Overview

overview

7

Static

static

7

69320ed091...0N.exe

windows7-x64

7

69320ed091...0N.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

7

$PLUGINSDI...ay.dll

windows10-2004-x64

7

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    69320ed091c0b632eaddf8dbbf8b98c0N

  • Size

    108KB

  • Sample

    240908-htblfssfjj

  • MD5

    69320ed091c0b632eaddf8dbbf8b98c0

  • SHA1

    27b247221b3bec01d087d284898515be719cd13f

  • SHA256

    63cabe3f1b32a786c66ca4c54160cd6676514ae67e0342ee08e0d0466a7e5ac1

  • SHA512

    b1511a57f64724ee7a74a0bb688e16e214f4c0b75f86e46597d1333e8adf58f033b91d69cf10f9842e6a9c15be91eb7d57aedc1a37483765814f35c8ed73a5d9

  • SSDEEP

    3072:PKL0xw3sSx2bPnJ45GGeTh+XDknO3fYoquuB4:P2sSAbxZU4GfYoquG4

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      69320ed091c0b632eaddf8dbbf8b98c0N

    • Size

      108KB

    • MD5

      69320ed091c0b632eaddf8dbbf8b98c0

    • SHA1

      27b247221b3bec01d087d284898515be719cd13f

    • SHA256

      63cabe3f1b32a786c66ca4c54160cd6676514ae67e0342ee08e0d0466a7e5ac1

    • SHA512

      b1511a57f64724ee7a74a0bb688e16e214f4c0b75f86e46597d1333e8adf58f033b91d69cf10f9842e6a9c15be91eb7d57aedc1a37483765814f35c8ed73a5d9

    • SSDEEP

      3072:PKL0xw3sSx2bPnJ45GGeTh+XDknO3fYoquuB4:P2sSAbxZU4GfYoquG4

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/BgWorker.dll

    • Size

      2KB

    • MD5

      33ec04738007e665059cf40bc0f0c22b

    • SHA1

      4196759a922e333d9b17bda5369f14c33cd5e3bc

    • SHA256

      50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be

    • SHA512

      2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/ButtonEvent.dll

    • Size

      4KB

    • MD5

      55788069d3fa4e1daf80f3339fa86fe2

    • SHA1

      d64e05c1879a92d5a8f9ff2fd2f1a53e1a53ae96

    • SHA256

      d6e429a063adf637f4d19d4e2eb094d9ff27382b21a1f6dccf9284afb5ff8c7f

    • SHA512

      d3b1eec76e571b657df444c59c48cad73a58d1a10ff463ce9f3acd07acce17d589c3396ad5bdb94da585da08d422d863ffe1de11f64298329455f6d8ee320616

    • SSDEEP

      96:hrA2+5HGZFYJf9D8IjDflDCoMzncsGSmE:hE2+5mMJfJ8v1zFGSm

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      15KB

    • MD5

      7caaf58a526da33c24cbe122e7839693

    • SHA1

      7687112cb6593947226f8a8319d6e2d0cdef3b11

    • SHA256

      19debdc4c0b6f5dc9582bda7a2c1146516f683e8d741190e6d4b81ad10b33f61

    • SHA512

      aafd0cb2abb3d2dee95c2d037a6a1a5bff0518e3210ced0c39e6d6696e4fab4734df01476fe9dcb208f02c529cd03346bc8b7f3319ae49701bbf2cb453d59bae

    • SSDEEP

      384:bLGI+uz/G3ZPRHncbDmMWj5aa3ZUFZJGEdnz4mP:XGUz/G3JYmMGaKZUXJGEdzX

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      bf712f32249029466fa86756f5546950

    • SHA1

      75ac4dc4808ac148ddd78f6b89a51afbd4091c2e

    • SHA256

      7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af

    • SHA512

      13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

    • SSDEEP

      192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsArray.dll

    • Size

      6KB

    • MD5

      89d40ecddf3ce6f3b0e6a84f40936912

    • SHA1

      97af44bb909a7701f46ec0b4bc9a52f27140ca21

    • SHA256

      05d59fa3f6cf237c999b5f73b7d6a4d8ec6a4eed4d0d9c6a12cf08944f2bb770

    • SHA512

      bfa23ae2d42831783a4132c313d7d4fbd1e91eb1445a4a82be3b577284e830b5282f85bbc9261291370e6673f7f0e2e17aae0b0e41495a618f22905026e82ea1

    • SSDEEP

      96:rXfjvtzPsqb8iI/ZK0DoeUWUZ7P5tWycDVIzfBG1IfA7gfMxLfAdGOL:HJ1b8iWZ/rUWoRMy2VYJGP0M2dGa

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      4ccc4a742d4423f2f0ed744fd9c81f63

    • SHA1

      704f00a1acc327fd879cf75fc90d0b8f927c36bc

    • SHA256

      416133dd86c0dff6b0fcaf1f46dfe97fdc85b37f90effb2d369164a8f7e13ae6

    • SHA512

      790c5eb1f8b297e45054c855b66dfc18e9f3f1b1870559014dbefa3b9d5b6d33a993a9e089202e70f51a55d859b74e8605c6f633386fd9189b6f78941bf1bfdb

    • SSDEEP

      192:SbEunjqjIcESwFlioU3M0LLF/t8t9pKSfOi:SbESjFCw6oWPFl8jfOi

    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks