Overview

overview

3

Static

static

3

bin/Antlr3...me.dll

windows7-x64

1

bin/Antlr3...me.dll

windows10-2004-x64

1

bin/Common...re.dll

windows7-x64

1

bin/Common...re.dll

windows10-2004-x64

1

bin/Common...ng.dll

windows7-x64

1

bin/Common...ng.dll

windows10-2004-x64

1

bin/Entity...er.dll

windows7-x64

1

bin/Entity...er.dll

windows10-2004-x64

1

bin/Entity...rk.dll

windows7-x64

1

bin/Entity...rk.dll

windows10-2004-x64

1

bin/ICShar...ib.dll

windows7-x64

1

bin/ICShar...ib.dll

windows10-2004-x64

1

bin/Micros...pt.dll

windows7-x64

1

bin/Micros...pt.dll

windows10-2004-x64

1

bin/Micros...or.dll

windows7-x64

1

bin/Micros...or.dll

windows10-2004-x64

1

bin/Micros...or.dll

windows7-x64

1

bin/Micros...or.dll

windows10-2004-x64

1

bin/Micros...el.dll

windows7-x64

1

bin/Micros...el.dll

windows10-2004-x64

1

bin/Micros...eb.dll

windows7-x64

1

bin/Micros...eb.dll

windows10-2004-x64

1

bin/Micros...er.dll

windows7-x64

1

bin/Micros...er.dll

windows10-2004-x64

1

bin/Micros...nt.dll

windows7-x64

1

bin/Micros...nt.dll

windows10-2004-x64

1

bin/Micros...nt.dll

windows7-x64

1

bin/Micros...nt.dll

windows10-2004-x64

1

bin/Micros...on.dll

windows7-x64

1

bin/Micros...on.dll

windows10-2004-x64

1

bin/Micros...on.dll

windows7-x64

1

bin/Micros...on.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9aeb49523234405f29e6a5ed83cc99dca6631f005790684ad12a52feb6639eaf

  • Size

    14.3MB

  • Sample

    240409-hy6bmahb65

  • MD5

    6035667ebb5c444ab91627037d968d1e

  • SHA1

    d371becf3b58dc96a05e4f8a07bf981614b84222

  • SHA256

    9aeb49523234405f29e6a5ed83cc99dca6631f005790684ad12a52feb6639eaf

  • SHA512

    13c9cd10f523bc700ae7cc3ca9f5ee180d84834bdacc1bd9b21563b109286387e2d55fd7a9361f077768afebcc670eb98f94dff382e7313e27cbe86bc2169c6c

  • SSDEEP

    393216:8UVgb0bySAgouUOhde46fHJ7TklbaId1USynPcPmCPZhNMe3:84gAbVApuUbZfpXk1zCnUPBPZjMe3

Score
3/10

Malware Config

Targets

    • Target

      bin/Antlr3.Runtime.dll

    • Size

      100KB

    • MD5

      12b74420b87ecfbba33b6ada0ab07ff2

    • SHA1

      551e39ff8e4d6548746d5926093b8b7730c70f6f

    • SHA256

      8c073bb62edf517b5476c68197c4742ca921bfaad423e18c3031d70336a0ec29

    • SHA512

      72b45512dedafd09439972888d4d230c515147d600198e6e937a5826e3cc56bee73c91f5715c6e66ca492bd9910e1447da5974eebe1d20e89a59ba2a84e05150

    • SSDEEP

      1536:tPWktPa7wu2+XZeqwMcyTyu3zWPyspt1w/gwuDSlJFZZ550ZC0mVSGzIuvE:BxtPaML+qJu3zWPyr/ggtYjV

    Score
    1/10
    behavioral1behavioral2

    • Target

      bin/Common.Logging.Core.dll

    • Size

      9KB

    • MD5

      df2b27cdaa60c6abbbd77f5db7515b4f

    • SHA1

      9b0c85873cb7da8cbd45d5a11c1bf52b66b1343b

    • SHA256

      d2f34058e9c225e94164008735227d5a97b200507da79bb58a4e60e3b098707b

    • SHA512

      058de9b54bb6f1c6dda05171e630cd44ef946fa8320cbce211e2f7fae310acfe02878838e3e9ba8a0e128b62336421516ae6f677f79f7259c583e64c15ca4438

    • SSDEEP

      192:JWw2SGGh3mQQQQQbfsqSSra0G+xEMMPoLMG+5nhCADvW:XXXh3JkSrH2PsSLDvW

    Score
    1/10
    behavioral3behavioral4

    • Target

      bin/Common.Logging.dll

    • Size

      43KB

    • MD5

      f1cd060ed56b29b020528d4af246a25c

    • SHA1

      33cf4efad183d613529be36a18e50099aa52bf19

    • SHA256

      917a77065de94661f6997d8d301db30130033670b7d5d9c00a212904f393a00f

    • SHA512

      2b7948c61a1621a112a45ec32f5a920ec6460678fceea9873cb35266c5fe68084d4fb8965c7c0794c0edee0f2356ad2331445246e000ae44393a254e362f6516

    • SSDEEP

      768:07TuKk/XQZy7PCN1cYyT6sR7TuPocHiz4mZ2bne/2Dx:07547Q0eompmZ2be/29

    Score
    1/10
    behavioral5behavioral6

    • Target

      bin/EntityFramework.SqlServer.dll

    • Size

      606KB

    • MD5

      b9e43b7ac178bf49fc3c7c9de0f6e031

    • SHA1

      4cc846edd69aac12e1889c1062c25eb30b57114f

    • SHA256

      a1bf6c9e3820e83f43e9f20dd7d9b0a3362a93146f0afe0b1330185e2d51b0cb

    • SHA512

      145d229ae1b95861cd573a157bbfa3233e7d6e0b290fb0251101536c45f1d8e3a0d4dd4986e789dc909586682abc6345e0d3f6de6fb9fa2f3b85cebcc797cde4

    • SSDEEP

      6144:f/U3GfiLi/PQG2puGeqVmjaVmnS4bKO68iOJzrhfyxKdPHI1mpCUO:nUGiLDO689z9f/pTO

    Score
    1/10
    behavioral7behavioral8

    • Target

      bin/EntityFramework.dll

    • Size

      5.0MB

    • MD5

      a35746d7a8c835f4cdaa90efe1f11511

    • SHA1

      c6869e2de30809f944e12b79f216ce6cfb68c9cc

    • SHA256

      ed6ebd749052f9018f6699671ae5469adedf086cf8b1bd4256bbe9c4e7f6ff05

    • SHA512

      bb8a582a573f1da3545925178f89616cb1652251723f1589a15be929ede18611798283718a42dba57cc41ac4a96b394622ef425ffae32050f54a3eddba2ed15a

    • SSDEEP

      49152:tz/3gBPwUkIQUWc5ql111N82UA1eiLJP+OOQoMyVWgMNsHUV26FqFcbYkDlc0Lpv:tr3QOX8HeXnzwnrm

    Score
    1/10
    behavioral10behavioral9

    • Target

      bin/ICSharpCode.SharpZipLib.dll

    • Size

      196KB

    • MD5

      c8164876b6f66616d68387443621510c

    • SHA1

      7a9df9c25d49690b6a3c451607d311a866b131f4

    • SHA256

      40b3d590f95191f3e33e5d00e534fa40f823d9b1bb2a9afe05f139c4e0a3af8d

    • SHA512

      44a6accc70c312a16d0e533d3287e380997c5e5d610dbeaa14b2dbb5567f2c41253b895c9817ecd96c85d286795bbe6ab35fd2352fddd9d191669a2fb0774bc4

    • SSDEEP

      3072:hjMibqfQqFyGCDXiW9Pp/+Tl4abpuu201PB1BBXIDwtqSPVINrAfvp1:GibqI59PpOPf201/z7p

    Score
    1/10
    behavioral11behavioral12

    • Target

      bin/Microsoft.AI.Agent.Intercept.dll

    • Size

      1.9MB

    • MD5

      c11d2c9cadb953236366c8f03fe0201f

    • SHA1

      df105280c577df9e62bfd0a7a53cc0a721a8a3cf

    • SHA256

      0c86fdbca7bc6427f9d4e4ac7a5ed69c9eabce299ba17664417c825cb91ab3c3

    • SHA512

      75fe2bf9179431583c2edb232a6d8d36e146db1cf966845acb02a346b978ec7ee5a1010a7fecc581c5e6daa6f06ca49b71a1979fdfa9e7a850d024ebd2589851

    • SSDEEP

      49152:ch2a3T7M/pxx/1XH0rYk5gf3ULhmpV2OIGtespefns:q2a3T7Mhv/13pfINs

    Score
    1/10
    behavioral13behavioral14

    • Target

      bin/Microsoft.AI.DependencyCollector.dll

    • Size

      64KB

    • MD5

      5665bfdb484ae3a3e7f7349cdd6a80f2

    • SHA1

      ef8427c563b7b818d2f437b2d5677836836ae61b

    • SHA256

      e81b14f4a6921053da2a39e039c055cfc9d4cf09023e08a68fd35921e7731f0d

    • SHA512

      da54b8a628236723f721e83683ac130fa178640779a529bf82a63bdd6734f8c53c8bcd9838924378fd7cdbf0381d771fd8e00baaf8f2afa3b657e89cd3d85bbc

    • SSDEEP

      1536:KiOwdKqgFBDlQLwVz3BUNAAei6rmLO1Jri1vmhEB9Y:Kv63AAFhAKvmhEnY

    Score
    1/10
    behavioral15behavioral16

    • Target

      bin/Microsoft.AI.PerfCounterCollector.dll

    • Size

      127KB

    • MD5

      40ebbb1ac3b592c11e59f266fcfa3bf0

    • SHA1

      ba12f1dca7460ba9e13c93c09d9dfd78168a1e3c

    • SHA256

      7ec77a230ed56b0258af2f26682b2a72e9ee7634f63160a3b8f20ea422695a77

    • SHA512

      75ec513f24e00e7c084fa715a51816a5f80801364be701264361f71b4eef493d4e99b63184b046fc0a91fae7a3d30999d514812ab4460e557a7607c07033fc9a

    • SSDEEP

      3072:EY/ALVfK+BMB4TOHti1c+i7DTDvTeDTRWJCR6DAc6vtE7YF:EY/AL0AOHtiJQ3eDTF6zs

    Score
    1/10
    behavioral17behavioral18

    • Target

      bin/Microsoft.AI.ServerTelemetryChannel.dll

    • Size

      101KB

    • MD5

      27cb078f857f293fdd50b85a54630395

    • SHA1

      05db0c3efff5778b0394f0ceb135903256d702a2

    • SHA256

      ad4f3e8520f8b1fb66e577a51edd68fe74091e190f06f9d8d1680ab92d4bde56

    • SHA512

      73a126dd28cca90de4434035ba92132fd26eb13cfd3843e37f11a368174459d282a3c62d05062795a9481d370e23c6e99f06cf06dc62961141eae093317ba957

    • SSDEEP

      3072:6YCqwp3pU9c2kK/ulF1M4OFVLNEdp1JnnGLHm6rIGvAY4Zsc1QyjignE1gx:6YCD1M4OFVLNEdp1JnnGLHmKIGvAY4Zl

    Score
    1/10
    behavioral19behavioral20

    • Target

      bin/Microsoft.AI.Web.dll

    • Size

      48KB

    • MD5

      8f54178a9f94326079cc0883d1ee1706

    • SHA1

      48589b3d7193975eea970b0592e9664c99b4dc8e

    • SHA256

      fbf2c0f7e73dc294a7b6fa366192aeb82fbb356aa095937f5c7cb9962bcef060

    • SHA512

      fa750fbcaa0c992bdbbd896b6a7dd4c16ef68f3f30a446c0495d76019f1744bc0cf7cf112651c7223862f8ce13a482dec95a2e5e8f40cda2450116376a2c2935

    • SSDEEP

      384:zUGKFmsfWu1Arak3P72YTGJwiVFugBO8an1POk/K1E+g6Wp2uKe/6HL7rgHeNkF1:zYxcraAZiVFugcOHECe6xi86EBa1WBMl

    Score
    1/10
    behavioral21behavioral22

    • Target

      bin/Microsoft.AI.WindowsServer.dll

    • Size

      40KB

    • MD5

      de0c7f4525b0e393fde0af4c07d9d512

    • SHA1

      f1231fe2e4e97fff486fca15f5445f754df58254

    • SHA256

      39fe43106f1ceb1a8fa15ed01d9488928e367c25f6eac526a55f47d8dfeb4a35

    • SHA512

      653cf0dda3f51c690efa08e5c3f5f240aab517fe9a8c404059d16b06c0ebdafa4518b24fdb23d474fef5f2bb021c34d4a39ccf3a1affeff9cc3716c25bbd4d1c

    • SSDEEP

      384:qeMOeC6qm5RhZTxuxjRXvGpjEtVvgk/SwujLIBQVjb0wSaXq21hydFZ6Cw80aq0H:4ZCXm5NTxE9JB/Swuj8yb0TJtFiQEB/8

    Score
    1/10
    behavioral23behavioral24

    • Target

      bin/Microsoft.AnalysisServices.AdomdClient.dll

    • Size

      667KB

    • MD5

      ed26fcc1e3e07601e047defa47ad159f

    • SHA1

      9d77e41349cf9b8ef1eb3d9abf9e548c99e0a80e

    • SHA256

      581d2a48f6770c56bf8bc5372fec2a8b75cb5f9c7d3ee123b9de5f64a5290e0d

    • SHA512

      654c6629f31547bd47ceda9c4ce11cb0f8191dc163551283d67e378d7dc9ace84661e35a92caf03dc9f4beb67c45c995422f5d739e2dc3298c6e1c07ec3bffc2

    • SSDEEP

      6144:7IQMdp7gY8rNnhJP1ZDv1Gk7NdPIkvZShQNVKVJgp6Hk8uIT8gkCzfP52eIp3Hdr:tMT7j+Nnhhv4aIokrHHoluz+tWlzg

    Score
    1/10
    behavioral25behavioral26

    • Target

      bin/Microsoft.AspNet.SignalR.Client.dll

    • Size

      141KB

    • MD5

      58cd48898cd4d560b10a79b586a5b8b2

    • SHA1

      b138ad19b545eaa9b6f69936b76975ced7d158d0

    • SHA256

      5d48870c2155449e67dd981253f6f16eb652e85b8ff9d8b9ec08438360805858

    • SHA512

      28f1cde32ad31b2f928f4d61712b046be965b1b44e843732f0a6ce11eab82342b2aa749ddf94ada8217ad351e18d7865eda9e237f9fb6e59aa2df0afad62e2c9

    • SSDEEP

      3072:sTCarmGsa8p+rNaXmrz66666666aR8awQOvFiHUNKtkJkunO:tAmGsa8p+rNaWSRdwQOFNA

    Score
    1/10
    behavioral27behavioral28

    • Target

      bin/Microsoft.Practices.ServiceLocation.dll

    • Size

      17KB

    • MD5

      92a533be83b7fa43a1b18f009a7d450b

    • SHA1

      e9ac62ebb0643bffb243d889c535a8abcd1ba52a

    • SHA256

      34005d6a80434542780c6d192e6abd07bea49b2eeb7e43fbfdfe90c2889986e5

    • SHA512

      b7ae35d9ab96c51b50998b46b8e73ba61bfc01812853c870872a18a3aa986db8a66d3b8e173e1d7dd58097c07b07afb64e5297b4b894b8fa1bf565773856a491

    • SSDEEP

      384:D0xk42ZtyvslnQyrgbPyIH/rFzs4zwQW+p2W/1S0GftpBjcw4l:gVenwRBzwcTimwe

    Score
    1/10
    behavioral29behavioral30

    • Target

      bin/Microsoft.Practices.Unity.Configuration.dll

    • Size

      79KB

    • MD5

      d7fdfaab803701100636ee778e55cef9

    • SHA1

      064840efd6b927fa1de2779f4c3c59a210359eab

    • SHA256

      3a97fd8012be6a66f3372ae6f58a84754c3e43e86b02d8c60c2ec9ada881c53f

    • SHA512

      1423460726de7b296cf4bdcb9997324361dd8fe7b43551f0eaa1aad8a16ea842176527e3c1234ab79139d78cb5c0051728a2a67120db3721bda03e5760648863

    • SSDEEP

      1536:pupucQ5OydGl1uO2S++Sw+dKET+JFjThdSlqc5xoxeFCGMo:KQwRr8x/xoGCe

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks