d49877b56eae195a92a251b8a2323f9271c5d1258c8671d26e03ee44425c0478

Sharing

Copy URL Twitter E-mail

General

Target
Minecraft.Note.Block.Studio.exe
Size 42.9MB
Sample240224-vez2qagh38
SHA256 d49877b56eae195a92a251b8a2323f9271c5d1258c8671d26e03ee44425c0478
MD5 cad7ed3f0e24ed9d0c642a8db5711b6a
SHA1 526f38aeb0aac98e8dc834af594cba5210555407
SHA512 21d07a10d13cc95ddaadbb7ed3045030c33cff6759af0f091e9058ae1c1b40dabf5ed1add13f62471feb19f3e1b52bd93246cd1b01ff9059aa32d1abd1e2597b
SSDEEP 786432:SeCSW3HLvaImZhgT3s6T/STneTZxcmpMmQO9KWNMurqQVbw+Dw3X6cM:eSC/mz8sEsMemWm/EW6u9bwnU
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  Minecraft.Note.Block.Studio.exe
- Size 42.9MB
- SHA256 d49877b56eae195a92a251b8a2323f9271c5d1258c8671d26e03ee44425c0478
- MD5 cad7ed3f0e24ed9d0c642a8db5711b6a
- SHA1 526f38aeb0aac98e8dc834af594cba5210555407
- SHA512 21d07a10d13cc95ddaadbb7ed3045030c33cff6759af0f091e9058ae1c1b40dabf5ed1add13f62471feb19f3e1b52bd93246cd1b01ff9059aa32d1abd1e2597b
- SSDEEP 786432:SeCSW3HLvaImZhgT3s6T/STneTZxcmpMmQO9KWNMurqQVbw+Dw3X6cM:eSC/mz8sEsMemWm/EW6u9bwnU
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/examples/limited_api/setup.pyc
- Size 607B
- SHA256 59355e6ab65e521156ada1095ff363a9785fdbf657da2abeaeb84f565f33f681
- MD5 770c7e4f0de386de9a0e426edf1f5ac6
- SHA1 56abc07adad264c3cf5e4c138232728ec3f253c5
- SHA512 2f0ce5f7b6296c13e748facd3304efcafbacf9ba9b1387cce55b641b3b85640e7c722db35bfb0503d4d2672b28fed1feca66111f5e831198f161c296cd52fc76
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test__exceptions.pyc
- Size 3KB
- SHA256 27c5b8e00bfceae3842f0d7f7ce1a5933646713e13530ba026b1758a4336ccb5
- MD5 5f4d72ce410d5185f24be1bbe2d2e989
- SHA1 babb33cbd47b300714d3477faebc86dfc0e0f806
- SHA512 68c1b56b00f8402d582e245b629f34cf751832911a34ecc79ae9c58dad8997393d9a2cd1ce9151791cdb3d724427fdeab7e434572e5603ce880e6854708864eb
- MD5 SHA1 SHA512
Score

3^/10
behavioral5 behavioral6
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_abc.pyc
- Size 2KB
- SHA256 f12e8759481e079e8a44fec54ffae47b95942c3052b7b2299047ba03fc0521d9
- MD5 37f790b984fbadf06993c2fc8c2d71d6
- SHA1 ec7ce34e007589056ec35743480f23838534bd72
- SHA512 361222dbab531573a5e0b410e0f498d2b872d32e52f132fe9cfccdc9d54ee890cb8bf7b7a963d31172a23899dd4e201028f7a6f55b36cc233bc415e585cd2d8a
- MD5 SHA1 SHA512
Score

3^/10
behavioral7 behavioral8
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_api.pyc
- Size 14KB
- SHA256 af3b22ef9b6955c83e33eb81dc343e09008ad733e82e34f482a3b7aa63cdda2b
- MD5 6ff9e6c27f12315d7b0d6a145fdda567
- SHA1 85ba2385296538e84691757316a09bd4db84e317
- SHA512 a1f53750524c75aa224d6da664ff90a62eeaae9e04420f792b2733f8bb2f3706d755c326121a095fdb98db63e0513d59cdad4d2f0026a20a813346b5f3dbe266
- SSDEEP 384:8UfMLH+hMfMspRCK7Gi7lIibTwmj8N/rYghF:pfYH+h2Ms/5z7lIibTZ81YA
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_argparse.pyc
- Size 2KB
- SHA256 67805c574207545a700f099a9655252439d41451ee3a76e2328e014613fe8ceb
- MD5 4a6e620941d96761b912c3076c7e8a14
- SHA1 73991542299f1147278a05839d1a84a1721bb8e8
- SHA512 d8f43e99c3747d02ffea5e0bd93bd0820c2f4f9ecabf14f3bad88732f5e93d5a5a6f77afdba8ece989e5ccdcbbcd103e491924c8724576b22f33e7d8e57cc580
- MD5 SHA1 SHA512
Score

3^/10
behavioral11 behavioral12
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_array_coercion.pyc
- Size 24KB
- SHA256 0bb097e2091b3d6927b3391304a21206a461aff96558c877fdce5c87518608e7
- MD5 5e8e0af55da6af85cb35c09292009b71
- SHA1 6976a24879a324448514e2df113e641f29f79338
- SHA512 9e265caa197ca447376a63065a323e490a44c88840911d6d72a8d498df86a1b7f0bfa5fca24d0612cf863dc5141ba86a82374d46d987d236441eb76967c99fdd
- SSDEEP 768:E2L53kVsnja08iGRtJVaXJ6bU2C0JvU1Z0armM9NwAXysvMo5fhsQxcop3/9s2xA:f5QsnjTnGRtJVaXJ8U2Q1Z0/svX3hHpy
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_array_interface.pyc
- Size 5KB
- SHA256 cadd4beca6cd01eeef69e6c5cac50137d4b95e38359664380e17c6a92261c851
- MD5 adff03b8e737ebfb4a373298a98c9a9c
- SHA1 8cfc9d5ee50cd0961fda03e2d6dad4cc2bb3c78b
- SHA512 e59a79c06751ffdd136cf0013aad5db002f7e67ce54f337cd55ba712dcd2f9ea1d7a3a668aa87c682fabe75fc749deabfb65eef59b11bb5ac7bc4e1580255b74
- SSDEEP 96:xFeTqD3nqHY5QGtK/g6ybDOcJ2Wr7V2f5Qnm4l7sKxCCRffxXnSbQ28:bx3nqVG8/Rye01ZnmQ7siibv8
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_arraymethod.pyc
- Size 3KB
- SHA256 72f8659fffe3567136b63f9ced0f0d9b1b25f41dfdf2eca80e127c38428a2f4c
- MD5 4dbd66c83db8859cb9df090d02f8a875
- SHA1 b7baf705c7003003ab27295dc90b99b3199319f0
- SHA512 03ccf8dd8ec5a1e5c9b3b627d48cf296a8ba223797b1cb747f856e3c3d0160684568cd6e5aa6f6b33f3e695ab01afc18f4a949119e1473dce2dc77a992729d3a
- MD5 SHA1 SHA512
Score

3^/10
behavioral17 behavioral18
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_arrayprint.pyc
- Size 33KB
- SHA256 3049a83ce55242b07495f12f5ebfb83daec6d8e0682c899685e31e8b752d8963
- MD5 093fd03621980c028c0c554b7c07e869
- SHA1 700fda6e9d7589594b5063e659570a0ff6855b04
- SHA512 d20496d48f1ae036b23ba3072445510a6f520a3270dec2c0445c70d96d88c7f9dda3096be170c9322961e596dfe3eafaf1e23958d08e35e5b0cf991af6e5948c
- SSDEEP 768:oLhE1tJcQG66W6Z6y1966bVSOFr5dhP0E4ckMMfIlIwM529jqd8OStgpwg7AH3p+:odE1tJ/G66W6Z6y1966bVjr5dhP0qkMK
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral19 behavioral20
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_casting_unittests.pyc
- Size 19KB
- SHA256 ade4134a43b0230168b7fdf103824c0f13902ba9d6fc1d4289acf4243e9d7e2d
- MD5 5a6720cd3879939a5f8f3e62a16a4e28
- SHA1 1cdc1b0ab126e7657dfa78d9ff4c03343c2f65cc
- SHA512 89f56a728e757eedd63945efb6f07bd04df0882670cb85fefd031990c5cea707ccd245e0a6e8f8bebdbcd105ec5029bc2b2b0b8ff95dc0387718a4233c1a6d47
- SSDEEP 384:fgbssKh2ucp6VsytmJ3TcKr7dUs1mGr5aYumAQs9ltPWNYwpBn8h8Fx:fggsKh/g6XmJ3gKr7dUAmGr5Cws9DuN/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_conversion_utils.pyc
- Size 7KB
- SHA256 b76b51a30ca3408f2dd9e2760246b828d1883a7dfd657cb6b2411f0205235702
- MD5 aad8cc908fb91df4a2b780a75c9c4805
- SHA1 028c8ea06dcbd12791a4e94a2bca4efe74f4dfa9
- SHA512 2cd4b21c400f6d8f2e8e23321e636696945e664bc7a5c5ec59980425ac7553f8c46d5e300ef8119154020fecc4714f96aedd426ad35383e2ed3ea9c16faeab02
- SSDEEP 192:kV4csS8URBBEXdT747iwICntswhaspv74FCdQwjD:euS8UBEXhU7ksR0chf
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral23 behavioral24
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_cpu_dispatcher.pyc
- Size 1008B
- SHA256 3b3dcbab4b5496c51f75171769e27053b529d2dd4b6a6e84b2425228dc306903
- MD5 84a44d2e37f05fda67ccc28d0827a22e
- SHA1 954ad6e866ced8aadb5ac8a18fb586798a0927fb
- SHA512 39ca2131f6a1c8118df76a35940b496f7c2e5e0b613660374d050910b6c8b4660018c15a47fdddfcf3179dc9b7fc06344ef30c0ad91ddcc685b724fdc63f78c7
- MD5 SHA1 SHA512
Score

3^/10
behavioral25 behavioral26
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_cpu_features.pyc
- Size 6KB
- SHA256 e222838667adc9211ebe4046cb2b75492dcafa55305756f3a48461dba565fb51
- MD5 90d8520a1fadbf3446c90e27c595d910
- SHA1 5ef9fde04ff14fc484a1561c04fb4c2907f4a6a7
- SHA512 6511a5713ad361b76ae3e2909fcc4ad6a40e056674893ff2b440bde79a264d9c8bdd92d0ba86128329016269c9817aeb212066e5ea48b066c260b79eaac923ba
- SSDEEP 96:LXXBjPdLV7ugDv7rsccoOc0J/BeEZyxCPIv4OZU7razOZfoFN22BuDzPjLKxtS+U:LXxjPdBagbtOKE4x4vafFN22sG/e
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral27 behavioral28
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_custom_dtypes.pyc
- Size 6KB
- SHA256 c7a23866df8e174366538e430fe18a75be18fd884c3ea5075592f80dde011e4f
- MD5 eef2cb513afb59c3dd77ad8b5e99ce79
- SHA1 9e00f1678e3ed5479790753c99cd18792cab9f4b
- SHA512 d0cdf61f5f0fe131e2830c9322f78ffc65d8f6358655f8bbe244e834a585b1177aaaf4fc56d7fab8f98209c623ce02a320a8fedb6a2d093364ac5f1984573e24
- SSDEEP 96:SXuknFgGKrJE5KnW/O6ORnG6iU1bp3qfXHQYQZonEeglpf+datulLLf2xw:SXuknFEFKaWGRnG6iCNqPoe4N2gyLae
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30
- Target
  Data/Python/Lib/site-packages/numpy/core/tests/test_cython.pyc
- Size 2KB
- SHA256 5f5fe5847b00915c0ea53283c3569c950141306df87dc0a025cec881758e70f6
- MD5 b42aaa87a10e1e245189b0f1266956f6
- SHA1 948be1db9c46664f55913f3ce69b4df2eeeb9ed5
- SHA512 febf2a7b0fdef9f0edc42371b9c7f64e991387239d647dc53b2a3e750b25f447d540a09dd8a98e1963e842e17bf9a12dfd8459745ee9da020ee5a9ffff3f3372
- MD5 SHA1 SHA512
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Checks installed software on the system

Enumerates connected drives

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32