Overview

overview

5

Static

static

5

䨪 ...rt.dll

windows7-x64

1

䨪 ...rt.dll

windows10-2004-x64

1

䨪 ...64.sys

windows10-2004-x64

1

䨪 ...n1.dll

windows7-x64

5

䨪 ...n1.dll

windows10-2004-x64

5

䨪 ...ws.exe

windows7-x64

5

䨪 ...ws.exe

windows10-2004-x64

5

䨪 ...rd.bat

windows7-x64

5

䨪 ...rd.bat

windows10-2004-x64

5

䨪 ...be.bat

windows7-x64

5

䨪 ...be.bat

windows10-2004-x64

5

䨪 ...rd.bat

windows7-x64

1

䨪 ...rd.bat

windows10-2004-x64

1

䨪 ...be.bat

windows7-x64

1

䨪 ...be.bat

windows10-2004-x64

1

䨪 ...rd.bat

windows7-x64

1

䨪 ...rd.bat

windows10-2004-x64

1

䨪 ...ve.bat

windows7-x64

1

䨪 ...ve.bat

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    914f1d0294949edb9715e5b42a3ba3ddaf34f783f0cf2f1208cd1cab159b0c7c

  • Size

    1.1MB

  • Sample

    241013-ttdllazfln

  • MD5

    52bd5d748590bb7c94de053dfe1df562

  • SHA1

    2687be890237188fc5cc6012557e3932cf52d6cf

  • SHA256

    914f1d0294949edb9715e5b42a3ba3ddaf34f783f0cf2f1208cd1cab159b0c7c

  • SHA512

    c9a671eb741c19418547578169b4949a2926f2ab507ac2d07fe0e4af9fad57eaac2a23a867e9212492c0e790826a745d272c9624b0024a2427e4a79e7cdfef53

  • SSDEEP

    24576:NHnjKp3YMe+HMQFmgP1UULAuURg++evub3ZvlZyMBdY/VXiaS:NDKpde+sqmiA5Ftvub3Zvloz/VyaS

Score
5/10
upx

Malware Config

Targets

    • Target

      䨪  + /bin/WinDivert.dll

    • Size

      46KB

    • MD5

      b2014d33ee645112d5dc16fe9d9fcbff

    • SHA1

      aa69498562d350f2de06954b133e59fac1e57002

    • SHA256

      c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2

    • SHA512

      37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15

    • SSDEEP

      768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic

    Score
    1/10
    behavioral1behavioral2

    • Target

      䨪  + /bin/WinDivert64.sys

    • Size

      91KB

    • MD5

      89ed5be7ea83c01d0de33d3519944aa5

    • SHA1

      4c9b9c74529399abacc2284de1dead5f2332ee9b

    • SHA256

      8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2

    • SHA512

      be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138

    • SSDEEP

      1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R

    Score
    1/10
    behavioral3

    • Target

      䨪  + /bin/cygwin1.dll

    • Size

      998KB

    • MD5

      c50b50303fae4afe7248307339a00d13

    • SHA1

      1b4a3f7666172809bd0d88f793ee855bd4b92938

    • SHA256

      712c39a069541afa69cfcbe01b422bd67b4201eee7e94cc1327d4ed8b4fa2167

    • SHA512

      123d06a0a5f891851e372881860b9d7fb8c453dcdbbca5970b9b2bf205f08f0a724595c6892f4afbbb4f85292a886dddffbf0d36dfe18d4b6eea7a5d12451762

    • SSDEEP

      24576:YbYJZPZf7KMuiA7Q4lsXBmStxacrFhG+wTGiPoy1u7MHltI:YAZfmM/A7Uk6xhpmGkoy1u7MH0

    Score
    5/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral4behavioral5

    • Target

      䨪  + /bin/winws.exe

    • Size

      234KB

    • MD5

      8c624e64742bc19447d52f61edec52db

    • SHA1

      1e700e2dd61b5d566a651433dc86bd95a6d54449

    • SHA256

      13fd7a9c6f7c98239a61a212f69211a0f19159b2e8cdae8b1efc57d35cdcd5ad

    • SHA512

      f676f7aa863fd13494186d4be597c19e49dc8245f6a98a2e9e2f1d09aa9e4cbf7a87c552e49359347b24b46cd1eddfb6edcfcbd6f4ff4d24888831ff182c952a

    • SSDEEP

      3072:v8eKEoQ4poZkFUIIggeAtqCijmtvzb20QTE7Eh2mS89QB+5Us6V:vtp5GoZ7+VAtqw7S0R7E9Ou8V

    Score
    5/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral6behavioral7

    • Target

      䨪  + /discord.bat

    • Size

      732B

    • MD5

      2d31395c3e5d6a0fd0447d454c8ea207

    • SHA1

      6c28432e0d2d1c5f7616f03d3cb062c1dcd47a1b

    • SHA256

      cbd358f58d9a4daaddd338b9169213583fc8e81a241cadf5ef3fb5ee1f4b16ce

    • SHA512

      7d31ede94e514417547c9f52f4987a3e31bf5a8982f7c2977e01293870c5db21b120f54d4c1dfd35ce38de3639e79e9dd6fe3d28709cfaf18a45e27ad160a653

    Score
    5/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral8behavioral9

    • Target

      䨪  + /discord_youtube.bat

    • Size

      866B

    • MD5

      fb41e984a0f58a55d057b062059a6ee1

    • SHA1

      7bd17cddd02464e0ac4de1201fac889bd229bb1d

    • SHA256

      2c8c88df4eaf172e0ef39b4d6adedc3aa9d3ad04d3767cde8cadf997606144be

    • SHA512

      b8d488c5b92aa79a522376e4d4192c9c8fc822e66111324516552897ec68e9c00c5731295a49cedae97154dd5fffe40f7053dd224a93591c1d0138035c9d61ec

    Score
    5/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral11

    • Target

      䨪  + /service_discord.bat

    • Size

      1KB

    • MD5

      6ec0fc7266739cc18354363c8b7aefc3

    • SHA1

      a6e30ae9563797f2ee693584078aeeb91ea004f5

    • SHA256

      8364ee02ecd73e094e27dd2ca3b10ff0f3476b7af3f7f66f217672335f9f4364

    • SHA512

      35ab3321030849e8863e8d589172461c429148f6824ec55a9705592ae63abfc3e9f2b86ee705ed1468519f9e283ec272446d131fab7686394e32d0ce2902310b

    Score
    1/10
    behavioral12behavioral13

    • Target

      䨪  + /service_discord_youtube.bat

    • Size

      1KB

    • MD5

      6457e714a70eb8ed34bdedfabe22a3b0

    • SHA1

      faaa36daee676eb6ff1a1e12f4577e509520fad0

    • SHA256

      f1312377f6ea6cbc873ff90a9fde5b17392f335c225c133754d05a40125b42cb

    • SHA512

      0fefa9b8dad045025f2dc42d9d83e4e1d22d8f5df0fd6fd2be9d883c72f5dbd7a4392594108cc8a0f75d8dc7d519f2561e02b37a53762a96f320087de18a002a

    Score
    1/10
    behavioral14behavioral15

    • Target

      䨪  + /service_goodbye_discord.bat

    • Size

      1KB

    • MD5

      c31ea8859699a090ad10e35d6b0383ea

    • SHA1

      09488d53c5632b80ef3710d047fd3a19cb5653b8

    • SHA256

      32b29f16ef73204176601e2967a682e7dae4a27d81145fba955cada387574244

    • SHA512

      237d0f3f3e877ddfd9a5943117c3aaa7e18fb73716efcb6c4050dce158b9ceec65449e46188afffea6032971de7e1e4d56eedc3d6c2b5d1221880007319115b3

    Score
    1/10
    behavioral16behavioral17

    • Target

      䨪  + /service_remove.bat

    • Size

      478B

    • MD5

      3c028ba03ea8ee2b2c5ca1601cfa4dcb

    • SHA1

      683dec12b5c155571ef308489dbc51cad7ff3cd7

    • SHA256

      ad0df08abed59387015af6f3a44190b8f348ba33e32d1b11c6eb4b5ec1f6f89f

    • SHA512

      3aeba7242c9e1cdd37d9d9bfa9edc23bb4796bd9f81f34fc687b0497e8ece8b3e03d8e0927a186087e988595cbf94000a7db53ac7190a334db970afa4131da18

    Score
    1/10
    behavioral18behavioral19

MITRE ATT&CK Matrix

Tasks