Overview

overview

7

Static

static

3

HW ON TOP.7z

windows7-x64

7

HW ON TOP.7z

windows10-2004-x64

3

HW ON TOP/...SE.txt

windows7-x64

1

HW ON TOP/...SE.txt

windows10-2004-x64

1

HW ON TOP/...V1.exe

windows7-x64

7

HW ON TOP/...V1.exe

windows10-2004-x64

7

ss.pyc

windows7-x64

3

ss.pyc

windows10-2004-x64

3

HW ON TOP/PORT.exe

windows7-x64

7

HW ON TOP/PORT.exe

windows10-2004-x64

7

port.pyc

windows7-x64

3

port.pyc

windows10-2004-x64

3

HW ON TOP/config.json

windows7-x64

3

HW ON TOP/config.json

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HW ON TOP.7z

  • Size

    28.3MB

  • Sample

    240909-a3tvdstckn

  • MD5

    35946705c48821d01b63cd770a554d9d

  • SHA1

    3976ccc76ee77aa89c8c28ea4858dae40893e7b7

  • SHA256

    0edff07e0a17ee2bc2264f2258a216d235f824a7d8f0a1656b721ce87e043d8a

  • SHA512

    fe610fc2a2adb46b7a0d989ee9c7ac5a306501005fe186dad55e201050905491726cebd4c446fa3c0d110226ce7be0693c1678ff2e641040f7a8be17408f0ffc

  • SSDEEP

    786432:TcHQ93I4kGjRecAd9J0Ov8XucD9Khvl7GCvLmA0:FZPkA7iX8XucD9g9GUu

Score
7/10
discoverypyinstaller

Malware Config

Targets

    • Target

      HW ON TOP.7z

    • Size

      28.3MB

    • MD5

      35946705c48821d01b63cd770a554d9d

    • SHA1

      3976ccc76ee77aa89c8c28ea4858dae40893e7b7

    • SHA256

      0edff07e0a17ee2bc2264f2258a216d235f824a7d8f0a1656b721ce87e043d8a

    • SHA512

      fe610fc2a2adb46b7a0d989ee9c7ac5a306501005fe186dad55e201050905491726cebd4c446fa3c0d110226ce7be0693c1678ff2e641040f7a8be17408f0ffc

    • SSDEEP

      786432:TcHQ93I4kGjRecAd9J0Ov8XucD9Khvl7GCvLmA0:FZPkA7iX8XucD9g9GUu

    Score
    7/10
    pyinstaller

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      HW ON TOP/HOW TO USE.txt

    • Size

      381B

    • MD5

      5f02b533f380c4eb2f65f582a87c8cb8

    • SHA1

      69f22a401ce7e8d8295bf61e58c483166ab9470a

    • SHA256

      822e2b28adb5c87f45a07c062efaf63987cd09903c2a5c96d360826b292fe7d2

    • SHA512

      8890ce344d5e56ddf7f324215bf8ad0cfeaff682ea74a908c0b5d8ec6f722596fca817493df05611b46c30e6cce17cdb9ad8521ad2914bdef570f02301a0aeeb

    Score
    1/10
    behavioral3behavioral4

    • Target

      HW ON TOP/HW FREE V1.exe

    • Size

      25.7MB

    • MD5

      2461fcf8f729f43aa9462f10987dcf83

    • SHA1

      016ba60a7217ca9f46b1c06406aa4a821161e18e

    • SHA256

      25849eb1e4fe2f98619338be86ab7943f3dcd0fdbe34839a0181e9708e251aa3

    • SHA512

      dd2ecd66faa9e74287d8e1af9edd2888f780782b91c926a8be24a1d82923f8dabcae660bb79e9acfdd69cfd63cc5692308fc51a6782e074858ab34983117dad1

    • SSDEEP

      786432:iL+1QtIJ2j6+s7LWB75zuPNdS3IL55qW80h9ET0sbST:CKiIJ2qHWB75iVdSG5cW76TT6

    Score
    7/10

    • Loads dropped DLL

    behavioral5behavioral6

    • Target

      ss.pyc

    • Size

      13KB

    • MD5

      ae7fa41ec3a7995d4db797fc827aee4d

    • SHA1

      2d6f03e121c1d414fee6d49baf8c713ff3cf7335

    • SHA256

      06339586a4212461ad96229441247ddddcb42a8f314a85d3b694614341f14033

    • SHA512

      38189b84b9f0515aff1a9638ba3185497760c8d0a62670e939b7f8c0b0370856d9094742d579159c94b0d9c09cf8e57d8d3aa353babfc61cb1f4c70b3715a111

    • SSDEEP

      192:64p70dVbrranuegwKaw4RSf4PMgBH/sHsSMsCqZWP:v0vran+Iw2SSMoUHZMsCXP

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      HW ON TOP/PORT.exe

    • Size

      8.2MB

    • MD5

      50ce4e3cba78c5bccf56ddb3c6ae2bdb

    • SHA1

      60be796393aa13ea66cdb3dd177fcde747bb3cef

    • SHA256

      9595495285ab65c1e138f06c781030154e05831030bbc898e1a8cc1da93f059b

    • SHA512

      3f0ef26593f74297f9b0ab27c276926812d166f18ca932c16853598957ca03629e754e923b04c186effb31a80604eeb700528cfe9fd51e4fc9d0dcd74898172e

    • SSDEEP

      196608:GnzzRrUcA1HeT39IigDvKub75bcjWgb3SEezfhMkZ3piRxU:I+1+TtIisvB5IjWqilzN5N

    Score
    7/10

    • Loads dropped DLL

    behavioral10behavioral9

    • Target

      port.pyc

    • Size

      2KB

    • MD5

      12a0f7a4e78066e52386beb1a3dcfb47

    • SHA1

      292ecad664e53097509d9d21f979668de8889446

    • SHA256

      4512cee3b841d4d3a5fcf789f86f04e86d85126dc07fe2985debe134c5848d8f

    • SHA512

      12918f4173d2c4a2bbfe82d4672f9139afce09f49cc0c723ad0add1043978ba1f5afb791bed810589fca086a7984e338f01f948f2124428bc4a3167076cbfc92

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      HW ON TOP/config.json

    • Size

      163B

    • MD5

      62b6ee0a9e09d6daa1b4ff2e33b10554

    • SHA1

      ffc9da8bdc2511aefe1d2a2921ac05ba97b6f452

    • SHA256

      cf151234ddc0f6937e96e7af0911221fe3560611570c0e3967ec8a4fcfa72d58

    • SHA512

      e97078aed131e89f927c1c5ef03ae7b053d78c7b0422b3416cc8e33be43059edaaed09170687c9136455199ae424eca84c9524a3c57283ae73ec8ef7604b2a20

    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks