Overview

overview

7

Static

static

3

a9eb30ba2c...4f.exe

windows7-x64

7

a9eb30ba2c...4f.exe

windows10-2004-x64

7

$PLUGINSDIR/cangf.dll

windows7-x64

3

$PLUGINSDIR/cangf.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9eb30ba2cf32a3d9161488c7278ea4f

  • Size

    556KB

  • Sample

    240227-xngb3sgh55

  • MD5

    a9eb30ba2cf32a3d9161488c7278ea4f

  • SHA1

    659feea27b20514d5ac359ae1a3559a91bc22728

  • SHA256

    14355642089109237f87254f834134640e9d9f11bbcfc93ba4855144735dd36e

  • SHA512

    0bd49581ce0ce83637b76a688ea29602b1b8f87d7ad63b8760be8d14a4169f795043c23f597ff3b6fb7e18fbde74aa83f1c658ecd11e840033138da16ed00e32

  • SSDEEP

    12288:yGVa1fmhizx3Galj0JhLwGc1XbElrcWh/ZeeqBd:yGVcs+x3hjBB8pBeeq

Score
7/10

Malware Config

Targets

    • Target

      a9eb30ba2cf32a3d9161488c7278ea4f

    • Size

      556KB

    • MD5

      a9eb30ba2cf32a3d9161488c7278ea4f

    • SHA1

      659feea27b20514d5ac359ae1a3559a91bc22728

    • SHA256

      14355642089109237f87254f834134640e9d9f11bbcfc93ba4855144735dd36e

    • SHA512

      0bd49581ce0ce83637b76a688ea29602b1b8f87d7ad63b8760be8d14a4169f795043c23f597ff3b6fb7e18fbde74aa83f1c658ecd11e840033138da16ed00e32

    • SSDEEP

      12288:yGVa1fmhizx3Galj0JhLwGc1XbElrcWh/ZeeqBd:yGVcs+x3hjBB8pBeeq

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/cangf.dll

    • Size

      120KB

    • MD5

      7c6ea73f822feadebba47432847ad193

    • SHA1

      07d6963508159d66b2e27845b88239805bc848c3

    • SHA256

      5cb68c436da3f0575ea35c1d52d9d890be08fae46400ecb4973023090a601591

    • SHA512

      00106ea4768b88a97b115ddba68ca777320f23f4f630ccafe0c1109817dd717e7056a94871f484cf1bde117f423a691d8ad729e32cac069ec6812cda88766d8b

    • SSDEEP

      1536:PL63YAZ8HYSipNXE9EZrlmZbeBpXdRNLNgDVqWnwBjjZQ6MSv:PLf94SifOZQ5ADVqvjjZQZS

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks