83239ee058d2a5bf120848dd900654a94c770cce8c4cbe2a971b861795316a98

Sharing

Copy URL Twitter E-mail

General

Target
Dimethylcadmium.exe-main.zip
Size 10.2MB
Sample241107-byx7pasgnm
SHA256 83239ee058d2a5bf120848dd900654a94c770cce8c4cbe2a971b861795316a98
MD5 4fbed3a4ec1f70d0e89019b3569748a3
SHA1 f5acdf821a2387c7c31f1cfe0a89af565271507d
SHA512 2ad8e34114d5e1e0736be97d736e5f4bb84fc3ef896d9d6f5addb09358563f4b92c8254ed4c258746ce06d599ad9e9d2abc1c1421dbcd0b6a7dd06f7e1abb188
SSDEEP 196608:rY7z7QWr7+US5gpmjnY2SL0pE3lQU8PARo94wd/yVuL6im99oEfRxYQ1/i0dk8Fu:rY7z71m1uL0kuUy9d/yVuIYOaAxm
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  Dimethylcadmium.exe-main.zip
- Size 10.2MB
- SHA256 83239ee058d2a5bf120848dd900654a94c770cce8c4cbe2a971b861795316a98
- MD5 4fbed3a4ec1f70d0e89019b3569748a3
- SHA1 f5acdf821a2387c7c31f1cfe0a89af565271507d
- SHA512 2ad8e34114d5e1e0736be97d736e5f4bb84fc3ef896d9d6f5addb09358563f4b92c8254ed4c258746ce06d599ad9e9d2abc1c1421dbcd0b6a7dd06f7e1abb188
- SSDEEP 196608:rY7z7QWr7+US5gpmjnY2SL0pE3lQU8PARo94wd/yVuL6im99oEfRxYQ1/i0dk8Fu:rY7z71m1uL0kuUy9d/yVuIYOaAxm
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  Dimethylcadmium.exe-main/Dimethylcadmium source code.zip
- Size 10.2MB
- SHA256 b1be40c9c9dff3b86c02080601559eaf152250918a6478725fdfeb896dcb5474
- MD5 5ddbdc18d0204869644922cf89ee2486
- SHA1 ba00ca53d6f20946db99bab914e98a96a0d7fbab
- SHA512 30f2dbf00e8da5eac3a315521d65906ebdeaadbc92a3fa16f41455df9e693c8f012b32b8965366bae18c20cedbc7c1e1fc928534c7889ffaa3618fd45d1a9d94
- SSDEEP 196608:2k9XnGC99OO2DCvqZh2KgHwLGjbk+EA3GzSSLFSVkhI+QdJ6EnxBkgYTV2mc8pEF:2k9Xn9WrSH8mbknZLFSVkECGsYanov
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Dimethylcadmium.dev
- Size 1KB
- SHA256 dde8b44520eaa6b46d81c8513a948f51e0e5d794c06212bbe7deacec090126d3
- MD5 03878ee4da917f9c7e1d4333b5787776
- SHA1 900ab8ade0a6991322998f5f9988c5cf713f3b3e
- SHA512 e7567422e517c52d203f2d2727f383f68d0f029c5b530f610bca4bd9a7cfb2817dd8a10f376834e8b445ddc0bce65575123df4fa303bd1873907c0e22d4b939e
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Dimethylcadmium.exe
- Size 59KB
- SHA256 36504aead5b06ea8d0dfc3d01c7a38063f1895e8c146756d44b6792210c8f072
- MD5 88447f4d05e7d9cb19c11333c1bfa788
- SHA1 1059cc274a2de48f50629cd924aec5bfc307b817
- SHA512 64b7584612e6a71c84a1decd954cb3b2698801193a6fee8492325d59032ecba596d3c3c5b5ae4796224c000bfbd08921eb3ed760146f0d9c141a54790fdb0a2e
- SSDEEP 768:C414KuzvDEqWF3lI5oiVVG+A1yAR2PmD48:ziqjoG+Gxh
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10

bootkit discovery persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral7 behavioral8
- Target
  Dimethylcadmium.ico
- Size 4KB
- SHA256 14f9b97d1ed24286400851c4edb0a9e687e43662284ac040ec65ce17b2385717
- MD5 0b1137c0a08dbc5565a9cc9474f7013f
- SHA1 b6424220cfe5c98d10d122c8aa27fed2e0e95fe2
- SHA512 6f67a896c7ce5d43d010f189fd0b0b66a7256a97156a490a3b49902711d0d0fce2a3c39b83de2460c0488076b4d7c9d5b94feffc556321bd79f58f35296d0cdd
- SSDEEP 48:bVyhUu20zfZeu3zdyDpmbCLQspOna/QLJASzJBLVw+xL1KXLsPXkg7:MWYutC/wMOO
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  Dimethylcadmium.layout
- Size 99B
- SHA256 b526bd09eb9d87769188807ee49daff75961098aa20f82b799b823f966f3fd91
- MD5 223273dde8fd7ab7a98d685a4e06df53
- SHA1 7b8fc4f6d3c901dc3f3023a9a085727cf8186dae
- SHA512 18b693e7e4ea38af10f95c050237e7e9e2a2552c556e12af8c1010fb7ee8f9bb090831c18e84a3ff19073544f329616165889692e3c6451a9d8a0b1493c9b35a
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Dimethylcadmium_private.h
- Size 590B
- SHA256 7262c28785bd267364dee51f2f3ae936990768c46d9fb0a9755860cf908f36b4
- MD5 29d57c57fcfab080d8ec67ad6e3417c1
- SHA1 194c7502d04c7d8b25d30479786057cda7915069
- SHA512 925da22d7570a85b45d588eb6d3c28a9ecc04797f0ce9844981d179d15c2b8940af0f5aa00dfbf07b91f05c4bfd2e79f0b678668fa9a15ece467c612e53ec5c6
- MD5 SHA1 SHA512
Score

3^/10
behavioral13 behavioral14
- Target
  Dimethylcadmium_private.rc
- Size 779B
- SHA256 b6093f97d44328623cd6337c50fcb9df0f21cf83432d523a604a865bf72f3ede
- MD5 8a5217704f4f140bceba46ba79593c4e
- SHA1 82f35308f45ace369de206cc0b99e1bb5f6bdd05
- SHA512 110cace8ec983ffe3bf5fee6db55438d86cea2305ada99beb54faff7e96c733cf1b9537a62d212e2ef836a4bf7eb5a9802407f388a585489cf6116bc555a1da1
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Dimethylcadmium_private.res
- Size 5KB
- SHA256 cb586512784f1dd11f518f1ba9dd24be628f26fdbe62243d75f34e302e0abae8
- MD5 e3522987781fc70869dd04a4413df12b
- SHA1 ac4d91cd8d8832cd34cec155a4d323272f2e06b7
- SHA512 2e73c1079c2fd3c4af9a2f7e4629aaf51a7905ff083e551e9cbf514e90b3d33be9093120cba003b81c1cbbd44f32f3517f7d3bc53868c67b95840240133eb486
- SSDEEP 48:FSVyhUu20zfZeu3zdyDpmbCLQspOna/QLJASzJBLVw+xL1KXLsPXkg7pWXla0VRJ:xWYutC/wMO8uRhJ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Makefile.win
- Size 1KB
- SHA256 a6284ab963acc5c3b1706e09e7fad6e3b53685928422a439a09ce4b192b47c96
- MD5 42e632c27b48a12b53683e416373cc0e
- SHA1 cff1713fb44c49d14ae9668773429ab0fecbe8e9
- SHA512 3f3499ab31cb81c2230e464d18c6333cd31840a917805255207a27c5d2c20215d41e06ebfea96fa7f025237af61e673ae3c4870eca4a622341d39b26e7694e36
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  PayloadMBR/Create.bat
- Size 397B
- SHA256 05a3a4faa2422e5d923439f6bafb331e0c1a2a2a334f376bdda6a49feef90e09
- MD5 61e988b23f22b1c21626df02ca92b010
- SHA1 bd60038f968325dbe556f583d0ae7ea306c6d332
- SHA512 cbc564bd2af5b901cacb2114ab26a4dce12575a3e6a2fb20547adfef0605b2481020faa9837556fcec3fbecee146ce373905535f58c86a8f1d81e624574b2538
- MD5 SHA1 SHA512
Score

1^/10
behavioral21 behavioral22
- Target
  PayloadMBR/Data/decompress.asm
- Size 1018B
- SHA256 3711c36eb6c4c93c88ee8fe31d2f32e4324b83a8336e7ca24e5adc3206dfa572
- MD5 92d328c40ad015ee16ca8e0a3024bddc
- SHA1 323f2cb3eb6f3315aab84dee013ace175c47d87f
- SHA512 f22b86fb492f07622a2fdfc4462e530f49bbc532cf0a2eddb4c17e7e91b55f8ca1a730cff49420bb8d84b248f54ad3987523a3fd4d404baaa4a5629a3558672e
- MD5 SHA1 SHA512
Score

3^/10
behavioral23 behavioral24
- Target
  PayloadMBR/Data/kernel.asm
- Size 5KB
- SHA256 6eb08dcb31b524997c5c04101d75fc383c641e74f0e8e22f531ca0e32554d488
- MD5 cbbbdd6f0e7adf9e8a98744775875d42
- SHA1 185ed2eede1707d408a59b162ff0ec07c4405af8
- SHA512 59395fbf5008418064f68f37ff20fd84f3983af813763f174ad5f78ef9bde8c5a628920f476cf758b6101434015f4a81f6f3aa525969c46c72e0e19dc3dff928
- SSDEEP 96:C13zH/W+ie+3IXw+06pdF2flVihXhsUihMKlh8DdX9cous3:k/WLeMVGWdV4XaU4MKlaDlt3
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral25 behavioral26
- Target
  PayloadMBR/Image/Custom.bin
- Size 10KB
- SHA256 3f7f14087ea72ff9bfde4c3b3265a672d34f829d1850d23d7a1e86ab9a1f9aa7
- MD5 0109d6add9c2e43b5b06506599795450
- SHA1 9550a84ca3e6b2b513d47d446a0b87fac5dc8367
- SHA512 e1211066f9e772cca6d03013397e7acf168c7210b2cb1c394fa6491d6b52ba2dd96c8e6f84bc97d54826bd9c4ba761617f94b07c0b7de7e2211be166cd6ab248
- SSDEEP 192:UlIy3oeAczv6/AAJAM0+ciVqDeWKOhLJE7ebNOtuyj/0kT55mj72OdUz7JHGp:UlVoXcqJJKiVjRG+AAoyT0h72VPJmp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  PayloadMBR/Image/Custom.png
- Size 13KB
- SHA256 d11d15dc005bd759cb40fc5a6447517a56d9018166bbbc1e6ad6f20f82b8b6df
- MD5 bbc3e247db574aefd97c369b6290070f
- SHA1 559355da8b131fba6ce91613d6866c930e6bd8f0
- SHA512 2f78cd7a8bb1b226531c2cc0b13e5e2eef219c3867a0d035392ff6cf17572c1e0399c767c9791418b68ab2362465028eeb597633dbb694af3e9166126f74d987
- SSDEEP 384:PUUQQ/p3+yU7vgWy847zpj5k+9K0EJJkdffih/SAp:PnQK3+yd8uD/EJJkdHihjp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30
- Target
  PayloadMBR/Programs/QEMU/SDL.dll
- Size 1.0MB
- SHA256 0cce4795789a49c433d7f9d1ce7663f265f948f672ebde5fec41f2447fcd8741
- MD5 cea03998e710dc5bfc4954cde440333d
- SHA1 a6490955fa171fd85a6e64d06642e129493c7ba4
- SHA512 c2aa76413fa9526abad2a3a61f3d0595027df32bcb7e0005a654625a7c894f386563d277ccda89d6eb96fdb869d262252927cfdf764c26c2dfd5cc966d23cfa3
- SSDEEP 12288:lFqs6ZgPvI6bw3uJwV/MRb2F6t1YAG7S86OIYO8iJghIQoXk6MEgw4u8XcQexssC:lFqs6gvIgoYSF6vE7CwoQ6LwUGdL
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Writes to the Master Boot Record (MBR)

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32