Overview
overview
10Static
static
3LPO_Eco_En...K).exe
windows7-x64
10LPO_Eco_En...K).exe
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Galvanotek...og.dll
windows7-x64
1Galvanotek...og.dll
windows10-2004-x64
1Hackman207...ds.vbs
windows7-x64
1Hackman207...ds.vbs
windows10-2004-x64
1General
- Target LPO_Eco_Environ(ARTWORK).exe
- Size 614KB
- Sample240131-m7fjsaceem
- SHA256 2b29b24f2a311158a4900bddf41fe482c42e46941a42468b4990fd467fde5f72
- MD5 91e8ae0f98abcb16814261421bfe1f6b
- SHA1 36c17d7e22c982d4991749f905f70941c5d36825
- SHA512 6ac7a1b0fdd7a8eaec7a9512a79cf70efb99213f76b1080e9ede42e511ff63c5d75565e0100a50b6f50e7ae36d23c98c09d01ac6be8abb23b0d835948a43aa74
- SSDEEP 12288:MkKnLVq69Hrc82yTPZodHtRWztKK7RG1Jz8Ap2x9c8Q04fz/sGoisDsCVVLwOz3v:AQy6ONsqLN7UHZVrTrC
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
LPO_Eco_Environ(ARTWORK).exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
LPO_Eco_Environ(ARTWORK).exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Galvanoteknikken/vtablog.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Galvanoteknikken/vtablog.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Hackman207/Rumsteringerne118/keywords.vbs
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
Hackman207/Rumsteringerne118/keywords.vbs
Resource
win10v2004-20231222-en
Malware Config
Targets
-
- Target LPO_Eco_Environ(ARTWORK).exe
- Size 614KB
- SHA256 2b29b24f2a311158a4900bddf41fe482c42e46941a42468b4990fd467fde5f72
- MD5 91e8ae0f98abcb16814261421bfe1f6b
- SHA1 36c17d7e22c982d4991749f905f70941c5d36825
- SHA512 6ac7a1b0fdd7a8eaec7a9512a79cf70efb99213f76b1080e9ede42e511ff63c5d75565e0100a50b6f50e7ae36d23c98c09d01ac6be8abb23b0d835948a43aa74
- SSDEEP 12288:MkKnLVq69Hrc82yTPZodHtRWztKK7RG1Jz8Ap2x9c8Q04fz/sGoisDsCVVLwOz3v:AQy6ONsqLN7UHZVrTrC
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
- MD5 17ed1c86bd67e78ade4712be48a7d2bd
- SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
- SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
- SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target Galvanoteknikken/vtablog.dll
- Size 268KB
- SHA256 f21d9de02c67e51bb9f7163f676f2d4710b2befae04fd0751a63cf1278c48a3c
- MD5 35119e61479373ba5d7433f106556e79
- SHA1 096a7d227eb2514d76ec5d10bfd1cf165d4a9177
- SHA512 21318d0924393c8269419df5acc0c07ca2f754fd9d9ad80d393cf7ebec1b16986d123f2775ae210383b7faa106ed84e829c949004a123da844c07f2b46387453
- SSDEEP 3072:s1vaCg+eY9yp71driAAYBnk/+eeaQyJen3n83fucakiD88iryUBw:ovDgZYq/rzfNufuceD5UBw
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Hackman207/Rumsteringerne118/keywords.txt
- Size 1010B
- SHA256 c74e743057bfb38a767f3666df1d16587e2e529a070d1621be0e737366011471
- MD5 4d3c8d141484bbb0b8be03c13894ec9f
- SHA1 1fbb29a4d6a1f48745e6d67bfa110306bc54c6ba
- SHA512 e4b9dd5c3585c24301ac71d7849616d680b25d2b340192c31c3de38a9546564cb30aa1b08bdbcba9e3b87303cd5f3bdb93e37c399bc9d056a68b9bbc7a0a3329
- MD5 SHA1 SHA512
Score1/10