Overview

overview

6

Static

static

3

mari0-win.zip

windows7-x64

1

mari0-win.zip

windows10-2004-x64

1

DevIL.dll

windows7-x64

3

DevIL.dll

windows10-2004-x64

3

OpenAL32.dll

windows7-x64

1

OpenAL32.dll

windows10-2004-x64

1

SDL.dll

windows7-x64

1

SDL.dll

windows10-2004-x64

1

mari0_1.6.exe

windows7-x64

1

mari0_1.6.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mari0-win.zip

  • Size

    5.3MB

  • Sample

    240522-24y92sce7x

  • MD5

    0e33703bb1e6f0decf01e613e4313f93

  • SHA1

    0153a306426762ccf7bb540b02550b73f95ec71e

  • SHA256

    8bb79293e59e4fbd16f770848d90c6958c4f37b945e2c18d3739bbe7520f33a3

  • SHA512

    24ad844ccda7cd09a23eb1b42f3de9a8d29864d64c524bee43237e5d5062ce0447fe44db8dc005058fd8a8bb4903061deaceaf6add623b8fb2c7525f777c2bac

  • SSDEEP

    98304:dNJELkGBNz6SD+dOk5iKrDkjkdyClgi77X8g3t4aeQR2XxsJyplbr2wwGcTV:NEwqNRi82Z6izlgi0oSyT4brnETV

Score
6/10

Malware Config

Targets

    • Target

      mari0-win.zip

    • Size

      5.3MB

    • MD5

      0e33703bb1e6f0decf01e613e4313f93

    • SHA1

      0153a306426762ccf7bb540b02550b73f95ec71e

    • SHA256

      8bb79293e59e4fbd16f770848d90c6958c4f37b945e2c18d3739bbe7520f33a3

    • SHA512

      24ad844ccda7cd09a23eb1b42f3de9a8d29864d64c524bee43237e5d5062ce0447fe44db8dc005058fd8a8bb4903061deaceaf6add623b8fb2c7525f777c2bac

    • SSDEEP

      98304:dNJELkGBNz6SD+dOk5iKrDkjkdyClgi77X8g3t4aeQR2XxsJyplbr2wwGcTV:NEwqNRi82Z6izlgi0oSyT4brnETV

    Score
    1/10
    behavioral1behavioral2

    • Target

      DevIL.dll

    • Size

      715KB

    • MD5

      0acecf404b56a55034b250214c8bb643

    • SHA1

      0f492a0d0060b65a8aa72786012654446bca5414

    • SHA256

      9f7cb3667692e669c017e71cff34a4047c191b0a243e093bc6004e482df9bcf8

    • SHA512

      0ba838f08111d1071480c522e34d2572587c0f293523c5c11a0d5dab0fb50f7e84dd51d647ee1dc7e175d9cc505276650183c0ea3adc8e1c4377b91732e17e27

    • SSDEEP

      12288:HLTaZaewq5fH4FwaRXPwGgCaShoknPysfsntz7JY83IGooN47k8TsFXyvn:HLOaewq5f4FwYPwG6sfsnRJY83IfoN4B

    Score
    3/10
    behavioral3behavioral4

    • Target

      OpenAL32.dll

    • Size

      462KB

    • MD5

      ddf6fbb5ccd9a62d74c516ea05d3ca97

    • SHA1

      f161e49b42b1a23a3fb65e46f6744114e7a1a4e4

    • SHA256

      64c7377a1a81e0d07465c14ab51b9cb123037b68cad02d67a5dbc232c04b43f0

    • SHA512

      df43f5a7ee1c47017afa070277cde436a4faac5d65d27d084ca52d750af1ea7dd3b4851f08130502d93d7909d738e9faf832413805cbd9c08ebc4a1f2b53735e

    • SSDEEP

      6144:fQf2w3wTC+/DJfmIxrn00L0W08OenGZl9CI5M8RRgzAOn9m:fQdYVmICZZl9C2M8RRQbm

    Score
    1/10
    behavioral5behavioral6

    • Target

      SDL.dll

    • Size

      350KB

    • MD5

      345ef7ef34b773ca7390a20f828bc377

    • SHA1

      19166d50cf08bd6e229e34e0f9aee9c4d873522f

    • SHA256

      13a0a706fecc447915f92bb3dfb6c891c0aaf9d9687d083a35e790855e23b90e

    • SHA512

      501fb92b305d82beedfff383fea1437429806ffcecdcb29c65ba78711703036bb8938968e268898f019cbccdf0c8836c65b29e43d1a239c34a153e3e7f651779

    • SSDEEP

      6144:YAlqituBKEAT0IIpcA+Q9uxolCkrmgAfIy6mvFyUUcb3yt0N7D8nmB2K4vIeEgA3:YAlqitiKEAgcA+Q9uxolCkagA96mYUjl

    Score
    1/10
    behavioral7behavioral8

    • Target

      mari0_1.6.exe

    • Size

      6.7MB

    • MD5

      b5c761cfc3a3f354a59a1a9d2190135d

    • SHA1

      416f32e1c9fe70cd4c62475aa2168304d04cac67

    • SHA256

      ed1706f0f6e6cf4e32a86be61acf0d334d7c8abe8825e0075003449101164c01

    • SHA512

      ed21a0fa1fc8e4f1bd84ece8bcbd84cc9ebdf97af519454f27eafcd22f1c147db1e1f8f95a01e1c0cb9fab344ce99da68b3b27635b184ed68227d362793be327

    • SSDEEP

      98304:XaTJmMOxiOSenYBFoEKHhqW6H342OQ52hbsT69QVyIGguj:KVFwTShFmBtgoCprUXj

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks