e28bcb78e966081d32fedc3cc0b8e3c272edbb82933f4aeb4fa28b626820d6bb

Sharing

Copy URL

Twitter E-mail

General

Target

cdafd40ca595a808d276c5ea24ac232f
Size

467KB
Sample

240316-lcetbshh87
MD5

cdafd40ca595a808d276c5ea24ac232f
SHA1

952474558853107657afb371e2c181d5f9ab1701
SHA256

e28bcb78e966081d32fedc3cc0b8e3c272edbb82933f4aeb4fa28b626820d6bb
SHA512

49ed55273234da911abcb0c16d444bb57497f55befc67fa4cdf52c4d54f615373caad23f4ddf6ab04ca6119c3c3fb2d0071f258567d42c77a8c5aecdb29457a6
SSDEEP

6144:Ne34w12uoRlo2BFIJLNzOBS44lxytTsRRpTdwqQo5D8jCkjQC/EvK89E6Q:AxpJLxOBS4uMKh+Wk98vKOLQ

Score

7^/10

Malware Config

Targets

- Target
  
  cdafd40ca595a808d276c5ea24ac232f
- Size
  
  467KB
- MD5
  
  cdafd40ca595a808d276c5ea24ac232f
- SHA1
  
  952474558853107657afb371e2c181d5f9ab1701
- SHA256
  
  e28bcb78e966081d32fedc3cc0b8e3c272edbb82933f4aeb4fa28b626820d6bb
- SHA512
  
  49ed55273234da911abcb0c16d444bb57497f55befc67fa4cdf52c4d54f615373caad23f4ddf6ab04ca6119c3c3fb2d0071f258567d42c77a8c5aecdb29457a6
- SSDEEP
  
  6144:Ne34w12uoRlo2BFIJLNzOBS44lxytTsRRpTdwqQo5D8jCkjQC/EvK89E6Q:AxpJLxOBS4uMKh+Wk98vKOLQ
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/ButtonEvent.dll
- Size
  
  4KB
- MD5
  
  fad9d09fc0267e8513b8628e767b2604
- SHA1
  
  bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA256
  
  5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- SHA512
  
  b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/CustomBrandingURL.dll
- Size
  
  5KB
- MD5
  
  e4c1b74859c17671ffe1c0602fd56b44
- SHA1
  
  15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1
- SHA256
  
  2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156
- SHA512
  
  9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925
- SSDEEP
  
  48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/CustomInetc.dll
- Size
  
  21KB
- MD5
  
  81e20eb6c3a6002a805265ca751c7217
- SHA1
  
  db0e645b6d22b77b4117fb5612a0bf83c613c199
- SHA256
  
  3c0d6c3ee0784b2f10093a927335382f67050156136991f0ae05fa4484bab8f4
- SHA512
  
  ae6b594bd6cb42913484b5c5282757a9e8f52e76647bf3ef49555c2080540be683079f7994050a7baa45f7a2f57441fcd23353f351476f2891912ec5d2bfc2cf
- SSDEEP
  
  384:96WBKKhxKPJeXt0OxyfWB9VTZVWav3ARHKpK/V3STMvDya4m0Ac9khYLMkIX0+Gg:99nKPZfUZVzv3ARHKwhSYvWa4uL
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/CustomNSISdl.dll
- Size
  
  23KB
- MD5
  
  c3a070b59e4a67b5a12909da7be29037
- SHA1
  
  bc12f085aa1cf516a7f9b6e7f6aee1a065f3d153
- SHA256
  
  9d7e38855d6f4d6a9428a652f7af14434fbcfddd3451cf2a9303a77b2945a16c
- SHA512
  
  f490ecfa813667fd4b4a71d2ca8f37b47be842fa5d648c21ef89b6298a07a0b3dd98950757613121b33e1d9e135ff275ae863086ab421fbadf06c3a9bd71cd31
- SSDEEP
  
  384:/ZeZo3px0Z87m9H/PO9f9GoC1gpcewiXOiAIe:xe+r0Z6IHAfwoC1gxwiXVe
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/FloatingProgress.dll
- Size
  
  4KB
- MD5
  
  15bddd79574770cdbab1a9c13832d344
- SHA1
  
  dd63bf21db7049ba9773d0d06dbbb2d9b1ae914e
- SHA256
  
  5caf7bccc7fb43e43a50676a2466803cfb531f6416c6cb797750513770da6e18
- SHA512
  
  52f29c250a2426f43b67577ed5efe17992fa9ccb361cd1ad6ec19a60b02e2b7ee1c5a8131a29e37f84636d30916d6d2018ac769483861d1da3b0a1f4c91eb87b
- SSDEEP
  
  48:SBn9+qyt9ofRgODb/ZfKVT60l/5Lh4VzQqO3rwBRbN5:g2k+O3/PIhIc10BJN
Score

1^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/LuaBridge.dll
- Size
  
  8KB
- MD5
  
  60351c8bb166e71379f7268d25fba6d2
- SHA1
  
  e9ce69111b1a1c1f11cd99cc2cdff7c91b9096df
- SHA256
  
  0c0d9657ab06af5f556e944e333499dfde4fe119acb83cbed3d7744c9aac5b38
- SHA512
  
  42bdce0bfba2bf4b26e77fb33d6680fbbf43c891a4812ca873f621d822d3c93e0f25dd5cc3f31d0772494bcc0ca89ff93386847c0ffb87fab78f2de1d22df799
- SSDEEP
  
  192:ygwF1EUW6DchFSe5z9teSNKBWaeVzQ38WDOOW:ondW64bSqhfK1gQMWDm
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/LuaSocket/lua/ltn12.lua
- Size
  
  7KB
- MD5
  
  3dfc54ef5c4d74c9558b503ea5595d0d
- SHA1
  
  79016426ab7d0d6de6c2316b9ea02d8cbf5fc53a
- SHA256
  
  688b7d780603fb9aa75f80f178e8451aed347d0112fd526591108a2d4c98ab50
- SHA512
  
  f79cadff428c375ea174279a9ada186f02fe43518cf0549d24fb1cd3288c1d15377558e59bfe2eda55c7e7b204b04fd37a00a76dbdecb475ac09cfb331043194
- SSDEEP
  
  192:RYfAp6an3GBkiwbbCk2ecK1PAM5k7vxMK+IYlUGoLhA4jxkKQpLMH6Y6Fdhi6zqN:Rp2BkBCk2eYM6xMLXNBFT1wMuDzl2c
Score

1^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/LuaSocket/lua/mime.lua
- Size
  
  2KB
- MD5
  
  6042de20ee4cacb2089388f1038bb92b
- SHA1
  
  855102721c46abc38a5122c41bea1adb6ea296aa
- SHA256
  
  7d02031927ffd905700fd0c24e1ecd8ceb3ca8d8cfa85d49de2eaac9b43ffcf9
- SHA512
  
  cd5a00182affa97528db3c06b97d3c0c0827b35d6bbd1a48612709692a15fe3d935964c16091f373b38c19bdaf15c52968bca11c3eda5e8ea11ab421a219c661
Score

1^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket.lua
- Size
  
  3KB
- MD5
  
  f8d9f766ce71816a68c90bb12a29eed9
- SHA1
  
  eda6100bc1dfa511682d7f98c67342b48538eb17
- SHA256
  
  cb1bf14baa252740b8ab681189e746f401a2e2b06086469bb5884e5564b12861
- SHA512
  
  a2f04d91ed4eedce4aead5c07cd7c98e8cc5e3ce03ca3c70705968bdcaf6ce9277e3f3e2965a0dd66e817353511ea8dfb2199aefb207fe5b2fa86f831f9013f8
Score

1^/10
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
- Size
  
  8KB
- MD5
  
  a8fbe980f396bccfdaa5671a981e60cd
- SHA1
  
  c2ae1816545e52347d359475e846997056865db1
- SHA256
  
  cb373cd081a8ffbc71f67d359a0d2c7b8bc7a4db7ef720364700a534773b2bfd
- SHA512
  
  89332cd5079cc3b1e2ab2553e7425919a2463b7aacfc51371d0c431160dfc4a0b3812597cc1db43d476c5332d20334d1d904b1edcc2e6ab81415514abe9ff307
- SSDEEP
  
  192:Ib9n9btwO8RiYH21IcNhvU632OzjMxwcjvu0xT+FHWWkbssMPP3IaeevDZYgnVJc:Ib99twO84z1dfvU42O3MFjvu00kdM34x
Score

1^/10
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/http.lua
- Size
  
  11KB
- MD5
  
  811e12534358f97907079ec49db9d753
- SHA1
  
  cdecaa0560f73a613f405bf9ec75f16a6478f66c
- SHA256
  
  64480fe4bc09a432e5a25c10f5818206ff86d44a945045df3bdbf433289c0f8e
- SHA512
  
  b827a96c4d681f066c593953ec589cf3cf6f171d5f9474ed00823d92772c231dca39c753ddfcad5ae97bb4734206b3c53fb547a0a4056c652f6032ce945bf4cc
- SSDEEP
  
  192:SsHcg8Z5jISm65NFMh1KoKWperguRbkrCIzokDk+9yuPTTbVVaajhDyh3bbocLmh:SsHcgCj/BK0U6q5B4x8bHRlWh3HzqCsD
Score

1^/10
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
- Size
  
  3KB
- MD5
  
  b98814d6a43aa13dd01f78f3b573f4f6
- SHA1
  
  c5b11ac3b388424015dc24981b33301b5765efe3
- SHA256
  
  8b203683437af5a3417f1fdf0b14e404208507830510bce24883f2731e89855a
- SHA512
  
  cc38a537fd6a2aa69ca0902eeada5f446a81c3a3ee813bad0943b7cbc0414798797eb813945b776e06e5c8a52ed6b656e1450a0922d1e53906b53f9f25f01be0
Score

1^/10
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/LuaSocket/mime/core.dll
- Size
  
  52KB
- MD5
  
  4a4845ba1666907f708c9c10a31ec227
- SHA1
  
  1ebf626adc84147e5114885ce779f92d6eb68f3a
- SHA256
  
  a1ffee9687ab4a23a78b3251888aff09e2896d76f8d16d713367b265f125188d
- SHA512
  
  d009f5e2a2ecfbec5e5e788ade142d612846d0c99921774e4a11b060998dfb0680cf1e1a54604535d5560738093f9ae166866cb23eee5c7d9c4e5cc5a33e7464
- SSDEEP
  
  768:Hk1jtHTV0IuugoXCodH5LjciB9snJ1hTgZNno42L:HkhtHTeroXR3aL0toV
Score

1^/10
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/LuaSocket/socket/core.dll
- Size
  
  80KB
- MD5
  
  4bf7db111acfa7c28ad36606107b3322
- SHA1
  
  6f20b9f6663ce0c309a2ce60e718d64ffb6c75b3
- SHA256
  
  bfe8445c38ee71240e856f85d79e94123d7179bf43688de0e2a14e32e6ef21b0
- SHA512
  
  0a5e66a65b80e15d8198f2934c58227ae17680f0fbea9865b2f44af82a29c53d4f95cf9616b4dfd75202420eb73b7d962cf2c84fdad6ce26afe1eb4bb978d0b6
- SSDEEP
  
  768:4pOz0XSP1hSt5+5lKfZyDy3TygCk749NRAa1YwqJlfp8iB9jDEu/s5RPOothtlRp:wOws14t5CeTygmNRA0IVh05IoN3
Score

1^/10
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/LuaXml_lib.dll
- Size
  
  11KB
- MD5
  
  7292b642bd958aeb7fd7cfd19e45b068
- SHA1
  
  19a800620d041634abae5b5d096cb0e87ce4c188
- SHA256
  
  90f1bb98e034fcf7bfddb8cb0a85b27a9c9ddb01b926b4e139e1e8fc53d41d09
- SHA512
  
  bd758e0833454e0aa2af976ac94fde17c5401102c5991887cefbe8e337974381584c73e2d1e50e49263c55c3788e24dc7f8bd0b9d2a76a6cbe38e48dd9d6c44a
- SSDEEP
  
  192:YK/pDHjlL5Fv4k0CSigGpV8pVqVyoyhXnX1:N/L5FqCjpV8pVswXnX
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32