Overview

overview

7

Static

static

3

bda3e2ec81...0N.exe

windows7-x64

7

bda3e2ec81...0N.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

7za.exe

windows7-x64

3

7za.exe

windows10-2004-x64

3

Uninstaller.exe

windows7-x64

7

Uninstaller.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bda3e2ec81dfd40cb93ae1c3f78404f0N.exe

  • Size

    610KB

  • Sample

    240901-lncs4sxflb

  • MD5

    bda3e2ec81dfd40cb93ae1c3f78404f0

  • SHA1

    9a22356e08dcb73677a3c1888540b2d0c1a3c1c3

  • SHA256

    a57a3fb33935dde7bccb5fb2219648447ead3a2706c2e7c425959e85c910750f

  • SHA512

    2ff60c4bd0e82004b2e4b17ae368581215a18ae3777b81f6254252af692fea2de24a5985475ebdc24f4b3c89b75e43f026e9791eadcb1037e51e205c2d883a32

  • SSDEEP

    12288:LRAJnM3D0Fw/tN8dkmLtpHHHrh7ZK1JlLWOAVhGNIyQmwrC:LRvz0FmcLbH1mlwGtXw

Score
7/10
discovery

Malware Config

Targets

    • Target

      bda3e2ec81dfd40cb93ae1c3f78404f0N.exe

    • Size

      610KB

    • MD5

      bda3e2ec81dfd40cb93ae1c3f78404f0

    • SHA1

      9a22356e08dcb73677a3c1888540b2d0c1a3c1c3

    • SHA256

      a57a3fb33935dde7bccb5fb2219648447ead3a2706c2e7c425959e85c910750f

    • SHA512

      2ff60c4bd0e82004b2e4b17ae368581215a18ae3777b81f6254252af692fea2de24a5985475ebdc24f4b3c89b75e43f026e9791eadcb1037e51e205c2d883a32

    • SSDEEP

      12288:LRAJnM3D0Fw/tN8dkmLtpHHHrh7ZK1JlLWOAVhGNIyQmwrC:LRvz0FmcLbH1mlwGtXw

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      7fbda5b7be6256996d4e59e5f6949918

    • SHA1

      2d36c0e0bfbe450675c6ed044e715abaa85a252a

    • SHA256

      9bb31f7f02231e3166bf52385d804c06da9740e9c6f0bda807b01052ae9fdcd4

    • SHA512

      bc0d36aa6f50041bad05cf48d909ed5a387bff5b111f657591161a288c1be5c20b8c5d69e557b5ea395726d91601b9e6303da81555e053090cfcbf5d44be7f82

    • SSDEEP

      192:cR9jFtTLkreShqlyXMUspRRFtvD4feuy9mt2h8pGfhn9:crjy+2MFmfeuyaG5n9

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      e541458cfe66ef95ffbea40eaaa07289

    • SHA1

      caec1233f841ee72004231a3027b13cdeb13274c

    • SHA256

      3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420

    • SHA512

      0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c

    • SSDEEP

      384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ef2ba370973a3f8aba1533cb3858921b

    • SHA1

      c2211408f29a46fc26198cddf411694c0e7e0eb8

    • SHA256

      ed575c8bddf21cc6d689646ecfdeafe356e0f9945a282eda79f3b636b77a4453

    • SHA512

      07aac20904fb164ba91b7c619b674d5e0f4d1ec8ba03fbd7e123ef53ff4b134278e01964fb81dfcc2905b760c572a7e13c87114bdb279f1d26632ebe71c628ba

    • SSDEEP

      192:y9Af1alNDVyAI+MU3MrHH3Km31PqTE7x:aColNQ5WQ6mFPqTE7

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      7za.exe

    • Size

      523KB

    • MD5

      e92604e043f51c604b6d1ac3bcd3a202

    • SHA1

      4154dda4a1e2a5ed14303dc3d36f448953ff6d33

    • SHA256

      fa252e501332b7486a972e7e471cf6915daa681af35c6aa102213921093eb2a3

    • SHA512

      ef396d94d83fd7a588c6e645ea5fcfe24390440a03b3bf0ecd05ca6749fd3f9561dfafe725ee0edea51a34d52af26cd311e768aa72f75686cc796abee4757d43

    • SSDEEP

      6144:JuVUUjwolg4owroOvHlq1t423ykka8dX+wWAZF5ULT0pny+6BTXQ02kAfpkKu/Ti:JuVUpob/8OvHs3tbP0pvxkep5ZN

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      Uninstaller.exe

    • Size

      305KB

    • MD5

      7912c369d891f08a154b923e60b3575e

    • SHA1

      ff14a3dbfe7b142a2c2cc318fa076baa35ef2e7e

    • SHA256

      0216a610a1a678e2fcf6f17e492dc72c48fe458ad5de4e26e2a1e4b4380a72a6

    • SHA512

      ba92a21f7497a4f46ac1a4bfee224321e6f70a56455472f2ea509006ffc77072b0d99362e3c9ea6bb1f5e2c31db24c6f751f890a51c0063af8165abd31e9bd4f

    • SSDEEP

      6144:7Q343nM3DoFFjuvf/toNQ8dqLuJoU0U7Hd8CntQOHHM+HFFTjXdpNnT2:93nM3D0Fw/tN8dkmLtpHHHrh7

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      7fbda5b7be6256996d4e59e5f6949918

    • SHA1

      2d36c0e0bfbe450675c6ed044e715abaa85a252a

    • SHA256

      9bb31f7f02231e3166bf52385d804c06da9740e9c6f0bda807b01052ae9fdcd4

    • SHA512

      bc0d36aa6f50041bad05cf48d909ed5a387bff5b111f657591161a288c1be5c20b8c5d69e557b5ea395726d91601b9e6303da81555e053090cfcbf5d44be7f82

    • SSDEEP

      192:cR9jFtTLkreShqlyXMUspRRFtvD4feuy9mt2h8pGfhn9:crjy+2MFmfeuyaG5n9

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      3KB

    • MD5

      dcf1316675177dae3a7935fc39f3e70f

    • SHA1

      839df31f1172d73036de0fc821f2e4d420520a86

    • SHA256

      8818637cd5839d887330d78fde8e62232ca421d3b561800b400dd6c8d4b34e1e

    • SHA512

      7f099faa7a9d6746f0e7aa5b9e7e7c22b249c9f6132c72bc86fa6c9eada70085b6ae261f5892433ff1e4b05f7a9916c02cd4df3a15e686dc6b4c8e0fce67ea10

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      e541458cfe66ef95ffbea40eaaa07289

    • SHA1

      caec1233f841ee72004231a3027b13cdeb13274c

    • SHA256

      3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420

    • SHA512

      0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c

    • SSDEEP

      384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ef2ba370973a3f8aba1533cb3858921b

    • SHA1

      c2211408f29a46fc26198cddf411694c0e7e0eb8

    • SHA256

      ed575c8bddf21cc6d689646ecfdeafe356e0f9945a282eda79f3b636b77a4453

    • SHA512

      07aac20904fb164ba91b7c619b674d5e0f4d1ec8ba03fbd7e123ef53ff4b134278e01964fb81dfcc2905b760c572a7e13c87114bdb279f1d26632ebe71c628ba

    • SSDEEP

      192:y9Af1alNDVyAI+MU3MrHH3Km31PqTE7x:aColNQ5WQ6mFPqTE7

    Score
    3/10
    discovery
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks