d706a6436424da221bb5d580378262a4e6545e1fb6fa13bd980a3a315a05d0fa

Sharing

Copy URL

Twitter E-mail

General

Target

mmc-develop-win32.zip
Size

13.5MB
Sample

240212-x9b99abb6s
MD5

14b92942686c857d13ba31cc366863e6
SHA1

77b53f9bc4787794ec764f1edb7ceeff0f6d8271
SHA256

d706a6436424da221bb5d580378262a4e6545e1fb6fa13bd980a3a315a05d0fa
SHA512

cf609ce8b070783640df0a584b7eea4f257f8d2b8d4ec3b2108b467f1305088e65a68a4a8b4677f7df29192b925d7846729ae808ade30071e9bcce1aee2b6b7d
SSDEEP

196608:tiw+7WLqB8114RE3GSyqdpfayHBxLK/nrIwad6cwGEwn8xL3M5+kcJ82Zkgd/mcH:tinAqB811GcJI9aUcKC8dheHy/mqGi9F

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  MultiMC/MultiMC.exe
- Size
  
  8.8MB
- MD5
  
  e226d337a37d26b6d70f9403eb1953bf
- SHA1
  
  5269ef680250ba4ec31e75eef2f8f308c54ce6b0
- SHA256
  
  fd25ebe06d490f8dffc1ac3aeb92bead259f5523ad3d3e1cca94f118f8bb1c43
- SHA512
  
  c0d9e2afb051d3c6976e59c1dc0a748444717b846786475466851a53c08fcc4d02d596ea71e8a7db6e47a471311ce8b28916c5ffee123236afe212229f14a147
- SSDEEP
  
  196608:Uu4p0VAk5KpmitpgNEgnC2UjLGfPCDylSRAZCbvdVsVhV81r3VTVVq9VxI8VCMVj:+p0mbpg8aIbVsVhV81r3VTVVq9VxI8Vz
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2
- Target
  
  MultiMC/Qt5Core.dll
- Size
  
  5.1MB
- MD5
  
  9c31c47941edd8aed4bb51a3be9c6ea2
- SHA1
  
  e83d8c04fec834086a018f8bff01b614ef6e3341
- SHA256
  
  79b83c43af99a9cb72a744ae2262c090227907907e8f2deb937cd4e1f0965e4d
- SHA512
  
  9763960a8118ab558e1a26abef275cddb323449608eb4f8518b82fa67d34ffc1d146f4f6b3e072317d8b0af5e95ca84bcdeca838ec150d4b3ef2e748c0a9d961
- SSDEEP
  
  98304:paO5O7s0XerbbAJIaKSA31cCvErDsNYWZSgkvDFPJsv6tWKFdu9CQlld0:BOoZX8O1cBdUSg8DNJsv6tWKFdu9CQZ
Score

3^/10
behavioral3 behavioral4
- Target
  
  MultiMC/Qt5Gui.dll
- Size
  
  5.4MB
- MD5
  
  03e5f50d7848d9cc2d8d00127ea6e706
- SHA1
  
  30a5fd241e9db476f11235d7a7d650ec23ac97e2
- SHA256
  
  047811d5fecb88e19c6e70aeabac7848599142cfe8aba1a01c0d130dd4f72452
- SHA512
  
  d41c80f85cfbe9779cccb3ad3825917044075b126c866aece157c6b85b418382394cb6a58cd5b2ea386659c042fcebe963131fb2d37ee80c684c1c9154eb9e31
- SSDEEP
  
  98304:TKTu1y8DX4YFi3UIK5f77kyB1ophScU22BhrwRD7e+1X+Q86o:TPTFbFdYhd86
Score

3^/10
behavioral5 behavioral6
- Target
  
  MultiMC/Qt5Network.dll
- Size
  
  1.5MB
- MD5
  
  a72dfd36b9b8c51de93f3c7cca5945ce
- SHA1
  
  1bb6dfcb892b74968f5b8ef26e0027842df20fbf
- SHA256
  
  41fafdcea112cb01edadc0b2c14995d4cf05e4b5fd101a6e196baaa614b228e8
- SHA512
  
  5a38b11928f1319dac7b75cfd8304610f75e0464f26bc44810458e14cc79ca9d1396f55c1c6405baf95e176755a50c8076bcf6b30d05e4fc95607f479b9f9dec
- SSDEEP
  
  49152:ZrURZC+3uELYy60bMcDrGBj3IfTt3yLorAnjhm:FK0+3uEUy6YMcDrGBz
Score

3^/10
behavioral7 behavioral8
- Target
  
  MultiMC/Qt5Svg.dll
- Size
  
  349KB
- MD5
  
  96934c8f93716fb4c5ab7433c3fcf660
- SHA1
  
  e411016b245b77813f8ea5ed9dc8dcf9403ac831
- SHA256
  
  adb44de5a537f5fadb9288e3852189f799ba7b95cef847f2198a8864ab6f063b
- SHA512
  
  bcd231289cf4900886a4a5c55c0584073da36d5dd823ebf6a59986932fdb1cf70ead079fcdc7e9cfd4837e6212eb7037a7b5b7b0704e073b06c6fc4f5dbbc97d
- SSDEEP
  
  6144:GCJ8N/2aVIOLZS5Qyk2MIwe8x1TB3JJ+Wd5J/LCW2V:GCJQ2arZS2yAG8x1TRjDL
Score

3^/10
behavioral10 behavioral9
- Target
  
  MultiMC/Qt5Widgets.dll
- Size
  
  6.2MB
- MD5
  
  501d23a2e5e2f8bb1564ac627f674bc0
- SHA1
  
  84934fea79b0e4c39afc325b48a3dbc64e6d98ef
- SHA256
  
  5c16112f7f7454e2e802f4a18e0b9a9a0086b9ae29bae35892d7d32f3fa81c94
- SHA512
  
  9282c422b289309f74c5af8a5b102791057607ea0e35f0bde41a64c4240cae3f1fac921c3271d55fd22e56a9934db6b535c114244a79debcf8185fc4c094163c
- SSDEEP
  
  98304:wNL3373gY4y8fcLwtFc94OLHa2QmqfbTI7N6WidvtjPvAsSo+AyNBVmcBNx2hXL/:a+yG+yFisM46BJqgxUVs3Xcu6
Score

3^/10
behavioral11 behavioral12
- Target
  
  MultiMC/Qt5Xml.dll
- Size
  
  221KB
- MD5
  
  f09bf12746b7821c7ab1e16ce41e9119
- SHA1
  
  f70368238133e02957e465ae1196f064da69680b
- SHA256
  
  dbdd63614097767943c585c09f08d346500683e308861f583b2589618d491d6a
- SHA512
  
  ff3dfbec1efb9dae085da3b38f1f7b3d59c289137bc18c8330a6ae95471eded0569669dbf9eb83ffb3be03803c6eb248f2999b963614c40719bc953138fe85d5
- SSDEEP
  
  3072:nn7BwPZm8TEGjKh+NPmuWFaDA1w1Bn6PJQD+B6TQtiPVSe00FUAuDl3DF+bDXW2b:uPdjKhY+uWFaDA1jeu6TQtiPWuPW2
Score

3^/10
behavioral13 behavioral14
- Target
  
  MultiMC/iconengines/qsvgicon.dll
- Size
  
  44KB
- MD5
  
  cbb708acdbcfd89e1de38e2c4aa9192a
- SHA1
  
  c9f658b429391876bbfdf8081b3e90d725bb2307
- SHA256
  
  8cb93b212c02fd6d222e985e629df698227323c43b7f0b71be3649aa8cb3cc2f
- SHA512
  
  2bd5a12c236ef1da3e8e002850595c101255e519b66a3a75e6f3a12bdebdd67b54b47b08028695eb8c571bc257f7241cce6351d3cf4d3fd4ed1176965eb02e0f
- SSDEEP
  
  768:xjf6bXA7t029ZxcVeA69Pz47e8J8J80IHN6n61/KWqYTfbiWS:EM5Oc41WW9ghWxbib
Score

1^/10
behavioral15 behavioral16
- Target
  
  MultiMC/imageformats/qgif.dll
- Size
  
  32KB
- MD5
  
  67598fc68a992f106bfad56b22cac886
- SHA1
  
  9285cea038e0f8f10125ca4b724c264b041f4da6
- SHA256
  
  000bbacc0fa451c61413e50b3ef63d3461da422b3425404d8952a52182121b6d
- SHA512
  
  04af56c60969090c4d09fc27fbb8c1d794ab4b6dc9ba3eadc842edca7f68788f7880ec0e533b63dde284511a456dee10814824795915ff492ca01e64e7b86429
- SSDEEP
  
  384:afrulhh3V/N8pXxdQLwfUOWcE7kX80HBFZuTRpIWvTCCz:yMR8ZE4u7qBEIW2Cz
Score

1^/10
behavioral17 behavioral18
- Target
  
  MultiMC/imageformats/qicns.dll
- Size
  
  45KB
- MD5
  
  3b48f732f811ea6ea4fcc18808a7df1e
- SHA1
  
  f924dbd2a760e8b259582a43a0797bda29b3d06f
- SHA256
  
  5da98ac16c329354b1b709b20fcf797f3fbdb8d3e834054568d2ff68e897851d
- SHA512
  
  a1c1eff1357be31172bc340c339ccd31dde7285db3fcbd5c10989af743a8936596b8252ffea1b52c6be6ea06f11b3845268f76e52289dc28896dd26ebf9d1c30
- SSDEEP
  
  768:naEh/izNdGh+UNit6OT80EyJ4kCsIusIGEWBNdk9:aEhfg/8KJjPmQWBNdk
Score

1^/10
behavioral19 behavioral20
- Target
  
  MultiMC/imageformats/qico.dll
- Size
  
  35KB
- MD5
  
  2c32188d9388b06ec91170e4461913ab
- SHA1
  
  082689789ff54cacf94b0f171c762df512c8a786
- SHA256
  
  63f7f73d9bd956ca55b80ce29d24c0a1da1a126885d45473e5779ca78a709dcb
- SHA512
  
  57286e87e9a013229db863c152d41b7af821b8afa7f84259f58f7089a947ca3771d526aada88212fcbb235209b6b504a489a5c43c4ba0b2a77e1f31e882e9262
- SSDEEP
  
  384:JUev3snLkJqIN1v5dqY3M1lNRa16NQkgcPkRu7xR3xr+i1AxwWTTVqI5SEwZY1:l2XqL0IexWkg0k0dR31fWdqqSEwZY1
Score

1^/10
behavioral21 behavioral22
- Target
  
  MultiMC/imageformats/qjpeg.dll
- Size
  
  246KB
- MD5
  
  c228c1486e203d48d9c7d84d0b631e15
- SHA1
  
  1ccdd75d6cd473d00aa17686ec98f509b1e8e360
- SHA256
  
  a55cb801a07932d263c980b14abdb464acd8150b9258260efdf535634bfe9811
- SHA512
  
  a649078738e69572276a37431c495582f933b04701deded8b5f6dd5b3c6d5b9d338ddb242b71659038d324ca74c2a8f2b229c7beba6f16ddea238f2bcbfae870
- SSDEEP
  
  6144:jutAUtpjvlyaX8XZ99bkBRSMArBPkfB917Wu:jutAavlqJMArBPkf
Score

1^/10
behavioral23 behavioral24
- Target
  
  MultiMC/imageformats/qsvg.dll
- Size
  
  28KB
- MD5
  
  7eb5b428de2fd5ce7f361bbf3d6aada4
- SHA1
  
  318acc5132492347727bde7ed70516150144b140
- SHA256
  
  c818b37d77c84e3a9963a761bae3eefc73cccd3485ee6cb1c085c670041e9c59
- SHA512
  
  681fb8a700aee5f44cf1f328c2fea157a98dab12e287f686d408584b5096ac262cb5cd2b2ff1f3c1b6e55d374ade2236118f41ec9c14fbec7014aae0683c1e5d
- SSDEEP
  
  384:0F2Z2Eg8ESscKYkiluz0RdysDv2IWsTmqK5J5:SqESTnDRbWH1J
Score

1^/10
behavioral25 behavioral26
- Target
  
  MultiMC/imageformats/qwbmp.dll
- Size
  
  26KB
- MD5
  
  8e1eb9386572d0c7e62e0230a67ff987
- SHA1
  
  0c26b03c95cacf4ee63aaff2e52e6d732b0aadbe
- SHA256
  
  e7bdd9c34a62b3b46d8e7d224be3f5f7607a27634a8a6fd4f85549869f2d1145
- SHA512
  
  370b990e8cb3652c87190dabbff8440a1fb58282d860ed25b9fb2aac7c1809df176c8d6a4f685ac843fddf52f08cc07c832382eb6ae55ef5c4f3da74adf7a9f9
- SSDEEP
  
  384:Ntm9jnAo9hvpbVDTs16ZHGg3FEE2IWgTrODw9:ejnAoHQzEWOOD
Score

1^/10
behavioral27 behavioral28
- Target
  
  MultiMC/jars/JavaCheck.jar
- Size
  
  1KB
- MD5
  
  d99fb069f27752627d5fb056be46ff79
- SHA1
  
  c3e6a274c031a08588d89f7df8a52b499a88477e
- SHA256
  
  7a760ea37de913e5c15cec0ce2d65e1015867e1af3f4f7d9403a673f233e0cec
- SHA512
  
  89b2a6579b7abf0b80336c90b4f6e1a3419062fb8f3447942ca24bd8c1b8ec7339e02afe13db72f350110b9c41b5c2399e189ab1e6477fe6c51e7eadb9723fee
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral29 behavioral30
- Target
  
  MultiMC/jars/NewLaunch.jar
- Size
  
  14KB
- MD5
  
  9e66cb66bbddf93638979f54390d5089
- SHA1
  
  0717b3e178700ba31f4213658f67344c428011d5
- SHA256
  
  1e5a6349c85dc2cd939a4d7fff9b8c25678b970a1256624551b3344e5996a265
- SHA512
  
  eb5e6da02fa17096f61ebf5509e1f303f589b99c3549de21d86ab3aa2e9fb52ee2addb8d8b5dc494162b537305f74190764455555731d71cbcff06c4de079d64
- SSDEEP
  
  384:UCoBnP8oC7Gtjy2jbvewOAMIKwG75XbAQtiQhNocSnvct017bcan:rAPxkibmWZKN7FbVwQhNocXFQ
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Legitimate hosting services abused for malware hosting/C2

Modifies file permissions

Modifies file permissions

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32