662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c

Sharing

Copy URL

Twitter E-mail

General

Target

662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c.exe
Size

3.3MB
Sample

240523-bzxybaha75
MD5

ce8ec8efcb348c9c212af4761f957f59
SHA1

63358716646a91e0478e7332615fc1746f8352b5
SHA256

662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c
SHA512

2c1137f6aedfa90a89903e28486ecdcc7eb9d5a6fea014243caaa430655bdf01c6261331f170c076a182bfeafe2646b2d8a02f7c70ec3ed65ff15f7ae8aec7bd
SSDEEP

98304:7Wx+YrsQ0kqq7U9e1v8OPDR9OZejOlO5mf4+0xe49:7LdD799uvlPHOZeaYkH949

Score

7^/10

execution

Malware Config

Targets

- Target
  
  662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c.exe
- Size
  
  3.3MB
- MD5
  
  ce8ec8efcb348c9c212af4761f957f59
- SHA1
  
  63358716646a91e0478e7332615fc1746f8352b5
- SHA256
  
  662ce2779aeca5637684558f792f43c114ff5d6dd2568c351f7cccd0dfab935c
- SHA512
  
  2c1137f6aedfa90a89903e28486ecdcc7eb9d5a6fea014243caaa430655bdf01c6261331f170c076a182bfeafe2646b2d8a02f7c70ec3ed65ff15f7ae8aec7bd
- SSDEEP
  
  98304:7Wx+YrsQ0kqq7U9e1v8OPDR9OZejOlO5mf4+0xe49:7LdD799uvlPHOZeaYkH949
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  fccff8cb7a1067e23fd2e2b63971a8e1
- SHA1
  
  30e2a9e137c1223a78a0f7b0bf96a1c361976d91
- SHA256
  
  6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
- SHA512
  
  f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c
- SSDEEP
  
  192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/UserInfo.dll
- Size
  
  4KB
- MD5
  
  acbda33dd5700c122e2fe48e3d4351fd
- SHA1
  
  2c154baf7c64052ee712b7cdf9c36b7697dd3fc8
- SHA256
  
  943b33829f9013e4d361482a5c8981ba20a7155c78691dbe02a8f8cd2a02efa0
- SHA512
  
  d090adf65a74ac5b910b18bb67e989714335e7b4778cd771cff154d7186351a1bebbc7103cca849bdfa2709c991947ffff6c1d8fdf16a74f4dfb614bce3ff6fd
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  1c8b2b40c642e8b5a5b3ff102796fb37
- SHA1
  
  3245f55afac50f775eb53fd6d14abb7fe523393d
- SHA256
  
  8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c
- SHA512
  
  4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57
- SSDEEP
  
  96:o2DlD3cd51V1zL7xqEscxM2DjDf3GEst+Nt+jvcx4T8qndYv0PLE:o2p34z/x3sREskpx4dO0PLE
Score

3^/10
behavioral7 behavioral8
- Target
  
  ANRITSU COMPANY FREE SOFTWARE LICENSE AGREEMENT.rtf
- Size
  
  14KB
- MD5
  
  a6dfda44c9124b2e8e81ad8df98789d9
- SHA1
  
  ed89d6b1e4b689ab69e1b39c4175330275e0744d
- SHA256
  
  298eb03c49debf0853ed788edbb0905fa76b8c74b9b618d4621a58aaef079441
- SHA512
  
  757928270caac0693a5e775066b51b48f4fad1ff9b9aa94f480d5ce4727d0a98eb861c8a99de9e7703e915905de3216a890fb84a0e207bb2cf2b862011959b07
- SSDEEP
  
  192:KmhyVLXbr96HMJnlNUa+jnnHXq5Ib5rzo0t:KmhyVLXbpNhYEIbhtt
Score

4^/10
behavioral10 behavioral9
- Target
  
  BackendModels.dll
- Size
  
  14KB
- MD5
  
  01f030e89968f7d8bc47f7ce94296481
- SHA1
  
  0f0b7342d56e6ffdf7d813bc00ebc79b8c975482
- SHA256
  
  a0ae31e9b5b5cc90a2d9364bf233011cafbd667f2071b8fb9296fd7607136d08
- SHA512
  
  8df44a4cc580b4690fb5ebb775bbe57decb0bd86f44d4fc82f4127334b08b3941257004be4c3f03a454cea6e6cc8c86c17a3ab076f0988d8a4d815a895c2a231
- SSDEEP
  
  384:ZHa+TZxtCAlzbU1qG0sdh6pgxxLkMNbH/+xFirYWY:U+T3tzlzQxhv/+xK6
Score

1^/10
behavioral11 behavioral12
- Target
  
  FreeImageNET.dll
- Size
  
  210KB
- MD5
  
  bbfa5ddb221d0c3b735318ea1ed094ad
- SHA1
  
  e28c113376db7ce4cfb66bb136972319106b6cda
- SHA256
  
  a2f40959e1f46e04ee23e29b94594700b1d558335fb8ff38150eff8acd498874
- SHA512
  
  09bcd9f352eff1161c58d0dea4b4604487ffdd13893c7dee71b2904018e04f670030c94a40e2dc5bd5b23d1057b6bccb4af81930447aa3442521eab4d5cd926b
- SSDEEP
  
  6144:g+0CTTSYgQ1bDnJ/MMTkPgjOF00T7v/Mw:g+aRwJ/pTIF/Uw
Score

1^/10
behavioral13 behavioral14
- Target
  
  MapStore.dll
- Size
  
  22KB
- MD5
  
  f19dc96129eb1978da779e7f18a94f7b
- SHA1
  
  a36e0be9729532a3410da67f5d34d3d954cc1db2
- SHA256
  
  604e3207ad365fbf0f7308da8b7acbda0eabb3e2411e3ee8ed901e2813637aff
- SHA512
  
  f3b031e87aca2fc77916020a542ffd8e2da941bfb0d4bfb8836899af31064e3bc2d4184591bafd30cac3fe8330f77124dabe6093b8dddcf1db974bd35e75ce7f
- SSDEEP
  
  384:KLhKBRpGGiJReOCYkFejdbxsD5XpX/vzqRefFOmJ9GfYqvQJ13+LTtJxlBPS4:UeqcOtkgjdbxmqwfFJjGfTJx/S
Score

1^/10
behavioral15 behavioral16
- Target
  
  MapStoreViewer.exe
- Size
  
  46KB
- MD5
  
  52da62ef71d9a5b3b89c7e28cac8e07e
- SHA1
  
  6c36d10a724496a43629dc0da3395ee6e8b6ae82
- SHA256
  
  0db5c0acbb5f324e27dd1181dd0b16f7ed1a33e981f04a57c06ba40eec0564c1
- SHA512
  
  91f5959cda1c233ec867edf78ad1e9b6430bdca090dec896c1cbbea9d03e83be682838d1e0e862b1ef744e7036596529362dd8ea23702d50c938f7f1fa40f5d5
- SSDEEP
  
  768:CdtRAzdYahkL81oVjQxxxh+hT7M7DJUOhtzerRsop7+sTnzEhMPqaJzYcHeIm:WRAz7kL81Rh+hTo3JCFJp73Tn2iYI
Score

3^/10
behavioral17 behavioral18
- Target
  
  Newtonsoft.Json.dll
- Size
  
  495KB
- MD5
  
  283544d7f0173e6b5bfbfbc23d1c2fb0
- SHA1
  
  3e33b2ef50dac60b7411a84779d61bdb0ed9d673
- SHA256
  
  9165e595b3a0de91ac91a38e742597e12ebb2a5a8fa53058d964a06ceaef7735
- SHA512
  
  150b45cd43dc5cf191c85524c15dea09fbb48766ad802851270eaacfd73f3d097fef8dcf0ea042184220e7bc71413677d88a206d8bbe60374986e4789054040b
- SSDEEP
  
  12288:7MzH+hB/pzxJi3X3+b6umJBDARbeqTJge:HLpXk+b6umJBDAJeqtge
Score

1^/10
behavioral19 behavioral20
- Target
  
  Resources/connect/scripts/common.js
- Size
  
  42KB
- MD5
  
  a21b10696540a8c0a53294b4da58348d
- SHA1
  
  76379f6b7cfbddf112d77e333fe0a65f648e7c05
- SHA256
  
  5e85cb1fd3ff5925e9b27578115ee00ba6028a3938c963c275b2ff12c47a58aa
- SHA512
  
  ff04eedbd0f240e4ea3b8ee1ebf913501eef96332e7b63a49d3473ab5691968cf8ed147c0209516049fe416bb51657e32ee410313649eb84c18fb76c10fbe85e
- SSDEEP
  
  384:D3KVVJEiMXV7pAn2mTtN7OAQwFa5Fih+k3Tnk29ytoJuV5OicbR8Ef6cYKB+86Se:GVjk29youV5OicNZf6crwicJWA
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  Resources/connect/scripts/page.js
- Size
  
  33KB
- MD5
  
  1fe6a3876ef553a3ef7e9a13d7b0bdda
- SHA1
  
  996a0d15a57129e32b557b3864e61d713f82fc8c
- SHA256
  
  ad4d8f0accbf946dc33462e0e9a6319eb55827e8dc9b6c49a5a8d7ad3294309d
- SHA512
  
  d7b255d9afeab88076dbd061f8accfc89bb3fe07bc2d50fdcd162428bb4dbb6ed6e2b566aa4be06745ec98900cf0be3e33da50895c11a6b35819352cc216677b
- SSDEEP
  
  384:DhwzBkST4iyGyugoJVPgmoJYJWboJzmoJ/vtZsvIGz4rhZyoSush4Yku40O3uwC8:lDOVPgVYJWqzV/Xy2rB27TUgozF
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  Resources/connect/scripts/unibreak.js
- Size
  
  8KB
- MD5
  
  4657ade607b919ca85426fe12d4f2244
- SHA1
  
  d7ac8520a1675ff6aef0bf231ffb40fc9bdde441
- SHA256
  
  741d3399d844c888a22e673c7ad8e48406bf434bf30ec2c5156a30e7dc01f6c0
- SHA512
  
  28dcef2e81950e8538923c42d36573254a8675bdae84cd46c238dc761692d59aae6de6dabffe42a80298e6764249afd8056df9a572eeede8a0344b8381a47eba
- SSDEEP
  
  96:L2q6rpCeUnqeino6rHeVrlbnBo1geqAYg:Lr6rpCeUnqeino6rHeVrlbnAgeqU
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  Resources/connect/scripts/unidata.js
- Size
  
  49KB
- MD5
  
  dbb102bf852e21323945d3d9e9084bc7
- SHA1
  
  23d4790838b1aae6c08b1f36c3c24eee17a4539f
- SHA256
  
  b2ad978d1772a8e3acb41e02c6e5db1460dca409544f7537dec59ba0d3f26206
- SHA512
  
  ef9abfae27f308c31c17426104145f039a66f21289838592a4945aa14f112701e445b7df2cca3aafc9a564ce4408eb2e89b9cd104d43702d0a0cb99d3f30ea49
- SSDEEP
  
  192:L7TSIGsYtJ4j3NHZhhuhtU1UrKdzWgxR/rlpxO8T9BP5LnZ93WWeTMGbxw8cPDi7:L72P2tQyl93WWyFvfHw0MZdM7ySj/J
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  Resources/connect/search.html
- Size
  
  94KB
- MD5
  
  98c69fb2d391293b1b7e73ee78c9ce62
- SHA1
  
  3b29d7a97975fb44ed563d5c9d3c58a5cc0bb312
- SHA256
  
  1684ae7a9720249147de774767f4be452f05d9cacb27e47116d9d3ea285476ab
- SHA512
  
  828c28e6658bf8921a37756ab424dbe48f6badfe57d5142893e1e32f0d41752032d6d9a7f6defd4dc6ac36ea03294bda780dfe9ce6298430b3b6ddd5e2802fd9
- SSDEEP
  
  768:FMjsWxWxWvW5Vjk29youV5OicNZf6crwicJWi6XQThZlbY1hUL6Lwl2j:EQQO/k29youV5OiCnwiez6Am1hULAC2j
Score

1^/10
behavioral29 behavioral30
- Target
  
  Resources/connect/splash.html
- Size
  
  24KB
- MD5
  
  bf6353aef20d6abc468cb29156c49af7
- SHA1
  
  5dc505ed692a191fbf8eed7890674aedb48ad078
- SHA256
  
  2a7a3058bb5bf276da1dd05856cce2e69ec56758f1d58e4760519359f22d391b
- SHA512
  
  64199c6ced8240447615c102fd2e40ef27c8f486eaa7953d47e4afb48dcf923fd38e82705a69612d5b1f2ce7ce846cbdd04e6987fc732f9442c728283c12571b
- SSDEEP
  
  192:dj8wdnsrYo7tYtdwXH/9buAc+Sr0+8NXNxJrDi6rEMtOKxX8PMgMWJ9UILFAl+yT:daDidkbmx1leKFi
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Query Registry

T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32