Overview

overview

7

Static

static

7

c17046e52f...2a.exe

windows7-x64

7

c17046e52f...2a.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DTDJ_1.exe

windows7-x64

1

DTDJ_1.exe

windows10-2004-x64

1

Game.exe

windows7-x64

1

Game.exe

windows10-2004-x64

1

RGSS102J.dll

windows7-x64

3

RGSS102J.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c17046e52fd81bc33c946b079424492a

  • Size

    2.6MB

  • Sample

    240311-yfj9face3x

  • MD5

    c17046e52fd81bc33c946b079424492a

  • SHA1

    d306b5b08a97eda93ddc22370fa33d8ebe8af135

  • SHA256

    20744254800e89602224118e8361913395155488eb3ecf9f2fe0f59eb2ba169e

  • SHA512

    4f6587f260e1c0844367f43ae5ef67fea5c69f922717c261d62b3727b39c4cc0a3b0ccfe301be7de15c2468489aa6a31a46e436e6b46fdb18c304e25c53811ac

  • SSDEEP

    49152:eOswvG02BqNip8FhWMcEWkeVMSHBF8z+G742Rqu6wgLEBxX8hxSvTIONRz:eue02BnPMzheVx8p3qogLy8hbEz

Score
7/10
aspackv2

Malware Config

Targets

    • Target

      c17046e52fd81bc33c946b079424492a

    • Size

      2.6MB

    • MD5

      c17046e52fd81bc33c946b079424492a

    • SHA1

      d306b5b08a97eda93ddc22370fa33d8ebe8af135

    • SHA256

      20744254800e89602224118e8361913395155488eb3ecf9f2fe0f59eb2ba169e

    • SHA512

      4f6587f260e1c0844367f43ae5ef67fea5c69f922717c261d62b3727b39c4cc0a3b0ccfe301be7de15c2468489aa6a31a46e436e6b46fdb18c304e25c53811ac

    • SSDEEP

      49152:eOswvG02BqNip8FhWMcEWkeVMSHBF8z+G742Rqu6wgLEBxX8hxSvTIONRz:eue02BnPMzheVx8p3qogLy8hbEz

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      3KB

    • MD5

      9c3488b5e9655d1837c3963ecec33f70

    • SHA1

      f0fa9b4c29e75c6e4419c4633d09f2797aee2ef3

    • SHA256

      05ef4beb7fab9d04c1fb251874166fa2d73a34b4a7f2b145d37a2fd00c88979a

    • SHA512

      6af9f88d65d2279a71620f2a656062b1737b3a9a1692ed4e5887bdee891ce08d21c5c0b25ab3acbe6da9fe255dcd7f8a517c2751e73dc56add216740c945e4a7

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      b18dfaded8f6d2380fdfd8f6b6969211

    • SHA1

      969fa0e906240ab1123254feeb833c275626cf76

    • SHA256

      747d0222b652dbfc85e0de4f8486473662d325a55e32c7eacb91e53e37ceba58

    • SHA512

      25fb09b8657997d31e61c908f1cd08357c1a1b68bbb1ba377e87b6a3eb347a2ef96c1a771b6c4332853abb33728c55c83efa73df5da03f3dfc132f8a69a2886c

    • SSDEEP

      192:66JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTLK72dwF7dBdcQOz:66JaVh4I5rpPbTL+BdhO

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      9b17a13f814b137f88b961c087858063

    • SHA1

      c290dd3139b79aa340aec3ed3d674160433035e1

    • SHA256

      e54792a179a06acbb9b69c117ee804dce070505d1853d6e7d512f2a055a801b2

    • SHA512

      3a625f5f13e344c24973c79c074d1ced4d9206f87f392dc7c8f0c116d0f2b878b60340e2377d0240c47f0e34e25e4e3af8b196bbca1c6a29a0f51d8408e8b0ec

    • SSDEEP

      48:SnNQ/z+vUML8eYXICmlmGYKHz0JSpXSxwo6mpwzcR3RqG8aEJcABofgMGKO:Bz+MM4eqmvz0JScx56mpwzAhWcGV

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      810f3a0aefe36a9f63e29e604bea91a9

    • SHA1

      2559d3d4adf51f8ecbe2d07e669e344eb7d0bd80

    • SHA256

      f160eb7a1b4eb8d2e99e7424ae058acd81ba5019e43cbfa0ce81e3102b356779

    • SHA512

      836b73c38ab60260e1bc81ebf8347e14d02453fc361b7d6f10f137287b8189f8bc43758ce2d9def8fd1c71112aab7ef1930af2d64ae69f6d4e58a6fe17b310bb

    • SSDEEP

      192:CO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1argMO:XKAFERdlxhGRYUzqZar

    Score
    3/10
    behavioral10behavioral9

    • Target

      DTDJ_1.exe

    • Size

      2.4MB

    • MD5

      07f350b9cff7e0b602020bf8455ad814

    • SHA1

      4c7f85c441488d67f1f7563df6d13d6f696f5cd3

    • SHA256

      bdc8024aa9e5a3ca59b0774b07fe70a738d9f08fd1c0e87670201af0f0bb16a6

    • SHA512

      be1bf5f23817828bda312c46efa97f84e4fe37d958be19ba923da58fe81d02d510a7c70a888815c83144de5d0996f9c7593ccd7cb39c72ecdf5c739962f655aa

    • SSDEEP

      24576:pAOITrkGIz36Q2sbIfi71i2HNtvjexqmTEC5Nn6b6cQiSH5REzwD813MzcbHby7s:pVwrkVLbL1frdCYR7SbHYbHG5CH

    Score
    1/10
    behavioral11behavioral12

    • Target

      Game.exe

    • Size

      68KB

    • MD5

      c22b8d8acb738776d94ea0cc10277144

    • SHA1

      4dcc713487826be8c67f614d0f90b0ab59d2215c

    • SHA256

      0ed9b5139edb0ad0f0f4b5b88dd0265ddbf56d36d6f173d6a22f3b23e8212e22

    • SHA512

      9d6c734e6fb6edc4d7944345293332c2b9637c67e9abba359553710189d007051e5f0084aa919e70a9d2fa0c328e92c8c06d398074c7d64a255b9227fe4468e2

    • SSDEEP

      1536:LJvdezw+O3FEsLJErMKlZjaBER4rLs1Y:LJvdezwVoMKlxlRMYY

    Score
    1/10
    behavioral13behavioral14

    • Target

      RGSS102J.dll

    • Size

      645KB

    • MD5

      375f3d5ad26073d7929ae6674bc40a2b

    • SHA1

      088b32c353ef44c079df9bb2c9e8ec6f9aee6035

    • SHA256

      073328d7837360ab65899501bf482b4de93a82d670b69ccda9441af1b77b2951

    • SHA512

      8b4d502b02cf6b4ac04a4fda7d0a4e2aa0ac228561bda9ada2751fa3840b67cb46cebe0743950feaacda8d8734e209a637b0287d29cdea1a0082a08ece4035d3

    • SSDEEP

      12288:3w8mkCV+cRfv32GHL/ObA2j7ytv9NL8If9zvPEUPeHCKslIQWAn:3wzV+I/YAFQg9zvP9eHCK7hc

    Score
    3/10
    behavioral15behavioral16

    • Target

      uninst.exe

    • Size

      60KB

    • MD5

      add0197e19a8802370ac61e88e61654b

    • SHA1

      c4f00bf24bc26c2ea22b8269bcf8867eaf258255

    • SHA256

      f36d1451e5d2b1ec184f2232fcc3458935839e95bd5c103c94a0a8624f68e5d2

    • SHA512

      3ec2eff17c6b482417012e4f442c342105ac5272d1f3dd0c688234f0acf8c41b84bb33bc9a012cbc99ddd7fa57174fd8951d1156cd8ea880742e44f9b52ebc98

    • SSDEEP

      1536:VKRhoEXBpnbfRpQmJ6YRNVs1ECy3lvUyS1m:MjJ7nbppQmJ6qgEx1vE1m

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks