Overview

overview

7

Static

static

3

15 Cable 4...n.pptx

windows7-x64

1

15 Cable 4...n.pptx

windows10-2004-x64

1

15 Cable 4...1n.ttf

windows7-x64

3

15 Cable 4...1n.ttf

windows10-2004-x64

7

15 Cable 4...e4.exe

windows7-x64

1

15 Cable 4...e4.exe

windows10-2004-x64

1

15 Cable 4...32.dll

windows7-x64

3

15 Cable 4...32.dll

windows10-2004-x64

3

15 Cable 4...ay.dll

windows7-x64

1

15 Cable 4...ay.dll

windows10-2004-x64

1

15 Cable 4...mm.dll

windows7-x64

1

15 Cable 4...mm.dll

windows10-2004-x64

1

15 Cable 4...32.dll

windows7-x64

1

15 Cable 4...32.dll

windows10-2004-x64

3

15 Cable 4...mm.dll

windows7-x64

1

15 Cable 4...mm.dll

windows10-2004-x64

1

15 Cable 4...ue.htm

windows7-x64

1

15 Cable 4...ue.htm

windows10-2004-x64

1

15 Cable 4...ue.pdf

windows7-x64

1

15 Cable 4...ue.pdf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15 Cable 4.0 (1).7z

  • Size

    6.0MB

  • Sample

    240425-lgnl2ahd77

  • MD5

    528b877a9ac0b65a7404f5b68eee02a0

  • SHA1

    e352d531e704450af60d56d524f9711621585ecd

  • SHA256

    341f97e83e1ccfe0a11dc3211ae5d1211268ac63c9b6c2c778b3b4ae60864e55

  • SHA512

    1092f417e1dc288eba72dac5e476373e4c0ee5e0df0e81d6ac1f2be34245be178ee34106a64c65c08ced3cebc6e3d5221827af800cc1144d66fd2b8cef3ef882

  • SSDEEP

    196608:U4nabjjbxu7QLZB4Acvj2RD1IgEb4HvhYIUX2:1ExIyjWqRxIHSpxJ

Score
7/10

Malware Config

Targets

    • Target

      15 Cable 4.0/Cable 4 instruction.pptx

    • Size

      1.0MB

    • MD5

      109001a4813234eb29db798a39bdb4ca

    • SHA1

      a2aec8624d4aa1e887307115d465c3b0a259ac71

    • SHA256

      2b5dcb8501c86513040c88a1358516663446b368e2497b1f2ee9a5e5f897f6c7

    • SHA512

      3cccbd58cba0ca51dc162f5df8de83b960f0d2648a49ac61b97641f559c2c01fed5b77efb93d4e5eba459e2e960b006040ce48be57fabcd5b5bb3787a27d307a

    • SSDEEP

      24576:81MJ8PB4TyTc2Y5HnJ+peG9/KdLEnJZxdtYzHH/dip364r3L09UVCirRT9c22223:81MJ8JV1AHozdKZgjdiM6a7aI7c22223

    Score
    1/10
    behavioral1behavioral2

    • Target

      15 Cable 4.0/Cable1251n.ttf

    • Size

      45KB

    • MD5

      ff78a0ab615fb6e32ef8597115e387cf

    • SHA1

      d6c4a59487e372387ef7e998f6d4c90ed74722b1

    • SHA256

      203be08efc0874c1d6601546e28f31ad15e486043c39beb12783e77cad4dbd37

    • SHA512

      1adfb03e75af958a1675015a03e7e7e34c0b16305c37d9d514e493d2fdd002be872606168b42a34bf864abbfbb0eefdcf27ae378157a21b605ff9b0c1b6dc206

    • SSDEEP

      768:/JXukGKuzUVXQmsDzjDbMpjykvvwPhYBf0PmeTx+VDnSa4g8tJRbD2t+0QrGaitR:/SzIQHb4wP0QTO3QCwlEftedr8DTbl

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

    • Target

      15 Cable 4.0/Cable4.exe

    • Size

      5.1MB

    • MD5

      e414a09763d85c5112f2f9a238589e39

    • SHA1

      9afbda5355e88935039ffe2df2302fe314b1da3a

    • SHA256

      4afbe91dba6ab2f312334f73ba656deee25a4010879f637fe9d53621686e950c

    • SHA512

      b7a646aa29815c10bc0255a4c8dde2e42c01403e1e9f6de2a74ba6068f89eaabc9dcdb88b72cc680f9d6836dbdab5ba89683914ae9b7046abe2d4e675d89ace4

    • SSDEEP

      49152:Nu4CwsEm6HKv5JPmAuJ6FdF5j8BL4U5kq8P:E4CTDvzPm7J6nF5jYL4kl8P

    Score
    1/10
    behavioral5behavioral6

    • Target

      15 Cable 4.0/INETWH32.dll

    • Size

      48KB

    • MD5

      08040e0bbf8ce1e9cfa7dc99affebb7f

    • SHA1

      ff0eabff722aef85535f3fd730bae0abb1d9d51a

    • SHA256

      4a9c61bc942fdcfcb2eec8234b04d32aca4b25c086b5b03af8bc22b3596bfe85

    • SHA512

      4c51d4451166f659adfa43c0b4537af9716b5b2e74af7459577fe5b77a6f68051a34a13e49bc6ce6f93c0dbb7ec64c599a9d43f4e0e6a79664e3805fb7d2ebc5

    • SSDEEP

      768:gNapYVbGZITogAr2a98SaNJfVWALlTH4DWxfWa22OZcIYYoyNFhZ9CF0htssaH:7GVb41gA/PIWgTH4DWxfWaE/Po3+tsZ

    Score
    3/10
    behavioral7behavioral8

    • Target

      15 Cable 4.0/Rhmmplay.dll

    • Size

      22KB

    • MD5

      808109f1e94fc280093367e2953e8fc1

    • SHA1

      ad0ae72d1a219ab7688c1fe0579273bbe453df3c

    • SHA256

      1c6a206594a3b16902a333d1933ab419598ed14a38f765a56497e5f6ecfaa355

    • SHA512

      af0212d029d8f94956d5e07cf4aa94c68f30bb24f0fe45bd19f2222e2c31c1ca08f4bc94738c59ea29e702066224ff9034286f84c273bfd31d65a7aaca3a4c58

    • SSDEEP

      384:BR3r4yK3tHjsRUhsPuI6IuBsjVSvLvIDvc3FWJ:BRbtK3tDLhAQoSruc0J

    Score
    1/10
    behavioral10behavioral9

    • Target

      15 Cable 4.0/borlndmm.dll

    • Size

      18KB

    • MD5

      ded1c6d9dedad4357cb852524b195e81

    • SHA1

      1304f8c2ee6eeeee037fba24ebd081b687a4803f

    • SHA256

      4b531ac5e9be73d2038e308c44155f559181f17c50b985ca80a99908c38fa3d5

    • SHA512

      9569d3823c610460c1713a3598402e6ccd8912e2be3f77bae365cd65340f0a6931f7d9637fa824812e211ed1c66b8dc09c06b60dc52d1d7b810ec86250954350

    • SSDEEP

      384:nNEWMQqKcECEDyzNwEk9UUiK6RmXBEe8m+HRiTn:eWMQqlECwyzyEtVT0Ke8ZHkL

    Score
    1/10
    behavioral11behavioral12

    • Target

      15 Cable 4.0/cable32.dll

    • Size

      94KB

    • MD5

      dc1b1710ba47b5a7d7cb6319070f25f1

    • SHA1

      5cd6cb942a28d273c1524e629b5268077af071c7

    • SHA256

      e1a508f811918f19bdd54f3dc01dee0168d882bb324c9687d08c5d4a7a53572c

    • SHA512

      fe1490371b147b6a2ec0f2fe78093f1ad216a6a33d14e4893caface9314ebd3971d773c6ba13ac5be8f814c5ec0d3a1828a1f3fa3626015f4360ab91318fd846

    • SSDEEP

      1536:Bwq8GKqXB1k1yeIa1D29+ZnSfF56YrTfzmmZG2Gx+J:ttBk1dC9aSfP6YrT7zZG2Gx+J

    Score
    3/10
    behavioral13behavioral14

    • Target

      15 Cable 4.0/delphimm.dll

    • Size

      16KB

    • MD5

      81d2ffe79f3ed74c566bfab3fe7cc568

    • SHA1

      ef17498f97617332a82f77aee339cec39411656c

    • SHA256

      7f52a059ee54d49d5e9a0096d4e0f1e7327b2cdaee79089fb466c5d5d4cb143c

    • SHA512

      633ecd5ed8eefd82f27c2f7a96ad0d90b7faf30e0769da8a9e2f58e1bec3d84b81cd07cc32fbfad5057d3d7f4bab06dc663bc5a751d0129c7ce5b1764d110d9b

    • SSDEEP

      384:sEkm4qadaEOPOiHNXTD6nIhjLSCmXBEeqGuFtW:Um4qsaEOmiHNDD6IFLS3KeqGI

    Score
    1/10
    behavioral15behavioral16

    • Target

      15 Cable 4.0/rhodiatongue.htm

    • Size

      934B

    • MD5

      c73fff3ac34e64d20f1c6018f41cf4c7

    • SHA1

      9f95d5d776185e18f051ce6aa8599c6f0fde45b0

    • SHA256

      9fe626b75b0f092899d426fe0b4105cdb3be8f5f2268e2be92faff32b3d871cf

    • SHA512

      2436b6d5f0fbe72392401b3a56352a03bb2782659b540fb97bb1b43f3ecda7ea62e1c10ce53f5797befabf49833372c97bc13cd8c461a718e25ae108760722a1

    Score
    1/10
    behavioral17behavioral18

    • Target

      15 Cable 4.0/rhodiatongue.pdf

    • Size

      410KB

    • MD5

      58fe5c7724f291173b865a4e38a70990

    • SHA1

      2510e72f6d074e4afb94e7fe5a948dbd95cdd006

    • SHA256

      0dd9b5e63cacf6a3bd93f8eaa4b953ab4f539a5dc9e09858500f2ee28f6fd30d

    • SHA512

      fcd9b1a639b0a46b43f6e5012f265b4110d60dae9c420004cc9f7f2e893b9bfa0bf146c7d93af7e95efcf0c34947a80383ff30babcdb1956d0625e467c8433b0

    • SSDEEP

      6144:ETp0UnLmc+Ltc+QI8BYnf6QjJMkXbbTh//e7kf76b4n:Eec+LtcgQYnfHXHUgfWq

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

5
T1012

System Information Discovery

6
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks