Overview

overview

10

Static

static

10

b36ce30bbf...c2.exe

windows7-x64

3

b36ce30bbf...c2.exe

windows10-2004-x64

3

Bin/3DTools.dll

windows7-x64

1

Bin/3DTools.dll

windows10-2004-x64

1

Bin/AppMod...mm.dll

windows7-x64

1

Bin/AppMod...mm.dll

windows10-2004-x64

1

Bin/AppMod...es.dll

windows7-x64

1

Bin/AppMod...es.dll

windows10-2004-x64

1

Bin/AppMod...ct.dll

windows7-x64

1

Bin/AppMod...ct.dll

windows10-2004-x64

1

Bin/AxInte...ib.dll

windows7-x64

1

Bin/AxInte...ib.dll

windows10-2004-x64

1

Bin/AxInte...ib.dll

windows7-x64

1

Bin/AxInte...ib.dll

windows10-2004-x64

1

Bin/AxInte...ib.dll

windows7-x64

1

Bin/AxInte...ib.dll

windows10-2004-x64

1

Bin/Balloon.dll

windows7-x64

1

Bin/Balloon.dll

windows10-2004-x64

1

Bin/BarChart.dll

windows7-x64

1

Bin/BarChart.dll

windows10-2004-x64

1

Bin/ComboTime.dll

windows7-x64

1

Bin/ComboTime.dll

windows10-2004-x64

1

Bin/Custom...wn.dll

windows7-x64

1

Bin/Custom...wn.dll

windows10-2004-x64

1

Bin/DBReport.dll

windows7-x64

1

Bin/DBReport.dll

windows10-2004-x64

1

Bin/DTCombo.dll

windows7-x64

1

Bin/DTCombo.dll

windows10-2004-x64

1

Bin/DTExport.dll

windows7-x64

1

Bin/DTExport.dll

windows10-2004-x64

1

Bin/DataGr...er.dll

windows7-x64

1

Bin/DataGr...er.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b36ce30bbfb0bd48d0f46b0aae9c98093adcf1a7c0a41939bb7bb5e6a26aa1c2

  • Size

    23.3MB

  • Sample

    240214-cdh3pseb6x

  • MD5

    d3e9c9e07b0fdda94a112dd795666f06

  • SHA1

    2ca3cb02fba5d92860ab15e334c1094e3db784f3

  • SHA256

    b36ce30bbfb0bd48d0f46b0aae9c98093adcf1a7c0a41939bb7bb5e6a26aa1c2

  • SHA512

    1e30a41da95effb5d79671eff639ca65062166bad58e9cc19d52af000ff2e674401de0b0959149b4327c4900144702ca5bdc847375acbdd27b1ee40445b9ff89

  • SSDEEP

    393216:6LdwFOpR2bN4W9ASUrB9qDFuaVC4P+dRGlHZ4gnm+zm1rzCivghQ/gNQosA9F+:6LdwFOpYNV7UrB9qZBVCEiRGlp7qrphF

Score
10/10
blackguardmacro

Malware Config

Targets

    • Target

      b36ce30bbfb0bd48d0f46b0aae9c98093adcf1a7c0a41939bb7bb5e6a26aa1c2

    • Size

      23.3MB

    • MD5

      d3e9c9e07b0fdda94a112dd795666f06

    • SHA1

      2ca3cb02fba5d92860ab15e334c1094e3db784f3

    • SHA256

      b36ce30bbfb0bd48d0f46b0aae9c98093adcf1a7c0a41939bb7bb5e6a26aa1c2

    • SHA512

      1e30a41da95effb5d79671eff639ca65062166bad58e9cc19d52af000ff2e674401de0b0959149b4327c4900144702ca5bdc847375acbdd27b1ee40445b9ff89

    • SSDEEP

      393216:6LdwFOpR2bN4W9ASUrB9qDFuaVC4P+dRGlHZ4gnm+zm1rzCivghQ/gNQosA9F+:6LdwFOpYNV7UrB9qZBVCEiRGlp7qrphF

    Score
    3/10
    behavioral1behavioral2

    • Target

      Bin/3DTools.dll

    • Size

      72KB

    • MD5

      321561b3d9ef6d47cda23e7df765786c

    • SHA1

      dd8b8195dc9f8d1dd6c68121f5affba9920a2bb6

    • SHA256

      2ef826401249df66cc4ae5e4609408123273ba253bf4b321c2913d1f3501439c

    • SHA512

      486c43822376f9a06bd22b5cf39763d2fb4a5cc3deffc1a8ba98a45a43ea9baf371a407d9b796eeb748b5389b03851defcd81a43571a026bc665bdf0d48c1885

    • SSDEEP

      1536:TSxKhmrPG0UcJUH7bnwxs4laf31lXUWKu9au:TVvq24xv8tpKu9au

    Score
    1/10
    behavioral3behavioral4

    • Target

      Bin/AppModule.InterProcessComm.dll

    • Size

      16KB

    • MD5

      0d6e4c7019964a71bd61fd25c45bf641

    • SHA1

      0939e3cecd6e64b7305edf97b86ff48074a141bc

    • SHA256

      aae68c2e03b5ae76a3feea6a4386ed613ce8eb350f578c0a5549c6be8c42a6a2

    • SHA512

      051968bf8b77e1af4322aa3924cd1a9dd94cdb29085da34ef7b138786b136acf52d7ab57d3b3aad08fffee0ca3c46d68eae62acc9d31475241f3c3e06244142e

    • SSDEEP

      96:d9v5H4OpmT/zy3qgFjljcI7xRCypCNDCX:dxaOpwWqgFjd7xRCypCNDCX

    Score
    1/10
    behavioral5behavioral6

    • Target

      Bin/AppModule.NamedPipes.dll

    • Size

      24KB

    • MD5

      7fab39723dfc14beaa18c426f06adc11

    • SHA1

      5018fcb7cfe8328ea07d293df3b64f9539a7faa8

    • SHA256

      ad659c39e758cf56bd94e938a10c54e72dbbe35889ec4cbbb4ff5ade1c881fa4

    • SHA512

      9f984dcba94329750dc202008c0c7ab7b9009d03a6ae31af5a43cb1cd992189a0ba053c1e3e0c4ee78e2afcd2a23595f9f2ef82be6a6869f972dbe0c62f7619a

    • SSDEEP

      192:ktp+u020M0i0kSupZOfws8H5ypJGJyFmhoRxhyere6lqVNHznEpe7jvd2S1VD:ktIfNM0bupIXOEJGJyFmhoAereeqvAi

    Score
    1/10
    behavioral7behavioral8

    • Target

      Bin/AppModule.Struct.dll

    • Size

      16KB

    • MD5

      9c89ef540cb0a1080b526bdc2d898088

    • SHA1

      2d47cef944274933193fdcea57606067ce514c3a

    • SHA256

      3a2666a46067800d654cacac691ef572cf4c2a029d68023d90d121b3926f9761

    • SHA512

      cfc2c1571ee28d3504d8a4426d1029f1c60a041a93507b7478f1468306ddf131dc61176a4d83b6ab772529e3234a18a1958897694a24d35960e6ef4e3ed3f7a2

    • SSDEEP

      48:6U/+zRLMv3XjTn3XBA72JU1If1W7/z6/S4lSDDlSbKG:oq3TTnu1M7ZlmDl

    Score
    1/10
    behavioral10behavioral9

    • Target

      Bin/AxInterop.KERNELLib.dll

    • Size

      36KB

    • MD5

      ed16cb9d8390b3fa88b6fbfe0c304b4e

    • SHA1

      c3301b1dd42e341e30addce053284b6e2982c612

    • SHA256

      4c6bbb726590572e9586e03fea92aec2dabb766aab8154eb421a8e42f1b74e8c

    • SHA512

      07a81d932b7261bb67faaf6c794888b0650e8d53093ef4c89f33f6b945cfc05b05438e84ff4d8e662c45a27b7db29763802147d887136d38f772765dc7665138

    • SSDEEP

      768:Dk7tRhNoj8uI6G6TadURLl3KCB7Xl5zxr6yZTmWX1bbljN9RLpTV:ktuG+jNTt

    Score
    1/10
    behavioral11behavioral12

    • Target

      Bin/AxInterop.KFTALARMLISTLib.dll

    • Size

      14KB

    • MD5

      1a7bc7d03afe04791a307ae7930cb5d9

    • SHA1

      0abf73e1bfb071ed663d536204d2ffb804b80b4d

    • SHA256

      2a2fbd82806a69569cb38e47edd72d1c78d2483e4fb84f1420db334da5b6662f

    • SHA512

      fb107abf19ea4d40e2685f78919ef89e280577047f1af05c371fe30da22984b555651e079647266dea857b6530117719cd3556c2d5645cd3b111106e8607148e

    • SSDEEP

      384:p8Teo9V2pO/p2jVGj/izk2FNkW5pT2YvvZJBwFyofV:STebO4qazk2FNkW5pT2YHZSJ9

    Score
    1/10
    behavioral13behavioral14

    • Target

      Bin/AxInterop.KFTCONFIGWINDOWLib.dll

    • Size

      6KB

    • MD5

      1fc44c59548957569b9721580a380559

    • SHA1

      1e5f5373d6c475913152278e6cdc58a0f45bc46e

    • SHA256

      b06afc86dbf6ccf8c876044478d09e0ed1808d7117ae3ec9e65b71d1007f68e5

    • SHA512

      d7466fe27649d514ff4e648a4a3765b2a8a21338c276c8d36180f80e57e2285d630369b793ebceaf881ba935e40950d8264d0833e4c1790d1451f86df4eb2e21

    • SSDEEP

      96:ZB0GMI3FH49VKZRF//G7oXbrrcgl/fMQNsvqSqZNDa5YuA:ZB0GMI3FGKF/MozcgxN22m

    Score
    1/10
    behavioral15behavioral16

    • Target

      Bin/Balloon.dll

    • Size

      14KB

    • MD5

      2098837a72c34f0c05671d854cd341e4

    • SHA1

      a52cc85896ea7a3d10946fd66ec46fa64b27d5dc

    • SHA256

      362a89dd57b5a37cf733bdf88955e96b7a52241ac098f7498152e1244e7ffc69

    • SHA512

      45f63b078d70141f85e7d36e312fb45c58562c298d055512bf597d38c6abc4376183e4addc6a17b84bdf14b607b1e219c98b2ff0d2b2e95e470386ad0b8724c1

    • SSDEEP

      384:4zKZH1zemFpes6y9LOAeWDLNubz3f4FLuc:rZR1Fky9LOAew8DwFCc

    Score
    1/10
    behavioral17behavioral18

    • Target

      Bin/BarChart.dll

    • Size

      45KB

    • MD5

      a049773b79e614ec5e54befd72e0d67c

    • SHA1

      8daf65ce7161f9c09f8ede610d8774a2fbdf3cf5

    • SHA256

      2cf7fc55b8577e9da7c49e94befb8bb10e83215a978d00b468703263718c5ba0

    • SHA512

      61d8d72f1a3c593acfa464deaadc477ec6d3ba823b8a6caeef12d24a9732d4fa198eeda47242a83927406d948878d6c1e4ab1fa05c906dbf1f801a5a89a392b7

    • SSDEEP

      768:EPvPMIhy6bamgaqG8ZZKiJFsNo5mwj7/LPpmxLSl35iRtIif5tivdze:evPMIy6bVhqT1awkx0i0mOdze

    Score
    1/10
    behavioral19behavioral20

    • Target

      Bin/ComboTime.dll

    • Size

      14KB

    • MD5

      01b3959ac52d8a045df4492b22b60054

    • SHA1

      9ae89441bb1c321da0f3d3bef291b76c6f1b32e0

    • SHA256

      80554c77c287a5774d4df40fb96fe64c43b09a262d98a4c20aae3cdf9f15e748

    • SHA512

      5dba8f423e4cb34fe7d073c832009dbddcd73da54911013e485ea2a7b087c22911aa9baf4d4a429667ece1e9fae1750ae70d1d35bf40296c9cfdef00e1bc34c5

    • SSDEEP

      384:dRAL8XoYVtCGb1ehsLrWFwlN3iEV1cXZ5/RPxkkZEntys:64wEV1cXZny0EntR

    Score
    1/10
    behavioral21behavioral22

    • Target

      Bin/CustomNumericUpDown.dll

    • Size

      5KB

    • MD5

      f2c317935d4ea889513cd5e02d506b0b

    • SHA1

      158c26fe3af7f75a7441c2bde4fd2b52a94a1b87

    • SHA256

      16fda7b5f0eb91c5d988d133ad1386ae77dd7376f6ab80d468c49f1c30b7f647

    • SHA512

      28d8f4ee6a27e6e1b0100a916e5ecb51ec486926120e4271c9836ef8c6387fd1bb225ac1c694b9c8b0bee4c13c8040dd7206c0e01eedd37dc088673b7f6b540c

    • SSDEEP

      96:VAqEDjeze6KXkJ5lphco5Bz+4Nt3B157cg:ziez9JzFNpN5Rf

    Score
    1/10
    behavioral23behavioral24

    • Target

      Bin/DBReport.dll

    • Size

      28KB

    • MD5

      96f30cec1cb3a176424479776fc53f26

    • SHA1

      edbf73eb1a7a48d629bc135b4dfed1b37c80bbed

    • SHA256

      a2e9b55cd972e393f401fdd1f92a99d0f1d14891a50f2736b80425298b8b27c1

    • SHA512

      5cdb5824d1ffdb14fb8c419dde1596c94fc870e5a4a965d484f5534730c0ac6416c3670e847c4cf1aceccf65c760226f2e8c383d2f7fbc9b38907a7c7861ec79

    • SSDEEP

      384:/AbwAinqxM4bufaOG/2oT+8W9jXWkeLbt8zFOmEfONsoIbAL8cbHEIIKcmXRgWRP:awBnyS8ysJ8AmjSoAAL8qN/XMgRBNYy

    Score
    1/10
    behavioral25behavioral26

    • Target

      Bin/DTCombo.dll

    • Size

      32KB

    • MD5

      9285371ae51dabd7080c2ac8c8be45ef

    • SHA1

      95e58d9ac9e0e18c071ea56f0806b4b1d007b2e4

    • SHA256

      cde300e68f1efdad2a1b2e05542286d3ff45f294e890623ce8d20e0346452e65

    • SHA512

      c21bbc3544ea47d417beba2cdccd878a1cf4a7f476791ff1754bb6318ffed2cf8144cd918999e58c7c2e4879c4aefe58c96c0705132813359c9da686f5afc44c

    • SSDEEP

      384:IubItHleIOa5eFljS2QQCoPCoScA1Hg+vbZs509dxl2Pffrw9lBSqeq5HH3t6XmQ:v04rS3dglm9R2RquXTVvfN/h4qtd

    Score
    1/10
    behavioral27behavioral28

    • Target

      Bin/DTExport.dll

    • Size

      70KB

    • MD5

      9d33041f06f7c2d292d0c2c7a49c1621

    • SHA1

      5beabb0b15538425a88a0a4c52cfd87135381fbc

    • SHA256

      47acbb97a0a78fefb0d1e33c9e4e1c46879c5b2738295c25c24533c4b5dd8fc5

    • SHA512

      19001c0fd8665099224975c2bc4c399b459d453a5ffe8d162d2d98eee30b68c460f3aef5c8c69b0c73774e1c33b7357cbbbbe4b5c58220b12f3ca528d709af80

    • SSDEEP

      768:GrctfkV87ciPPd2abw1BYsyAenC4tTO5k82HHISMHrYCHsEwpwqy/J8Jxf7nP:QdiPF1PVCnOnISMLXsbpwq08Jxf7nP

    Score
    1/10
    behavioral29behavioral30

    • Target

      Bin/DataGridViewAutoFilter.dll

    • Size

      41KB

    • MD5

      192b6d2182f7b0aa0e76a04cbfbecf81

    • SHA1

      dff4c31437ad9eb22df7131c511aece3903557bc

    • SHA256

      534c6c6c84ef92cbd13a37c83e0cb70c6ab3433c8804f9082ebb0644584c92a4

    • SHA512

      cae85bdad3e3645a0179807aad8b3168836e58625c63897cb5d0c6dd142ddcfa1d6fa0fe686b4411d83bdc1083e421248656a40909dff8ac1e3d1ceff3fa7d49

    • SSDEEP

      768:72DaoMk+oMkPFCDcsVT8lOTNRq3E2rjlT9CJpgfxEKd:toMk+oMkPID5L2rJ5CJpgfxEW

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks