Overview

overview

3

Static

static

3

a990c3f49d...e2.exe

windows7-x64

3

a990c3f49d...e2.exe

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/LogEx.dll

windows7-x64

3

$PLUGINSDIR/LogEx.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows7-x64

1

$PLUGINSDI...in.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

CommonWindow.dll

windows7-x64

3

CommonWindow.dll

windows10-2004-x64

3

ICSDHCP.dll

windows7-x64

1

ICSDHCP.dll

windows10-2004-x64

1

ImageOleCtrl.dll

windows7-x64

1

ImageOleCtrl.dll

windows10-2004-x64

1

InstallDriver.exe

windows7-x64

3

InstallDriver.exe

windows10-2004-x64

3

IpLib.dll

windows7-x64

1

IpLib.dll

windows10-2004-x64

3

MiniNews.exe

windows7-x64

1

MiniNews.exe

windows10-2004-x64

1

RaAPAPI.dll

windows7-x64

1

RaAPAPI.dll

windows10-2004-x64

1

Repair_WiFi.exe

windows7-x64

1

Repair_WiFi.exe

windows10-2004-x64

1

RtlIhvOid.dll

windows7-x64

1

RtlIhvOid.dll

windows10-2004-x64

3

RtlLib.dll

windows7-x64

3

RtlLib.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2

  • Size

    3.2MB

  • Sample

    240523-b1v54shb28

  • MD5

    c363a0c86e73dca815cfe6e828634b23

  • SHA1

    7899ba0934f84891ec6a9f3e1a9dd11da7aedc58

  • SHA256

    a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2

  • SHA512

    869116c9bb3d3ddd2f30d96b38decaf76dc75921b5222405fcf1eb27864193ef1a5730ea89e5403e742f8c70275ab7c17dafa145d6d529583d967eb087ec9fac

  • SSDEEP

    98304:idWZorcKUo4/hHLYaQWhObQREI3K4OkY8iC:iw25T4/hHLY/2ObQ2adYo

Score
3/10

Malware Config

Targets

    • Target

      a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2

    • Size

      3.2MB

    • MD5

      c363a0c86e73dca815cfe6e828634b23

    • SHA1

      7899ba0934f84891ec6a9f3e1a9dd11da7aedc58

    • SHA256

      a990c3f49d68d4fa59c91948f939a644cf0fe305c5ead873073c886c4d581de2

    • SHA512

      869116c9bb3d3ddd2f30d96b38decaf76dc75921b5222405fcf1eb27864193ef1a5730ea89e5403e742f8c70275ab7c17dafa145d6d529583d967eb087ec9fac

    • SSDEEP

      98304:idWZorcKUo4/hHLYaQWhObQREI3K4OkY8iC:iw25T4/hHLY/2ObQ2adYo

    Score
    3/10
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      492KB

    • MD5

      633625aa3be670a515fa87ff3a566d90

    • SHA1

      de035c083125aef5df0a55c153ef6cc4dd4c15b4

    • SHA256

      bda8e0ddb672ea3558ad68634c49da06cd72f93d7fca642ca41df00e26512df1

    • SHA512

      3c687ddf0e4e93a6787a23a93e2011df42898f6d21101c848a1b7c7bd2eddd5d49fdd0748e47e6235e7808596d00a1ecf79b5c975d050dd8d00a95f515a444a9

    • SSDEEP

      12288:LAeafIS4J8anXexYWGRhvgbTu4RJ6//sCMUx:04J9/WGRS33+

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      36KB

    • MD5

      1cc87d2b5a79b18f133b4f944e2f2f74

    • SHA1

      98e0ddb727c76e06be1668434d754e5b80a0c154

    • SHA256

      de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed

    • SHA512

      d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9

    • SSDEEP

      384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/LogEx.dll

    • Size

      44KB

    • MD5

      0f96d9eb959ad4e8fd205e6d58cf01b8

    • SHA1

      7c45512cbdb24216afd23a9e8cdce0cfeaa7660f

    • SHA256

      57ede354532937e38c4ae9da3710ee295705ea9770c402dfb3a5c56a32fd4314

    • SHA512

      9f3afb61d75ac7b7dc84abcbf1b04f759b7055992d46140dc5dcc269aed22268d044ee8030f5ea260bbb912774e5bbb751560c16e54efa99c700b9fc7d48832c

    • SSDEEP

      384:w4NSXFjXCATBAQR4F1Y5u6I3wa4W7KNP66BjLjyXB0JyuDchv8EnohgSil2X:woaF+ATCQye/I3KWmxj00Jyb8Enov

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/SetupPlugin.dll

    • Size

      1.7MB

    • MD5

      2fe9facfec8049c3f97dd6977cb8846b

    • SHA1

      c807d52e7f94d7cb23ef780ce24341b5ec9cbfed

    • SHA256

      4386761694d62ec93a19d344add5800a54c3cbfba1724331cc05c0a1b749a087

    • SHA512

      a5b22a8b93acffb91dea1e88f1e7f20e0e4994e4f71e54dd4b07dc825345fc6445e6d008b89fee0f736a0e987136f56703a1bc84aa94b7523bd17da274ecea99

    • SSDEEP

      49152:wFe3dzgYlOX5VxXgjUKS6pCgrsqx1vTGtotQ:plOX5VxQYKS6pZIdo

    Score
    1/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      6cb1e608b65b83dad598cc5ff10697c6

    • SHA1

      3462038e27a664f58cdc2597640c90f893bd2b1f

    • SHA256

      8e565626c37c33144d88df65dc4c25ff3aa0eec980b2c3b1e46def3faaf44b74

    • SHA512

      f269497cb4547668e31b4a75d81bc2948616e5cce9da90ecb9a2cd8870b5a54b5c6b4d4d60d8e70f2b5ef53fce92b7d3da1d2ef15b0097353ca6530b72fec412

    • SSDEEP

      96:M/rspqrIYxLPEQhThvov3TE4/2Sa5P9QFFYzOx4uF3sbSEI5Ly39sQvM:M/vUG7lhvov36S5FcUjliSEI5LRQ

    Score
    3/10
    behavioral11behavioral12

    • Target

      CommonWindow.dll

    • Size

      1.8MB

    • MD5

      8d3740602b599f56498ee723062892bc

    • SHA1

      ed5426c9d0feb7001f3a87682d120a65a12a9273

    • SHA256

      cc62a922aac85fd0c6f622af9c2d542e5590c56bc0414757a9e8b2d879bf46ed

    • SHA512

      8393347b167f60dede2644c55014fb7fc060d767b942167934a9fec2c2da1729012f2e416b6cf9c34d58682ca1a22c27c07afb14fb3469edc5396e505e4636c4

    • SSDEEP

      24576:KDD4DM+VFRSVIPir/GZ4dFYMzmsAZtZasSuiFGyQVXdQy2A2jz+oVz:tO3M4vPzmsA9EQV2y2TNV

    Score
    3/10
    behavioral13behavioral14

    • Target

      ICSDHCP.dll

    • Size

      609KB

    • MD5

      68d4392fe4f930b1a56ce069168d9161

    • SHA1

      b1e3be4dc99ee1a2884b62c0eb815b83165533a8

    • SHA256

      ff27f4fb29a6a77e320eca748fb4317540c65f4165596d1c8c59699d8d864150

    • SHA512

      8d6fae098069b095ffe5f107c6b64fc97bbcfe77faeb79159efc3e89bec25208c0948357f1118fbbe72ff6aa8d6c301a5f60d63064d0a9f446987c2e0d5f1260

    • SSDEEP

      6144:MojiX+sv8U6dKqa6pG+YJjSYFDhl1SOkf1zwM2BEWLT7IySGptkFLIxKPW4yWXAF:MiI+K8nzi+eFDUf1033TcFisWUX0X

    Score
    1/10
    behavioral15behavioral16

    • Target

      ImageOleCtrl.dll

    • Size

      84KB

    • MD5

      efda993c88fd10857f00bcd02804591e

    • SHA1

      fb81319d127f27d0510cb0d20b1bdd4e6b4439d6

    • SHA256

      c330ca135fb622ebf10be269b5895bc9f8dc55de378ea8dfbb59c7ed4b8295b2

    • SHA512

      9f1fa8bd8e17c68a0dedc77380e49334c6fa7364592c89d2e296497687e699c3e24f8b2a6260ebc93ada04fd43d65b1bc8180cfc953e28b710abd030a78240ed

    • SSDEEP

      1536:6aN3A5AVr2Y8V3Zp5co5CFa+Ax5Eghr0OKy8SGaj3a0:nYMr2bZvcoEa+a3QOKx3aLv

    Score
    1/10
    behavioral17behavioral18

    • Target

      InstallDriver.exe

    • Size

      244KB

    • MD5

      2344de630bb1152a33b83099165c1c37

    • SHA1

      5aec0f21ae521e5f2e119d0174dd5cfd25ba9a07

    • SHA256

      855183c7425eb40468afba7582b24fd0a132476b253435b5733cac1ea2b48723

    • SHA512

      7be5aed36f8c388b468c62daa8a1cef55b80ecdc9841a31857198a3da864fc5867b661a3acdaef61dfa091308354e1c44dc9ec1bb9a5283424253a348dfe8e44

    • SSDEEP

      6144:N8NvRv9vUvOvEM3BbghBNQ+NF5w14egMBu9FAOzVDmvIm:q5BbMNQ+S1gMBu9FRCIm

    Score
    3/10
    behavioral19behavioral20

    • Target

      IpLib.dll

    • Size

      209KB

    • MD5

      1cef2be9bea5c9a3507cde80b5654885

    • SHA1

      8b38e4e48f10d9d3f5f479ad811f52f2534dadfc

    • SHA256

      5b4c770ee4d00d73edfaac01cdfce95a2b01b688478456e5425cdf6f79f9199d

    • SHA512

      fbf5b3bf07614a1d0b5dbc41a716f14a1412e66348061326faad187f190669790034daedbe0aff4ffc14dc18f2db41f89dca0c0ca153f9659f57d38fca4267d6

    • SSDEEP

      3072:R7eQAls/n/sF2VVV9x590eZzRnQ88E7r2Wn2IjO5Sj4DqTeOV/j:pLJ//M2VVV9j90ERnQ8TbnTjaSVL

    Score
    3/10
    behavioral21behavioral22

    • Target

      MiniNews.exe

    • Size

      1.7MB

    • MD5

      a071e485cdabfc11cce817b37b59883b

    • SHA1

      e3a2bdf42e104e4b5fb3a36548037aae8c49e49f

    • SHA256

      330516c9267709be11ea39be85d6e9af76e409b3bf64e012a54df9f092358e35

    • SHA512

      65e5202d174b3ce993c3b649a5b25c8cc61bcb41c803d084b154359ca1651c21cb980f970e15cb53a028187604d776e72fde2837bc504570420438ca2097a7a2

    • SSDEEP

      24576:7L1XYNsnBN8oCyUmArQtthrphnd0QJ8yEy8MGZJv2Hk3KtBr81+z6nJUOq8:XB28trpFWQJ8wSvCaKv4IzOJUOq8

    Score
    1/10
    behavioral23behavioral24

    • Target

      RaAPAPI.dll

    • Size

      1.1MB

    • MD5

      1e5982a66a650673478c66e68f0c03b3

    • SHA1

      9767e970d9ef3b9968a6573f3c5a0932cb1a2a25

    • SHA256

      143f65205ffcbdffac4b2db38f0e25f24ee6c1efef229996a546939a243449a9

    • SHA512

      30a8704832c4dd8c97b457188acba14ff9a1c0f40d4f5f2bd0d3baf61c074c04954dd526e7de5c05703e252cc93b8ac1a29914c28b1820d6c1496297a597e72b

    • SSDEEP

      12288:VmR92r4ShHxzIrJTWxYgTGtUHXF0cNSNJmWgUWD3H7ugTZE:Vmf2rHHxOJWBSNJmWfU77TZE

    Score
    1/10
    behavioral25behavioral26

    • Target

      Repair_WiFi.exe

    • Size

      1.6MB

    • MD5

      ae62403c898c44968ade7bb2309d87b9

    • SHA1

      65aeb683f2e7cc528ce0f2ddfc410e543aa02d9f

    • SHA256

      ada7fece9f83562f7956f2e860e49b0bf8b5596c39321065c2ad63ddc54177ae

    • SHA512

      b0c11157e649880c3770d6a921392549070741812e12ccd9c7bcd6ea59b6a116aeea4e7a56821089782f48894536b069d3e9fdc11d82ae468170f7fdec5394dc

    • SSDEEP

      24576:T/5USJDq1wMwRhO8EK6fZrCjvVyXFK9D7qGB4XMA+cCc1ITU65vQjAMAvkLN:TLulM8jK6fWvVmoDIMVUITU6egvkLN

    Score
    1/10
    behavioral27behavioral28

    • Target

      RtlIhvOid.dll

    • Size

      263KB

    • MD5

      513891ae7439d3fcf1eeb4a04c3df3fe

    • SHA1

      9eefae9eca58b112b990ffaae62901a8444fa57d

    • SHA256

      d9c5435cba78b92aad87d98c3f33a39b9df10a2ac989d51b01cca2404049fef2

    • SHA512

      60591c10fdb77642c78da73574d36bbfe31b53f161197cc22bcef665f2d1abdabfe0877de085831eaf54a646bbb39e281d94ec4134c280c0c17d66670aaecc79

    • SSDEEP

      6144:+wOvNGMHRaTXJwS2FH4LmIe+MJYlrwnZOyQ:mvNPj9AMJYlrwIp

    Score
    3/10
    behavioral29behavioral30

    • Target

      RtlLib.dll

    • Size

      361KB

    • MD5

      dfaf646ddaebb012dfbfc9003dd43c8f

    • SHA1

      e508dd7366349caa24d935697ba0b95a8a52d366

    • SHA256

      75fd5c6336369cf994d81ed49ceadc09c9ee78fb31946061baed621e3504a42d

    • SHA512

      4b25b934adb77ae3baa23eeefce54eb684573cb21e71e8f4ad89fcbb73bc0155771f72ffc7dde72ef01f3a93f3627dd53bb258b5be452b6161f4411a5394ade2

    • SSDEEP

      6144:WWl6PziMx2kt/u0UyJ1h4h/fHKGgZJv+IpPFwa3opJ:WWlwiMxr224hqvtw2AJ

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks