Overview

overview

3

Static

static

3

9b8ffb8278...78.exe

windows7-x64

3

9b8ffb8278...78.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DuoMi.exe

windows7-x64

DuoMi.exe

windows10-2004-x64

cook.dll

windows7-x64

3

cook.dll

windows10-2004-x64

3

dmcbar.dll

windows7-x64

3

dmcbar.dll

windows10-2004-x64

3

dmcommon.dll

windows7-x64

3

dmcommon.dll

windows10-2004-x64

3

dmdesklyric.dll

windows7-x64

1

dmdesklyric.dll

windows10-2004-x64

3

dmdnet.dll

windows7-x64

1

dmdnet.dll

windows10-2004-x64

3

dmload.dll

windows7-x64

3

dmload.dll

windows10-2004-x64

3

dmlyric.dll

windows7-x64

3

dmlyric.dll

windows10-2004-x64

3

dmlyricctrl.dll

windows7-x64

1

dmlyricctrl.dll

windows10-2004-x64

3

dmplaycore.dll

windows7-x64

1

dmplaycore.dll

windows10-2004-x64

1

dmplayer.dll

windows7-x64

1

dmplayer.dll

windows10-2004-x64

1

dmplist.dll

windows7-x64

3

dmplist.dll

windows10-2004-x64

3

dmpnet.dll

windows7-x64

1

dmpnet.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b8ffb8278045f4ca39a95c8e41ca078

  • Size

    2.2MB

  • Sample

    240214-nnnxgsha9t

  • MD5

    9b8ffb8278045f4ca39a95c8e41ca078

  • SHA1

    297c78211396805e4b05f96e86b21efb51644f9c

  • SHA256

    3b79a842b7bad93ca9f64869b996d159ffa3ed2d3a2a4a82b778b050e6450599

  • SHA512

    5dbdb07cefcd5bf79a669ebedec4ba2a04145bf7732508e8a9adeac6ad8aa134197dee89ae30595095a2d1ed239a7a0291685acb653fc22a1e650fedecc3616c

  • SSDEEP

    49152:Ytya0PQLuB/UnCKglUJchqXaPRsolsw4PMZ9oagcTskW02OzjyWJfl0alZ:baRLmUnznJ3Q59fsF02Oz2WJCav

Score
3/10

Malware Config

Targets

    • Target

      9b8ffb8278045f4ca39a95c8e41ca078

    • Size

      2.2MB

    • MD5

      9b8ffb8278045f4ca39a95c8e41ca078

    • SHA1

      297c78211396805e4b05f96e86b21efb51644f9c

    • SHA256

      3b79a842b7bad93ca9f64869b996d159ffa3ed2d3a2a4a82b778b050e6450599

    • SHA512

      5dbdb07cefcd5bf79a669ebedec4ba2a04145bf7732508e8a9adeac6ad8aa134197dee89ae30595095a2d1ed239a7a0291685acb653fc22a1e650fedecc3616c

    • SSDEEP

      49152:Ytya0PQLuB/UnCKglUJchqXaPRsolsw4PMZ9oagcTskW02OzjyWJfl0alZ:baRLmUnznJ3Q59fsF02Oz2WJCav

    Score
    3/10
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral5behavioral6

    • Target

      DuoMi.exe

    • Size

      444KB

    • MD5

      e932caee7a29c4f37d1cb638753b1aa8

    • SHA1

      ebf1047600faac634554908ff720a8c257439007

    • SHA256

      944d089e7cca3dc99407c19c7a4746fb9979fa8bd974aa62d41b836637ec8738

    • SHA512

      b1c85ed7d910a11d060c391cd990cd8d6e1f3cb1758b7d24151fc1890e8d592e0d10078b496f2c151f5a9648d1369fa3fb3392668a67e147e14ad2c7bc47db23

    • SSDEEP

      6144:wuPVJHMgdNgAo16871O930I0OpP1CwJndIsNDyAby9c3DyryUOj:wujsAgAS6Y5IN3CwJnd1cc3OOUOj

    Score
    1/10
    behavioral7behavioral8

    • Target

      cook.dll

    • Size

      64KB

    • MD5

      fa220dae3898b8578c34791648321a38

    • SHA1

      12bdd5396e996d071368980d36ef6f6c7b39f936

    • SHA256

      f8b5898569a508e370eb25db27c1cba440c9d559529850c05589e56a93659835

    • SHA512

      9c2ad73fd43de7ca16a1d75b2974a737dfe1478d094783861ff5e3f994e17bc9e36e31f130296b497bb8955849be31db526018c0621cf5b09496fc6e5c3d6f34

    • SSDEEP

      768:79rczOVJc8avUhcRxV6Sz+b2G90YnGZosMwCJtVSk7K+t6tj6tVDWVp3Ghv+Xb:7uqc8/aUSz62G9LnOnMK+t6tR

    Score
    3/10
    behavioral10behavioral9

    • Target

      dmcbar.dll

    • Size

      240KB

    • MD5

      f5bfd801e8d96c43134a5b246116c1bc

    • SHA1

      3b4ef9053180e715c0423e8c692a64f94cc5f6c0

    • SHA256

      a0b1043bfc9203a07b91a629210190c46eff0f816b3f982d91f113ff85dcc5d2

    • SHA512

      d0c4d7b5041d5a544ae52190919aeb312f05136887a2d5a569bddc21f8c3bf62c73ec93e8dd85f843c657a5ed350bda6824c8cdc8c7bfd16b3381060c34b44a1

    • SSDEEP

      6144:RulvQpLRiPiKv77wy6WgbDYkIehl3s5g04:kvO0pJtW84

    Score
    3/10
    behavioral11behavioral12

    • Target

      dmcommon.dll

    • Size

      348KB

    • MD5

      0bf0c89cc1664a1eed315590383aea2e

    • SHA1

      27fdcf997007110bc77a6a76e69676f42cd2f77f

    • SHA256

      c23a997b48d98400ea2469ea98f68ae3411b6b1531b88061bebad5094d54adab

    • SHA512

      7ea22ab623aab86aca6c72bf37a837d8e0d3a0ef11b4e0fa23011036cdb1e2f118bd1b1963b5571b61a8116adec73c600127ee58b6ee0024ea1c94f8b1a5a045

    • SSDEEP

      6144:KtIbQYuiOpciW7R/HhRcmq8kWAWLygQBScbK55:AW1uiOdW7R//c983AKygQBS/

    Score
    3/10
    behavioral13behavioral14

    • Target

      dmdesklyric.dll

    • Size

      160KB

    • MD5

      a30115729e2529b72cd5b2b784f5ed7e

    • SHA1

      ba5f063f358f0afefa942a2808fa9e4762e1ef18

    • SHA256

      7ce2caed91b1b41c4ffb8b13f5d14db48093f9196aa54ca573a6774b2011f6c1

    • SHA512

      ad6eda5bbb3668b6f4d1fe821f2413d7430a701fdcd5c29c0e0ea6800991dba21ecc511c62b7556b5daa91744ead38b0846c553545587b68c2b990cba417ce46

    • SSDEEP

      1536:ogGV9blF8Jg0ctMeQ3Rqt4/9znOrt0whNYV8UsT/RLC3diXZGPluz3P+fF3k7tRt:ogyAcFi/9DLkC54/F4iXZG9/fF38aU

    Score
    3/10
    behavioral15behavioral16

    • Target

      dmdnet.dll

    • Size

      108KB

    • MD5

      fccee7570a28921bd2b7970334948714

    • SHA1

      3c3c094718607367b4ecd0c941dbbac9375e6bbc

    • SHA256

      48cc5dadc36a2d2c03f4f339774c3a86b7a3f20fb49380088e314d72307f073a

    • SHA512

      21dc849211c96a4a75830072b332355328ecf975da1e1fdfe19854289e9b63f55215a756c126f97bb565debb13f84ee6cb30b9830b83fb114ad029b6b0b4a84b

    • SSDEEP

      1536:LDB8IcVG2Ua5F2N5MSI1xa1sJ/PdOpyhppTMyiyIO8nToIf75KKe1/H:x9EaNCF12pQppTMyiQQTBf75KKe1/H

    Score
    3/10
    behavioral17behavioral18

    • Target

      dmload.dll

    • Size

      476KB

    • MD5

      1fbeae5d32065c647d0e9fc4f5cade8b

    • SHA1

      5b8794466d243bcdd3ec78fd0544bc4fcbfca2bb

    • SHA256

      c3546f895cbf24a4c46928154220528758893b1f53b0175501654e999d24c2f8

    • SHA512

      6683309c81295b3fffd11dea09719ced839fdb1e9e5a68a221432211eb7d5730b369d866465b7526420bf9ac941c7678432a98b05920700637a8a48aa888b13a

    • SSDEEP

      6144:rcv21q2Co4sXFdT6g/gKD0ddTvlT6PFGY3xKpriTKA+40W17Y3oU5OQ/:Omv/gsJ0priTb7c/

    Score
    3/10
    behavioral19behavioral20

    • Target

      dmlyric.dll

    • Size

      56KB

    • MD5

      ca0a8124dedd88621adc6af4035c7f10

    • SHA1

      97d3aff31b9d7c906a3a5617561a8a5475c88447

    • SHA256

      6fae79880ea363bed51d369a7150ab60fd991975ab4da10a5dd08827eb6deb44

    • SHA512

      2bc929bab0a21844895a4462fd1be4ef744ed05290c860cf91a603cfb31b9aade549ce28680dc86a46fe7c322dfbb72c13d80b7719e3343d4f422478db3ef549

    • SSDEEP

      768:PVq5b3SjrgYNNItC0doLW6kNevWm2FodWlHSJNoRQMs:PVq5b3Ah5XW6kNe+m2FodWwroRQMs

    Score
    3/10
    behavioral21behavioral22

    • Target

      dmlyricctrl.dll

    • Size

      116KB

    • MD5

      9f527529459e441c43bd65265fa34ea9

    • SHA1

      2586dff6e8199a56913fe8c03a9682fd44f84151

    • SHA256

      d8eb81b4030886b9e1ad02ad2057465a304d601947ddf677ab5aa62e45609250

    • SHA512

      2012920ab5a21ed5953fe96e22caaa14a955666488dc4a8d48fbba535809efb41a7bf56869142ca8be2facc77cdd5f34334e255dcdcb81ad6d680dbf6e8c21b1

    • SSDEEP

      1536:0jrf+L+z3RNUAN8qc4wAHKXpCi3l1rBRUOVCyUJsUimzyArM0H/Y0F:0jj+L+zhN4uyXpCGzYcmRf

    Score
    3/10
    behavioral23behavioral24

    • Target

      dmplaycore.dll

    • Size

      184KB

    • MD5

      35fc3efa4e1178154b862318128931cf

    • SHA1

      3f781619fc50064718f2d810dc81bf6a0ae865f8

    • SHA256

      1ab7d844815aba7181ebf11e8a9798050239e7d2ab7a398f903eac0c279b9e70

    • SHA512

      bb82aee2e3fc4476a4a54341d0296a820c0c3efa6ad41b79ad47ea02dc2184f415a6aa59ce28c1abbe84ec61f886bb738eb134eff0815cf5dcfab99ddaac3002

    • SSDEEP

      3072:l3j46teaVDzyT62hxIF7+9z60TEAbjEgseHv:hsado62h2l+9zPbXseH

    Score
    1/10
    behavioral25behavioral26

    • Target

      dmplayer.dll

    • Size

      108KB

    • MD5

      ecdc251d6f3ae0180d1712ce669a6eb3

    • SHA1

      91ac19740bfddd27647e112a8237feaa27adb1fe

    • SHA256

      55341e80aa663fb3051ded75ef019ab67a062ec926c7ceb4d394e3aecc50ebba

    • SHA512

      488a54521be74acb3d2dee0eaefe38299b3946cacd6b72b9ffb76011f4fb18c5ab981fc02fec55cf3e6f4a0bcb0e054f7317c5a97a4146c91c231b210f0a02c4

    • SSDEEP

      3072:aemUaxWtOmd9VvJ8dgD3Yf7DJ1Dq9UPofAj:aekQOK9VnIgUPof

    Score
    1/10
    behavioral27behavioral28

    • Target

      dmplist.dll

    • Size

      800KB

    • MD5

      fe914debd63d4a2daf2ae0f1523c27cf

    • SHA1

      6590c3bf8ca77d7ead2928e8b22d802073a78d73

    • SHA256

      d9145174757fd37695996a57d45239023834a0fb3b90c6ed6a62a4ec8f73653e

    • SHA512

      9c8bedf663bc53c2ba93d7c94d6de6bb926947c420e137a5d8e4d4e856e1d059efb5f6b84f58d59fd2b5f2a62f9f3752838a54dfe473d01357cafb8922a45750

    • SSDEEP

      24576:guqAtLCFznObRBqRexuRVez1duTizUKq2xt:nUEzlq2xt

    Score
    3/10
    behavioral29behavioral30

    • Target

      dmpnet.dll

    • Size

      232KB

    • MD5

      ddf240affebc5a640eab8a651950447e

    • SHA1

      9daeac00403ef73d6719c010fb8b4d464e3cfeeb

    • SHA256

      8105a5d787a40f14942ed739744fdea084e8d43d046c4cd8e1e4232ae52a925d

    • SHA512

      8ea892d3396be7ad49802fcb5678f23cf23f6cb38e6556b15edf50431adbb442bfa4e2efb6bb6622e4bfaefcbb2ecd6e21b4ad8fd462c765e9344a8973f9750f

    • SSDEEP

      3072:+JmkoZYi7wXFMeR5Ay/+ajjXGCBdKyKR+jcUH4eYWck9+9h2El13+It7ExX:+gkoZYicNzAe5GCmyKoIm4s222dp

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks