23821db04107d705b9b6a16a867aa01c55fc77f4e002efc9263e133d090b5b35

Sharing

Copy URL

Twitter E-mail

General

Target

9be9c8988ab6bb7cdc044ac413d0c3fd
Size

802KB
Sample

240214-rrqf9sda7t
MD5

9be9c8988ab6bb7cdc044ac413d0c3fd
SHA1

5e916b307f0109a0d56490b1fb9e100f9d0a2e47
SHA256

23821db04107d705b9b6a16a867aa01c55fc77f4e002efc9263e133d090b5b35
SHA512

2728413b7624dfe41a90756a292dc477ed5bac20a88dd813dd0307731110afeaaeaa3f2462131a86873731e8efed26b378e87e7f4936577fd3658e7de02c626f
SSDEEP

12288:ixpJ+TTSc1DM6nKEHJvG9608LytrLlmR+KV/RBTU:OpYT31Y6KSOn8LyJLlmNk

Score

7^/10

Malware Config

Targets

- Target
  
  9be9c8988ab6bb7cdc044ac413d0c3fd
- Size
  
  802KB
- MD5
  
  9be9c8988ab6bb7cdc044ac413d0c3fd
- SHA1
  
  5e916b307f0109a0d56490b1fb9e100f9d0a2e47
- SHA256
  
  23821db04107d705b9b6a16a867aa01c55fc77f4e002efc9263e133d090b5b35
- SHA512
  
  2728413b7624dfe41a90756a292dc477ed5bac20a88dd813dd0307731110afeaaeaa3f2462131a86873731e8efed26b378e87e7f4936577fd3658e7de02c626f
- SSDEEP
  
  12288:ixpJ+TTSc1DM6nKEHJvG9608LytrLlmR+KV/RBTU:OpYT31Y6KSOn8LyJLlmNk
Score

7^/10

evasion trojan upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/BrowserControl.lua
- Size
  
  4KB
- MD5
  
  3e3f492cc3a33b452bd8c6a1c611856b
- SHA1
  
  3b24b28852dc2cd26fc0586ce7d3f0f91bb2d0c6
- SHA256
  
  40458af79f4fe53dba5f526e5442df47454ee8ebd21be1063d6706f87ac40e15
- SHA512
  
  3a190e92be927a3393713b5a40a049ad8e4fc493225d3536a1b3ad26693202622f88d5ce2b3b24f23bb61c754e8ca2682a7f884c7bbccac6f96fa9b56a0ed1a1
- SSDEEP
  
  96:YcPFcSnAqMP6HAjidEJNMLwLzm1Bh25NsWhPEEPNeCmhLCzgtKE:YcNcSA7PNMAzm6blV3mc0tKE
Score

1^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/ButtonEvent.dll
- Size
  
  4KB
- MD5
  
  fad9d09fc0267e8513b8628e767b2604
- SHA1
  
  bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA256
  
  5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- SHA512
  
  b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/DownloadList.lua
- Size
  
  15KB
- MD5
  
  f6baeef563055712a41605c5d5a45e22
- SHA1
  
  e9ff91e02b0d86407946403f17daff9da55b2bd1
- SHA256
  
  3a0542b947504cb84c9bd348eeb600d58075179c889526f3750d9fc776dc229c
- SHA512
  
  fb3ef2803364d5c247374f641296a0b3f0d6c67d25fe12c01e5647ae5b9a84bbcdef9cd34fbeff985576ec48528564db8990b0b662eda0a8fa2937def50ca1e0
- SSDEEP
  
  192:sz4YaYdx2oaQiviapMCImuxijxU6PdrqoV4d4WUJsQa3M3SSpCDGr:suY6AMppu0xUodr6d4pva83SDO
Score

1^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/FloatingProgress.dll
- Size
  
  25KB
- MD5
  
  0f26c6d34d3841e93145dd00d0175651
- SHA1
  
  57b068569d0eb2336503beed87589629ab2a6f1f
- SHA256
  
  0cc5dc45b6a04ec236f4ecf0eeee212096b1561179d71c49dd5fc82aba706741
- SHA512
  
  72785e520d78a4ebd8779e5497806406c1b91b9c05ed82a392a6af689781e26c77f0032c66540b80e2e7e457128df2afd0647b0dbc970a11d0cd4ee3930d47a5
- SSDEEP
  
  192:1cpwREp+D1UTyFDoUjSFWbY3Lf+25meJVOuN+Sx10mvmWc4b61n:1fU8fc7fV8C+I2mw4b61n
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/GuiInit.lua
- Size
  
  161KB
- MD5
  
  906a649a477a1bf42fb8b7a2627bf469
- SHA1
  
  28eac085d7a0d8ad8cc63857dee21dfc41548ba8
- SHA256
  
  03c799e8cd83a3e516b4e7acb54e81f68ecfda5f5d52cb2502040bbb2e9abc46
- SHA512
  
  2f9b9d70e6d261295b92d4191be12b5beef88cc7d418e22005f06fcf389662aec5532c6236896e24b0440e08a87bc06011cad84ef040e0c6e11544ec2a9a7f77
- SSDEEP
  
  1536:NRmQowE9RP4ooJ817j0rCBx3mT/VmbZNowQnegMzDLyi2D4RE78xf5Po:NMR7HoJ81eRV8wOy16Rxfpo
Score

1^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/IntegratedOffer.lua
- Size
  
  42KB
- MD5
  
  de90867bbdf996238e952f3bc5aebade
- SHA1
  
  603b92fa662cd4ab5f1013e72cc8cbe9137e96e0
- SHA256
  
  67f502a8fc33e6a960b61402ab5d59b0a9ec1fa45a7039385705f6005fb0f986
- SHA512
  
  daef1ead3d9e7053691bb563ea57e10338da84c5dc623019e4386604b0cabdcdf94db8490b179e2b29ad8b0859a11776461a6f738fbaead66767f22ec2fb7b95
- SSDEEP
  
  384:52KtdoVClYfeDhqqUKWE+BzxQ16YJDAkOwWpLkrY+I0C2KDwqy8Z/JQ4q2qTDX:52W8ClYfe9UTE+pS6/mrYSWvyO/gX
Score

1^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/LuaBridge.dll
- Size
  
  56KB
- MD5
  
  4773de0d19eba2e605eabcc632cd9e79
- SHA1
  
  5279562175548f1655df285bfe09fcbcce84c986
- SHA256
  
  1e5276ca5ec9eb3b62303fbc259b9cccb1722fd1321bb4e3054c231c97a14cad
- SHA512
  
  8a72a667953885e5884f9e9dfd021a6ec6fa4b05a46cbeb8fa9b5fc1f95d32ea11ebb579bae20ab85459b0f25044d59239462b7318c454365951c54f387bee53
- SSDEEP
  
  1536:7pUaOLGBp3rMRtCgEWWlhHz60a+8Dx/Q0+f:dU5LApctDCVa+Ux/Q0
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/LuaSocket/lua/ltn12.lua
- Size
  
  8KB
- MD5
  
  e440044afe6c761507a996b5b45ab0f9
- SHA1
  
  ef772c758fd5d6098b41375f35ac26f3963cc306
- SHA256
  
  b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
- SHA512
  
  8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
- SSDEEP
  
  192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
Score

1^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/LuaSocket/lua/mime.lua
- Size
  
  2KB
- MD5
  
  4bfdaaab9014fe129bc6388fd5687c8f
- SHA1
  
  2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
- SHA256
  
  e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
- SHA512
  
  3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
Score

1^/10
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket.lua
- Size
  
  4KB
- MD5
  
  74dbe1060e91112e1c21ef9870b4a587
- SHA1
  
  86afb6aecb0a8387ffa5dead1cc9808332f94310
- SHA256
  
  15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
- SHA512
  
  73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
- SSDEEP
  
  96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
Score

1^/10
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
- Size
  
  9KB
- MD5
  
  7309f4294ae4abb4f6ae657b2a98d488
- SHA1
  
  327d143e9f7a1835a58fdaf569a8f7a937fcf2c0
- SHA256
  
  9ba5df91091c46f0ffe0a93ace577a4833c92cbec1742113d0a2da9e568f9a10
- SHA512
  
  a44d2603af63828e8a0b1fbc7455305c616e5bae4a351b429e7e94a6aa7e4d6425f69d57d6a44ba87ee5d29accfc01c1f3ff288652120ff8f08a66543d357895
- SSDEEP
  
  192:GsooRaLonJfMxBs6gZO2zMAcTcGZqxOU6iOeBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7U6iOeBRkfYtW
Score

1^/10
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/http.lua
- Size
  
  12KB
- MD5
  
  14920d935a6df3772fabe3daccf878fb
- SHA1
  
  e3472b6091818e0e53fac868d63795a89f1bb773
- SHA256
  
  e6fdf6a535c2e980910e786f08f9f4cbfc84f6d2f8eecbd23c914b37d6fb69c3
- SHA512
  
  ce981aee7cdd79839f1011cde488eac9931454200ec82f3460240e319f8379289a76dd74c19bf1e88b0419fd3eda568b38d33e68e79b61f7a8b467836f1b1452
- SSDEEP
  
  384:x7/thyc+f7zLajrZhVoaOK2yyVizJvcGwkD:F/thyc+f7zyoaOK2yqizJLvD
Score

1^/10
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
- Size
  
  3KB
- MD5
  
  2cad406e591cade482c7f16f39c21481
- SHA1
  
  84a3ab88ff7a9102c2c6d21bdb6eede6862167a4
- SHA256
  
  343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269
- SHA512
  
  ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145
Score

1^/10
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/LuaSocket/mime/core.dll
- Size
  
  52KB
- MD5
  
  4a4845ba1666907f708c9c10a31ec227
- SHA1
  
  1ebf626adc84147e5114885ce779f92d6eb68f3a
- SHA256
  
  a1ffee9687ab4a23a78b3251888aff09e2896d76f8d16d713367b265f125188d
- SHA512
  
  d009f5e2a2ecfbec5e5e788ade142d612846d0c99921774e4a11b060998dfb0680cf1e1a54604535d5560738093f9ae166866cb23eee5c7d9c4e5cc5a33e7464
- SSDEEP
  
  768:Hk1jtHTV0IuugoXCodH5LjciB9snJ1hTgZNno42L:HkhtHTeroXR3aL0toV
Score

1^/10
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/LuaSocket/socket/core.dll
- Size
  
  80KB
- MD5
  
  4bf7db111acfa7c28ad36606107b3322
- SHA1
  
  6f20b9f6663ce0c309a2ce60e718d64ffb6c75b3
- SHA256
  
  bfe8445c38ee71240e856f85d79e94123d7179bf43688de0e2a14e32e6ef21b0
- SHA512
  
  0a5e66a65b80e15d8198f2934c58227ae17680f0fbea9865b2f44af82a29c53d4f95cf9616b4dfd75202420eb73b7d962cf2c84fdad6ce26afe1eb4bb978d0b6
- SSDEEP
  
  768:4pOz0XSP1hSt5+5lKfZyDy3TygCk749NRAa1YwqJlfp8iB9jDEu/s5RPOothtlRp:wOws14t5CeTygmNRA0IVh05IoN3
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ACProtect 1.3x - 1.4x DLL software

Loads dropped DLL

UPX packed file

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32