Overview
overview
7Static
static
3ba59469457...99.exe
windows7-x64
7ba59469457...99.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows7-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3$PLUGINSDI...us.exe
windows7-x64
7$PLUGINSDI...us.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDIR/Math.dll
windows7-x64
3$PLUGINSDIR/Math.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...st.dll
windows7-x64
3$PLUGINSDI...st.dll
windows10-2004-x64
3General
-
Target
ba594694577137cb43e51f0c27676899
-
Size
909KB
-
Sample
240308-dha4bsef9x
-
MD5
ba594694577137cb43e51f0c27676899
-
SHA1
ec65b39980f7a5b32deb241086839bd520280ec3
-
SHA256
ddd97f91c0c0f9f78005ca4a816d28310f8eb0edca64550f511f716ffcaa27f2
-
SHA512
a54c5d251658baccecafe84914b66c6c40a35484406f976bdd8421290f1603b522d9e83777caeb58bdce29368ffe470491b74fa7d63220a51c1d11dfedca60cc
-
SSDEEP
12288:E+FjMBswfp0R311OzMg4HR6GXI04HA50QkTG2FdYEs85gqcW/Ax4w6ER5vo2eiFh:E+lM6u0x3O40dAb2FdYKhcW/WPX5vwW
Static task
static1
Behavioral task
behavioral1
Sample
ba594694577137cb43e51f0c27676899.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba594694577137cb43e51f0c27676899.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/setup_zu_us.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/setup_zu_us.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/Math.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/Math.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/jsonparser.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/jsonparser.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/md5dll.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/md5dll.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nshist.dll
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/nshist.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ba594694577137cb43e51f0c27676899
-
Size
909KB
-
MD5
ba594694577137cb43e51f0c27676899
-
SHA1
ec65b39980f7a5b32deb241086839bd520280ec3
-
SHA256
ddd97f91c0c0f9f78005ca4a816d28310f8eb0edca64550f511f716ffcaa27f2
-
SHA512
a54c5d251658baccecafe84914b66c6c40a35484406f976bdd8421290f1603b522d9e83777caeb58bdce29368ffe470491b74fa7d63220a51c1d11dfedca60cc
-
SSDEEP
12288:E+FjMBswfp0R311OzMg4HR6GXI04HA50QkTG2FdYEs85gqcW/Ax4w6ER5vo2eiFh:E+lM6u0x3O40dAb2FdYKhcW/WPX5vwW
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
325b008aec81e5aaa57096f05d4212b5
-
SHA1
27a2d89747a20305b6518438eff5b9f57f7df5c3
-
SHA256
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
-
SHA512
18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
-
SSDEEP
192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
20KB
-
MD5
7569b23f19a0f5cb4c1d3b30a296c4bb
-
SHA1
c5f3546b3c795e46445393960694a2341692ddc7
-
SHA256
615bf32e15aaa8d58832df2298f75dd2b29ea5f25bf152c99630315cb618a31a
-
SHA512
11663bf180f9540ad247957b6793f8afd1b4e66f3b692b4ad05735f07459dd524571245928c40e26e3de691472508f5632fcd4add1eebad559d504eca32c08a9
-
SSDEEP
384:gBCwUYeQ8geEQyhUtXlcgCHe8DSMk8/UhU7ya4Lp0Ac9khYLMkIX0+GvRgbJ1:pwUEpet1cgCHe8DNN/UhUua4L
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$PLUGINSDIR/nsis7z.dll
-
Size
170KB
-
MD5
46e29660c591067e77276fa960625f57
-
SHA1
3c3206ec4415de4f09a2066a658fa12621e2ed74
-
SHA256
51f3274fcaf2ef42860f97bed95f407abc60ab31f81a42b38fb2ea1d9b0a434f
-
SHA512
ed7f9babcaa6244eb8f42350a522f75b5078b2854919e281215a4a4ef62ec4bb731a457f5da3a615419a575986eb96517a6c5238f65b2173138c7fd4ff122d83
-
SSDEEP
3072:/U9a+LOBZgLCJqPb83T6RhYI3Y3de57FjqFJL4A1QH9ykgt1c32pk:kaVUmcQGLYoY3KMlq9H8jk
Score3/10 -
-
-
Target
$PLUGINSDIR/setup_zu_us.exe
-
Size
720KB
-
MD5
9637625fa60d8e3590b14d9de05b46af
-
SHA1
b0542640621aeed8915cfc7c01cd9b3ba877915d
-
SHA256
fd2362c23b98eecb44b39cdc1506d72ee952d821766f2004abf2e93063fded63
-
SHA512
64bb5e64f9c9941e0b85292c6fbf303621b7a48583f19aa3efca4eb6c6ab898802f1bf426c9ca9df203c42c41f37374a1d5acfb7c6499ff3f16d4b457984f246
-
SSDEEP
12288:D174mo7UkItgNrOFc/6HtnK0F/y/ru3MKmFAgVJktmfX7VZLhTLkelHm9H:D17/o7UkI+VCtK0F/yTu3MP68JprVx5a
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/KillProcDLL.dll
-
Size
20KB
-
MD5
de2b06d8abcd4a1d3330e415ce638a6a
-
SHA1
2f1bf738915b288530dedb861f4ea4f60069a91f
-
SHA256
8f62633831a326174f05e89503e42a493aa834fa6d7ba7138d9d57ac5873512d
-
SHA512
8dbc0edb71d6acc327418270b33d5627d7940ce406e54152af9f6c8f6d90c7239aa647a0e1f4769d0aa8bd3e38d60643e6356ff7a5ccf7dc44c5617f72277b70
-
SSDEEP
96:J1szPlsFYmIGExrjwIqiwZePAYyU76b+4d:Juztr+8wzg7xN4
Score3/10 -
-
-
Target
$PLUGINSDIR/Math.dll
-
Size
66KB
-
MD5
b140459077c7c39be4bef249c2f84535
-
SHA1
c56498241c2ddafb01961596da16d08d1b11cd35
-
SHA256
0598f7d83db44929b7170c1285457b52b4281185f63ced102e709bf065f10d67
-
SHA512
fbcb19a951d96a216d73b6b3e005338bbb6e11332c6cc8c3f179ccd420b4db0e5682dc4245bd120dcb67bc70960eab368e74c68c7c165a485a12a7d0d8a00328
-
SSDEEP
1536:0P43WZ4Ql60gam+2MwRmPeqFVHbQH0ZZ1Iet:0wU609VMH0T/t
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
20KB
-
MD5
2f94245152dbd233e248909f9c01c578
-
SHA1
ab4e5879c001b36a2f9ff214946599fd015edda9
-
SHA256
4c4d85eb9725fc7fade03467990e3dd9671c29a7870c97e69babc2cb3c9adef9
-
SHA512
f92830de27d6663be5e0df9e32cd88732bc7ee93b14c1ded65258c325d22436400801aff1124f40400c6c3b3c16e71deb08436714716f3888d13a8a6b6a32231
-
SSDEEP
384:vBCwUYeQ8geEQyhUtXlcgCHe8DSMk8/UhU7ya4L+0Ac9khYLMkIX0+GvRgbJ1:owUEpet1cgCHe8DNN/UhUua4L
Score3/10 -
-
-
Target
$PLUGINSDIR/jsonparser.dll
-
Size
32KB
-
MD5
2067be2244a8a8d6d6229537076a4830
-
SHA1
15a27838b7d791d19d4e1e2566b3eb94938c08e9
-
SHA256
7affb86cc94deba6b61a7e85337264ef8e19ef6b8a83904e22bafecbc4e1bed2
-
SHA512
42a2afd0dc4f0128231fbbf3b428a29bc20ca55f0f36ed02056666b8b6bb5116b409142fd5609528fc323b9987681494803dff492824bc322b94d08d370603a2
-
SSDEEP
384:/iPnzsAzMhAEDKha6zmoh7ja939CH9aR5M+SKseGIJGVHHCldw9t+:/iPYAzMhAEsVj0NNHseGIgHiUt+
Score3/10 -
-
-
Target
$PLUGINSDIR/md5dll.dll
-
Size
8KB
-
MD5
a7d710e78711d5ab90e4792763241754
-
SHA1
f31cecd926c5d497aba163a17b75975ec34beb13
-
SHA256
9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2
-
SHA512
f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0
-
SSDEEP
96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV
Score3/10 -
-
-
Target
$PLUGINSDIR/nshist.dll
-
Size
39KB
-
MD5
56bf72527ae93d35cd8f8778ad29902b
-
SHA1
3248a7ca75a3c2e715a13b455ccc5d45e04cf9b9
-
SHA256
77f38240d729758f04fbd6ac00dc638e99ba27c42fa48200c99f51449e245343
-
SHA512
c8ea0445bb83bb67dffa85b167fcc9b6ea874493442db5707e939ee0f2864a0d464ee605de486febffc27b60cd3c35a91302f226f6c4f13186119687a7e6000e
-
SSDEEP
384:Rb8/5X+ZjXpv4jNfoOZdd5P79dHwvwXTnxsEVRhCSkX4vJtgJ4LxvI5PMC3vlhw:ecOBxTTBdHwvwXtsQRhCX4vG4RIKKw
Score3/10 -