Overview

overview

7

Static

static

3

c8a6bcf3b2...1b.exe

windows7-x64

7

c8a6bcf3b2...1b.exe

windows10-2004-x64

7

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

$PLUGINSDIR/pecvq.dll

windows7-x64

3

$PLUGINSDIR/pecvq.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8a6bcf3b2840fd53db6b2343ec71c1b

  • Size

    558KB

  • Sample

    240314-pzphtscd2s

  • MD5

    c8a6bcf3b2840fd53db6b2343ec71c1b

  • SHA1

    5a1fd5c3f8e4eb93df59417ce6cb5ccd6b4da7af

  • SHA256

    20c23031e9453e1217ca6cfafa6721f0ca9e43539af7da541ea750fc1daeead8

  • SHA512

    377bab96e1cd7329603f05823186d3ec15f9d2a969d4ce956df5ff7f3d86d8f860f11c9ba8fa05d95fe17abed50005b32f2c0c5aaa60bb422d976b1b1c6bb8ac

  • SSDEEP

    12288:iCmLFCzukYszew9ed9r65hXgisl5Cx6BTEJLK5vTik:iNFCikZJS9652CcgKBV

Score
7/10

Malware Config

Targets

    • Target

      c8a6bcf3b2840fd53db6b2343ec71c1b

    • Size

      558KB

    • MD5

      c8a6bcf3b2840fd53db6b2343ec71c1b

    • SHA1

      5a1fd5c3f8e4eb93df59417ce6cb5ccd6b4da7af

    • SHA256

      20c23031e9453e1217ca6cfafa6721f0ca9e43539af7da541ea750fc1daeead8

    • SHA512

      377bab96e1cd7329603f05823186d3ec15f9d2a969d4ce956df5ff7f3d86d8f860f11c9ba8fa05d95fe17abed50005b32f2c0c5aaa60bb422d976b1b1c6bb8ac

    • SSDEEP

      12288:iCmLFCzukYszew9ed9r65hXgisl5Cx6BTEJLK5vTik:iNFCikZJS9652CcgKBV

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/pecvq.dll

    • Size

      126KB

    • MD5

      8502136cbab8cfa9e25cca9e757ce2c4

    • SHA1

      4554e9fc74c3be3baf6eb4e44baeb886694e4757

    • SHA256

      a6150805e2cc881e85069cd92cc3147fce4536c1e572b7778a40cdebfe9bf2bf

    • SHA512

      32cb48a50a55efa3f040c2fb581987b4ee5ea63fc65df7a740f04520caf18a85c7fbdefd57be5e53c325c549cd11388b56aabf6932f413b6665a0b54b779f87b

    • SSDEEP

      1536:EGP/c6nfm5Ms9s+10/p5Z6aD5oVFkIAXOxKduXmbc9lInrijnQjqnAqCMK/aCXWQ:xEfZsu0/pD5oV+wccemntCMKSkWSO

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks