0c21133a8b332f0462ae88430a615fce1447cc49f8b18fee274baa64b6d0c8cd

Resubmissions

12-02-2024 14:48

240212-r6gsnsgd8v 8

12-02-2024 14:45

240212-r4vxhsaa78 3

Sharing

Copy URL

Twitter E-mail

General

Target

mmc-cracked-win32.zip
Size

13.5MB
Sample

240212-r6gsnsgd8v
MD5

c37658640a9670a47a9146900d72db6a
SHA1

d0820cb3b05ac7ea8ef6d7c88c52d4482a1a2cab
SHA256

0c21133a8b332f0462ae88430a615fce1447cc49f8b18fee274baa64b6d0c8cd
SHA512

7e4820c2d1f4b3124d78015a6011a37d7a6e2095dc2a73116e22619899af81c1428639580625765709ded07c62ac5adb488add9eeece786092ad4fc4f360537b
SSDEEP

393216:Z56hzrARQ3Nv3b/EUi4mlWftABcD4wMToozYE3I:qhARQ9PbjtuM4hpI

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  UltimMC/Qt5Core.dll
- Size
  
  5.1MB
- MD5
  
  db2f4ec716747a5ddecb146cfd124a90
- SHA1
  
  dcc4e2efa1af32ed55c3b1d004eff6eaa2b6a02b
- SHA256
  
  ffed386cbbe2363331632d9f12be8eb00cf654d95b4c2b0d287da57e93813f80
- SHA512
  
  5db0356ff3dc3ef28e6a46dedb212c87ab791a61b8de682d0dbf22dda6630ca795e8aa89d4b8226f876440e47d5584e66dbeda481d8499c9f24f79506cf04005
- SSDEEP
  
  98304:paO5O7s0XerbbAJIaKSA31cCvErDsNYWZSgkvDFIJsv6tWKFdu9CQlld0:BOoZX8O1cBdUSg8DiJsv6tWKFdu9CQZ
Score

3^/10
behavioral1 behavioral2
- Target
  
  UltimMC/Qt5Gui.dll
- Size
  
  5.4MB
- MD5
  
  03e5f50d7848d9cc2d8d00127ea6e706
- SHA1
  
  30a5fd241e9db476f11235d7a7d650ec23ac97e2
- SHA256
  
  047811d5fecb88e19c6e70aeabac7848599142cfe8aba1a01c0d130dd4f72452
- SHA512
  
  d41c80f85cfbe9779cccb3ad3825917044075b126c866aece157c6b85b418382394cb6a58cd5b2ea386659c042fcebe963131fb2d37ee80c684c1c9154eb9e31
- SSDEEP
  
  98304:TKTu1y8DX4YFi3UIK5f77kyB1ophScU22BhrwRD7e+1X+Q86o:TPTFbFdYhd86
Score

3^/10
behavioral3 behavioral4
- Target
  
  UltimMC/Qt5Network.dll
- Size
  
  1.5MB
- MD5
  
  a72dfd36b9b8c51de93f3c7cca5945ce
- SHA1
  
  1bb6dfcb892b74968f5b8ef26e0027842df20fbf
- SHA256
  
  41fafdcea112cb01edadc0b2c14995d4cf05e4b5fd101a6e196baaa614b228e8
- SHA512
  
  5a38b11928f1319dac7b75cfd8304610f75e0464f26bc44810458e14cc79ca9d1396f55c1c6405baf95e176755a50c8076bcf6b30d05e4fc95607f479b9f9dec
- SSDEEP
  
  49152:ZrURZC+3uELYy60bMcDrGBj3IfTt3yLorAnjhm:FK0+3uEUy6YMcDrGBz
Score

3^/10
behavioral5 behavioral6
- Target
  
  UltimMC/Qt5Svg.dll
- Size
  
  349KB
- MD5
  
  96934c8f93716fb4c5ab7433c3fcf660
- SHA1
  
  e411016b245b77813f8ea5ed9dc8dcf9403ac831
- SHA256
  
  adb44de5a537f5fadb9288e3852189f799ba7b95cef847f2198a8864ab6f063b
- SHA512
  
  bcd231289cf4900886a4a5c55c0584073da36d5dd823ebf6a59986932fdb1cf70ead079fcdc7e9cfd4837e6212eb7037a7b5b7b0704e073b06c6fc4f5dbbc97d
- SSDEEP
  
  6144:GCJ8N/2aVIOLZS5Qyk2MIwe8x1TB3JJ+Wd5J/LCW2V:GCJQ2arZS2yAG8x1TRjDL
Score

3^/10
behavioral7 behavioral8
- Target
  
  UltimMC/Qt5Widgets.dll
- Size
  
  6.2MB
- MD5
  
  501d23a2e5e2f8bb1564ac627f674bc0
- SHA1
  
  84934fea79b0e4c39afc325b48a3dbc64e6d98ef
- SHA256
  
  5c16112f7f7454e2e802f4a18e0b9a9a0086b9ae29bae35892d7d32f3fa81c94
- SHA512
  
  9282c422b289309f74c5af8a5b102791057607ea0e35f0bde41a64c4240cae3f1fac921c3271d55fd22e56a9934db6b535c114244a79debcf8185fc4c094163c
- SSDEEP
  
  98304:wNL3373gY4y8fcLwtFc94OLHa2QmqfbTI7N6WidvtjPvAsSo+AyNBVmcBNx2hXL/:a+yG+yFisM46BJqgxUVs3Xcu6
Score

3^/10
behavioral10 behavioral9
- Target
  
  UltimMC/Qt5Xml.dll
- Size
  
  221KB
- MD5
  
  f09bf12746b7821c7ab1e16ce41e9119
- SHA1
  
  f70368238133e02957e465ae1196f064da69680b
- SHA256
  
  dbdd63614097767943c585c09f08d346500683e308861f583b2589618d491d6a
- SHA512
  
  ff3dfbec1efb9dae085da3b38f1f7b3d59c289137bc18c8330a6ae95471eded0569669dbf9eb83ffb3be03803c6eb248f2999b963614c40719bc953138fe85d5
- SSDEEP
  
  3072:nn7BwPZm8TEGjKh+NPmuWFaDA1w1Bn6PJQD+B6TQtiPVSe00FUAuDl3DF+bDXW2b:uPdjKhY+uWFaDA1jeu6TQtiPWuPW2
Score

3^/10
behavioral11 behavioral12
- Target
  
  UltimMC/UltimMC.exe
- Size
  
  8.9MB
- MD5
  
  8b563b934a5121c406d590c858205cd1
- SHA1
  
  713089e35330a9afe46fd19744551994c56458dd
- SHA256
  
  bf64613efe878b1e6c60507e968ff46a46ca4fcab5e1275015de2114d1f882b5
- SHA512
  
  95f5dae04254f2235c9194ae1cb26d6d049c2b6773db7a30e937b7f2fd7d241b4ec7b200a1cb6b10c405ae0a11c180b14cff9011ae1d6e60cdaee3302ea40d86
- SSDEEP
  
  196608:RjNhiOU5FtwXi7F/7Xh2NE/yISdDWPDOyy8D2FBVkVBVioHYV3VV1aVq5gV5mVVC:sOgj7FYgOH7VkVBVioHYV3VV1aVq5gV5
Score

8^/10
- Downloads MZ/PE file
- Executes dropped EXE
behavioral13 behavioral14
- Target
  
  UltimMC/iconengines/qsvgicon.dll
- Size
  
  44KB
- MD5
  
  cbb708acdbcfd89e1de38e2c4aa9192a
- SHA1
  
  c9f658b429391876bbfdf8081b3e90d725bb2307
- SHA256
  
  8cb93b212c02fd6d222e985e629df698227323c43b7f0b71be3649aa8cb3cc2f
- SHA512
  
  2bd5a12c236ef1da3e8e002850595c101255e519b66a3a75e6f3a12bdebdd67b54b47b08028695eb8c571bc257f7241cce6351d3cf4d3fd4ed1176965eb02e0f
- SSDEEP
  
  768:xjf6bXA7t029ZxcVeA69Pz47e8J8J80IHN6n61/KWqYTfbiWS:EM5Oc41WW9ghWxbib
Score

1^/10
behavioral15 behavioral16
- Target
  
  UltimMC/imageformats/qgif.dll
- Size
  
  32KB
- MD5
  
  67598fc68a992f106bfad56b22cac886
- SHA1
  
  9285cea038e0f8f10125ca4b724c264b041f4da6
- SHA256
  
  000bbacc0fa451c61413e50b3ef63d3461da422b3425404d8952a52182121b6d
- SHA512
  
  04af56c60969090c4d09fc27fbb8c1d794ab4b6dc9ba3eadc842edca7f68788f7880ec0e533b63dde284511a456dee10814824795915ff492ca01e64e7b86429
- SSDEEP
  
  384:afrulhh3V/N8pXxdQLwfUOWcE7kX80HBFZuTRpIWvTCCz:yMR8ZE4u7qBEIW2Cz
Score

1^/10
behavioral17 behavioral18
- Target
  
  UltimMC/imageformats/qicns.dll
- Size
  
  45KB
- MD5
  
  3b48f732f811ea6ea4fcc18808a7df1e
- SHA1
  
  f924dbd2a760e8b259582a43a0797bda29b3d06f
- SHA256
  
  5da98ac16c329354b1b709b20fcf797f3fbdb8d3e834054568d2ff68e897851d
- SHA512
  
  a1c1eff1357be31172bc340c339ccd31dde7285db3fcbd5c10989af743a8936596b8252ffea1b52c6be6ea06f11b3845268f76e52289dc28896dd26ebf9d1c30
- SSDEEP
  
  768:naEh/izNdGh+UNit6OT80EyJ4kCsIusIGEWBNdk9:aEhfg/8KJjPmQWBNdk
Score

1^/10
behavioral19 behavioral20
- Target
  
  UltimMC/imageformats/qico.dll
- Size
  
  35KB
- MD5
  
  2c32188d9388b06ec91170e4461913ab
- SHA1
  
  082689789ff54cacf94b0f171c762df512c8a786
- SHA256
  
  63f7f73d9bd956ca55b80ce29d24c0a1da1a126885d45473e5779ca78a709dcb
- SHA512
  
  57286e87e9a013229db863c152d41b7af821b8afa7f84259f58f7089a947ca3771d526aada88212fcbb235209b6b504a489a5c43c4ba0b2a77e1f31e882e9262
- SSDEEP
  
  384:JUev3snLkJqIN1v5dqY3M1lNRa16NQkgcPkRu7xR3xr+i1AxwWTTVqI5SEwZY1:l2XqL0IexWkg0k0dR31fWdqqSEwZY1
Score

1^/10
behavioral21 behavioral22
- Target
  
  UltimMC/imageformats/qjpeg.dll
- Size
  
  246KB
- MD5
  
  c228c1486e203d48d9c7d84d0b631e15
- SHA1
  
  1ccdd75d6cd473d00aa17686ec98f509b1e8e360
- SHA256
  
  a55cb801a07932d263c980b14abdb464acd8150b9258260efdf535634bfe9811
- SHA512
  
  a649078738e69572276a37431c495582f933b04701deded8b5f6dd5b3c6d5b9d338ddb242b71659038d324ca74c2a8f2b229c7beba6f16ddea238f2bcbfae870
- SSDEEP
  
  6144:jutAUtpjvlyaX8XZ99bkBRSMArBPkfB917Wu:jutAavlqJMArBPkf
Score

1^/10
behavioral23 behavioral24
- Target
  
  UltimMC/imageformats/qsvg.dll
- Size
  
  28KB
- MD5
  
  7eb5b428de2fd5ce7f361bbf3d6aada4
- SHA1
  
  318acc5132492347727bde7ed70516150144b140
- SHA256
  
  c818b37d77c84e3a9963a761bae3eefc73cccd3485ee6cb1c085c670041e9c59
- SHA512
  
  681fb8a700aee5f44cf1f328c2fea157a98dab12e287f686d408584b5096ac262cb5cd2b2ff1f3c1b6e55d374ade2236118f41ec9c14fbec7014aae0683c1e5d
- SSDEEP
  
  384:0F2Z2Eg8ESscKYkiluz0RdysDv2IWsTmqK5J5:SqESTnDRbWH1J
Score

1^/10
behavioral25 behavioral26
- Target
  
  UltimMC/imageformats/qwbmp.dll
- Size
  
  26KB
- MD5
  
  8e1eb9386572d0c7e62e0230a67ff987
- SHA1
  
  0c26b03c95cacf4ee63aaff2e52e6d732b0aadbe
- SHA256
  
  e7bdd9c34a62b3b46d8e7d224be3f5f7607a27634a8a6fd4f85549869f2d1145
- SHA512
  
  370b990e8cb3652c87190dabbff8440a1fb58282d860ed25b9fb2aac7c1809df176c8d6a4f685ac843fddf52f08cc07c832382eb6ae55ef5c4f3da74adf7a9f9
- SSDEEP
  
  384:Ntm9jnAo9hvpbVDTs16ZHGg3FEE2IWgTrODw9:ejnAoHQzEWOOD
Score

1^/10
behavioral27 behavioral28
- Target
  
  UltimMC/jars/JavaCheck.jar
- Size
  
  1KB
- MD5
  
  c137ee1d43b03e8e3ad8bd6d00551b7d
- SHA1
  
  eb15abd37ce9ea00e0d6f4d0e132b0de05bd7bf9
- SHA256
  
  a8ecabf907272af28af418ce8b964ed9ffba1363ba63c6cb8f33f707548d27ab
- SHA512
  
  4721136c60e85e81e3613b2efec9fd0f8b56736bb01053f6b439f2e585bd8078d0179bf5f2d652eba096a2d62b45ff4faf1faeb5ff50a24b74b64fe08c3a2cab
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral29 behavioral30
- Target
  
  UltimMC/jars/NewLaunch.jar
- Size
  
  14KB
- MD5
  
  49c0fd30fe0b53b4a86d7ba7a612beef
- SHA1
  
  5fcf6afec24efa6f9e5589cc4fca78ea96157fa1
- SHA256
  
  2884e6eee3cd6d1d48ae9fc51dab161956cbe94e4e57afdda59b45e9494061e4
- SHA512
  
  0f70ba6b2e12ff5ac4e3c34ebcc5ddeb1786aa931fd9db77063faf0790048bf76ac93a4bfae4e0bccda0b2e6d64baa0a151d43da12462d989df38a4cb1f9e1ad
- SSDEEP
  
  384:fCoBnP80u7Gtj2ujbvew+AAIK8GL5XbAQpiQhNocSnvct017bczJ:qAPVAKbmSlKpLFbV0QhNocXFV
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Executes dropped EXE

Modifies file permissions

Modifies file permissions

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32