Overview

overview

7

Static

static

3

9c3d6192ba...d4.exe

windows7-x64

3

9c3d6192ba...d4.exe

windows10-2004-x64

7

$TEMP/gikW...EC.exe

windows7-x64

1

$TEMP/gikW...EC.exe

windows10-2004-x64

1

Users/�...re.dll

windows7-x64

1

Users/�...re.dll

windows10-2004-x64

1

Users/�...UI.dll

windows7-x64

1

Users/�...UI.dll

windows10-2004-x64

1

Users/�...nds.js

windows7-x64

1

Users/�...nds.js

windows10-2004-x64

1

Users/�...at.exe

windows7-x64

1

Users/�...at.exe

windows10-2004-x64

1

Users/�...is.dll

windows7-x64

1

Users/�...is.dll

windows10-2004-x64

1

Users/�...eel.js

windows7-x64

1

Users/�...eel.js

windows10-2004-x64

1

Users/�...ci.dll

windows7-x64

1

Users/�...ci.dll

windows10-2004-x64

1

Users/�...up.msi

windows7-x64

1

Users/�...up.msi

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c3d6192ba68e46624894e4f0136d8d4

  • Size

    8.4MB

  • Sample

    240214-vzp29ahf53

  • MD5

    9c3d6192ba68e46624894e4f0136d8d4

  • SHA1

    7c697bb80dc6a41d1f54468acd6a7bd77ee35533

  • SHA256

    7c6e588ecef08afdc346bbc8cc2c0e143798e127fcdc4c41352858b2c614cf2a

  • SHA512

    6c6bd78fdd22ad2fb69be5421ae088c345d510a3e73c1ec203be4476917e088792777e500b3348fae2917b361deb7237b6a06d56a5ae62a4bbd8a2a4bdbd5728

  • SSDEEP

    196608:XkT+14Gq1DSJkkqe+QQZf0lhgGpphi5LoJ/y5K9de6wL:X54Gq1m6X9oNpz2LoJ/y5KwL

Score
7/10

Malware Config

Targets

    • Target

      9c3d6192ba68e46624894e4f0136d8d4

    • Size

      8.4MB

    • MD5

      9c3d6192ba68e46624894e4f0136d8d4

    • SHA1

      7c697bb80dc6a41d1f54468acd6a7bd77ee35533

    • SHA256

      7c6e588ecef08afdc346bbc8cc2c0e143798e127fcdc4c41352858b2c614cf2a

    • SHA512

      6c6bd78fdd22ad2fb69be5421ae088c345d510a3e73c1ec203be4476917e088792777e500b3348fae2917b361deb7237b6a06d56a5ae62a4bbd8a2a4bdbd5728

    • SSDEEP

      196608:XkT+14Gq1DSJkkqe+QQZf0lhgGpphi5LoJ/y5K9de6wL:X54Gq1m6X9oNpz2LoJ/y5KwL

    Score
    7/10

    • Executes dropped EXE

    behavioral1behavioral2

    • Target

      $TEMP/gikWp/rdxYDEC.exe

    • Size

      47KB

    • MD5

      761f7858d8b65eb884d387fd96da0b0d

    • SHA1

      b68f78367c6d36026b75715d2906cbac65cef1dd

    • SHA256

      88cba66e9c7e8d35e440026a0cfaa67882535faec3f5805d3aa2b3110e41fe76

    • SHA512

      2378963b482da68ff20e0b1721cd33a2655c3a2df2ae49f81c501c94c0616ed8d935fb55963e909db7e0aa46f57b3c5f645af6e3a3e477c7415166acb99e200c

    • SSDEEP

      768:eZ8qC6wsKMi/wCbo496wtHEUXPyRvk2/6sYot4ot7tp4tyt3:egBwmawtHYRc5SJtut23

    Score
    1/10
    behavioral3behavioral4

    • Target

      Users//Desktop//WMPDMCCore.dll

    • Size

      416KB

    • MD5

      73fc60fc4c3a09509ffea745fc4ea696

    • SHA1

      55c6df290b5f949343a3c497bce7f56e121cc18a

    • SHA256

      46df0034b33d2fde02bf8ff70f8e43f060b413df8b771a278cc061e76be9f2e5

    • SHA512

      3959df6fae3102e3c7d2f928d3f1030fde98585cb80c51bf8c1860b19c0caa2a6719a32770ef7670d0b522f239a9fd903b3e5ac72f230613b768462510333f99

    • SSDEEP

      6144:2Jix0C6vhdVFj5oDk12PtcZTOO5zZ7gvsV5Y13+QyCA:2Jix0C6rn5oY12PtXCJgqYRi

    Score
    1/10
    behavioral5behavioral6

    • Target

      Users//Desktop//WMPNSSUI.dll

    • Size

      34KB

    • MD5

      cf557645f3606c6d6a1fb4482d798e65

    • SHA1

      dc8915c815edde23175155952d599caca136331a

    • SHA256

      28d793e5077afb34b57fd3ac404413a60f06a3985fcc4aa16cccb8525411f8bb

    • SHA512

      24d1ad44a72dd1bf02262bc9149e418aa19916210ca5dac317632fc732e9f2783d6009d38d3aa8401508ff50db3b0b9b19613e100abba7e36859878d221f9a8f

    • SSDEEP

      768:0VsdoDGvotvPfjSRz2m8nR/NnkIe+//rp:kHi2l5NkIN

    Score
    1/10
    behavioral7behavioral8

    • Target

      Users//Desktop//bot/Battlegrounds.lua

    • Size

      7KB

    • MD5

      de1e2731324ae097877f5e8ed3942c95

    • SHA1

      48c05595173f283cfcb6a0d1cc7756030199ea3a

    • SHA256

      de0a0719fc75c95aabcc0d5d05c8be08f21543b94bdcfcd3a365002e99d033c4

    • SHA512

      31ecb2c887b6f28c46f185acc16ab3ec7e05322bccd9478abea14a0da763f203f95af1dec8f31fbf417adc0c616bcb023495a9e8a5ae031457b1b8146f082b4e

    • SSDEEP

      192:i9CXUD0gCcCT8c+leRPmOVhcphcANa85kIHjeSM1:iJc+Azuhta85hHxY

    Score
    1/10
    behavioral10behavioral9

    • Target

      Users//Desktop//cheat.exe

    • Size

      912KB

    • MD5

      44c1cb979c80e44425ab832b522a463f

    • SHA1

      ed41bc52f274b77f6f121a80a3dfb3db106fc8e9

    • SHA256

      b8ca44ea4c176fb6b589b0b08ddb1de58f5eb87fd9d9fc2be08c91781447fdd4

    • SHA512

      ec878a109a8248830f1d95a59103321b6652ef429d0ab523d5e77a1082c05d2faed828a6e9c36ba7f4bc3f543b6aa53a220585d03f304b131fce67fcb4d0e22a

    • SSDEEP

      12288:ZnLnAunl6qtjdfn+fvA4KEe8poxciB7ULSdy1vlmeHISSMnMQ5dHhU:lLAunxtVntPBxcieSdy1vXSMnMQVU

    Score
    1/10
    behavioral11behavioral12

    • Target

      Users//Desktop//mpvis.DLL

    • Size

      286KB

    • MD5

      b4a9ce21915c96a1baa89fa884ea1c6c

    • SHA1

      77ea07025653b66b013842936b9fa0e14b9c2fe9

    • SHA256

      5b1cf8de17dc039349e1af0bc0d728e3de3c0a96d9c50e81fc909b8ceb4927e0

    • SHA512

      a7e591e306bbbe34e7d12593f429a48f320d9810319fbcc03bfaeec1325214214f3dfc35fc4e87721ddd705cd5266447a8eca6a0d43945920b46084b28088ce1

    • SSDEEP

      3072:kkcBQ77OHaSCE+sxkFZR5yNHGzyZwWio2PJlvnu1wPxi6+IiVhp5:kkcBk7dSCds8R5qHGGH6+IiTp

    Score
    1/10
    behavioral13behavioral14

    • Target

      Users//Desktop//topmon/LookNFeel.lua

    • Size

      48KB

    • MD5

      ca899d38fbf007eb66b5b2afe41ea11a

    • SHA1

      ea6709a1c13b4e5925a9604733b5c8f88b8923c0

    • SHA256

      cb39cae16a7b11fbce34cb4d125a1636bec7ff3a241619f2cd84b4a55644af56

    • SHA512

      b8c2bef91cdf1d9efc28e4170a2b3cb110439bda1cf7ad54a09e55babfc7f79901e902f1bf552ebd8244e28c473b273f4b8899a1289d6c817410d6732d6fde8b

    • SSDEEP

      1536:hCryKLLAa2sAVC3MjFQquWmTwUsktDToALh/jo760ohPyMrPQkSHL+hgoyHoqQN4:tClhNHG

    Score
    1/10
    behavioral15behavioral16

    • Target

      Users//Desktop//wmpnssci.dll

    • Size

      540KB

    • MD5

      c7494c67a6bf6fe914808e42f8265fef

    • SHA1

      c3d1d75fde40db9b6c1768da68dda7f869785582

    • SHA256

      3a3871983f2d9a57739c70365dc3f417d9bf02f5c0c4cc3272ea9f3d380ef962

    • SHA512

      3474f306af5c54b3a7a6440efd4de1946f95c011ebef26282d9ad1b7aebd619332b408e6f2edcea4c66c35b2a70c400fb466a640491604b5bbc265945b309a23

    • SSDEEP

      12288:FpjwQKBBKOeOB+gfAZMEHj43S6BB1BDllfMo88s9Of4:F9l+mO+fC4411Honr

    Score
    1/10
    behavioral17behavioral18

    • Target

      Users///setup.msi

    • Size

      3.1MB

    • MD5

      406c23ce101efd2582df3e7642e8366a

    • SHA1

      1246f899d64cf894739c89a73609f83d15f31c46

    • SHA256

      a523df66f5072161ff822a197959e7175fd47e23db30f4dcc8e72c711c1be520

    • SHA512

      1d5ba58b94983aa549243ce21cc4e6ffa3ac98d09c02c4e6b265cf393b9cc10e905e2443f8e62e27e34bd9106b4d7e490555ede961bdb6939be3872074cd2851

    • SSDEEP

      98304:KddXq1DEEwN0ItLyrsewa++tkqe+9qQZiwh9n:Gq1DSJkkqe+QQZff

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks