General

  • Target

    2397e5e48fbdbefac58bbdaddb4558501fea6675d8b93a781674349c6b13e5d0

  • Size

    1.8MB

  • Sample

    241002-mp9d5swakg

  • MD5

    b90250c7696bdbbe3bc6efe289fcb395

  • SHA1

    5cec774741c87424a0fbd0b8a2f3b448f33dbf80

  • SHA256

    2397e5e48fbdbefac58bbdaddb4558501fea6675d8b93a781674349c6b13e5d0

  • SHA512

    5bde355c6d64e00fa3b90ff7d19c3f0321ce740a0b80283e70c327a07c16cbb51d831d6d1d1f2fd39fa5bba41f6f6f813c5159fbe0a4a6f779919acdfa838646

  • SSDEEP

    49152:CWD3Jz+nf5ssEMun2wrMpGq0vtoqs/WWV37f:C452nunRTq0c/jV3T

Malware Config

Targets

    • Target

      SETUP/Setup.exe

    • Size

      60KB

    • MD5

      92a5863a78cf8528ce1eb8404b8f73ba

    • SHA1

      f474db1f541e608c1507bc4d1b876ba47643b1fc

    • SHA256

      cf0223d50aadc1335eaf0ac7debfa07897db5305224eea8c959094d4a1788eac

    • SHA512

      ba7349b02cba3a545d5e9a12c67636b55eac8b5403db29b6b2ab5c61babcf889e75aa23a75ed7982b05e9ee06f3ce4ce8a95511a177a1b0cdb97dfb0e6e8abf6

    • SSDEEP

      768:WxsjMjnOpfAmfo+rvX+zTKVvEIRdvk0inbcuyD7UeoDQUAv13+vAbUO:0uMCI0uzTuvrHvQnouy8jDQldn4O

    Score
    7/10
    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      SETUP/Support/ASYCFILT.DLL

    • Size

      144KB

    • MD5

      c89e401800de62e5702e085d898eed20

    • SHA1

      72fb4f088c6ac02097b55fb267c76fbf5e0fa1f7

    • SHA256

      de83c9d9203050b40c098e4143ef8f577aa90016c7a64d4f2931b57a4c43e566

    • SHA512

      70006d70dcb47361ff43e4f7c458655ad2474b70cb917873aa77d2cc06465a68d375d36c494d154a03dbbff891df7dd6cab3d2c7b08e8650b9ff170e30838070

    • SSDEEP

      3072:h+qD1Cd/Oa5kXFlqkFGr3CAP7LCyInPEggen5Ez:hlCd/OaaFEjCAPKyOE6na

    Score
    3/10
    • Target

      SETUP/Support/COMCAT.DLL

    • Size

      21KB

    • MD5

      3b180da2b50b954a55fe37afba58d428

    • SHA1

      c2a409311853ad4608418e790621f04155e55000

    • SHA256

      96d04cdfaf4f4d7b8722b139a15074975d4c244302f78034b7be65df1a92fd03

    • SHA512

      cf94ad749d91169078b8829288a2fc8de86ec2fe83d89dc27d54d03c73c0deca66b5d83abbeaa1ff09d0acac4c4352be6502945b5187ecde952cbb08037d07e8

    • SSDEEP

      384:23Fob3slaN3oF1fHICOoMzMv/QTIBjDVquODJXsUW7ftWs6:Yo7s28JnOxzMv/QsBjRqugXspd

    Score
    3/10
    • Target

      SETUP/Support/GAPI32.DLL

    • Size

      81KB

    • MD5

      dca8111d07cadd143207fba3c2ca4b98

    • SHA1

      6a55144ded3f303fda2b4bb0cc0eea434a57ecb6

    • SHA256

      391827931ea7e6b709cc888ffd0c3eba99060ea51efadcb54586fcfc1ed73a61

    • SHA512

      56ca33657ecfc23037863ceedd5dd0d9fc2fe3c09ac3dbd679c095ad3daed26a3ac2f64ea9109c25422463f14ac122975abb78577d5cbe21a8a31df073e3dd3c

    • SSDEEP

      1536:BVEtEA12hHzCtpi2g0+zeNsfWs7gbxHc0kBCsy43mcIJUJ3huS:wtroGC2teWrxH70CsRmtJUJ3hT

    Score
    3/10
    • Target

      SETUP/Support/INETCHS.DLL

    • Size

      13KB

    • MD5

      a33ecada5bd6fbda3a8dd6e044b88b80

    • SHA1

      9f69f6762c14339c7807bfc49141223b9f568f2d

    • SHA256

      d95690b29a839d5e9da4bbecdee391341f38eb287f632fb8744ed791b2d9cfa2

    • SHA512

      f48d261b40c279aed3ad52915084d569ce3faa7ba354a3f3916b2e0e73adaf854e0a1e55d5fe540e8aa1745f2f5f0b47ec24b81a6580af7cfa0cef8ea00fc4e4

    • SSDEEP

      96:O7bF83di1EqNtAc3TJrjkFBEfLiriMsje4l3E+nd1Hn0yWkQsBq1XkWQsfn8:ONpA6zLQTj0U+nd1Hn0yWkcUW4

    Score
    1/10
    • Target

      SETUP/Support/MSINET.Ocx

    • Size

      132KB

    • MD5

      b920865c9c2f4f28151b269b3a8b11aa

    • SHA1

      3a010883d5c1d4cce968c020f51e1961e3651bbe

    • SHA256

      b1212253d0c2b96dbdc6985b93338be288b0c8d827481f9c607dde5bdfdbfc6b

    • SHA512

      a463377b6a612a9ee82b4d2891b8d01df1b2770e40d8065e5d3e8a33b62171cbeead589599728d3349e4222b2207bb1b293b6510de26eb5820cac6cf284d526f

    • SSDEEP

      3072:Z9mgwHvRYezwWdZduRz8s/OGB5yS5WDHq5I:Z965dwsuRgUaee

    Score
    3/10
    • Target

      SETUP/Support/MinHook.x64.dll

    • Size

      15KB

    • MD5

      9ed71db2c29203e785fa532a6261e416

    • SHA1

      77e9aa544efce588b70b2f7841e80d77ea773cb3

    • SHA256

      bddd6adaee8ab13eabaa7c73c97718cee1437db2054ca713ec7cc86e8002a300

    • SHA512

      ca3d81e5cab227d43ca06d9c66e22f51a5976e1fc541bc7a0b627acb97c02db6fcc1e1cd090b5f68d004844cc426ca17af57d20d542e84c9ff20d19557657678

    • SSDEEP

      192:8Ff48texc+160hdtQAq7XtwGR13mfupYp+XNJ3q8UJM5oaaBLKnMJA4yzTMW:/8V+k0rtQztwGR13mf3WNT5ILKzPMW

    Score
    1/10
    • Target

      SETUP/Support/MinHook.x86.dll

    • Size

      12KB

    • MD5

      52b17ef563ee343308394405aa5f6bd6

    • SHA1

      f05bdbba0a1e9e2798753cab02e4d563a9bb4d71

    • SHA256

      2ade1c2be4c81db6f73b8a8372e8df2d07bb53178025ea2d2eb2d439055a9c58

    • SHA512

      e85bfda179aead367800e226fdb2cdc3e1c9f30efb31e6f2f90e73a126baf43931fa3730814f0ef9e371ae0f8bebbaf1545238a5730c1f9af12f0e7b0b4fe975

    • SSDEEP

      192:hGRk5IrcDpEc98dCLla8XhJOiZKIxX8la3X+g6IXS6P4FTMWdg:okWmpv64bX7Ua+oQMW

    Score
    3/10
    • Target

      SETUP/Support/MinWSMon.dll

    • Size

      52KB

    • MD5

      4c6506581000b88a773cfff45dac6238

    • SHA1

      667c34155e040d6724395881446690988774c5e4

    • SHA256

      5511ec4213fac8a7d84d882abe365ecb489bed752f710dbdfd4191dec0946b9a

    • SHA512

      45ed9ce4220702fdc649e86d9e6d6790a31e984310af50bee2509b7cdee62f52eec763630c3a7b5bf5d22ab1dfdb53c114ca2ac0b2542a9ee6fdb0cfa5f43556

    • SSDEEP

      768:DzT0tGWWT45Ug2yO9JoIXGFOaUeZLICKloXnHbm:D8tGfT4UtAbqelIoXHbm

    Score
    3/10
    • Target

      SETUP/Support/OLEAUT32.DLL

    • Size

      584KB

    • MD5

      7b156d230278b8c914ef3f4169fec1cc

    • SHA1

      6b58e20b2538cb308091da838710f6aad933a301

    • SHA256

      baeb2f7c1b8be56738d34e1d1ddf8e0eebd3a633215dc1575e14656be38b939d

    • SHA512

      e4ec2bc714069e0a6b56d89b52aabad92e5ba741dc6f26d2fc2d72aa9ad2ec465dea523cccd810331ab78b5fb8a1244b2b521303418ead5bd6be5a58b43794c5

    • SSDEEP

      12288:HCKynQWKglDhrUtrvT/NInIk4NDXsR6lMlpGz:HGXqB8V6lMlMz

    Score
    3/10
    • Target

      SETUP/Support/OLEPRO32.DLL

    • Size

      160KB

    • MD5

      ce0155405ea902797e88b92a78443aeb

    • SHA1

      8adff69050d14a57d7f553ca8978439af188c192

    • SHA256

      789c3c45eda1749bd939f4a96616e1e9ef1b7dcc62a2889f65088954c64d0938

    • SHA512

      3fde09067f9ca8d315de07c8db972f99723ea4c3f997dc58210f9d6565caa9935c79f13e8b2d20adc5609919a381e4c2a90a0b3123a35947997229d7c615e162

    • SSDEEP

      3072:+VrhrwLXcA2Ha/joWklbo/Acjwm4AaW7zozn/zgOh0Z76:fklbsqmyWnoz/P

    Score
    3/10
    • Target

      SETUP/Support/RCHTXCHS.DLL

    • Size

      30KB

    • MD5

      53bb315df5f02249cebed7acafeedb99

    • SHA1

      a6058fbfc9b3e95c8897bd48d3d1bde3c6edd46b

    • SHA256

      fe82630f37919064a8714b5217b5a5650ab2c9440fcb156acea6ba72156af8bf

    • SHA512

      1cf2d335bb5b7fcbb538d9ed900030ab2bd68a60dceb5f1f0ae4f6f07ef21e1abd43b7a7f2c405f7e81816dd179c9eb41e8235c2e77cce1b85cecf0cefd6c44d

    • SSDEEP

      192:MxErm1FI1JBxZTLmFxUhHke57nY4JZPR3KYnTQbqW9l:6qm1FA5ZTNHke57YqZPAbqW9l

    Score
    1/10
    • Target

      SETUP/Support/RICHED32.DLL

    • Size

      192KB

    • MD5

      3c1537538e50dc464130277032074042

    • SHA1

      2186f2bf62d2ce493242c7184ad58196c71fb00e

    • SHA256

      3fbbf39c1cdb2ae9b9454b6534b4be5669cd2bcce3de2f592a55144018ba6850

    • SHA512

      aa726498efd59bd024c5a137315ba178e9571b3837e22e99386d173bbb29d9517858c946034bf1dab78217b255c4b6e3b3bec0ece1faa6e270776618829f04e4

    • SSDEEP

      3072:kwEk/qfQK1P5xiG9b/Vk9d7UnmL9t5LSN9n15DKwhhxDH5xyNPOor6byZu:kwEn5PWe9ZALSD1Emx7ePBI

    Score
    3/10
    • Target

      SETUP/Support/STDOLE2.TLB

    • Size

      17KB

    • MD5

      1b02577f0addea32eb02a50d4a4cdd1e

    • SHA1

      36f701ccec78a5d218fea23fd05351890f14cf7d

    • SHA256

      6ea525bface5467c1045c3708f339a4b92a3a273f70656e061c7f7322c56d667

    • SHA512

      87fd4aa5158d09eb97b6131e651db2a4761546907a960af7792f8e95947c0a825e84f88eccf42ec896ff5bb2bbc461488b898d5f1bd853847317493c44b330c9

    • SSDEEP

      384:cogoEvM/uFrR+X6QNn1pcJIrWocDGWct:cogoEvM0rgqQNn3

    Score
    1/10
    • Target

      SETUP/Support/VB6CHS.DLL

    • Size

      99KB

    • MD5

      4eb560ad85cc7924f507fbe5a901577a

    • SHA1

      574f6a47a809d91dd122f68bd5cc14d9d66aad37

    • SHA256

      e6b4aec131b5dd42342d57f0fd9075873527569631e8ce5f411811202103aec3

    • SHA512

      3a736fadf1b962b0c39e1215bf3279ef75cc14e37f9923e2380577b030dd45c150a684158dbc3e542bcabfaf9d4636f343dfe0bb9b6a10e6eb02cfaecfd24f54

    • SSDEEP

      768:8+0pMmmRv2IKP857UdtzuJRkfYzvL3IW:8+MS2BP854d5TYz

    Score
    1/10
    • Target

      SETUP/Support/VB6STKIT.DLL

    • Size

      99KB

    • MD5

      46a6e25a418a676d57e5849c3e29424f

    • SHA1

      91da8ee5fd70ccb351e037bea16e943cb85faf40

    • SHA256

      0095cb271ae7ca11fe506a4f621c35ec4a42cdd784d6f2907040b5647fc6f3cb

    • SHA512

      06af3d6e10b158c3fa57758ec1a18f48f99960f750f1099eb364dcfe5479436017c4d1b4f1f91433a309331b427d7e9f5b659f57bbaab9010f2b96a1d41903fc

    • SSDEEP

      3072:v6v5KkE3OEc4dUN5KgzIED1LAOWOa+dSogvk:vsKkE+Ec4dU/KXEDunOaS

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

upxaspackv2
Score
7/10

behavioral1

discoveryupx
Score
7/10

behavioral2

discoveryupx
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10