Overview

overview

7

Static

static

7

APMAlert.dll

windows7-x64

7

APMAlert.dll

windows10-2004-x64

7

Chaoslauncher.exe

windows7-x64

7

Chaoslauncher.exe

windows10-2004-x64

7

Chaosplugin.dll

windows7-x64

3

Chaosplugin.dll

windows10-2004-x64

3

Chaosupdater.exe

windows7-x64

1

Chaosupdater.exe

windows10-2004-x64

1

LatencyChanger.dll

windows7-x64

3

LatencyChanger.dll

windows10-2004-x64

3

RepAnalyser.dll

windows7-x64

3

RepAnalyser.dll

windows10-2004-x64

3

Stormplugin.dll

windows7-x64

3

Stormplugin.dll

windows10-2004-x64

3

iccscbn.dll

windows7-x64

7

iccscbn.dll

windows10-2004-x64

7

icctv.dll

windows7-x64

1

icctv.dll

windows10-2004-x64

1

icctvp.dll

windows7-x64

1

icctvp.dll

windows10-2004-x64

1

repfix.dll

windows7-x64

7

repfix.dll

windows10-2004-x64

7

wmode.dll

windows7-x64

1

wmode.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    820cc290613ec89cd99bf3d75b6ac7f0.bin

  • Size

    2.1MB

  • Sample

    240531-c7r8gade53

  • MD5

    820cc290613ec89cd99bf3d75b6ac7f0

  • SHA1

    8ac6b5500fb44b3f4424f39019f8a453caed2bcf

  • SHA256

    0d5d0a7acd5f94c95d0e0d71e5581bdd92fa465baadce7c782319035e5059f77

  • SHA512

    362f925e754a69da6ce09454afed60c1bac2d7bb79358c1ddca5b505535d58ac89648581293b1b9daf96721d372b7d7638006345880316a5f320a3dab1ac4b64

  • SSDEEP

    49152:KX8Jg47u4V19fXKd5l/1EytD/g1SfvJCDsKO+VypJivRw6zSdcQ:nJiIt45hzR/g1Sfx2pZVMsvRw6zSt

Score
7/10
upx

Malware Config

Targets

    • Target

      APMAlert.bwl

    • Size

      265KB

    • MD5

      70b60b8a98d02326509d08f01f8aba4d

    • SHA1

      5740936a808040851e7e5796e8d852aaccf5944c

    • SHA256

      b6bf314515b80b5db681c16aac16823fb4b0e82390c7377cb200725e57d156c2

    • SHA512

      2e899f2bf898158e626a9967777bac0b7158629cf04f7c92b0fd4507b89d093b951fa740e9e6318c87d61dd594600ac41ff47182f09dfb61898f617d30b84e7d

    • SSDEEP

      6144:9Yh/PCD77I8hEkNsLxjvTuYrX3vWCJgKwVzxMzVv7Fnht:9YZoIe+xjT5XuCgyJv7

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      Chaoslauncher.exe

    • Size

      1.2MB

    • MD5

      1fe86f8e78d67a429516609d7b9db238

    • SHA1

      56da3cb44ec262d83fe1089073753e25ff712898

    • SHA256

      9300b87452afc3599aa9e5c599388c976789b4006987a89ffb85164e971b622c

    • SHA512

      f2c8b9a58061cd080219afe3e912e141825e0a435270244884f26c1da15f0832530b7f2954030ff434d35b156e3a3343d4f84def87c7a75d3ad8b8f251984155

    • SSDEEP

      24576:iC76ClyNFSzvUdNBWmQSGi4lm3kLzWCuak:jlgbGigmgJ

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      Chaosplugin.bwl

    • Size

      664KB

    • MD5

      b00fe513ae705ce02f747632dfe9021a

    • SHA1

      1ab34956524fc4f508407c3a92bf05dc505c25c4

    • SHA256

      b845882b469556087fbcf99c3af6729009bc3b6856f204797047243aa620f260

    • SHA512

      a7a2c6a51c657fb2037a278ed99b11d3070d2e934733d1276837286aa87adb43b93d5d48e01d0c09a5cbaf04a840a0fd1a13b3cb937d9061e2f1f3ec365b8736

    • SSDEEP

      12288:LgpE8SAluqSaqVPOLlIKh42Oi4UHiTLZj+d+ESTl41acDRvXwtNrX:LA79BSaqALxh42nqTL9+d+ES+1TX

    Score
    3/10
    behavioral5behavioral6

    • Target

      Chaosupdater.exe

    • Size

      72KB

    • MD5

      250bf80fcb8af829ea0b2aaabe7bbb01

    • SHA1

      8849cab45c5c4e26c4f98d9ccdc34b51994c5692

    • SHA256

      590269bd5d85ac1271cca351a90b59c8262d68b14c0e0eaa3422fc97ddb47693

    • SHA512

      818009a1f281e4b8d7a5287503be64f1a11ba4515dda5daf7d0ae81be98f91daf7aabc22ec58bd6e6227e3bd5dff297142cf4e9a2f581877bf56dff7ffdba354

    • SSDEEP

      1536:8eq3EcInKcuC5CU++P0kAFfY+eunqDUuTYfyi:YkNFbj+eQqDUuTYfyi

    Score
    1/10
    behavioral7behavioral8

    • Target

      LatencyChanger.bwl

    • Size

      455KB

    • MD5

      1a56bd3db9987dddd7693535699b4536

    • SHA1

      22b498330b54a4fe25f93ab693e8885ef2c29fb4

    • SHA256

      3aeca5ff03545789e5378583a91d10d0bf407a3a3673a5626663ab700c37876c

    • SHA512

      af058899539916d771c381a31915a3df408a47d848cf64ecb41b33c2e30c9dbcf5963c2c6cd79fadb1482a5f5662f013c29d457bb78a825b9804726db72b0ac1

    • SSDEEP

      6144:rCIQmjW6ZjClnaE8q7fvGH3ZDvYBgu/4zatCN31kmcNMtJSBmCApp6z5EB8nBzW:ZjW6jCl5JfaDvYDwzCC8n6AmCSshBz

    Score
    3/10
    behavioral10behavioral9

    • Target

      RepAnalyser.dll

    • Size

      112KB

    • MD5

      01269943f2f85d99ba406990f1dea880

    • SHA1

      5cdfcb8d996e789af5a845890cd6b6f081d7afb0

    • SHA256

      1ba80ae759d58ef071984ef44e3f075aaa611097572cfae1f95783ef02a4b851

    • SHA512

      68c2002811df0df5b956ad8fe974c77f8ab6ee99da6fa760b02bb55c9a77acf341a20c9a6b6ddaf048f4aa50d958f9f9badc458ecc60429a662787d749cd1756

    • SSDEEP

      1536:ejQZRZ3artJ7bTXzbs7eXLj9GT//lncEGYUtw9wS8B:eUZRta7/X23ZcfYUtw9wS8B

    Score
    3/10
    behavioral11behavioral12

    • Target

      Stormplugin.bwl

    • Size

      473KB

    • MD5

      0bfd105cd9dd3decc7d7554c50d8b6c5

    • SHA1

      d19282a38b1d114e3c4c58f778f45021c46c7992

    • SHA256

      d49c9d76f522d4e05f73cd07b431dae97e1e77314be407bc8f286dbda03449d7

    • SHA512

      d535c735dd7317e7906717de5ca8569783d6a1dcf2369b18c32aa15c4125cb86e560fd960de80c6a610aeac7cf1909b084bf507b82d5a3c256bbb7b45e1b40bf

    • SSDEEP

      12288:IJcYgdttd6nTcogtA5p7lbcySZBxu2XTuzPpb:cTgH6nTcogtA5pJRSZ3u2XTuj

    Score
    3/10
    behavioral13behavioral14

    • Target

      iccscbn.icc

    • Size

      126KB

    • MD5

      04c229ac6205d0109abec916d8da4797

    • SHA1

      25acfa2630846ac082b9f3bb58bccdf4ebccdc72

    • SHA256

      a057bd7a69f66166cb15c99429c91fdd7c36846e211e531361b413a0f03a5a92

    • SHA512

      3c54d68ca0ab41796dadcb4bb63721cd73d81b2f09a5a59e8fa7d1a13b3444816d0281f618bf586f423d730485061e2d3974070a86d67fb363d0cfc297f953d0

    • SSDEEP

      3072:a16h4ITEPMs6XEkF62evWfg42hmm7y/0dayxoeW:O6GIls6Ew1hI42p7ywoe

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

    • Target

      icctv.bwl

    • Size

      88KB

    • MD5

      bcad8cc6a4b0a8955b558d1931bcf7ae

    • SHA1

      b8dacc04fb1f26149e71e48f5be95598222e8652

    • SHA256

      bee99fc846a57d0d1d86deeeb3f07f3419ad984bfdabec901381517b2c7afcb9

    • SHA512

      f0539fa8333be9f56619867201365f5d1d7ee449d98741f696d64aa8d8fabcdb950ecd1428e0a48b838d314f9e3ec844a55f29a501bb5ec04c8b20f79051d2ba

    • SSDEEP

      1536:0tHvpxeyKwMQJF/G8pgcaWp/p/q29Xkt8Rdz:O0eF/G+Z90t8Rdz

    Score
    1/10
    behavioral17behavioral18

    • Target

      icctvp.bwl

    • Size

      88KB

    • MD5

      7f67837add9166de0d7c64c37ba459d0

    • SHA1

      e0e1416430ef23f8a0c829392898450d908ff96f

    • SHA256

      6f8779412faca61161e317543129859533e8a88ad25e54f7f29bd68042206db5

    • SHA512

      db7cecd77eec820881ca4246c361f890006b23708281fe22db159ab73df65c8fa496945162aab33e266ccde71f392b297d68dfa16dc09daa20d0495998dc5ec3

    • SSDEEP

      1536:jbtK2T2KeoHzeOkDI6BIzJURLzQQhkY0fmDtDg3b1G:tK2T2KJ0IFQj0uDtDg3b1

    Score
    1/10
    behavioral19behavioral20

    • Target

      repfix.bwl

    • Size

      44KB

    • MD5

      faf049c677f887e6d0dfcc6b611ee0c3

    • SHA1

      f26cee8653ecfbf9bf703af4fdfc6ea30647172c

    • SHA256

      8e715e3bb8ef006a778de23aa00ffae919e4f4cd8b8d98164891a33db39ee88c

    • SHA512

      07dc93c068ebe65a1791ed27492265e3f03558fa7cd55c55b6ca3b69794c9c633ac9cb472777be0c99387300b92bdbc86c36fc77cf691392bd73510ba7b8a92c

    • SSDEEP

      768:F9XK7J2iGAW8QXQ9JD+AyuaxMgY1AVcIM4Q8dTbCIPThSJ7LMJE1s:FBKtSAfyaDxafGAVch4zdT7sVAJE1s

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral21behavioral22

    • Target

      wmode.bwl

    • Size

      36KB

    • MD5

      4faebc52310fc23a7519caef5e2fcdce

    • SHA1

      da65c6a63c3dff98579d763f20f944b7fc7de279

    • SHA256

      6fea79b168aa75ed9883811411d2f5f6682253e612a398477e842d660459e77b

    • SHA512

      642778694dc9cdccfe7fc6f913b6ff1b6daa1956695907c0da211161f31b472962043a9c68fb498fcd59f9ac8ff7d1c02d0e7f42bc5b91e7129f6a8ba0be0e54

    • SSDEEP

      768:ekvOppeFhkco934HVB+QzjfWIfy+HIxvv6J2HYK4yTGR4:Xv0pezkXaBxWIfHQqJqYDk

    Score
    1/10
    behavioral23behavioral24

MITRE ATT&CK Matrix

Tasks