Overview

overview

7

Static

static

3

979cb8cd4d...0c.exe

windows7-x64

7

979cb8cd4d...0c.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

xls2htm-cmd.bat

windows7-x64

1

xls2htm-cmd.bat

windows10-2004-x64

1

xls2htm.chm

windows7-x64

1

xls2htm.chm

windows10-2004-x64

1

xls2htm.exe

windows7-x64

1

xls2htm.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    979cb8cd4d2266a8169bc0c97650550c

  • Size

    539KB

  • Sample

    240212-z1jn3scb8v

  • MD5

    979cb8cd4d2266a8169bc0c97650550c

  • SHA1

    73fcd79be3b458679e419af47198360e8469ddcf

  • SHA256

    427a1720b7f9a7f46a6d7cb579b020c3ee2795ef3ce6aca2fa901ccdbecc1cd8

  • SHA512

    21bf23c3c440d19bda1a924c9bb9781ac287031c0ad11c2f760556c1abdd9db090124b16c4cf07b0c2eac91d89827f136be8a8fa693cffdd09e455d0d7cf75e8

  • SSDEEP

    12288:/gN/LenZ3YpuEhiQgX/wxc81VgP425/MsOHnfADXMr:/gJeZIpY78m4kCnfuU

Score
7/10

Malware Config

Targets

    • Target

      979cb8cd4d2266a8169bc0c97650550c

    • Size

      539KB

    • MD5

      979cb8cd4d2266a8169bc0c97650550c

    • SHA1

      73fcd79be3b458679e419af47198360e8469ddcf

    • SHA256

      427a1720b7f9a7f46a6d7cb579b020c3ee2795ef3ce6aca2fa901ccdbecc1cd8

    • SHA512

      21bf23c3c440d19bda1a924c9bb9781ac287031c0ad11c2f760556c1abdd9db090124b16c4cf07b0c2eac91d89827f136be8a8fa693cffdd09e455d0d7cf75e8

    • SSDEEP

      12288:/gN/LenZ3YpuEhiQgX/wxc81VgP425/MsOHnfADXMr:/gJeZIpY78m4kCnfuU

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    behavioral3behavioral4

    • Target

      uninstall.exe

    • Size

      58KB

    • MD5

      0a74120c1e1defe08c3ff485b5c9e78d

    • SHA1

      d42971e23a00c31d532089aef75a10b5b1c5408b

    • SHA256

      218ce0a7c45fd14fd7a32bc98307a1486e1281b10fce40cf834aa7f979390584

    • SHA512

      201790b4b0b616f5068e2cf03b974da8684964c1ce6ff88b9715ca0c1737be1cd4e20585a0c9d4dd53dbb3a70b145b2120db96d80bbf0825213a1490c48e1485

    • SSDEEP

      1536:oQpQ5EP0ijnRTXJ5gdLeAyN/WDOWMJ3hrG36:oQIURTXJ5ceAVKzrS6

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral5behavioral6

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    behavioral7behavioral8

    • Target

      xls2htm-cmd.bat

    • Size

      420B

    • MD5

      5a53402cdbccb2d305036882c1a691de

    • SHA1

      b2c18a9ffb7d359701f976576e39b5ce344fb8fd

    • SHA256

      369867213b3e6a243fcb7f852092b75d349c6ed97918357ddd4c9b8f0ef228d9

    • SHA512

      fa8d8b6a97bc6709479de2b568cc316a099e42be72045b704780af85c7d313c42064dd8df37ceb9d854952eaa8da6264d845d55cb45b81e556f8bf58258bc7db

    Score
    1/10
    behavioral10behavioral9

    • Target

      xls2htm.chm

    • Size

      132KB

    • MD5

      f1453eb06eb000122ffc27b72a197181

    • SHA1

      632366e02a4f19609d6865fa6e5d497da7afca5a

    • SHA256

      e211445346039084b7a5594b47061273fbca8ba46da6baa9b95cf4ccd5e4507b

    • SHA512

      09d94b2a0367eda00d64d318a4d67f68441673db3f8dbd4a7dc4f7c92daf6f571c6faf501fd407f7611ce64a8beb22ca106a80e173802c11083e5115f2b587b9

    • SSDEEP

      3072:+r3wp6bnu+1X0EcHsCyJAm1Nh7R4urHMXbbSeNDr7kET5kBv:+Ep6r2hHobjhTsX6EQv

    Score
    1/10
    behavioral11behavioral12

    • Target

      xls2htm.exe

    • Size

      889KB

    • MD5

      895498887edbac986a988244d7cdce15

    • SHA1

      e4172aafb559ffdb4aa61ae78fb3ce58d0685ca8

    • SHA256

      99051b0ca8bcdb00600a449f09e3e4fa6284b604020107fb32e00bf27f0f3e16

    • SHA512

      371739e6b59df646cd058b9aef3bf6f70891eb3c59187228555a36922bcbbb2c1a8dc9b94c47d54779701baa8c39970eeabf9609f69ea949ad2d2870a237ca0e

    • SSDEEP

      24576:k639exAj9PfNuxKH/LzPdp8klIvnJLS/57JE:Twkz8po/5

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks