46cfa385c4578edbd0f8220dabfdaafd513b29e4893882b6877200004fb62006

Sharing

Copy URL

Twitter E-mail

General

Target

Outline-Manager.exe
Size

63.7MB
Sample

240321-t2d74afe76
MD5

646f8b15e09d772471e6fda48e2a31dc
SHA1

0d463c52c8b782b51ee044b5aa7f75d8fb0b5930
SHA256

46cfa385c4578edbd0f8220dabfdaafd513b29e4893882b6877200004fb62006
SHA512

567f23510032babbc7948a3222add69317a80f28d06219942b6de0ee0d5081361741f20eaa0855eacfaa8cac442a4721feb05aeec7a1cf7ea0e5ea2ac6d77a55
SSDEEP

1572864:DKBZz9Q97ViY7A/ORka8gciMd3DFXOeF6xbaChSw:DKBZz+nACkaz7YTs84DhSw

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  Outline-Manager.exe
- Size
  
  63.7MB
- MD5
  
  646f8b15e09d772471e6fda48e2a31dc
- SHA1
  
  0d463c52c8b782b51ee044b5aa7f75d8fb0b5930
- SHA256
  
  46cfa385c4578edbd0f8220dabfdaafd513b29e4893882b6877200004fb62006
- SHA512
  
  567f23510032babbc7948a3222add69317a80f28d06219942b6de0ee0d5081361741f20eaa0855eacfaa8cac442a4721feb05aeec7a1cf7ea0e5ea2ac6d77a55
- SSDEEP
  
  1572864:DKBZz9Q97ViY7A/ORka8gciMd3DFXOeF6xbaChSw:DKBZz+nACkaz7YTs84DhSw
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/SpiderBanner.dll
- Size
  
  9KB
- MD5
  
  17309e33b596ba3a5693b4d3e85cf8d7
- SHA1
  
  7d361836cf53df42021c7f2b148aec9458818c01
- SHA256
  
  996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- SHA512
  
  1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP
  
  192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
Score

1^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/StdUtils.dll
- Size
  
  100KB
- MD5
  
  c6a6e03f77c313b267498515488c5740
- SHA1
  
  3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA256
  
  b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- SHA512
  
  9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP
  
  3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1
  
  48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA256
  
  3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- SHA512
  
  c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP
  
  192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/WinShell.dll
- Size
  
  3KB
- MD5
  
  1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1
  
  0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA256
  
  9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- SHA512
  
  7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score

3^/10
behavioral10 behavioral9
- Target
  
  LICENSES.chromium.html
- Size
  
  5.1MB
- MD5
  
  6b84319ee8a0a0af690273d3d2dcbaf4
- SHA1
  
  857ca353e0582d100dcbc6cb6761bb4430d0cb90
- SHA256
  
  fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585
- SHA512
  
  26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a
- SSDEEP
  
  24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS
Score

1^/10
behavioral11 behavioral12
- Target
  
  Outline Manager.exe
- Size
  
  112.5MB
- MD5
  
  44890d0a2faba3284e5f6e6f126a62fb
- SHA1
  
  dcc2f853b07f97729c58c76adbcdab2cc219e876
- SHA256
  
  bd19adea4c82b2e6279c639ad2e4b02371c879772bd6345dbc0424c6e8422692
- SHA512
  
  b2410c1d59bc33234f5e7387321bb3be064e668edb1597a4b1f74203d1e6802db565ecbb00355a9906ea568c8d4e2ce4169684cf1af45357d82b3700358a2f84
- SSDEEP
  
  1572864:s1ZJlFa498vLhCyMf/tSy/5Xj0Old0m1DLeI0HFdonymF66mJdm1YAIVqDOXcHKn:6Fa491rh1DAonyPZAdWYAr
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  
  d3dcompiler_47.dll
- Size
  
  3.5MB
- MD5
  
  2f2e363c9a9baa0a9626db374cc4e8a4
- SHA1
  
  17f405e81e5fce4c5a02ca049f7bd48b31674c8f
- SHA256
  
  2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df
- SHA512
  
  e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924
- SSDEEP
  
  49152:sXMoHAsisjBFjJMLhHELxJm8ZU8W/GBj5Z535TMpinAizxkl/cD11bqCG7jHbOkD:srZOb8W/G5hnAizxz7NZy9AG
Score

3^/10
behavioral15
- Target
  
  ffmpeg.dll
- Size
  
  2.5MB
- MD5
  
  c229abeef7cf36252bd78117f83bc496
- SHA1
  
  156bbc60fd2b9924306feca667e0f0358fd6aa3d
- SHA256
  
  70a0ce7bd25d839160375f6d3411917dcbd58db77f4eccee9c890be678033525
- SHA512
  
  9064fe95b9d30aab308d0f29496e06276136beb71d20f6e31ac8cd40cedb80d50c8000bf4deaea9f05b08193f50c19a330ea29ad619d6817860faee3a311b5fd
- SSDEEP
  
  49152:ibW43cMsGgutSeUUcvT8kZSe/GeulfJ1tjM:aWMcMsGguSQkZSwAJLj
Score

1^/10
behavioral16 behavioral17
- Target
  
  libEGL.dll
- Size
  
  346KB
- MD5
  
  f08d0fea38c90581d8f093ff9edf66c0
- SHA1
  
  a8f914c8cbdde7dbb8d2b9bba58a6cc492e4281f
- SHA256
  
  8cee99cf4272c39af8f263db7a3247fcd8d4f82dd1c69e223af80b96ac05e650
- SHA512
  
  fe391968b5c311ccda6e63d060e6b3b92e327be75de96d6675a7db029a00cfb744d52b04fb2491b23400007bdd759db011e46c6d929136560ddaabe95234d9bf
- SSDEEP
  
  6144:ILhK9BySwdVitFhilqt5+RJztxw9GaEBoRQmZ4uVPZY8Fp2AqW13utaX:IoFUlqt5Gw9GaEX1uVPS88E3X
Score

1^/10
behavioral18 behavioral19
- Target
  
  libGLESv2.dll
- Size
  
  6.6MB
- MD5
  
  cf515f9098555f2696a83d12481e2e11
- SHA1
  
  cf41040bfe7dccc324461a677deaf3ec9347a0b0
- SHA256
  
  7c7831e07e3a43f122fa1c1bb2feea8063c254ba7c8e7a1a045c19b629d9c3a5
- SHA512
  
  df6e239f6391dbb6a2633d2157d17adbb6befb1e2053e0667d12d0510724be6eb9a26d0675706e8722d0d82e22afda30de73639aeb2764cc17437f31ea7c45a3
- SSDEEP
  
  98304:uQCeZO2KWaq1vYG9lUj2p4m45PFo5FSu7F5VaZ0NUzM2yv:uQCeZ5KeY6Gyp4moP+XQv
Score

3^/10
behavioral20 behavioral21
- Target
  
  resources/elevate.exe
- Size
  
  119KB
- MD5
  
  b178813ab4c1d4334f335207be1b3afd
- SHA1
  
  eb99e85b56c3753847b6a0154eadd836dea8a6e1
- SHA256
  
  f3e17af59c42208164f7a273c82bc224498a1c56eb63e8ed99d722686e06ce69
- SHA512
  
  de20cd1789dcb71d62f950f09e63b6d87ad1f951332a9e2fc98f768aecc5d089d021bf358c42bb51908e85bc5e609245229fda8deca3eeea2b5a873091682589
- SSDEEP
  
  3072:CVbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWls:WPrwRhte1XsE1ls
Score

1^/10
behavioral22 behavioral23
- Target
  
  swiftshader/libEGL.dll
- Size
  
  366KB
- MD5
  
  91b0188ffd4fd417e54ad2ecfe171bdd
- SHA1
  
  a57b524c0f2d2bcc5898a3853b7cbda6b4a5d92c
- SHA256
  
  095f047cc3efc4c74f3622db528ace87e3926886c7955f5953818ec9dab5d22d
- SHA512
  
  7602413e237a0571c6e52563d32a4d5ad7cdb982f8ebdc00e0b0b85d1bc50233ced9087c8db6145bee11fbdfe830b6f081dd9640db21831225c1dfbe85b9a7a8
- SSDEEP
  
  6144:qF0nvdtEhlxYHtGMrorw5Decb3i4dFTcNEkqZCC9uZa2pMSGdHewOFhlN:lHUrqecb3i4duC1uZagrffN
Score

1^/10
behavioral24 behavioral25
- Target
  
  swiftshader/libGLESv2.dll
- Size
  
  2.7MB
- MD5
  
  d862f717702cd30757b93750f02dba79
- SHA1
  
  460dcbb4ac891cb06f99e470e98c119cfe77e634
- SHA256
  
  a2ec00a6ba14c3d2b937cbba0d06d5915292555a72453ca636ec9f5af1794a56
- SHA512
  
  cc2e95833ab6ab9ee84dd1fe15560ddaf32478eacbbec6f35d12514bd9afdf94a36e9b75621bee2217b56953fe9c02aa9c2a3f12a92fd47cf901149ced257a64
- SSDEEP
  
  49152:Gs3nfPLk4FeVIflUL2PYvl9ph1Re8eB3AxmTIqITgGE10/F7DyiVjgXADSOrdzn1:GcfPyOZFuY5FLfRZ17N
Score

1^/10
behavioral26 behavioral27
- Target
  
  vk_swiftshader.dll
- Size
  
  3.9MB
- MD5
  
  af1a8b612eb0ec94c743c79dd4b1072d
- SHA1
  
  cafab29ff6c3b6e449139362de38bc6c094279c2
- SHA256
  
  c8b49cff77373ba15d0396cabc7b4bb7ffcdbf79f3671340340ed4dc8f5bc9d9
- SHA512
  
  02a3ca4a1427dcc2b4955e74c63d7f359c5208261e97f91eab206926b7cf8a8226016b31a1fd3c9b57c625a3fb34d8c0b1d4310c7bb6ccc53da30a28f5cbe210
- SSDEEP
  
  49152:VvxOL9xmyd46v8iMYPTNqCK5mx3uT8uudVtCd4vwF0oIWrIY29+Zl+VQ6m2eKD34:k8pR2lDP7Q5OunA4wg6OL
Score

1^/10
behavioral28 behavioral29
- Target
  
  vulkan-1.dll
- Size
  
  616KB
- MD5
  
  b53366cd3e17803c202be7c791702469
- SHA1
  
  3d176b4728ea9b3da617462b1c3f433549229b1b
- SHA256
  
  c724e8e9323f18e5141be3db365e313930529e4df00278e623c5c6543b4b1851
- SHA512
  
  b63d396dc25287c7f4b169ec211807b57768e000c0de8a63ce17bd9e37f56e347011147f1990666fd4525d4c05e9f6c136232d7237d381bc4bdabd690bf2eea3
- SSDEEP
  
  12288:4F/3dld7ZlB2/waHc8KivdcKrfYB5QGiXua8Z7Eo9vLwnxV:gtUFhrfwbiY7E
Score

3^/10
behavioral30 behavioral31
- Target
  
  $PLUGINSDIR/nsExec.dll
- Size
  
  6KB
- MD5
  
  ec0504e6b8a11d5aad43b296beeb84b2
- SHA1
  
  91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA256
  
  5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- SHA512
  
  3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP
  
  96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Legitimate hosting services abused for malware hosting/C2

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32