80f3d09c8da6a063b87cb75b758f13dcce3999396cd4d745ffbd87997249ad75

Resubmissions

02/08/2024, 19:42

240802-yeqptsxcrp 9

02/08/2024, 19:39

240802-ydek6sscra 3

Sharing

Copy URL

Twitter E-mail

General

Target

!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.zip
Size

15.7MB
Sample

240802-yeqptsxcrp
MD5

07576a6a6e9e9d35a8e5f2fcf0140ec2
SHA1

210edad2b9d793c242fbc36b3ed3b329e8127404
SHA256

80f3d09c8da6a063b87cb75b758f13dcce3999396cd4d745ffbd87997249ad75
SHA512

d61e5c78d4950d31cf0e64c978c4774371d5ce98a41b2b113ebb51bafd1957cdc1106a24653db42bfd9bef5dd9623d81e753ecc36fe8bca9bcb6b9574bfba067
SSDEEP

393216:s/Etf7jpp/H5hXnSHCl6kxnATdVabEQh8tyL2ZNg7:s/ezP/ZhXS86kY5tqQg7

Score

9^/10

Malware Config

Targets

- Target
  
  Language/madHcNet32.dll
- Size
  
  921KB
- MD5
  
  d22b9da713ab36102c9c3d812af8c12d
- SHA1
  
  371fdbf6ae6a9a2e5c0560fc94eba3290028a252
- SHA256
  
  95b538b47e02d0ad2bd15d47efc18695d5e379ef61568b81ef405773d9c199bb
- SHA512
  
  e5ae51f79403358af60bb3ea663251badac57414813f5537d763b0b95504a393fb2d34c94c4b7328ec13f58e74a7147d3a72e63e62973c4c5d80671be1c8face
- SSDEEP
  
  24576:TlUbWq3/gquYUJ4Vgv0eUnDaE0efxfXT95:pUR4quYUJ4VgceXE0gxfjv
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  Language/mvrSettings32.dll
- Size
  
  1.0MB
- MD5
  
  94321a6d490ca5442cf36b07db16419c
- SHA1
  
  639e08bc92106902facf7cefdc9b340682572b2a
- SHA256
  
  a7827463e9587a238db927cf61ab92b95c0ef52b18467583dd859bed98543da7
- SHA512
  
  1944916ca997c01a11c77016791612382832af6ab4822992694460ac4c9e5ba72e193416fa17c898a1d201826bdaf3176a2b303c035a37b124ccd4937d4f4b74
- SSDEEP
  
  12288:9wsK8YWuTCipwKm3ZCdX+y0Cg57ZrVmK5UhYX5NN/u3ZeEb+LJkKuZl1Y1e:P6WuFKKVuig5jZ5xX5P2bKyKu1j
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  Resource/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.dll
- Size
  
  287KB
- MD5
  
  8a1b183bca062f48402c74f2daba7b92
- SHA1
  
  d9417bf78b3b37d668c08e67f3c0f21dbc6dc11e
- SHA256
  
  8103f2cce6a864ceefe6c5b0c05087ac85ab04a2abf150e93bc9db90c54d9d20
- SHA512
  
  0f5120fa9ed24d2a49b82cdc62113302002ccc5e1cf389cc28830f36b2915f876bdf77094fa6dfa312fc01b6f482465297fa734509511fa7e72285569ce57e87
- SSDEEP
  
  6144:aMNTja9KIKf5RCs1ussMKlzI5iJQn9gu5DPOvObo:5Za9KIjs1ussMKlzI5lo
Score

1^/10
behavioral5 behavioral6
- Target
  
  Resource/Font/Pfm/Locals/x64/AdonisUI.dll
- Size
  
  164KB
- MD5
  
  3d4c8b6aad28ec574e56ccda22b34ef3
- SHA1
  
  bc22ac7097e597fba3d7367b2fd5c61adff28941
- SHA256
  
  db46b6106dc1b30041ce3f287ded91166895ff3f1928250fc79dd46c444b1e45
- SHA512
  
  fc56241e65dc7bcc678a2af92f79bda017ceb3f7c4f203c7e9ce753d573da868608a6f56545c0d181a625737278b7b73223e5dcce85bf1f3c5b7b1b06e5c5739
- SSDEEP
  
  3072:fuZPAdWKbu3355s555GPQKljrKxX0yAbTxin1YzqHf0llbS1sjZ73h39Iwj:GydWDrKxG3h39Iw
Score

1^/10
behavioral7 behavioral8
- Target
  
  Resource/Font/Pfm/Locals/x64/SQLite.Interop.dll
- Size
  
  1.7MB
- MD5
  
  56a504a34d2cfbfc7eaa2b68e34af8ad
- SHA1
  
  426b48b0f3b691e3bb29f465aed9b936f29fc8cc
- SHA256
  
  9309fb2a3f326d0f2cc3f2ab837cfd02e4f8cb6b923b3b2be265591fd38f4961
- SHA512
  
  170c3645083d869e2368ee16325d7edaeba2d8f1d3d4a6a1054cfdd8616e03073772eeae30c8f79a93173825f83891e7b0e4fd89ef416808359f715a641747d7
- SSDEEP
  
  24576:YPUxmkgSxPgobZPRjZ22H6edtOZzWySRO3mlE0i/Yl5P+qF+8k+ao/si6:8UxXPgo8e6WYBSJZSS5P97I
Score

1^/10
behavioral10 behavioral9
- Target
  
  Resource/Font/Pfm/Locals/x86/BouncyCastle.Crypto.dll
- Size
  
  3.2MB
- MD5
  
  0cf454b6ed4d9e46bc40306421e4b800
- SHA1
  
  9611aa929d35cbd86b87e40b628f60d5177d2411
- SHA256
  
  e51721dc0647f4838b1abc592bd95fd8cb924716e8a64f83d4b947821fa1fa42
- SHA512
  
  85262f1bc67a89911640f59a759b476b30ca644bd1a1d9cd3213cc8aae16d7cc6ea689815f19b146db1d26f7a75772ceb48e71e27940e3686a83eb2cf7e46048
- SSDEEP
  
  49152:JIBbo0WIgmjljFtXCdRLRBcJd+KaGxHIkMNqzP56O8lZ7qXUqi9Y:6BbBWIgWljGxRB/LLY
Score

1^/10
behavioral11 behavioral12
- Target
  
  Resource/Font/Pfm/Locals/x86/SQLite.Interop.dll
- Size
  
  1.3MB
- MD5
  
  8be215abf1f36aa3d23555a671e7e3be
- SHA1
  
  547d59580b7843f90aaca238012a8a0c886330e6
- SHA256
  
  83f332ea9535814f18be4ee768682ecc7720794aedc30659eb165e46257a7cae
- SHA512
  
  38cf4aea676dacd2e719833ca504ac8751a5fe700214ff4ac2b77c0542928a6a1aa3780ed7418387affed67ab6be97f1439633249af22d62e075c1cdfdf5449b
- SSDEEP
  
  24576:eiDAYMz2epP8AEXn8z7qsyb8c+gntHKuvKtBLtTvD0nsrFSK96fYlYyv:1AYMza36enEuyjpTV96A2yv
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  Resource/Font/Pfm/opengl64.dll
- Size
  
  145.8MB
- MD5
  
  71466589eb444bbf272c0f5c920c57f0
- SHA1
  
  4fcace49ee032779d3bf7b8e03c6a9f29ed871ba
- SHA256
  
  e7d625cf255360b0ea96a52ca990be6f1cef522ff7440393e45b12793ac88031
- SHA512
  
  eff62450cf03d72af2594d750a70b008226fa2e46216661716287639bf5e1ff1303076fdaf4f062ca4098ef10a8e29502de55ecb3a6e04753aad7fcad01e3352
- SSDEEP
  
  48:0ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZY:n
Score

1^/10
behavioral15 behavioral16
- Target
  
  Resource/Locals/x64/AdonisUI.ClassicTheme.dll
- Size
  
  287KB
- MD5
  
  8a1b183bca062f48402c74f2daba7b92
- SHA1
  
  d9417bf78b3b37d668c08e67f3c0f21dbc6dc11e
- SHA256
  
  8103f2cce6a864ceefe6c5b0c05087ac85ab04a2abf150e93bc9db90c54d9d20
- SHA512
  
  0f5120fa9ed24d2a49b82cdc62113302002ccc5e1cf389cc28830f36b2915f876bdf77094fa6dfa312fc01b6f482465297fa734509511fa7e72285569ce57e87
- SSDEEP
  
  6144:aMNTja9KIKf5RCs1ussMKlzI5iJQn9gu5DPOvObo:5Za9KIjs1ussMKlzI5lo
Score

1^/10
behavioral17 behavioral18
- Target
  
  Resource/Locals/x64/AdonisUI.dll
- Size
  
  164KB
- MD5
  
  3d4c8b6aad28ec574e56ccda22b34ef3
- SHA1
  
  bc22ac7097e597fba3d7367b2fd5c61adff28941
- SHA256
  
  db46b6106dc1b30041ce3f287ded91166895ff3f1928250fc79dd46c444b1e45
- SHA512
  
  fc56241e65dc7bcc678a2af92f79bda017ceb3f7c4f203c7e9ce753d573da868608a6f56545c0d181a625737278b7b73223e5dcce85bf1f3c5b7b1b06e5c5739
- SSDEEP
  
  3072:fuZPAdWKbu3355s555GPQKljrKxX0yAbTxin1YzqHf0llbS1sjZ73h39Iwj:GydWDrKxG3h39Iw
Score

1^/10
behavioral19 behavioral20
- Target
  
  Resource/Locals/x64/SQLite.Interop.dll
- Size
  
  1.7MB
- MD5
  
  56a504a34d2cfbfc7eaa2b68e34af8ad
- SHA1
  
  426b48b0f3b691e3bb29f465aed9b936f29fc8cc
- SHA256
  
  9309fb2a3f326d0f2cc3f2ab837cfd02e4f8cb6b923b3b2be265591fd38f4961
- SHA512
  
  170c3645083d869e2368ee16325d7edaeba2d8f1d3d4a6a1054cfdd8616e03073772eeae30c8f79a93173825f83891e7b0e4fd89ef416808359f715a641747d7
- SSDEEP
  
  24576:YPUxmkgSxPgobZPRjZ22H6edtOZzWySRO3mlE0i/Yl5P+qF+8k+ao/si6:8UxXPgo8e6WYBSJZSS5P97I
Score

1^/10
behavioral21 behavioral22
- Target
  
  Resource/Locals/x86/BouncyCastle.Crypto.dll
- Size
  
  3.2MB
- MD5
  
  0cf454b6ed4d9e46bc40306421e4b800
- SHA1
  
  9611aa929d35cbd86b87e40b628f60d5177d2411
- SHA256
  
  e51721dc0647f4838b1abc592bd95fd8cb924716e8a64f83d4b947821fa1fa42
- SHA512
  
  85262f1bc67a89911640f59a759b476b30ca644bd1a1d9cd3213cc8aae16d7cc6ea689815f19b146db1d26f7a75772ceb48e71e27940e3686a83eb2cf7e46048
- SSDEEP
  
  49152:JIBbo0WIgmjljFtXCdRLRBcJd+KaGxHIkMNqzP56O8lZ7qXUqi9Y:6BbBWIgWljGxRB/LLY
Score

1^/10
behavioral23 behavioral24
- Target
  
  Resource/Locals/x86/SQLite.Interop.dll
- Size
  
  1.3MB
- MD5
  
  8be215abf1f36aa3d23555a671e7e3be
- SHA1
  
  547d59580b7843f90aaca238012a8a0c886330e6
- SHA256
  
  83f332ea9535814f18be4ee768682ecc7720794aedc30659eb165e46257a7cae
- SHA512
  
  38cf4aea676dacd2e719833ca504ac8751a5fe700214ff4ac2b77c0542928a6a1aa3780ed7418387affed67ab6be97f1439633249af22d62e075c1cdfdf5449b
- SSDEEP
  
  24576:eiDAYMz2epP8AEXn8z7qsyb8c+gntHKuvKtBLtTvD0nsrFSK96fYlYyv:1AYMza36enEuyjpTV96A2yv
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  Resource/opengl64.dll
- Size
  
  145.8MB
- MD5
  
  71466589eb444bbf272c0f5c920c57f0
- SHA1
  
  4fcace49ee032779d3bf7b8e03c6a9f29ed871ba
- SHA256
  
  e7d625cf255360b0ea96a52ca990be6f1cef522ff7440393e45b12793ac88031
- SHA512
  
  eff62450cf03d72af2594d750a70b008226fa2e46216661716287639bf5e1ff1303076fdaf4f062ca4098ef10a8e29502de55ecb3a6e04753aad7fcad01e3352
- SSDEEP
  
  48:0ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZY:n
Score

1^/10
behavioral27 behavioral28
- Target
  
  Set-up.exe
- Size
  
  2.5MB
- MD5
  
  4b5c2b18976c4013cc78599fc50b7d04
- SHA1
  
  a6a2cd7994b1762a284b266c6d7065851ce3827f
- SHA256
  
  53196c343c37bb328fcb8718c4435328be4cb2bb7de17d297a2f5327e62a9caa
- SHA512
  
  c85018883df127a911080728d20ab1f33c1dd68bca35f81e532819c23588c56b24028a18ee87d55331c9184c4d79870a3eead0920f00baa4d377411f0e9ac527
- SSDEEP
  
  24576:K5IFBOW08RLWmdi97UUzn2BygXfav/PoAlKZRkBnFocWUdcmvt2uiqu9m9Y96976:K2FBOWTRL3dklzn21vav/PoAdDbl4
Score

9^/10

credential_access discovery spyware stealer
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Credentials from Password Stores: Credentials from Web Browsers

Reads user/profile data of web browsers

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30