6ba2fad1d5719c789c3f67b9a66a1b8e81b1aad4613cd31c52e411d22302f267 | Triage

Sharing

General

Target

RC7_UI.zip
Size

10.2MB
Sample

240725-nm2ryswfkj
MD5

542b88a9ce2d3ae327fbdaa3a6187caf
SHA1

fd3d0053d86ef4656c7233f72cd920579a78ee11
SHA256

6ba2fad1d5719c789c3f67b9a66a1b8e81b1aad4613cd31c52e411d22302f267
SHA512

a95776b1cda95e995a869508dda36dcd588f3318a11e1a1cb1be0f088d5c6723b52d96db27c90d5d2e21a4f961ddd8d8620743d6b5910a74bf510e6e31cc8c8c
SSDEEP

196608:tmR86LaENhkYt/hl5oINhkYtIPNhkYtGRjrjNVoh:tmvBh5Rh8Uh5Kh5gZHNVe

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  
  AlphaBlendTextBox.dll
- Size
  
  24KB
- MD5
  
  e6b8735ea19da68d9baa23f945a6fad3
- SHA1
  
  65ae6742bf4106ce56d57d3ab427bd3e379f9ca3
- SHA256
  
  48541be9ed6be56e4ee61dd48ce6b237b7a83a3be4db5a54ce350a042c77ecfe
- SHA512
  
  ca3f3945406b9dc64b67f78cb75687b487203f177f4d3a96ae070f5aafa01ef43c733dd69847c095d6484a616abfe85f37568f8b289564693b6a3947fcac4585
- SSDEEP
  
  192:iDGJzcLqS+q+obtogcv7QZYU+Am6+cfX/huI1Ps1YK2c5PkDVX:iKqHtobQZYU+Al+8XAI1q2c5PkDVX
Score

1^/10
behavioral1 behavioral2
- Target
  
  Bunifu_UI_v1.5.3.dll
- Size
  
  236KB
- MD5
  
  2ecb51ab00c5f340380ecf849291dbcf
- SHA1
  
  1a4dffbce2a4ce65495ed79eab42a4da3b660931
- SHA256
  
  f1b3e0f2750a9103e46a6a4a34f1cf9d17779725f98042cc2475ec66484801cf
- SHA512
  
  e241a48eafcaf99187035f0870d24d74ae97fe84aaadd2591cceea9f64b8223d77cfb17a038a58eadd3b822c5201a6f7494f26eea6f77d95f77f6c668d088e6b
- SSDEEP
  
  6144:SIQpxILDXGGMO7Ice9C5kQw2hWHcHTykhb:SIQpxILDXGGlET9n/cHG
Score

1^/10
behavioral3 behavioral4
- Target
  
  RC7_UI.exe
- Size
  
  830KB
- MD5
  
  44be1d272c2f2d32bbc71db7a246982c
- SHA1
  
  76c42f9f187a9570775af1d611f04da0765036d2
- SHA256
  
  f78e4ed7297aefb1e8c50b976907fda03f20069f9d3958497e260a69ef4ac47b
- SHA512
  
  b5417d9c187fbf5abea667531da3381384ba407d2aeb458e4021acf1115fd72f6fec22a30672880fb6581d1db853f2cfae30bd8a85eff7420979d1c2ff52d93f
- SSDEEP
  
  6144:jBku01IJVLfsOIJVLfss8XnXwtQ/c72IkoxkDtSP4EIJVLfscz:Vk8VLfwVLfiBVLfVz
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  rc7/AlphaBlendTextBox.dll
- Size
  
  24KB
- MD5
  
  e6b8735ea19da68d9baa23f945a6fad3
- SHA1
  
  65ae6742bf4106ce56d57d3ab427bd3e379f9ca3
- SHA256
  
  48541be9ed6be56e4ee61dd48ce6b237b7a83a3be4db5a54ce350a042c77ecfe
- SHA512
  
  ca3f3945406b9dc64b67f78cb75687b487203f177f4d3a96ae070f5aafa01ef43c733dd69847c095d6484a616abfe85f37568f8b289564693b6a3947fcac4585
- SSDEEP
  
  192:iDGJzcLqS+q+obtogcv7QZYU+Am6+cfX/huI1Ps1YK2c5PkDVX:iKqHtobQZYU+Al+8XAI1q2c5PkDVX
Score

1^/10
behavioral7 behavioral8
- Target
  
  rc7/Bunifu_UI_v1.5.3.dll
- Size
  
  236KB
- MD5
  
  2ecb51ab00c5f340380ecf849291dbcf
- SHA1
  
  1a4dffbce2a4ce65495ed79eab42a4da3b660931
- SHA256
  
  f1b3e0f2750a9103e46a6a4a34f1cf9d17779725f98042cc2475ec66484801cf
- SHA512
  
  e241a48eafcaf99187035f0870d24d74ae97fe84aaadd2591cceea9f64b8223d77cfb17a038a58eadd3b822c5201a6f7494f26eea6f77d95f77f6c668d088e6b
- SSDEEP
  
  6144:SIQpxILDXGGMO7Ice9C5kQw2hWHcHTykhb:SIQpxILDXGGlET9n/cHG
Score

1^/10
behavioral10 behavioral9
- Target
  
  rc7/Monaco.html
- Size
  
  6KB
- MD5
  
  fc63d6f8cfd66d984df8e003cd30ce4c
- SHA1
  
  767beb1b385f89ef98d6aab11abacc564fc3c2b7
- SHA256
  
  aaf84c7789f9f4a7505c408e484d0d04a5ddfe2badd3973acd41bf2e6a2bfbf5
- SHA512
  
  843bb9660de5827a28a94799c4b745bc2c1c56db72d36b989ea2b72a3868d0b68fac36b5e320293e26034e4d2b0f9b0946162ea2f4b8e919131d888a825e5101
- SSDEEP
  
  192:Q3+OKFLvkJj7gpk32eynKZyt7TJPAqkvKU3LI+QrzZws:Y+OKFK3gi32eynAhs
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  rc7/MonacoEditor.html
- Size
  
  6KB
- MD5
  
  cff4feef176cef910036d01c653d9287
- SHA1
  
  2ec40c7ea8d85a126c39f294d82cd128217c0b6a
- SHA256
  
  3e06c186e632d01ebc2ef38fb0c082f26e14132697afe8750173f4a09569147a
- SHA512
  
  f1d5707a947d1172cd8b06b8dec8cffd8ae88486c4a7a685ef88b8c619fee84efcf0cf5ec193c1f5b3dfcb3bf5aa74cb5ce89003d092d7414aadf2c2a6e5587d
- SSDEEP
  
  192:Q3+OKFLvkJj7ppk32eynKZyt7TJPAqkvKU3LI+QrzZws:Y+OKFK3pi32eynAhs
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  rc7/RC7_UI.exe
- Size
  
  826KB
- MD5
  
  45d0009f95434cada8309d733fb511a7
- SHA1
  
  446df53ed8df57635e7f4f9df5cdfcd3cabd340e
- SHA256
  
  54a33b2d706978be99f68864b045445b61677213bfda6c5f9716fb0730fc423f
- SHA512
  
  5850525d49c64e367d442e2815abe4560b802ef173b3f3f6c3897be5412a6e37d2214de2fd8a78158e7bc2583e5fbbf4f3b19d27630608267d06081c2c64763a
- SSDEEP
  
  6144:obBtIJVLfsOIJVLfss8XnXwtQ/c72IkoxkDtSP4EIJVLfsw:oGVLfwVLfiBVLfd
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  rc7/sxlib.dll
- Size
  
  730KB
- MD5
  
  9af2ced06e85829386be170da55b027b
- SHA1
  
  2c88fc72d8a347e6fb59199262092c2d1d38afba
- SHA256
  
  caee9ebe263b05fac66e27af5866b3d41e8c1325cfc90a82a0c977007a4a8a4d
- SHA512
  
  81fd9c3346b375a2fcaa910c3934bff445c7a4a891dd956eaf91e6f92f5478699d1c271324f857ee18c4e626670a46073bddf98c511dc72a1a18d62cde92ee05
- SSDEEP
  
  12288:dlGRjX5RpQm5k+Su/vP4FiN/LYrubSBz0pe7fEizVkaW2zNsn5z1F64sxM:EuU4picrPzOiRkaFNsno4EM
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  rc7/vs/base/worker/workerMain.js
- Size
  
  149KB
- MD5
  
  27ead90c7702154755785e0e53398755
- SHA1
  
  86b59485fe6f6ccb1805183fa75062a2ac1c859e
- SHA256
  
  bdf9433692a08851e13dd58504eef19f51bd2ec7241923a68edf5772e0e53af5
- SHA512
  
  6829681575179c90bb7817b17feee60e7d44d8abb15264ab39d7f0edf95dd1d030b99c12b005c753cd786c26ce6f17ff09b058c16f3363596f785e386ef78e82
- SSDEEP
  
  1536:XNSxrkwnz+dTHHfvYYdBwDZ2Ogvh52xgh2hQXIvTBaB7hU74Yc6aphU1PblosJEl:XzdTagJkb+6jFlJJEt9yjjTCD2zw
Score

3^/10

execution
behavioral19 behavioral20
- Target
  
  rc7/vs/basic-languages/bat/bat.js
- Size
  
  2KB
- MD5
  
  4cb475399c4490eea41982dcd6d9653e
- SHA1
  
  fc97d57206ff7fa1c89ff0fc9f6e2f04a20ea185
- SHA256
  
  9bca42394fe8922fec24b768eeb8ce04692de6fad82f9052d5b7e70f5c6b0f40
- SHA512
  
  27eefe83cf38a7d784414d99b472f6fcd7e595691eb0f368254ba1f71aaf702840b62bf232c30c515a8fada234699fefeef496c0c24669cc158cb567227e4783
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  rc7/vs/basic-languages/coffee/coffee.js
- Size
  
  3KB
- MD5
  
  9d0c4ac1691eed0a480c3e9246490d29
- SHA1
  
  38258864fd070c35cec6b68715d58771df9fe3e1
- SHA256
  
  e706c9f8e5c5a0cb01b2f4e4879ec34a050d6eb2a8840284eb7badd9d78099f9
- SHA512
  
  437a703607a9f0cb96ffb56312d149b95f596290591d14098c36d978b2e1fdba3c3712c9099923bc0a709c5c0ebd7eea868f63dfbcc69cdf5a9325b8a67006b6
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  rc7/vs/basic-languages/cpp/cpp.js
- Size
  
  5KB
- MD5
  
  0a16509e6cd0155fb622e785cfe976c7
- SHA1
  
  7afa7f823191c43d7a4bdd7d91577495de62c21a
- SHA256
  
  a7c2bea7ca3d9e203a3a286735945fe010c8f4f8d46620386ee8befc6a78b32b
- SHA512
  
  2cbc48cb10c467561c6a84f59405e9c2f864640b3a21e6fe5cd14ad1a7ca5667b766b3c0511df26f28205dd17338a878bd1164a4f5875235a73214f3e4aeb49d
- SSDEEP
  
  96:hFDMgRs/rbV1+gqVV1+/LVb9ZRC2seM6jjz13MwVcEghhb6Yw76wGcmvRBNIs:hZGrTOcVv5M61h8hSeiYL
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  rc7/vs/basic-languages/csharp/csharp.js
- Size
  
  4KB
- MD5
  
  f8f841d13c9220e15dcd6bc386b37ba2
- SHA1
  
  2b8b7003820d19ed83afde98c845db5e3d5753f8
- SHA256
  
  6b3be9a86ee8e3202f51745d94d24cc1eefbcf7d9e6d94fbaf70146b084e835f
- SHA512
  
  0b167865b8d7847792c80144e83bdf33655db6ecc0934bb3290f8b5793fee8168aeaf9d74b3541a9424c4f180aad496c2d8710e3847a5bf9d4b2c960ddea4ae5
- SSDEEP
  
  96:hFDMgRsVx+rbV1+gqGV1+hmQuq1cBh8b7gj8/pLxb6J994wGcKU7dYIkI:hZi+rTtPsRXpw9SiKUJGI
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  rc7/vs/basic-languages/csp/csp.js
- Size
  
  1KB
- MD5
  
  22ada25d590811dcff4e5f5d698e583b
- SHA1
  
  c43d4846967d5037ef05b102e49d1fbc54e45fbc
- SHA256
  
  4b5a5d7d50986b86b00833447e097c0f01a4388ce1765b48e7e371d06e3a4789
- SHA512
  
  c8373ea0b78114f82e8bf027473f72ada0d8acd51623152a0072111d8b3b7d5ac310a1cc510c4e4cd2e97a7686db3c87b2da675fc910898bd11108e4b50ed189
Score

3^/10

execution
behavioral29 behavioral30
- Target
  
  rc7/vs/basic-languages/css/css.js
- Size
  
  4KB
- MD5
  
  49ad30f1151cfd7a74677fdc6dd13da9
- SHA1
  
  286d47f0a4cfa26da2e4d1f1317a8c87000bb5fc
- SHA256
  
  bd331fd3bd2c37b0c3150035325f163ac9266bf6d942310764815e676d856d91
- SHA512
  
  7337706bfd5bd54938da0fba35e97f8e5780491c04b58d43fc6d905bd2dca92897f1ed8d48e42665f166da7684cc6e29a63ae73f8d3779a9feb97c397a642f0d
- SSDEEP
  
  96:hFDMgRsozIq+q17qcq6V1+/aMj1cqTroIrqjKf8O3lzXY0Jc:hZzzv9VmjoOf8O39XbJc
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32