Resubmissions

15-07-2024 23:20

240715-3bpqksthmm 7

General

  • Target

    BlazingPack Installer.exe

  • Size

    89.8MB

  • Sample

    240715-3bpqksthmm

  • MD5

    78b64e8b4717c874805159c4bcb6615b

  • SHA1

    eeb9fa106ea8bf85eac04edbe90074eb8655ad34

  • SHA256

    96ccffdb907b997901c7f35ff8c40ce9acec7f1ec7140b75e6b759b6ae7cd493

  • SHA512

    d738895d0f19e6905154e195a0f3244ed884310ee1b7f3216f95978c3cbf9a28e9f62c795c510e12e601fd64082d55bec0bbce4237faa845f7ea4f204f5a4fcf

  • SSDEEP

    1572864:cs5kJoOm+o+p1QlofmnnKDqmG87iKYQULRR9aRmvSpi6HGyFhXmmaSmnQ7eqZR7w:csBO2Yylgmneq07iTVL9aMSpnHGINdkd

Score
7/10

Malware Config

Targets

    • Target

      BlazingPack Installer.exe

    • Size

      89.8MB

    • MD5

      78b64e8b4717c874805159c4bcb6615b

    • SHA1

      eeb9fa106ea8bf85eac04edbe90074eb8655ad34

    • SHA256

      96ccffdb907b997901c7f35ff8c40ce9acec7f1ec7140b75e6b759b6ae7cd493

    • SHA512

      d738895d0f19e6905154e195a0f3244ed884310ee1b7f3216f95978c3cbf9a28e9f62c795c510e12e601fd64082d55bec0bbce4237faa845f7ea4f204f5a4fcf

    • SSDEEP

      1572864:cs5kJoOm+o+p1QlofmnnKDqmG87iKYQULRR9aRmvSpi6HGyFhXmmaSmnQ7eqZR7w:csBO2Yylgmneq07iTVL9aMSpnHGINdkd

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/EmbedHTML.dll

    • Size

      99KB

    • MD5

      c08431578109da597240a3cbaf65fd63

    • SHA1

      687ef12f3db594332a3c9e679b8822eb9bed89e1

    • SHA256

      ee95b019b9c8681be56038bf4a4455f74c4f83c287fbaded6b5aa7b5dcf4a38e

    • SHA512

      8c8814a4c11ebe48be075e228477f394077efac04f2b7ffbc39339270d9a0b699f8398a17aa4cd4a0570c8f8c9e7de757facd30c326f1dde480a799542b07e8f

    • SSDEEP

      1536:nbrMlUndmhyVFzIgJYGjUJjwWcgBAJs8jcdc6I++aSEgKP6Zn3WD:nbrMlUndHuJ3Dc6I++aSEgKP6Zm

    Score
    3/10
    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      14KB

    • MD5

      adb29e6b186daa765dc750128649b63d

    • SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

    • SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    • SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

    • SSDEEP

      192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs

    Score
    3/10
    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    • Target

      BlazingPack Launcher.exe

    • Size

      150.4MB

    • MD5

      50a2fa3da55b4ce82c05b435e98b3db3

    • SHA1

      e4abbab62eeefc0b867cba1f69e42ac19197a038

    • SHA256

      f1b53fc89bf45275b1f3ae01b5750e9b5217b2df6ee5b457c0181d34352c10f3

    • SHA512

      75b6402104d700ea793d26e6a354ba9d420d90a61a11549c75b92bde28d6d8137191aa4f3f917b1891cbe83a2f6894b0e8f58eec3f01055d6f1fb1cc699b7e0e

    • SSDEEP

      1572864:sNyBYovZlBX0O1AojdruIrJ7BBr5o1usKbVVr7lzLL6QxZrHoSctjM4sO6iHw:jYaVBFBm03iQ

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      LICENSES.chromium.html

    • Size

      6.5MB

    • MD5

      d18c09a075cb6531d7ffd7c3da77bd4e

    • SHA1

      571f29b6004007111782bf5727c4bc9510cca286

    • SHA256

      86f5222580a4ab03dad8ea62e6cea22b23454dccf1c77e74ae0e0410a13b16fc

    • SHA512

      091cd68e12633919fc6100b606f3002b16f4b9c7c6d7c820ff20e31a3b9ea690c8a1fc90529ff3e5c21e8d778e254743a8708049830c3bb046eda8f2653000b7

    • SSDEEP

      24576:8P5K5WfWSJiJjQlaCmf2P6e666A6o69/kHPZQHpuQ:UrYR

    Score
    1/10
    • Target

      d3dcompiler_47.dll

    • Size

      4.7MB

    • MD5

      cb9807f6cf55ad799e920b7e0f97df99

    • SHA1

      bb76012ded5acd103adad49436612d073d159b29

    • SHA256

      5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

    • SHA512

      f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

    • SSDEEP

      49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI

    Score
    1/10
    • Target

      ffmpeg.dll

    • Size

      2.6MB

    • MD5

      ffd1be425c1f639c596c31fc7b93dfb1

    • SHA1

      9a02c7f2d853c6a943c51157a9cfc1cec5a5059f

    • SHA256

      60e97ca3036e48287ba36ab240db9c1129d81ef9b914134e61897581c3314c14

    • SHA512

      878e842a3ee8c83a22af70c0b1988723a37e5877c1b53befb0a6b5cf4924ee8b2368df3f41a31901f50dd2648da89da57def18acdc43537ab594d0092514a386

    • SSDEEP

      49152:nqMAAYNDEmcTfAZMHkwfPYX6Edxhi1uGaVrFY7Q9b5hpN3lzl3hHLNoJw:nGDfRMHR8rFYU5hNA

    Score
    1/10
    • Target

      libEGL.dll

    • Size

      473KB

    • MD5

      fc0e6a706fb42aeacde7921b6de88a16

    • SHA1

      f996441fe48926d660894fa6b8583cd1b72990d0

    • SHA256

      6827bea63dc615fe824a25949a21283fcbb3af8fc78272e1af22b0b39367116c

    • SHA512

      d2d9dc1beefb5a88792a84ba7bcfdf062aecd45dbf614ae409467023b8a504cb8ba325cba65b8d9069aa2bc2d8da234c0d070ec513d01cb5a29955c5b9e8b6c4

    • SSDEEP

      6144:iTv0fq4dz9B4x4w/jvtGW9ZST3BypG48yOnb4pgsHVlAYnWeZRO8:iTN4dNw/jvtGW9c3BypaagYnnRO

    Score
    1/10
    • Target

      libGLESv2.dll

    • Size

      7.2MB

    • MD5

      a93d8332a4f8d73a1b548bb5bcee988d

    • SHA1

      b67063be344db937d71a93cd2ab5593eb09a0d7d

    • SHA256

      a1d8c59c6e0f1f868177ed79acd6f2174f96fd235cab62f967c8a92cbe978554

    • SHA512

      a38e2dd36e048fe695d9c136e8247d3c77b8743360bfb39ffe4150938759b0bd5ab12b895336a2d50045e029f616236f1d57b161611980de045615f182210202

    • SSDEEP

      49152:OufmSw5Zs0IuMAHbUwd5xAot5be6iVmeen+c4om+xQedK18UMi22wFI9ESwQBH1S:lP0EIF+VFDkkzMxY6wtCr7fggsOMGL

    Score
    1/10
    • Target

      resources/app.asar.unpacked/node_modules/ssh2/install.js

    • Size

      710B

    • MD5

      4b1149f77de8b7f90dbc1967b4705f10

    • SHA1

      df90983b41fb921c9ef0402c6647593d9667a1e8

    • SHA256

      52c970cf01ed6e93f04300a2e9f68d1b9a00a4d0dcfaa77aa5d520fc8e2a0a73

    • SHA512

      08686ca2cd3fb8df28a8c7b5af3666831515f624ff1025fab7a3689d423085b1f8a20ba73a5dafbff5d935ceae30315c7698004cae8642ab8c64bf3511fd7d5e

    Score
    3/10
    • Target

      resources/app.asar.unpacked/node_modules/ssh2/lib/Channel.js

    • Size

      6KB

    • MD5

      54b15fa9a2480dbd86595410341ad0a3

    • SHA1

      76cd2594a8432d254225fc563e462bf60554afc7

    • SHA256

      53e92988a025009b192b72be110bd240b5653f88dbdec93e515e3e401e7f94aa

    • SHA512

      fe351d6431f13560aa8629ab865538bcf230b104ced81306f018af5991f1ccbc88677151c1ec4fe6d9dc2a25b816b9b2cd3764c4cb8a4c4882c7ef85b126a7cf

    • SSDEEP

      192:3gPsNNMNxV8epeyTKgIP5GQDM0/C/C5Kd1pvm/cQ+yitfw1X:wl0omMCKKcd1pvm/cbh9iX

    Score
    3/10
    • Target

      resources/app.asar.unpacked/node_modules/ssh2/lib/agent.js

    • Size

      31KB

    • MD5

      4f928fb220e194783bb7dddb525ff687

    • SHA1

      6639e5e4d93cc283548ed6854d0f423326cc7297

    • SHA256

      cc6987488bf45f73e0ac5d8bbe59912b70a144cd73b53c83919f188f4cc3f2be

    • SHA512

      82c332ba7d49db0bfea15746730c9cca1dd34902a5723773cc51fbdbe4bb8c2ec33852fa6f620025abae9dbb02b6f4b51486072109ce177d3ed30ff8ec62c6c8

    • SSDEEP

      192:Omk0doTcr8dTEasgp7Ug/1ZHc28XXkeXGXORCycCQ6q4xu4i5QiVZAVLRK/KvGfL:s44doalxjUf2/yTivfdXrXVA/axm6J

    Score
    3/10
    • Target

      resources/app.asar.unpacked/node_modules/ssh2/lib/client.js

    • Size

      61KB

    • MD5

      d94bb5213ac675564793cd0450b96118

    • SHA1

      174eca9d97e6ba0c676c5b3b76a14b10937429b4

    • SHA256

      631d0eb1e44c69aa31e495a715228b0a918d83a39589992597be0c90e1b0e8cc

    • SHA512

      a005942829a83335dbec4611ff133be97c615296a27773247ce47458a0e1b5d33dbe4b999c4bc77a91dab44d5c9121322e21a2a1f406dedd2330efcc24f89aba

    • SSDEEP

      384:gHoOGvelXez6TMamCZRJd9g7iDxnKgl9NxL1:SojvgMJCRI+KgbNj

    Score
    3/10
    • Target

      resources/app.asar.unpacked/node_modules/ssh2/lib/http-agents.js

    • Size

      2KB

    • MD5

      e90ade66c6a686afe6c7881bafd28669

    • SHA1

      48c2a28aca7d5349674131ce79692585118b3589

    • SHA256

      477d34701116572f2af06ac545994f3e2d2f14b26c5ae76bff2b13de2289339d

    • SHA512

      05d62973c7745dd4c03867a868a9587c179d0ae8f23f66d4a950229bd13f013430f13f2e8f7511b1fcf5dafaa760a49a26de8cd04e29c81b593501df2fb9dabd

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
7/10

behavioral2

Score
7/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
7/10

behavioral14

Score
7/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10