Overview

overview

7

Static

static

7

droidkit-en-setup.exe

windows7-x64

7

droidkit-en-setup.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...Vs.dll

windows7-x64

3

$PLUGINSDI...Vs.dll

windows10-2004-x64

3

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...up.exe

windows7-x64

7

$PLUGINSDI...up.exe

windows10-2004-x64

7

$PLUGINSDI...00.dll

windows7-x64

1

$PLUGINSDI...00.dll

windows10-2004-x64

1

$PLUGINSDI...00.dll

windows7-x64

1

$PLUGINSDI...00.dll

windows10-2004-x64

1

$PLUGINSDIR/nsDui.dll

windows7-x64

3

$PLUGINSDIR/nsDui.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows7-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

$PLUGINSDI...ll.exe

windows7-x64

7

$PLUGINSDI...ll.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    droidkit-en-setup.exe
  • Size 19.6MB
  • Sample241110-dmlqmaxpev
  • SHA256 4e7982c1a982141773e2a47f43d0212c6e966457a4f96f7d05f5476d3e18a9af
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoveryupx

Malware Config

Targets

    • Target
      droidkit-en-setup.exe
    • Size 19.6MB
    • SHA256 4e7982c1a982141773e2a47f43d0212c6e966457a4f96f7d05f5476d3e18a9af
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/BgWorker.dll
    • Size 13KB
    • SHA256 d46ab59420f1eed08f2b4e93d9a2feb0986a5df703e33be0a739b0347c7dd618
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/CheckProVs.dll
    • Size 18KB
    • SHA256 64e6aad5d6628bc743196a42e28df3f8dc71cdf0d2ad4c250bab872d2a3991c7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/GoogleTracingLib.dll
    • Size 46KB
    • SHA256 5b8cadf540dd47d19b1020bf5c0aca1b6d14d9d875b0a5794b432401c60ee5c7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/System.dll
    • Size 22KB
    • SHA256 3924b57f8993a880d53e1e4e18eb6ba9b5dc610cbb00345c954c7e8a9078c309
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/dotNetFx45_Full_setup.exe
    • Size 982KB
    • SHA256 e434828818f81e6e1f5955e84caec08662bd154a80b24a71a2eda530d8b2f66a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12
    • Target
      $PLUGINSDIR/msvcp100.dll
    • Size 593KB
    • SHA256 934d882efd3c0f3f1efbc238ef87708f3879f5bb456d30af62f3368d58b6aa4c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral13behavioral14
    • Target
      $PLUGINSDIR/msvcr100.dll
    • Size 809KB
    • SHA256 ae3cb6c6afba9a4aa5c85f66023c35338ca579b30326dd02918f9d55259503d5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral15behavioral16
    • Target
      $PLUGINSDIR/nsDui.dll
    • Size 10.0MB
    • SHA256 3be54dea5aedc0d8d16d6c4bd4e046e2d93bfc550a1a035a94768c2d5901e327
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral17behavioral18
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 17KB
    • SHA256 863cfac6df27d31830edf983e68634860c3a4671303b956cfdf82f5f855b7913
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral19behavioral20
    • Target
      $PLUGINSDIR/nsProcess.dll
    • Size 15KB
    • SHA256 382aad28fa439b18d3d41a4652201c1d1542d73ff756a738c4cee6b75ebeca8f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral21behavioral22
    • Target
      $PLUGINSDIR/nsis7z.dll
    • Size 324KB
    • SHA256 e558416adceace0064b2d8c7fb2f880ee685cec167b723ab4ed5573734d798f3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral23behavioral24
    • Target
      $PLUGINSDIR/registry.dll
    • Size 35KB
    • SHA256 59120dcdf3315804ecaa8cb76b9cf5ee99f992407f30a11c6df8e23c09294c06
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral25behavioral26
    • Target
      $PLUGINSDIR/uninstall.exe
    • Size 8.2MB
    • SHA256 87801f6c52b6660a9f1cb8a832a5bbad75f7d086e3c141f547eafd633bd7cb76
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral27behavioral28
    • Target
      $PLUGINSDIR/BgWorker.dll
    • Size 13KB
    • SHA256 d46ab59420f1eed08f2b4e93d9a2feb0986a5df703e33be0a739b0347c7dd618
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral29behavioral30
    • Target
      $PLUGINSDIR/GoogleTracingLib.dll
    • Size 46KB
    • SHA256 5b8cadf540dd47d19b1020bf5c0aca1b6d14d9d875b0a5794b432401c60ee5c7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
7/10

behavioral12

discovery
Score
7/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
7/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10