Overview

overview

7

Static

static

3

d22ac0b35f...bN.exe

windows7-x64

7

d22ac0b35f...bN.exe

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Racket.exe

windows7-x64

3

Racket.exe

windows10-2004-x64

3

collects/c...te.ps1

windows7-x64

3

collects/c...te.ps1

windows10-2004-x64

3

collects/c...ed.ps1

windows7-x64

3

collects/c...ed.ps1

windows10-2004-x64

3

collects/f...ip.vbs

windows7-x64

1

collects/f...ip.vbs

windows10-2004-x64

1

collects/n...ng.ps1

windows7-x64

3

collects/n...ng.ps1

windows10-2004-x64

3

collects/p...ls.vbs

windows7-x64

1

collects/p...ls.vbs

windows10-2004-x64

1

collects/r...rs.ps1

windows7-x64

3

collects/r...rs.ps1

windows10-2004-x64

3

collects/r...ler.js

windows7-x64

3

collects/r...ler.js

windows10-2004-x64

3

collects/r...st.vbs

windows7-x64

1

collects/r...st.vbs

windows10-2004-x64

1

collects/r...uct.js

windows7-x64

3

collects/r...uct.js

windows10-2004-x64

3

collects/r...et.vbs

windows7-x64

1

collects/r...et.vbs

windows10-2004-x64

1

collects/r...il.ps1

windows7-x64

3

collects/r...il.ps1

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d22ac0b35f2ed10a9b7a60d69470ced46b56f035a0539f4d92cde07218c3c7cbN

  • Size

    8.5MB

  • Sample

    241002-b1d7la1bkk

  • MD5

    807ffef397eacf85462ee49270822a50

  • SHA1

    000ffe879737a2f41f56f3cc6f0aa760268e3720

  • SHA256

    d22ac0b35f2ed10a9b7a60d69470ced46b56f035a0539f4d92cde07218c3c7cb

  • SHA512

    033236c2c1f2e8597132eb6858f2fa1f4d4fb73355299bdf2d7860831238fff94df515a13553505c85e707099a36b4f690e60f11aa20085315f085281409012a

  • SSDEEP

    196608:WLcs/QcdiTOjrTAC19IxjRfcUM5LiQIKbJWr1IbFm:Xs/oTO31ixjRfcH5LB2mb4

Score
7/10
discoveryexecution

Malware Config

Targets

    • Target

      d22ac0b35f2ed10a9b7a60d69470ced46b56f035a0539f4d92cde07218c3c7cbN

    • Size

      8.5MB

    • MD5

      807ffef397eacf85462ee49270822a50

    • SHA1

      000ffe879737a2f41f56f3cc6f0aa760268e3720

    • SHA256

      d22ac0b35f2ed10a9b7a60d69470ced46b56f035a0539f4d92cde07218c3c7cb

    • SHA512

      033236c2c1f2e8597132eb6858f2fa1f4d4fb73355299bdf2d7860831238fff94df515a13553505c85e707099a36b4f690e60f11aa20085315f085281409012a

    • SSDEEP

      196608:WLcs/QcdiTOjrTAC19IxjRfcUM5LiQIKbJWr1IbFm:Xs/oTO31ixjRfcH5LB2mb4

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      10KB

    • MD5

      18e0d3949bd0d1a9f45dbee66ab2ebcf

    • SHA1

      cb32adac5ffbd82dd550989bd7fe990f71cf9b99

    • SHA256

      372dc5534980d79d4e20147fd8d7bb20e76d91cad3d086cc1ed7bd03bd581a78

    • SHA512

      c41b35df327933f4ba9218b326dead3724049676df5cda0a0f7f57b28b92a7efde3832af262a96d545db5e1f7e01a1191f1b68b395c592d64fdbcae80273ae45

    • SSDEEP

      192:tlIjtIHZt3q9LFWK/V/FX6H3ESdA6pcTYlQxb:DlLq9LI0RWUSVcTaQx

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      26KB

    • MD5

      ebf5c733481e2f6ddaa04fab99553616

    • SHA1

      7a979fa5609dd29315089c8640fabf3ca01be51d

    • SHA256

      3b7ae06666fb4277974766409349d0f14d4358e15a20c6c078a29c6021b4a779

    • SHA512

      37a61a13ca08bcd0c7bf84c0d1ec4c4d7320b57d60fa702a1c06f8e2a5a8a9c16b4b6756147357713ffafe26dea9ed42f45e5279c4999121a5589f1069760d8c

    • SSDEEP

      384:O/h0rfwf/Dr+td/ED+hHzn0zHyPGi//iKSfVrdIgMHIvSeu4PIXzF:OumitBs+hT0z4By3V0HUvHPoF

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      12KB

    • MD5

      87cdd064d650b3cf72f8a103bd73bace

    • SHA1

      f8ea12681f5a5bb97ad9b525ef12e88fda832f8a

    • SHA256

      a29754f0b21fbb92265f1fb924b3423a330704bbf56796da67aeca876dbd3326

    • SHA512

      6ef757c6e8ad737a3755d0e387c60b596b2261ae10d02b293c1da2c1732901079a00d7f8a5fdb203f8cf984b2d8dfcaac99a43fb8ac011eaab85b56270223a88

    • SSDEEP

      192:a3j3Iiz+SdfQxx/5UwJmaZ09H68cAGythSXESdA6EwX4shd:Mj3Is6xx/m609a8cfythS0SgwXPd

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      Racket.exe

    • Size

      127KB

    • MD5

      7296fe45bafa3cf6935c91fcebfdd605

    • SHA1

      7f5f276d4b3492f75eceb6cfd303f831b35ea283

    • SHA256

      40ed77b2fa5a4c4392e05547124c6b46841a5087091057ee09c62be3743038f7

    • SHA512

      bcabae89a1413be04d5abe1daf458af18ab24a8bdf7a710216edd2390c0ad9b1e907f2232fdd08c3466e553ef2689a363cde53c731a3300a921a07ff3f46b381

    • SSDEEP

      1536:wpkYxRCGLiDKh4wjopWQ4Ot8Rm4xxkk4fZW/vgM8R3bCy8P7VKZVQ:wpkYxRCLD24w04Q/dfcYM0C/P7V6y

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      collects/compiler/distribute.rkt

    • Size

      35KB

    • MD5

      f68635b9ec70a6886e7b2ba614cad236

    • SHA1

      cad0b25c3ded1341ea348559afa9b493410fba01

    • SHA256

      30604ca7c23efd72fe179bcb8d64cfcdf2bdfe54bebdc23c162e97f1ac6ea5be

    • SHA512

      9d0c612d4737055e559f0fc468444f6882a8bc895b2e2740a98962bb626147969c28abcaabf093d42a6718411e6e63b0c452b0748a08335e56cfcf8235864f1c

    • SSDEEP

      768:idEZ1H6bmXQ/q5qyobYEOPU00QsAQw0N+3gQRj+QnntwsiTGRxwNFkoaAaoGqOFw:GNbe5BZM00/xctL7bI0an

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      collects/compiler/embed.rkt

    • Size

      117KB

    • MD5

      98a02738357722aaa079b869dbd55e6a

    • SHA1

      1b5605f997b6f3d582d5d994127ac39747ca410d

    • SHA256

      f8db76e70de13274ef4137d5f4b9b2ece70547bd6b392f38bfd2330282b65d71

    • SHA512

      f75c8b8ab8d13ebade2479299692bc5f07450878b2cb95842bd063cbbe8296962497d90598d6670b207c5237a116b44d16eaacd804d7b47d4bc3d6181e0729f7

    • SSDEEP

      1536:d0ND819KlGNtM4pXe7BqJUX28/WEBuCP+iMOlZIn:d1tM4xcXCOfa

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      collects/file/gunzip.rkt

    • Size

      33KB

    • MD5

      286b0288aba9d6e7b77bc7c2c48d425a

    • SHA1

      15ed8ed5ca22328f6f1c12409c920c45c6402f9e

    • SHA256

      c0c0adf0d04434c25c6bb838f2db5226d69c2edc50375c9b1ae6029824e21b2e

    • SHA512

      dda70f5099c645b69a470fbef394415a5bc2fd5888673a0d8aff405f033089e282ec7385c7c622ff85ee7b8772139dc22e9ec17901b28722eb62d8f9373563c9

    • SSDEEP

      768:osr3WUxMQOhBtV79IluWt17OX6Hy2gVlqQ/SQlLS1t/:x3Wpx7inn7OX6CGQ/nCJ

    Score
    1/10
    behavioral15behavioral16

    • Target

      collects/net/url-string.rkt

    • Size

      18KB

    • MD5

      9969e019a9e2cfdb39a490fa867eca1f

    • SHA1

      6691095ab804e822d2f013bae3197bd506dfa8cd

    • SHA256

      cac864e3e50f9c7434b1d7d0ad67c29f642db6b043b8ddf5de1781a552c3de0b

    • SHA512

      8b6f0156957f625bd1d0832ed7dde4694b7dd39a6a4a2b0dc9a2a6273214ef84f35f9a18ba3223fa8cfd550b116e4d461798fe08c297214b645b7e822c236d86

    • SSDEEP

      384:39+CGCjqKckj+V3fq9I9yfo/uoRaAn4XvwrcrjoKthj6w/U8ur5QP:39+CXjqKckj+V3fqO9Uo/lR94fwArjo2

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      collects/pkg/private/addl-installs.rkt

    • Size

      8KB

    • MD5

      d82e10a4f72128dc3ea1a2219eec2377

    • SHA1

      f1a8f7ef3a314693275e8403aa97357df9f2daa0

    • SHA256

      228ce454016ac5e19f5a0c66eaa801f3bdcaecebaf7309d461dfefeb8558c84e

    • SHA512

      67c4ee51ffb3775693a94b3a33d74d861bf59c575d4c6210ae8044995402e5f66222bfaf33bf6ef156831b1513685aebef2baf96ccb89d6d364d46ced1ea5f11

    • SSDEEP

      192:YAPh/z3NlAmS/mHNDlqmy50zsgoQtFYkwvFtcQ7g+YxaGYo0k6:93NlLSOHNDlqmy50sgoQtFXwvFtcQ7gu

    Score
    1/10
    behavioral19behavioral20

    • Target

      collects/racket/contract/private/helpers.rkt

    • Size

      12KB

    • MD5

      70c23acd80eccc8a270a7cb92edf263b

    • SHA1

      7782c7b5f6dfa2630fe4d7146148e23967969cb3

    • SHA256

      106e56550a5c36310c97e8a921f9157dbef811fb256f6b4d3f8a1f0d2fa099a1

    • SHA512

      db7fabcc38132fe5f1de5c80cdd7eaa745d4f6b4cd5f0919f3fc0a64594c49473ed6d83a1b5ffb6255fd859f96489fd3a37ca22de966828798e80fc6aef2f419

    • SSDEEP

      192:zIvF0Z5jG76+dWZjybA6yFtp3ZBFF65SB5o6VdU3rv:89s5y76+kZjybA6yzppBFp+cdU7v

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      collects/racket/match/compiler.rkt

    • Size

      31KB

    • MD5

      01ec917a2e4d4c7a1a013b5fef0036dc

    • SHA1

      5a4304125562fbb0c74d89d4118a493e8148c572

    • SHA256

      849df7d0679ef5ceb8ea5de7b7f3aee33d9f7a01bef8f959adf66fc3c0c390e8

    • SHA512

      475f14f7715bd0a5457fe7492a6786594375a939810fb28845f234c6786c28abab54420c8f9d18c522079b15a2b3171ae2bd950f81c821d3ebb53b12fa9acca5

    • SSDEEP

      768:QZF6kkzqpad1OtU7aHWAlu/4xE5y4YwTd/D4utryD0OH+3b5y3rtA/5IM4PUlGE9:Q3I7R220CYE3X

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      collects/racket/mutable-treelist.rkt

    • Size

      16KB

    • MD5

      0b3190f67a34a862e2c679ca8b24297b

    • SHA1

      2a209eb8dfdc4be5d28c11265a2e38972669155c

    • SHA256

      6d21fe7053ad2f714ae4a974c1dd14d7d5fb44d901fddc7986057e149c1dfdf0

    • SHA512

      d49138827b109ddf6d5ebad4bb04da58618036511c39bfe5a584e8f9bf4870f8b4597918a9adf4c725690a0206c8cb50cb5a2ee9d8ffe8d6de64f0dfcee794f0

    • SSDEEP

      192:yH+YB04gvclkuKSGfE0jlfNqBDXqpWj7DMD5L:yHd0FcKhSGfHjlfN22pWj3o5L

    Score
    1/10
    behavioral25behavioral26

    • Target

      collects/racket/private/define-struct.rkt

    • Size

      51KB

    • MD5

      849a3cab2272536c304430984621721e

    • SHA1

      92599d492fce9520ee65368175bc95bf0bbe062f

    • SHA256

      f9adb016ee5e8e4732c8dc6746030e77b3f9a7c2514e956b0970898467b0fb85

    • SHA512

      7921477c647e0d3b00d82465802e59cacf176e542ba6416a0787c7990684bbb610a785399e11864e2122d1b8b4e132f69e6b22bc1003e09c1e3491e7788f0df7

    • SSDEEP

      768:DAGgXcREbs0eocqz/T4EYRj6IRMSonnfSPlGuYn00xJZycL4uO90O9NhXsCydq:8GgsRwmGJu7uO+nbq

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      collects/racket/private/set.rkt

    • Size

      15KB

    • MD5

      8d0e06c87d03d200e0659d33f6a8fd08

    • SHA1

      75f77465d3976c92379b2375f2598f19b2f56c6f

    • SHA256

      a8dd37812dff75f23f5eaed1bd045798d82625b78147d1fe0d87b0386a215082

    • SHA512

      81284f9a6279626aeac21bfc8de29884a33edcc84abbed99acef60eb6a77b3150e181ed19e337bd4b1aedf84b4ef843df997b23b2078e4bcab6d48196ae028a1

    • SSDEEP

      384:brFCO2trND9d+XI8XRcoqNx7PYNukAgfudRFG5hYSYDXpYiYyUYthSA649RxKixz:brFCO2trND9d+XI8XRcoqNx7PYNukAgm

    Score
    1/10
    behavioral29behavioral30

    • Target

      collects/racket/private/struct-util.rkt

    • Size

      815B

    • MD5

      3b7314a19a8582f373f8b58b20378e19

    • SHA1

      06dc430a0f94037bfc2f4ff66b23ff730619f0e7

    • SHA256

      9819671b18d126b8793840204b97a300f705a965afcee119edecec0c4413ed79

    • SHA512

      4b0cc31abf7f72e2746d49ea5f644a92b84bfd588ff5b29cb6488b08408aab103e9c180d5899cde4f3effcc94c7432c8a070f58bd60880cb4cc50bf3dd2ec58e

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10