Overview

overview

7

Static

static

7

droidkit-en-setup.exe

windows7-x64

4

droidkit-en-setup.exe

windows10-2004-x64

5

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...Vs.dll

windows7-x64

3

$PLUGINSDI...Vs.dll

windows10-2004-x64

3

$PLUGINSDI...ib.dll

windows7-x64

1

$PLUGINSDI...ib.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

1

$PLUGINSDI...up.exe

windows7-x64

7

$PLUGINSDI...up.exe

windows10-2004-x64

7

$PLUGINSDI...00.dll

windows7-x64

1

$PLUGINSDI...00.dll

windows10-2004-x64

1

$PLUGINSDI...00.dll

windows7-x64

1

$PLUGINSDI...00.dll

windows10-2004-x64

1

$PLUGINSDIR/nsDui.dll

windows7-x64

3

$PLUGINSDIR/nsDui.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows7-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

$PLUGINSDI...ll.exe

windows7-x64

4

$PLUGINSDI...ll.exe

windows10-2004-x64

5

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ib.dll

windows7-x64

1

$PLUGINSDI...ib.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    droidkit-en-setup.exe
  • Size 19.5MB
  • Sample240407-jadgdagd38
  • SHA256 ae2001d5b60a2f0bd8e72c0106363950cd9f68e9ce42b9a40b0af26814908809
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoveryupx

Malware Config

Targets

    • Target
      droidkit-en-setup.exe
    • Size 19.5MB
    • SHA256 ae2001d5b60a2f0bd8e72c0106363950cd9f68e9ce42b9a40b0af26814908809
    • MD5 SHA1 SHA512 SSDEEP
    Score
    5/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/BgWorker.dll
    • Size 2KB
    • SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/CheckProVs.dll
    • Size 7KB
    • SHA256 ee7e26894cbf89c93ae4df15bdb12cd9a21f5deacedfa99a01eefe8fa52daec2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/GoogleTracingLib.dll
    • Size 36KB
    • SHA256 ad873f1e51e6d033e5507235ec735957256ebeeb0d3f22aa0b57bb4bd0846e4c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 df5ae79fa558dc7af244ec6e53939563b966e7dbd8867e114e928678dbd56e5d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/dotNetFx45_Full_setup.exe
    • Size 982KB
    • SHA256 e434828818f81e6e1f5955e84caec08662bd154a80b24a71a2eda530d8b2f66a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12
    • Target
      $PLUGINSDIR/msvcp100.dll
    • Size 593KB
    • SHA256 934d882efd3c0f3f1efbc238ef87708f3879f5bb456d30af62f3368d58b6aa4c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral13behavioral14
    • Target
      $PLUGINSDIR/msvcr100.dll
    • Size 809KB
    • SHA256 ae3cb6c6afba9a4aa5c85f66023c35338ca579b30326dd02918f9d55259503d5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral15behavioral16
    • Target
      $PLUGINSDIR/nsDui.dll
    • Size 10.0MB
    • SHA256 3be54dea5aedc0d8d16d6c4bd4e046e2d93bfc550a1a035a94768c2d5901e327
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral17behavioral18
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 6KB
    • SHA256 193d396fc7be5fed9d585de3c43e23d640c1dce725499f0274b3898c248545aa
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral19behavioral20
    • Target
      $PLUGINSDIR/nsProcess.dll
    • Size 4KB
    • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral21behavioral22
    • Target
      $PLUGINSDIR/nsis7z.dll
    • Size 313KB
    • SHA256 e4ab3064f2e094910ae80104ef9d371ccb74ebbeeed592582cf099acd83f5fe9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral23behavioral24
    • Target
      $PLUGINSDIR/registry.dll
    • Size 24KB
    • SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral25behavioral26
    • Target
      $PLUGINSDIR/uninstall.exe
    • Size 8.1MB
    • SHA256 5bd33a6ba5e012c3e6f8ccc5ab322728d5df31e9e7b74daaf327aa54fc95028f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral27behavioral28
    • Target
      $PLUGINSDIR/BgWorker.dll
    • Size 2KB
    • SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral29behavioral30
    • Target
      $PLUGINSDIR/GoogleTracingLib.dll
    • Size 36KB
    • SHA256 ad873f1e51e6d033e5507235ec735957256ebeeb0d3f22aa0b57bb4bd0846e4c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks