f445ea286969be497afb61fb836cb054a5d1a4c909e2071c75bd7f0d48cde2e5

Sharing

Copy URL

Twitter E-mail

General

Target

dolphin-anty-win-latest (1).exe
Size

216.4MB
Sample

240428-w3rwpaeb7s
MD5

771096e2caa2b65c16fe57b7c08fcace
SHA1

2273124e0fffe9c6baea23a5a1f74107f674def3
SHA256

f445ea286969be497afb61fb836cb054a5d1a4c909e2071c75bd7f0d48cde2e5
SHA512

0051771697d8241f39804c112d71670cb0b05806ab1abb94c1dd4928e0847d1470164bc366c2f4a311d46c0c21608bb6067469ecd12266e7c17bb2b44d3b18cc
SSDEEP

6291456:l1Z9v+3gRWmy0Jwv3Q1Z9v+3gSRjnOg8sabd+Yz:nxWmlw2yRzxccK

Score

7^/10

discovery linux

Malware Config

Targets

- Target
  
  dolphin-anty-win-latest (1).exe
- Size
  
  216.4MB
- MD5
  
  771096e2caa2b65c16fe57b7c08fcace
- SHA1
  
  2273124e0fffe9c6baea23a5a1f74107f674def3
- SHA256
  
  f445ea286969be497afb61fb836cb054a5d1a4c909e2071c75bd7f0d48cde2e5
- SHA512
  
  0051771697d8241f39804c112d71670cb0b05806ab1abb94c1dd4928e0847d1470164bc366c2f4a311d46c0c21608bb6067469ecd12266e7c17bb2b44d3b18cc
- SSDEEP
  
  6291456:l1Z9v+3gRWmy0Jwv3Q1Z9v+3gSRjnOg8sabd+Yz:nxWmlw2yRzxccK
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/StdUtils.dll
- Size
  
  100KB
- MD5
  
  c6a6e03f77c313b267498515488c5740
- SHA1
  
  3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA256
  
  b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- SHA512
  
  9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP
  
  3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1
  
  48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA256
  
  3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- SHA512
  
  c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP
  
  192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/UAC.dll
- Size
  
  14KB
- MD5
  
  adb29e6b186daa765dc750128649b63d
- SHA1
  
  160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA256
  
  2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- SHA512
  
  b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP
  
  192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/WinShell.dll
- Size
  
  3KB
- MD5
  
  1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1
  
  0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA256
  
  9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- SHA512
  
  7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score

3^/10
behavioral10 behavioral9
- Target
  
  resources/app.asar.unpacked/node_modules/clipboardy/fallbacks/linux/xsel
- Size
  
  126KB
- MD5
  
  5275ac35c8b2ff59b14f3616f397532f
- SHA1
  
  33d13cb10f0aa9504442493354d2916ae2d4821f
- SHA256
  
  6ee2c0e4736d4e7c21fa7082e1edc1591b00c1ce947df3be49e63c76418668bd
- SHA512
  
  515a9aa3e926c8685d605128ac226dd8934a99502369f38ab191aab4f60bfd0f514063f608fd86951a19cdec8f26b5fe3dfb771b18f522d304cf6b865b80e562
- SSDEEP
  
  3072:AKFEjlKkyFhRqCvNf+bRZmeDr5S9Wn8VR4gxmZ:UKhVNf+wxmZ
Score

1^/10
behavioral11
- Target
  
  resources/app.asar.unpacked/node_modules/clipboardy/fallbacks/windows/clipboard_i686.exe
- Size
  
  433KB
- MD5
  
  bdf7d4ccd2ce8cc7ab6ae80914496799
- SHA1
  
  b6ca8f7a5191ba431fe118a37863a32edfba9578
- SHA256
  
  fdaf49d7802993ee6c95e32fc488a4c78a0e69be3d1060749208e84428ab1a79
- SHA512
  
  2ea6c05eebeca5ff1561f32287de090a6f8f9dd8fe8eab5d320a310d646f76cb6a1885240069d2b1202f194e1f324682aa91eb2b24fc896ac3c14eb99309eb60
- SSDEEP
  
  12288:v1wrVHYSaXfEaezdiF3d/Al3EqyW24ZYQZ:v1wx4hX44RAEqRrZYQZ
Score

1^/10
behavioral12 behavioral13
- Target
  
  resources/app.asar.unpacked/node_modules/clipboardy/fallbacks/windows/clipboard_x86_64.exe
- Size
  
  323KB
- MD5
  
  77710f6649e7c01c1123622d7d74e51e
- SHA1
  
  abb3c22d6e2946aa6962493c087aa329e479d6b3
- SHA256
  
  2f6ba528842c0bbaac9844eee746013dc11fd51fdde0d5632482ccf5d3cc8d98
- SHA512
  
  d4f44a8313243f44694c43d6fb18f5e4a6476fe11710d09adc74ac411ee9f8146b5f7d259699ff454ea9f96e47065a76e105071c707fde28d8474d98615cef04
- SSDEEP
  
  6144:SOg3p4EafFnvpmp7cgvK+iMO6cyvULyksyfH:jkMnv2IiOjFLyksyfH
Score

1^/10
behavioral14 behavioral15
- Target
  
  resources/app.asar.unpacked/node_modules/clipboardy/index.js
- Size
  
  1KB
- MD5
  
  df9b12281a82dbf586dac4485f4fb79c
- SHA1
  
  7e744b7621d8c4cf2370caddfb0fba14b873979c
- SHA256
  
  370046693f7ccdddac915f7f4a8ef6ba42910cbd2fba0358661eb2d419fcfab6
- SHA512
  
  96f2c4a8a4bc6929b72940b78181542b47687d7404aa3618568b8f74d7d6105b91c924ac98f9ecf01c684cfa1bbb4a28d4f579fecdb0b2a418701e73c1d0636c
Score

1^/10
behavioral16 behavioral17
- Target
  
  resources/app.asar.unpacked/node_modules/clipboardy/lib/linux.js
- Size
  
  1KB
- MD5
  
  951468a5af18b01c2f5100cab89ea511
- SHA1
  
  7f7a1f17c6b0b883124322c87f1cddb5f44710d5
- SHA256
  
  9b1f7bd954b7600004b977bc1dee285c6ce1b817de1ea1769214e905d504fbce
- SHA512
  
  c6516f4ae1f976427040fd3bcb2ff98f902b922504cd4955e4c3d4d04d1b125aa558135829e050f485f14d3cf5fda7f17cf5d9850fe90e01096adc966c669869
Score

1^/10
behavioral18 behavioral19
- Target
  
  resources/app.asar.unpacked/node_modules/clipboardy/lib/macos.js
- Size
  
  419B
- MD5
  
  943598f37fdc59ed0cfbc858ac08accc
- SHA1
  
  32b0bcadc2750d7244c3e69141e923c86e25776c
- SHA256
  
  b7bb50d28ca5bb088cfa3060bf1f15e7da784b2620ae6f800b164426302b0f7b
- SHA512
  
  f107f258d50c9fd830d9bf1d40855d57e7c26cb24b8be549319c66aee36678a3c4bee21490adef897430ebb762d14a5255647a8c49682a360bb0bbe5eb20ab0f
Score

1^/10
behavioral20 behavioral21
- Target
  
  resources/app.asar.unpacked/node_modules/clipboardy/lib/termux.js
- Size
  
  645B
- MD5
  
  0d2882fc5ec7b00af9fec35d7a3544a1
- SHA1
  
  5bbd729adf274f521d03d26b4e718aa0a2f713b4
- SHA256
  
  ccf4cc9ffc72526ce2b5464e0695e6c336905b54c2ba0eb6c6c0262508939ada
- SHA512
  
  e62e5d63cec7fa40d69f97bd48fe2bcab0946524718c07f3741925edb10a5c19dcd29da25a5fc9b4ae311060383236be2d8744496f672b5a8f1bb600288aa118
Score

1^/10
behavioral22 behavioral23
- Target
  
  resources/app.asar.unpacked/node_modules/clipboardy/lib/windows.js
- Size
  
  603B
- MD5
  
  115c4132c713b7a3027262cbd0d14458
- SHA1
  
  9bfcff3b8dec2f44f78a312e891adaaf7627ff9b
- SHA256
  
  91df8e3133d6e4741d4d93e3d1fbf0042027a6727e43c68cab2471aad5b2e8a4
- SHA512
  
  4c682b9746bf655da62ef4fc4d9de80b42321b38a4c65f7ebd1e00e20d7272a025cd4b83d5cf436b4324aea5f018e8cb98ead7c8f1a942fb7f5b4a11901cea85
Score

1^/10
behavioral24 behavioral25
- Target
  
  resources/elevate.exe
- Size
  
  105KB
- MD5
  
  792b92c8ad13c46f27c7ced0810694df
- SHA1
  
  d8d449b92de20a57df722df46435ba4553ecc802
- SHA256
  
  9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- SHA512
  
  6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP
  
  3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
Score

1^/10
behavioral26 behavioral27
- Target
  
  vcruntime140.dll
- Size
  
  94KB
- MD5
  
  02794a29811ba0a78e9687a0010c37ce
- SHA1
  
  97b5701d18bd5e25537851614099e2ffce25d6d8
- SHA256
  
  1729421a22585823493d5a125cd43a470889b952a2422f48a7bc8193f5c23b0f
- SHA512
  
  caf2a478e9c78c8e93dd2288ed98a9261fcf2b7e807df84f2e4d76f8130c2e503eb2470c947a678ac63e59d7d54f74e80e743d635428aa874ec2d06df68d0272
- SSDEEP
  
  1536:yPHLG4SsAzAvadZw+1Hcx8uIYNUzUgHR4xecbK/zJgXTG:yPrfZ+jPYNzgHR4xecbK/FgK
Score

1^/10
behavioral28 behavioral29
- Target
  
  vk_swiftshader.dll
- Size
  
  4.4MB
- MD5
  
  0b9bef8aa50ee5a6c7bf7305b8734237
- SHA1
  
  458da628e6bae7531f5bed94a4c0ccc2d8c31d72
- SHA256
  
  d06d9cd621940621ba75576bc7200f61874769cbe50c6bfe686ff1f552d32d34
- SHA512
  
  b906a8da692e527bec8043b2822e3822f97dbb2abf176d6a69da153ddac4e626d29e6c9a4456e9c67efa148f59185c7aad1d94c26c932dd75e3aa7389747d3eb
- SSDEEP
  
  98304:rrHy0D3LTl9tQ3TvfRfDTNlxo+iSbonZ7vqr9meDQTrEjHXRLel7JyHJSeRj:Ki/tKo+iuyvTrMFel7J
Score

3^/10
behavioral30 behavioral31
- Target
  
  vulkan-1.dll
- Size
  
  803KB
- MD5
  
  40cda95f1f0367b2614940794d197784
- SHA1
  
  adc79f8a9752907bf11f74525f8a2b4a2338b57b
- SHA256
  
  df2c438f0d36729c142a696b2f7084644ee82632a0826ac5225c0ef7dcf1a554
- SHA512
  
  419c230dd576b952e8ab376aa595e7a01fe629a9c09fcb4532fc0a1eaae70c01cec526387ea9b6dc7ac0121767284215a8c3b80e5b35975178a05bb4d4c42d24
- SSDEEP
  
  24576:K9d6/xWDLYSCIUy0dxAu6Z5WdDYsH26g3P0zAk7egUw:scxCCIUykX6Z5WdDYsH26g3P0zAk7e
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32