General

  • Target

    2ff2ba5b37acf3f129832c9f1ceacc6c6148ed71726bc4e262d829ee80430192

  • Size

    37.2MB

  • Sample

    240310-y52vsabc57

  • MD5

    433c402f3e69138156c2414e5bce8e7e

  • SHA1

    2ebed0a3c1ca7e3b2afa8d4237c9fbdab7932317

  • SHA256

    2ff2ba5b37acf3f129832c9f1ceacc6c6148ed71726bc4e262d829ee80430192

  • SHA512

    0d7fd487d2ad6ce6276116ebba0aff2c8d0d5e48508bfe498b0ca05bf75db055e71365b044538eac986a7135c141a16928b16bf17348b4bfc05435d4df4afcd0

  • SSDEEP

    393216:/h2pRAr7xamF+OBSUephoHbgdNUvjlXNh4uXzv0mCL/HLCNhlvvy3FLs4XisisYq:kK7Ygsh2bVvjb7vq+NC3FLDiixD

Score
7/10
upx

Malware Config

Targets

    • Target

      2ff2ba5b37acf3f129832c9f1ceacc6c6148ed71726bc4e262d829ee80430192

    • Size

      37.2MB

    • MD5

      433c402f3e69138156c2414e5bce8e7e

    • SHA1

      2ebed0a3c1ca7e3b2afa8d4237c9fbdab7932317

    • SHA256

      2ff2ba5b37acf3f129832c9f1ceacc6c6148ed71726bc4e262d829ee80430192

    • SHA512

      0d7fd487d2ad6ce6276116ebba0aff2c8d0d5e48508bfe498b0ca05bf75db055e71365b044538eac986a7135c141a16928b16bf17348b4bfc05435d4df4afcd0

    • SSDEEP

      393216:/h2pRAr7xamF+OBSUephoHbgdNUvjlXNh4uXzv0mCL/HLCNhlvvy3FLs4XisisYq:kK7Ygsh2bVvjb7vq+NC3FLDiixD

    Score
    4/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      b8992e497d57001ddf100f9c397fcef5

    • SHA1

      e26ddf101a2ec5027975d2909306457c6f61cfbd

    • SHA256

      98bcd1dd88642f4dd36a300c76ebb1ddfbbbc5bfc7e3b6d7435dc6d6e030c13b

    • SHA512

      8823b1904dccfaf031068102cb1def7958a057f49ff369f0e061f1b4db2090021aa620bb8442a2a6ac9355bb74ee54371dc2599c20dc723755a46ede81533a3c

    • SSDEEP

      192:PPtkumJX7zB22kGwfy0mtVgkCPOs81un:E702k5qpds8Qn

    Score
    3/10
    • Target

      $PLUGINSDIR/TvGetVersion.dll

    • Size

      203KB

    • MD5

      465ad8b483c5e8bbfee17aa15ea3b488

    • SHA1

      ad984431df286cd6c10796b49c248e6afb4d55bf

    • SHA256

      943149b2cf028bbe593375e255ed834c129f97ed2dab9c3779d871446dc177df

    • SHA512

      8c137cff4aeeee2556233a07d7df9c183c38a36c40d904a89f22d73cc13b3941d71708da89dfe908f335f6c39e4c70b376dd437924e15ac697876f612bdf01d6

    • SSDEEP

      3072:W7dLGQVSy683WSfpcHsV8WhNtjdFj06lZA3+DKw/9bzNhT08g:ILGQVSXMfpysxhTZFj7lGUpNDg

    Score
    3/10
    • Target

      $_4_/TeamViewer_.exe

    • Size

      36.4MB

    • MD5

      d7e105ecbedde5b3c6420b347c708040

    • SHA1

      cfb1c2804cc4e86bb736968f9ac0ac1b0461b6e7

    • SHA256

      08aa88d57a31e804674938e014c6239d7c797e1fe1cb73c346eb0aeedf26ec53

    • SHA512

      f54cacc47424d01ef344656273bc13414485a3358717168e03fc83ad517146809972639206ae42660d2d227baa3d26297adccf4dfeae39aaa02295828b29e27c

    • SSDEEP

      393216:Bh2pRAr7xamF+OBSUephoHbgdNUvjlXNh4uXzv0mCL/HLCNhlvvy3FLs4XisisYZ:eK7Ygsh2bVvjb7vq+NC3FLDiixG

    Score
    4/10
    • Target

      $PLUGINSDIR/Base64.dll

    • Size

      3KB

    • MD5

      20dc0e30cc3a715e100f8662d09b71a9

    • SHA1

      c40b9158a8c8e28d4ce7ba73a6f2e69368afc389

    • SHA256

      015f30080a8a8ef5c9ee8751400100e3c8abb48d5c8ab5208a48daae39d22e9f

    • SHA512

      2e455dfa373f91b563dedd2e043f8730e686bb1a6ae45c488e5ea5b9cbb0c7658b767b2e751008757c62537f8b70396aae79721dcbf13e493daaf6cebc5500bd

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      15KB

    • MD5

      033ee34c40e8fa85bf2739bcb2f3e186

    • SHA1

      2ca942f35f77f37df3fc6097acac34f2e77341b7

    • SHA256

      c91c1796338a265b49039c0b2c7a312d764b99e5174fb2dae455ca54f8f41ec7

    • SHA512

      2204e0b8721b8d85c51bd068b1695b16ee096bfc1d1cd5843f48fd04032aeee2b6a91ce82978a4b3414f3d966ec5b36fb337a4149dae3a1d0445935d964d247f

    • SSDEEP

      384:ErC43tPegZ3eBaRwCPOYY7nNYXCT/Yosa:EmTgZ3eBTCmrnNAh

    Score
    3/10
    • Target

      $PLUGINSDIR/InvokeShellVerb.dll

    • Size

      4KB

    • MD5

      1a6e1ea7e90e50d9a18e034e7cde41a6

    • SHA1

      93148d67fc2cee4537f749a8c98a0735065241a8

    • SHA256

      2fddc8b8ab4bf4838ea374d25e4cb9e83362c3f1cb24f380137d14c814d56169

    • SHA512

      53d35e9e4a0d45a5b37da7952f7bf8c26666fa57748c3d292fd154e40a602f08ad55735cefe9bdf043e03e3eff3e58d603bd9980ef291b3c5f409228dd5ba872

    Score
    3/10
    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      174708997758321cf926b69318c6c3f5

    • SHA1

      645488089bf320f6864e0d0bc284c85216e56fbd

    • SHA256

      f577b66492e97c7b8bf515398d8deb745abafd74f56fc03e67fce248ebbeb873

    • SHA512

      214433597e04ca1ff9b4fe092d5d2997707a7c56f0f82c85d586088a200e4455028f3b9427d87b4f06f9252557d5be4b7a9138ea6a8d045df6209421fd8ca054

    • SSDEEP

      48:S46+/ZTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mCofjLl:zDuPbOBtWZBV8jAWiAJCdv2CmpL

    Score
    3/10
    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      fb062fbb33102c79fdfc815d634ea776

    • SHA1

      1f3d9ce02328297cda1aa1b1093efb5d5aa47ff4

    • SHA256

      77b6d60b2a3f5113a79bd28fbc6d662f37bc0481210194beda90461291ddb704

    • SHA512

      a5a3a0702be8b0d2037ea320cd1d231e6f2f5012178578ba40e06d16313fc32c431a5560efc8919f81ba4631d02e64a2b1faaeb6da374dd1b6ace8c344dc550d

    • SSDEEP

      96:H8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/23lkCTcaqHCI:cZIKXgk+cx6QYFkAylncviI

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      0ff2d70cfdc8095ea99ca2dabbec3cd7

    • SHA1

      10c51496d37cecd0e8a503a5a9bb2329d9b38116

    • SHA256

      982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b

    • SHA512

      cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e

    • SSDEEP

      192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA

    Score
    3/10
    • Target

      $PLUGINSDIR/TvGetVersion.dll

    • Size

      222KB

    • MD5

      b9e0c430596b2435971079edd15d3f0c

    • SHA1

      fc214c6757e3539729e42f754c6b9768fd44a942

    • SHA256

      c1ec07d1faf59ecdc0c8c1cd258b2feb6d41321471a8c1b10b00100c7106bd7e

    • SHA512

      93dc70fc6fcc4c0f4bc5fc5819446dc465360ef459a0be408bd07a78229f297da12d602b0667145d9716514e8f3da3582b1c4c0e3e9524e39c4a0c8fe7d4e25b

    • SSDEEP

      3072:DZiMB8EvkPz8LbdT3nB9pRdySGnXmEegCtzIItsYUl3UH4K+tv:NiMB8hz8djnBTySKWjW3tEYtR

    Score
    3/10
    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      18KB

    • MD5

      113c5f02686d865bc9e8332350274fd1

    • SHA1

      4fa4414666f8091e327adb4d81a98a0d6e2e254a

    • SHA256

      0d21041a1b5cd9f9968fc1d457c78a802c9c5a23f375327e833501b65bcd095d

    • SHA512

      e190d1ee50c0b2446b14f0d9994a0ce58f5dbd2aa5d579f11b3a342da1d4abf0f833a0415d3817636b237930f314be54e4c85b4db4a9b4a3e532980ea9c91284

    • SSDEEP

      192:5cdcpry0igQ1Ii1rzn6U4gbfW6irWP+vOg7XRSEi+OPLjte86jugnincl0Nr90Og:WqVibvTh4qnFP+OPEzinclP+

    Score
    3/10
    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      9b0db6a6056e8e51ac35e602aeab769f

    • SHA1

      b541c6d2635141cdc3a74f59d55db8df4a92e7ac

    • SHA256

      925d80c31702a95d58ede91ee97fd842de78ca6dde69156a6c1a755fba93cd5c

    • SHA512

      83fe9d346835940a37e0e0a18d041c9d13fc95a0e9ece3bc18e555cf0e8e7ddf7b42dba422b1e55ace31db3c9fc807e0b44e93b8f07f5acb943eaaf77b4f0ac6

    Score
    3/10
    • Target

      $PLUGINSDIR/dialogsEx.dll

    • Size

      12KB

    • MD5

      26068c948b8529a61286c1f82cd2bac5

    • SHA1

      5d07f7eb34f498eb57933fa3e92c53e38e96fca4

    • SHA256

      5ec7c1f4579229592fe7ec1e971d1fa1eb70a7fcd769c712b34e49e1c9f239d8

    • SHA512

      5390c888dc27070d91eb05fef00fd85c364b3413cd1015739c954a8238b097d0af73ce63743aa4bd51a775b737acc857e83e06bea3396942a101cca5edc94acc

    • SSDEEP

      192:86Kxv2/dKOWQqklwbJzN+eVP/nVV0lzPNDMZLTf:89xv2/d+klwt7nVazM1

    Score
    3/10
    • Target

      $PLUGINSDIR/linker.dll

    • Size

      45KB

    • MD5

      4ac3f0ab2e423515ed9c575333342054

    • SHA1

      a3e4f2b2135157f964d471564044b023a64f2532

    • SHA256

      f223d6c72f86544b358a6301daf60ccdd86198f32e3447a1860acf3f59f2dae9

    • SHA512

      8fbd5b4989be51c27fa15af155d2921bea9aa5d0557a22d4224256e678dfe7dcaa5f80917a748c31dc9c9a91573e4618e2497ccfd47eefd7a0fa08c12366a1e5

    • SSDEEP

      768:vmTLl3rmEgLMP/rLqgidfwHJQDEExmE+Ji4RdVt//w:vgLFm8OdfwpJS/fqt//w

    Score
    3/10
    • Target

      $PLUGINSDIR/nsArray.dll

    • Size

      6KB

    • MD5

      82d49c227928741f6f09c5cea3bde9f1

    • SHA1

      b0904368a5e94026d0ca5760d4577236f796051d

    • SHA256

      8bc5e75bbfa5a8f10526aec2af441153b2883d6d288726ed8f7c9af12a1ee02b

    • SHA512

      d4f588e3613886e3dab58330cd69ce7f24c39be2c4854cc8edfcef98e1324926fcde0d79df1a8fdf5e2bf9327b17f22a9fa1396568c0ace4e46d4f548fdc7530

    • SSDEEP

      192:mUODeqedh6EHFRA5sX7d7KnnpOKxX22v:2qqedh6EHFRksp7KpFX

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks