Resubmissions

01/09/2024, 14:24

240901-rq7ddstapl

01/09/2024, 14:15

240901-rkpldssgrl7

General

  • Target
    Bootstrap Studio 6.7.3 x64_SoftoRooM.rar
  • Size 139.4MB
  • Sample240901-rkpldssgrl
  • SHA256 e1d2362f0bf622de97c99833516fa7c50ebce8bc6e824a7a3dedd3f8b487c679
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      Bootstrap Studio 6.7.3 x64_SoftoRooM/Bootstrap_Studio_Setup_softoroom.exe
    • Size 138.3MB
    • SHA256 bfe582faeef56b3cd896914534451912367a2f0cdef7a6bbe4412fb45160b0bf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates processes with tasklist

    • Target
      $PLUGINSDIR/SpiderBanner.dll
    • Size 9KB
    • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      $PLUGINSDIR/StdUtils.dll
    • Size 100KB
    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      $PLUGINSDIR/WinShell.dll
    • Size 3KB
    • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Bootstrap Studio.exe
    • Size 168.9MB
    • SHA256 1a27d9f8869d5b443ba850fd250188efb1a74c582701edc1ae0928bf6797fc4d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    4/10
    • Target
      LICENSES.chromium.html
    • Size 9.8MB
    • SHA256 921452a09f92f10da4cfef0521acd6ee6c689c630661ed35189e793de2c99fc5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      d3dcompiler_47.dll
    • Size 4.7MB
    • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      ffmpeg.dll
    • Size 2.6MB
    • SHA256 7f9d1fd65112708875f5e97f47041c5140c3f658910630fa48c51acec85e410c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      libEGL.dll
    • Size 469KB
    • SHA256 91b210c66f501e762073def3b56c0b31acb0c128980bc607b057770f9bd716a2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      libGLESv2.dll
    • Size 7.6MB
    • SHA256 9f94f89bbd31bdc4ab7376186b3618a5c228497ca59fc930783a3cbc2eaef7ed
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/.eslintrc.js
    • Size 73B
    • SHA256 df85748adac0bd2d13fb6f3b3833d3cda0429e60296a111057dc05fbe3b00025
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/install.js
    • Size 710B
    • SHA256 52c970cf01ed6e93f04300a2e9f68d1b9a00a4d0dcfaa77aa5d520fc8e2a0a73
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/Channel.js
    • Size 6KB
    • SHA256 53e92988a025009b192b72be110bd240b5653f88dbdec93e515e3e401e7f94aa
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/agent.js
    • Size 31KB
    • SHA256 cc6987488bf45f73e0ac5d8bbe59912b70a144cd73b53c83919f188f4cc3f2be
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/client.js
    • Size 57KB
    • SHA256 b1a0b2c57914a7b70c7711524f190a8c8c344b74f4737017d33a7582558d5ab9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/http-agents.js
    • Size 2KB
    • SHA256 477d34701116572f2af06ac545994f3e2d2f14b26c5ae76bff2b13de2289339d
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/index.js
    • Size 736B
    • SHA256 01af117837d5822f9fa91208f45b0a630774117aa40f80f93b82a7495c24a6d7
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/protocol/Protocol.js
    • Size 62KB
    • SHA256 910a56c80040bf1ceb1676e965c40838c6f8f8a67fafd976b17ef32c66ed47e5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/protocol/SFTP.js
    • Size 106KB
    • SHA256 9969e72b877c21bd17234f2084fa26575365b9a516951173d645a7802c43e12f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/protocol/constants.js
    • Size 11KB
    • SHA256 d97ad075a5799bc446037f3f493682b2c9ac8d5ffe359c05c8b19eb56fb716d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/protocol/crypto.js
    • Size 46KB
    • SHA256 a729d2064e787e2a4589c25a284444fe54a58b7434a4e6e5e8e9c73c6d91e28e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/protocol/crypto/build/Release/sshcrypto.node
    • Size 90KB
    • SHA256 9858496c5ae2523558d6292432a63506271f4c74d31d9e77283ec0b9694dbce7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/protocol/crypto/poly1305.js
    • Size 22KB
    • SHA256 55a579ed6a30022054fd1dd822b1b49e2fc51bfbdfa933bfe441de8b7e4dce40
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/protocol/handlers.js
    • Size 423B
    • SHA256 b15f990134a4f69b7492d0b875d80d8c28228907045619b01ec30871ac711df9
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/ssh2/lib/protocol/handlers.misc.js
    • Size 36KB
    • SHA256 7fc29dcefa1eec69a2e27356411fad507fdb58d72cc37eb1326faf258da79df2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 6KB
    • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      $PLUGINSDIR/nsis7z.dll
    • Size 424KB
    • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      $R0/Uninstall Bootstrap Studio.exe
    • Size 254KB
    • SHA256 3d9455e6726161536916165e44e659f431e478424f9d38c3815463e5f8bae83a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

    • Target
      Bootstrap Studio 6.7.3 x64_SoftoRooM/Crack/keygen.exe
    • Size 151KB
    • SHA256 9a6034593d47e6acc583dfcfeb439851d90153445ef6f7ac6a9f575c057e4e34
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Loads dropped DLL

    • Target
      Bootstrap Studio 6.7.3 x64_SoftoRooM/Crack/libcrypto-1_1.dll
    • Size 2.2MB
    • SHA256 75f624c110f1d11a48e5e1b6ce16d92835cff70213287c9b0147baa3e4880844
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Bootstrap Studio 6.7.3 x64_SoftoRooM/Crack/libssl-1_1.dll
    • Size 513KB
    • SHA256 6c5bd35dc01424116e19465ce014c8d4e2fd373fb2e3c9243b9391f2666cf854
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

Score
4/10

behavioral7

discovery
Score
3/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
7/10

behavioral30

discovery
Score
7/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10