6792d2d35d1f2a9dbe58b8b1e98f05ba5419bf7775d1520410069715ed891038

Sharing

Copy URL Twitter E-mail

General

Target
6792d2d35d1f2a9dbe58b8b1e98f05ba5419bf7775d1520410069715ed891038
Size 3.6MB
Sample241107-maftaazlay
SHA256 6792d2d35d1f2a9dbe58b8b1e98f05ba5419bf7775d1520410069715ed891038
MD5 3c2a821037178fafd11fb65064e5acb3
SHA1 b2553ba3251064023ac971aeef53af6c7907fb02
SHA512 2360f36174c04905dfbfa58ca452ba4dbab3b66f6fe6aedf07a6b246626d5da0a0fc896927a6c2bcbaa15cfc4c56ea1ea62905f0aa13b5af1874ae235734fe86
SSDEEP 98304:w8gm4/QfBGknOH8UWWf92Oav/58k5s6g79F:w8gC4knOdWU9Bap8CsdF
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

Malware Config

Targets

- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/list-viewer/assets/list-item.html
- Size 3KB
- SHA256 3b10db550ffa40251d7caa26f0a697918417214cacbd718029659ae5f0bbac96
- MD5 392450de7b9936d615a189cc38539132
- SHA1 d453d4fbb0ec99f266ea24d5efa8e3cc0e73f2f2
- SHA512 eab518a6b595dd078a993d64bf2bfbaa191cc26b57bb370edb7e6204d49a15aeb299bd82af1ab5f8f4e0133883d5e6fb8099ddb164bd5c21b6d437158bfa3d2e
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/list-viewer/assets/view.html
- Size 8KB
- SHA256 6e493106f4507c03fcdbb645409366f3d5234c76f50554d8ae0de296169aa21a
- MD5 128a67b76be2ac9d967b9af09b9762d2
- SHA1 0540d99c715fabb3fe9945dff8c6be6d9ec1c8b3
- SHA512 5a676caf9aec60e996e3159de969c77062a78d687d9dcc0ccde218cabc32d10d31c75572f68fff1dc0f11155ca13e41ba8e27c3c30c6c39f93baf78286831976
- SSDEEP 192:+B+o+xFN+xFwv2Y4TONsRUkUqmZGxgrnc:+wFYFPY4S3Cgc
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/list-viewer/main/index.js
- Size 1.2MB
- SHA256 1a4444a2cb95b21dcadefe239323e490fb120963bddcb74e06a53d6b37d19cd7
- MD5 88285dd865d1796a7435ffc55c7e2a37
- SHA1 6840849835739d366223bd4111f3d617c01f7b84
- SHA512 c21cfaac79e4536e9da854729cbe89972f5e3a3d6c39afb43bc9ec3fdeab8073b59ea06a5ba21d5f524ac0d77c3bba97adbbd92f1004d9d4b5441f70e2377276
- SSDEEP 24576:uuIZPZPR3pMget7Lw3+eMXwOwfVnpI+0TbuTIXOZq9jwkiUfCmLqjWw6XOT2WANp:gZPZPR3R2vLy2
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral5 behavioral6
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/list-viewer/preload/index.js
- Size 382B
- SHA256 12731f740fc3a4f8a7cee6ff760ed468697ccbfaec6317799dcdd0b51ba87fc5
- MD5 c231e3f3ba237b087d8f07f0d9241372
- SHA1 024f2103605490be00ba0a8b7797fd49c8107b2e
- SHA512 b6673dd201aa71ac9760cb71c04bf20aa239e0ac95213ce409c7b5298fe2aa525eafd8e8269abb7523b54f966cec7f9c0ea1c138364420ae0dfe75f5fdd3db8b
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral7 behavioral8
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/list-viewer/renderer/index.js
- Size 40KB
- SHA256 c3d9b47b14ecce69beebb7a6f8be1c08a22a20182ec0f51000581f11c490bd21
- MD5 aa721666c305aeeeacf13cc7188c2a18
- SHA1 e567942cc106a6377d70e77717937648e89c5962
- SHA512 20efacbc18156364abbe8cddb1347f6551071d28ccf4392e44813cc708e3bb3f68384edce5c96c64565a7f68e457532adc17ee76a8ba7f46104f8b307e2333bc
- SSDEEP 768:33NFzW21BBx2+A7pT37xKQQ6i0UEfbkOSXhI4fLZVSduf9xpf5A3ooKGVVJzm4W2:33xD0xnQ6i0zfbkOSXhI4fLZ2uVxpf5I
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral10 behavioral9
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/imgDownloader.js
- Size 4KB
- SHA256 8ee567ce0ceb70f4ed00e46fb7b5f3c7da89b5dec143256c09571b343be01c3b
- MD5 8a13f27e8c36198359c4bef1342b5db7
- SHA1 4bdba4fca55a2249721bc9843ebd018b7cb1d31d
- SHA512 222c51849d649255d758d864eb6cf028961ece63dafcd5d1504b94747a23f6797c914540ac5f72d352f38225412ed7604bba10b082f57679943005f3ce8856fd
- SSDEEP 48:x6szGzBxJ6kRj/rLtCQGOlfHuUn3HzcT3Yy7rnYl+2U24qg/GbY/Gbv+fKF4pmUT:xTadxJ//xfHuUXz1y7T2UXBLPT
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral11 behavioral12
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/main.js
- Size 17KB
- SHA256 d15b41d710275e2ef87c52d54970426f0de45c095a58752258979ef5326259ba
- MD5 ffc9977a6bd95af20b138433ef8c474a
- SHA1 52bcaf395a22f3e41c544611afffd52021281c97
- SHA512 537084b7c3ca986e8e1d98d6a7f9f6f116d08cf808ecb7cc2b6429a88b1668cbb6ffba28c5085de4343f143bab689701badb2e31802c65dda998ffb3cab1960a
- SSDEEP 384:yO/NktbyCFQKMY8rrFMV8NKlpHxHlb1OoM:7TQUjrFMVdFb1OX
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral13 behavioral14
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build
- Size 310B
- SHA256 2c34c104880b8ac95bea71c954c848697835b3aeeacbd6cb01369b237e2e295a
- MD5 12cbf3babb786218def63efb615f8b6f
- SHA1 acf59353111d1c24e1622d5fc86cb449cb182c61
- SHA512 98f0acc66694d2b1732364f69f777b2df58c3cd477029c50b4cc62965dc0f7c518e149ecc9670283636aa92306559b1c7998fd2a1353d026107054aa7639c585
- MD5 SHA1 SHA512
Score

4^/10

discovery execution antivm
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-optional
- Size 320B
- SHA256 7a2579617eebed9e4a7d860a2c0e149d0236117810d1c53a0a7041737bed5ec1
- MD5 c13608407ba10ce1acffd1a92455ae71
- SHA1 1a9e2cc78d977b02068b7fc93dd95c183a13a5f6
- SHA512 3ad46ce9cb92eb1eb5435c2fdc4ec3b1d199e1aa69a4bc2f8fbdace18322548f40433a044c9849dcd267bcadc98bbfc5c1f2b9553c11155376c2786691450343
- MD5 SHA1 SHA512
Score

4^/10

discovery antivm
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-optional.cmd
- Size 331B
- SHA256 da44b2c1cd136f824fe957b8dde4642154d4710c7c7bb91582b20236e71bd729
- MD5 c384d0b8cf1f9da7e1fc02b68925d90a
- SHA1 7f5b4f85e33f27b781c0daade2d06ac5cbf864ec
- SHA512 60ef6b7e236f06d94a093e6c2bf1faa8b900e075a368013c447c43de11517eaf576cdae63a43051c73fbce4eea94570e35939a8782140ba26ea3aaa1832fa714
- MD5 SHA1 SHA512
Score

1^/10
behavioral23 behavioral24
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-optional.ps1
- Size 829B
- SHA256 77f7395b308fcc84e1f90d6cd5208f6429b9c5275a3b9f21dc6e6b4b2ff99972
- MD5 82a94d3fa50e219462a6fcdedc1690dc
- SHA1 f94b03f65477ba7ed8fea534f6049c976436f642
- SHA512 4c2f9355954382f621891e1729294e88af1fd3cf269de68ae93d9957e16263784895090742a18ac207326bfe1cf13716aeb784e8f74b6d2510e8488603127d6f
- MD5 SHA1 SHA512
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-test
- Size 324B
- SHA256 5afc301d22d0441c71ce3277c844fc066029e715698f09e769cff83b562695c9
- MD5 f87430448b9c6fa9d758d12638d01488
- SHA1 2cd0d4c025a0caaf193b4a15eaf3f6ff0b4c2fa0
- SHA512 1e402544e068dbd86c058a0a48decce1ec58bd5079be2469d918d8b9601444c158b8d7bb05b87126f7495713583b2944dd84bad24f21353c65f3f32c09075206
- MD5 SHA1 SHA512
Score

4^/10

discovery antivm
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32