2z252NJ:YCQAED61dpEEN5VifUbw2mDG0

    Score
    3/10
    behavioral10behavioral9

    • Target

      $_2_/DownloadManager.exe

    • Size

      1.3MB

    • MD5

      31199b186530877b8a853119ceaf39ac

    • SHA1

      fdb4db880edb74e718c913d477316330f1341b9b

    • SHA256

      33ab2810cab812621f8e8bf1d30e49a41570af00693db2bfabff69c6d242bd01

    • SHA512

      7d5bb60198e03fc1c136a64a1721792805effd66aea593ea64a74b63e3cfa101a96508676abf64a3aa0a53b8e134f7a9da8e80c0def3eac3f5c745acd80b2a02

    • SSDEEP

      24576:N6f5P/g1xtwthdLc+eqi4c+nEHphwxo1ZAFi:k5UEXFe41Yixo7

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks