Overview

overview

7

Static

static

3

e15fd8e2cc...ec.exe

windows7-x64

7

e15fd8e2cc...ec.exe

windows10-2004-x64

7

$PLUGINSDI...kp.dll

windows7-x64

3

$PLUGINSDI...kp.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e15fd8e2cc18f0c2c937f113555b4cec

  • Size

    677KB

  • Sample

    240327-lrn1jscf2z

  • MD5

    e15fd8e2cc18f0c2c937f113555b4cec

  • SHA1

    6aec04a3c75a7e200c76c34a3d92528bd4df3496

  • SHA256

    249cf8e9f50123fd234cb4869a4bae985e6e51b37a493ae135e4367cf599a295

  • SHA512

    73e2d6dd201697b78228b02a652a2674de76cffcf9309ffbed171b21c447d7ccc494b6d91034d88a3674c99044d3d366795467be442a23ffc03ad4ab5b7479b0

  • SSDEEP

    12288:VREHlVl0pQUlIo20J4WcLbq4MAmIhMrSbaXDL3CmXA+xeS6AeDan:V6N0TlIo20J4WcLG4M6qS+XDzCErd6AH

Score
7/10

Malware Config

Targets

    • Target

      e15fd8e2cc18f0c2c937f113555b4cec

    • Size

      677KB

    • MD5

      e15fd8e2cc18f0c2c937f113555b4cec

    • SHA1

      6aec04a3c75a7e200c76c34a3d92528bd4df3496

    • SHA256

      249cf8e9f50123fd234cb4869a4bae985e6e51b37a493ae135e4367cf599a295

    • SHA512

      73e2d6dd201697b78228b02a652a2674de76cffcf9309ffbed171b21c447d7ccc494b6d91034d88a3674c99044d3d366795467be442a23ffc03ad4ab5b7479b0

    • SSDEEP

      12288:VREHlVl0pQUlIo20J4WcLbq4MAmIhMrSbaXDL3CmXA+xeS6AeDan:V6N0TlIo20J4WcLG4M6qS+XDzCErd6AH

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ktvrqkp.dll

    • Size

      158KB

    • MD5

      3c169ae0cc799f03fad14ebcc05f3d96

    • SHA1

      ec4839ee8458429f57749f245045fc1deb30d832

    • SHA256

      82bb5429daf7e9b364670303176370ed5d85e375ec249c6457655dbb1fd9dfc0

    • SHA512

      4a9e97dafa1f6a0df9c79496769a19a124360111d95d503ba519c4e960c000ad69d284b5bc2001f4c51e4b9d2ce50ec20981533b984bf7562c7cacf79d8c7ab9

    • SSDEEP

      3072:Bhp/L6MadCMGlNPm61Fu5xLGH2+Lw5H8Q52OFNz:BhBDl9mVxk2IP3OFN

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks