3d3a748b9c5e2db830cf3f9dd58d299d64ef8168b69b8d939e9f32040f3be03e

Sharing

Copy URL

Twitter E-mail

General

Target

Silent Client Setup 4.0.9.exe
Size

69.9MB
Sample

240224-z5jvmsfe4v
MD5

64833cb939816d6155289c0984c80766
SHA1

09e88ec36858fade6e90c4cd8ee68288d23dba4b
SHA256

3d3a748b9c5e2db830cf3f9dd58d299d64ef8168b69b8d939e9f32040f3be03e
SHA512

2e45adb23a0d742268bbb05df2da9ed3cc5cce509413e4592916cca83c09c34660aab6da81ab6ba967cef76ed3d116c36bd53dc41ee3c919b2840a7d47050e9e
SSDEEP

1572864:MonjRkJ7cQyAfwn3Hi0MoXGeLxwTR5Tlpl+YfYVD9bIHIjNshvOWUMT+v:M8RdQ+33MG3STzRpQYfKD1jG2FMTs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Silent Client Setup 4.0.9.exe
- Size
  
  69.9MB
- MD5
  
  64833cb939816d6155289c0984c80766
- SHA1
  
  09e88ec36858fade6e90c4cd8ee68288d23dba4b
- SHA256
  
  3d3a748b9c5e2db830cf3f9dd58d299d64ef8168b69b8d939e9f32040f3be03e
- SHA512
  
  2e45adb23a0d742268bbb05df2da9ed3cc5cce509413e4592916cca83c09c34660aab6da81ab6ba967cef76ed3d116c36bd53dc41ee3c919b2840a7d47050e9e
- SSDEEP
  
  1572864:MonjRkJ7cQyAfwn3Hi0MoXGeLxwTR5Tlpl+YfYVD9bIHIjNshvOWUMT+v:M8RdQ+33MG3STzRpQYfKD1jG2FMTs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  
  $PLUGINSDIR/SpiderBanner.dll
- Size
  
  9KB
- MD5
  
  17309e33b596ba3a5693b4d3e85cf8d7
- SHA1
  
  7d361836cf53df42021c7f2b148aec9458818c01
- SHA256
  
  996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- SHA512
  
  1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP
  
  192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
Score

1^/10
behavioral2
- Target
  
  $PLUGINSDIR/StdUtils.dll
- Size
  
  100KB
- MD5
  
  c6a6e03f77c313b267498515488c5740
- SHA1
  
  3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA256
  
  b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- SHA512
  
  9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP
  
  3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score

3^/10
behavioral3
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1
  
  48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA256
  
  3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- SHA512
  
  c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP
  
  192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score

3^/10
behavioral4
- Target
  
  $PLUGINSDIR/WinShell.dll
- Size
  
  3KB
- MD5
  
  1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1
  
  0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA256
  
  9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- SHA512
  
  7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score

3^/10
behavioral5
- Target
  
  LICENSES.chromium.html
- Size
  
  6.5MB
- MD5
  
  180f8acc70405077badc751453d13625
- SHA1
  
  35dc54acad60a98aeec47c7ade3e6a8c81f06883
- SHA256
  
  0bfa9a636e722107b6192ff35c365d963a54e1de8a09c8157680e8d0fbbfba1c
- SHA512
  
  40d3358b35eb0445127c70deb0cb87ec1313eca285307cda168605a4fd3d558b4be9eb24a59568eca9ee1f761e578c39b2def63ad48e40d31958db82f128e0ec
- SSDEEP
  
  24576:d7rs5kjWSnB3lWNeUmf0f6W6M6q6A6r/HXpErpem:rovj
Score

1^/10
behavioral6
- Target
  
  Silent Client.exe
- Size
  
  154.5MB
- MD5
  
  312338f6f4ca6a56b0799d2236d51733
- SHA1
  
  7f5a4133b9bd2d696c2178ee5dbf135823dc2ec7
- SHA256
  
  02f586f3e4ce73f0d4e711754f4e19ce01dd4f7946a6877879d1f796e56ed2a2
- SHA512
  
  a5f489bb7c8ecd3d74a842bbc2086e0f25d75a07953888344e4f60ad901574e9991cb7b8eb256598481160bfea3f36805c61ef908af0c0085863f8ffd4c75b90
- SSDEEP
  
  1572864:kH3tCV62ipzpxI9Sua3nkTOFqXagQB3zR+KRkdW0v8KEtL2kTbwo7XWyHz15Dods:JFUFdBjIK/YW9x
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7
- Target
  
  d3dcompiler_47.dll
- Size
  
  4.7MB
- MD5
  
  cb9807f6cf55ad799e920b7e0f97df99
- SHA1
  
  bb76012ded5acd103adad49436612d073d159b29
- SHA256
  
  5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
- SHA512
  
  f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
- SSDEEP
  
  49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
Score

1^/10
behavioral8
- Target
  
  ffmpeg.dll
- Size
  
  2.7MB
- MD5
  
  37d1c1e89282be8852d443cf51f629b7
- SHA1
  
  bf80d5df917ffbaf5db44512fb195d99036b54ec
- SHA256
  
  8d22431f42e8e258eba762835e425bab3532bfc7b6a5743b6feea7063d61ca63
- SHA512
  
  daf674f7be70d783338ff0df16f5e61a7661ab9abfcee9a0a5bd29cc35d8ee5f03825be77760a2ce334ba099361b7394bf3ad8684ad980ff7a8169c921619118
- SSDEEP
  
  49152:IMoI7Qj3trgDtcfkW76fSL5Yqq6uthy4Y6NO8PyJegPTagrcjdiCOi2iNN3lzl3C:q3Kk76fUq/4TagreBOirnW
Score

1^/10
behavioral9
- Target
  
  libEGL.dll
- Size
  
  468KB
- MD5
  
  6dff2f3923b2de2258cef0399e7a807d
- SHA1
  
  fc3679476c88113d5ff6589784e7fc1be5c72d17
- SHA256
  
  eb7583831a87d12390cad7f1e967f7637b588c67f51ecd8f8b996fc01fe65b19
- SHA512
  
  9590d369d248876be8cf3ba8142ad8e3982620fcadc8fe64490a36a9e4e6c3dc2a96a7f897fe1b99aea293bf16b2662ceabbb4f8b74e14c510f24825ee0aa4d3
- SSDEEP
  
  12288:Pu0LAjbIkyVVR8O9v/6TiT5eU3axzv1wo:Pub49/6TiQzv1X
Score

1^/10
behavioral10
- Target
  
  libGLESv2.dll
- Size
  
  7.2MB
- MD5
  
  11afd816065727c388c9331f5a9d5170
- SHA1
  
  fd6c86434ccc3aed6502003907aad8a9bbed9064
- SHA256
  
  d1209f7f8fb2fe08ea5c6fbf2be4a38704355b5b384bdb66b299def91be177ce
- SHA512
  
  7104c8fa85e47f16a2a9dd32a7ea3282cee114b64fbf03d18de7fdd0bfcebc0bdfa564f61e1f016a59c6e6510ca09988414e8f093ac4c5eec89829ee8545994a
- SSDEEP
  
  98304:kuT3g23jeZ/02YPuLaw5RoD1rfEQ3CPdOEabcgsOMld:kuDPTwLap14QzEijsvd
Score

1^/10
behavioral11
- Target
  
  locales/uk.pak
- Size
  
  657KB
- MD5
  
  361a0e1f665b9082a457d36209b92a25
- SHA1
  
  3c89e1b70b51820bb6baa64365c64da6a9898e2f
- SHA256
  
  bd02966f6c6258b66eae7ff014710925e53fe26e8254d7db4e9147266025cc3a
- SHA512
  
  d4d25fc58053f8cce4c073846706dc1ecbc0dc19308ba35501e19676f3e7ed855d7b57ae22a5637f81cefc1aa032bf8770d0737df1924f3504813349387c08cf
- SSDEEP
  
  12288:Yoff7plonpyOKtPXiNcnZx75kB3IjE8EmLvLNiXEJq//GW:YoffaXMd59E7
Score

1^/10
behavioral12
- Target
  
  resources/app.asar
- Size
  
  5.8MB
- MD5
  
  5e30723a422efdb2fc7ede232da94759
- SHA1
  
  68b4a4cde3d56d570377fa88fd58153d627a6f67
- SHA256
  
  abac724abd79ac61204382d05917efee61b601a060458c81b5b628aa5dfe0548
- SHA512
  
  af28ed9ce613d7c6d7f3f7908be89e81cb934b2b61f03ff7aeea3d63e642aa67665d55340f8dc10171a6aac7596ead9f81b6134dc5b7ecd2b7b94791f7c639ad
- SSDEEP
  
  98304:LnJ1orWxUrKym/SpoMtNGPiOzZx3GcDTyMUQa24nrnVtCvy:Lnz4rGMUiOzacwVEvy
Score

1^/10
behavioral13
- Target
  
  resources/assets/updater/updater.html
- Size
  
  423B
- MD5
  
  80ca9f9545a5cb816ec202c5ac7cc6d8
- SHA1
  
  383035241b86667aa8cc192d675706974e89eeef
- SHA256
  
  6ab2c4f63e9c6fb6b29315b9a0909f0977d935e61027603dc4773f1f673848ab
- SHA512
  
  a78d8c9ae1cc2e40a113c1843bb03efe7a09ab1125338681a580bf2457efa582a3c4c72c61b3a3e06849d9fe200a2005648ac8276533f583abf7fe03eb8a786a
Score

1^/10
behavioral14
- Target
  
  resources/assets/updater/updater.js
- Size
  
  606B
- MD5
  
  83b1bf75fece90a4c4c38666c825446a
- SHA1
  
  b84e504367405feeef33d136d7b6e5f43cbcd8aa
- SHA256
  
  8f27a967789167ec390e233e30dfb140cc0db66260fa786e725b074402a4621d
- SHA512
  
  d5808d242367151f7fab672313f9ac4f976a4f437b9f9a8b441f0322cc1cde922a74ef9f82ad2200bafd6793b270f6382ff858dd51e67ab7f9c363a76202277b
Score

1^/10
behavioral15
- Target
  
  resources/elevate.exe
- Size
  
  105KB
- MD5
  
  792b92c8ad13c46f27c7ced0810694df
- SHA1
  
  d8d449b92de20a57df722df46435ba4553ecc802
- SHA256
  
  9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- SHA512
  
  6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP
  
  3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
Score

1^/10
behavioral16
- Target
  
  vk_swiftshader.dll
- Size
  
  5.0MB
- MD5
  
  c3910a9fed38daf90b54b78ba39d0d40
- SHA1
  
  6e702fdea3d2989aadab102a2da6d3005cc135d2
- SHA256
  
  4a9ca5adbfdb3fd2cee0be0cef83ad21bfd8239d8ea0f8ef9849b8cf879d2d02
- SHA512
  
  65b72e9a209ead1a43344731163f39a3d05952b219c8bcc720d1256cc8adfadf938055a322ea951bf1a40172e12809fd487937a20df0c67d0497f671e1626ba0
- SSDEEP
  
  49152:eG7ixZvPbWjIXTFy1RYQZHJvuZBiDTwgvsrt5/PXd0kpmaN+WUf4CvB25zT7RCAt:b7iDPqjvzO1Lhgf49zT7grg4
Score

1^/10
behavioral17
- Target
  
  vulkan-1.dll
- Size
  
  899KB
- MD5
  
  9fdd70361cc0dcf3fda2020cad415b94
- SHA1
  
  94b6329920e8a70c5dca2d807401440ebea3e96a
- SHA256
  
  43b0db2ecb8147f6183021243f8cf233367c2689b601252834c20690ad092c97
- SHA512
  
  12214d8fc2af9ffac9dfa52eda2965e12a8f657eada8e70ff473a8c0d4f345e44740c0550d4f462ecec758ddb635d781368e9cf5f19098ff0eea872cf1a9db1a
- SSDEEP
  
  24576:IR9nl1crwjLAQw6Z5WUDYsH56g3P0zAk7:IR1l1culw6Z5WUDYsH56g3P0zAk7
Score

1^/10
behavioral18
- Target
  
  $PLUGINSDIR/nsExec.dll
- Size
  
  6KB
- MD5
  
  ec0504e6b8a11d5aad43b296beeb84b2
- SHA1
  
  91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA256
  
  5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- SHA512
  
  3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP
  
  96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
Score

3^/10
behavioral19
- Target
  
  $PLUGINSDIR/nsis7z.dll
- Size
  
  424KB
- MD5
  
  80e44ce4895304c6a3a831310fbf8cd0
- SHA1
  
  36bd49ae21c460be5753a904b4501f1abca53508
- SHA256
  
  b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- SHA512
  
  c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP
  
  6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
Score

3^/10
behavioral20
- Target
  
  $R0/Uninstall Silent Client.exe
- Size
  
  125KB
- MD5
  
  21f6e51ef39cc640579d3afbf05cbfd8
- SHA1
  
  6215ea94dd594f0019f201681d63a555a9e767ef
- SHA256
  
  89750861339989d521b6bf5ec7b6085dd3ee4be1e709978f6c77e34955447d31
- SHA512
  
  94f4a44a4247d60e13d7aaf205a83bd6ad4d8d1d72dc8d2e9cb4863d172086a8f0c57a54da093fa9d948ed1015fad620668f985cc3b06f6e1988a40dc9613787
- SSDEEP
  
  3072:6n77v00hEoDEtauiWf92E0EJE7aH2tvhOEA1RJCir86SrSrv6Ia3k:6740ITbm7s2t0EyL+ya0
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral21
- Target
  
  $PLUGINSDIR/StdUtils.dll
- Size
  
  100KB
- MD5
  
  c6a6e03f77c313b267498515488c5740
- SHA1
  
  3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA256
  
  b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- SHA512
  
  9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP
  
  3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score

3^/10
behavioral22
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1
  
  48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA256
  
  3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- SHA512
  
  c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP
  
  192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score

3^/10
behavioral23
- Target
  
  $PLUGINSDIR/WinShell.dll
- Size
  
  3KB
- MD5
  
  1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1
  
  0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA256
  
  9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- SHA512
  
  7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score

3^/10
behavioral24
- Target
  
  $PLUGINSDIR/nsExec.dll
- Size
  
  6KB
- MD5
  
  ec0504e6b8a11d5aad43b296beeb84b2
- SHA1
  
  91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA256
  
  5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- SHA512
  
  3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP
  
  96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
Score

3^/10
behavioral25

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks computer location settings

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25