Overview

overview

3

Static

static

3

Microsoft....ns.dll

windows7-x64

1

Microsoft....ns.dll

windows10-2004-x64

1

Microsoft....on.dll

windows7-x64

Microsoft....on.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

unlockfps_nc.exe

windows7-x64

1

unlockfps_nc.exe

windows10-2004-x64

1

unlockfps_nc.exe

windows7-x64

1

unlockfps_nc.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    10f2acd3d90d293473c702d61b704e52ed76e561ffe9f61a975c15013da7d1ca

  • Size

    1.2MB

  • Sample

    240625-a23qxa1cme

  • MD5

    53f60838ddec264f1636301c769440d8

  • SHA1

    f3109ca1f034c2a17f1c66c07a732ce0a9a34c96

  • SHA256

    10f2acd3d90d293473c702d61b704e52ed76e561ffe9f61a975c15013da7d1ca

  • SHA512

    b7fcd5d31fa5c4166f033624d08acb75563591909f2fba286d64392cf5592d11d739f7d4a943b8d1e87ac72d54395e81ec0398230b53e8b952894919ca0280a6

  • SSDEEP

    24576:sB2J79xHMS3FIww/23/udiDZdnNq7nzcI8UF8XUCpKbgERazUhh:sAJhxHMoFe/23WaZdnM7noYF8XXpKs5s

Score
3/10

Malware Config

Targets

    • Target

      Microsoft.Extensions.DependencyInjection.Abstractions.dll

    • Size

      62KB

    • MD5

      38236f9c2408bda46c13efef364326fe

    • SHA1

      03178026c200fd723bb75d08b9a4b70e93f6a45c

    • SHA256

      a0106a638facae621f870eda720cb6c980c1d5d49c2f4351134e3fe043b9291b

    • SHA512

      4abadae40a459be932359d6964c30e1e5fbef300736943bab42c1d66b5fa56c45ed10910acf6b36c302c8a40bc364df444220e2af8ff5854460c6a9542ff88b7

    • SSDEEP

      1536:KCYbKF0XEQqb72cfdGWQAE389HD6dDCN6rzf:MUbQAKuj6dGNAj

    Score
    1/10
    behavioral1behavioral2

    • Target

      Microsoft.Extensions.DependencyInjection.dll

    • Size

      90KB

    • MD5

      7d40b6217fc409171015d905a22f8e85

    • SHA1

      27a31ec52498d9db2b09707ef603860a80fdb2cc

    • SHA256

      8d6e7b64cce554f0a0fbdb2ba80745895fa0b4e6cc378b9fedfe8ce86f0d8ae4

    • SHA512

      e998ab21e2a7f4df84f33c5d7bcb6d04c11481633362f4988f3a22820aa1f84744f51503947492217668b9db39e651d13cab0ef09d804b961aea2434314a3d66

    • SSDEEP

      1536:6sS1Tz5tF1bQWVsdJCKTvZEmwbyQMUiEVzz:3QH5tsWUvZEmNQMAVn

    Score
    1/10
    behavioral3behavioral4

    • Target

      Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      adf3e3eecde20b7c9661e9c47106a14a

    • SHA1

      f3130f7fd4b414b5aec04eb87ed800eb84dd2154

    • SHA256

      22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07

    • SHA512

      6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b

    • SSDEEP

      12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF

    Score
    1/10
    behavioral5behavioral6

    • Target

      unlockfps_nc.dll

    • Size

      1.7MB

    • MD5

      3213f23c377beed972df859fb31ea7ff

    • SHA1

      a3cd71b4a0ba545b6cd6712acfab2fd26bffc245

    • SHA256

      1352b7db73d4a023b7e55f293cc628353f7eeb327ecffd62b75a5a83db396ae1

    • SHA512

      e84c38011ef3e0870c38a3310dfa1f6b073916b6cd8f24b79c6a566e5daafab144ad8735294114ef0a38340c59246e544478d900278d484701430175cbcc5980

    • SSDEEP

      12288:AamkL/ejFXF7/0SE9GsJqZ8/ejFXF7/0SE9GsJqZpNexF6FQ/0SE9jsJqZ:rJ7ejjz1uTasejjz1uTafexAQ1u4a

    Score
    1/10
    behavioral7behavioral8

    • Target

      unlockfps_nc.exe

    • Size

      689KB

    • MD5

      83a2a5692d97ac2159c9137d0ba9b989

    • SHA1

      71a6bc642478f56273b147a3f31962903cb44d6f

    • SHA256

      7079a269047ff731822783eb6fb6f0414dc817d1cc05fe8488970dde6426583e

    • SHA512

      1260b403e91e23c89e882d0e0518ff3accf6f6307930f22e89f97d9140e502e5f371c503e4404ff469b2f25f827de7b89db512dc15dc847162a2eb7fbf0f955c

    • SSDEEP

      6144:7iS4ompB9S3BZi0a1G78IVAcDcth9DTjyXjF2RaIujVnKCtnw1gAZQd0SE9UDGsF:7yB0aI78IVI/ejFXF7/0SE9GsJqZ

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Matrix

Tasks