Overview

overview

7

Static

static

3

Sogou_MBox_Setup.exe

windows7-x64

7

Sogou_MBox_Setup.exe

windows10-2004-x64

7

$PLUGINSDI...it.dll

windows7-x64

1

$PLUGINSDI...it.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

1

$PLUGINSDI...LL.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

1

$R0.dll

windows10-2004-x64

1

$R2/NSIS.L...7_.exe

windows7-x64

1

$R2/NSIS.L...7_.exe

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97a6e6fc4f41b78dd90f72e6612507be.bin

  • Size

    3.1MB

  • Sample

    240214-cgv7fafe43

  • MD5

    97a6e6fc4f41b78dd90f72e6612507be

  • SHA1

    71da2c02dea8169cc21625d8e0e6748282072bbd

  • SHA256

    e3bef3c169ed317c459bf9d52958a6ae4d4bf753ba6224ee4878e6bbddca067d

  • SHA512

    b49c7eb0f5ddcd7be339d2f518aaeaa213bea1705275d2c7bb28c7b25733fd6af1c96ca83e4a313524cf671dd5879cbe30d49f0166f425cfb5a73140e6f3ff65

  • SSDEEP

    49152:v10z8bXXT5teqtJOs2PRw/tj5MLZ9T0+jbWpCvffO0tBktIMlaiYD:WOXXttB/dO7g+dfZ4tIeai0

Score
7/10

Malware Config

Targets

    • Target

      Sogou_MBox_Setup.exe

    • Size

      3.2MB

    • MD5

      66b47b6fb73efc77534270ac03793e4e

    • SHA1

      a7e8852e9e30c616fc9fcc98ed883c7c2b699c99

    • SHA256

      a928fea655b4396ababcc8263a363992221123bd879d3d346643f74301aa2192

    • SHA512

      18aaab4a8aa14d318631aeb9868038c5fbfdf43224e72f21da26307a1f9b2b8da8b176ac931858375169901d73675066a1c6b5ce0675f9c7d5a805fd8d398bf1

    • SSDEEP

      49152:ck3yrvXmBNLhIf4L22Jg0qRQH2PakjT2bP3r4t4J3/ObdWzFfwcoP1a8xE9sJ:c+NII+tRQWPakjibP3raWCpU4J

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/DriveInit.dll

    • Size

      52KB

    • MD5

      102ed7d015675bc8dee514618073cc58

    • SHA1

      78d176e22d3ff9d84766f22dc89ea39cb7bd3baf

    • SHA256

      8ca26eef66a66b0b4bff869b80f94e503297a3ad48885f4fb5b8ce3a8cdeab82

    • SHA512

      4da737b3b45e710c5457908e7c8d4b6d068060b9234910fd5e08c99362c8f5dc0592d347614ba2c6b188ce85ab9b4fa185f294ec6eaf5bf9e055cfceefa73a55

    • SSDEEP

      768:drVUQg3QUJw3dklaxjKO/pKjqOcQAgaBv3Xc1LS6SdVem+1h014nEJkHloS:drA3dJ4d0oOcQA3c1LdSPeTnZlL

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      296a5f3179fa8d7a7a855eaf696ede44

    • SHA1

      57aa5b71553ed282dd22c768e039a187f5c13f63

    • SHA256

      ee0ad77e681c4d0fdf1d67df5f4ca03e6bdd8e3b05dfb47a83ad5c733ed62960

    • SHA512

      bc527d1485f468e8d098057e0e38e8cb7aa6eb64d4ca30927b99b1552a3177b132b989015ff95bdf2ca046bf11a54b4b456f51e024fbc734fbb548c3499e53f6

    • SSDEEP

      192:r6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTyK72dwF7dBdcQOz:r6JaVh4I5rpPbTy+BdhO

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      20KB

    • MD5

      e725dd273d5a8cf4386280436fe968ef

    • SHA1

      6487e0c872c175991914378402572b806fcd1c8b

    • SHA256

      22432bb3b215f61665f14ba375c9d2e52b84d748d11ba26427b0ca70e674b415

    • SHA512

      4eb47aefa50255afd0fb54df85670da37548a5502219f21c6067239cdbad0454dd66f05eed2f2d310151b88902f2bd0240cce9e3a1665ab41cb3bb43ba99c2f9

    • SSDEEP

      96:08S8CUNqsthSo5G+FUMlxTFqiwJQAgyUE1fb+4:08S8CU4stV5ozcyI4

    Score
    1/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      86b5a07a43b7cbc5c49263b8d974b736

    • SHA1

      78388286a311810d812c13d87dea12d581713e60

    • SHA256

      5897fb00be38e502fb5dfd047d97e5e4da6387a7a6259633dc31c2427612901b

    • SHA512

      dcbe379c28302bb3472339cd24949b16548fa0003882a920df6839078cc7b2563f058a0524bf25df0a5ec8b08e302ebc9e646033109958669d8af883af959ffe

    • SSDEEP

      192:JO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1a+gMO:cKAFERdlxhGRYUzqZa+

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      13KB

    • MD5

      b0151ae4287a740988b242c5cf715032

    • SHA1

      db33b1f1d7e9c3346f06c360e102a3fe765a0522

    • SHA256

      60314da07d2dfd677408c32c768e0f6cdeee94c42ea8ee2b94ad8fa3789259b5

    • SHA512

      bee28871ee4711759dc3748a622c8cd748045398bb392179e20e53aa32d049fc89c3952d0123885ac46aa6d225bb7b821dc7532160230c5a396e930530139b7b

    • SSDEEP

      192:yWjgr9lWIs6YwW2T8/JbIYu5vEQ1hGkG7OCF2YCinfDdvWjT7bTR38LnURr7k5:pgBlW6YFB07JErXz/tMT7bTRMUA5

    Score
    3/10
    behavioral11behavioral12

    • Target

      $R0

    • Size

      108KB

    • MD5

      4e5ffc7e2d5b7147f9e39b557acc7ca8

    • SHA1

      cfad21d197399fa3c7a31841785f1a0808d1d177

    • SHA256

      071d3ebcfe5f39973684d31a2bf3f2f153fa99766a36a2a0aa42515bac8452f7

    • SHA512

      792854e087f728de54f318e21d77195a7d5e2ebdf3c576b574cc574113105b400d57a29fec2f14d63dbed1b7bbd20d9bc07a076716770e01befa3fa3e815d783

    • SSDEEP

      1536:3AgX9OSlN6dm7pEPX1EogO+TBPcfdaflWXyq:TX9saqaox9daflWXyq

    Score
    1/10
    behavioral13behavioral14

    • Target

      $R2/NSIS.Library.RegTool.v2.$_7_.exe

    • Size

      5KB

    • MD5

      badf3039dd10083868207e018827d84a

    • SHA1

      8249e004a6b8410b8571df9645178998dac3868b

    • SHA256

      f89fd1db4ccc5a63b65e48b951198deff46f3b4b3895873db2dfeb8abd1094c2

    • SHA512

      329658883428d7a226e35172c0bf27d733e79f0cb854be1072fc53b0bfb2d3b618b64a06bf77a5ad1cc651a341a91a0c61acc33d1d876806d299f538e6f6ddca

    • SSDEEP

      96:9Fw199EdjXxf7FsS7bVs2ddqB4DDZH/6:k19CZfsS7bVbddqaHZH/

    Score
    1/10
    behavioral15behavioral16

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks