Overview

overview

7

Static

static

3

SuperF4-1.4.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

$PLUGINSDI...gs.dll

windows10-2004-x64

3

SuperF4.exe

windows10-2004-x64

1

Resubmissions

09-06-2024 02:15

240609-cpq8fsca8w 7

09-06-2024 02:14

240609-cn9cmscg37 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SuperF4-1.4.exe

  • Size

    137KB

  • Sample

    240609-cpq8fsca8w

  • MD5

    913e0bdc0124f415b1e99bc7c1a2e31b

  • SHA1

    00a443e70039641d1ea3dc92c306c4e2c75733ad

  • SHA256

    dea3dcae56acabada707a1c3ee0422fefa1f280aa3ca2c28c52714e16db060d2

  • SHA512

    ba0257002023ae1b575356000cfcb96dafa5ca3bdea489872218508987397e62162862ef0ecd9713d579452a0a56d2988e5b9efd2566fc54f60ff94c14e5ede8

  • SSDEEP

    3072:PE52Bcj8B3ebhwxv5L1A5mKmK+xN45nP4gMrp+RsNSA7eFXIjc34k:zBcY+8MHT+NCYMsNJ7eyjc34k

Score
7/10
discovery

Malware Config

Targets

    • Target

      SuperF4-1.4.exe

    • Size

      137KB

    • MD5

      913e0bdc0124f415b1e99bc7c1a2e31b

    • SHA1

      00a443e70039641d1ea3dc92c306c4e2c75733ad

    • SHA256

      dea3dcae56acabada707a1c3ee0422fefa1f280aa3ca2c28c52714e16db060d2

    • SHA512

      ba0257002023ae1b575356000cfcb96dafa5ca3bdea489872218508987397e62162862ef0ecd9713d579452a0a56d2988e5b9efd2566fc54f60ff94c14e5ede8

    • SSDEEP

      3072:PE52Bcj8B3ebhwxv5L1A5mKmK+xN45nP4gMrp+RsNSA7eFXIjc34k:zBcY+8MHT+NCYMsNJ7eyjc34k

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

    • Target

      $PLUGINSDIR/System.dll

    • Size

      23KB

    • MD5

      8643641707ff1e4a3e1dfda207b2db72

    • SHA1

      f6d766caa9cafa533a04dd00e34741d276325e13

    • SHA256

      d1b94797529c414b9d058c17dbd10c989eef59b1fa14eea7f61790d7cfa7fd25

    • SHA512

      cc8e07395419027914a6d4b3842ac7d4f14e3ec8be319bfe5c81f70bcf757f8c35f0aaeb985c240b6ecc71fc3e71b9f697ccda6e71f84ac4930adf5eac801181

    • SSDEEP

      384:TsuiXfwnOEFMUgKWSeMPe3+6a+A6PcPpntKfh00g509nj:efwnLFMUGMPenA6Yuh9Xj

    Score
    3/10
    behavioral2

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      25KB

    • MD5

      cbe40fd2b1ec96daedc65da172d90022

    • SHA1

      366c216220aa4329dff6c485fd0e9b0f4f0a7944

    • SHA256

      3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

    • SHA512

      62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

    • SSDEEP

      24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      11KB

    • MD5

      79a0bde19e949a8d90df271ca6e79cd2

    • SHA1

      946ad18a59c57a11356dd9841bec29903247bb98

    • SHA256

      8353f495064aaf30b32b02f5d935c21f86758f5a99d8ee5e8bf8077b907fad90

    • SHA512

      2a65a48f5dd453723146babca8d047e112ab023a589c57fcf5441962f2846a262c2ad25a2985dba4f2246cdc21d973cbf5e426d4b75dd49a083635400f908a3e

    • SSDEEP

      192:rAki5P7AA9Xm2Y3KkdMG95Kt0qk+PdIgb9rdTiUdH7hs:Ekg7TNm2GdMG9ISx+P99rd+aH9

    Score
    3/10
    behavioral4

    • Target

      SuperF4.exe

    • Size

      39KB

    • MD5

      00549b9467a142cb8f46d12353c1fc9e

    • SHA1

      dbe73a6f07cdb1cc48e55eca5fe6b9f12a5eeb30

    • SHA256

      3c83c8dfe3fb718c175c7444837c938a32af6a24572a9a3405fae217fa771941

    • SHA512

      a396c49d4c6b520bdd7a8e8d2410e4d95d2b011d7015642235d3a2a3bb5d98966e02d1174c94442957b231c389055abbe6ae08df565ed9b0d069606758896bc0

    • SSDEEP

      768:NqggLH5oiKv3Rf6iyJ653LX1hsvA27bpWM:QggLH430iOE3Lts

    Score
    1/10
    behavioral5

MITRE ATT&CK Enterprise v15

Tasks