Overview

overview

3

Static

static

3

plc连接�...on.dll

windows7-x64

1

plc连接�...on.dll

windows10-2004-x64

1

plc连接�...mo.exe

windows7-x64

1

plc连接�...mo.exe

windows10-2004-x64

1

plc连接�...ls.dll

windows7-x64

1

plc连接�...ls.dll

windows10-2004-x64

1

plc连接�...on.dll

windows7-x64

1

plc连接�...on.dll

windows10-2004-x64

1

plc连接�...15.dll

windows7-x64

1

plc连接�...15.dll

windows10-2004-x64

1

plc连接�...ng.dll

windows7-x64

1

plc连接�...ng.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b26de73aa20e5443f27cb7a99c2a7d1173c4d8a1d6c312309fa3007eda26fe95

  • Size

    5.3MB

  • Sample

    240708-l4q1nswepf

  • MD5

    b1bdfacbc477c39f715ec99f66651127

  • SHA1

    d4596d7db4684fb13a3092f8b0cdbd5f0195180a

  • SHA256

    b26de73aa20e5443f27cb7a99c2a7d1173c4d8a1d6c312309fa3007eda26fe95

  • SHA512

    530418a251392730836ac555b80d6dca08a1752f856dd292e2289b86bf16fce9d53a7bf3ff5c3c9ed2a3c9419c4598b7fd912523e33138ea779ac397088907a6

  • SSDEEP

    98304:LZyHgiLbuN/Ib339csIlUYXiBkN7C6cLoWoGdJwAQ3Y/aoLwXbftMwz:1igiuN/W39cxHiBM7LcLoG+AQ3Mapz

Score
3/10

Malware Config

Targets

    • Target

      plc连接工具/Debug/HslCommunication.dll

    • Size

      3.2MB

    • MD5

      93e0e40f1abb590dab9d930171d335e1

    • SHA1

      0893c4da934c37cb0bb240f0f1a438663083394e

    • SHA256

      8f984451a5aa5aea1d72597b7a36c88cf6c2bc8d29052aaf421c3e1a5de37e90

    • SHA512

      f1fb3630ddce1d9ff213eddb8e6631c314b74b0b9b6f27ead87101cb74f90e349dbdee8d370ca535b396c271e4a5b0187a18b85ec694df5bf138d9f74864a318

    • SSDEEP

      24576:M9U/qh7kFW/LKzyoBNLJu47VcI8/M4WEWOe3TY6Pzgg91IvvtFNFN5XbnCNQvw8t:X3Wk/3TY6PzghAQvw8g0

    Score
    1/10
    behavioral1behavioral2

    • Target

      plc连接工具/Debug/HslCommunicationDemo.exe

    • Size

      2.8MB

    • MD5

      9e101482300b2ebc62730d8c45c4f2cf

    • SHA1

      e00afa9114172892e1124fc654cd4a707a643aea

    • SHA256

      ac0741d2316267a70d73c6b29555c03ae2a239cf3260e14165126421d168d62e

    • SHA512

      916fcb56edea5bc4acd876bbff5c643bf19afdd17a99ff4e72b60058c801f27b9690ca2ed12d1d87320b914ec31083ecd6bb101647f48aff8576160e3e5c6d4d

    • SSDEEP

      49152:HbAvYBsXyt6iOwreftEHUMzKXu61FnDNkhnGkaNZOb8KA3v7TAerP:HbAABsXyt6ixre9+2nDNSvaNZOb0TPP

    Score
    1/10
    behavioral3behavioral4

    • Target

      plc连接工具/Debug/HslControls.dll

    • Size

      1.9MB

    • MD5

      8a8f9547ebf4161c6079b27e86e6b053

    • SHA1

      bc78005c84257f631b0492841c199075ac31ee4e

    • SHA256

      f6d78f45b304e4e61c38a885c025b3e0fff78dc92148bc89314c287f81e9258e

    • SHA512

      54485438d435697eb198ec772a3a80943b8c9a7eeac234e9eb0d2461c159d3509a59751f22609cee98b3b58bd32b7ba753307dcf4a684534ec1ab8a0ed475ff7

    • SSDEEP

      24576:Z9sXenZjQMN0fU7GpQuoUSW2jCIj2tRgQ4UPOLGE:Z9sunZnI9QuoU7BgsCQTYGE

    Score
    1/10
    behavioral5behavioral6

    • Target

      plc连接工具/Debug/Newtonsoft.Json.dll

    • Size

      493KB

    • MD5

      1390b082700afc53a7aa320f3259325e

    • SHA1

      8f72572ad084ef145fd3286930af6b70ba622384

    • SHA256

      7beb6a951b92af14322a382cf105fff8d0dc63518b33556b98e09daca0cb6d07

    • SHA512

      ace3b9548bb8d29805673ac4611a141e4c026c5d09a63bd399f904d28ea274f9e0ff682b99adce25a66ccdd7e3f03e0a45ca9ae0a67e88d9d1c83cb34180b8d6

    • SSDEEP

      12288:ZmKLDa2Tqte5+7OWpP8gkRCj7gBEA+PeKjJc:Die0/pP8gUwcBEAMeKdc

    Score
    1/10
    behavioral7behavioral8

    • Target

      plc连接工具/Debug/WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll

    • Size

      237KB

    • MD5

      397d67675c51bae48cbdc9e568839951

    • SHA1

      69e5f9d5cd604eaa9c79e7e7d8fd2dbf8554d85c

    • SHA256

      bbeb01e824c3c192c2c7d5e476c4c109095564a15fa71a775f95aa6e53afe435

    • SHA512

      871710a13590a9abac64a03438fba06d830a83b9fb59d3e452d2796c92a97f6e3016d1b40e76f1706192549780ed0eff27d3d0408b1168476755607bf7f4f43c

    • SSDEEP

      3072:+kdjAcFUia3AtyExDbfDZmWoiCZyvZ9ELvnwErhI4YcO1If7u7MamexduTE0DVCv:1nxDbQtiCZyvZsnBW91If2D6TW

    Score
    1/10
    behavioral10behavioral9

    • Target

      plc连接工具/Debug/WeifenLuo.WinFormsUI.Docking.dll

    • Size

      308KB

    • MD5

      0f7645d048258a06678aec29f9cad9bf

    • SHA1

      9238b7d29358594f42a1466c9e405b711ebab1d0

    • SHA256

      4377704eeefebd20d30b675366658f54a39d440544f4f3c2e566b13945d09f1a

    • SHA512

      b50659f3ffae9a247e238b6f70cd0f924347237322e7e802997ab9c513db32fbfbf5292120b4f5916d27b27d171368c2e9def86b3ba67d1de5197dbeb36e7907

    • SSDEEP

      3072:5ctA74caUWRlU4qazH8jYTiW35MRvwyW+lWxoQbG6lbcpbqgsBJCaxS99ZllNeYh:0MW04HzH8jYTkGyWjGKVS7lNepy

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Matrix

Tasks