Resubmissions

09-06-2024 08:44

240609-knmgwagc4s 3

09-06-2024 08:31

240609-kexw9agb5x 7

General

  • Target

    @prvpane - X2 2020 (1).zip

  • Size

    140.5MB

  • Sample

    240609-kexw9agb5x

  • MD5

    c6dd473471512c44678384025f52cd2d

  • SHA1

    b041e15c7d8dfd84d3e38a0d0ff3e0151047ec57

  • SHA256

    7ba9bcd9e41688527773357652568e840f8569b1692a02182a701527ed431b74

  • SHA512

    24fda7d7ca14cb77eecfd274e150da3924289f917b31d7e9f6002cf5f4dd17f2ee251b6eefd89d37084ef41fe4876aa89055488851f1050c185f77d7bb9003e6

  • SSDEEP

    3145728:RXLzBYNZwo2Ak6wzTXBX+Atex5NDe0/4c:RX3BYNZXizjBud5NDe0z

Score
7/10

Malware Config

Targets

    • Target

      @prvpane - X2 2020/▷ Necessary Downloads (for X2 to work)/VC_redist.x86.exe

    • Size

      13.1MB

    • MD5

      1fb0faba3d602afe03740db3d145c1e6

    • SHA1

      2c1ae47103e7f8d6072df4a8d9ceb382724ac59b

    • SHA256

      1acd8d5ea1cdc3eb2eb4c87be3ab28722d0825c15449e5c9ceef95d897de52fa

    • SHA512

      4509cfbd5f08cc32d68855edc285e8ba8caa7d2c4d044e4256dd907b205fda9a689c32ad7ef9ff3955e8390ed67498a54039a3cd4bfc9102ed82f9bd1255011a

    • SSDEEP

      196608:xRjxHvflpQcIIS/Rj7BWl+aV8t8z72BxBwBgO4Q/gVMMrXF/OMsjCEJy4ErENIhf:bxHHlptVYmfr7yBG/459OM+CC6T2sFb

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      @prvpane - X2 2020/▷ Necessary Downloads (for X2 to work)/Visual C++ v56.exe

    • Size

      22.8MB

    • MD5

      6df03cbc1b6879805d5354170e3aef54

    • SHA1

      936f8409da9b1ee4c77514dc526eadd80733ffd3

    • SHA256

      d36996cb7f936a0ee55ee05de45fcfbff1e829f105bbfa1b2297f3da82d31bc9

    • SHA512

      268f2e545f7da3c666426f6259d6456c66b12e5623322c6c2ecf6727e296ccfe23038c2d02ca97b1513ef40eba2dd28dde12fe7fdffe1fef7cba1d92adc2ed7b

    • SSDEEP

      393216:MMRw9cSaMyGd0I2+AhalPLe/cIOAcFcqh7UIIExjucneodd+oZwZrXufOJgip8yB:bEaM10I2+AGje/1WFcnIIEJ/ou6g+8/o

    Score
    1/10
    • Target

      vcredist_x64.exe

    • Size

      4.7MB

    • MD5

      40395c175553cb14d2050888efccdf00

    • SHA1

      13674c43652b941dafd2049989afce63cb7c517b

    • SHA256

      55bf99ad3f063165c3ee1626787b5d4c2b65b5001fef79dd58c3490369ed282f

    • SHA512

      95f7596fbd76538ff2026b2232e0e7caf517ab4f60556e875e1538254a5c417cf8b82aaaebaabdf2eb33729b986b3ac6a870a62fdfc582f5218babafa4fceb14

    • SSDEEP

      98304:RfN8nttZrMa2xOy8MdEZZAFvdpf3yxy+K1hjknd8VxwyhSJQlWf:RanhAxOyMAFvdtyxzK1mO/Zkf

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      vcredist_x86.exe

    • Size

      4.0MB

    • MD5

      5689d43c3b201dd3810fa3bba4a6476a

    • SHA1

      6939100e397cef26ec22e95e53fcd9fc979b7bc9

    • SHA256

      41f45a46ee56626ff2699d525bb56a3bb4718c5ca5f4fb5b3b38add64584026b

    • SHA512

      4875134c664503242ec60717232f2917edca20286fc4b675223edbbe5dc0239ebfaf8f67edd76fedcaa2be5419490dc6f47930ca260e6c9988ccf242416c204b

    • SSDEEP

      49152:DQC7p7i0AY9PE1UJEfcnKiJ/K7+RIaCSi3haenvUvwwZDfimxQ02BhoZGxaJq8QQ:DLp7ilY9CQEcKz+kSixJvzwZeK2ggYK4

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      vcredist_x64.exe

    • Size

      5.4MB

    • MD5

      cbe0b05c11d5d523c2af997d737c137b

    • SHA1

      027d0c2749ec5eb21b031f46aee14c905206f482

    • SHA256

      c6cd2d3f0b11dc2a604ffdc4dd97861a83b77e21709ba71b962a47759c93f4c8

    • SHA512

      75280d721550c2fa19b4f8d42b87d2fc6017f42709d84d2162c7330f7a0338bbd72cdc3f78626b10edcc602e2d22b174039254824334b3173d0ea48b3c06d1df

    • SSDEEP

      98304:hsPj6quMcylIpk4nM6tmMUrfvEP0hcKju9Z/lTPU8UBHBKNpr1w36ZyY:+PjzDJ4M6tmXDsPKi1lTPmHipJwqL

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      vcredist_x86.exe

    • Size

      4.8MB

    • MD5

      cede02d7af62449a2c38c49abecc0cd3

    • SHA1

      b84b83a8a6741a17bfb5f3578b983c1de512589d

    • SHA256

      66b797b3b4f99488f53c2b676610dfe9868984c779536891a8d8f73ee214bc4b

    • SHA512

      d2d99e06d49a5990b449cf31d82a33104a6b45164e76fbeb34c43d10bcd25c3622af52e59a2d4b7f5f45f83c3ba4d23cf1a5fc0c03b3606f42426988e63a9770

    • SSDEEP

      98304:TsPj6quMBYyuSFOMKykvYgS/ylTpHufHMpPbOZ39c7T3eeom2vJtPShg:wPjzayuSgMKykQgSaTkvMxEYT3OfPShg

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      vcredist_arm.exe

    • Size

      1.4MB

    • MD5

      3ed18a8399f6fd0760ecd2270116fa32

    • SHA1

      dc9850bb24ca10160e33fc37590a2dc689827acf

    • SHA256

      623fd5d6de80d117408b76678d5d0d44d3966a48a3254055ca9512bf3dad1635

    • SHA512

      fa5fc96acfcce19ccfcaa5d2ae82ebb34038ee3419eee68fcfcae2e5de06432af7ecb88440afad021d8149a98536d04e1bd3992c2eb245864866a6c51b786754

    • SSDEEP

      24576:TtDmAcNNpFq4q0WHFxHEFa74sIvZLz1dYKz9x6NjfKM4QgD2WtpDIHX5i:Bq9DpRWHfEFaUsYRzzYW9xsKM7+835i

    Score
    1/10
    • Target

      vcredist_x64.exe

    • Size

      6.9MB

    • MD5

      3c03562b5af9ed347614053d459d7778

    • SHA1

      1a5d93dddbc431ab27b1da711cd3370891542797

    • SHA256

      681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064

    • SHA512

      6c2f4eeb38705c2dafc4d75d8de0036a0aed197f83e9cb261d255fe26e4391f24b0b156e9019c739dd99057041c2bb80f9ab80f56869bc1e01f0469a76f24f75

    • SSDEEP

      98304:vRWKtOl5CCGomEBkHUBmExJrIUg32t9RRyvo7VnOcyP24Vc35re94tb0eYbY1poo:v3tO3CCT/hBxtVtyUVnmSprzVIY7QKAk

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      vcredist_x86.exe

    • Size

      6.3MB

    • MD5

      7f52a19ecaf7db3c163dd164be3e592e

    • SHA1

      96b377a27ac5445328cbaae210fc4f0aaa750d3f

    • SHA256

      b924ad8062eaf4e70437c8be50fa612162795ff0839479546ce907ffa8d6e386

    • SHA512

      60220a7c9de72796bd0d6d44e2b82dbdd9c850cc611e505b7dc0213f745ff1f160b2d826eaf62fd6e07c1a31786a71d83dc6e94389690fd59b895e85aba7444b

    • SSDEEP

      196608:OwKjLs+UIkzHlAv4X6zQRgiwHLD2LQIX/:9KjaxFFP1iLD2LnP

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      vcredist_arm.exe

    • Size

      1.4MB

    • MD5

      3a4e983f3fe423e7b66458cd06d8f2e2

    • SHA1

      25786706a58490884623842b0bbc886ac86e2cad

    • SHA256

      0fb06ba40ce522d8ae6b1471cfacc7e82ee5d8b224a6954a50e19d74063dce30

    • SHA512

      65fd7ffdbfdbcbaf0c06c075b0960d8cb96d7c10576435f872149b4352290dc948310fbb16c577566e2cb7305bf490254be3b789e61cc58f84f2f4a00709f89d

    • SSDEEP

      24576:lUPzQeCJElwxRq/OmFdGw/PH34Bc14RdwimPctXkGMJ6PbxzsWiDXk55dRtTNoFo:JTAaE0+F2TgdwJ8ATrNle+j

    Score
    1/10
    • Target

      vcredist_x64.exe

    • Size

      6.9MB

    • MD5

      96b61b8e069832e6b809f24ea74567ba

    • SHA1

      8bf41ba9eef02d30635a10433817dbb6886da5a2

    • SHA256

      e554425243e3e8ca1cd5fe550db41e6fa58a007c74fad400274b128452f38fb8

    • SHA512

      3a55dce14bbd455808bd939a5008b67c9c7111cab61b1339528308022e587726954f8c55a597c6974dc543964bdb6532fe433556fbeeaf9f8cb4d95f2bbffc12

    • SSDEEP

      196608:19OaQ54oYY7jLwXjZ41OON2uk3bQWgtyccMEL:Gz5x7jLXkmkU4cFe

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      vcredist_x86.exe

    • Size

      6.2MB

    • MD5

      0fc525b6b7b96a87523daa7a0013c69d

    • SHA1

      df7f0a73bfa077e483e51bfb97f5e2eceedfb6a3

    • SHA256

      a22895e55b26202eae166838edbe2ea6aad00d7ea600c11f8a31ede5cbce2048

    • SHA512

      729251371ed208898430040fe48cabd286a5671bd7f472a30e9021b68f73b2d49d85a0879920232426b139520f7e21321ba92646985216bf2f733c64e014a71d

    • SSDEEP

      98304:hQEKzHx15bWUuBrNatjJh2eNUrzKRL/RaIswn7aBOC5qZxVqFb2iExMc7FvxwGvf:WRDnuBotjJh2emr8L/YIsG7MOgqHG64

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      vc_redist.x64.exe

    • Size

      13.9MB

    • MD5

      27b141aacc2777a82bb3fa9f6e5e5c1c

    • SHA1

      3155cb0f146b927fcc30647c1a904cd162548c8c

    • SHA256

      5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3

    • SHA512

      7789eabb6dd4a159bb899d2e6d6df70addb3df239bda6f9ead8c1d2a2ac2062fce3a495814b48a3c2bec12f13800ad0703e2c61c35158b0912011b914f098011

    • SSDEEP

      393216:xTPq5dCsKSR65cX7Eyd/qnejOX3L8T8KYfU3j:VP5iw56oyleejcL8T8fc3

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      vc_redist.x86.exe

    • Size

      13.1MB

    • MD5

      1a15e6606bac9647e7ad3caa543377cf

    • SHA1

      bfb74e498c44d3a103ca3aa2831763fb417134d1

    • SHA256

      fdd1e1f0dcae2d0aa0720895eff33b927d13076e64464bb7c7e5843b7667cd14

    • SHA512

      e8cb67fc8e0312da3cc98364b96dfa1a63150ab9de60069c4af60c1cf77d440b7dffe630b4784ba07ea9bf146bdbf6ad5282a900ffd6ab7d86433456a752b2fd

    • SSDEEP

      393216:S1RPq5dCsKSR65cX7Eyd/qnejOFxP7OEnl4L/Vvc:yP5iw56oyleej2OEnlwc

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      @prvpane - X2 2020/▷ Necessary Downloads (for X2 to work)/vcredist_x64.exe

    • Size

      4.7MB

    • MD5

      40395c175553cb14d2050888efccdf00

    • SHA1

      13674c43652b941dafd2049989afce63cb7c517b

    • SHA256

      55bf99ad3f063165c3ee1626787b5d4c2b65b5001fef79dd58c3490369ed282f

    • SHA512

      95f7596fbd76538ff2026b2232e0e7caf517ab4f60556e875e1538254a5c417cf8b82aaaebaabdf2eb33729b986b3ac6a870a62fdfc582f5218babafa4fceb14

    • SSDEEP

      98304:RfN8nttZrMa2xOy8MdEZZAFvdpf3yxy+K1hjknd8VxwyhSJQlWf:RanhAxOyMAFvdtyxzK1mO/Zkf

    Score
    1/10
    • Target

      @prvpane - X2 2020/▷ Necessary Downloads (for X2 to work)/vcredist_x86.exe

    • Size

      4.0MB

    • MD5

      5689d43c3b201dd3810fa3bba4a6476a

    • SHA1

      6939100e397cef26ec22e95e53fcd9fc979b7bc9

    • SHA256

      41f45a46ee56626ff2699d525bb56a3bb4718c5ca5f4fb5b3b38add64584026b

    • SHA512

      4875134c664503242ec60717232f2917edca20286fc4b675223edbbe5dc0239ebfaf8f67edd76fedcaa2be5419490dc6f47930ca260e6c9988ccf242416c204b

    • SSDEEP

      49152:DQC7p7i0AY9PE1UJEfcnKiJ/K7+RIaCSi3haenvUvwwZDfimxQ02BhoZGxaJq8QQ:DLp7ilY9CQEcKz+kSixJvzwZeK2ggYK4

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
7/10

behavioral6

Score
7/10

behavioral7

Score
7/10

behavioral8

Score
7/10

behavioral9

Score
7/10

behavioral10

Score
7/10

behavioral11

Score
7/10

behavioral12

Score
7/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

discovery
Score
7/10

behavioral16

discovery
Score
7/10

behavioral17

discovery
Score
7/10

behavioral18

discovery
Score
7/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

discovery
Score
7/10

behavioral22

discovery
Score
7/10

behavioral23

discovery
Score
7/10

behavioral24

discovery
Score
7/10

behavioral25

discovery
Score
7/10

behavioral26

discovery
Score
7/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
7/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10