General

  • Target

    8b1d9cd042c4f17030881d1fadc6cd3c

  • Size

    1.7MB

  • Sample

    240203-ckd3bsedg9

  • MD5

    8b1d9cd042c4f17030881d1fadc6cd3c

  • SHA1

    158ea5baefe6b12d217900871a8ec8774397e045

  • SHA256

    dc9004debeedaf630fc537b2200ce3a742a45af5478cecf2fccdd35ffa15cac5

  • SHA512

    306d9804616d04c9d832a4d1b75aa9c120dc6ad38fedc23c014f54440fec3c715f758f600d279674a043c5847bf8318b50d7fe258b304c978d7c3f470db860d5

  • SSDEEP

    49152:te3T0qUm3ZxLTqW1Xnmg548HORd3qHyQLymsPLr:EPUUTquXmg5482IyaymqLr

Score
3/10

Malware Config

Targets

    • Target

      8b1d9cd042c4f17030881d1fadc6cd3c

    • Size

      1.7MB

    • MD5

      8b1d9cd042c4f17030881d1fadc6cd3c

    • SHA1

      158ea5baefe6b12d217900871a8ec8774397e045

    • SHA256

      dc9004debeedaf630fc537b2200ce3a742a45af5478cecf2fccdd35ffa15cac5

    • SHA512

      306d9804616d04c9d832a4d1b75aa9c120dc6ad38fedc23c014f54440fec3c715f758f600d279674a043c5847bf8318b50d7fe258b304c978d7c3f470db860d5

    • SSDEEP

      49152:te3T0qUm3ZxLTqW1Xnmg548HORd3qHyQLymsPLr:EPUUTquXmg5482IyaymqLr

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    • Target

      $R0

    • Size

      48KB

    • MD5

      4c494d8cf201b203179f72f6326a6b2e

    • SHA1

      86936c53fe8ba36372be69f6cff6aa75bd8bf890

    • SHA256

      0599b016d27e85ceb73f8eebf440ecc04eee03d1eae2bd8cdbaaed80e57f5feb

    • SHA512

      f84d935453c2eb225093582f49a03d70743cc8b849899869b0c4a06a688be857a5fec61dff78503883b3cdb8c25276b007e91a777036a62e38de61c3f8739ceb

    • SSDEEP

      768:6+SrZq6TnZYlo/EkFah0+xt+hJawnjMnuYUw4sC+SirO9:7SrZq6DnzFG2JawjMuYUnsC+SirO9

    Score
    1/10
    • Target

      $TEMP/CloudAssist.exe

    • Size

      48KB

    • MD5

      fe3c977ab753bba0c0d7e0c90aaf2625

    • SHA1

      b9c30d98eeec285703d8dfe004a585fdc86abc5a

    • SHA256

      598256d775d8739432991eb55499ae284393ab393000d4315eaf0db5adb8662d

    • SHA512

      931f735fc7ccea9197d77f5eae7ee1f5fb4563765a8716d76b1c60dd577a39e29b775812a1d8bbafcf9c40b52a96292d9ade3372075d020fdfa76df9251c1ab6

    • SSDEEP

      768:+TrerodUfpj4LdVi49IGmJXelABC+SiBF+n:tt4LdVv9PmglABC+SiBF+n

    Score
    1/10
    • Target

      $TEMP/CloudServer.exe

    • Size

      176KB

    • MD5

      fc139233aae71b902c11e8454a48d1c9

    • SHA1

      2fd6aed4c084d5f53e068200b97184ec0254f7f6

    • SHA256

      75fa2b819c3aa5a518d97d3a0b98eb24a5cf5022645dea8bdbed9a22c0e82856

    • SHA512

      2e8d65ae634cc13c23fca7c671629eab34822acaa62093c13ea6781094fb5e0e7771475bd311ef50a006fa22c0b4e91b912a019cf9e8167465bddc0bdc61f735

    • SSDEEP

      3072:BOj7l7Ch+A6jn1j8pVv1v7inrOk6nAiAd0moymRyJqXVFvyz:YHl7e3Ip61JyD4AiAOmoymRRlFqz

    Score
    1/10
    • Target

      $TEMP/CloudTool-uusee.exe

    • Size

      72KB

    • MD5

      be3d32e39c018cdb3da4aaa9eeb4a437

    • SHA1

      49b7aec458f3033b6f758d192e077e49c56a6143

    • SHA256

      2cc5fea6b910d60e3ec0bfcea88b82efb90c73990489a5095aeb989c9ba9ec4a

    • SHA512

      4f126b26ddb9fbb4dc8ccbd002e9685fbf67615a2abe1a236b6d5ca4930de903393cf2d1c931695661917630c9d724c39cf15394a1aceda6c342de56735bcacd

    • SSDEEP

      1536:zPN2JSk3/ZdTPnCpunxitzwLNhu2YSrQUJC+Siggds:h2Qk3/jDHnsuqRSrQUfZs

    Score
    1/10
    • Target

      7zxr.dll

    • Size

      174KB

    • MD5

      60e5b6e38c5a7225010a0951d0415256

    • SHA1

      8cee8406ddd6bb7f000b55c8a47917235584bc15

    • SHA256

      91f1a159c1370dc59a2a2dd04b12b43acc3c604a77679828c957e8c410b4908b

    • SHA512

      79883b53f8d5f8334bc5d0ad294ecd4a21d1809a8376ccf3465479d0573f29c679cf13b63eaac385708408d55e24e34ca455f81946a10e3b86132c955ec13f87

    • SSDEEP

      3072:KGDS83HETDdNM6TMOHt40qTrGJc5uIruEkLPTjDR7TDTjFCnyUWvcmq5WzVo:KGhHETD3FTMI673Z527TjDRnvjFGyUWs

    Score
    1/10
    • Target

      CloudAssist.exe

    • Size

      48KB

    • MD5

      fe3c977ab753bba0c0d7e0c90aaf2625

    • SHA1

      b9c30d98eeec285703d8dfe004a585fdc86abc5a

    • SHA256

      598256d775d8739432991eb55499ae284393ab393000d4315eaf0db5adb8662d

    • SHA512

      931f735fc7ccea9197d77f5eae7ee1f5fb4563765a8716d76b1c60dd577a39e29b775812a1d8bbafcf9c40b52a96292d9ade3372075d020fdfa76df9251c1ab6

    • SSDEEP

      768:+TrerodUfpj4LdVi49IGmJXelABC+SiBF+n:tt4LdVv9PmglABC+SiBF+n

    Score
    1/10
    • Target

      CloudEBookReader.exe

    • Size

      364KB

    • MD5

      0133a3d0edd09bbb66d231f35a8d0917

    • SHA1

      38390dd49db23d19da4a1ae4c5114b757bfb7532

    • SHA256

      0a6f82fcf02e8571aa6c80f3c6e0125a603bd6aa52f45ffa227a713409a0e7da

    • SHA512

      af9aa5a158937aec03ffd2dbe6b9dd47ae04cf22ca22bb3ee488d96ab1c1983205dce3a45528cc435170aba7c5742a3309d68686dab91e088b774a561e87ef4d

    • SSDEEP

      3072:rCh+jAstQsJEGGX0C3/mlHB/7777JeeeQX1111111t3/12YOxt6wmj7:rvAstQsJhy3+lHx1111111N12YOxUw87

    Score
    3/10
    • Target

      CloudFun.dll

    • Size

      48KB

    • MD5

      b0c680e831041e78f2d2fbcc497e094d

    • SHA1

      d8df5b6a002d4961187fcac3ff85faa7b27a09fe

    • SHA256

      243f6749d733159c7460c9bd1c546703dfb027bc8f9da7794b0c43a0d328f26c

    • SHA512

      038d168c4c634860b86106e393dc4185dfa31e36e1e0bedc04a9ab773d040f3f278eb736e4ca064855a6b5758da15d95116d4d0d00761fc87212d061000ff59a

    • SSDEEP

      768:UyarZq6BnZGlyH72VScFN+Mut+hJawnjnEcUFhC+Si02mc:parZq6d77GL722JawjnEcUFhC+Si02Z

    Score
    1/10
    • Target

      CloudFun2.dll

    • Size

      48KB

    • MD5

      4c494d8cf201b203179f72f6326a6b2e

    • SHA1

      86936c53fe8ba36372be69f6cff6aa75bd8bf890

    • SHA256

      0599b016d27e85ceb73f8eebf440ecc04eee03d1eae2bd8cdbaaed80e57f5feb

    • SHA512

      f84d935453c2eb225093582f49a03d70743cc8b849899869b0c4a06a688be857a5fec61dff78503883b3cdb8c25276b007e91a777036a62e38de61c3f8739ceb

    • SSDEEP

      768:6+SrZq6TnZYlo/EkFah0+xt+hJawnjMnuYUw4sC+SirO9:7SrZq6DnzFG2JawjMuYUnsC+SirO9

    Score
    1/10
    • Target

      CloudServer.exe

    • Size

      176KB

    • MD5

      fc139233aae71b902c11e8454a48d1c9

    • SHA1

      2fd6aed4c084d5f53e068200b97184ec0254f7f6

    • SHA256

      75fa2b819c3aa5a518d97d3a0b98eb24a5cf5022645dea8bdbed9a22c0e82856

    • SHA512

      2e8d65ae634cc13c23fca7c671629eab34822acaa62093c13ea6781094fb5e0e7771475bd311ef50a006fa22c0b4e91b912a019cf9e8167465bddc0bdc61f735

    • SSDEEP

      3072:BOj7l7Ch+A6jn1j8pVv1v7inrOk6nAiAd0moymRyJqXVFvyz:YHl7e3Ip61JyD4AiAOmoymRRlFqz

    Score
    1/10
    • Target

      GdiPlus.dll

    • Size

      515KB

    • MD5

      3133fef84d83f4b1cf0ff257931dff46

    • SHA1

      684331eca818a5d3f60434feac8eb1a2ebb3625f

    • SHA256

      f6e9e45d278250fe9e927140b1398cdb0921dd8061f6a0980302b01fffaa5dd9

    • SHA512

      afc8d47fc6f8a3d97a3059313f83941b29318e9ae26120eeb68040db30ec1381235ef39d7ee92c384063925fd533b586925cf2e202405adc2b70f77571f76eb6

    • SSDEEP

      6144:1cvvml0UWWQK9gK3N6gJqsu66+Yv17LoVxfZ22hPWf9E1GU2KwEdsjGIv6iSc7d2:1gvjZoI517UvgeOf28UW16iSc7dn2

    Score
    1/10
    • Target

      LongRADrv.sys

    • Size

      76KB

    • MD5

      1b2c44717269ff8c50d364dc3a1d90b1

    • SHA1

      121ec03318b111d6b466248e724ec6d96ef74ef1

    • SHA256

      cc936cd4d2bb5873efbb0fcf79ed8a1217b6c7995e495aad04e482836520003f

    • SHA512

      426ec82195c24b5d00ae0a01e7b0e203107dc1a3b4e259de5ff75d2eb0e9ec5661ab04b15070e4f625320d252917fc59908c2aa7864eca1c86c1a2495a52cd0f

    • SSDEEP

      1536:S4zF4jmVsyuoFAM2Krns9TPtmZFWY16E+xV82VmC+SiyON:gj5oFmK+PeJoC2VU1

    Score
    1/10
    • Target

      LongRADrv2K.sys

    • Size

      88KB

    • MD5

      a725beb8730339eab668aaf4b9eb6f3d

    • SHA1

      f8350fba49c9d39fd0f30104b3f27b8ecc177c12

    • SHA256

      7151669323558de79a34a6427d4470b1d47fd38d614114b1007a3d101183a32b

    • SHA512

      aca165474d4c2b77ab84abe761911bf94cb44fcbf5f098eb3761e949bffcdb765b6db86f2e561615b6c28bb4aa0f9459d1e8e45d0efb42ff014e912d705c9867

    • SSDEEP

      1536:vcfZs0xy9tcuOg5pC9JMyEUgTjjIKm9pAdvz7ZOGnKn/hnnbuukyoiyWMC+SiX+r:0y9CuHXC9JMCgTgVfKgtGyoitW8

    Score
    1/10
    • Target

      LongRAShell.exe

    • Size

      48KB

    • MD5

      61af3cd5928c7218639195aef01cea6a

    • SHA1

      a05ccfe619a4a2af9f86032b9c844e2a667136b1

    • SHA256

      2f56c64ddca2fc62aef7823469ebf14004c057196353bcb8555e1e109d4c80ae

    • SHA512

      28a89755150bc203d626e74d8fceeb1dcf8316eff4c8d9475985e9bd45fb2981673ed61acd6ecf9b18682845fa0730eae7fe064232706b6dd8d7e8d9d42beebf

    • SSDEEP

      768:WESTRgXQ940O4lCc+XUQpROCXQIlivC+SiQRj6:WL6XD4lL+XUQpRjlivC+Siwj6

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks