Overview

overview

4

Static

static

3

Device/Har...O6.exe

windows7-x64

4

Device/Har...O6.exe

windows10-2004-x64

4

$PLUGINSDI...on.dll

windows7-x64

1

$PLUGINSDI...on.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$R0.exe

windows7-x64

1

$R0.exe

windows10-2004-x64

1

$SYSDIR/Dr...mu.sys

windows7-x64

1

$SYSDIR/Dr...mu.sys

windows10-2004-x64

1

devcon.exe

windows7-x64

1

devcon.exe

windows10-2004-x64

1

unicows.dll

windows7-x64

1

unicows.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    PowerISO6.exe

  • Size

    3.9MB

  • Sample

    240607-fggwlahh6s

  • MD5

    26ddaf7109b991671808a00ee1eb4303

  • SHA1

    1369fabf2afff1590876846b4f0a1fc2e40fb5c3

  • SHA256

    908803b5421acd43188b665c1bb05a6980700b45d2b24dab743680f4944ed5df

  • SHA512

    425bc9f0cbd245bff7b2eb98ee611994c7947b671f2f529c69601b3309dfbdba4fe218bd6e4820901f48fe73c18dbcb04019bcb584e40274e6572c74b4b3c420

  • SSDEEP

    98304:LQP4YxVaB0j3QlDykl4P4Nd2WuGkckfvT:Lk4+dj+Rl4qsWuDfvT

Score
4/10

Malware Config

Targets

    • Target

      Device/HarddiskVolume5/D/ARUN OLD SYSTEM BACKUP/Utility/Power iso/PowerIso 6.9/PowerISO6.exe

    • Size

      3.9MB

    • MD5

      d82c7d6ff945f0a4c2242189bb8d570c

    • SHA1

      60dc0cb1c3adab1021ba1774fdfc30e5b1c308bb

    • SHA256

      b89ecd6eb0f398b44cc5cdc863443c8cf8b19e2b8aa5e6c43e527b679093aa40

    • SHA512

      6104f3ae1b6ad075b031500d67bc7f21029ea04df4e5d058521ac18208f3513311d345ee44405ee06bbf3ef3feb71d6be746009337ab0b27a8f19986d1709176

    • SSDEEP

      98304:/lhaQCSRFHbbQTZh9J//nxLtohKJF5QvtkEAlq1Upc+:/leSP7bQ9h33nxLtoy7x

    Score
    4/10
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Fusion.dll

    • Size

      981KB

    • MD5

      657b0768ea517bde7c7f685f53baf100

    • SHA1

      e603301090942f41bb6540d202912c7d004cac19

    • SHA256

      4b2d9428cbaad0714cedd8e076c341256c8597f6beeb5ee5f073b954082473c9

    • SHA512

      a1dc81e88551e2a566131ac8a00c0b6b0d1d97f97a7b5c5b6315688f843807f35fe06576a847e0a528d94ce67d31720e72b7ab899a1576bc3c32286d302aac2e

    • SSDEEP

      24576:ZTgqkzFsyq2ty0dkA7I8EQKLzIkIJjD2aMUa:FgqK7BeIkIJjD2aMz

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      bf712f32249029466fa86756f5546950

    • SHA1

      75ac4dc4808ac148ddd78f6b89a51afbd4091c2e

    • SHA256

      7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af

    • SHA512

      13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

    • SSDEEP

      192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      4ccc4a742d4423f2f0ed744fd9c81f63

    • SHA1

      704f00a1acc327fd879cf75fc90d0b8f927c36bc

    • SHA256

      416133dd86c0dff6b0fcaf1f46dfe97fdc85b37f90effb2d369164a8f7e13ae6

    • SHA512

      790c5eb1f8b297e45054c855b66dfc18e9f3f1b1870559014dbefa3b9d5b6d33a993a9e089202e70f51a55d859b74e8605c6f633386fd9189b6f78941bf1bfdb

    • SSDEEP

      192:SbEunjqjIcESwFlioU3M0LLF/t8t9pKSfOi:SbESjFCw6oWPFl8jfOi

    Score
    3/10
    behavioral7behavioral8

    • Target

      $R0

    • Size

      57KB

    • MD5

      e2399827f98c20dff849baf9703b76ee

    • SHA1

      370354d049dea4ae83948294726cb6a17dd8c251

    • SHA256

      ee90ee53cacaab34eb38cf4a130ac2196b02bc16e46ba99752129c01e329978d

    • SHA512

      b67fe02ca7a147b63e04a0eb385e5c99e873bc24930bae1cb901a01f4f3e5f209ca427165f6da2127c4c3b35f6b05af20a0faefd5e83c523665678223449dc94

    • SSDEEP

      768:eeHGLC03SEOlCidXlrnzFKhAtmofgevxHs4gZWk:0LJ3/OltrnzchAtmoflxHeW

    Score
    1/10
    behavioral10behavioral9

    • Target

      $SYSDIR/Drivers/scdemu.sys

    • Size

      112KB

    • MD5

      6ed523048db80539fa5c59d0d139a9ef

    • SHA1

      6a8d5fb365109d1da7cbc74b21701ef7acaca086

    • SHA256

      2bc4c61c70e1bd0c6826318dfe920f42a1f66f407c480f6383e08789277327c8

    • SHA512

      4b422c5423aba29fd3ecd1794a694920a86294c76e53a3f7180952c7be3d29b2aa2d4975ccb20b6356f2cd448316609e3e79497a67ae3068731fd86d96c4cf7c

    • SSDEEP

      1536:0/fgW0Hm+cHFyFv6or1StlDEgFCsd2kDXaPaSPi20CE8q5swDjyu:mycHFyF9RStlDdtXoan2P8s1u

    Score
    1/10
    behavioral11behavioral12

    • Target

      devcon.exe

    • Size

      57KB

    • MD5

      e2399827f98c20dff849baf9703b76ee

    • SHA1

      370354d049dea4ae83948294726cb6a17dd8c251

    • SHA256

      ee90ee53cacaab34eb38cf4a130ac2196b02bc16e46ba99752129c01e329978d

    • SHA512

      b67fe02ca7a147b63e04a0eb385e5c99e873bc24930bae1cb901a01f4f3e5f209ca427165f6da2127c4c3b35f6b05af20a0faefd5e83c523665678223449dc94

    • SSDEEP

      768:eeHGLC03SEOlCidXlrnzFKhAtmofgevxHs4gZWk:0LJ3/OltrnzchAtmoflxHeW

    Score
    1/10
    behavioral13behavioral14

    • Target

      unicows.dll

    • Size

      252KB

    • MD5

      f8d176db5b14aed7c9b25e0640226bd1

    • SHA1

      a31c1c641639f5b50e79e0330cfc91e6613bf7f9

    • SHA256

      f06f36fa03a5db4980c9d1120ada1d9e558515be73eff5b7cd34c48c0d9afd35

    • SHA512

      ceb50c3de105cb8a9541161c2bc9d65cc86c9b2bf5e6e40dcb8c8227ba38e0713d30aa84d8479c78e03ee63ef2f75debe7a5bc6a86cc6dcbcee106d93b9597bf

    • SSDEEP

      6144:Y4OkcR5cbvIFc8vuB4ShpH4BemwbVkEZ77:YFkedmBPjHv777

    Score
    1/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks