Overview

overview

9

Static

static

9

3vjiaTool.exe

windows7-x64

1

3vjiaTool.exe

windows10-2004-x64

3

Aliyun.OSS.dll

windows7-x64

1

Aliyun.OSS.dll

windows10-2004-x64

1

AxInterop....ts.dll

windows7-x64

1

AxInterop....ts.dll

windows10-2004-x64

1

DevExpress....2.dll

windows7-x64

1

DevExpress....2.dll

windows10-2004-x64

1

DevExpress....2.dll

windows7-x64

1

DevExpress....2.dll

windows10-2004-x64

1

DevExpress...re.dll

windows7-x64

1

DevExpress...re.dll

windows10-2004-x64

1

DevExpress....2.dll

windows7-x64

1

DevExpress....2.dll

windows10-2004-x64

1

DevExpress...re.dll

windows7-x64

1

DevExpress...re.dll

windows10-2004-x64

1

DevExpress...re.dll

windows7-x64

1

DevExpress...re.dll

windows10-2004-x64

1

DevExpress...re.dll

windows7-x64

1

DevExpress...re.dll

windows10-2004-x64

1

DevExpress...re.dll

windows7-x64

1

DevExpress...re.dll

windows10-2004-x64

1

DevExpress...re.dll

windows7-x64

1

DevExpress...re.dll

windows10-2004-x64

1

DevExpress...re.dll

windows7-x64

1

DevExpress...re.dll

windows10-2004-x64

1

DevExpress....2.dll

windows7-x64

1

DevExpress....2.dll

windows10-2004-x64

1

DevExpress....2.dll

windows7-x64

1

DevExpress....2.dll

windows10-2004-x64

1

DevExpress....2.dll

windows7-x64

1

DevExpress....2.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Skp_converter_721.zip

  • Size

    54.5MB

  • Sample

    240518-rxft1sga6s

  • MD5

    ba527208205d3d7848e5d3d3e85c7c59

  • SHA1

    a0ef0464be962b4fa2253a032918fef89b0a068e

  • SHA256

    f04ef31d9d97e075d84a44449e945f9df5205b61cc14ba856fbc96daa56c4f17

  • SHA512

    5c02b3b4f5ce679a223d685b925cd1f7a0aebded6e42ff379713cfc7bf798b702d5cd9e3eb94197b0ec7924f9c82dbf490f1919ae50acee8369b50888221fa12

  • SSDEEP

    1572864:Njyz7d+WE7LDL7QGb66RU7Ho4cKScT7Keo45q:F2dtE7PQG2LoYSE7Keo4Y

Score
9/10
cryptonepacker

Malware Config

Targets

    • Target

      3vjiaTool.exe

    • Size

      211KB

    • MD5

      40e04e4b1cd08c8c800cdd6881644441

    • SHA1

      1d79ebb6b8c9683fea8f63c714f938c22a7d9b0b

    • SHA256

      f5674320e3a07d5f8da1efeb6b9d175aaf9cd1acb9ca08f6d953f367dcb3bc9a

    • SHA512

      b29aea2b6cf9110f8e092ed356e9a0fcbe97de6c461c115be3899edc734f445989a93d1a3cbbed50cefc06933385da2e872d7582f36afdcaa59a45fe13d4b7c1

    • SSDEEP

      6144:4mxQQXfpbaAh4kmr8uqjNPP+XZPSjdsJ8v:4qQQvdaAh4kmr0SPiO8v

    Score
    3/10
    behavioral1behavioral2

    • Target

      Aliyun.OSS.dll

    • Size

      283KB

    • MD5

      a4503296a3ebc66db86a541df9f53764

    • SHA1

      d111d901feedd64b0d9115ddcec2ace0c8b097c6

    • SHA256

      7d475337034bbfcb8088338d5c1a6c63e290968e2551842c775950151a32521f

    • SHA512

      6e5e2ae182fa4fed90296722494d5fbaaa654ccfee43321454141fe723ba9dae629c94ee9d2b689cf1396e1a1a9acd4b6d06393a5a89fdaf8bf63b4c43603fc9

    • SSDEEP

      3072:LCMa/kYTdgh8aL24T/LNY6rn5b9y6Iunm1WGu3YlsfNHWI6Arxt9:NZYTdvaVTT6k5b9/IYGuR3t

    Score
    1/10
    behavioral3behavioral4

    • Target

      AxInterop.ShockwaveFlashObjects.dll

    • Size

      18KB

    • MD5

      e40a0aefd1627d23f0bad963dea6cc30

    • SHA1

      fcc5951f496a05887adfe591675791b396fdc3b2

    • SHA256

      d9dd28d9f3e29985283388820bd18a81f72a4a8e0a3b3569fe407e3c1a75fdba

    • SHA512

      0b3b323ec9933fbc7ddc2accd00e3988c88d91a2a26612d672d7017566ce19173ce1dce5adee5b11c1a31945d70071f67adb69610aa71f2570aed7ffe33cbd60

    • SSDEEP

      384:IXO1GCT19SEpTPESNplCPaWs45g72heok:IXO1N1JTPvCPaivef

    Score
    1/10
    behavioral5behavioral6

    • Target

      DevExpress.BonusSkins.v17.2.dll

    • Size

      10.7MB

    • MD5

      e851b0947dd2a276eb67e8c0a9a35e79

    • SHA1

      dcccc49542e9aebacd49d5033c3bb371abddf2d7

    • SHA256

      4dcb2a9726a9e3fe37d14eea153eef01e19c15d4fc9fc186cf0d44a3b57cf54d

    • SHA512

      151f85a5fae0d48e26f8c9cda35c0ae5c45e4f87bd82e39f73a3dd1dc4ee53a7918e34e5338fb63edd8faaa97c171f6d44676e45f1c263ded1debf80f69bd7d4

    • SSDEEP

      196608:LulHFTfZw+wc9JqtYRbhXwe88adZTZsWo0K:Sd0+wc9JqtCbT88iTZro0K

    Score
    1/10
    behavioral7behavioral8

    • Target

      DevExpress.Data.v17.2.dll

    • Size

      6.1MB

    • MD5

      478524443e05d5012960dc2db9a89c21

    • SHA1

      c549c16b3099c153036ec7c4e1a9f6cd29256db3

    • SHA256

      f74aa8410a784e09ef50d23c4a3684d2e34b0d4da827bbe88a394e3c66edf067

    • SHA512

      3d4600222b71b0a73e258cd0f9a7b1b6f117343c3b484a8525f69d35a9e4edbd296bd041cf34888508c2d1499a157dc4e797ca0044a3990ae29be9c5d6bd1061

    • SSDEEP

      49152:xGJZEqY6Ew/nq/9K/P/V4sCD5WL1S1dFw9jO6XXG4xfTatFvKOQNWrq9PU+Qnyez:x2ZEqYPs/P/V4WL1S1dFAjO6XW40b

    Score
    1/10
    behavioral10behavioral9

    • Target

      DevExpress.Dialogs.v17.2.Core.dll

    • Size

      365KB

    • MD5

      d7ec772165ebf590021b9efa7dda7a8b

    • SHA1

      c180451c595d09d3a2c614f96364f36b504e1568

    • SHA256

      ac8170a017faaa3b590842a2bc6ec1f06a1c8e97cd40d6f653d1de3c66b20afd

    • SHA512

      72d977d630de5bc76128ffa703f984b7050c26b30b6b190e56879722a2737309c7ef9f4965b2d095b485511509e03771d3a2b0dbad98074aaeac3314bd576673

    • SSDEEP

      6144:+7zajTX3mXAMDA7VtQCWMhWBtDjLVwW3a2HDIly:+7G3uOOh0FG

    Score
    1/10
    behavioral11behavioral12

    • Target

      DevExpress.Images.v17.2.dll

    • Size

      4.5MB

    • MD5

      1bf242a9734876c778c708f8dad91667

    • SHA1

      aec8a9ed5d58291a2c8d34d54c69141e644f398c

    • SHA256

      e612e5cc15f960bb3cb066992fc6ac0df2c399989cce4e9adf1f398f5a99a13d

    • SHA512

      b43314505eb76b83596db8962569678ca414ff9aa7e8e838be82355c4090d1c895e705e6ad787e434b2922c0088d23cabe1ac026f8ec92227f84b64762426833

    • SSDEEP

      49152:q4ymHZT11v2pAeyATtVhPiY13pxT2VbqWmUZrW4MWoczQWunpe2Kqs:q4nR2pyY1ZpubDZCxWzQWunptKP

    Score
    1/10
    behavioral13behavioral14

    • Target

      DevExpress.Office.v17.2.Core.dll

    • Size

      2.0MB

    • MD5

      4e5c24f51955e2c224be536d712ec098

    • SHA1

      e05081a5a02f1ee048b235a91a023deef77be973

    • SHA256

      279c60b6b15a299e35471eb47939d633253cc08a895f7972fe288ce8307817b2

    • SHA512

      cd4c3bc9e8ceba4cd3564c2649beaab8da8cbae52ed6915b6188b43fe4ccef07d94ab37ab2644e13a2671e4c17e4b4843e362fe4ea31cf437745ae53cefd55c3

    • SSDEEP

      24576:qGdBh9wEioWaJZxb5FC1P5K0Stl8YPMxbGnVlVrpMp:q2Bh6vqYPvpGnVl4p

    Score
    1/10
    behavioral15behavioral16

    • Target

      DevExpress.Pdf.v17.2.Core.dll

    • Size

      2.8MB

    • MD5

      a689fb19c02e73c95e005a0122ee2c0a

    • SHA1

      454381c7750547a7ec1a94c9b5f42df9400cd0ad

    • SHA256

      83c45db1b1dd2be64bce22996a132e1009ecd376bf966b5ff8c367f2b81589a1

    • SHA512

      bf75782813e7ee72ae47ed4015573a34665eb25d23d4a416dec3e0a2068b56fb8844131fc31bc2bad9f168231db4cd57fa092f91047a1c04e0da43707e05092b

    • SSDEEP

      49152:DhSYca++IXQO56WVCCguWl6tbp/l+RXKlUJa2pTEI:rq+0tbC

    Score
    1/10
    behavioral17behavioral18

    • Target

      DevExpress.PivotGrid.v17.2.Core.dll

    • Size

      2.7MB

    • MD5

      8c8752282182cc30ba7638073a17699d

    • SHA1

      7eef2a796758c4476e6351e2b2984a3dbd785cc1

    • SHA256

      4eac0fc7c940f6721ec778f330e2424ad376f494715e30404d08d0c600829f65

    • SHA512

      6d5393b4754c51a8f57ea2ae3bdcefb4b7efdcc8a730c7cad7ed0ca9c10eb8148fce5a3606c632b02df2ad46d485ca3bffc1896ab216000b8b5c4810f0da59eb

    • SSDEEP

      49152:oMqLAyl67FSYYeMvbsgBQ5DsMaOR6tUuaTdk:Skyl67FSYRMx

    Score
    1/10
    behavioral19behavioral20

    • Target

      DevExpress.Printing.v17.2.Core.dll

    • Size

      4.1MB

    • MD5

      70ee3f1926f63e7e327b462419be9885

    • SHA1

      a7d75ab346d2299ac112218b73c05b1bd8b88fb1

    • SHA256

      7aae34e9fd73bc51e2ce823a0a661c6bfd2d1d815cf17a5ba951066c3fa7d0b4

    • SHA512

      84ebe05f25c04b448b9ee3d8eef42a2f423d9f48f08a42b889e3523f68b8160147f0862d04377aa77d986e1cec5d55ff680efa4bb32e5a4a41cc2874fcadcd96

    • SSDEEP

      49152:TjMfTxoEvXY8mwOhp/tPmmcL8gxeyS/vGbe+hxYbnQURerPN+3m+o7Hn6ajZZ6ng:TKWOXYHNn5DXgxjS/vGpN

    Score
    1/10
    behavioral21behavioral22

    • Target

      DevExpress.RichEdit.v17.2.Core.dll

    • Size

      6.2MB

    • MD5

      ceb73a9085a160ae3a387c287a6c73b5

    • SHA1

      2248628d43c3a49dfe900c8001506cdbd450c455

    • SHA256

      05c2f40468d60cf53e0bcbada3d88191fc77645aa236ed2f1fc6fec7dd790122

    • SHA512

      876b0bb2e6ad556d78ebb567e91716321f3e90464877f3020772744491bd43adcbdc0ca496a69ccbf2fb9e7ef8626f3f9290c3ccac1d0a91634a14b37e716716

    • SSDEEP

      49152:5QERO77g+IHxBn4o4pEJJPtQb66hFKJwqYXynVUrnSnFTcQgim8QJuBzJeHUIP2j:5n+joBPmaJwqYXynVUrnSnFTSkT

    Score
    1/10
    behavioral23behavioral24

    • Target

      DevExpress.Sparkline.v17.2.Core.dll

    • Size

      87KB

    • MD5

      c55a1fd84c02818ddb3fde770141c265

    • SHA1

      673f45c1167a00ddb1d1f7f304a518ec3a611388

    • SHA256

      3d8efc142d8a5898d366cc621342c48d077dd5751a11625ad9aa920c6e473139

    • SHA512

      d7b974d35c6cc75890636e9cb57dc07c4ac93b255d467195870cf7b18fa95c91f932d79cb150095a2d73fbcfd9952d737f8bcb952bf61bf4212cb882634c9ab1

    • SSDEEP

      1536:UovLCaWmC9Evc8ww+3qkgT2mJDcDmQW+v/HFe9290yqpjzsaS:rmaWmC9EvfF+3qkCg/v/HFg290yqtIaS

    Score
    1/10
    behavioral25behavioral26

    • Target

      DevExpress.Utils.v17.2.dll

    • Size

      10.5MB

    • MD5

      48c6c1dca86a4e574b5edaf7646abf83

    • SHA1

      cc25e7c1007b614c26af9da6ce5837114a667b11

    • SHA256

      58bdcc2cc8e95b244779cba0a64780a2d8e6d725b7fabac406949a30788828d3

    • SHA512

      98763db6da6594301b14ac27817add58db404b9caa4b3ab684592d211edd5420bc0e914cfc041bb3eb7b2e46ea4c7c0e8cc76dc4a61c97e1a4c1c2ab31996838

    • SSDEEP

      98304:DMs0sRhmWAOfraPVBel0bBO/a3yQXIXWZakJZQsRbjgcSca11rWN:DMs0shmWAOfraP8KNXIXMrRbEcmLE

    Score
    1/10
    behavioral27behavioral28

    • Target

      DevExpress.XtraBars.v17.2.dll

    • Size

      5.9MB

    • MD5

      4c01a13cce47422f22156f388db0c3ca

    • SHA1

      82465a2cb84385d375efbb020b73f8021189cbe6

    • SHA256

      9d1fc82a3ecedb95ab7a1f5ffcae11fd26c1d9f8884a45b95e0e1f3d2e461f04

    • SHA512

      ca8188362afe148363ca1b31391eefb3cacf063109c6ca54df1cc35119fcf071f32f18126934707011916a114e173044a3053bfd0ba36dcde27b70aebb4b5887

    • SSDEEP

      98304:sq8CEd/TgY/5Uf8WAOfraPxWAOfraPSydvYZOy:sh5TWAOfraPxWAOfraPSyl2

    Score
    1/10
    behavioral29behavioral30

    • Target

      DevExpress.XtraDialogs.v17.2.dll

    • Size

      155KB

    • MD5

      fd6d88ea7f3e88bfa63b49b98930fcc3

    • SHA1

      976eda9b3e54f08386d078712d80141a9b554d4e

    • SHA256

      392ad0103b58beff24468e5f4231a61f62d3275b7762c89599bc28ef9c68655a

    • SHA512

      03e21b53b3db1e1a10da484f759e6f10b6063d356b6c8fd176606338d7124c45f8ca3475af5ec64db2c6ee2ab06d7bfe5f6ccf2f954f9ca6775992ad7ac89dd2

    • SSDEEP

      3072:RW+NHr3EDLLqG81EN/QogwhoD8S/7zLOqXWqQDoHtjao:Rrtr3EzqG81ENswhoD8u7zLDXWqQDGj

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Tasks