General
-
Target
dolphin-anty-win-latest (1).exe
-
Size
216.4MB
-
Sample
240428-w6ck6sec5t
-
MD5
771096e2caa2b65c16fe57b7c08fcace
-
SHA1
2273124e0fffe9c6baea23a5a1f74107f674def3
-
SHA256
f445ea286969be497afb61fb836cb054a5d1a4c909e2071c75bd7f0d48cde2e5
-
SHA512
0051771697d8241f39804c112d71670cb0b05806ab1abb94c1dd4928e0847d1470164bc366c2f4a311d46c0c21608bb6067469ecd12266e7c17bb2b44d3b18cc
-
SSDEEP
6291456:l1Z9v+3gRWmy0Jwv3Q1Z9v+3gSRjnOg8sabd+Yz:nxWmlw2yRzxccK
Static task
static1
Behavioral task
behavioral1
Sample
dolphin-anty-win-latest (1).exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral2
Sample
Dolphin Anty.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
$R0/Uninstall Dolphin Anty.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
dolphin-anty-win-latest (1).exe
-
Size
216.4MB
-
MD5
771096e2caa2b65c16fe57b7c08fcace
-
SHA1
2273124e0fffe9c6baea23a5a1f74107f674def3
-
SHA256
f445ea286969be497afb61fb836cb054a5d1a4c909e2071c75bd7f0d48cde2e5
-
SHA512
0051771697d8241f39804c112d71670cb0b05806ab1abb94c1dd4928e0847d1470164bc366c2f4a311d46c0c21608bb6067469ecd12266e7c17bb2b44d3b18cc
-
SSDEEP
6291456:l1Z9v+3gRWmy0Jwv3Q1Z9v+3gSRjnOg8sabd+Yz:nxWmlw2yRzxccK
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
Dolphin Anty.exe
-
Size
168.6MB
-
MD5
2f711422d2e8700a0f2b423681566524
-
SHA1
2b7eb92ea1ca882caafca5e332ea3aff1c805d1e
-
SHA256
569b7bebd18f96d7774614d535d30e5f4b47615581bc94b49b9ea0c02c8cf41b
-
SHA512
bbcf087b92ecfe0686db1dc67aaf8ad0a0e17ab42cd79e7704e535f5dcbe6e8376dbf2fa503d468b8ba1533306ead383e61ab3315a25d0803289428acdf34075
-
SSDEEP
1572864:eI/Lersitaya/Z2fU8sFcIM4L0l22Hb472TGB2+2T1PD7d00j+ohdOq6g5AgO8x5:dMY/KnD45KKb8xG
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
-
-
Target
$R0/Uninstall Dolphin Anty.exe
-
Size
221KB
-
MD5
a33b60a20bc0290e7408142aad2fffc0
-
SHA1
af8f75318280a41cd302fae286c7417b4f2f3220
-
SHA256
5aa9e15ddef12a6e810fc579db859d15c226ec1b81edd4128b3dd1a600c8c5e6
-
SHA512
c542458e64f9860894c244845fe42bb4bc060699f8aaf2d7516c6e88e3ecd042133b05fbe893e8368213da9e039de66cba3c05042d3e19738bfdcaa42d3dd91f
-
SSDEEP
6144:w740IkfEUs9T2GfDBf+ou2g//k/ifI2Uaq2t0EyL+2iaI:qpKXl6f3oRK2ZI
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-