Overview

overview

7

Static

static

3

f_007924.exe

windows7-x64

3

f_007924.exe

windows10-2004-x64

3

EUPL-EN.pdf

windows7-x64

1

EUPL-EN.pdf

windows10-2004-x64

1

tftpd32.chm

windows7-x64

1

tftpd32.chm

windows10-2004-x64

1

tftpd32.exe

windows7-x64

1

tftpd32.exe

windows10-2004-x64

1

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f_007924

  • Size

    609KB

  • Sample

    240415-hbb49sbb4v

  • MD5

    4a77c0a4701c751144d2d6161935f7f7

  • SHA1

    77d4d5e42d37c5389fc74bb0dfcf9d5b35a6dce2

  • SHA256

    2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc

  • SHA512

    7c8bdf7ab59e0d5b22b445d239b7ecebaabaeaaadb879653589bdc0dd8a4918a0bc3ad69ff2b88ebb19d56850b4561d51c5f3825848c42f27318437373a14d81

  • SSDEEP

    12288:sJ+gA6RPCuLmMl06EpwUG5IAeKPOFwTM84qpcy+qtv2tSoTqLQby463:swgA6RPCUmMlQqIWWFA4qphN28o+LQeb

Score
7/10

Malware Config

Targets

    • Target

      f_007924

    • Size

      609KB

    • MD5

      4a77c0a4701c751144d2d6161935f7f7

    • SHA1

      77d4d5e42d37c5389fc74bb0dfcf9d5b35a6dce2

    • SHA256

      2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc

    • SHA512

      7c8bdf7ab59e0d5b22b445d239b7ecebaabaeaaadb879653589bdc0dd8a4918a0bc3ad69ff2b88ebb19d56850b4561d51c5f3825848c42f27318437373a14d81

    • SSDEEP

      12288:sJ+gA6RPCuLmMl06EpwUG5IAeKPOFwTM84qpcy+qtv2tSoTqLQby463:swgA6RPCUmMlQqIWWFA4qphN28o+LQeb

    Score
    3/10
    behavioral1behavioral2

    • Target

      EUPL-EN.pdf

    • Size

      33KB

    • MD5

      254b5ddbc15269e72ba3a0508681a70c

    • SHA1

      2263ae4c0b71bf7be09707d8ffe1176807e8c69e

    • SHA256

      cd5d9e2a925d8daa92d083fd8c1cea48df1bcfffd857f4f93e2148fddc5001ec

    • SHA512

      9bb5a4bf1b5167725e2126ce5152e3be11b7288c743c0d7c71b98d0551e47bce417b0b1c0a14ff523a7c90ec9d0b930a0879b31b22f10b0a068f635103faf504

    • SSDEEP

      768:XWSMyoY3GnGTmerMqJoOunEg5ADW7+1DTsPVMAgjTLRzp/rFQ248gYT23:/93GXovsE+Anm+hJrZL23

    Score
    1/10
    behavioral3behavioral4

    • Target

      tftpd32.chm

    • Size

      356KB

    • MD5

      de0095e371874836fb50cd3400d7b204

    • SHA1

      8a1000443a71417c6233f277b87ca6585bebca2a

    • SHA256

      810a0f52703d051b30d5ecd219c72b0599964de34d1c1912367271c87d4725bf

    • SHA512

      0bd27dcf930df12d4fc2f29caae8809be74d124946561d60a6fa0e8d775ab3baf34dbde2560bb483a348d769d39c79b9af9666daa6eb87770053736d1df474db

    • SSDEEP

      6144:jU06ChpcJshdgk7fEPOgZLrBOhw8B84J3pCARzcy7sbqtr2YhS60gTurOQrVm:z6EcJAe3POgBTO84Hpcy+qtr22SoT4xo

    Score
    1/10
    behavioral5behavioral6

    • Target

      tftpd32.exe

    • Size

      331KB

    • MD5

      733ed472edbba6fccff0a74882cd6b51

    • SHA1

      8b143ab4d83e94026bea4ed91db235a72ff9ac62

    • SHA256

      c270ebd42ac19805f58bda8a0a34898add80cdaff3594038c3c9b47fdb0fa06a

    • SHA512

      efcf4cef164009b54cda6d3c78a60954440c8655ed1c9b5eae9535d4129234f14dbd05938c57039edb39e277a44908b17c1859b77d09d4d9926fbd7cda617a4d

    • SSDEEP

      6144:f7dNxvTgwFHnSLeKyQ8SRFWv+ERVQTx6/wTAb0TWoTfRIw4Sr+:fZPDlnSLKSRk+ER+Tx68Amf4E+

    Score
    1/10
    behavioral7behavioral8

    • Target

      uninstall.exe

    • Size

      37KB

    • MD5

      81982be80dec4e8462ef03fd5e44f406

    • SHA1

      d0b550818fdd94f91d02adf7c03b7e3ce915d525

    • SHA256

      181a386ba1b874c4f2779a27181332374f640a89333c88e70309b829324db07c

    • SHA512

      8a13949831c601598431d3b8bd903a1767d90368b905fab01f30dcb3d2381ff1a930ae341a61fc94376a9f597efdb7da274c65f63ec069ac29baa89a17d5893b

    • SSDEEP

      768:FaKoIAEPaXHQe5cDOnLT6OSKQGg1qtOqGVfmMk0D3/jIp3KlcEJRnYlCYbAo:UKJAES3bS2L6KbuVfmMk0DCwctlCWX

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral10behavioral9

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks