1a2ffcefd32b8afac002562d4458235dbca4eccd1e597d27c42011845c386e45

Sharing

Copy URL Twitter E-mail

General

Target
Open Loot Launcher.exe
Size 133.1MB
Sample240608-xtkaxsff73
SHA256 1a2ffcefd32b8afac002562d4458235dbca4eccd1e597d27c42011845c386e45
MD5 22afb6c7673418b0246a01ceb17247e1
SHA1 c9e8f5ed82d9445b38629ce53dd1f000b01f2001
SHA512 6e7764fc8ac353e57b7bbccd733cf1c4f6e15bedfbba07b1f94fc95497a1c233802cad4dba9b77797da23924d9602cc7b775dc3675b74f4fde7b39d1a80c4c6e
SSDEEP 3145728:df9rhORX6EXkhKReOymaa2gWGaXupeGJe5BYI28T8RHakczGwUrkLZ6agQ:h9KXtX/Rf+xGaGekI28LqXrA6E
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

linux

Malware Config

Targets

- Target
  Open Loot Launcher.exe
- Size 133.1MB
- SHA256 1a2ffcefd32b8afac002562d4458235dbca4eccd1e597d27c42011845c386e45
- MD5 22afb6c7673418b0246a01ceb17247e1
- SHA1 c9e8f5ed82d9445b38629ce53dd1f000b01f2001
- SHA512 6e7764fc8ac353e57b7bbccd733cf1c4f6e15bedfbba07b1f94fc95497a1c233802cad4dba9b77797da23924d9602cc7b775dc3675b74f4fde7b39d1a80c4c6e
- SSDEEP 3145728:df9rhORX6EXkhKReOymaa2gWGaXupeGJe5BYI28T8RHakczGwUrkLZ6agQ:h9KXtX/Rf+xGaGekI28LqXrA6E
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AccessControl.dll
- Size 15KB
- SHA256 3948484bc6a6e8652c2220be411cdcabab73eab46578faca8c0bd01d3ea290ab
- MD5 f894e7068ee5f5b4489d7acdde7112c9
- SHA1 79ec857791ad4ac76673b05e6fc44e55315424ef
- SHA512 e85b2bdc27b9721425bb03393e8aad897647053c77d7862ea541e03dc896173af6eaaf182514d46464d560d15c6b9d4652690885426ac1c68e2b9dd8d632e816
- SSDEEP 192:VUmFdGZ2ESi0SGlIO1yn3B+boYt0/SNFdTmUJJimGf/5b2xlUqyWWKCi1wlLjck2:FdGZ2ESnTqkddTm43saIvy
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- MD5 SHA1 SHA512
Score

3^/10
behavioral11 behavioral12
- Target
  resources/libpkapps/hostfxr.dll
- Size 585KB
- SHA256 886d58c4714122e8ac352eae724f6a7f608b6a987955ef04c16a836a46e0fbb0
- MD5 91d9f560f1f7eebbaabbc18ee36ed811
- SHA1 3f8bb6df836aeb623a12b7e846484b10b7df9a8e
- SHA512 2a0c918cd4ac07ddfd2e5084835ad9f6fd5f3584b55a2b1f4359097ee07a9381b4f455b68f4750274ef5b2e7a3593b01aef42dac42043475b1ac456ea338d780
- SSDEEP 12288:juMwwj6r0YacLo+b4dNZ4Bd5QHdwddddOddddQdddpdddddddddddzVmndddd0Qw:CMwwjpMzub2lX
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  resources/libpkapps/hostpolicy.dll
- Size 576KB
- SHA256 b786f28906e2099e1be80e0ca945e78d298674669d629e33d6cdd2299db47f2f
- MD5 f8a3eea5de5780cf9d8f29bf387ef768
- SHA1 531389bd51488eebd58fc4371184817d8b6551a0
- SHA512 403c1a7452a9a0a65961990170e1fae8c598c9d49e0802fb480ae47f04f6959ec870a336027bb04117168bde3b6090bdb7e61632da325bf25b289193efc7dbd1
- SSDEEP 6144:Tor+lX4apPfmIJ+5JJo05Xk1Ox28Cj7XseKuhJfe94ADjY/vAYXbq:ToKh4apPPJoDUmesgh6rDaAYLq
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  resources/libpkapps/libgetdiskspace32.so
- Size 6KB
- SHA256 8dbb33256f8f1010a080ad13ea2f767cbb6723c79242d438c6de9604ebaab12f
- MD5 585e9dde096c988c1195ff0628949503
- SHA1 5d38738246a99e53c6620c969317f35c4a37fe55
- SHA512 cc49650fd3b01723dfb321ac2923ba5b17235651d15e9a9694317e7eb1204c74211779f3d35837f7875b4e32ce9b4ef3946c599bd39acba450df15b147ea657d
- SSDEEP 96:3GcMBWBPhEqwSDJUdljCs9IOJsEslNW7FdBXWBm3//ggOGp:K8phEqwSDJeljCs9JJM879W6Q
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17
- Target
  resources/libpkapps/libgetdiskspace64.so
- Size 7KB
- SHA256 c5b430829f90242badf22663a4017cdb6b9afdf25eb5f9abd2c9400c37aaf44a
- MD5 af11473486c4893c55f5d9e4a2e85a96
- SHA1 1738451864485cd6cfbff1c5b523734e443c5ff0
- SHA512 076b1d6f48b7a82f86e341e0fa6b227947266c2a5495e83e09a8c050c6f553f00c24c37e58f499e2578578557f61dc742db693c8d15477c1e9b87d714023abd7
- SSDEEP 96:R9FMBWBPFEB4hDYeFseIkvC7IdBkWBS+iQJsnb:R9q8pFEqhDYEPCmGW/it
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral18
- Target
  resources/libpkapps/libpkapps.dll
- Size 1.0MB
- SHA256 bee1daa3530cf52255b0bc16a1e6266e6e83f395fec453446c7e001a6ab98c5a
- MD5 5e7231b13c577b4e0cbb31d189005af3
- SHA1 abb89df6a29c8dde3b36451493e4fca6bcf3e01b
- SHA512 eb16d79ba6a9b58aba7fd2d71a0ffcf8d3606cd027fd7c7fad144f4f2474ba5aaf56b40ed74ae1834c0d61dc19c22803edf9507d2feae54bdfc29b67c331fc5e
- SSDEEP 12288:voYGmp7O3zTU1YKR0quhxcw7EYnpwGen6eFvLor9:vXBhO3zTSmxhxcw7EYnpw1nF
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  resources/libpkapps/librsync_linux_x64.so
- Size 94KB
- SHA256 8d7b80a830a33c6e48d7e30da223899448076e8b72572770e9b7b1979b018425
- MD5 4dcba2198e9618eff09ada42f744125c
- SHA1 cb42213192b6ca301b3c999a41da69f27687bcfc
- SHA512 679f31b344ccc9d99b9aa040938fc86a42e6e72259678b6d6e3894b4b78415703ab036799f99c7d815d4cc016c10d9f2619684a9c7648928a65ca882a7e27b54
- SSDEEP 1536:/45e/BOy8EfxsXhSfNc9CUjW7m7UXrSJ8:AQJOyTxwwlijWi7YrSJ8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21
- Target
  resources/libpkapps/librsync_linux_x86.so
- Size 103KB
- SHA256 d04b12060dc38cfe892a41f69f0c9ce75ac7cacf7be6a5f4039ee842f1415db4
- MD5 72840f2e4e66b35f0143d58dd242ffeb
- SHA1 cf2cd97117006d79e749432d682d257df86fe818
- SHA512 9e37d0a6a31ea7aab96109348e6bd5d543fcb50f2c75059def438fc05398f8bfc4bba2d22d73eb999f82c4a0d3e928a0b288c51f3fc50304288b8f0b18f2d507
- SSDEEP 3072:e1GKO7sF+FUQZWV2V2ks1xDZOCIgO8GhqBvp:e1GqF+FUQZWV2V2ks1DOCW8G8vp
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral22
- Target
  resources/libpkapps/libturbopatch_linux_x64.so
- Size 6.8MB
- SHA256 68e4d1abf4a0fa247c19e429836cace1723a4abdc272fab6840fe103a75296dc
- MD5 6d1bfd65d4e2f11d87aa7a40f3dcb492
- SHA1 a8ccd8a47aecc5a87830c57e4dfb8ed6e0293603
- SHA512 73ca308510a53d54d2842f72005389e18beac1b770ad68ca2ae09b1503f47be1d1f16a368b7c5712759ef4482cabceb86c296eda9a6e057b8f69e148f4ad707d
- SSDEEP 49152:VEUyYmZWWHlyPJu7qRaaiPeDVwAgPC9vihr7kPJoIonSi+76NW2W2PPtw169djy4:uXZfFtgaai2VyXAW9bRluV+34Awp4v
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23
- Target
  resources/libpkapps/mscordaccore.dll
- Size 1.2MB
- SHA256 9cbbe667a051928aea2bd5bb25208d07996ee8fa44359c84a5978e9fa8caf520
- MD5 549b9a43f190bcafce5f7d7cfa9ab773
- SHA1 9b5eb8c2cac7f4c4765d199bf4f0869b5ce32b29
- SHA512 077a7cb4eeef97e12d569bc6f2bb1367e1cc1961540352c2d1115bb60f3dcd67cee2dfeb3725156307cec9e547144c630c21acae0235bb443b0e78b0c55ad89c
- SSDEEP 24576:MfyH8x9h6J3VqYZ2d8CIylZt8LKrN4wYu:SLx9h6J3AJfTfzfYu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral24 behavioral25
- Target
  resources/libpkapps/mscordaccore_amd64_amd64_4.700.21.11102.dll
- Size 1.2MB
- SHA256 9cbbe667a051928aea2bd5bb25208d07996ee8fa44359c84a5978e9fa8caf520
- MD5 549b9a43f190bcafce5f7d7cfa9ab773
- SHA1 9b5eb8c2cac7f4c4765d199bf4f0869b5ce32b29
- SHA512 077a7cb4eeef97e12d569bc6f2bb1367e1cc1961540352c2d1115bb60f3dcd67cee2dfeb3725156307cec9e547144c630c21acae0235bb443b0e78b0c55ad89c
- SSDEEP 24576:MfyH8x9h6J3VqYZ2d8CIylZt8LKrN4wYu:SLx9h6J3AJfTfzfYu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral26 behavioral27
- Target
  resources/libpkapps/mscordbi.dll
- Size 1.3MB
- SHA256 7be871c7b8fb4acc19150d9c0e42b192eeddcf1be728b84c35856afdaaccfbc9
- MD5 1dcbc911047712402e708a11d2f68b2e
- SHA1 850a6d487c7fb743155321861692aff4aa19a57c
- SHA512 c0f44f668d2c821ffd74dec5510d46807b65438b61bc1c79c37621e8f697db5578570e8aa715193ff98cb79d9d5b1a59ffba2296199343b8adb359ad1626321a
- SSDEEP 12288:M0vxJYu0NZyntH7XjjuZ+bTEjI/qgIwymz0z8eDBwNz6gKkyGVHip7Wj8fRn4BIe:M0JwNZGzj9gjINz0z1DPgxyGcBss4B1
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral28 behavioral29
- Target
  resources/libpkapps/mscorlib.dll
- Size 55KB
- SHA256 1979ad440516de84f48f6ae86f653ca95699dbd4777b6114a3cc081e9ab547d7
- MD5 8700a05b44593ef50c9052e8c671065d
- SHA1 f6721073f0d5218501c3262005d68552e691e19b
- SHA512 5adb8c2b12299fdb8027431e66ada2db5b22f91279b35add2096ecf38ab8658036c68807de3b022e024ff06427250c9f2f37976d2d7aaf441644b9ea629f9969
- SSDEEP 768:3uv7uRXIxUj4+O8Fxm5e4C54Gx1lD1QO7KClti8d8Ia:3h2kxm5e4e4Gx191VK328X
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral30 behavioral31
- Target
  resources/libpkapps/mscorrc.debug.dll
- Size 174KB
- SHA256 5398011eaa74cbb77b9a93a43a3c44ed4f5221cbc665790db0b07c7f06bd489e
- MD5 bff4c667b75dc548e01493dd4561335a
- SHA1 aa79428f5e2fe79ed06199283084190434c338e0
- SHA512 69e51f2fdb337c430ffd5ad577cf861eaaab014a341e56434592139d7e4b1c58952147beabab67d824f35acb0c76c122c70dff4ca7c7ef8a62e22dcc82044ccb
- SSDEEP 1536:46JqeDZzb8IVAkR1RhQi/s1PzHvh7xYSmUlMbcCV9jfnw5RVvZ48MSZctpoEXtVR:bJqeDZzgASHlMbrhnYDAS4SGz
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32