Overview

overview

3

Static

static

3

AbRoot.dll

windows7-x64

1

AbRoot.dll

windows10-2004-x64

1

AdTree.dll

windows7-x64

1

AdTree.dll

windows10-2004-x64

1

QtCore4.dll

windows7-x64

3

QtCore4.dll

windows10-2004-x64

3

QtGui4.dll

windows7-x64

3

QtGui4.dll

windows10-2004-x64

3

QtNetwork4.dll

windows7-x64

3

QtNetwork4.dll

windows10-2004-x64

3

QtWebKit4.dll

windows7-x64

3

QtWebKit4.dll

windows10-2004-x64

3

Setup.exe

windows7-x64

3

Setup.exe

windows10-2004-x64

3

iasdatastore.dll

windows10-2004-x64

3

msvcp100.dll

windows7-x64

3

msvcp100.dll

windows10-2004-x64

3

msvcr100.dll

windows7-x64

3

msvcr100.dll

windows10-2004-x64

3

opengl64.exe

windows7-x64

1

opengl64.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9fd243e45a3adafa1f2cab377682a1c9abb9a849f9f406157b19b9c1528bd0e0.zip

  • Size

    19.1MB

  • Sample

    241026-ctgvkszapm

  • MD5

    232fda65747e917d29109212a5af35c6

  • SHA1

    004f5a160e5b606186c42b055423b990aad4cc09

  • SHA256

    9fd243e45a3adafa1f2cab377682a1c9abb9a849f9f406157b19b9c1528bd0e0

  • SHA512

    1f92583b352126f3595a19d7ab036f1eda42cb954a0139fb8763c9df4a3917cc234bb39491b0f0759ae186a63f3b87939990a378d5d6dce430209f571fe04ae8

  • SSDEEP

    393216:2272RZJf8+mjak+Q6DeA4KOpblP3SK4ZrYFozZy9vKpD0k95f4XP/p:PWZR+jaRQZA4DpblP3ISFMZQvKpwk9cJ

Score
3/10
discovery

Malware Config

Targets

    • Target

      AbRoot.dll

    • Size

      355KB

    • MD5

      530957a391c6bc978ae7179179594b12

    • SHA1

      f174b1575ebc2f6612272cf39215d5dc27ee6b38

    • SHA256

      9fbeab4bcfcec34dc13cad90609101b2ea099069ab173555635f174597e4ea09

    • SHA512

      9f3da37b8b8047bcc463c2d12360c6bc99bf35868a14222abb2108e103bab5355d1c069d5ac775bd3c7c953a9c8c3299bd61287c4fb7a074f36a4450e95368e2

    • SSDEEP

      3072:mB16MsQd1V0rSJkRd2Ygeu1qs93J2FooJafVMkZuP9Dy4s5zTG22+xF0KA6ppDwZ:mBXT1V0WojDy4s5MQV0jw0

    Score
    1/10
    behavioral1behavioral2

    • Target

      AdTree.dll

    • Size

      355KB

    • MD5

      530957a391c6bc978ae7179179594b12

    • SHA1

      f174b1575ebc2f6612272cf39215d5dc27ee6b38

    • SHA256

      9fbeab4bcfcec34dc13cad90609101b2ea099069ab173555635f174597e4ea09

    • SHA512

      9f3da37b8b8047bcc463c2d12360c6bc99bf35868a14222abb2108e103bab5355d1c069d5ac775bd3c7c953a9c8c3299bd61287c4fb7a074f36a4450e95368e2

    • SSDEEP

      3072:mB16MsQd1V0rSJkRd2Ygeu1qs93J2FooJafVMkZuP9Dy4s5zTG22+xF0KA6ppDwZ:mBXT1V0WojDy4s5MQV0jw0

    Score
    1/10
    behavioral3behavioral4

    • Target

      QtCore4.dll

    • Size

      2.5MB

    • MD5

      fecc62a37d37d9759e6b02041728aa23

    • SHA1

      0c5f646caef7a6e9073d58ed698f6cfbfb2883a3

    • SHA256

      94c1395153d7758900979351e633ab68d22ae9b306ef8e253b712a1aab54c805

    • SHA512

      698f90f1248dacbd4bdc49045a4e80972783d9dcec120d187abd08f5ef03224b511f7870320938b7e8be049c243ffb1c450c847429434ef2e2c09288cb9286a6

    • SSDEEP

      49152:VTFgiFpGXOENKSgjGkJsv6tWKFdu9C6TELyvL/6mShMZtmjNUVrciV5P+7QVg07/:V+iDaWjxJsv6tWKFdu9CZgfQ

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      QtGui4.dll

    • Size

      8.2MB

    • MD5

      831ba3a8c9d9916bdf82e07a3e8338cc

    • SHA1

      6c89fd258937427d14d5042736fdfccd0049f042

    • SHA256

      d2c8c8b6cc783e4c00a5ef3365457d776dfc1205a346b676915e39d434f5a52d

    • SHA512

      beda57851e0e3781ece1d0ee53a3f86c52ba99cb045943227b6c8fc1848a452269f2768bf4c661e27ddfbe436df82cfd1de54706d814f81797a13fefec4602c5

    • SSDEEP

      98304:YxRJATZlLne1/cF6ZWHxD1HFH+J+70msIWeiLtRgi3d4PJpTcSqxyr:YxiZBG2xpljTcJy

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      QtNetwork4.dll

    • Size

      1.0MB

    • MD5

      8a2e025fd3ddd56c8e4f63416e46e2ec

    • SHA1

      5f58feb11e84aa41d5548f5a30fc758221e9dd64

    • SHA256

      52ae07d1d6a467283055a3512d655b6a43a42767024e57279784701206d97003

    • SHA512

      8e3a449163e775dc000e9674bca81ffabc7fecd9278da5a40659620cfc9cc07f50cc29341e74176fe10717b2a12ea3d5148d1ffc906bc809b1cd5c8c59de7ba1

    • SSDEEP

      12288:m+PpRNPe4+DZFvnwJ9o+Hllp59K03AskvvukLosiLHrv7F0YmIYunuGS:m+hRCZhwY+Hllp59OHvfo7HrCYmItnC

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      QtWebKit4.dll

    • Size

      12.5MB

    • MD5

      9dc82a9b33a2c04dbeb671c6edf76caa

    • SHA1

      039db543d6f710d32b235dd9c8dc96058ce51832

    • SHA256

      bda7fb47d02d4ab1464dd7cd18a0cf1a4c12fdc0d17182541040b113118ed725

    • SHA512

      155c40f6b47b7dac4030be691af53a0560f5d763d0e40fa2d596c6dd79ee8250d526f1de2fe7861eb8ca727cacde84612a9eed44e68edfad5f3f3906eb731d15

    • SSDEEP

      98304:KfyKJXPSGJ9opKMT/HSWmgskU9Kbrh0oHCXRm6fIh5dEDlxnZTZQFlNNN7wIcQ0U:KKmcpZ3sE/+oHCX82g+JxnmtcQ0

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      Setup.exe

    • Size

      80KB

    • MD5

      2a8613b7d99903516b8fe02fd820bf52

    • SHA1

      78a96addcb556ab1d490fac80f929305263d06b9

    • SHA256

      f1d68c5e7c7660d4f2ce412c109b7fe3e088872fa0ebe61ca9ab9dd92a496407

    • SHA512

      af0902aeb6169ea507b787da7b61c3533df4610c3f51c1d8f65dfc9008c8ce2580f2d86a49a4d0acc2c51c731f3e4c447d0d1d8e779dc1c75e43d30b79c46436

    • SSDEEP

      1536:9A8oAY5SXfidLez+Q+EGfdUHLLXJ+CqoVpPBucQwk7qnKXKo5OMY8xk03ben8TK:M7Ohz+Q+EGlUHLLXJ+CqoTPBucQwktXS

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      iasdatastore.dll

    • Size

      54KB

    • MD5

      e50e4d385a74164d581523f88b38537c

    • SHA1

      86a53771aa760ac66126e1136732ae3979cf54db

    • SHA256

      b96dadf3676d2dbbb44ac2639b43ec71d2c87b3285bac85b11cf0291a7077939

    • SHA512

      eb0177614a2a295690b821812aacb99ffb3254bec41f320a45e720300092fb74e3d79e43bfaeb7dbf2ead9ac10a13920d939507343bd3bf820482f7bcc0d94d1

    • SSDEEP

      1536:HAW8BRpNOx1n1pcLMGSUGjwdhm04803LDmmfU9iDCNw6FQpeRR:HAW8BRpNOxuMrUGjwdhm048WLDVfUUDQ

    Score
    3/10
    discovery
    behavioral15

    • Target

      msvcp100.dll

    • Size

      411KB

    • MD5

      03e9314004f504a14a61c3d364b62f66

    • SHA1

      0aa3caac24fdf9d9d4c618e2bbf0a063036cd55d

    • SHA256

      a3ba6421991241bea9c8334b62c3088f8f131ab906c3cc52113945d05016a35f

    • SHA512

      2fcff4439d2759d93c57d49b24f28ae89b7698e284e76ac65fe2b50bdefc23a8cc3c83891d671de4e4c0f036cef810856de79ac2b028aa89a895bf35abff8c8d

    • SSDEEP

      12288:iHEqYsrMWIqz473PTiPoH/aGhUgiW6QR7t5qv3Ooc8UHkC2eKq87:iH9YsIWIW4rPTiPofaDv3Ooc8UHkC2e8

    Score
    3/10
    discovery
    behavioral16behavioral17

    • Target

      msvcr100.dll

    • Size

      752KB

    • MD5

      67ec459e42d3081dd8fd34356f7cafc1

    • SHA1

      1738050616169d5b17b5adac3ff0370b8c642734

    • SHA256

      1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067

    • SHA512

      9ed1c106df217e0b4e4fbd1f4275486ceba1d8a225d6c7e47b854b0b5e6158135b81be926f51db0ad5c624f9bd1d09282332cf064680dc9f7d287073b9686d33

    • SSDEEP

      12288:fQmCy3NeRjkpQmj3oaMtQqjoygfXq3kon9IlbgaOxQdVJJ6j5EBKX8hR5:ImCy3VQs9MtLjTgfa3kon9FaOdEz5

    Score
    3/10
    discovery
    behavioral18behavioral19

    • Target

      opengl64.dll

    • Size

      17.7MB

    • MD5

      0a84667145e7efef026c888d4b768126

    • SHA1

      27673e1bd7c55bba6eaa37620d3b3820ce45d46a

    • SHA256

      dd575f3c64382193610815909bd2c52490244ecbbb9bba6eef5fe4f0bb43bb4d

    • SHA512

      3e964c996ed358787c4dfdb965a00b38b4118c804ae1bf8d32aeb7d936584e72c188e3fa0d27d1c2ffd3be13dca8045b08b28b15070812c195d82d1bf23a2604

    • SSDEEP

      393216:PXhbUNnoBP98OQ//aXUszfTBHCOUZ2UenCDkOH2:PXhNB4nlW

    Score
    1/10
    behavioral20behavioral21

MITRE ATT&CK Enterprise v15

Tasks