Resubmissions

10-08-2024 22:04

240810-1zcd2szgnp 7

10-08-2024 22:02

240810-1x7geavape 6

General

  • Target

    WorkshopDLv2.0.0.7z

  • Size

    844KB

  • Sample

    240810-1zcd2szgnp

  • MD5

    af43783fa2c020bb6c47dc72241bce4d

  • SHA1

    df0ea466d7171df209099f8e2e72f1525cddb739

  • SHA256

    599d500959078db82f57a5a0319c6d3718723f734ad118066173d274d4029699

  • SHA512

    7ac806e5b01af45fc5dcb181506fadf601a4b725a6153262daadeb95f4b9a3f7edc5f0dc72140728e03906e5905b8fd1487d4c37689404e9474fe021742338a8

  • SSDEEP

    24576:cMy7L3vrJgRuXFcF5cw6jMGTbBYpqTlorLH:tOpgRu65cw6rbBmio3

Score
7/10

Malware Config

Targets

    • Target

      WorkshopDLv2.0.0.7z

    • Size

      844KB

    • MD5

      af43783fa2c020bb6c47dc72241bce4d

    • SHA1

      df0ea466d7171df209099f8e2e72f1525cddb739

    • SHA256

      599d500959078db82f57a5a0319c6d3718723f734ad118066173d274d4029699

    • SHA512

      7ac806e5b01af45fc5dcb181506fadf601a4b725a6153262daadeb95f4b9a3f7edc5f0dc72140728e03906e5905b8fd1487d4c37689404e9474fe021742338a8

    • SSDEEP

      24576:cMy7L3vrJgRuXFcF5cw6jMGTbBYpqTlorLH:tOpgRu65cw6rbBmio3

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      Modules/AdvTray.mfx

    • Size

      98KB

    • MD5

      d9fb3b5fc60d04f33fadd47837075f6b

    • SHA1

      be072dfc05ae9bf0e5f55d967b7b6cfb9c973fc6

    • SHA256

      eab82ab6dae40b99d5170a003d7b406c3e362ca1372fc3567a716c1f2c0807a5

    • SHA512

      bb206d30b22f81eaa4329a26cbf673c66153a79ce497e87b035eb872822105e2466857f83fea193ad1980e2e2852ea892f302a0083842caf54812d5ad41af82d

    • SSDEEP

      1536:QrRzAWvCGlybdg2TaAA4AxNr8zaZC446JDsWhEcdLQnwsLNpYjt88PG8:QdnvvyRN3LaZXvJTlLIws5pYjJPG8

    Score
    3/10
    • Target

      Modules/Archive.mfx

    • Size

      97KB

    • MD5

      0d1416e079cc907971a7eebe49189eb1

    • SHA1

      4e0ccfc37e738df826b526f3e7016b2c45e415cf

    • SHA256

      c75918d99dd8983fff3dc51ea3f28ad7a9da8c84f273e5a20736f227626fb50b

    • SHA512

      7f7cc470a74a5063f3a922d182a0e394016ac7ad97daca766ab38c63d837534df46cc4dffd88b0e5e9106e80db551568ee75dd35bb5fe22581bc2ed41a5f5d0e

    • SSDEEP

      3072:OpZ807jkNqfPD/bQTiZoPK1Nkcm3udzss6qnMny7vOyefz+:OppjkNq/e3ctf6qnMnyDOyeL+

    Score
    3/10
    • Target

      Modules/Download.mfx

    • Size

      24KB

    • MD5

      5db542e04642fc8f991bd2a9fa144137

    • SHA1

      cef470ef240e69359af377676cabd3f764600e40

    • SHA256

      62533e8adb19fb58ce6b4067822389fe6697baf9c0cfce7dc0ec1d95fbd2e7aa

    • SHA512

      d88cc82dc2a6e3d1d1b59120836bdf74f505ce45f7bfb1e7a3f2176df8fb2fc23571c424b8a82f20a80277f151a8427e89aa18cfa4d631a12e444dffb3d3fb3d

    • SSDEEP

      96:1VIXWjD1F3Z2YVoBNIRSWccLttnK8PxOHDxdtWsQYWMNYbpY+qz+l1LbtKpQ0JQI:1V4W/1X27VGtPOHD4Ll5btO3dQEKzo

    Score
    3/10
    • Target

      Modules/Get.mfx

    • Size

      340KB

    • MD5

      c61fd0d847df328fd6f0a98e4f030f41

    • SHA1

      c3d8c3493818c44723e1466b411a3b5e188d823f

    • SHA256

      791e717345991c4bf183c6450667498a89b59c4e8a5abb52e2751fde63d3ad43

    • SHA512

      72cb1345af5834cbc89c9244c935cd62ea7a9d19d34a39eb6d69c32bd10302c1c0a9c0573278e6424bee1f0a771ea46e7fb907c630742dcfc6bbb572b393970e

    • SSDEEP

      6144:v1xzFQHtjxSA8gGMtobtDaq7eYzQzsgXsJ9XWLrpV0k:v15FQNx8gGM6tuq7eA0sgg9XWsk

    Score
    3/10
    • Target

      Modules/KcBoxA.mfx

    • Size

      44KB

    • MD5

      08ac00f4d05e68d8b5ab6870bf1f076e

    • SHA1

      b8eb503bf860df5938df5cd59cea47392d129217

    • SHA256

      1cae93696ec030be6317a338c3c8bc4274a53632c03ca60aab0bee59d361a380

    • SHA512

      1da050749fb1e8f2917e550a86933b9f69cf4e972f1a166d0c24a2c9e1307fbad88aad36e7f1082d481c116f36e8e2b3327d630c136f02f6f465835fbd76db2e

    • SSDEEP

      768:6QAMQ9VKxyrwDjJCPru5g193lY5/LoNqN/qCD:Pl4KxZuq5gso8NL

    Score
    3/10
    • Target

      Modules/KcBoxB.mfx

    • Size

      40KB

    • MD5

      86d2b0df60742ad2678a9b6f8683ea7b

    • SHA1

      9c37306d8f55f4be975dc9c35e2346e5a7916ff9

    • SHA256

      7f129f2a2305fbd396661ef2910ab48346d589f20ebc7eb85249ecce80d307af

    • SHA512

      9d8d5e1583d5d6eb88be7a58bd2ec5676b3ca34c71931d0a6a755333be231f810765f8b9b8725c53360dfe0da863b97aac262740c159e6374326a723f36632f2

    • SSDEEP

      384:XPWdaOHAQmsDRHw4GDz3d6ljW1w15sKXElJRujYMz6h0FSAionehict94e:/qAQmstIFUjUl8/p0JoAt94

    Score
    3/10
    • Target

      Modules/KcButton.mfx

    • Size

      40KB

    • MD5

      b848bbf535366b6053f7bc8ab87fc5e0

    • SHA1

      19d8a51062201531ff58c898925e53490c22213e

    • SHA256

      94cea0df9febe19fc2e1a905bd7df0bdab63797a42a7006f14bc8838003e5a45

    • SHA512

      cc6df5fb9ef537a255faefb890ffd07556bffec5abd6a914afeb004b77dede2db21dce1179a36b8641e7150e8c466345a58288835722639c1fbb7e5665122543

    • SSDEEP

      384:3rIlaI9/J7NBiwulWwnTXnk2Fp1ARNq1O1wLPw3p8/F9U+SX8wVAvBjKA:3rIl3xNBST3xFTAAqwfaWvBjKA

    Score
    3/10
    • Target

      Modules/PopupMenu.mfx

    • Size

      28KB

    • MD5

      8e72d5048207379fd8096a03adca1f5e

    • SHA1

      ebc29b69fca4ba0e362776fc0a1eb77693941e57

    • SHA256

      ab2b5ad61b63a0f275c3531e88e903f9ea0c7b648136d59ae73b9a6229d44b5d

    • SHA512

      3da95f1fe9c48a6399ee6ebdb3d3a26c7801eb53ff0ef2983912c7f85de0d5606fbfb4ad57875ae8a4fc27aafee61c9b832801b5c6e15be78cc9ff2be19d0acc

    • SSDEEP

      384:WZwHRp/7WH5I9n14u174GOJaOPvLDjnC:WaxdWa34KOPjDjnC

    Score
    3/10
    • Target

      Modules/ProgressBar.mfx

    • Size

      25KB

    • MD5

      f41343b0b41066d01c2bf5c3cd925682

    • SHA1

      0fcc264778eb89648f1259b772c4a4ed6771a6f9

    • SHA256

      a33dad51bdbc04a76f69944eeeb3415f3d2c5a9dda229ac0caeb0e165c651088

    • SHA512

      2223ec0e5e3e378d3cf31e641ddae7fbc797b13c4e1bb5f0febf7cd7fe9623c8382cb2b6ddf23d4209efc5610af652783e1a6d18430c4e360f7aa1e27cfdd06a

    • SSDEEP

      384:39/pY3+cJr0wRMHja1k8Cb9aZAVlD9gKLZfqXAVs:3dfszyDaS19HVlD9/tfqXAVs

    Score
    3/10
    • Target

      Modules/TreeControl.mfx

    • Size

      52KB

    • MD5

      eb413a4876c51036936ca403ad9fbfc8

    • SHA1

      a6095ca683198c11fbc22a819f80678711d8b9e3

    • SHA256

      b4a4c2a98c6df42a88ce794f072246eac9acf128ba31d8685b220fb06f210df2

    • SHA512

      5130d60aad7d010fa60c82d7afb080d414c6e8fa1ebd59afea26accfa66c0bfe9901459ba7c0656e2b62199286cbedef03a63d0ca3ad70ede3a0d720139816cd

    • SSDEEP

      768:lfUvNalHG8zYywMx/t/rvAuvtGm61109uIY:lgOHI4x5kuvtc1109uP

    Score
    3/10
    • Target

      Modules/appids.txt

    • Size

      9KB

    • MD5

      e36a1fb47eaa35bcc0a8540b65ac8671

    • SHA1

      02510879bc2d891198e638168406d6a86decf17b

    • SHA256

      aef16e783dec97fcaa115abc1e79a679d09631414536c56a66e37701f71b2d25

    • SHA512

      d1e5ff737bd4ffb3b7ce3ecb4e79f7530e4d46d69c0cd4484710c7c7b4c0cb0d3f6e66c4c4b44361f021599af61579b47d17fecd3c66b5c6c5f97715ac9cfa08

    • SSDEEP

      192:ZF35FtWxEM5+fS7cO5mSmku7icyEHvI+z86O7rYHV/Xe8SALjb:/3Dtc7wwcxiv16yWV/OC

    Score
    3/10
    • Target

      Modules/fcFolder.mfx

    • Size

      120KB

    • MD5

      5c99af6a8984dd284ffe212cbf938dba

    • SHA1

      92d5ba06e6841fd8b52f3b38ed75675510cfd4b8

    • SHA256

      b69d14b730f9d527139719138a336a570127d62a4e27fbb0b9c6bdcde6504a57

    • SHA512

      321ad87c61d190e2645e45446dfe910271428d7ccc7b396ee1453710bb99031b04604aaff7afb9b58cc3318caedf7cc797a1f6ed7c362288321b7a4a063067b9

    • SSDEEP

      3072:HPRMY8dBsSu7HNSQqM+ECFoWkFXxwLCHiF:vRM1ISQkjFiHM

    Score
    3/10
    • Target

      Modules/games.txt

    • Size

      27KB

    • MD5

      09899d03f1849a01c3c38e5b0d518f2d

    • SHA1

      15cd26a7bec985a11e8804e2651cff228cc6e9bc

    • SHA256

      8afa547bb89249699ed5acdfbf17f82162f5c9427d93d5876c329eddd02fc8c5

    • SHA512

      db6a0e25d9d60ef222945274a44f0ccdd14a06bc26906f98cdafb7891d5a3276e64871f8c3a873f3b7fc6c53fbb24e5cd23d944e940ace36ac9d7941b43671c9

    • SSDEEP

      384:XzQ+RqvRWpON0wyyk09FlbwDGHXbtVtTSqDpGe9sxLqkZRcA:XzGYQ5yChNbtVsqoe9sxLqkZRj

    Score
    3/10
    • Target

      Modules/kccombo.mfx

    • Size

      32KB

    • MD5

      d65a417eab8450e73f92585214df6621

    • SHA1

      e82d9d88f9f27152f88ab9c46be91f42057ab4e4

    • SHA256

      046d8726045276064396972fa12421d7d83b7d665d23d118e04a9e94bdcd1c49

    • SHA512

      707f22dd54ae34bf2915e2eaac8f35331fa3e6d55b133a9b503cabf0c3edf2a6ba8586cc33cbb95eb27e79c836e17f9c3bf2525b8ffb284938ec7bf9cad9b14a

    • SSDEEP

      384:2fz/3o02ceKw9iHN4N7p+inrOWNL0uqqAh278r:wz/o9owrpzKpjp2g

    Score
    3/10
    • Target

      Modules/kcedit.mfx

    • Size

      32KB

    • MD5

      b00898b2cf3f8bfc98d782fba8b5c72b

    • SHA1

      4851163436946fd145048104bd1a47d34840fc3d

    • SHA256

      48bb645990f1a703a1e9fdad3c765824db23c8f5e25b388c82dd25cb83fe31d0

    • SHA512

      0ed0c44e3f0f147655ebf0b1a2627c7eff895342a09c0410405b9b8c5dfa9c1da588731873ec2c03259a89a58b9c4c7cbd5119c5e4952e8d024aaef36e7b6626

    • SSDEEP

      384:s1Ye/oIRL3Pe34vFRNBX5jkDEXCeyHoPy0Kgr:+vQqLfrT5meqoHK

    Score
    3/10
    • Target

      Modules/kcfile.mfx

    • Size

      116KB

    • MD5

      fe2b4c6a45ce244f1c40f730008465c9

    • SHA1

      9dfd41a915c19a4520a3024e9133e9a24e61779f

    • SHA256

      7daa995fbf72b941859177b08b2785dc107f1a3deb99f6ab4c675d2b0f03a06b

    • SHA512

      caf9e1bba2a5560b73c47d116f0f0f016a88f54e5397499fcd5b8a648bf676b93eb255a32fe7f71f0462b481737eba2d01cb9e790b75897c44ea741d73867b39

    • SSDEEP

      3072:yizFhi3x1WAs+AxlENojvbsdJ2hjxUZh3QH:e3jc+APxD4m

    Score
    3/10
    • Target

      Modules/kcini.mfx

    • Size

      114KB

    • MD5

      7c0cb7fdc0d3519520cd4b8137edbd80

    • SHA1

      bd4eddd8316a51baf4a3ae68b56acfbba734f46c

    • SHA256

      d1471b2685d45956c323baa2cab11dfe479eb1021f04e2949f03557527c5fc84

    • SHA512

      601c16892bef77d5842e0778f27d4f82e19ae66333b2b75c9a34b3ba6441169946e1167ceb21ed270bddba305abfe50f2e8f8ab2e9dc410c96a31944e597034a

    • SSDEEP

      3072:pMHMC6xa0D4hBC3lwTu45NI6WRZG3vR5ULU:pMHMCIMhrlrJlRF

    Score
    3/10
    • Target

      Modules/kcinput.mfx

    • Size

      11KB

    • MD5

      a9a43b0c7db4d5853a235f5cdeb3e6d2

    • SHA1

      7578c57007f21b21203bad8d7e5c67f980d4872d

    • SHA256

      63348ec89cf004c64688fadeb78e0a697cfdcac1cd8c599c66a2a5aacb8407a0

    • SHA512

      25e48926bf433f262abc92be5788b4dd8b8e87ad2a8fb23be6b219e01a1ba69cabba6dcd80a8a9fc746f303be4411b6f8d2097da7b208e2c3b12c0b9bd5ceecc

    • SSDEEP

      96:lT1lWci9keIk2IJQYoX5ujYkjE4pouMtIBa4XkNQpuY6vAoVPD:lZscix/VoX27jO48PD

    Score
    3/10
    • Target

      Modules/kclist.mfx

    • Size

      32KB

    • MD5

      de7d289ea419cc82784cefc87e652c70

    • SHA1

      9035cf539cd9d3c14fdda73eb2c23452750cfade

    • SHA256

      c83bcec56f1666d6871e077cc54d0ee7f6462773c03afbb301b9180a4ad0a31a

    • SHA512

      f02d5aa3822218517d3c6f9114f0fb90c37ed7281ab09f3a868f251e2975d6da10bd1616a9e13eab0e1f138f2bd2e7953686d3cf7e18e2a67b1bba9fbd762ea0

    • SSDEEP

      192:lME7dUtmvkkZx+CjaAGnI2469E+750SXv+rKaw6OXOGS3xy8z5m9m:mE7dUTMeAuxWw5aYXOGShy8zs

    Score
    3/10
    • Target

      Modules/kcpop.mfx

    • Size

      10KB

    • MD5

      44557bf7ff780cfa6019c0c4119fb54a

    • SHA1

      e02f00a1f9b9eae1855ca0168c362bd389fd6b8d

    • SHA256

      28726ae556cbe1e2b4995ab135da1bfc72d0bc4e4f56d821e95dab738eed61a6

    • SHA512

      071c11c89f59397b873d540561bc26f96651b6647f991b34ccdbb22809a16241c5e0167e892d3b660038d3fed5089c20a19eea1ca2a8607acdb6984d84cdf62e

    • SSDEEP

      96:kFmxDB0z0dBZHgb0L4cY0v0kNQpuYJ0Fzlk7:kFjzgY0Q0Q

    Score
    3/10
    • Target

      Modules/kcriched.mfx

    • Size

      52KB

    • MD5

      d162868d7be1a7128e04f847f3b8c542

    • SHA1

      2c4f036ee14885fc96804fd9f8dac68f9068dbbf

    • SHA256

      274a7d1e89514f3c9809ac0baa5faeb31820340d7e032479ecd3e6183ad79887

    • SHA512

      d17c57266a61da4f4864cb110d76cf71e86fb182a18cc5e250f40ad3e7feed39ca0690c637a3d4db45a68148bfa7ff2426fc9337f1764372ab67c97fb2c901d1

    • SSDEEP

      768:GkfnF+Tj8IVKx2t+Z0LE7PtsqfiRTlcXRxXAf:NFiAJ7POqfiRJc

    Score
    3/10
    • Target

      Modules/kcwctrl.mfx

    • Size

      79KB

    • MD5

      2c34e977f898ab60eddb72075c4be223

    • SHA1

      adf883dd06e5ae340a03e6c22a56a4c0caf909ea

    • SHA256

      a0ada42e3a4760097c1c2f98905f12b19de47159543aa21e1c604dbcac7337f2

    • SHA512

      73402857d09e5a0e8049bb7adf3bbfdfc9ac65966217751cbf6db2bf532aa3f92ffc3a1a5dcda638e83d6ede29ebe6e760cbad74d27aa6fa006c9296607d3c37

    • SSDEEP

      1536:cwk3FPBc4adaq8YUb9OB8CIE3sWoCcd0x47DGGGGfxKo:G1PB6daNFC8n70x47DGGGGfxKo

    Score
    3/10
    • Target

      Modules/mmfs2.dll

    • Size

      509KB

    • MD5

      98f647d1ed220e1d715aed9dcf69f387

    • SHA1

      d1d9f5361672553a394bee9afe1d30814dd0ac53

    • SHA256

      3a288448e88a296b2bceeaf093e76a22e3083e937a3c4efeb6a61565ca7e35df

    • SHA512

      e950658b0afdad722a9f243bb8ae7fbc1c541dd0513379ef9e1d99becf8b31b4098c6789204baf3f15ea26f43af665edaa9799a6617373009def81bb20f02a06

    • SSDEEP

      12288:Cl2w5SNFe2TMNMfeZJyxqNEQ8W7zf+IL2SUoOHxwVoipcVDNLTrgqiJsRr:PdNFe2TMNMG4qNEQ8W7zGWYd1DLTE9Ox

    Score
    3/10
    • Target

      WorkshopDL.dat

    • Size

      62KB

    • MD5

      cb0a903965baa1b5f58936a9e4df450b

    • SHA1

      8c96c3ebfaeefd8400f1f5fe6891c4695506f056

    • SHA256

      a3c60ffec420a5daf322b4f78a1b236e085dbdf98ad5a2bd4f792a32bec19d5e

    • SHA512

      8334beba5d421271d0f4c8fdff1457e2c9a5336bdfce2bd5874dcb26a7af67b178a96e80c0ec93862667aa5bce544c3a37b1e2455f7422c739a7163cd7c4ff80

    • SSDEEP

      1536:kVdROL9qZBZxNDaI9ojucvCjDiG1S4efLar:aROR2lWF7vzLar

    Score
    3/10
    • Target

      WorkshopDL.exe

    • Size

      937KB

    • MD5

      dba0313faa2d314b0f3f5786592f0b28

    • SHA1

      9645ba65b9a2613ea3533e66d3267b4e774c5f85

    • SHA256

      d316a104c8f2f6483f0504c9b8544e45766a2248bd7ad5fd481951572f78befc

    • SHA512

      518b914cd3adb938caf49da9061bc111006db98b3e9a74b297ce546604f585010cb2221ecefb191fa6f2072809393a080ab89a964fed0fab05d1fe28a7263669

    • SSDEEP

      12288:qUDU9hdC/8PqDaPcUewtn10Gkt+Tu8mTLUyitik5ZEXhBm3+LGzjXzPPpJD:qIU9hB5Bkt+TmYti8ZEYJD

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Target

      WorkshopDL.ini

    • Size

      157B

    • MD5

      62f911c377eb32d0fc9b941a7d826acd

    • SHA1

      582c5e0c0fe47fda6e12a749b9eeba112bc3e924

    • SHA256

      36bf0c777ceaa6024f107a674d0f6d5be97eae556076a0cc524918207fce9f44

    • SHA512

      872fa7780659c82904579c7fa9e32be5acb0dab6852dbbd8441e419fae8c822e607045d028284df47db36201a210c559897ed33100753c5a89e0babfd9f20962

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

Score
3/10

behavioral26

discovery
Score
6/10

behavioral27

Score
3/10