Overview

overview

3

Static

static

3

MailAcess_...ky.rar

windows10-2004-x64

3

Leaf.xNet.dll

windows10-2004-x64

1

MailAcess ...ky.exe

windows10-2004-x64

1

MailKit.dll

windows10-2004-x64

1

MetroSuite 2.0.dll

windows10-2004-x64

1

MimeKit.dll

windows10-2004-x64

1

Qoollo.Turbo.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MailAcess_Checker_by_xRisky.rar

  • Size

    2.6MB

  • Sample

    240416-lxn8hagg3w

  • MD5

    de2390eef8fb290fe8b3d922a2c133cd

  • SHA1

    af7720f8798cd356c04d5d48d84d6c3dc33500e9

  • SHA256

    1e347b7bcfa9e412c45eeb3d4bc5322dd90e367f29e9f0c92d6e79979489f0b6

  • SHA512

    19678f6c70271e2e788fd20cfe3608a0d144be2f14a8da7b796156612cd672e8419b4ea23e7dac45e5c94aaffd063015fa92c9a0ab9481f84d2eaf2528e0d131

  • SSDEEP

    49152:JiV3hSBUsSGEaqKYxKOAihfy+xja8179w+BGhpvjE4dykQYWfWhZjODOS4dvY:JiV3AmThrxK/ixy+xuE79w3hpAlCRbg

Score
3/10

Malware Config

Targets

    • Target

      MailAcess_Checker_by_xRisky.rar

    • Size

      2.6MB

    • MD5

      de2390eef8fb290fe8b3d922a2c133cd

    • SHA1

      af7720f8798cd356c04d5d48d84d6c3dc33500e9

    • SHA256

      1e347b7bcfa9e412c45eeb3d4bc5322dd90e367f29e9f0c92d6e79979489f0b6

    • SHA512

      19678f6c70271e2e788fd20cfe3608a0d144be2f14a8da7b796156612cd672e8419b4ea23e7dac45e5c94aaffd063015fa92c9a0ab9481f84d2eaf2528e0d131

    • SSDEEP

      49152:JiV3hSBUsSGEaqKYxKOAihfy+xja8179w+BGhpvjE4dykQYWfWhZjODOS4dvY:JiV3AmThrxK/ixy+xuE79w3hpAlCRbg

    Score
    3/10
    behavioral1

    • Target

      Leaf.xNet.dll

    • Size

      130KB

    • MD5

      dc5f27d5f080e77f1b205e80199d5c1f

    • SHA1

      0de5aa944ad8e1e5f1f064235ebb16f87c806d78

    • SHA256

      60a1f61c367696219175b73eccdc868c44090b227b47754454c9fc47a5848f62

    • SHA512

      c650d22eca52a4e05a0d5791f08c7b636986b8685a74b3264eb3efa400e0a0f687b013c57a1b890fc8ce98644e5a66f5b4e924d79b4ac60087a5c220ab3467df

    • SSDEEP

      3072:mKyv8I6a3Vkn3vulLI/NZhttaM2Mfc4Td:m7C3vS

    Score
    1/10
    behavioral2

    • Target

      MailAcess Checker by xRisky.exe

    • Size

      4.7MB

    • MD5

      9f2beaa5ed3beba79c3e6b5f7a4b1246

    • SHA1

      9e14e25d4045c45d2e856a73b300b3bdd008bce9

    • SHA256

      4d97ed38044fe00d35f57d87102c56d07f411f081353b3ec77c22001aee65045

    • SHA512

      560a1b877056176cc1e8c651da83ef4fd93e3029fb1ec8f8327ee04a971152e4d53f749d392830fbf31046ceb4d2527cc31632a677e7d95ab8b59250566926cf

    • SSDEEP

      98304:1TwJ11p35vkl5Wfts33LodCv0cj1sYKpKHFPBhz3vN7LrjeKIpAFlfJ3xZhN9eu8:SJ11N5vklkFsnLodCv0cj1zKpKH5Bhzi

    Score
    1/10
    behavioral3

    • Target

      MailKit.dll

    • Size

      787KB

    • MD5

      ba0255f547fab7eed60863ad27d24c97

    • SHA1

      a5d095ac3d746eb400a314317a88c215d78cc304

    • SHA256

      5fd7f167bdf289ae48b9f0f68e63c07370427d4eb8436005a5859b5bba3a7d2b

    • SHA512

      e672daa19be91d84e5f2e0124b0508faeb241c91c6515f687a55b20d8febb2e2360e695aaf2e1d252e9ed0d494f71087315199f7b43eb6fa13949484ee177ea0

    • SSDEEP

      12288:n06ZB+7efx5fbznob0e7aWU/zxYNkfUgze+NQjRj:n06Zik60e2W/kMgzejJ

    Score
    1/10
    behavioral4

    • Target

      MetroSuite 2.0.dll

    • Size

      305KB

    • MD5

      0d30a398cec0ff006b6ea2b52d11e744

    • SHA1

      4ceebd9c6180a321c4d4f3cfb5cfc3952bf72b45

    • SHA256

      8604bf2a1fe2e94dc1ea1fbd0cf54e77303493b93994df48479dc683580aa654

    • SHA512

      8e06ff131a81e73b1ff5de78262701a11ecc2bcdaf41011f4e96f11c5372742478e70b6a0901b61953c21c95725532af8d785654405ec5066ad157e2143467cc

    • SSDEEP

      3072:K6J2UBugOAI+yjNDWswy1MNo1EvnvkgvloSVQBjDifX0pPSRZ9KZdf8uvqtXfZBF:K6Jr8xhFzfOaa3xqQnQGTO

    Score
    1/10
    behavioral5

    • Target

      MimeKit.dll

    • Size

      971KB

    • MD5

      695ef3be6c2169067e0f1d9f7d99bc27

    • SHA1

      24185ff27f8a64fb71abf29b8f1338492cd7c0c6

    • SHA256

      78d4f282269afba07ba89d1434dc1c3f9c48097fc252e93cf94e493ac8c109fd

    • SHA512

      b3c7d1cee7f6ae16d66caf1d39113c0b5fe1b7ac4fb813134450679c82a2d306293799efc66c4d2ffed703dbc3921136f3cb393c2c4452791c8681129c74ed36

    • SSDEEP

      6144:8s7WYsGptvOrhcQcQgEUFuvtdoEWzX+953RACv/UUY3YSaYFUyG3dXTHOKGebPS9:VtHQc9OQT9aYFo3dn5s8P3ovs+ODPs

    Score
    1/10
    behavioral6

    • Target

      Qoollo.Turbo.dll

    • Size

      349KB

    • MD5

      4e8246df4ee956ec273c4baa2054593c

    • SHA1

      7847f523fefc14fec2c739c293593b673fb1c9d8

    • SHA256

      1172732fd0fe6b679f5c6bf750598133dc815622c55ef1fa84087087bf42b495

    • SHA512

      13398ea46879d533774e7ace1d3320ca60f7220277fcb2393c243ffeadbb5bb37900f87ac35b9eeb134e26e71068874b9eee226853a52d1528d5db761bcf22b7

    • SSDEEP

      6144:1mTwzRf5EAga3u3IfEMzXCuPAKGJVKCHX:1mqf51TdPAKkD

    Score
    1/10
    behavioral7

MITRE ATT&CK Enterprise v15

Tasks