Overview

overview

7

Static

static

3

print.exe

windows10-2004-x64

1

printfilte...vc.exe

windows10-2004-x64

1

printui.exe

windows10-2004-x64

1

proquota.exe

windows10-2004-x64

1

provlaunch.exe

windows10-2004-x64

1

provtool.exe

windows10-2004-x64

1

prproc.exe

windows10-2004-x64

1

psr.exe

windows10-2004-x64

1

pwlauncher.exe

windows10-2004-x64

1

rasautou.exe

windows10-2004-x64

1

rasdial.exe

windows10-2004-x64

1

raserver.exe

windows10-2004-x64

1

rasphone.exe

windows10-2004-x64

1

rdpclip.exe

windows10-2004-x64

1

rdpinput.exe

windows10-2004-x64

1

rdrleakdiag.exe

windows10-2004-x64

1

readCloudD...gs.exe

windows10-2004-x64

1

recdisc.exe

windows10-2004-x64

1

recover.exe

windows10-2004-x64

1

refsutil.exe

windows10-2004-x64

1

reg.exe

windows10-2004-x64

1

regedt32.exe

windows10-2004-x64

7

regini.exe

windows10-2004-x64

1

regsvr32.exe

windows10-2004-x64

1

rekeywiz.exe

windows10-2004-x64

1

relog.exe

windows10-2004-x64

1

repair-bde.exe

windows10-2004-x64

1

replace.exe

windows10-2004-x64

1

resmon.exe

windows10-2004-x64

7

rmttpmvscmgrsvr.exe

windows10-2004-x64

1

rrinstaller.exe

windows10-2004-x64

1

rstrui.exe

windows10-2004-x64

1

Resubmissions

29/08/2024, 17:43

240829-way5asvfql

29/08/2024, 17:42

240829-wac7tstbjd

09/07/2024, 13:39

240709-qydwdayanf7

09/07/2024, 07:52

240709-jqdr3swdle6

09/07/2024, 07:35

240709-jer6bssgpk

09/07/2024, 06:42

240709-hgkzcs1bjl5

09/07/2024, 06:34

240709-hb2d6azhjn3

09/07/2024, 06:32

240709-han3fasgrb

09/07/2024, 05:47

240709-ggxgqa1crh4

09/07/2024, 05:34

240709-f9fh8sybmp

Sharing

Copy URL Twitter E-mail

General

  • Target
    application.zip
  • Size 199.1MB
  • Sample240709-qydwdayanf
  • SHA256 9df41ebe1a2c61bbc382a85a7788e127e4dafada4955a1b6c3dfcaf460bd714f
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      print.exe
    • Size 36KB
    • SHA256 aeecaedeccc9dcb0a8d910503f876ef8b9a75f0f2dca1363992befa0f6d11c15
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1
    • Target
      printfilterpipelinesvc.exe
    • Size 620KB
    • SHA256 76cf6f235c87ff7f6df66b7751dd322c0e0939c586eec7f8bff4ebed64f1565f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral2
    • Target
      printui.exe
    • Size 80KB
    • SHA256 037389320fdb682f69bd7e6ab6230fe076f9d1d75545835afc8215af70daf3f2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3
    • Target
      proquota.exe
    • Size 68KB
    • SHA256 4c06554634e0019b258e564a365b8f564d88f41366497bc79b5627eeb8415e07
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral4
    • Target
      provlaunch.exe
    • Size 80KB
    • SHA256 a73c99fc4ecb037092ca6cc21ae86e878bb0318c1d3c622f800dfd8f43b8c27b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5
    • Target
      provtool.exe
    • Size 112KB
    • SHA256 284a37478a48710da30d7421da1fc9207a81252d6180f23a75ff1e4050535df7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral6
    • Target
      prproc.exe
    • Size 41KB
    • SHA256 551f4829ca2f52981e8e47f2021b5d7ab478060b4ed77563c3d410f36bcf14d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7
    • Target
      psr.exe
    • Size 376KB
    • SHA256 a878102786af36e173ac419a737c457c683b516dfdb0f9877b70073a1bff2b71
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral8
    • Target
      pwlauncher.exe
    • Size 52KB
    • SHA256 4e8dbb3e89dfd69856c0cce34a6f5960aab1e8d0b42c9dc991accb249e8ec044
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral9
    • Target
      rasautou.exe
    • Size 40KB
    • SHA256 8bb21e664648e04a9355e9d6d816d79cf761ab714e0285fa241e3e08ff540fb4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral10
    • Target
      rasdial.exe
    • Size 44KB
    • SHA256 79f382f6394f12b720537acd3502c4b103a9e0fe4b9afaca0db1969491d407f3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral11
    • Target
      raserver.exe
    • Size 156KB
    • SHA256 af20453ae1334e4e504b16a6dcb09ad89616e789c97c9d3921e0eeca088f41f6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral12
    • Target
      rasphone.exe
    • Size 56KB
    • SHA256 c372369ede10c6ee658e1a941b884f62baf937d2b5fb0dc3b67b6f2d52ec9b45
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral13
    • Target
      rdpclip.exe
    • Size 568KB
    • SHA256 7b2a8cb44506afe93c1965df506dcc70409910ac19a096477ee5468259030a1e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral14
    • Target
      rdpinput.exe
    • Size 208KB
    • SHA256 6bd0f269bb5f3ad4bcbb47831a76007b05260df5dfd592648a2c7370285e7140
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral15
    • Target
      rdrleakdiag.exe
    • Size 72KB
    • SHA256 277f93c69b3e1780d348eaa7ffaa88f7acae571726098b61cbf2530edb62dd2f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral16
    • Target
      readCloudDataSettings.exe
    • Size 84KB
    • SHA256 3a7676d57d60213cff75e13e4f64f92415469c0b29ce1586b6b091629f81ed12
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral17
    • Target
      recdisc.exe
    • Size 208KB
    • SHA256 f6a418f7e59c0a06080a1cc81ab11bbcd6d9b2b3e86492157a124ad008171522
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral18
    • Target
      recover.exe
    • Size 36KB
    • SHA256 215d8a1ee5c0da23c063e49ecc1304f9f8a6e3adc88f715f986dae9cb5ea72a9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral19
    • Target
      refsutil.exe
    • Size 1.7MB
    • SHA256 0361b088b276ee91a6dcd701ab76b366330bf558b79abb2e3599d57115eba53f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral20
    • Target
      reg.exe
    • Size 100KB
    • SHA256 411ae446fe37b30c0727888c7fa5e88994a46dafd41aa5b3b06c9e884549afde
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral21
    • Target
      regedt32.exe
    • Size 28KB
    • SHA256 8bd7f2057809dfebc7d11a5786a2ec9c7f776a499de1200f64dd21e82be429ff
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral22
    • Target
      regini.exe
    • Size 64KB
    • SHA256 6c8abb75b75c89f26bf1eea9b4d92091db7aab1da877b98386104cd14554fb9c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral23
    • Target
      regsvr32.exe
    • Size 44KB
    • SHA256 02779144af756aab953f13f9e4d28ab3d01a77eb3962756d74099c06babf21b1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral24
    • Target
      rekeywiz.exe
    • Size 144KB
    • SHA256 39616858275c8486c0947da70e097b13a60bcdc731e6063aa1c361e89d9aa9f5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral25
    • Target
      relog.exe
    • Size 72KB
    • SHA256 340b5c5a4f7e396c952937db07fb42b9f74aa892b823d6207737c64c60418a2e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral26
    • Target
      repair-bde.exe
    • Size 148KB
    • SHA256 27d19ccc060062f321b296770e152b4c951a5abefb0037a906389cdb4aa8ed3a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral27
    • Target
      replace.exe
    • Size 40KB
    • SHA256 3c909292feeda5bac3fa8ca5a41a890f5f123cd674a1e191beedcefba94af5f8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral28
    • Target
      resmon.exe
    • Size 128KB
    • SHA256 173d896fdee281ebe88eea03d045b1420d0becd9be8049db4d917f2a85c9c836
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral29
    • Target
      rmttpmvscmgrsvr.exe
    • Size 140KB
    • SHA256 6053bfcb505585bb6849bd36cd73e94adc24056702f5c10f53654869195aeed0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral30
    • Target
      rrinstaller.exe
    • Size 76KB
    • SHA256 1e8d0c4700095833999acc62f88cfc68116c7f050f045cd54ae1f2e06d3ccff5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral31
    • Target
      rstrui.exe
    • Size 288KB
    • SHA256 f048944f4afa8d2e4cf01ddedcacef9d50c8e433a2854ff7465b7a64bdae00d1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks