Overview

overview

10

Static

static

10

PARANOID C...FS.dll

windows7-x64

1

PARANOID C...FS.dll

windows10-2004-x64

1

PARANOID C...et.dll

windows7-x64

1

PARANOID C...et.dll

windows10-2004-x64

1

PARANOID C...se.dll

windows7-x64

1

PARANOID C...se.dll

windows10-2004-x64

1

PARANOID C...rs.dll

windows7-x64

1

PARANOID C...rs.dll

windows10-2004-x64

1

PARANOID C...pf.dll

windows7-x64

1

PARANOID C...pf.dll

windows10-2004-x64

1

PARANOID C...rs.dll

windows7-x64

1

PARANOID C...rs.dll

windows10-2004-x64

1

PARANOID C...pf.dll

windows7-x64

1

PARANOID C...pf.dll

windows10-2004-x64

1

PARANOID C....7.exe

windows7-x64

10

PARANOID C....7.exe

windows10-2004-x64

10

PARANOID C...v2.dll

windows7-x64

1

PARANOID C...v2.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PARANOIDCHECKERV4.2.7.zip

  • Size

    11.6MB

  • Sample

    241006-x8skva1gml

  • MD5

    875849c78e1edfd95dc34028a2fb8300

  • SHA1

    648bcd5287ee4e80b170453addfc5a2afeab0ba7

  • SHA256

    8c09a321764b6ca61eafcfb69894fd80321900585fe47db6f11eb04e9401cce8

  • SHA512

    0e375e44dffa6f50046cba650dc9467c5ef446042a5c1af817e8b143d57cd1b9b2bc959b04d61ed9588272306681993e0485f602bc8c1ade9094314803e570af

  • SSDEEP

    196608:EGJNhExKiTDR6R6p1Vs4J0tgoy+k+6y51hiZz1sLt8hk9DWPnJOEIk/NxMwwNJyv:EGJNhExXfRQt4JQhYhyRewt8hk9DWxOA

Score
10/10
blackguarddiscoveryspywarestealer

Malware Config

Targets

    • Target

      PARANOID CHECKER V4.2.7/AlphaFS.dll

    • Size

      359KB

    • MD5

      f2f6f6798d306d6d7df4267434b5c5f9

    • SHA1

      23be62c4f33fc89563defa20e43453b7cdfc9d28

    • SHA256

      837f2ceab6bbd9bc4bf076f1cb90b3158191888c3055dd2b78a1e23f1c3aafdd

    • SHA512

      1f0c52e1d6e27382599c91ebd5e58df387c6f759d755533e36688b402417101c0eb1d6812e523d23048e0d03548fd0985a3fd7f96c66625c6299b1537c872211

    • SSDEEP

      6144:QDyJst+jyCnzLp9hvHsPvPvPvS2JQvlojidPp:QDyJsvCnzZf4U1d

    Score
    1/10
    behavioral1behavioral2

    • Target

      PARANOID CHECKER V4.2.7/Extreme.Net.dll

    • Size

      121KB

    • MD5

      f79f0e3a0361cac000e2d3553753cd68

    • SHA1

      4314bcef76fddc9379a8f3a266b37d685d0adb79

    • SHA256

      8a6518ab7419fbec3ac9875baa3afb410ad1398c7aa622a09cd9084ec6cadfcd

    • SHA512

      c77516e7f5540ecd13fa5d8cecfce34629acecd9b5a445f5f48902c9e823328fa9a6694ecaa39f5b6053de61c2b850c2d87df25357548afaad6ec37eb3e5e355

    • SSDEEP

      3072:bdoECIgjBibgp2tBqL0Y++ruXqMG4ih3lbpMqc:bdoECIgUrG

    Score
    1/10
    behavioral3behavioral4

    • Target

      PARANOID CHECKER V4.2.7/License.dll

    • Size

      5B

    • MD5

      b08a5c34cf0a06615da2ca89010d8b4f

    • SHA1

      626a77d86d9d12d1772f788cf67c8e77fd9f797a

    • SHA256

      04cc5b3b49a7e9e9b6c66c7be59a20992bf2653746b5d43829c383fb233f88fa

    • SHA512

      5dce742cd0f649461b08f8f8018e0fa39ef19e813a74a91f434a15754a4fa8be83096e8fa49cf1828ac011220b7ad3724e7e4ea9cce7937a3168169d8e561b2c

    Score
    1/10
    behavioral5behavioral6

    • Target

      PARANOID CHECKER V4.2.7/MaterialDesignColors.dll

    • Size

      295KB

    • MD5

      5c108c4da6d03f0fa2c3b4dc7890cb52

    • SHA1

      48af67b6166068b6f138306bbd1157c7583c6e73

    • SHA256

      b5ec30c93b1d2b4631ee2b178750ec92e302e2e331090ec9783981b9572354f8

    • SHA512

      48d055610eead361809bd839c66ccdca1d5e0d9dffe15af9d15afa106ee7791c8b17acb91f2aba5cf3dda2997b049bcf70b43c3b56b8b01f1fc7bb845ce6c91b

    • SSDEEP

      1536:wr1In+fq1fDfDemxD0EsXpGX0EOAcTtU7fKoVxbzQcV:G1WB1PerAjOAj7fKoVxb1V

    Score
    1/10
    behavioral7behavioral8

    • Target

      PARANOID CHECKER V4.2.7/MaterialDesignThemes.Wpf.dll

    • Size

      9.1MB

    • MD5

      824cbf63999f954aa1747f79586a4d3c

    • SHA1

      5f1cd6346a45024bbbe09e304c12b6f6bf227d5c

    • SHA256

      344e2cee979e979932f504dc76bd75e97ae1ff46caa3fe2795adfe0a866347f7

    • SHA512

      d36149f7cb5ffc62dac6bb4521105d09fac988de567e181fdca4f23e5079aca5f4292e1d314f797f1a597263ddac0210060cb71c111565717e3a288a47770c51

    • SSDEEP

      98304:PW8EOPXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCRM:PW8lnJ45/9iD54+V11bFv4z

    Score
    1/10
    behavioral10behavioral9

    • Target

      PARANOID CHECKER V4.2.7/Microsoft.Xaml.Behaviors.dll

    • Size

      142KB

    • MD5

      95f46f34c099421d917d5feadbb33edb

    • SHA1

      3d1cb9cf59000012734901a35baeb3d9c1dd5db3

    • SHA256

      8e77a1dd5e2df4d4af801376cc3428b082eb49fcb6e647b933967fae12ad9d5d

    • SHA512

      c9c9f72980316c68ad2a8dbe2c6c563c0deddfc9e845674d0e2f5313a0ae285d60a755e2ca04164f78b37a36521259307b3eb7d43f5ec9a9de5507bda7e4c1b8

    • SSDEEP

      3072:lN+EM1X0WlL9JAn11M1dXcGkOsizI35rCj8SIP:v+ll79in1h6

    Score
    1/10
    behavioral11behavioral12

    • Target

      PARANOID CHECKER V4.2.7/Ookii.Dialogs.Wpf.dll

    • Size

      103KB

    • MD5

      932ebb3f9e7113071c6a17818342b7cc

    • SHA1

      9ce2d08bc3840632092325abcc8d842eeb8189d4

    • SHA256

      285aa8225732ddbcf211b1158bd6cff8bf3acbeeab69617f4be85862b7105ab5

    • SHA512

      6b6086cff7b916c0c4536e3c7cba4ba17d6c4be2e4a88a5877be852e197f1f9c9c120d1295acf2b4277a9badd8cfd229ef3c1ab2049d0aeec22d3033be156141

    • SSDEEP

      1536:qgoPBGuyAy52V+gtTLq6ZUc68h8O0SB/XBboIawHUPV5bKLh8sm6b0gl:qgwBGu2IV+ghd68WOxXBbx+5of

    Score
    1/10
    behavioral13behavioral14

    • Target

      PARANOID CHECKER V4.2.7/Paranoid Checker V4.2.7.exe

    • Size

      557KB

    • MD5

      2ad49b653bd47a96e9c1f698be08fb5c

    • SHA1

      e3ac148dbf491e87cb3313e3b1554c7042a4e9eb

    • SHA256

      3fa88d7c920eb0950502dc7c57260aeccc12b2bcdc37bba725b3ef96d475d313

    • SHA512

      b141f5d7e041cba6aa05ef3e8cae2889882f40db263f60e922c56e1cdc2107d13762430601a9543c0b3c13c6a08218325a049907b61f4168439d5dd8ffd46ade

    • SSDEEP

      6144:Bn176kmwUOBj6uMkYxm28efzNWT14YT1h6vWTLi:BAwUuj6HkaTzR4b2

    Score
    10/10
    blackguarddiscoveryspywarestealer

    • BlackGuard

      Infostealer first seen in Late 2021.

      stealerblackguard

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral15behavioral16

    • Target

      PARANOID CHECKER V4.2.7/libGLESv2.dll

    • Size

      6.8MB

    • MD5

      90ad3c47740fce98015444d1289af9b9

    • SHA1

      0135a04b2b590e1647e3a2b123596d62d57fece0

    • SHA256

      2082c51a86bc8b7cd5e69cf5d43914efe5d939c90503539d657fde7915a95ae1

    • SHA512

      40bdd65a9fa761bd3835ea9fb8c4c4d90531253d9dc7183d59c2051a627afc8b267d8de7e7478396e9fb779796f2b7e9b012564446671b4ed06427de5e93689e

    • SSDEEP

      98304:WYasIDptJ/QOjZfU5Q9S6Vaem7EdGSfhgbMKl4F:WJJd59Hk392thgbMim

    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks