Overview

overview

7

Static

static

3

Setup.exe

windows7-x64

1

Setup.exe

windows10-2004-x64

1

$SYSDIR/gmi.dll

windows7-x64

1

$SYSDIR/gmi.dll

windows10-2004-x64

3

Apssm.exe

windows7-x64

1

Apssm.exe

windows10-2004-x64

1

Help.chm

windows7-x64

1

Help.chm

windows10-2004-x64

1

StartNow.exe

windows7-x64

1

StartNow.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9ca9ed1b2acfa9f2654c7376f16eba2

  • Size

    1.2MB

  • Sample

    240314-2hznpahc8v

  • MD5

    c9ca9ed1b2acfa9f2654c7376f16eba2

  • SHA1

    a18a35e2478bc360983ee0a0e27cc27a06956fd3

  • SHA256

    0dbf2d7e80cd2c6ad24460590548aee75790be397560001cc8e801b033bba0b3

  • SHA512

    4f604beeedcce74415186f6840c40ce8560414b1ab4498d7bbb9fe43f0c7e9994d5680b3f9e68602956f1208da4c1e21972258516b873a99a719e94fb8d1f5b8

  • SSDEEP

    24576:0biO604ENxqn6hOmdf+xjlQIQQsB4IbIGBNj6olXT8i:0b80/xqn6Qw+xjloB4IbIYGolj8i

Score
7/10

Malware Config

Targets

    • Target

      Setup.exe

    • Size

      1.3MB

    • MD5

      74fa1be330bc063e09b0bf8be5f22e00

    • SHA1

      f739244473cfdf51683e7b5aa6421104d9892c40

    • SHA256

      edb01064d2a220619e77e9779a9cc242f257ea47b354d2c6d16297b9117ee63d

    • SHA512

      457e520f40e791fc7da5c34b8054627cdc72d09f32bae0b5d270a730a2a9dd56877d2c0960c554013561aabc958f705361b43fb5e0633bc6ef323f40e6df3b5c

    • SSDEEP

      24576:Gcl4yj/IuxyCbDfv2oYwfesG5tfvKTU99cqzXn1FBFrpnlL5weVr5q8Vr:Jl4GdfZU5xvL9KqbTvpYexr

    Score
    1/10
    behavioral1behavioral2

    • Target

      $SYSDIR/gmi.tad

    • Size

      183KB

    • MD5

      0eca884d6247d3fd443d0eec57b8f695

    • SHA1

      519de4e046070850f828dd969f009891e1de24d7

    • SHA256

      7d0c5085606cb4c9b55479ecabf52aa35cc4660781e49f03f1975569602dfcbb

    • SHA512

      f1376a8b89f3f82159fea7e8b1d886b7a286cab8b0b8cd77f29fa7a2cea7250e269ab45692749d9dcd12c134f055f5c9fdb47aca34799a0fbc47389b84172741

    • SSDEEP

      3072:8oKD5oOtp4xDTiEnURpjRytD6OuroVadIfAHym74RTANoEGMKe271yYSQcUVFL:G5oOr4NpnwpjkAOe7dSGt74W+m21vXH

    Score
    3/10
    behavioral3behavioral4

    • Target

      Apssm.exe

    • Size

      619KB

    • MD5

      2eca3c3771c9ccd9aad68782b0057137

    • SHA1

      4f91dfda12b65cd371526935b4bfc2913d64fd88

    • SHA256

      380851e736d46996b141aa762172ca2cfa269bf47000cf694223478c8b1495a3

    • SHA512

      e1639b443d8e5a876a5abfe711cc6fb04278681648b358255957662d5e2d249b9823f3d442bd91849a896478e3079711f5caba0a03693c50e79a04cd57e97cc0

    • SSDEEP

      12288:Zmz/Zx5amSP5uB+c4aZjeM+sVnBIk8Lv6ZALZLozzOOSIpKLeEz1Vw4HxDsldPb+:ZYZx5amS4B+c4aUM+sVnBIk8Lv6qLSz2

    Score
    1/10
    behavioral5behavioral6

    • Target

      Help.chm

    • Size

      93KB

    • MD5

      f7cd2a7d670bdd5a73088a316c51e467

    • SHA1

      7b8d0150e3e6704dd83bbdaec08fd38a5f1fab25

    • SHA256

      bc01dc03a3a891225f4b6bc8441f3247d0825983d1cadce747a74a4ec7191ae7

    • SHA512

      b5bd8da52ac85aa844252b7fb0cc50c76a8a01286a1fa5778fa53a6d551657118edd6058610666053cdbed9ba3197f491ebae4895a194ba69e7034fbec1850a9

    • SSDEEP

      1536:zNFSGeqkkydYFhwGbVymPg0WpPikLnLNoMQtWIJqCqytjJ39kiyCF77lOu:RPeDkydkTDWJvnLe7tWIMXyt93tyCFHt

    Score
    1/10
    behavioral7behavioral8

    • Target

      StartNow.exe

    • Size

      7KB

    • MD5

      33968f881588c638cd759c16d3aea718

    • SHA1

      069e44f000f2611f76f3f4df4183712afb4bf325

    • SHA256

      2f2da60ecd84a9799953d5065166b99a3816fa86b4ab9301685035f11aa0c470

    • SHA512

      2a64e62325a46591c112458604b759ec97c772f73cc2df978d357f966fb1d2b6cbb1ab717da868e170a0430f4c2d8136cc75e775e3ab05896b7c0081137c1fd2

    • SSDEEP

      48:6GgLVQ2p4DMH8RlXk7T3OJD1R/wKlaPuECLjNA39mu1BB/4kkwc42ly/6Z6c6dBh:jIYAH8RlXWsDrlaP/CWtewc4uzHbgD

    Score
    1/10
    behavioral10behavioral9

    • Target

      uninst.exe

    • Size

      34KB

    • MD5

      c907cbd8fe527d8425b25768c1823481

    • SHA1

      f3ae361380323ba4e15f5ea8a32e23ae6e99347b

    • SHA256

      a89dfc7797913e6875fa1031cfca7332e7d2be4452ce2aaf1b426346189a2e64

    • SHA512

      d88fd233207ba1971652fb4ce36a474516fb9ad99518e4fcc2b0e039fd4a3331b8ef6d79168a811989da2b04e917d2af18be323ffe04df59b7adda432e3d1f76

    • SSDEEP

      768:KYanSb4pR38buHvhJr8LmTwfh1FjvAmRCV0D3iFoHLLkkJyoxW4MUidR:GSUquHvjjTcf9lIV0DikJySgUij

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks