9868e15ce5dee4ac08bbb900151fae026a036f5f80c9b6bc5f8746b64002aec5

Resubmissions

14/02/2024, 10:18

240214-mcaeaafg4y 7

14/02/2024, 10:16

240214-masg3sgg75 7

Sharing

Copy URL Twitter E-mail

General

Target

BaiduEditor(Offline)_6_5_5_2.exe
Size

22.0MB
Sample

240214-masg3sgg75
MD5

55c30515dc8d564651d7d35fcd9ff97d
SHA1

02eafdb262eb7b43e9997c6f9924c2f4ff4f1285
SHA256

9868e15ce5dee4ac08bbb900151fae026a036f5f80c9b6bc5f8746b64002aec5
SHA512

c432bbb95b0392c934bf035b6a7a7a5efd465ac79909a3ccea6999275840d5dc6060e297c6425aac3f36b867fdb3e506f5205808516675d3b6da6269d6ee4a64
SSDEEP

393216:3GTzJ8ZZxCywDCgXjsB6Uyk8GpF+ANND9aBqvEIlyhz/w9+MpJCL1WdFmW5cMFSz:EKZsugzsEUySD+AT89Y8xm1FuS451ADk

Score

7^/10

upx

Malware Config

Targets

- Target
  
  BaiduEditor(Offline)_6_5_5_2.exe
- Size
  
  22.0MB
- MD5
  
  55c30515dc8d564651d7d35fcd9ff97d
- SHA1
  
  02eafdb262eb7b43e9997c6f9924c2f4ff4f1285
- SHA256
  
  9868e15ce5dee4ac08bbb900151fae026a036f5f80c9b6bc5f8746b64002aec5
- SHA512
  
  c432bbb95b0392c934bf035b6a7a7a5efd465ac79909a3ccea6999275840d5dc6060e297c6425aac3f36b867fdb3e506f5205808516675d3b6da6269d6ee4a64
- SSDEEP
  
  393216:3GTzJ8ZZxCywDCgXjsB6Uyk8GpF+ANND9aBqvEIlyhz/w9+MpJCL1WdFmW5cMFSz:EKZsugzsEUySD+AT89Y8xm1FuS451ADk
Score

4^/10
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/AccessControl.dll
- Size
  
  8KB
- MD5
  
  9f1a88b953fd2a2c23b09703b253186c
- SHA1
  
  29d5a5a24e7f782a07e9f5d2ec1d1a6218fec737
- SHA256
  
  8a8f5bafc105186c85f14e017ab6da33ae8f88a9635e51756f90b6d95381d80d
- SHA512
  
  10b3a812c92b7324bddcd23adf923fcaec2532f31bdd9fbf17494fc33f99aa0a0a48b94f1fdd6599fa0189567626a90b324a1d132bf9cb8b00a6afc547e64018
- SSDEEP
  
  192:RmcLe8uWVNz5ZalBK/7rUlYg5q5LcywvX5:RJdNzMKXUlYg5qPq5
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/CLR.dll
- Size
  
  93KB
- MD5
  
  732691c7a1ef4e7decb9d8c52010a709
- SHA1
  
  ecbf0bbcb051433d570e212e73a883f8e5f19996
- SHA256
  
  5f3573a00f3333d7587044f59b72511263103525d2cdfe79475c6726735d0812
- SHA512
  
  fcbde499f9592ae25b757e805892f43ffe50c475bc54ea3e992bc2db647e42d661c3dad2c4056da89fe4a62365f5b57df24d1083382ebdbd146bfb83d48d167a
- SSDEEP
  
  1536:XJgC8K1IbncO54uknhaaA7qbFG8iY2h+7OiYtlmctUudvmpfD65OgOj:XJf8K1ITc3A7qbFG8iY2h+7OiYtlmctu
Score

4^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/IpConfig.dll
- Size
  
  114KB
- MD5
  
  a3ed6f7ea493b9644125d494fbf9a1e6
- SHA1
  
  ebeee67fb0b5b3302c69f47c5e7fca62e1a809d8
- SHA256
  
  ec0f85f8a9d6b77081ba0103f967ef6705b547bf27bcd866d77ac909d21a1e08
- SHA512
  
  7099e1bc78ba5727661aa49f75523126563a5ebccdff10cabf868ce5335821118384825f037fbf1408c416c0212aa702a5974bc54d1b63c9d0bcade140f9aae1
- SSDEEP
  
  1536:CPDzpyvLtmY7SeAmhPzV8+i7kRuACUxHf91MionF9JTwrLPG5zfO+lP7:UZl1e7L4ARzC3dwrLPG5zG+lP7
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/LangDLL.dll
- Size
  
  5KB
- MD5
  
  f3a5b5ee30a039a4c136f7718b768c54
- SHA1
  
  8030564028871328a67fd7184c6f6476fa5d3cab
- SHA256
  
  2a5d0cf98084a3e9cd6d0007fcdd39810164ec82e74c513d51ab51bd85866b1a
- SHA512
  
  861635ba6e139516cb9316723bdf8b5022178f660b2234bd48212a1992391f727d33bf8f6c88976b5c78979916b879d2d614b99205ee41cc33c5046f17558b01
- SSDEEP
  
  48:q9PmFK19eP3PBHWxJWL44A3kFQsy80WTCdHJmLHRMXb5jE6E9ivnuB:MHqBHWJWL4uF5CWTCdHJgCnu
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/UserInfo.dll
- Size
  
  4KB
- MD5
  
  7579ade7ae1747a31960a228ce02e666
- SHA1
  
  8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA256
  
  564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- SHA512
  
  a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/inetc.dll
- Size
  
  20KB
- MD5
  
  4c01fdfd2b57b32046b3b3635a4f4df8
- SHA1
  
  e0af8e418cbe2b2783b5de93279a3b5dcb73490e
- SHA256
  
  b98e21645910f82b328f30c644b86c112969b42697e797671647b09eb40ad014
- SHA512
  
  cbd354536e2a970d31ba69024208673b1dc56603ad604ff17c5840b4371958fc22bafd90040ae3fb19ae9c248b2cfce08d0bc73cc93481f02c73b86dbc0697b2
- SSDEEP
  
  384:rJBJ8VnX8K+uKn2WQJdxbs3aEUhU7ya4L60Ac9khYLMkIX0+GwNyEAG:3J8+K+uK2WQJdxbsqEUhUua4L6AG
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/ip.dll
- Size
  
  16KB
- MD5
  
  4df6320e8281512932a6e86c98de2c17
- SHA1
  
  ae6336192d27874f9cd16cd581f1c091850cf494
- SHA256
  
  7744a495ceacf8584d4f6786699e94a09935a94929d4861142726562af53faa4
- SHA512
  
  7c468de59614f506a2ce8445ef00267625e5a8e483913cdd18636cea543be0ca241891e75979a55bb67eecc11a7ac0649b48b55a10e9a01362a0250839462d3b
- SSDEEP
  
  384:BT4+VFqw6WBEyzsyHTsOrohCXgmXBEeGc:vVFqwfBEyAy4OPKe
Score

3^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  c10e04dd4ad4277d5adc951bb331c777
- SHA1
  
  b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA256
  
  e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- SHA512
  
  853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP
  
  96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score

3^/10
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/nsProcess.dll
- Size
  
  4KB
- MD5
  
  faa7f034b38e729a983965c04cc70fc1
- SHA1
  
  df8bda55b498976ea47d25d8a77539b049dab55e
- SHA256
  
  579a034ff5ab9b732a318b1636c2902840f604e8e664f5b93c07a99253b3c9cf
- SHA512
  
  7868f9b437fcf829ad993ff57995f58836ad578458994361c72ae1bf1dfb74022f9f9e948b48afd3361ed3426c4f85b4bb0d595e38ee278fee5c4425c4491dbf
- SSDEEP
  
  48:iYXzAm8HGJLvwM8GJFd6I7W4JtT2bxNNAa4GsNf+CJ8aYqmtlKdgAtgma1QvtCSJ:lz2mJkpGR6GY74GQ1YqmstgGCtR
Score

3^/10
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/nsisXML.dll
- Size
  
  12KB
- MD5
  
  9f3d5344e7ede1f41f99d8fc37fd01ad
- SHA1
  
  d0322ce3ba30a924daa1c9e322846a3d8ccda878
- SHA256
  
  77aa1a74a556f00f16baf9b94637fa997bd4085695ba81bf496223644e43e815
- SHA512
  
  2849b261b77fa2abf0d0efc7604ccce7f502d20a556eea9877cfe1cbc6d515d8fe41986943081629243b81987cddd54613ee01fc7859ae16eab57f6ca2cd4bfc
- SSDEEP
  
  192:EWauH4FuPphUmX1VGsGN2kmQNJnm1ilWnE:EWasoMphljGs4NJoil2
Score

3^/10
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/nsislog.dll
- Size
  
  42KB
- MD5
  
  e47100b70748fc790ffe6299cdf7ef2d
- SHA1
  
  ad2a9cd5f7c39121926b7c131816e7ba85aeead2
- SHA256
  
  271d539fe130276189e0a32b8a0bc9f08f2d92f7e17f85d88726735f14ea6144
- SHA512
  
  88452a9aeff453e7979df9240ab396cbc0c5d00efecda97df1e46f2ba1e9b5bfd990921e85d503beb4b35a1de7681390ba124eeeaf896f250717892ced133e93
- SSDEEP
  
  768:wCpqFQLwm2VQRIsW6z66P9dmnKyAPKoaQtt34Zt4DtV4U0Kx8xkS:XpqFQiVUfDzXmmb6mJVN0KWxN
Score

3^/10
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/time.dll
- Size
  
  10KB
- MD5
  
  38977533750fe69979b2c2ac801f96e6
- SHA1
  
  74643c30cda909e649722ed0c7f267903558e92a
- SHA256
  
  b4a95a455e53372c59f91bc1b5fb9e5c8e4a10a506fa04aaf7be27048b30ae35
- SHA512
  
  e17069395ad4a17e24f7cd3c532670d40244bd5ae3887c82e3b2e4a68c250cd55e2d8b329d6ff0e2d758955ab7470534e6307779e49fe331c1fd2242ea73fd53
- SSDEEP
  
  192:oNcwTweFbs9t2n2Sgiga65/aHdaGZavaJIYX4Hw2:oNcwBFg22SEw47CPU
Score

3^/10
behavioral27 behavioral28
- Target
  
  7za.exe
- Size
  
  598KB
- MD5
  
  9996bcd361a6451532cdc7f66b81a6bc
- SHA1
  
  c1c788e56bab007872a229accc6123febba2a81f
- SHA256
  
  df36901ca3a0352bf94ea4d5ddf05b69398efa1c29b9d6b34424ba21a2027c0e
- SHA512
  
  204700daffcd5b9adcb318486d6a16360c7447a7baa8a4e0f8011b744dde1b42557a636ef537ec5fd313f63eb7515e2a79729674472a2c7f23348a83b9a4bc5b
- SSDEEP
  
  12288:cyyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRIS:cKvyNhXCV4E8BXAfrnkcAqU0Az
Score

1^/10
behavioral29 behavioral30
- Target
  
  BaiduEditor.Application.dll
- Size
  
  44KB
- MD5
  
  86bd5824eaa4c3c80a3629be98fc3d32
- SHA1
  
  2ab5716ee2db00feefa53c4ddec6de45372e5c19
- SHA256
  
  9bb25ea3456be03972b65997a51abb3292c1b62c913d695aa9663bc64d6616dd
- SHA512
  
  7ef41eba27a9b880b82160faebe756e46eb13e16d3f9fab25e8076a5d96d74ded1cb5c09fd637f486ec8934ff647e8d62afdd88021d79d038fb34afea8c22777
- SSDEEP
  
  768:LVepsrdF1eTF+K5XK7tyXBOOOysSoQuqTVOZECJ92TVOZ/XMEFiRq:pasrdnC+KtCtyXBTO1L7qhqRShq/8eiQ
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32