Overview

overview

7

Static

static

3

Release.zip

windows7-x64

1

Release.zip

windows10-2004-x64

1

Release/ArcaneWPF.exe

windows7-x64

3

Release/ArcaneWPF.exe

windows10-2004-x64

1

Release/Ar...config

windows7-x64

3

Release/Ar...config

windows10-2004-x64

3

Release/ArcaneWPF.pdb

windows7-x64

3

Release/ArcaneWPF.pdb

windows10-2004-x64

3

Release/IC...it.dll

windows7-x64

1

Release/IC...it.dll

windows10-2004-x64

1

Release/IC...it.xml

windows7-x64

3

Release/IC...it.xml

windows10-2004-x64

1

Release/VaperAPI.dll

windows7-x64

1

Release/VaperAPI.dll

windows10-2004-x64

1

Release/bin/API.dll

windows7-x64

1

Release/bin/API.dll

windows10-2004-x64

1

Release/main.exe

windows7-x64

7

Release/main.exe

windows10-2004-x64

7

Release/sy...ua.xml

windows7-x64

3

Release/sy...ua.xml

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Release.zip

  • Size

    31.8MB

  • Sample

    240806-x8xjsssakd

  • MD5

    418a9a8afb63328e1cd17628ccb2105a

  • SHA1

    42c38f920c194ad8e9638723faf66a0512cfaa24

  • SHA256

    ff4de4c4efb02ed53599059a6eb8a18b5c1d6911053ca2922e633b7700cb1d9a

  • SHA512

    f5a13c7b81116e3f5a1ba3ee921b0fe50ad892f630346e0c156b850121da5edb0227cee231a129cb2f800238b0bb856474b55b59821083ce82b2b55f8d36edf6

  • SSDEEP

    786432:hvG1jGPz3lZqIFLtgz9rLa1qf+TmqPtDkX1TYKu0zu:EMzZLtqrLx+TmqPtgFkR0a

Score
7/10
discovery

Malware Config

Targets

    • Target

      Release.zip

    • Size

      31.8MB

    • MD5

      418a9a8afb63328e1cd17628ccb2105a

    • SHA1

      42c38f920c194ad8e9638723faf66a0512cfaa24

    • SHA256

      ff4de4c4efb02ed53599059a6eb8a18b5c1d6911053ca2922e633b7700cb1d9a

    • SHA512

      f5a13c7b81116e3f5a1ba3ee921b0fe50ad892f630346e0c156b850121da5edb0227cee231a129cb2f800238b0bb856474b55b59821083ce82b2b55f8d36edf6

    • SSDEEP

      786432:hvG1jGPz3lZqIFLtgz9rLa1qf+TmqPtDkX1TYKu0zu:EMzZLtqrLx+TmqPtgFkR0a

    Score
    1/10
    behavioral1behavioral2

    • Target

      Release/ArcaneWPF.exe

    • Size

      492KB

    • MD5

      2d374f7dcc7cf60992265ea2cb6304e5

    • SHA1

      4ed381117ee2c46eb8eae2b897825faf18b6c5f8

    • SHA256

      81d6a8ace65334c44a4268bdbe128ef39a489853fa92386116783f6e93ad45d4

    • SHA512

      c2d03f1c937e763a9442572cc4c4d3a6b557a0c2c6192664de0d698d12a78bd87f99aa888bf128cd4a4d17dde5f54a388091013df60c345ebcb58a71bb2b89a0

    • SSDEEP

      6144:3CJmjayS26k3px1MaDVa+L5fwZ9tKU/b5Mrog:yJRc6kH1MkFL1cj5+o

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      Release/ArcaneWPF.exe.config

    • Size

      187B

    • MD5

      15c8c4ba1aa574c0c00fd45bb9cce1ab

    • SHA1

      0dad65a3d4e9080fa29c42aa485c6102d2fa8bc8

    • SHA256

      f82338e8e9c746b5d95cd2ccc7bf94dd5de2b9b8982fffddf2118e475de50e15

    • SHA512

      52baac63399340427b94bfdeb7a42186d5359ce439c3d775497f347089edfbf72a6637b23bb008ab55b8d4dd3b79a7b2eb7c7ef922ea23d0716d5c3536b359d4

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      Release/ArcaneWPF.pdb

    • Size

      43KB

    • MD5

      e48d7ab01a051d4a486a604588a59e5e

    • SHA1

      1b49b272ee71195743ea13c124189340286b99b3

    • SHA256

      88c865c442f26aa66acce3928e88532d70ff993813baec6d0930ea293b16eb66

    • SHA512

      4abbf09f002ed454f193e607e276aaf4a8e21d65c56e1af4cd610c8b08648ef62417c40c732d95f89ce8e55caf3345340a310f780edfa8c0a56c8730311ce430

    • SSDEEP

      384:BXLfDLfKVTTs9A4DpIv3PZzQdfPXwOfx2jNVTTs914DbifG2ji:BXLfDLfKVTTs9NDoQAVTTs9uD

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      Release/ICSharpCode.AvalonEdit.dll

    • Size

      605KB

    • MD5

      d8f0e3940b5bbe9599ee0a84b541d50f

    • SHA1

      850d54860f97c431759933fceb92501df03a9e73

    • SHA256

      202a4719e4b879da67445ab50901d80a259f8680b5d16bc0f929e0a6f6fad199

    • SHA512

      1af4b712a6716abaef56f754cc2e63d27b15f9d2d23285e2491b45e714f34acb3d7b026a2f7b316043253f4b7b9c98dc390ad0a53f2016c486bb695499cdca2a

    • SSDEEP

      6144:wxYTpmHJ01ImQ4JeqcP3Y5hdjxRDSipwypt+9mz+OB4JFDu8n+kUXjWyUO8tKtTD:wKTpmH29/xRxSmzmDuNxHR

    Score
    1/10
    behavioral10behavioral9

    • Target

      Release/ICSharpCode.AvalonEdit.xml

    • Size

      584KB

    • MD5

      b295b46861df2759dc9466c3f0785a6d

    • SHA1

      f72c957ba0094f6e00ac718942aa6834130359a2

    • SHA256

      082b73fa8c1c1def37eaabfa16f8980d9f7b840d39c4eb9d2b26a86b0a7b3207

    • SHA512

      8fb8a00a8bbeb7ba45c3b50257a2363315618907bf3ec70a46f9ff2a5860e65901ab9feb6bad4e09cb5a6ea6b865a42682c64c0e468620f0954379a5f07a2693

    • SSDEEP

      6144:sFdlxsTCjLBk9MG7OpAitANoPNzLINImlLgTS9EcdxyhxlYRq5t:Rg2qcq

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      Release/VaperAPI.dll

    • Size

      6KB

    • MD5

      e8a28e579c5832f75ce08843e814a26f

    • SHA1

      79e3b9f9c199a3b46878c34c8db76334bf937536

    • SHA256

      a921c078b98c06ca24cb320755abdc72ff77cb65825bfe99d689daa0e73450da

    • SHA512

      65a380bae42d3012332fd40caee1cc5f35743d6f0e78ad5f4971a315ccc55bea874fa3a8ce74f28bf0c828b8a38e58466d642e68fc55b9ae9d8a5976e9341ffd

    • SSDEEP

      96:Pnbzf+2NVUvGgJSghi7xVlqmR7/+j8nngV2itiO2:Pvf+2NVc/zhi7xJB/+j+gV2W

    Score
    1/10
    behavioral13behavioral14

    • Target

      Release/bin/API.dll

    • Size

      1.3MB

    • MD5

      157fd035b2a344a94166d7db3756df0e

    • SHA1

      f221d28c1deb80b4e8d9201226435aefce6b0f75

    • SHA256

      8716c75aff75941711aff8770836f47eb9a254416089ef3571c6fc9a338b3009

    • SHA512

      fad0174fbd22f58dd4fcdaad8378c214270b4faeaca64d9cb306f50e9316072a4c417c5723c4123b8bf94a3dba6ef4e3303ec60f4a2cf0c3a54d8ab375ea717d

    • SSDEEP

      24576:ZqBSLRktEBl6blwTUMD4zB1VU2bFjYWR0pMQUAqLRAovh4bSAXVVRNRfMXZO:ZqBSLRkt8l6blSU//+2bFfvA1SQVVRNk

    Score
    1/10
    behavioral15behavioral16

    • Target

      Release/main.exe

    • Size

      30.9MB

    • MD5

      b82af1a3b4a2ba5b2d03f0a8a579065e

    • SHA1

      4dde45ade4c172ab8e8f773ab97e7110fb949153

    • SHA256

      5e089c2005e8eb6531dd15efffb775496a8e48c05bc620d2a98de3ff4053954d

    • SHA512

      ef687bdc1ab4226ac8b4be93c2998ec1924eb2d379b592772f4865b40038ce4505812be66c71e1f13e5edab4c2a8ef08501622c29800c34bf3d6a08d4d031cf5

    • SSDEEP

      786432:TeRk1WN6HLhUvvJFxv3/Q5gNWxMU0doXadzWzN:6op+vJP3/PWxMU06ySz

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral17behavioral18

    • Target

      Release/syntax/lua.xshd

    • Size

      4KB

    • MD5

      08713090c9ca001ca19735d0d23f93bb

    • SHA1

      1731d4f285aad168fb4a802019634ff9775f28e5

    • SHA256

      c1af5d8d18e066f0c2d535b656174ae8cdbe5f0fffe548e96d3fd2602fe7f9b3

    • SHA512

      e048b451e8d65818331c5a9d0bca7aa90b3a532274138e0ed5a20285ae969490c77f6088f25dd6ef85df19e9cdb257f007dd2c4ac8aa08b1aa7ea092ef282128

    • SSDEEP

      48:dtQxg02ZkNYDNYtJzbxb38J4JiFXiDSCEBZl3S5wk:4gJD+JF8JbXiOC2b3mwk

    Score
    3/10
    discovery
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks