Overview

overview

7

Static

static

3

5ea92cd1af...dc.exe

windows7-x64

7

5ea92cd1af...dc.exe

windows10-2004-x64

7

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows7-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...86.dll

windows7-x64

3

$PLUGINSDI...86.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ea92cd1af34a0faf1293afa648e3e1e610d89deaf663b4a75a38fbf03ba99dc

  • Size

    2.8MB

  • Sample

    240522-cr7yzshd4x

  • MD5

    947a675e4e4f84e6eff78ce0e38c49d4

  • SHA1

    bed973f3e5111c5061a5d77ca142ab456c3afde3

  • SHA256

    5ea92cd1af34a0faf1293afa648e3e1e610d89deaf663b4a75a38fbf03ba99dc

  • SHA512

    c02de2627256abe1065ec6391a464e2aebc85c38777c3b1a85e778573b769e703bfa736f0bb3a311ed47a5eaafc8be399fd5c3ccdd8065f1d2e6345b3ebed049

  • SSDEEP

    49152:UL6oFh9kV1s8ohLikBcjQqzZjwdWdpsenkgt3cpfvl43mTfU6vZma0MK2E:ULjFPs1s8SLvCQq90dCP3qO3b6vP04E

Score
7/10

Malware Config

Targets

    • Target

      5ea92cd1af34a0faf1293afa648e3e1e610d89deaf663b4a75a38fbf03ba99dc

    • Size

      2.8MB

    • MD5

      947a675e4e4f84e6eff78ce0e38c49d4

    • SHA1

      bed973f3e5111c5061a5d77ca142ab456c3afde3

    • SHA256

      5ea92cd1af34a0faf1293afa648e3e1e610d89deaf663b4a75a38fbf03ba99dc

    • SHA512

      c02de2627256abe1065ec6391a464e2aebc85c38777c3b1a85e778573b769e703bfa736f0bb3a311ed47a5eaafc8be399fd5c3ccdd8065f1d2e6345b3ebed049

    • SSDEEP

      49152:UL6oFh9kV1s8ohLikBcjQqzZjwdWdpsenkgt3cpfvl43mTfU6vZma0MK2E:ULjFPs1s8SLvCQq90dCP3qO3b6vP04E

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/FileInfo.dll

    • Size

      720KB

    • MD5

      a3226dd87d13bb425e1a9d180eed3018

    • SHA1

      6b247e0ed12ef17eff962aaeeb8547c5288e0904

    • SHA256

      83c0b802b0c1f5fb2eefb428296b8424f7cd724f9b51384220d20f9ca34d842f

    • SHA512

      d6d90d9ea051eef9a3d41e24929a0ebd577562fabd5ad82bef3107348022fec05921de7c76c0961ab0a6ef7609f9c6c5c6b3372cf23b52dbe90c1b666223a73e

    • SSDEEP

      12288:KyverRy6NIkxFMu+4dC61me3qwwvXHJv1+w/ECsFvScB0MG8R5Tfb+2mPousVQO:Kyve9ywx3V739wBv1+wudS+0M7rTfS2n

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/SetupPlugin.dll

    • Size

      4.5MB

    • MD5

      f4ce541995d3590defce492118201c8b

    • SHA1

      ea47147a60e43fe52255fa1bc94175569759e14b

    • SHA256

      dde544dbdaf387112876e1c07b2f28bf63414b79a99e5874cbef354ebd38c8a9

    • SHA512

      6b07de0f1536643b6df443f82e4d89182e85ecc6d22b624a0b3e8a5552afc25bd76bdb94cd6e98206c906cb2bd875bd456a84a9d87a13b506d92530666b84299

    • SSDEEP

      98304:fjqq0MfpFifoXUqiIMtpcdFRaPHIuo9WG:fjq+4f0UquG

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/libcurl_x86.dll

    • Size

      1.9MB

    • MD5

      7b61b308a44540f9832b00c4a9d6919f

    • SHA1

      3b0fb6be61fe3dd36a90b787dc0df36d5e64a400

    • SHA256

      0e3ed2064e425a79c5375be166446b3e0698710fd27e1bedd47f3f1558631cee

    • SHA512

      12a8c8d31ebb299a9e5938bf6ef901d4afae8b36bae11a3065c38aca98cb1384c03e6384c32e63f96e7122685e579670bad97e02ddf1cb806c1225b5da7747b8

    • SSDEEP

      49152:2KNRWsevHiD2PUPYd/K0Zq9KyQmyrq7eOP2uQqfbwo:2KNRWse/iD2MPYd/NqgJrq7ec

    Score
    3/10
    behavioral10behavioral9

MITRE ATT&CK Matrix ATT&CK v13

Tasks