Overview
overview
10Static
static
10Anarchy Panel.exe
windows7-x64
10Anarchy Panel.exe
windows10-2004-x64
10Plugins/0g...oG.dll
windows7-x64
1Plugins/0g...oG.dll
windows10-2004-x64
1Plugins/59...uJ.dll
windows7-x64
1Plugins/59...uJ.dll
windows10-2004-x64
1Plugins/Cj...qM.dll
windows7-x64
1Plugins/Cj...qM.dll
windows10-2004-x64
1Plugins/EV...LC.dll
windows7-x64
1Plugins/EV...LC.dll
windows10-2004-x64
1Plugins/FBSyChwp.dll
windows7-x64
1Plugins/FBSyChwp.dll
windows10-2004-x64
1Plugins/G3...uZ.dll
windows7-x64
1Plugins/G3...uZ.dll
windows10-2004-x64
1Plugins/KNTmoSnG.dll
windows7-x64
1Plugins/KNTmoSnG.dll
windows10-2004-x64
1Plugins/PK...TS.dll
windows7-x64
1Plugins/PK...TS.dll
windows10-2004-x64
1Plugins/Rs...xj.dll
windows7-x64
1Plugins/Rs...xj.dll
windows10-2004-x64
1Plugins/Wk...pi.dll
windows7-x64
1Plugins/Wk...pi.dll
windows10-2004-x64
1Plugins/eM...s4.dll
windows7-x64
1Plugins/eM...s4.dll
windows10-2004-x64
1Plugins/fzAgyDYa.dll
windows7-x64
1Plugins/fzAgyDYa.dll
windows10-2004-x64
1Plugins/mGWHaG2Jn.dll
windows7-x64
1Plugins/mGWHaG2Jn.dll
windows10-2004-x64
1Plugins/mM...GA.dll
windows7-x64
1Plugins/mM...GA.dll
windows10-2004-x64
1Plugins/oYsKwDG.dll
windows7-x64
1Plugins/oYsKwDG.dll
windows10-2004-x64
1General
-
Target
Anarchy_Panel_4.7.zip
-
Size
63.4MB
-
Sample
240725-rfw5nswane
-
MD5
4f0f9d813d8dda1d19cc1ec182d72eb6
-
SHA1
b856794bb774746fc7333afdf2afd8cd8608430e
-
SHA256
f5c6fde50262017b259d357a1e586c6c3f6e9d8c95ccd88beef08f64b6b99407
-
SHA512
9a3f532efeab96ee84aa3fede7f1b4a3a620df7d7be0c15e115a2af869b45736a6e57c7bb55604c42816bedfd224b74099a657d335e0abfc59aa4c3578396e86
-
SSDEEP
1572864:SMdh+Ma3DPRkc1sgGRN37wMlmSexkK6w0qax/W34:h8/3l3LG/kiExk0H4W34
Behavioral task
behavioral1
Sample
Anarchy Panel.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Anarchy Panel.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Plugins/0guo3zbo66fqoG.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Plugins/0guo3zbo66fqoG.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Plugins/59Zp7paEHDF7luJ.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Plugins/59Zp7paEHDF7luJ.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Plugins/CjETR6GpGXqM.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Plugins/CjETR6GpGXqM.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Plugins/EVa7gBMKoaHmLC.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Plugins/EVa7gBMKoaHmLC.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Plugins/FBSyChwp.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Plugins/FBSyChwp.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Plugins/G3nl0mDcABnDuZ.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Plugins/G3nl0mDcABnDuZ.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
Plugins/KNTmoSnG.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Plugins/KNTmoSnG.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Plugins/PK0TcnqTGFagQTS.dll
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
Plugins/PK0TcnqTGFagQTS.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Plugins/RssCnLKcGRxj.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Plugins/RssCnLKcGRxj.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
Plugins/WkUP83aP9CABpi.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Plugins/WkUP83aP9CABpi.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Plugins/eMTYbTz0gueNs4.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Plugins/eMTYbTz0gueNs4.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
Plugins/fzAgyDYa.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Plugins/fzAgyDYa.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
Plugins/mGWHaG2Jn.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
Plugins/mGWHaG2Jn.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Plugins/mML6WKMqdxjDGA.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Plugins/mML6WKMqdxjDGA.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
Plugins/oYsKwDG.dll
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Plugins/oYsKwDG.dll
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
Anarchy Panel.exe
-
Size
60.8MB
-
MD5
c0eb5b0616dad08c48a21f840bf9e2bc
-
SHA1
f41c0747386053e1eb32d710d360a08c35de10c2
-
SHA256
d13fc809b467a28598451093bff3f9649a96082e041e775f174c55d5eadd7cc5
-
SHA512
bfdf7ed57ab450f19748b207ab542136a9c836c4ad174fbf507df3aae7a69acb710a0d66a85d5ec6a6c6b23363fd6ef559a0096d12fbfa322cb4970f4db572b4
-
SSDEEP
1572864:nWEhJfOrr878YLP5X3xCZubIX6+3gl7Mqui:xJfE+rP5HS2h9o
Score10/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
-
-
Target
Plugins/0guo3zbo66fqoG.dll
-
Size
78KB
-
MD5
e4ebcf76ff80ef398d3ab77d577f4c08
-
SHA1
cb9e6b30a63d50ae87610f6855b64abfb25691d2
-
SHA256
9661b1abc9a3e95e591c49c3838a64a066a2ff3c6de08d8aa7b541c4a75cd8e5
-
SHA512
8f37cedd987dd14181fdfa861b8a95271868dac21aa9df80bd6daa831ae20f4b4965c8be3e36f32aa220bd37ded11a7568ae237c9c9641bb4fc087f6fe104b01
-
SSDEEP
1536:+gqK9OLThWUkwSOykrJROOwj5vCSnVcnwwxu8NMsuS73O4VKid/:1OBX/xFwj5vCSnSwwjNH3O4xd
Score1/10 -
-
-
Target
Plugins/59Zp7paEHDF7luJ.dll
-
Size
4.0MB
-
MD5
15e3d44d37439f3ac8574ac1c9789ec2
-
SHA1
bb3ef30e9f4496198f412738579966210ade36e0
-
SHA256
5db4c26057a05bb75ff7892fb60fd76620fc2228811d913d152a0aa4ec9db7a5
-
SHA512
ff358c9896792017ff7e91f1dedffd9d75a099c5b852da19599799aeca20b6b269267ff7c12c918a2530fe1a79a12bc8796c4eb3914c97faba3eba27388abde1
-
SSDEEP
24576:L2RBtpr5ljLyeVKbed1BeaPc9oFf/V5V4IeDHRbtg58jVh6zBRkM8eJkhjpSLZFb:L2jXr5ZtVKYzX/LV4k58M8eJkhj
Score1/10 -
-
-
Target
Plugins/CjETR6GpGXqM.dll
-
Size
395KB
-
MD5
b0fc0ba80f8ec9586ff397412c512d9f
-
SHA1
0f6051b71b715a47be1fa16683201413905629a3
-
SHA256
13db80a0211ba9bf59a1e43bdb2fffa91de5c7f38bd469c4824b5e06245a0234
-
SHA512
222a365ae567c6c773ca2b99b82795916839cc5c9ba8eb019bf6713108720c2793303ef6612b64488f4584602cec84c0b48a02fe709db0250bf377d07e002d7d
-
SSDEEP
6144:BH8ns56MGHSsdqjJiulCcVWiUpG9kxwrIfUKa:kjjSsAjAuYcVWxpG9ia
Score1/10 -
-
-
Target
Plugins/EVa7gBMKoaHmLC.dll
-
Size
170KB
-
MD5
64a3d908b8a5feff2bccfc67f3a67dbd
-
SHA1
a17d7e5fa57c99a067cac459cb507b625dac254e
-
SHA256
6ea1ae7ab496666c0117fc20e704bfb6104b13cfb0408073a09689f863fa64b1
-
SHA512
66374d720230799bea6ac6cfe3faadc37fd775a49d40c04facae1caf1ec658956bbda54ba75287d7128b19b97971bd933a64469da8e0884225c5a8d8b9423ccc
-
SSDEEP
3072:/bFHKx2Vpgdk6BCNs19kPVoPsb7oR4ZkvEfxMxf4t8BkVb0Uc:/TVpgdkpNs19I6Pe7oR4ZAEfx+LiVb
Score1/10 -
-
-
Target
Plugins/FBSyChwp.dll
-
Size
170KB
-
MD5
0d41ccfaa8e7ef96248b8270d1a44d08
-
SHA1
6ee22bdb91d3a18e0b45b6590eb69bc9a0b02326
-
SHA256
0ea38d0d964815e2b84748a78bd5a829ae01586478e5f17b976f1ae763c8dec3
-
SHA512
a0f236f6dbeb1763fb1c198616de65b907a3a5edf7ed9435c2ad0b5826d84e9d2f25e96aba4e8b681ef495612cf0e04e929427a92d332164ace89e797bcb0e0e
-
SSDEEP
3072:OXwOuoHBhyYr+x5IA+1gUtaEKJ8px4e1hkamm9RyxLeN/dIfMU+:awOuYr05T+KUtaEKJ8px4e1RmqRydeNd
Score1/10 -
-
-
Target
Plugins/G3nl0mDcABnDuZ.dll
-
Size
177KB
-
MD5
97b8bec4c47286e333cc2bedacf7338e
-
SHA1
764bbd0307924b71ca89538b42996208d10c9b91
-
SHA256
060d467cbeb0a58696287c052f3dd9b3597331b1c812e3e2882d6c232f8511de
-
SHA512
a40970622a594533349e75fc2022314ba21f05fc82709d6eaba82f4a2bc343c960029ad2825cfc034ce82622722127d149993bff88982f02d6dd6b5b1fb60fbf
-
SSDEEP
3072:EaEk8xLhWuo2alMFVxzPUBvRNHosrO0/1gRR0foQPssGeWSz89:EaEk8PRo2al0DzPUxvHtrN1gROffPfGl
Score1/10 -
-
-
Target
Plugins/KNTmoSnG.dll
-
Size
670KB
-
MD5
738c096a9bc38e21a9aa59ebc356c80d
-
SHA1
139756ad201a537461a6bb8524a4b89a63b1b1b9
-
SHA256
300a5551f7be89c5f03c0b70fa7dafb7f84c6394dac68bee95169e985e7786f0
-
SHA512
294c34f0716861fa67ba571bf7a8614613a1746e9f2935ba0c86eb1897dff858ea1f7fb44f1b6ec87cc709f4933a912dcd3eadd5d0b208c72985aa47e1f214f2
-
SSDEEP
12288:SMmHl7LUg++x95WlkM9qgrXCEhUhWiUQpTQCyXZj3vlDV+z9BI2NHvfJa1tzh66w:AHl7LUmx902M9qgrXOUQpTQC1m
Score1/10 -
-
-
Target
Plugins/PK0TcnqTGFagQTS.dll
-
Size
174KB
-
MD5
fa90a2aee0d172000257c4faca31237c
-
SHA1
b317281b4acaaf1d7b7255c5e92887322abae892
-
SHA256
991fc53fa1aa7b5cd0b6e19dab536873d68e4413fd55b533601a3a2582d38a49
-
SHA512
b05c0b52e011089258ad31dd23a1f8a0cc8145b202e42e2a9d4fdf892c12d4a7b5843cc7721041295ab796e8bc98747b9e321c4e54bfd1a7c9a02dd2796fc405
-
SSDEEP
3072:Z60dHpQssTFrcpvZFlOJA3YCVbbME5f8YpIVbltkksqBRbRw:xPsZcpvZFlOJA3VVbbME5f7pIVbTkkZJ
Score1/10 -
-
-
Target
Plugins/RssCnLKcGRxj.dll
-
Size
181KB
-
MD5
f6808c4fbbe0275db03b2cc5b4c2bc0d
-
SHA1
e40b61c64c68f72fc5144f5057d54229babdecf8
-
SHA256
e204d15f0e7269d364157aaab265a5dfbe7e76c9f6202bf90998f0edd77ca248
-
SHA512
f077c49f6943d0e40799b3b42d1e11f50dabca48305c36ef2acd3258c990e0e0f982fbb0c27b1243aa15d2ed7b398b70f07dddc9ba76ff032ba74a24c8e08fb4
-
SSDEEP
3072:P1F3B6k7/u/cVnvqtXEIGyv5LBPcwk4V9KIgBH/cNw5/UzUYNv:P1F0kDu/+WX8yhLBPcwk4SIgBH/Yw58P
Score1/10 -
-
-
Target
Plugins/WkUP83aP9CABpi.dll
-
Size
86KB
-
MD5
8dbfb67c059aa59f7c53e20ef6740363
-
SHA1
3de96e7f48ee7647f5a7c2efb68cbd914bc78364
-
SHA256
a74b74f463d567c1f0505bddcd49ed23700f9ab7dcf4b7f46435723258c5a7e2
-
SHA512
70aed01375416e2be63d676bbdba58c12ba5f50d406d1fe252e7a66b901d32e0705007dbf465193de51663174c1b53bdb980890d8b2e6ce641dd16a200e3440d
-
SSDEEP
1536:ulBCsewAj5RhvBY/0g/+DP0yUXEVg+g6SAKJMT05eUv:6CsewGdvBsjmwj6g+g6SA+MT05eU
Score1/10 -
-
-
Target
Plugins/eMTYbTz0gueNs4.dll
-
Size
1.1MB
-
MD5
5dfbcfbbf9e2ae7db23e252808699ffb
-
SHA1
a1d429292fe73aeb5abab10304e1ae8c1262b26d
-
SHA256
929e5f15e9ceca03c80b2d174283cb25bf47adfe4693f5c01f622416c9f6d03c
-
SHA512
9ee63080781577e0d818a27d026024f96161bb7b132dc0c130fabbe2d6c3b7758868fff5a4ad68efeb4d08f964e2f69417022751880a443f7f920aa4f40f5c09
-
SSDEEP
12288:s9StwoSI6P2FNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbS:tZSFPMWOe0jywNMB9ccFd7mZg4
Score1/10 -
-
-
Target
Plugins/fzAgyDYa.dll
-
Size
79KB
-
MD5
a5770798b7a6465f5b5a8c19d7d707ee
-
SHA1
ca67e9591d2f757cbbfacb55f27aec6485b10ee6
-
SHA256
f855353a618af8a53504b5188c05d3a09fb1ff85763e0cd15c53dee82d7c6119
-
SHA512
64da7687e83c6ff4d1c1cdc644ffff53333f745e82f169beb529d55ec5be6f21658d27c6e01744147c00f834978260e86ea627a5f2981f27305afb69a7b467dc
-
SSDEEP
768:VARgmh4b8mzujnHzq+pu57BSsdIPn7rDVNS5z4TyEWkZI9aJ+G247U33fEqtHzWT:VogClTToxxeq6ZXwvEqZaXcI
Score1/10 -
-
-
Target
Plugins/mGWHaG2Jn.dll
-
Size
81KB
-
MD5
8f98206f577160f950d456d1190c8d32
-
SHA1
defced38fce00775c4616b420fa674d77f946eff
-
SHA256
2bde0293c982fb6266c683ecaa2c90372d26d9a2786726874a2cfb89dcc68324
-
SHA512
432c2b6759701754616273633c966332e718dbb10a9a7eab0d7c57ffdc9be95b5e1b16b6e291301ac7aa6d1de48a46d30f08729e45d6634b1849f41c78e92d91
-
SSDEEP
1536:xDj7e8U5/QWCwxi4ao02nK20TSMErl4D/D:xDj7e9/xxi4ao02nK20TnErl4/
Score1/10 -
-
-
Target
Plugins/mML6WKMqdxjDGA.dll
-
Size
173KB
-
MD5
e03b206eec8a7efbd1a47909071226e5
-
SHA1
21163989ea524920e874bc7932adfcd5e94f854e
-
SHA256
778877431354a9584325dadb663be077f757227eaae8bcad33e4bf26efd6b965
-
SHA512
831ed74419f1b4c3250fbff20be16ed7058a851d7168a17e8a4dcf284a19412feee42a8c198af34b37571de33a80c48ac855f5d018ea9e2cfdcd846b832155ff
-
SSDEEP
3072:5nkYlKsdY6RwiYNF7Bs2GEEg+9D8RZW7iKcnQy/dh1CWMEPrhBSepT/9HxW2Je:5nkrsdYUwiYNF722GEb+uRZWhcQy/71H
Score1/10 -
-
-
Target
Plugins/oYsKwDG.dll
-
Size
4.8MB
-
MD5
a718955297276f2349b7644447736e08
-
SHA1
377388d115b77aff357dcaf92b6aeb6286b1460d
-
SHA256
54ec206c8fe8ff27b3fb02ef892b8e6bc4b6abfff2fe08f5f57175c64f1d3220
-
SHA512
a3c2ded0cdc4e62adac92a569d6cd4db0c3647e663700f019a9de27e738eb2672e5cccec19af15633a3cd25a882452ff5ce39c17f67dc3ed6653b9e0ad063641
-
SSDEEP
49152:LOKHt76oI7m3G7WdJh9BUJYzGH1y+Lwo4AeXIGZl4k9uncQZGaV4p5Gi6g:6434edFu
Score1/10 -
MITRE ATT&CK Matrix ATT&CK v13
Defense Evasion
Obfuscated Files or Information
1Command Obfuscation
1Subvert Trust Controls
1Install Root Certificate
1Modify Registry
1