Overview

overview

3

Static

static

3

mamosis_v1...tor.js

windows7-x64

3

mamosis_v1...tor.js

windows10-2004-x64

3

mamosis_v1...rp.dll

windows7-x64

1

mamosis_v1...rp.dll

windows10-2004-x64

1

mamosis_v1...ne.dll

windows7-x64

1

mamosis_v1...ne.dll

windows10-2004-x64

1

mamosis_v1...ty.dll

windows7-x64

1

mamosis_v1...ty.dll

windows10-2004-x64

1

mamosis_v1...on.dll

windows7-x64

1

mamosis_v1...on.dll

windows10-2004-x64

1

mamosis_v1...on.dll

windows7-x64

1

mamosis_v1...on.dll

windows10-2004-x64

1

mamosis_v1...re.dll

windows7-x64

1

mamosis_v1...re.dll

windows10-2004-x64

1

mamosis_v1...ta.dll

windows7-x64

1

mamosis_v1...ta.dll

windows10-2004-x64

1

mamosis_v1...ce.dll

windows7-x64

1

mamosis_v1...ce.dll

windows10-2004-x64

1

mamosis_v1...ng.dll

windows7-x64

1

mamosis_v1...ng.dll

windows10-2004-x64

1

mamosis_v1...es.dll

windows7-x64

1

mamosis_v1...es.dll

windows10-2004-x64

1

mamosis_v1...ns.dll

windows7-x64

1

mamosis_v1...ns.dll

windows10-2004-x64

1

mamosis_v1...em.dll

windows7-x64

1

mamosis_v1...em.dll

windows10-2004-x64

1

mamosis_v1...on.dll

windows7-x64

1

mamosis_v1...on.dll

windows10-2004-x64

1

mamosis_v1...tp.dll

windows7-x64

1

mamosis_v1...tp.dll

windows10-2004-x64

1

mamosis_v1...cs.dll

windows7-x64

1

mamosis_v1...cs.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Super Mamono Sisters.zip

  • Size

    110.6MB

  • Sample

    240521-q25hhagb2v

  • MD5

    2989d4af04049969209401af47c43e8f

  • SHA1

    84c0e0ac56c7be3b7314fb039937e60ef4bd79da

  • SHA256

    a7802294cd32041dfd96c31952bf8ebbd9f594704de5ea04e5426d9989c6a437

  • SHA512

    09bca8052f59700e3649e347380eef79a914895a13ffcc2a2aca922e84bf0942a2b1a3419947559847145fe439e4591a2bf4c1f96d37ec663ad4fcded5d774fc

  • SSDEEP

    3145728:Xv26EetpoP7FtR6v8oa+0mdsJJR6v8oa+0OBlIBF1Z3o:T27FtR6vFdsLR6v5BlIbT3o

Score
3/10
execution

Malware Config

Targets

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx

    • Size

      59KB

    • MD5

      f7be9f1841ff92f9d4040aed832e0c79

    • SHA1

      b3e4b508aab3cf201c06892713b43ddb0c43b7ae

    • SHA256

      751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

    • SHA512

      380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

    • SSDEEP

      768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw

    Score
    3/10
    execution
    behavioral1behavioral2

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Assembly-CSharp.dll

    • Size

      1.2MB

    • MD5

      cd72945e1e73c91bf9943b9014969138

    • SHA1

      b88516a38745f67d432e010487ca087a1f4dfdb9

    • SHA256

      f382051d6d52f095177c8643c5ce48866b2b67992729a95f28a74d4eb54e2fbf

    • SHA512

      56b3631834e07b2f144d7fd44dcb26a8178f10706fec67f44cf326833979cfb35835fb53093021b2045f720648c074a31a5098463f26fb2db1ae33ebe239a979

    • SSDEEP

      24576:5vXymNzk4eHcvFlfWUKHwS4dAnPmCYzq9zPD2t:J3ccv3fWUKHh4cPmVzq9

    Score
    1/10
    behavioral3behavioral4

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Cinemachine.dll

    • Size

      180KB

    • MD5

      d3ed19fb7004a86949402afccde5708c

    • SHA1

      4a031674893ca8f4390e07adaf7c6455873b0221

    • SHA256

      de5641121633bf696bb2cc7b1c5a9311f2b873c0f64db90f676c52a184c549cc

    • SHA512

      d3620c561378643cd02bbf89c328edcd96d2d904e808384004e1e24b8d64981e36b9f66f23179becc6f9c2c4d7e4ddf5caf5bfc53515be0228a73bec7742d4d6

    • SSDEEP

      3072:F/OW2UI57M8xAS3Ih86HTSPo+p7hwFEdxTHnRtzX42mxu6QwExxZfyus:sW2ClhCzhwFEvHRtzX42mxjExjfR

    Score
    1/10
    behavioral5behavioral6

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Mono.Security.dll

    • Size

      303KB

    • MD5

      eddf06cb44a30e2c53ff2fc1d808b474

    • SHA1

      64e5d76e7a5432651cdac33f2b37474ddfa8d5a6

    • SHA256

      9193f0ff8e21a379590f1783ad0221f1be888a58c7d3c5d336157363cfc2c3c2

    • SHA512

      e6d7c33e94a9b4bcb4973bce41f18cd1318c08f77aac9f706af4904e67cc7589eba1c8005f57fe04ee495324a679b9bfe7f66248f573a88d5df9ec4878a43382

    • SSDEEP

      6144:/uca+sTOwf+31OE5FXNywY1URfxAoXj5wf:3Ui9kgx7

    Score
    1/10
    behavioral7behavioral8

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.ComponentModel.Composition.dll

    • Size

      242KB

    • MD5

      071ad68ee361f95ef5ddaf510e741833

    • SHA1

      62df8658d6dc47012ebeb12f336d0f8a0ae60a97

    • SHA256

      27856204fab404d0382b6967f6fa8ddbc979d653b1d8884fc2866630485907cf

    • SHA512

      f2062db6061c15be6a98072b8e1be2279ee28e437cebf0aef0234da8ff0c0eaec75c658452ff6249f672ec440a1bcc741fe4037618efac242a612f27f6c8a744

    • SSDEEP

      3072:7dpvT15KXwrqrkRixoK47Sr73v/1fLExXEGgDX/EOoRlKPW10QgFLqRRRRRqqS6d:7rvTmUTTOoRlKPk5gF3HoJ0XtCea20w

    Score
    1/10
    behavioral10behavioral9

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Configuration.dll

    • Size

      42KB

    • MD5

      602b159095cec1f883081c226a140faf

    • SHA1

      ab88cbe4ee0527164af4432fb0b6f1d47fae5924

    • SHA256

      bfa45972ccfa3d9a54250723afb3f67ff18e51ab5f05787adf60022406cdfc6d

    • SHA512

      02475eb4b380bf2039ed2b609e75e549b4354e93c65244e40111f2c52b1b18f6d6e43a9bc0f96ca6c89fd86cd411e9dac2f7723cadf89dc6fef02f7d1815c911

    • SSDEEP

      384:yC2yuMNMMZJN56g8mKo/hjp0r4ourMVSzciDqnjdiaFg9/Ses93HE7LDaXTSv/fH:yyP1Sm3ScrMdWgdVl93kZAarx2ZJv5

    Score
    1/10
    behavioral11behavioral12

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Core.dll

    • Size

      1.0MB

    • MD5

      8ec19e7c7148f05c588939077c1e5198

    • SHA1

      c9f3e71d39b07754e67293a10744ae68741e4659

    • SHA256

      d459666c90505252467cb55cf256216e79138b812515118ab8bf4546e1203056

    • SHA512

      66e490310a70e919ca1c2d9ad0dd4d1672e41c277e81bd7828698fa8cf5b9ccc8c124d489ef81fddc40dddff89c441b1085c2c51466156e1d322212d6470bf06

    • SSDEEP

      12288:QHJ2eJWqejMiMRDm3l2fo+5HcXILaRbm57iNC/UB1658Skd5kcowul:QHFGoqCUXAkdecowul

    Score
    1/10
    behavioral13behavioral14

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Data.dll

    • Size

      1.9MB

    • MD5

      10717cef3ae19e0e087ff7941dfd1253

    • SHA1

      09d8446dbee9f35629a76b49e1754b0bdb655070

    • SHA256

      5f4c8eeb9d90ed8b79125961b5a467ea79a3ac98e64589192ed4726446b0d846

    • SHA512

      c9b665e61371c791158c72f284794192e8f8bf3a1681b3e2b884a247a7617ef85229a83d05c14e94185134798f14d0b8d2e144241895f118e9199409573f51a3

    • SSDEEP

      24576:7etFgYwMkru3rrFdx0dkR9VUJLdaD7y7X5bLid1EB8vo6Dpc:EFLwirZ0CUJL4f1EB8vjp

    Score
    1/10
    behavioral15behavioral16

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Diagnostics.StackTrace.dll

    • Size

      6KB

    • MD5

      837ca84060955efadace9feba859866c

    • SHA1

      5134e4c3af73a22a66c40b25904e706e1e7dabc4

    • SHA256

      e6174b8c27e606f7b01e7f0b8d9bec935737b68f9ccd6753af5ef6cfa3cde0f6

    • SHA512

      fcc99f1283e8594b924de26f61204c5ecdd017a59af9dc9bcbd6f705fbc8da8f55f1509232574d687816bf00db8652076c1f2a6af56075ac266ae68319a6b387

    • SSDEEP

      96:Y5SzrdBy6UFfVGJfFPlcvxvtVWLIOCua5fpbe1xa0:Y5QfnUF9GBFPlIxFV+CFTe18

    Score
    1/10
    behavioral17behavioral18

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Drawing.dll

    • Size

      180KB

    • MD5

      08cc6f81412ea851495a6e882bafdb8b

    • SHA1

      fd5f347bd9a26398d8cb497ad71020c5974c990a

    • SHA256

      bed40af24608db6eb8e7013d7f8f9ae1ff5ff01c1ceb34bea679ed5424374caf

    • SHA512

      2eec2b9827667598192a5481ac97908601283c1d5230a25a81be638beccb0adfb3824e17942bb5cc3880b02d0d56673cb6f42d4b047ceb3a1689fab8f2414681

    • SSDEEP

      3072:vigawrUmay+yV3XOe3QpYbh+q9FR3F7lx:62VnOppYbh9Bxl

    Score
    1/10
    behavioral19behavioral20

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.EnterpriseServices.dll

    • Size

      32KB

    • MD5

      d8293d73decc6c4dfe4703bb6141dfc0

    • SHA1

      c5023153fd21bd6c16b188fa0eb977d7768ba9b2

    • SHA256

      f2e9913f0ddd1a46fbfc03f04157ac90af8713ba33e00ac5d9b7771f56a4e699

    • SHA512

      bee56fdb15189c27f99eb5a01579b15434afce17f106b31c1d9b9d49192be3ecb66f440b330381c252c4f775b0fc57d6a118655bc8154bbcd2d4be1b5905623c

    • SSDEEP

      768:EFDPgwXPjXVB1SeXbtjfLWifV1jmadK/wDS1ubnRkQK:ERPgwXPjXVB1vXbIifbm8KoS1urRkQ

    Score
    1/10
    behavioral21behavioral22

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Globalization.Extensions.dll

    • Size

      6KB

    • MD5

      a419c13e307710d3a0befebaeb5aaec0

    • SHA1

      185193226f2c15ae52b53cd8c1c1ead85d2316c6

    • SHA256

      00f3694638f81f94735a1963c60855b973c6972e3f774f4f4ad72d2a03a71338

    • SHA512

      2c8149f372562dedec65faa4d751a9e6ffc377dc6ef6cbc3ad73d70344a7e8f91b01dba62e12a7962735d748fd714203aec15ad9fe8cb1abfd7448429d8cd182

    • SSDEEP

      96:g4ggaqpBVwEwpxv1earj5OARPtcRQKRWen0R/0:HlOx3HQARPCRpRWen0R/

    Score
    1/10
    behavioral23behavioral24

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.IO.Compression.FileSystem.dll

    • Size

      22KB

    • MD5

      dfcbca4322a8c2a22d15e55e880e7b2d

    • SHA1

      bbc9d98a71205fb3eff218fc80179c7019a9a0db

    • SHA256

      e66102cee771f393fd9a6c9dfcb00fc705d7e8d74d4d709425ff45a04e8a838b

    • SHA512

      a8db39dd5067a74afafb1c4873e70b7c060e4e319f666d5568531de7646f78102d8c889e2e98ede6480e69e98f1ba779208ee55325b0f8a5deb22f9b719277dd

    • SSDEEP

      384:N930DrKcLQhPZcNgndNzytVTl0JRbli3ESmMadMMtDBEb/gYFf0B7a:T0D1Lhs6Me6

    Score
    1/10
    behavioral25behavioral26

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.IO.Compression.dll

    • Size

      96KB

    • MD5

      66c6515f6c3c3cffc4d9c455cd3fb402

    • SHA1

      ea5c80343acc0e0bc27d2a8552f64839f5d38bde

    • SHA256

      3b22f17ae61d78f64ada551b56c552f050c8e2c51536b1f7f94682cd70eb179a

    • SHA512

      a5a1c1754c5618c3b4cc7b9abc5ebfb4f08cd05d846db75297411ae91f8dc55352e384056e8c36a3f6f1c8bc2497ea4c8ab89a89b05d30e643747b7483633b29

    • SSDEEP

      1536:pVYlTkwzl46ORXHNopHEJo5JK1/E9ITZOBLOTX8EHujjHs67b:pVYZH5460XNopgo5JK1s9NCTXNHuXTP

    Score
    1/10
    behavioral27behavioral28

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Net.Http.dll

    • Size

      112KB

    • MD5

      1c6e95b5db21d28d2e34c4f66f431519

    • SHA1

      6bedc1a36829daf1929ebbb73aa13bc4cf6d9671

    • SHA256

      9689c6c1deed9f56fc9a0bcf6516279747feb366453c21f3118bab73b36e97a6

    • SHA512

      b5ebf9ae6ba163ff84c0a2908ef0f6e664a439415a8c38f13caac74f21bd2c2485ed5ea0e092f82bfd4d4d706054d9cb15c1563e2019e294969c226162290e67

    • SSDEEP

      1536:tRfx2tSFNT2MqE17jh1hYg0CPa3sCSBjM4OeP9az/XOPb4nQ/7BY:tZZ3quXKACSBjM4Oskz/XOPb4n01Y

    Score
    1/10
    behavioral29behavioral30

    • Target

      mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Numerics.dll

    • Size

      111KB

    • MD5

      bc32583641cb4e0e9552abac4547eb15

    • SHA1

      9976a03cf64c94de7b546e79e7182f1374f04018

    • SHA256

      aa14d6fe685dea93856b209f78ca301549b5af4b658056ca5da03a383c004c7f

    • SHA512

      c98b9d144b9a3dab503411c43ba980c640eec98a6b9fbfbf95fbcd08ffe039be874603e3ff61863456784d149e34764e6773a7879fc44ba3e2f8c06c639ae498

    • SSDEEP

      1536:WtbXi3q2X2T+jc5o9SQMhhuiVEptn+igiqW0NzN9CXI0pVzDtPrXpNPRGHBd9cW:L3qKc5oEhzVKtfg7W0NXlG3tPrnS/

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks