General

  • Target

    IDA-Pro-7.7-main.zip

  • Size

    508.4MB

  • Sample

    240203-1gy54adbaj

  • MD5

    b14cb079991d90077424f1dda62ae56d

  • SHA1

    bcba6ec13dbc0418954e88437dd21cead65a94ab

  • SHA256

    a815471df3a9d9700c63fecc246ae7f024288dbf7231937fb53a860064265479

  • SHA512

    5d1431b6b57c74f469aadd263ec1fb080becdfd7fcfce1a3d7de4c29fee29b3d5ead34ea68ed3eb450722453b704718b3ecada8d74856e80393d59b18fc699f3

  • SSDEEP

    12582912:wWgy8UmlgcTZxPU0kk81ePsQOC+a14q3vlFRzuBiOd2XrAzXxg/t:wWgPucTrU/kfsQZ+P4tL0iOA7Az8

Malware Config

Targets

    • Target

      IDA-Pro-7.7-main/python38/_asyncio.pyd

    • Size

      63KB

    • MD5

      0400b1958d0f7aa0d2ad409ea12ffec7

    • SHA1

      ce1a5c61192ffe489a53f029ac0a95d4abb3d2b9

    • SHA256

      6e25aa5931f175b971dfd05aab7a24cef29edd8f4b524341c414d0577c07a200

    • SHA512

      8790f3f9c69823d55350ea63a1b8ebb3dad64942b6e6752109d2932b3bb848a5101e2a9a4645e93a476a8c4e5c8b27e15eb39b33fcc772a876b0e8ab9fd5eefa

    • SSDEEP

      768:YVtJbo/5NQQQ2cA27ZKky1qSwr2ysMqBOf/nLeuK1P/dIIYn8sKDG4yMhb:YFborVdW7s1qx737K1P/dIIYndOyQ

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_bz2.pyd

    • Size

      85KB

    • MD5

      a49c5f406456b79254eb65d015b81088

    • SHA1

      cfc2a2a89c63df52947af3610e4d9b8999399c91

    • SHA256

      ce4ef8ed1e72c1d3a6082d500a17a009eb6e8ed15022bf3b68a22291858feced

    • SHA512

      bbafeff8c101c7425dc9b8789117fe4c5e516d217181d3574d9d81b8fec4b0bd34f1e1fe6e406ae95584dc671f788cd7b05c8d700baf59fbf21de9c902edf7ae

    • SSDEEP

      1536:eKpLuz7t0fjOUSKdvOKJbdV/qj1M9D8WAPpP3JuFIIMVRy7:VizTTmbJJV/qj1M6WAPpP3JuFIIMVI

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_ctypes.pyd

    • Size

      124KB

    • MD5

      291a0a9b63bae00a4222a6df71a22023

    • SHA1

      7a6a2aad634ec30e8edb2d2d8d0895c708d84551

    • SHA256

      820e840759eed12e19f3c485fd819b065b49d9dc704ae3599a63077416d63324

    • SHA512

      d43ef6fc2595936b17b0a689a00be04968f11d7c28945af4c3a74589bd05f415bf4cb3b4e22ac496490daff533755999a69d5962ccffd12e09c16130ed57fd09

    • SSDEEP

      3072:psrzScwzPzuoUxXVxQXKIAqoFQufLTA/1mj9AItH5IIBPmQl:a//wWX8XKIABfLTcmXlyk

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_decimal.pyd

    • Size

      262KB

    • MD5

      a2b554d61e6cf63c6e5bbafb20ae3359

    • SHA1

      26e043efdaaa52e9034602cebeb564d4f9714a7f

    • SHA256

      30eea56a4d1dd78f9d65fcb6168ab189cfa8098c38aad47ee770756a056749ca

    • SHA512

      5ea99fa23e7657e9f01dc155741d5f93945a2e6c90f1494873aa7c35a8da0001815b31b387b239ef7de1695b8f416028166dd94db259d246d8dc10a37e20da97

    • SSDEEP

      6144:OLYg4UlD9GwglHVbM+J3OFBwsgW8w9NoL+Tv9qWMa3pLW1AHGZJXOSRQOGONHPj1:O3lD9GwUVZowsgWP/oL+dAZBR1vjYM

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_elementtree.pyd

    • Size

      175KB

    • MD5

      8216378d8e15d65dbfcb7ba68bbd923a

    • SHA1

      91e3a9a89c236d7018854f7f163bc291a46397c2

    • SHA256

      00d68d3879ab410601e7e8fb2348d4995cec2ee78b3a07ea59520d35f9953bb4

    • SHA512

      2610324ae9510b68745c5500e7a99366e5eaa0a935a43eb951dd78789772ded6cfe9581b6108540a5cac9f848173c9375ee6fd91e40cb6a982114905f7cfd578

    • SSDEEP

      3072:RYsocTfzwonX/c4J2nK7pz4Km+lT/9IO00FOlekUhkt6D98m+8o190vn1IIkfTG:RYgTLLvhYnK7pz40bIOpMPC+um90vn3

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_hashlib.pyd

    • Size

      46KB

    • MD5

      5e5af52f42eaf007e3ac73fd2211f048

    • SHA1

      1a981e66ab5b03f4a74a6bac6227cd45df78010b

    • SHA256

      a30cf1a40e0b09610e34be187f1396ac5a44dcfb27bc7ff9b450d1318b694c1b

    • SHA512

      bc37625005c3dad1129b158a2f1e91628d5c973961e0efd61513bb6c7b97d77922809afca8039d08c11903734450bc098c6e7b63655ff1e9881323e5cfd739fd

    • SSDEEP

      768:E0mbG0HUxzB7992zIyYsw3jYXjV4h6HgevWASdIIYIASDG4ybhMD:Tma00xVMn08x4EBvAdIIYIA2ymD

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_lzma.pyd

    • Size

      159KB

    • MD5

      cf9fd17b1706f3044a8f74f6d398d5f1

    • SHA1

      c5cd0debbde042445b9722a676ff36a0ac3959ad

    • SHA256

      9209ccc60115727b192bf7771551040ca6fdd50f9bf8c3d2eacbfd424e8245e4

    • SHA512

      5fe922c00c6f7fd3cd9bc56fc51de1f44adffbdb0afc0583f1bb08008be628b9ac16f8560b0c3ba16138e1cdcaf1c525ef24241bed804804cdeb5961aed6385a

    • SSDEEP

      3072:LIVa3V86CLON9lUm+/3i4p9qZqznfY9mNovvFOhYIlLvyFIID15x:LIVa3V81LwlC//q+gYOvPIBvy7

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_msi.pyd

    • Size

      39KB

    • MD5

      db20799923c444311ff09eb3b8b0f5a0

    • SHA1

      494aa7f512b1803668d54edc2e7ed39d331fdf81

    • SHA256

      52f3adf011b2e6da14e0ae5d13637d35f98951d0c0077d3b4a70ed514dc68b6b

    • SHA512

      648c30a173d9d9e1cfced74c777d9116aeab4d0f25d5d8f6a9fd0fc0b7c4c430822bac17ab8a505ec55978e653cab9efc63fe4ab9fde40f7ad71415704245aee

    • SSDEEP

      768:b2uXan3nSr/5LsAzGqKVW4q6CwxoUAIZdeoLuMl6QUtmFIIMGhDG4yMfh3:PKijZVKVW4q6Cu6QLFIIMGjyM9

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_multiprocessing.pyd

    • Size

      29KB

    • MD5

      5cadb7186df07ca4ca5a8654cb00c9f1

    • SHA1

      513b9160a849a3d7d510f59ffa5e201809d0161b

    • SHA256

      54c28dcf2f2a72fc854f49c76fb021bbf2b53675fe5b5ed021c61efe9467197b

    • SHA512

      f853c618ca243b5da04e53079d3e6a0c6a9e4e358bb5020196b49638f28bf4171a487db7ce0e5e2c46df6a643c04434f967f1c614086121d1edddcf891f5a409

    • SSDEEP

      768:JyJ9dDNuElddhJDueNIIAtWSDG4yBvWLhq:Jg3bJDueNIIAtW2yNB

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_overlapped.pyd

    • Size

      45KB

    • MD5

      7d5bb2a3e4fbceaddfeef929a21e610c

    • SHA1

      942b69e716ee522ef01bde792434c638e3d5497a

    • SHA256

      5f92c163b9fe6abb0f8b106a972f6a86f84271b2e32c67f95737387c85719837

    • SHA512

      8c44f1683fdea0d8121ff2fe36f2582313980ef20ee1985af7ff36acb022acbb7617e85d2dd3b8e75715444dc0cfc4487c81b43d0222bd832aac867875afbe30

    • SSDEEP

      768:4ALlM4CwMgcpx3F3O6FNnZoYWEpNQ0vnIzRIIttyFDG4ycD7hQ:4CM4a3F3hrJQ0vnIzRIIttyPyr

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_queue.pyd

    • Size

      28KB

    • MD5

      dd146e2fa08302496b15118bf47703cf

    • SHA1

      d06813e2fcb30cbb00bb3893f30c2661686cf4b7

    • SHA256

      67e4e888559ea2c62ff267b58d7a7e95c2ec361703b5aa232aa8b2a1f96a2051

    • SHA512

      5b93a782c9562370fc5b3f289ca422b4d1a1c532e81bd6c95a0063f2e3889ecf828003e42b674439fc7cd0fa72f64ad607bab6910abe9d959a4fb9fb08df263c

    • SSDEEP

      768:UbErqQu06rhuOUrRm4MH5IImUVDG4yaC97hP:wuqXhuOC84a5IImUfydL

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_sqlite3.pyd

    • Size

      87KB

    • MD5

      434ac2f2f82d15d9a3cb57b0145e1254

    • SHA1

      35327a6ac08d8954f10b1f70c0fbc3077c768504

    • SHA256

      9ae23d679a929d47b252ce14c9b2763a2913bbf17b0f52a8fd4b47aba0def0a2

    • SHA512

      e515253cbc5f7c8d2bfde5047feadfa413f637918be31053d85c89fe74aadee5f815e7a17f97ab66eceaf73170c0bf13a26f4e1a1d94b149774d4c0603a553d5

    • SSDEEP

      1536:nMwgTN2unyJTU+UB3/jilNGo8ne9k4ko8o4lE8bBYCcyE8adIIYQxCy6IR:MbzyBURelNke9k4ko89EaBLcyBadIIYI

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/_ssl.pyd

    • Size

      152KB

    • MD5

      d4dfd8c2894670e9f8d6302c09997300

    • SHA1

      c3a6cc8d8079a06a4cac8950e0baba2b43fb1f8e

    • SHA256

      0a721fc230eca278a69a2006e13dfa00e698274281378d4df35227e1f68ea3e0

    • SHA512

      1422bf45d233e2e3f77dce30ba0123625f2a511f73dfdf42ee093b1755963d9abc371935111c28f0d2c02308c5e82867de2546d871c35e657da32a7182026048

    • SSDEEP

      3072:PBgil+Nig7FXVxb/8lwiaibUixhk980VUuOazbAOXLkdWXxZIIkjVD6XFIIM7y:PBgi8iWXVxbI/Xhk9gazbRqo3

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/get-pip.py

    • Size

      2.5MB

    • MD5

      6dec6b1d2f89ca7c85c0fbdf869209c5

    • SHA1

      2f806a6f48e329b06c49df8ee40ff6e441ae8f44

    • SHA256

      7c5239cea323cadae36083079a5ee6b2b3d56f25762a0c060d2867b89e5e06c5

    • SHA512

      2264335ef2fcd5ca1bfb03c367624ea7313238928087c55076736ba9ac7a4bd69bbd912575692681f4923f0ddc7dfd717e90f769b7b5acc9b9ed659cb763f7b2

    • SSDEEP

      49152:2JDPIAH1H0iDOi0Fqr41Fh/OtAZUc+0Uqcy4MvpN:kDv1H0iyi0I4Ph/OWendMf

    Score
    1/10
    • Target

      IDA-Pro-7.7-main/python38/libcrypto-1_1.dll

    • Size

      3.2MB

    • MD5

      89511df61678befa2f62f5025c8c8448

    • SHA1

      df3961f833b4964f70fcf1c002d9fd7309f53ef8

    • SHA256

      296426e7ce11bc3d1cfa9f2aeb42f60c974da4af3b3efbeb0ba40e92e5299fdf

    • SHA512

      9af069ea13551a4672fdd4635d3242e017837b76ab2815788148dd4c44b4cf3a650d43ac79cd2122e1e51e01fb5164e71ff81a829395bdb8e50bb50a33f0a668

    • SSDEEP

      98304:ZX+SicVMcqx5q6ypQ821CPwDv3uFfJwwzS:1FicVMcqx5q6yX21CPwDv3uFfJwwz

    Score
    1/10

MITRE ATT&CK Matrix

Tasks

static1

pdfevasionupxlinkindustroyer
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10