Overview

overview

3

Static

static

3

IMHttpComm.dll

windows7-x64

3

IMHttpComm.dll

windows10-2004-x64

3

ImLookExU.dll

windows7-x64

3

ImLookExU.dll

windows10-2004-x64

3

ImLookU.dll

windows7-x64

3

ImLookU.dll

windows10-2004-x64

3

ImNtUtilU.dll

windows7-x64

3

ImNtUtilU.dll

windows10-2004-x64

3

ImUtilsU.dll

windows7-x64

3

ImUtilsU.dll

windows10-2004-x64

3

ImWrappU.dll

windows7-x64

3

ImWrappU.dll

windows10-2004-x64

3

Language/WinRar.exe

windows7-x64

1

Language/WinRar.exe

windows10-2004-x64

1

SftTree_IX86_U_60.dll

windows7-x64

3

SftTree_IX86_U_60.dll

windows10-2004-x64

3

en-US/Auto...eN.dll

windows7-x64

1

en-US/Auto...eN.dll

windows10-2004-x64

1

en-US/avicap32.dll

windows7-x64

1

en-US/avicap32.dll

windows10-2004-x64

1

mfc80u.dll

windows7-x64

3

mfc80u.dll

windows10-2004-x64

3

msvcp80.dll

windows7-x64

3

msvcp80.dll

windows10-2004-x64

3

msvcr80.dll

windows7-x64

3

msvcr80.dll

windows10-2004-x64

3

resource/F...me.dll

windows7-x64

1

resource/F...me.dll

windows10-2004-x64

1

resource/F...UI.dll

windows7-x64

1

resource/F...UI.dll

windows10-2004-x64

1

resource/F...op.dll

windows7-x64

1

resource/F...op.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19219111739.zip

  • Size

    22.7MB

  • Sample

    241003-l5hexswgql

  • MD5

    254265b78c573afa46530ea1570db9f7

  • SHA1

    7543d0a34456c99588628760eb0c54faa31278f2

  • SHA256

    d95c91ec56997bfd850234b0da6cafd1f9067ce149785c31257c0f4fffc85cec

  • SHA512

    19e76901e760e7f7a6ca3d7c92700b475065d8baffa628eef7771adf8c4621c0667873772728a4d6de1b4424823f41cd9c630f0e6ac09d45f175cbeb2639fe23

  • SSDEEP

    393216:v/rU8x1W85wgJ7jyESIL9etvDH8hJQdYUuNK+Nv49Bo61u3AfzjFoc0CfnE2uLGt:Hrtxs85wgpz96v4J1K8vEj1jfHmhCfEm

Score
3/10
discovery

Malware Config

Targets

    • Target

      IMHttpComm.dll

    • Size

      32KB

    • MD5

      a70d91a9fd7b65baa0355ee559098bd8

    • SHA1

      546127579c06ae0ae4f63f216da422065a859e2f

    • SHA256

      96d6264b26decf6595ca6f0584a1b60589ec5dacdf03ddf5fbb6104a6afc9e7a

    • SHA512

      f13b735a47090c7c6cc6c2bf9148408ee6db179c96ee6428270541f27e50ad12cff7486f3a6ffac2ba83fd2e6e8e49661e6258f5aee97eb0f48771cbbd22aefa

    • SSDEEP

      384:UYacYCuDAIKaDEsdpRPcWzXKNfdZ1uTslWfXLhxyM8OjrsVIObsU25hoe1nYPLMt:Scr9/i1AscZ1wf7h4bOjKRsIe1

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      ImLookExU.dll

    • Size

      262KB

    • MD5

      6527be4d6a3333dc5a49218c4f80530d

    • SHA1

      97c8965b01d2644fb17a0f818af59bc0471e38a7

    • SHA256

      908ab22cb8fa1b9125cf5746e5591fd84e4853326a812b9431ca1c0b9e997e1f

    • SHA512

      69a57cc28583861b97a02968106f007d56c2b5826fc5aa843978f0bf3a3f155ad9f2b7dfbe8260e38c2a7b1ed759f6f6fadbeef32cec9d7c4ab8f541f645dc5b

    • SSDEEP

      6144:2X6ytmY4o8xnZSYDI73lFlNogVFl4OgqxLwSrIs:2X6ytmY4pZSYkTlNTfw2Is

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      ImLookU.dll

    • Size

      600KB

    • MD5

      e0d6f2ec123669ce1d56732a8a9abe56

    • SHA1

      5e57ca93c1c04fb38d222c3b93c919b3fe66ccb3

    • SHA256

      58ee3f3249ca4b7cbffcf75748476498b0bf045a2adf2f4fb8d20c561c7b74f5

    • SHA512

      13ee798ee9d9329a51ffc42f4f115ad9db5137cb32ac3fd41b648a40d97c8d9ac15de41339e9f336ee2c3d5c99e152a9fcdb0d1f4e26da884417a457f63610c4

    • SSDEEP

      6144:BZvkhcT5e0HWJ5/10UfCrXCL12gQhYwtHWDCyF0nb6rFBvJ+sbJeDH+8uGh7xgLJ:BZvkhcTd2JxXCrS85h0Db0nMKbz8

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      ImNtUtilU.dll

    • Size

      94KB

    • MD5

      bb326fe795e2c1c19cd79f320e169fd3

    • SHA1

      1c1f2b8d98f01870455712e6eba26d77753adcac

    • SHA256

      a8e1b0e676dce9556037d29fd96521ec814858404ba4cfdd0db0edbe22c87bc7

    • SHA512

      a1ec894151baa14e4ac1ee9471e8606bf74edd39f7833d9a1a44eee74d403f6b52780c135e9718ff9564fa27d7128c22b8410b21f77e6d804f698cfb4eda65a1

    • SSDEEP

      1536:q01U2obLeNvXXZ6Wb/2LamjMkUYCTSZaKAxvSJKRDOAG921:NobLeNvXp6Ou+mjMkUYC2ZVAxxFOAG9s

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      ImUtilsU.dll

    • Size

      1.4MB

    • MD5

      a7eaba8bc12b2b7ec2a41a4d9e45008a

    • SHA1

      6a96a18bb4f1cd6196517713ed634f37f6b0362b

    • SHA256

      914b1e53451b8be2c362d62514f28bdef46a133535d959b13f3f4bf3bc63df3a

    • SHA512

      0ae7fbdb2677d92c62337aa17b60a4887240a4a426ba638c7633587f4582adbcda2bde5ec824aab1a3f69acf2b391118763842acfab856d3d9764850961a2ac8

    • SSDEEP

      24576:2EQirQajY+S5eqyL9dj7GP4a6xKlnNYndIA1HVtFyC0Glqb6WUOQZljMFbDG0:fQj+S5epJl7+eenN5+HVDD0bUOQPUbDP

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      ImWrappU.dll

    • Size

      158KB

    • MD5

      cbf4827a5920a5f02c50f78ed46d0319

    • SHA1

      b035770e9d9283c61f8f8bbc041e3add0197de7b

    • SHA256

      7187903a9e4078f4d31f4b709a59d24eb6b417ea289f4f28eabce1ea2e713dce

    • SHA512

      d1a285fb630f55df700a74e5222546656de7d2da7e1419e2936078340767d0bab343b603ba0d07140c790eb5d79a8a34b7818b90316ea06cb9f53cad86b6d3f5

    • SSDEEP

      1536:+Vcm093l7KjJdwXjCsZ+WymDAZZxgbgROgldJ+VEcn75A:+Vcm03ggjCsZDym6Og5+Vpm

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      Language/WinRar.exe

    • Size

      3.2MB

    • MD5

      b66dec691784f00061bc43e62030c343

    • SHA1

      779d947d41efafc2995878e56e213411de8fb4cf

    • SHA256

      26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370

    • SHA512

      6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3

    • SSDEEP

      98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8

    Score
    1/10
    behavioral13behavioral14

    • Target

      SftTree_IX86_U_60.dll

    • Size

      570KB

    • MD5

      57bf106e5ec51b703b83b69a402dc39f

    • SHA1

      bd4cfab7c50318607326504cc877c0bc84ef56ef

    • SHA256

      24f2399fc83198ab8d63ee6a1ad6ffbd1eda4d38048d3e809fecd2a3e0709671

    • SHA512

      8bf60649ece6bbb66c7b94ed0d9214fbeab030d5813e1e7b5d6d2349ee1de9075b7dfbbbbeae5af0dc21b071a00eafce0771ca1804e6752e9a71e71e6b1447df

    • SSDEEP

      6144:+F1oCaK7hWLMxQqTxNEaPe/cq0sJBJYzlRtcChgWPQnjLkV3Ij9DvAmintVM:koxK7hhNN1m/cq0sJ/YzNcCj0oVy8Y

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      en-US/AutoWorkplaceN.dll.mui

    • Size

      2KB

    • MD5

      a311c98e7cb3bc2c6f4ad9ca65e95810

    • SHA1

      481168e5c9437731ab632fcacb9c88471c008d6b

    • SHA256

      799cf32fc0515a4bcc0388d0d39618d9c67ee67a1c2000d7344c5a8120004e2e

    • SHA512

      8eefd67ab748725145db643dab47f608b66582c194e42ed412bfe31f26c36b2bd2c4e157fa1bfaa582c697de267c242e5e809be109c7ab3f61f19bd6812e416a

    Score
    1/10
    behavioral17behavioral18

    • Target

      en-US/avicap32.dll.mui

    • Size

      8KB

    • MD5

      a5696b2d379fb322c7ee1e18c01ca920

    • SHA1

      0063d4f4814d4565334b5937fd83b56287ab413a

    • SHA256

      cb852e13a323c8e226b9bccc7786df3c55e4be16d9d63f4911ea0565ac879a9c

    • SHA512

      01e93385f90fd0a25d8c7da31704cf8d04596113fbc9c19199506bbb5ba978f974c65a636ea663fec0c32408a931499814f806091ef7b3d9ca59c26fa01cdabd

    • SSDEEP

      96:9XIEThBLwopUCfwpyIR3M7Pel5LdDzdlSjrviqEtp9JhZ47/5PYBtTdbhFYIDiqf:KKxy3M7P5vRULZ4S5HTbnWnUrTWQ

    Score
    1/10
    behavioral19behavioral20

    • Target

      mfc80u.dll

    • Size

      1.0MB

    • MD5

      ccc2e312486ae6b80970211da472268b

    • SHA1

      025b52ff11627760f7006510e9a521b554230fee

    • SHA256

      18be5d3c656236b7e3cd6d619d62496fe3e7f66bf2859e460f8ac3d1a6bdaa9a

    • SHA512

      d6892abb1a85b9cf0fc6abe1c3aca6c46fc47541dffc2b75f311e8d2c9c1d367f265599456bd77be0e2b6d20c6c22ff5f0c46e7d9ba22c847ad1cbedc8ca3eff

    • SSDEEP

      12288:o5lk6KUYmYRP6vAt9+J51r64f22JhPeEiz8F+p/xoOTa+S9XqNNw2ohW3:UyUaP64t9+JfrRJiz8F+p/N2/cmW

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      msvcp80.dll

    • Size

      536KB

    • MD5

      4c8a880eabc0b4d462cc4b2472116ea1

    • SHA1

      d0a27f553c0fe0e507c7df079485b601d5b592e6

    • SHA256

      2026f3c4f830dff6883b88e2647272a52a132f25eb42c0d423e36b3f65a94d08

    • SHA512

      6a6cce8c232f46dab9b02d29be5e0675cc1e968e9c2d64d0abc008d20c0a7baeb103a5b1d9b348fa1c4b3af9797dbcb6e168b14b545fb15c2ccd926c3098c31c

    • SSDEEP

      12288:Q1HyurvZ0JPjuTtSu86th1n/hUgiW6QR7t5j3Ooc8NHkC2eo:Q1HyurvZ0liTwuhtjnj3Ooc8NHkC2eo

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      msvcr80.dll

    • Size

      612KB

    • MD5

      e4fece18310e23b1d8fee993e35e7a6f

    • SHA1

      9fd3a7f0522d36c2bf0e64fc510c6eea3603b564

    • SHA256

      02bdde38e4c6bd795a092d496b8d6060cdbe71e22ef4d7a204e3050c1be44fa9

    • SHA512

      2fb5f8d63a39ba5e93505df3a643d14e286fe34b11984cbed4b88e8a07517c03efb3a7bf9d61cf1ec73b0a20d83f9e6068e61950a61d649b8d36082bb034ddfc

    • SSDEEP

      12288:6Fqi2VC1J7Zs7a5zchr46CIfsyZmGyYCqeC:6Ui2C1JdoiEdmGyYu

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      resource/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.dll

    • Size

      287KB

    • MD5

      8a1b183bca062f48402c74f2daba7b92

    • SHA1

      d9417bf78b3b37d668c08e67f3c0f21dbc6dc11e

    • SHA256

      8103f2cce6a864ceefe6c5b0c05087ac85ab04a2abf150e93bc9db90c54d9d20

    • SHA512

      0f5120fa9ed24d2a49b82cdc62113302002ccc5e1cf389cc28830f36b2915f876bdf77094fa6dfa312fc01b6f482465297fa734509511fa7e72285569ce57e87

    • SSDEEP

      6144:aMNTja9KIKf5RCs1ussMKlzI5iJQn9gu5DPOvObo:5Za9KIjs1ussMKlzI5lo

    Score
    1/10
    behavioral27behavioral28

    • Target

      resource/Font/Pfm/Locals/x64/AdonisUI.dll

    • Size

      164KB

    • MD5

      3d4c8b6aad28ec574e56ccda22b34ef3

    • SHA1

      bc22ac7097e597fba3d7367b2fd5c61adff28941

    • SHA256

      db46b6106dc1b30041ce3f287ded91166895ff3f1928250fc79dd46c444b1e45

    • SHA512

      fc56241e65dc7bcc678a2af92f79bda017ceb3f7c4f203c7e9ce753d573da868608a6f56545c0d181a625737278b7b73223e5dcce85bf1f3c5b7b1b06e5c5739

    • SSDEEP

      3072:fuZPAdWKbu3355s555GPQKljrKxX0yAbTxin1YzqHf0llbS1sjZ73h39Iwj:GydWDrKxG3h39Iw

    Score
    1/10
    behavioral29behavioral30

    • Target

      resource/Font/Pfm/Locals/x64/SQLite.Interop.dll

    • Size

      1.7MB

    • MD5

      56a504a34d2cfbfc7eaa2b68e34af8ad

    • SHA1

      426b48b0f3b691e3bb29f465aed9b936f29fc8cc

    • SHA256

      9309fb2a3f326d0f2cc3f2ab837cfd02e4f8cb6b923b3b2be265591fd38f4961

    • SHA512

      170c3645083d869e2368ee16325d7edaeba2d8f1d3d4a6a1054cfdd8616e03073772eeae30c8f79a93173825f83891e7b0e4fd89ef416808359f715a641747d7

    • SSDEEP

      24576:YPUxmkgSxPgobZPRjZ22H6edtOZzWySRO3mlE0i/Yl5P+qF+8k+ao/si6:8UxXPgo8e6WYBSJZSS5P97I

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10