Overview

overview

10

Static

static

10

Help.pdf

windows7-x64

1

Help.pdf

windows10-1703-x64

1

ViolinV1.0.exe

windows7-x64

7

ViolinV1.0.exe

windows10-1703-x64

7

dirt.pyc

windows7-x64

3

dirt.pyc

windows10-1703-x64

3

Resubmissions

21-04-2024 18:52

240421-xh5gqahd37 10

21-04-2024 18:47

240421-xfhj6shg3x 10

21-04-2024 00:06

240421-adsk2adf35 10

20-04-2024 23:34

240420-3kwkgsch84 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ViolinV1.0.zip

  • Size

    41.0MB

  • Sample

    240421-xfhj6shg3x

  • MD5

    6a5ea25ede5cad056d564b1379db0994

  • SHA1

    020ee91748d883035303ff6caf81f6cddc4db7da

  • SHA256

    33fc8edfd255423880ca7eeeb073fdd16b919c557649dc82eafa0d40bac39ada

  • SHA512

    311f9a80cb42b12b18ea507de3baf69a0fe1fb106ee26f32b14ef96386c8eabb3be2cb0126b39c129842937c12082d772753a36b3cfab3f6e10512faa2358ebc

  • SSDEEP

    786432:KOY9nuLa1LQCJZCg2LYabvuwrapuuHrZl5BnDB1Wz63FD8B9MnakX15y9pEOihBL:s9n82lJz2LYgr+uuNlrB126FAB2a+1Ia

Score
10/10
telegrampyinstallerratspywarestealertelegram

Malware Config

Targets

    • Target

      Help.pdf

    • Size

      74KB

    • MD5

      f81448cae9fce68262201b41f41f261d

    • SHA1

      38df876d6a0fe3ec55892dfcc0c49d120f2279d8

    • SHA256

      87480c987bdbbf4f4e7cfe31e6e705550c85ccd4961ac239dd95b3682bed71ce

    • SHA512

      6909e2896776fcb574a0552c7247b9a5962ee9934f895e340bbd1414500950af8073fd0e565b067f1bc13ad851bd61a2bcbc75485a73d06cf6d65f85c7a9e335

    • SSDEEP

      1536:2d5O6puoxdb2UM8DHmMaWGI/IHXumniC3:0OKuov2UM8DHPaWGoKTn

    Score
    1/10
    behavioral1behavioral2

    • Target

      ViolinV1.0.exe

    • Size

      41.3MB

    • MD5

      e1f11a32546b240111760d533a26ee81

    • SHA1

      c47b6ec9a10d2f7c081ea4649dc8b98fba5f9de7

    • SHA256

      e7d113ef928f0ce62a0accc0829da9720977c75427c4c901976e689c22c22a9f

    • SHA512

      2aaad25d22e9e26669bcccd38b53493695d760ee8fff8d85cc2729fb040cf7a6ef5203801d6f0916f1f5c70ae0c08b2862367c5743d0d65fdb80382446272fda

    • SSDEEP

      786432:t+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVL9jvzVSLOYq1QtIZS3ILe5qW80U:nXGMK4XR3bLSCU/+6yPlhvhSyY2iIZSa

    Score
    7/10
    spywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral3behavioral4

    • Target

      dirt.pyc

    • Size

      12KB

    • MD5

      1e04b7019d4445a6fbad2f9b1f65b0cf

    • SHA1

      625891d19b89425662f5c2461e362b80e5b1a380

    • SHA256

      22fbb24f3c24396cf4ed4efb11627516fdbc13f6c8f5e7949bf314d624c0a188

    • SHA512

      9fa72039350d52118a62312c142c13c1c55893ded77e5adf72474e1da4b276d844f08f5c0d93547ee42ce37c050ca0058287edec426ccd569dd261f90ee75e0a

    • SSDEEP

      96:05ZwQ1gk5pYJnWuWHr1qbPW7MP2JMmHzJfzJU6W8KV3LB/6leQySy:05ZL1gnZWuKr1qbPz/HrFSy

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks