Overview

overview

3

Static

static

3

AWSSDK.Core.dll

windows7-x64

1

AWSSDK.Core.dll

windows10-2004-x64

1

AWSSDK.EBS.dll

windows7-x64

1

AWSSDK.EBS.dll

windows10-2004-x64

1

AWSSDK.EC2.dll

windows7-x64

1

AWSSDK.EC2.dll

windows10-2004-x64

1

AWSSDK.Ide...nt.dll

windows7-x64

1

AWSSDK.Ide...nt.dll

windows10-2004-x64

1

AWSSDK.S3.dll

windows7-x64

1

AWSSDK.S3.dll

windows10-2004-x64

1

AngleSharp.dll

windows7-x64

1

AngleSharp.dll

windows10-2004-x64

1

Antlr3.Runtime.dll

windows7-x64

1

Antlr3.Runtime.dll

windows10-2004-x64

1

AutoMapper.dll

windows7-x64

1

AutoMapper.dll

windows10-2004-x64

1

Azure.Core.dll

windows7-x64

1

Azure.Core.dll

windows10-2004-x64

1

Azure.Stor...bs.dll

windows7-x64

1

Azure.Stor...bs.dll

windows10-2004-x64

1

Azure.Stor...on.dll

windows7-x64

1

Azure.Stor...on.dll

windows10-2004-x64

1

Azure.Stor...es.dll

windows7-x64

1

Azure.Stor...es.dll

windows10-2004-x64

1

CacheManager.Core.dll

windows7-x64

1

CacheManager.Core.dll

windows10-2004-x64

1

CacheManag...ng.dll

windows7-x64

1

CacheManag...ng.dll

windows10-2004-x64

1

Dapper.Contrib.dll

windows7-x64

1

Dapper.Contrib.dll

windows10-2004-x64

1

Dapper.dll

windows7-x64

1

Dapper.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ForceVpgDeletion_9-7.zip

  • Size

    20.8MB

  • Sample

    240802-rq5vkaxfmm

  • MD5

    edb44b7ec5242f46f7f61422c97f43ef

  • SHA1

    a2922ff38da63af788d625b1ae70e5428548ee03

  • SHA256

    d37e228a10262f980922b71e5b21cfeb9868d96b4b3dcf748db9585d7073b861

  • SHA512

    2871315c50de0586892112708844077785a0aa3d993b279791f1ac4228bc295f250fc1cf21bcfb19cc871e09db93cbc73be637f0d5feb5a24195c70d08f828cd

  • SSDEEP

    393216:ku6QGjWKBRuwGD/Jjo9lJFwM9zDyfmnHAMjJyi3IeaR:kDQiWKB0wGDhjgt9zDamngUN3ru

Score
3/10

Malware Config

Targets

    • Target

      AWSSDK.Core.dll

    • Size

      1.7MB

    • MD5

      9839d11380f02d6bbc9e80f69c942880

    • SHA1

      0be2aef22cebc3e4e22144d59f09c2ff76fcfd38

    • SHA256

      e586cbc8b82ce5e67b71ae8d61372da8bcdc28462b9c32229f6617099019ed39

    • SHA512

      2f22a5135ebc9fa876f543ce91cb6dd4c5a1893cd2f9ff55789946dc868548a79f63832a6aa0a7d66f9492ee86de6e87578756f15ff6134736c0c61d23b89cdd

    • SSDEEP

      12288:N18G1W/wCQNWN3Y/Rw6lGLZhismNzIkIWIG6ner5vCfNImOfx3I20IaJIk/7DZeK:N18G1Wno/RAjiwIkD9cyP

    Score
    1/10
    behavioral1behavioral2

    • Target

      AWSSDK.EBS.dll

    • Size

      66KB

    • MD5

      473213d2ac73d7ab9106b9c1c7a97e1d

    • SHA1

      58fe7a1f4dab78e0d2789aa40b840210589a2f6d

    • SHA256

      af3a6c22b6337e5a1865042043aab0e6ed930b098fe730b5e7463fcf98afcfa0

    • SHA512

      4e1af7810c69a266391ba269a049db5b6f99deece9d824aab41994db3ef93463488737cea3990be2f1fd718b6c5b91d67728d17904933be8009a4086d5a3920c

    • SSDEEP

      1536:xuVWVxRpNnzhafDVOodw4x6xKW/7USsXl:xuwBppzhaoodw4xPW/49l

    Score
    1/10
    behavioral3behavioral4

    • Target

      AWSSDK.EC2.dll

    • Size

      2.9MB

    • MD5

      7c861371acf5df577c96de7175a2a8af

    • SHA1

      dce97e498e253b3f05b983ff1a032ed12ecc8299

    • SHA256

      b8505ebbac276841c7064db70120d92946f3de8efd400fbe3ae47b3e41044b27

    • SHA512

      d1752412899e7b82034c23642b976cf90ddd638f095a35223deae613dc82f22acfeff19d1c34df1059e96dd59be0bc4309a78c73372f8d12370f5322eb7272b2

    • SSDEEP

      24576:GDFfSdWPydJJXPwOilvsvnoK39U9cqrQAYHRaUyyekbc19JD:ufoPwO0JXsyyekbchD

    Score
    1/10
    behavioral5behavioral6

    • Target

      AWSSDK.IdentityManagement.dll

    • Size

      575KB

    • MD5

      acedd0d3ec171d051c7212c682b3e319

    • SHA1

      223d59855d75de16241a212f9988fe69dea0cca6

    • SHA256

      372600e99ae285573f5118f4757b95f188ac55ba3b6e49a24351af4ed73273c5

    • SHA512

      8d9ad36bba2cbf3b57eaa0ce89bf822a23e5101dbe993c166fb3eabb635f175583a29cfde413bb58b2dc99bafaa3fa408104aec74ff4b263270042c0b864b97f

    • SSDEEP

      6144:Y/hW4003z0HFppwjPwkqxV6UnzbTT2lCDLYCxa8F95aR6OW3BuoBZiG6eO8MblQ9:Y/hW40qfwOk50LR5QG6

    Score
    1/10
    behavioral7behavioral8

    • Target

      AWSSDK.S3.dll

    • Size

      779KB

    • MD5

      72a6e43e34b607722547d13bc4e78b1f

    • SHA1

      5335dcc7259dd7c5de0c89979c33f27bb1a116f3

    • SHA256

      8cbc31713e3975bfbe11b38d34c8d2c2460bce13e56044631f59b94deeba85fe

    • SHA512

      0645f8e54e27b0f21a1bf9edf0b6efbb1f2694993495fc3dc3d19fb47c6f3bce9da17bddaf25db12da922f3d81f9e31028777d68aa9fc18cb4f19e617aa567bf

    • SSDEEP

      24576:MX08WqcihBMZ1IMGwjI+pLtTkRIeGhaJFym:A5W5ifMZ1IMGwjI+pLtTkRIeGho

    Score
    1/10
    behavioral10behavioral9

    • Target

      AngleSharp.dll

    • Size

      1.2MB

    • MD5

      3ced54b0e85e476448f093f2132fde70

    • SHA1

      bbaac3efe5a9d6cd35396f4b689529d66aa4474c

    • SHA256

      0164d458421e69f066241df5908db0fc56e8155e8135bb91cfe7e982c04ecfa4

    • SHA512

      3815cbc344581f32cee618f0e7becf0ad50af0d7660b48d0c3b28813fdcdd636254b4fccf6394564035262fbd898ef576e6175ec7b2aa065b381f34cbd9dbffb

    • SSDEEP

      12288:+4lX4FxJh2yuw9LgZyEWiihcrBITqVOFaRUZkFVZQ4qa:+4lX47Glw9LMyjikWqCee

    Score
    1/10
    behavioral11behavioral12

    • Target

      Antlr3.Runtime.dll

    • Size

      98KB

    • MD5

      924f73cb31c1f2fab77e088da998e323

    • SHA1

      61f6031e72af0f9b50fc888c85597b93d1c50f24

    • SHA256

      806e180e2687a19bcbc22f73e4ea9899b68b9eb16d347d906a174fae522cb26d

    • SHA512

      d67d2f6536197127b094b44a58f04134fd415d9ca2035c3d8985110bd5d6288905dd1f2f973775682f14fc8711a274235c324fefe7ad5845417fd2dd58f5d5bd

    • SSDEEP

      1536:QwA5/VwCf45x118yUJ5qrtOnM0JsO18DBJ9cAnoGBNeMDKD:bS45LtP2gJqAnoSDg

    Score
    1/10
    behavioral13behavioral14

    • Target

      AutoMapper.dll

    • Size

      247KB

    • MD5

      3f9169f248d1fa98dc1d330aabae303e

    • SHA1

      4730f52d718373d54c985b1c3f17350a7a701485

    • SHA256

      050433fdd177d29e570e79b1e8b7363f260c1c2ff760eb49d7613be9b33745d4

    • SHA512

      dbc7b2fe8b2aed16c12d8a3c8a47874f72fa110d9e5da055007e7f00c2297bfe8df71ae73440957087f6daf9958789e714a24245932346d08b345babb57d9343

    • SSDEEP

      3072:557bBd4gD9kc3CJeoB/GenIybD1bG7J6No3C8+jsmQCotaEj:fbBWc3SvnIybDdLNF+jjQ

    Score
    1/10
    behavioral15behavioral16

    • Target

      Azure.Core.dll

    • Size

      157KB

    • MD5

      e5aceaff1dfa7239d76af6110d8ba4d0

    • SHA1

      5123ae74054466be5530f7ff0379d4a21b6d5ff7

    • SHA256

      07d6eafd5cafe43c2cd2e5c0014c26e775f3a0cbc995d2a48dec94ae60ca896b

    • SHA512

      0f06a418e1786a733888eb4c37d22ade9ebd38d8333a417dc8f4e532939d1f7c173653adcd063babfd46c07ad75c0b5d12831a4d281fc767e53f6b168a3f9c55

    • SSDEEP

      3072:jwoSXVx6EMi5obtrsSmVICD97+7h8xtbaIsrYlyIZbD63xilVBo42hPv47:Uoc8r4VG8xtGIvsfhXA

    Score
    1/10
    behavioral17behavioral18

    • Target

      Azure.Storage.Blobs.dll

    • Size

      882KB

    • MD5

      a8af62d6c4cebfe16e44c3666428bc73

    • SHA1

      76e76fdb6a57efe5dd3d5a405ad5dec3a4c0e27e

    • SHA256

      5744bcc5c468eb84336a155b794ab1097e3b5feba9e1faf520a6335d4e0683b9

    • SHA512

      6e5ffa9ffcf58f5e356c98acbd0ea9bce60eff80f3e70cb8143b91860f405cedb7b913874abf9b200b2db73f4ea7df2551edb072cd02a7e922c32608487b325c

    • SSDEEP

      24576:VCZNXKRrixwVgRUYfnb5jJv2Mdvt4lp1rIstltIxGW:wsyJv2Mdvt4lp1rIstltIxJ

    Score
    1/10
    behavioral19behavioral20

    • Target

      Azure.Storage.Common.dll

    • Size

      76KB

    • MD5

      763b1f582666a773fb30fde478b5b5d8

    • SHA1

      4ee7c7e313082f88ef54429af44e27ac9f49f5d8

    • SHA256

      808d884aa00dddb0447919f8ebfbcd20e9f42f5fc611d5ba2d96c4a965fe02d9

    • SHA512

      348b14c9bdb4ba86fbbca130b79aca469943bdec02d58fceda5f1700e0386dcdac1126a39ea7736a48072c903078539d88d185299a1a9c27f90c574786a1a794

    • SSDEEP

      1536:2BWA08fZW0l/L02cFSYlyNbD6TymxPs9aIQJahHKOVsx4ZEk:CWyMGL0FFSYlyNbD6TymxPs9aIZKGD

    Score
    1/10
    behavioral21behavioral22

    • Target

      Azure.Storage.Queues.dll

    • Size

      247KB

    • MD5

      b2aef40998116bc48c4bf6a774badb7d

    • SHA1

      254c2785079377d8c336c9f2e6519ede8b426e24

    • SHA256

      367f0dc4678ca16adaee096c6805ce5f96214b15f3310ed53e7253d77958479e

    • SHA512

      d89d968251a2e04608b5724e514ec1b11f8ec3918f7c22c5aa8674664698e8f03790449068f72033571d1d91b4d5548706ec6d1e170d53e9cdc40474f4adcba2

    • SSDEEP

      6144:y6pJ/l3+76kid7OD7cWyR4/V/GjVR6Fa:Pru/Gsa

    Score
    1/10
    behavioral23behavioral24

    • Target

      CacheManager.Core.dll

    • Size

      106KB

    • MD5

      ccbbbaddb32120fdc3f542e0f0e6bc03

    • SHA1

      477d3a39957c115bf8b0d3e98d79d1e8ee36c4c9

    • SHA256

      9049907bbf8b304043d5578ed54dffe8a1fd95d45c6fa728ea197dcb32a74d4e

    • SHA512

      8c780870c324df27eb53a3940878e5ab67e15b1cf039dea2e259f20d6e520b16fb8229efaa0e2581af156840b0a05cbec3c75ff13e6381e4c3f90008214a2a4f

    • SSDEEP

      1536:vztWWTGnQf0og30B/CLCrdS84nSqYeX6CUmevcnubcR4D:vztWWT/soBCPfAmqcnubcR2

    Score
    1/10
    behavioral25behavioral26

    • Target

      CacheManager.SystemRuntimeCaching.dll

    • Size

      12KB

    • MD5

      731307d4ab645e5ebe354a1f4a9839f1

    • SHA1

      84423b2ce9a3f1bdf6fdd19ffdcfbbe9fcb954f1

    • SHA256

      0c4284af82d47b39bf2ba9fe55d113a24e337c7d53a92b8d86c43b4193a98286

    • SHA512

      406503d7244024669244371ecd4907a8d5d26c4e5e7f646fadb8469afb5082ecccd610b0c5b23fe46a56d5ec2fa6d26538939044c37a728d379f631bb39ce34e

    • SSDEEP

      192:Hb7zGmW8x2fVbVGQN4Uun6pEq02aAucS7MY1I+tzxbEl0LKERzPflIGvHr2Z8nfx:Hboe2fVvN4UQzt2aTF8+td7LKEZq6Hr0

    Score
    1/10
    behavioral27behavioral28

    • Target

      Dapper.Contrib.dll

    • Size

      52KB

    • MD5

      d662e408b02a3c8940af5aa3fc3c6fda

    • SHA1

      1473887a85ac40007ef84e3eb1fb682965e9ba8a

    • SHA256

      02115bdd4a9b7bb21407602821731a88ecd161e01a4fa57a401275250fbe455b

    • SHA512

      4d715c8487a76c88d887537febbb856cc156a24ea91b2790da58885373e247ef715a647e1eb2e8cc9f281e7254bd78aaa151e60403237de9a2be7193dd9e6782

    • SSDEEP

      1536:QkmurmulqCOWcJ2IvhhXvPNaAHm+91FXA9DxDCL:TvaulqCOWTIv1Hm+X5mdy

    Score
    1/10
    behavioral29behavioral30

    • Target

      Dapper.dll

    • Size

      169KB

    • MD5

      2849ed9241720e7a43ef514a2284a5ea

    • SHA1

      0174eef29cab13f80faeb79dc96f3c840b945808

    • SHA256

      44f300d9c35124207bd5f290eb74621907515294c12c5603e2a8cea803a79348

    • SHA512

      f10cb689a21a0671c7fbeb14dc8ae7f568b3d16d2fb07b1b6bb20992f8d20a03357de8a5a0d3a623bddeab2f19eb341f5194007c1c0e6938400441158dd95c0e

    • SSDEEP

      3072:W/ZQHLFvrARcL8mdFemLJaVP+ADFiTiu0ncNS5SzDbwLBa2:+ZQHaEdFe4GYrwda

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks