04fafb4515532c6a91a0d0955b54c8fcf2e6ddd043f14545749fc6d50f799645

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe
Size 13.1MB
Sample240126-v65raacdcp
SHA256 04fafb4515532c6a91a0d0955b54c8fcf2e6ddd043f14545749fc6d50f799645
MD5 514220922afdc657e37e9ac8932bc913
SHA1 1809b5941752b0ba9ea05c92a5e2683738821572
SHA512 f2ec938eceee26ceb8723aabdeef7a6346bce0603fb616e157bf0a45b5894b30aed6d1dd7a2d88c9b031a9b75cfde3bc097c5477ed1b5a53ae06c8f592cec839
SSDEEP 196608:fiESuPjAgt5RXZmbsx64Ady6HqeyjLs6a4JdMpItG1XX7NHKYL:6s8g5pR46njLsb4dG1XrTL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  SecuriteInfo.com.Win32.MalOb-IJ.15224.8341.exe
- Size 13.1MB
- SHA256 04fafb4515532c6a91a0d0955b54c8fcf2e6ddd043f14545749fc6d50f799645
- MD5 514220922afdc657e37e9ac8932bc913
- SHA1 1809b5941752b0ba9ea05c92a5e2683738821572
- SHA512 f2ec938eceee26ceb8723aabdeef7a6346bce0603fb616e157bf0a45b5894b30aed6d1dd7a2d88c9b031a9b75cfde3bc097c5477ed1b5a53ae06c8f592cec839
- SSDEEP 196608:fiESuPjAgt5RXZmbsx64Ady6HqeyjLs6a4JdMpItG1XX7NHKYL:6s8g5pR46njLsb4dG1XrTL
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 32KB
- SHA256 e8139011bb64955e4f848d382748ca1ce3cd53d03dae026c4214e591883b0cd9
- MD5 525daa8242978c3eb44f452a090b2de9
- SHA1 dc73c393f4290c6a9d0b14c9fd8f19e26a3da056
- SHA512 1be1ace4464a89d478fdf744f3df69387dd978c916de8866635673f7d15934a5bf709a8a0b707af7282e02841c16f0f1f7d7f78174a7c9a274f2ab7cff481b5c
- SSDEEP 384:yMngq4KteJM6jwzkh0eoWWXryzSIc/UCQX08tk6tztN4YkvZMC3bHSDyx14hn+g+:yAg/Km049+Mnt3NfgvVXmhppFlPq
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 12KB
- SHA256 2c01582ea3bf5ae550cbbc25ea6ee2a8208cfc865f8f26c474643b4aceaf2bc8
- MD5 bcb5f04e5f618c8c64d2545d226afaf8
- SHA1 995ddb6900bdde7648d2c5658cca858cc43c9633
- SHA512 fbe26f3d199e531587dcff675555e12cbddcd791b76c8040cc255db3e6d06dab72e66e92731da5e06dfeb38c7546e8355dea8514e8e400b237c78f8670634872
- SSDEEP 192:f1BTusyjbI05hbvNuw8Ykv/RjqE+llUb93/:pyA0DJuw8Ykvth+ll03/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 30KB
- SHA256 2b70f7ccb2f4ce28b6791dcdb7460686a9867291cd1584fa25b96b350ef8a980
- MD5 7dcb58b5e14be0fff8bfe685e7aedc98
- SHA1 b119c5b2bf0b17b9f4f82bf9e85f0d915870cf48
- SHA512 23ac5736df173fe03c570c78733bf4a098d65315104745673579ed19283eefd8a28310e97cc02dcb0b09d9c5f8bfa4f31c56583a6fb1b9ce9683958382f35c5e
- SSDEEP 384:vhZNwyxUtoDp3VZQmR9nvalm+NKnvYkvWA2KiBm4ZDjJblVze/IGCi:vhZNmSDplZVRE0+2vHwBm4dViAG
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 7KB
- SHA256 dffc672e031942dee96f211f17f408292d1d2cd539280f809f1629359385ae7d
- MD5 e445d242ae948a65957dac52833d3709
- SHA1 4a7f2777eadc9c062ee5adbb3fea44bef4b47372
- SHA512 e438ac672235a8604026d658e67971b333774ac3c4a0658e7352acd6027de7be5ecdb9774fb0f50ea371cbf908d1fc9ad6f6c43e74b7d80803e030e48d8c65b5
- SSDEEP 96:k4oHQOyTsHeXgpVGuRkNB/RX7JFazrvqeR66:jge/Ykv/RrDafqe
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  Uninstall.exe
- Size 202KB
- SHA256 05ad00c80ce19ab03a052b3e55e974401feb9a85eba28916cf6e2820ec5ea06c
- MD5 df2fc452addc2271726911e6c546b531
- SHA1 e37a90ed45d035d2262dae1576ede914c2cf4de5
- SHA512 60c6f0e29364d4979a997609feef3a1f246c5bbbd5b27005f63e4104f521ab2c581e92d5edad3db57e86c93fc97aea819b7c5e11b39588e4ebf9370e516d7fe7
- SSDEEP 3072:GGyR+pqQE0NixFBcT9i4df+5UN3nCrceApIkudFisWcAZCAM2nICCEbcC:hvYFBkhQ2CrmpwdFCZCAHnITE9
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral11 behavioral12
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 7KB
- SHA256 dffc672e031942dee96f211f17f408292d1d2cd539280f809f1629359385ae7d
- MD5 e445d242ae948a65957dac52833d3709
- SHA1 4a7f2777eadc9c062ee5adbb3fea44bef4b47372
- SHA512 e438ac672235a8604026d658e67971b333774ac3c4a0658e7352acd6027de7be5ecdb9774fb0f50ea371cbf908d1fc9ad6f6c43e74b7d80803e030e48d8c65b5
- SSDEEP 96:k4oHQOyTsHeXgpVGuRkNB/RX7JFazrvqeR66:jge/Ykv/RrDafqe
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  app/app.pl
- Size 2KB
- SHA256 a256a2db29d67e5cd210d91854f502bd0e56ec07dd6013b805af1db3ee461e13
- MD5 1a9e077d682e8197fa6d24351136a077
- SHA1 fee11eef760e758f68855a087ce03ce49008d65b
- SHA512 545ec689a65e222ef3cb15f5dea19663c6e2a791414e8525631721eabf1a7ded578e702d3434aa769278b714636212fc6ef033b270bcb57269eacda4c86e0287
- MD5 SHA1 SHA512
Score

3^/10
behavioral15 behavioral16
- Target
  app/latex2html.pl
- Size 2KB
- SHA256 b54ce2bbae0954f6082db44fa6a902326169ee6294c08a15759fd99973b1c29f
- MD5 9b2b6df82945fcd2d9aeed0eef7dc65c
- SHA1 ef7c27d08de0c1fa30212f1e28575b115da4403a
- SHA512 d7e341f1fa80a9ad6b93b1f90177644cf685141d96afdfe040d4b020816cbcf13dd34940ca48c1e95b7e26abea5a957edcb96519b5c838c3c59c3903145063b7
- MD5 SHA1 SHA512
Score

3^/10
behavioral17 behavioral18
- Target
  app/mqi.pl
- Size 1KB
- SHA256 6f58adeef6965e9d758b2b3e0b75d75ed20836dd3dcbe5ddaba7beedd845f47a
- MD5 2b66b6ead917fb71d2e19e0faa858608
- SHA1 a273db0ae4daf4a95ef4c6d4832bb3c8e76a34ed
- SHA512 bbdaa52a70a0533e49b0feee39cd0a8d78765b5137d9159f4f97bedd81a596818e2780bccbced51be7d0331a26b3c4d4390e198c676282047ff0a8e980d0421b
- MD5 SHA1 SHA512
Score

3^/10
behavioral19 behavioral20
- Target
  app/pack.pl
- Size 9KB
- SHA256 0393f58f0f53bdbe075f60d0f5a7f64481eb426b5633d1a161360d55fbc24d5d
- MD5 a4ea8264d10c0b06bb2bd38d8ba714e9
- SHA1 bf1811caf87d2a3fe308e44e06c635e48ae4d4b9
- SHA512 880207d0f11fb327573b288330dd87f5015bd24278f1fe7c4e569463e1db787cc34ff4e0260ad6beb4d6b1dc191ae486a0284262a2b6bf75b4ee7b8b221444af
- SSDEEP 192:PorsSrsVd3LUoHv5IUwBp/hzR0M0WjK2DxQFvzAGZPj:ArsSrsVFLbHv5INnfDxQFvzp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  app/qlf.pl
- Size 12KB
- SHA256 32bd8e10040dc7b7726cbde3bb4d746b28272e86e2b6218513fd57fdbddbd89e
- MD5 ce04bb38237fe16f84e7a280f1c09d75
- SHA1 7f11e14151dde04505b9ed5e3057b7e73ca87af4
- SHA512 4c9e786dc848b3897054920c2666d0410c226d25617be62225692e75019a32f9a2fe054feff519c2f067c77a562e8ecba933d5ac3110b1859dce09e73e9d57c7
- SSDEEP 384:ArsSrsVFLony9kwepHqnxxHxwXGlF3rv2qeMSeOVBmvi3X6gbmD:AzCLzK2ryWv3rv2KzviH6gqD
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral23 behavioral24
- Target
  bin/archive4pl.dll
- Size 30KB
- SHA256 c307467b4c977a0c25885a769553ed148a8c55978d647248f453cef33605cded
- MD5 bea547bc60ce4e94dcee741d82c370b7
- SHA1 ba76bd0317800811fd01c01f8d4dadd7e97e0d80
- SHA512 57080aaea45c2bbce29e726e443322220befbf637b0c4c4dcdff1e438da3040854f131b2271e0393130af3446215e27941acdfd6567d281c007fe43c392429ce
- SSDEEP 384:1R1472cLZlr8x0oLtHC2ZWkJWt7C9gac43ZT6WcXkfGnMhlIsinXNX0NXdr4WIqN:1EnZlr8y0CCTOW+kXhlIsGcKb
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  bin/bdb4pl.dll
- Size 31KB
- SHA256 ce69ff5307359a5ae76497c881152d7724a823a7a0d6c88765fe37d60df6915c
- MD5 77b9530a8e5bdf5f13bcc9db6979246e
- SHA1 57186f2a7de1b8f434419cef0480dfc27d744d42
- SHA512 4968bb2d31eaafd11e22069346d3d6aa8bb4f62020d51275a26968f943b6ca27881b3d32bc7295fe212067b1319de7adbb69b3321c849560739fb1da953ed70d
- SSDEEP 384:NMMV8KMGjDpng+aW8SqUXUN0rKlhlCc36LjO7Ekf2PL1zymFHMZrssYnvb:N9ZMgDpl8Smlb36+gkax5HM+
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  bin/cgi.dll
- Size 45KB
- SHA256 06a30c70ac87a8cbd9184a06c133d6568400a992ccdeece3955f29872b4c8288
- MD5 f83b63737305cfb2d03e337d96747927
- SHA1 006b88c4ea83b61262cb307bec902300ce08f9c2
- SHA512 6ce3539eccf2af742f36dc1cb0b2af4c1ad1ae46782f2461ed44a45b5dd7af93942f8377083bf2fbb61b7e318c0ae8d4860d1a48b5fbcb2b9f149078b0da35dd
- SSDEEP 768:j+hN5s9MqkluXdMNmluGm8GntwR4r5evtmwnWdnQYuLDu:vMqkgXdjgGmfntW4r5evVHu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  bin/crypt.dll
- Size 26KB
- SHA256 d56cb56bcfa50b84e145d021f36045351d00cdd4869819f1cabe70a17e1378b4
- MD5 151ce5647adbf39b1cae1e900ade71cc
- SHA1 0b6547862f6153bc023068f5f835106f85236740
- SHA512 c5878ca71dfae986fe31ac82df37b70b4abf536d0708fecb13896e4117224747e89abb809289bd8d5ae37a2eefabb93f2d3079edff28a26cfadfaecd2c06fe17
- SSDEEP 384:lIvR9+QV6bDzTFJ81TOfTc1EARdJJwRrWZkfePMQ7U22rzgR:lcxcDzmjEOGrGkZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32