Overview
overview
4Static
static
3Redact-Set....4.exe
windows7-x64
4Redact-Set....4.exe
windows10-2004-x64
4$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDIR/app-64.7z
windows7-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
3LICENSE.electron.txt
windows7-x64
1LICENSE.electron.txt
windows10-2004-x64
1chrome_100...nt.pak
windows7-x64
3chrome_100...nt.pak
windows10-2004-x64
3chrome_200...nt.pak
windows7-x64
3chrome_200...nt.pak
windows10-2004-x64
3icudtl.dat
windows7-x64
3icudtl.dat
windows10-2004-x64
3locales/af.pak
windows7-x64
3locales/af.pak
windows10-2004-x64
3locales/am.pak
windows7-x64
3locales/am.pak
windows10-2004-x64
3locales/ar.pak
windows7-x64
3locales/ar.pak
windows10-2004-x64
3locales/bg.pak
windows7-x64
3locales/bg.pak
windows10-2004-x64
3locales/bn.pak
windows7-x64
3locales/bn.pak
windows10-2004-x64
3locales/ca.pak
windows7-x64
3locales/ca.pak
windows10-2004-x64
3General
- Target Redact-Setup-0.17.4.exe
- Size 71.1MB
- Sample240602-29dwasbg87
- SHA256 4d8daf45a5fcf7480739974e1d9ecac7370462f66196dd14b9a38020120dc202
- MD5 34dc26c43d1c95019b5a390eb5e5fcc2
- SHA1 c74edda8d14c6683eeb482344f009b1ac0f97491
- SHA512 3fdb707661075555112672ed0157ba45bb65581d58b5f6c045a32cdd830acb24bdbcdb62dd48ab743d221f13e4d0d0824f0bb2edff5da1ce5f923ab43e3babcc
- SSDEEP 1572864:WXeyzeKgzQOKuPjz++x1vWx4gYaVsxYTCs68KGz6kz:WXF8zQOKundve4gayjpz
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Redact-Setup-0.17.4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Redact-Setup-0.17.4.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app-64.7z
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
LICENSE.electron.txt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
LICENSE.electron.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
chrome_100_percent.pak
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
chrome_100_percent.pak
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
chrome_200_percent.pak
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
chrome_200_percent.pak
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
icudtl.dat
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
icudtl.dat
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
locales/af.pak
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
locales/af.pak
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
locales/am.pak
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
locales/am.pak
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
locales/ar.pak
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
locales/ar.pak
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
locales/bg.pak
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
locales/bg.pak
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
locales/bn.pak
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
locales/bn.pak
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
locales/ca.pak
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
locales/ca.pak
Resource
win10v2004-20240508-en
Malware Config
Targets
-
- Target Redact-Setup-0.17.4.exe
- Size 71.1MB
- SHA256 4d8daf45a5fcf7480739974e1d9ecac7370462f66196dd14b9a38020120dc202
- MD5 34dc26c43d1c95019b5a390eb5e5fcc2
- SHA1 c74edda8d14c6683eeb482344f009b1ac0f97491
- SHA512 3fdb707661075555112672ed0157ba45bb65581d58b5f6c045a32cdd830acb24bdbcdb62dd48ab743d221f13e4d0d0824f0bb2edff5da1ce5f923ab43e3babcc
- SSDEEP 1572864:WXeyzeKgzQOKuPjz++x1vWx4gYaVsxYTCs68KGz6kz:WXF8zQOKundve4gayjpz
- MD5 SHA1 SHA512 SSDEEP
Score4/10 -
- Target $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- MD5 SHA1 SHA512
Score3/10 -
- Target $PLUGINSDIR/app-64.7z
- Size 70.5MB
- SHA256 55434e15ea3772576e7c1159a6d9c0046a2d639a7f56f17e76f22b274daac3a2
- MD5 577a3343b5387ca782ee6a0899c9b0f1
- SHA1 404c4d3b3ff400639dee036f00a9c6212057ee5e
- SHA512 7c10538080a6c184a9d4273eaba63525658432b5a458c10301d9e84e9121bd07b4e95b7ddee7e09f599c0b273a17990184fd0f3a039decba43c97c7a467ceb57
- SSDEEP 1572864:5eyzeKgzQOKuPjz++x1vWx4gYaVsxYTCs68KGz6kj:5F8zQOKundve4gayjpj
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- MD5 SHA1 SHA512
Score1/10 -
- Target chrome_100_percent.pak
- Size 132KB
- SHA256 99ca6947d97df212e45782bbd5d97bfb42112872e1c42bab4209ceedf66dc760
- MD5 443c58245eeb233d319abf7150b99c31
- SHA1 f889ce6302bd8cfbb68ee9a6d8252e58b63e492d
- SHA512 081f3ee4a5e40fdc8bb6f16f2cfd47edde2bd8f3b5349775526092a770b090c05308d4289ecdda3d541cf7f0579ac64b529930fd128edad9b0991dfa00b0e9bc
- SSDEEP 3072:bKzwJCcIe4woKmWVlBL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:bKzwjIe41KmWVlNK18Gb0OV8ld0GecQu
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target chrome_200_percent.pak
- Size 191KB
- SHA256 cb4fd141a5c4d188a3ecb203e9d41a3afca648724160e212289adcac666fbff4
- MD5 81b5b74fe16c7c81870f539d5c263397
- SHA1 27526cc2b68a6d2b539bd75317a20c9c5e43c889
- SHA512 b2670e2dfa495ccc7874c21d0413cfbebfd4a2f14fc0217e823ec6a16ac1181f8e06bfe7c2d32543167bc3a2e929c7f0af1a5f90182e95913ba2292fa7cadb80
- SSDEEP 3072:A4DQYaE/N6gbrvy/+JPnKmWVlBafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+Hxf:A4DQYaSN6gnvyWnKmWVlSgx5GMRejnbA
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target icudtl.dat
- Size 10.1MB
- SHA256 ee3c8883effd90edfb0ff5b758c560cbca25d1598fcb55b80ef67e990dd19d41
- MD5 2134e5dbc46fb1c46eac0fe1af710ec3
- SHA1 dbecf2d193ae575aba4217194d4136bd9291d4db
- SHA512 b9b50614d9baebf6378e5164d70be7fe7ef3051cfff38733fe3c7448c5de292754bbbb8da833e26115a185945be419be8dd1030fc230ed69f388479853bc0fcb
- SSDEEP 98304:GKPBQYOo+ddlymOk25flQCUliXUxiG9Ha93Whla6ZGdnp/8j:GKPBhORjOhCliXUxiG9Ha93Whla6ZGr4
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target locales/af.pak
- Size 381KB
- SHA256 7bb75adef02d28819f1bd3b42fa46ed56d6dfbeae072341997b09b8c1f52d8dc
- MD5 b293cc5ea7db02649bd7d386b8fa0624
- SHA1 32169b9d009b7a0fb7ecdaf650c989e956291772
- SHA512 496bc72e7b798d02e453eb96d20566b91405bab774521527ef882c1fcb58f25e2d0718013ddc0d23f7fad883f4cde93b57c6caaeba8cd18a09665c9f6245f557
- SSDEEP 6144:qu8SyRtgbfbjR985DhdxQ+ICGSBsjA636Zi2Jynq4UtUKnpgmhqxox7sfxSC2C8l:Ry0zbjREda+ICTsjA636Zi2Jynq4UtBz
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target locales/am.pak
- Size 619KB
- SHA256 1974de0984976556288a4612d5f38fe0ff21e868bdd877ba5d5fde3bb4c9e36d
- MD5 d3f48b60620c5bbe519db9c0cfb634de
- SHA1 7b54a0bf25b2ecfd78c2ad7dfb6f6a09bfd20abc
- SHA512 279a7c162e53b2d4e7a92a57de3ce3c919cd9a9700595af6a26ebc53f925773127656b2c817e91cdead87c2b1f5dc00bb0b134d6d51cb083149d85598a2d5b85
- SSDEEP 12288:ihHb86uogj8xST1XF/gpwozVgd529+1VJ7uYyPJx30jH8+A:MbIj8xSXFopwozVgd529+1VJXyPt
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target locales/ar.pak
- Size 680KB
- SHA256 a17cb6b8c7331b9653981cafbea39a4fbfb3962f6b81367c3704e1682940fdfc
- MD5 5cb81a90a403e951c8d8e6c797dfcdc9
- SHA1 b38be201bf70c9be103c0a4adfadd1b5c60901e0
- SHA512 0907d7a7594cd7bfdd17a652f801bf7198f8e2674241935a0215dd729d7b42a3464a8ec30bf8eecaf988188e9fe5fde8d11da1cfcebf0ba1c1a0233efb09d581
- SSDEEP 12288:Db7IhLZtD9J7O08vYU3X1Y9kbMf5MNi/+det13zMgSENR5:nmJta45F+K
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target locales/bg.pak
- Size 706KB
- SHA256 571e87f9c62cfea2a2303674f93ba879d9b899afce4dd7e47ddf5e6781b7d4a6
- MD5 5f629042a1c501b290eec5ea3fcc6779
- SHA1 d6b304838630bbbb375c21a0e6de3e1ea600ead8
- SHA512 e30f92453bed2dd0cdd5a2a2f70d1e240e983b0a65f056a9623295ed01e9a87869706fc4acb40cb79ffe7c60f5121a95893662c1d0299c0a585b8ab75888c14b
- SSDEEP 12288:ADqWwQkDdLlYMdAs1aQUtjtaVVnFH2mFxadnra35rKN3yoSiVD1BbCeSKn/xJfuk:ADq/DBlYMdAs1aQUVGCa35rKsoSiVDDv
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target locales/bn.pak
- Size 911KB
- SHA256 28e1441c4950a90717ebd0641b1f0b4a087cbddeac39edb2618b7d24fbf5a58d
- MD5 35f1083544e86bb85fe5860b36b743e2
- SHA1 27ad8b23fc03f9b26eb5125e886d18ee3798765b
- SHA512 69fd40b1d1ffab122c244a7111972fa8b2d6b38c595acee8c6b650a595eb756c35f0cd774d8a7b79656258ee1dca9b6fe0a72e6bc38901804e62ffcf9976ae1c
- SSDEEP 3072:MtVVy6YHuQ4qxkVxCp2tUkbBb5OMDK5T0Xl+IP:GVVMH5ECAt5Bb5i5clR
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target locales/ca.pak
- Size 430KB
- SHA256 02d60b97f70c31f5c5003108321fc3ac3c79bf39a36392c3adaf7735b9cc1c1d
- MD5 2cddd012546caf0aed6775cdf5cfdee9
- SHA1 cacce951770feefd1bcf89de5be97bb39606e7ee
- SHA512 b75d9b2946b11b9fc7430c5773835422aae6e716504d7841c1b08413ec18d454d9d6faa5ed63e19c59ab2e1ee919822283fd7e21a97f54482685d541e4dd2519
- SSDEEP 12288:q86RFXgkI0h7nyRhIs3cSlFEYLCJBqB3nbhjJOtJuwlwSGMwFdLbpuQ16BtryBtE:r6wkj0RpTHpEMNJ82kLI25exte
- MD5 SHA1 SHA512 SSDEEP
Score3/10