Overview

overview

3

Static

static

3

ForlornApi.dll

windows7-x64

1

ForlornApi.dll

windows10-2004-x64

1

Guna.UI2.dll

windows7-x64

1

Guna.UI2.dll

windows10-2004-x64

1

Microsoft....re.dll

windows7-x64

1

Microsoft....re.dll

windows10-2004-x64

1

Microsoft....ms.dll

windows7-x64

1

Microsoft....ms.dll

windows10-2004-x64

1

Microsoft....pf.dll

windows7-x64

1

Microsoft....pf.dll

windows10-2004-x64

1

Monaco/index.html

windows7-x64

3

Monaco/index.html

windows10-2004-x64

3

Monaco/vs/...ain.js

windows7-x64

3

Monaco/vs/...ain.js

windows10-2004-x64

3

Monaco/vs/...bat.js

windows7-x64

3

Monaco/vs/...bat.js

windows10-2004-x64

3

Monaco/vs/...fee.js

windows7-x64

3

Monaco/vs/...fee.js

windows10-2004-x64

3

Monaco/vs/...cpp.js

windows7-x64

3

Monaco/vs/...cpp.js

windows10-2004-x64

3

Monaco/vs/...arp.js

windows7-x64

3

Monaco/vs/...arp.js

windows10-2004-x64

3

Monaco/vs/...csp.js

windows7-x64

3

Monaco/vs/...csp.js

windows10-2004-x64

3

Monaco/vs/...css.js

windows7-x64

3

Monaco/vs/...css.js

windows10-2004-x64

3

Monaco/vs/...ile.js

windows7-x64

3

Monaco/vs/...ile.js

windows10-2004-x64

3

Monaco/vs/...arp.js

windows7-x64

3

Monaco/vs/...arp.js

windows10-2004-x64

3

Monaco/vs/.../go.js

windows7-x64

3

Monaco/vs/.../go.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Debug (2).zip

  • Size

    5.9MB

  • Sample

    241010-j5798sxekj

  • MD5

    d2a428dbd2193fc14eb562f30fb879a7

  • SHA1

    d05ae2f5b512260b3109d2f0eaf8f7aed95b0f7e

  • SHA256

    1eb67c95ff70caed31d059966b15d806537567a6160db6bb5c3beb1dd6510640

  • SHA512

    0f4c51b14433f3f41876358b569cf286c3265076c91ccdbf8567ad74c01a26fe05d64bdafd401db55ba51cb122b25379e1289fd04aeaf509263d5b5534c334a7

  • SSDEEP

    98304:Ly/rGxtwE06gh/TA8pstEe2xIB0+ToxF8+/2DTLqkSf72bTNfq7MN16ayf/bBIlm:Ly/fHGoxTDxFjeD6kSD21SgN16Z7BIlm

Score
3/10
discoveryexecution

Malware Config

Targets

    • Target

      ForlornApi.dll

    • Size

      12KB

    • MD5

      1a3bc4f75809b4078f9818fc1c6613e9

    • SHA1

      86487f44e26f8101e43536e9ce5d85227a42244f

    • SHA256

      409e75f373f4bf6294f4cab120d297c9460c54d6a3d843e38c8c0f717d80282d

    • SHA512

      44a529eaed1e1d941ca30fa443ce8297e2cf67441504487f1c84911f1b98f8879d0a7a211d2d558f7f06f5609a5e0fdb1dc40f856fd5a78aea9c6d54ce7326c2

    • SSDEEP

      192:+YK6kYuXYVqkYHfqkrsP3MKK8Azh/9ditMqKN7Im1Y6V9:FuoVQSkrG8K09di7Kmm1YA9

    Score
    1/10
    behavioral1behavioral2

    • Target

      Guna.UI2.dll

    • Size

      2.1MB

    • MD5

      c97f23b52087cfa97985f784ea83498f

    • SHA1

      d364618bec9cd6f8f5d4c24d3cc0f4c1a8e06b89

    • SHA256

      e658e8a5616245dbe655e194b59f1bb704aaeafbd0925d6eebbe70555a638cdd

    • SHA512

      ecfa83596f99afde9758d1142ff8b510a090cba6f42ba6fda8ca5e0520b658943ad85829a07bf17411e26e58432b74f05356f7eaeb3949a8834faa5de1a4f512

    • SSDEEP

      49152:cvrqKk8q2gqi2OXCt6kuSw9g8PTNTN/23uxjPHEiCAjFcm:cvrqZr

    Score
    1/10
    behavioral3behavioral4

    • Target

      Microsoft.Web.WebView2.Core.dll

    • Size

      759KB

    • MD5

      217cd37f3dd8fbd461bc381c258910be

    • SHA1

      735435c7ecdb6bea6020ef1afee71d6e9f86efd5

    • SHA256

      35a38a8367d87fc78de3a254b9d102cfd12a20e4d4800018cc1bcde77796e719

    • SHA512

      79b141460c8568c5d735c62b30b8e912ad9fdf32b65d4ce2b0eefeb35dd0c40d095c93215fd243f731b917f908aa7f73e67a043b14e871cf3ee4c2f0b1affab8

    • SSDEEP

      12288:0cMyCRxFcojpbgyEF7sC/cckhRgSJQQY8GMdVgYfVkI074xjbjC2ZmyTPVrpQt5m:0cMyCRxFcojpbgyEF7sC/cckhRgSJQQ7

    Score
    1/10
    behavioral5behavioral6

    • Target

      Microsoft.Web.WebView2.WinForms.dll

    • Size

      37KB

    • MD5

      c64135a1c4a59461cbae0184b34ee35c

    • SHA1

      e4bee6e6846d5f7e4fab329051492317ad74863c

    • SHA256

      a865436c6ae4e5df7226ebde7c374509a8d9e2f50320604cfe9d507c47e9a535

    • SHA512

      cf843b195bc659b702afa5c14a92599a82a7e4d10d8341e0c1735865c89a3f2761f98922a4d9fcec4cd3466ee67ed964a8684995e926d3ba26c369b6bf88c337

    • SSDEEP

      768:DRNRyqzSr549igHshStYZDgcEST3p4Jjrjh2jJFSUyauTv1JKia5/Zi/WG4K4u64:bRy0iguStYZDgcEST3p4JjrjaJFSUyaC

    Score
    1/10
    behavioral7behavioral8

    • Target

      Microsoft.Web.WebView2.Wpf.dll

    • Size

      79KB

    • MD5

      7cbec7601e87c42c95d0434dda1889c0

    • SHA1

      8d2f25af42696336bb1f16b35bbe971e0a1c07ce

    • SHA256

      b279780313abd5eee74ca90b3201afab90b867daf7f54a4fd632ce17abd82b1a

    • SHA512

      12795e277cb4976bab86262396ef99b73c2ac47e77d7407f11dbf54a1b93b31745aefeb25df0803e9b18c14d670c247ac482422986b95cfb34cf889cc78d03db

    • SSDEEP

      1536:TLSqStnh+E/KtABZtSTFMhZ8fY1DHf9WyER30mpc4Jjr4YeUqpGhxU0v2wQvUuXE:TLuHd/6M/STSZ8iDHf9c30mpc4Jjr4YJ

    Score
    1/10
    behavioral10behavioral9

    • Target

      Monaco/index.html

    • Size

      16KB

    • MD5

      2b4e3cd838065f32b3b70b506e596ff7

    • SHA1

      54276652e311b98e2ab7d82a62fd1971d3f94481

    • SHA256

      55f721c31a77a296d21160c9bdc1cf96c59517eb148742477a0142a27e707156

    • SHA512

      19cbd158289d3f98cb28b2c977cca0dacc43a51088dc8e067fb656f195d9e58928595bf4b586a885f34b9c38aa3e6c4c6eb71e17aead43feaa470a7c96bdbce0

    • SSDEEP

      384:FihTARA5LmClk2P5VvW4NGtqbVBJjYLR7:FihTnlf+ltqbVBJkLR7

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      Monaco/vs/base/worker/workermain.js

    • Size

      149KB

    • MD5

      27ead90c7702154755785e0e53398755

    • SHA1

      86b59485fe6f6ccb1805183fa75062a2ac1c859e

    • SHA256

      bdf9433692a08851e13dd58504eef19f51bd2ec7241923a68edf5772e0e53af5

    • SHA512

      6829681575179c90bb7817b17feee60e7d44d8abb15264ab39d7f0edf95dd1d030b99c12b005c753cd786c26ce6f17ff09b058c16f3363596f785e386ef78e82

    • SSDEEP

      1536:XNSxrkwnz+dTHHfvYYdBwDZ2Ogvh52xgh2hQXIvTBaB7hU74Yc6aphU1PblosJEl:XzdTagJkb+6jFlJJEt9yjjTCD2zw

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      Monaco/vs/basic-languages/bat/bat.js

    • Size

      2KB

    • MD5

      4cb475399c4490eea41982dcd6d9653e

    • SHA1

      fc97d57206ff7fa1c89ff0fc9f6e2f04a20ea185

    • SHA256

      9bca42394fe8922fec24b768eeb8ce04692de6fad82f9052d5b7e70f5c6b0f40

    • SHA512

      27eefe83cf38a7d784414d99b472f6fcd7e595691eb0f368254ba1f71aaf702840b62bf232c30c515a8fada234699fefeef496c0c24669cc158cb567227e4783

    Score
    3/10
    execution
    behavioral15behavioral16

    • Target

      Monaco/vs/basic-languages/coffee/coffee.js

    • Size

      3KB

    • MD5

      9d0c4ac1691eed0a480c3e9246490d29

    • SHA1

      38258864fd070c35cec6b68715d58771df9fe3e1

    • SHA256

      e706c9f8e5c5a0cb01b2f4e4879ec34a050d6eb2a8840284eb7badd9d78099f9

    • SHA512

      437a703607a9f0cb96ffb56312d149b95f596290591d14098c36d978b2e1fdba3c3712c9099923bc0a709c5c0ebd7eea868f63dfbcc69cdf5a9325b8a67006b6

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      Monaco/vs/basic-languages/cpp/cpp.js

    • Size

      5KB

    • MD5

      0a16509e6cd0155fb622e785cfe976c7

    • SHA1

      7afa7f823191c43d7a4bdd7d91577495de62c21a

    • SHA256

      a7c2bea7ca3d9e203a3a286735945fe010c8f4f8d46620386ee8befc6a78b32b

    • SHA512

      2cbc48cb10c467561c6a84f59405e9c2f864640b3a21e6fe5cd14ad1a7ca5667b766b3c0511df26f28205dd17338a878bd1164a4f5875235a73214f3e4aeb49d

    • SSDEEP

      96:hFDMgRs/rbV1+gqVV1+/LVb9ZRC2seM6jjz13MwVcEghhb6Yw76wGcmvRBNIs:hZGrTOcVv5M61h8hSeiYL

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      Monaco/vs/basic-languages/csharp/csharp.js

    • Size

      4KB

    • MD5

      f8f841d13c9220e15dcd6bc386b37ba2

    • SHA1

      2b8b7003820d19ed83afde98c845db5e3d5753f8

    • SHA256

      6b3be9a86ee8e3202f51745d94d24cc1eefbcf7d9e6d94fbaf70146b084e835f

    • SHA512

      0b167865b8d7847792c80144e83bdf33655db6ecc0934bb3290f8b5793fee8168aeaf9d74b3541a9424c4f180aad496c2d8710e3847a5bf9d4b2c960ddea4ae5

    • SSDEEP

      96:hFDMgRsVx+rbV1+gqGV1+hmQuq1cBh8b7gj8/pLxb6J994wGcKU7dYIkI:hZi+rTtPsRXpw9SiKUJGI

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      Monaco/vs/basic-languages/csp/csp.js

    • Size

      1KB

    • MD5

      22ada25d590811dcff4e5f5d698e583b

    • SHA1

      c43d4846967d5037ef05b102e49d1fbc54e45fbc

    • SHA256

      4b5a5d7d50986b86b00833447e097c0f01a4388ce1765b48e7e371d06e3a4789

    • SHA512

      c8373ea0b78114f82e8bf027473f72ada0d8acd51623152a0072111d8b3b7d5ac310a1cc510c4e4cd2e97a7686db3c87b2da675fc910898bd11108e4b50ed189

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      Monaco/vs/basic-languages/css/css.js

    • Size

      4KB

    • MD5

      49ad30f1151cfd7a74677fdc6dd13da9

    • SHA1

      286d47f0a4cfa26da2e4d1f1317a8c87000bb5fc

    • SHA256

      bd331fd3bd2c37b0c3150035325f163ac9266bf6d942310764815e676d856d91

    • SHA512

      7337706bfd5bd54938da0fba35e97f8e5780491c04b58d43fc6d905bd2dca92897f1ed8d48e42665f166da7684cc6e29a63ae73f8d3779a9feb97c397a642f0d

    • SSDEEP

      96:hFDMgRsozIq+q17qcq6V1+/aMj1cqTroIrqjKf8O3lzXY0Jc:hZzzv9VmjoOf8O39XbJc

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      Monaco/vs/basic-languages/dockerfile/dockerfile.js

    • Size

      2KB

    • MD5

      e32de981bdaf75e6ffb8fe40bc955a68

    • SHA1

      bef1af7b26ea01c987c7a6295bb7192d83a32068

    • SHA256

      65b86fc54e9b35d6cb84f01dfb905680dbcad6605757de1d6bca84e3029889af

    • SHA512

      a3eadd8c1389dff6c2c6e595efff69be3a573d01e4e16b8e4a8b28f63e4c48c9c439b5dd93666d81d703d1c6b5bf927cc8e47d04af270128095f0d579407c2f4

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      Monaco/vs/basic-languages/fsharp/fsharp.js

    • Size

      3KB

    • MD5

      de122b3bc44a8714f386dc80282dcb12

    • SHA1

      06888a9b616993e9af9797cec64c6d419065f2cb

    • SHA256

      1390079babc117d3f376735780d98f409f317eb4628d17106642c6933ea1da7f

    • SHA512

      ab48f2e5bfa6ea0024530141bb5d35b9090ee0254a3e8f8b86fa36cc8c2fca8000a3caafcfffc1d83e21c488e1f1990c91f537290b54fbbca1d3c7be090dfba5

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      Monaco/vs/basic-languages/go/go.js

    • Size

      2KB

    • MD5

      5b4484c914cd97aff4510b803f2517ef

    • SHA1

      8f275ac36c57c4c464e30f92f525ffbd0fd436c6

    • SHA256

      46d1757c3cd3dbc3c7b465a338880144922a1c34c30e36f06ff2db8c2ff75b86

    • SHA512

      b34c64f9997f4b72760eca270d2a0c2e22d83467d3f0bc82e7c0e63d62d8f9d74a144a28d676a223cdefef417af723801ac0535375d0dd64bb3a81e87617fed0

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10