Overview

overview

7

Static

static

3

Install_Xf...b4.exe

windows7-x64

7

Install_Xf...b4.exe

windows10-2004-x64

7

$_13_/Skin...48.png

windows7-x64

3

$_13_/Skin...48.png

windows10-2004-x64

3

$_13_/Skin...49.png

windows7-x64

3

$_13_/Skin...49.png

windows10-2004-x64

3

$_13_/Skin...50.png

windows7-x64

3

$_13_/Skin...50.png

windows10-2004-x64

3

$_13_/Skin...51.png

windows7-x64

3

$_13_/Skin...51.png

windows10-2004-x64

3

$_13_/Skin...52.png

windows7-x64

3

$_13_/Skin...52.png

windows10-2004-x64

3

$_13_/Skin...53.png

windows7-x64

3

$_13_/Skin...53.png

windows10-2004-x64

3

$_13_/Skin...54.png

windows7-x64

3

$_13_/Skin...54.png

windows10-2004-x64

3

$_13_/Skin...55.png

windows7-x64

3

$_13_/Skin...55.png

windows10-2004-x64

3

$_13_/Skin...56.png

windows7-x64

3

$_13_/Skin...56.png

windows10-2004-x64

3

$_13_/Skin...57.png

windows7-x64

3

$_13_/Skin...57.png

windows10-2004-x64

3

$_13_/Skin...58.png

windows7-x64

3

$_13_/Skin...58.png

windows10-2004-x64

3

$_13_/Skin...59.png

windows7-x64

3

$_13_/Skin...59.png

windows10-2004-x64

3

$_13_/Skin...60.png

windows7-x64

3

$_13_/Skin...60.png

windows10-2004-x64

3

$_13_/Skin...62.png

windows7-x64

3

$_13_/Skin...62.png

windows10-2004-x64

3

$_13_/Skin...65.png

windows7-x64

3

$_13_/Skin...65.png

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Install_Xfer_Serum_Update_121b4.exe

  • Size

    18.1MB

  • Sample

    240814-nrp9qazema

  • MD5

    bf780153220b5dab9447de1628993033

  • SHA1

    f20b68a1580828a6ec96382ea68d2d8f077bb8b3

  • SHA256

    f58a1afc1dc58f057f867bba61d28fb42496200665a0a60b9a0024a1834198a5

  • SHA512

    63a7b1dfb7aebaa9e484458e130c654be7e92949a4406dd54bf6eb3b26b565931039e201152fff0f67ba76d8e2405511de5270a0418d3049130978a2933a68f3

  • SSDEEP

    393216:SYz7lmQprVTplYrDRcFZmlnPCKmvmFe+cTsbWY/I3nEvn6r:S87MQdVj0qbGnPgvmBcTsSYQ3nOy

Score
7/10
discovery

Malware Config

Targets

    • Target

      Install_Xfer_Serum_Update_121b4.exe

    • Size

      18.1MB

    • MD5

      bf780153220b5dab9447de1628993033

    • SHA1

      f20b68a1580828a6ec96382ea68d2d8f077bb8b3

    • SHA256

      f58a1afc1dc58f057f867bba61d28fb42496200665a0a60b9a0024a1834198a5

    • SHA512

      63a7b1dfb7aebaa9e484458e130c654be7e92949a4406dd54bf6eb3b26b565931039e201152fff0f67ba76d8e2405511de5270a0418d3049130978a2933a68f3

    • SSDEEP

      393216:SYz7lmQprVTplYrDRcFZmlnPCKmvmFe+cTsbWY/I3nEvn6r:S87MQdVj0qbGnPgvmBcTsSYQ3nOy

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $_13_/Skins/Default/2x/bmp20248.png

    • Size

      3KB

    • MD5

      35f52b83e7a3e8a208af8094d034db70

    • SHA1

      27fc41fc5d2fd1c85f9ad61004516faa28da0acb

    • SHA256

      b4863550360e43c7321798087188e8ccbb062300d083a874348573a4ba4df224

    • SHA512

      06fe204b3747851b0a78a9a2bd8882e352b2617c03d124c5153f2f483aafe7dd017bbba7b7c9ba98c56aa5915b9cf253c4fe9c62a5f9c2a7296eb2c165d5b759

    Score
    3/10
    behavioral3behavioral4

    • Target

      $_13_/Skins/Default/2x/bmp20249.png

    • Size

      3KB

    • MD5

      df043c09820fecf68b25251e2ae9ddb4

    • SHA1

      647db20b3b960f62fda6e4972a469a941b791ee3

    • SHA256

      d59608a243f9d88fd16d2291d2b559d777bbe501b3b09a4a5d26933aef79fe4b

    • SHA512

      6738837bc427f18ef15a64f22145275d56a184af6188ab9a8e362b5bdf1b825007678a40db031151fce1e7bf9cae59eba882a1c7d38fbcd6c5287caa4b7740e3

    Score
    3/10
    behavioral5behavioral6

    • Target

      $_13_/Skins/Default/2x/bmp20250.png

    • Size

      3KB

    • MD5

      72e328add312b840cc2e9dc824d99c0c

    • SHA1

      ca6dcdb21bbbea52c71650512bb5ddd5a782ccd0

    • SHA256

      fe0b3b935252e455fd4bab5531937535b586b06cca1aca3817adec7f40e0f59e

    • SHA512

      9e81fbfb054d9376fa54cf168bc56baefed7a8ca9365483bedb635048e365e86f2a3dffcb0fff2e69930ecc36be49f01cad0f1b7f0a8e678fd0afe7ef743f4fc

    Score
    3/10
    behavioral7behavioral8

    • Target

      $_13_/Skins/Default/2x/bmp20251.png

    • Size

      3KB

    • MD5

      a40354ec073b24d770602a45aea58d66

    • SHA1

      fb4310edcf7b20b1be4f4d29637337eebe9b2dd1

    • SHA256

      dea2bb96b9546c2e1e4096e73f3a919825d5aae48e31ae8901054748ac087d75

    • SHA512

      796c404f8255c7cc62268997987fca4ff4394eb54038c2ceb9cdb1838f0e0104da5263eaa8bab41ab50bf47ec49636e400657bf9989c5fa00ef38522514904e8

    Score
    3/10
    behavioral10behavioral9

    • Target

      $_13_/Skins/Default/2x/bmp20252.png

    • Size

      3KB

    • MD5

      93b18e29ce0e1c578f06a0de4ffce7e3

    • SHA1

      48ed11e22b139146d7a2f34d5b74ea15d595a630

    • SHA256

      3e240f8cc843c2c8715f846b6603f9ba6e99f5b2b38d539f42d8b84c6a9f8432

    • SHA512

      6a2b7a3eb7edc8ddcb1b464305427a631a0542f951479e0887d39f2b2fa580699a47e5d912b670b35d52702a018aadb39e76e52329e0a257f3093e66ee902214

    Score
    3/10
    behavioral11behavioral12

    • Target

      $_13_/Skins/Default/2x/bmp20253.png

    • Size

      3KB

    • MD5

      b67f7d878923d870126e6e6ec3ca30ef

    • SHA1

      2f5341e15085be0c80d66f32bf4192be6c7d9ea0

    • SHA256

      4dce38474079c5b8247b35214c2a75af9741ec61f7f91061764ef09b4276866b

    • SHA512

      5aa1050174961c22af0624b67824761b45bd2d9c1978efd784857805ff799326879adb179a6247e879154f4df68a01954f9c161deafcd54ee1fe635f3e97e7e4

    Score
    3/10
    behavioral13behavioral14

    • Target

      $_13_/Skins/Default/2x/bmp20254.png

    • Size

      3KB

    • MD5

      b95f961ea93ed1e752bd192fc02c254b

    • SHA1

      bfa7628d0d9664c863621b643c10c85a78fd3da1

    • SHA256

      ef993977b858d695a06486f41dd3b6e00d83746807e49ff517a662b312d4e5e4

    • SHA512

      88793cd7c2610657c6b095e3ddf7a0f337c040ac19a8bad42ff294031585eabd042bec84c016e52ecf70abcf243de23828b363665a803fcb98917b4d8eb60b52

    Score
    3/10
    behavioral15behavioral16

    • Target

      $_13_/Skins/Default/2x/bmp20255.png

    • Size

      3KB

    • MD5

      d1dd45cb64c696ccbd386acf2dc32a0a

    • SHA1

      531b293f43df098f94da367172bf0f52f81a404d

    • SHA256

      66283e7a5b319dad3419ffdf3f9468f647b91bc57bb982b34183dcb8e9fa427a

    • SHA512

      afb3da92377e8486f92871b881e449aba761018b4b9e0273f5783c2c42199a64669b9a474a3b59e69099e05a62137749b82e9fb0c1b18f40b4e21ae1eb700858

    Score
    3/10
    behavioral17behavioral18

    • Target

      $_13_/Skins/Default/2x/bmp20256.png

    • Size

      213B

    • MD5

      43f61d85c67620d955caf8920622b518

    • SHA1

      e386226f98bde20fa403a4a3cc412653db6b2154

    • SHA256

      ec6e3d8f847d08525a8de23563071562a565e17730d085fb675ea3dd789372df

    • SHA512

      beb95e4e75aea5b71847671beeda47c4a6fb0cf067c3f10cbf63e1c8cdf6b2c8bee3f8fc5469b398ffcb4af22ec5a5710f8ca13d822a321ce4e577679137b62d

    Score
    3/10
    behavioral19behavioral20

    • Target

      $_13_/Skins/Default/2x/bmp20257.png

    • Size

      5KB

    • MD5

      ce31d0c96ff96ddf05f4874cede208c0

    • SHA1

      c41767157fe075106e44023792d792200ec738fa

    • SHA256

      c02b9110bfa23fd738dc512f7f51c3b4b2a4f04ca728c98ad12ac4966ed00687

    • SHA512

      fd2788130dcb7563dec617e1fefb86784b06946f280ee9fb76db8ad378a9bcfd6e2789eccae795d2185322bc7130780cf69419ca82d45d72a76e6ad7a76eeac5

    • SSDEEP

      96:c8wZ7EFVoptMiauBYSHNLzuzyzuDrSiP1zYQF3PIgqMyQqcANu/Zu0ZqIN2yAJd:1H3AtMIYILkmKSc1YQFAbMyQqcr00DUN

    Score
    3/10
    behavioral21behavioral22

    • Target

      $_13_/Skins/Default/2x/bmp20258.png

    • Size

      650KB

    • MD5

      0c250037f59e949dd47d8ee4b11ef000

    • SHA1

      e6f76d5c45365f525e07c97b3e9f25cb135a7498

    • SHA256

      fe7a603deb8252201c18c2c4f96af69c325cf9684efb3977f89b2fa69b4ab389

    • SHA512

      a62f150d7d5ba473df3d260b00da1fc6a4aeefffc5f72db6690c7340fb60696042a9d00f8c124e73b210af048bfb0d5554e831c1460714451afcbacaaddf53e4

    • SSDEEP

      12288:wQzSnS9VLJ+pWQBIJFGfuxx38kVg/GExRCPgetRcanVm+9ogN:RzSSXB0CFv388UGNPgeVf9H

    Score
    3/10
    behavioral23behavioral24

    • Target

      $_13_/Skins/Default/2x/bmp20259.png

    • Size

      282B

    • MD5

      e18fc1681e132cac9419ee98f7434db4

    • SHA1

      2c0d4684f6a0913adaf36912440342d1e98b603c

    • SHA256

      958bf9d0c41487a602bdccfc6b6fd0a670fd2b4eb2c18b9d18d44aedc5abd031

    • SHA512

      627a099682985bee2b00929c421510b671773df4025986665a5f2162177f3739b585379bf9a4fe503908d88426cdaf137fcf2b872c0051ab07fb9430884a2a6b

    Score
    3/10
    behavioral25behavioral26

    • Target

      $_13_/Skins/Default/2x/bmp20260.png

    • Size

      46KB

    • MD5

      b206ea513bcfbdcd2e2cf7f4f3ffd333

    • SHA1

      1253f9ed946f0d1d85b370eabd51742ae127eaf6

    • SHA256

      05e9092fdb42b8c6e99507b15b0765f245fb6054ea282951929d6724261d1de1

    • SHA512

      6fd7793dfc94404e0a25d80bee5888ff9f9018bde952a6077d0d5544dc21ca9eaee431c50f4b96308982831efa0c9c28a3261ce85029eabc4cfedb6ed41188e5

    • SSDEEP

      768:uXohwy2YxKCE81DKtwLlfHCf8qgd/0V7MNOsynJmLc6qLSD330703uxxS:Vhp2YACEviL4Xy/04OnnJIcpLSDHO03V

    Score
    3/10
    behavioral27behavioral28

    • Target

      $_13_/Skins/Default/2x/bmp20262.png

    • Size

      2KB

    • MD5

      72520b510b78ab09819832e8fc4a90a8

    • SHA1

      31aee08c453094a5a90410760561dad0224fa553

    • SHA256

      61b91f4702dfaa59c8ee741f6dced4cd95721a463b421e108c94a2f38a8127cd

    • SHA512

      d4bb49fd5e4f42bb220413cb2a3581656b1c61dc8c8a83393fc4077036ff3ff35171050cd3eb3ad109609ef2f56fd457061ce6b0ef59f84f8178fa20367be317

    Score
    3/10
    behavioral29behavioral30

    • Target

      $_13_/Skins/Default/2x/bmp20265.png

    • Size

      1KB

    • MD5

      6d83f7ab2e102c96a1f0c06a111ed16b

    • SHA1

      0b25aae4c8a3d6c94d8d8c2915a881a4607bfa89

    • SHA256

      075ee93291f05aef284137b8ab588a2aa7835867e975f3d88dfbecd896bb90ee

    • SHA512

      15f9afc6c7eaa9fe43c8d3df069f8a527d51620380eb7f1eeffbee7d7d547e6fc20518ace369cc885f2b00286e87fe338c2ddeab84af8cdaccd8ce94910da57f

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks