Overview

overview

7

Static

static

7

b4b086747a...0N.exe

windows7-x64

7

b4b086747a...0N.exe

windows10-2004-x64

3

$PLUGINSDIR/extra.dll

windows7-x64

7

$PLUGINSDIR/extra.dll

windows10-2004-x64

7

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ON.dll

windows7-x64

7

$PLUGINSDI...ON.dll

windows10-2004-x64

7

$PLUGINSDIR/sign.dll

windows7-x64

7

$PLUGINSDIR/sign.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4b086747a1f5e8f6f861330cccaf190N.exe

  • Size

    155KB

  • Sample

    240914-r8plaszemd

  • MD5

    b4b086747a1f5e8f6f861330cccaf190

  • SHA1

    1780d3329d476c50da48f5a2afbe0d4523afdede

  • SHA256

    d919177d159976b494572bc195670eb08e7d068a77c5a0700100465076efcac8

  • SHA512

    6fd549a60e9693a57d84d60765eea95f20c9e06065a778a33024eca01f1ccb0548f478e47fec4bb5bfa4ccaa50920807080440507aab1106e320dde7273dbb08

  • SSDEEP

    3072:x5BuYAVrgUCPnZbawyazB3HZLel56Y/yKoCEymP600F+219V7gW:x50gUChbawN5W5T/yK1mPRG+a9VP

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      b4b086747a1f5e8f6f861330cccaf190N.exe

    • Size

      155KB

    • MD5

      b4b086747a1f5e8f6f861330cccaf190

    • SHA1

      1780d3329d476c50da48f5a2afbe0d4523afdede

    • SHA256

      d919177d159976b494572bc195670eb08e7d068a77c5a0700100465076efcac8

    • SHA512

      6fd549a60e9693a57d84d60765eea95f20c9e06065a778a33024eca01f1ccb0548f478e47fec4bb5bfa4ccaa50920807080440507aab1106e320dde7273dbb08

    • SSDEEP

      3072:x5BuYAVrgUCPnZbawyazB3HZLel56Y/yKoCEymP600F+219V7gW:x50gUChbawN5W5T/yK1mPRG+a9VP

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/extra.dll

    • Size

      32KB

    • MD5

      e0973c5de6580e6f7b593c5ecee952eb

    • SHA1

      c0b5c91dbaea9d7e5babc520ebf120b114bc9dc6

    • SHA256

      b9476ac58178a5dc221aaa8ea3af5a818acfabdc2b15ce064bd70d975a4f5787

    • SHA512

      f0dab15058ff2c5fc969b4444257c1edff5efc793f82cf0d36e46d00e6949147be5d012a1a83cb540149ebb05f610e7e18d3dd26cdc6072a51f154293405cefa

    • SSDEEP

      384://6rahMFmIYV3VNmOIIHvs2kxnCmXvnIBgWYwP36VicBZOG2FhKKlSQ6XyJLaIrF:ar+113VoOIqGnC9Rn3OiOohPw+cOnRT

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      55KB

    • MD5

      44c61e6da6cc91ca3435010640fd4e04

    • SHA1

      2165fb1209a9ee7d8f11a416e08d78e022962d3c

    • SHA256

      2ee5f911ba4d1aac8af16f7eef7dc69b7382e7c1998d06f1d5590785a42e5a93

    • SHA512

      18e838d7f095eb5d8dc62f5d75486926dd4b254d03afef05e1e3bce6808fae73b7a46afbf1a1dd14dcf52f1883db6c4c7a9b5d5dbafdfa3c12dd9562b3ef5bcb

    • SSDEEP

      768:JrL63Ru4/rnNHQTkX11Rky6CAnezyhrajgYQnTED4zlkOvXvM/xy0+r7bEW:JrMjgkXMrYOrNV/pJvMLC

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsJSON.dll

    • Size

      7KB

    • MD5

      78b913fcd04259634a5e901c616e6074

    • SHA1

      ad5e1c651851a1125bcad79b01ccdcfa45df4799

    • SHA256

      e3ce60666bb88c2412615ef9f432ec24e219532dee5cc1c7aebc65ed9ec94d59

    • SHA512

      cbe07179dd93011f3d9a8f83541961ff34fb83d96658ac82a433ef0aa3399b183eaec3e6a49ec1c1e478d1eada2d3ebc78ffb1ae0574984ae66a7a9cab5d59e5

    • SSDEEP

      192:QTIBadVjvTMEE7bZATR4N65bhztNDcrGu:QkkV/JE7IR865bhTcau

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/sign.dll

    • Size

      22KB

    • MD5

      57f3c4d6ca2b4f053ca12a9c6a3d742e

    • SHA1

      8cab22cd69d4d5d37be62ada57f28d1df7a778f0

    • SHA256

      d56fab0890d11a26fea9890ff6a4c534c0d79431d91ff494bc120767775296e9

    • SHA512

      ed2969f87bf6fd893f528ff8e047b3e99afb331c2c449ca32233baa353c8c3e5c2f68f12e091a85500198be77610de498b9eb196711a67353172f75621fe20d0

    • SSDEEP

      384:Ngo6C276kORyEehyMs4SVs/uGuq6MhAm5ADO59XJTwJGiMoIb7ZbUuzmKKMkmRGz:LD276kO8EnMHuGR5dXZwrMR7BUwmKKMc

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks