Resubmissions

15-11-2024 10:53

241115-myzajatamm 9

15-11-2024 10:11

241115-l79l7asepg 9

General

  • Target

    Serenade Setup 2.0.2.exe

  • Size

    750.0MB

  • Sample

    241115-l79l7asepg

  • MD5

    7550f00493f5b95e3c62a8cdc63e7446

  • SHA1

    56f07006c160d57528536510f406b30bf8581ffd

  • SHA256

    0ec02fb511759d2d42156981bfb2fc74fc276367e532c300d924d6deed7f47cb

  • SHA512

    aab882344224da1e1ce5ccc647a8a5d114e70924079c28eb3a4100c139a7b9b30de7e96310c7ac2ad9d206ebf6b1f6f8e26dcf27487b731fa875dcffdfd92526

  • SSDEEP

    12582912:MKAbYTv6cMZdzHCKEpp51vma62yI/wZbLSb4/2GgfToav9/MUzz52Sp3y:MrCv6cMZ4vctIIxmg2/fl0Uzl2S3

Malware Config

Targets

    • Target

      Serenade Setup 2.0.2.exe

    • Size

      750.0MB

    • MD5

      7550f00493f5b95e3c62a8cdc63e7446

    • SHA1

      56f07006c160d57528536510f406b30bf8581ffd

    • SHA256

      0ec02fb511759d2d42156981bfb2fc74fc276367e532c300d924d6deed7f47cb

    • SHA512

      aab882344224da1e1ce5ccc647a8a5d114e70924079c28eb3a4100c139a7b9b30de7e96310c7ac2ad9d206ebf6b1f6f8e26dcf27487b731fa875dcffdfd92526

    • SSDEEP

      12582912:MKAbYTv6cMZdzHCKEpp51vma62yI/wZbLSb4/2GgfToav9/MUzz52Sp3y:MrCv6cMZ4vctIIxmg2/fl0Uzl2S3

    • Renames multiple (56) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • A potential corporate email address has been identified in the URL: [email protected]

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Detected potential entity reuse from brand MICROSOFT.

    • Enumerates processes with tasklist

    • Target

      $PLUGINSDIR/SpiderBanner.dll

    • Size

      9KB

    • MD5

      17309e33b596ba3a5693b4d3e85cf8d7

    • SHA1

      7d361836cf53df42021c7f2b148aec9458818c01

    • SHA256

      996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

    • SHA512

      1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

    • SSDEEP

      192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY

    Score
    3/10
    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    • Target

      resources/app/static/local/jdk/lib/jspawnhelper

    • Size

      18KB

    • MD5

      10621a52ff16f2dda255a4089d104b86

    • SHA1

      936c939b3a930a8fd85220abc6711320bab4d20c

    • SHA256

      b3914d8c793f5e39769e168ef7602729e0ca09b0555deda410cb47410eeff479

    • SHA512

      e90a5fb6d5f145b803e92a34a5dd93b16fbb917161ce3478b7e53db42809b2a06cdc7c0d4d8411b00af9acf80cad5e43d54a4c0fd57fca3bcc5b4a10d7fdfda3

    • SSDEEP

      192:Rxf8X6WSts7Y+zXjTNGYIyssr+EPlsT6VvNuFBKl8GG6Us:u6dsDXjTNGYI3sRl0ypv

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libawt.so

    • Size

      766KB

    • MD5

      5baf8297715e1b26cd66d77b4f2be10b

    • SHA1

      a144d8f5e6d7d41795c24372cba8df14141abbda

    • SHA256

      faf61e85e1939a3a56e00fbbaa8159d8b3b6b681be12089cd713486edb78bd77

    • SHA512

      735de264917346dc7c5ec3fd7c8ee0bdab546a1ff775ff886bdd55d5ef6eb3c9dab7088c3b7799ae7b607ff69c2d7ab663a5d7fb0992b9b0b13a1a8adef1fc48

    • SSDEEP

      6144:ZIFLFwAYCtV8V3F77+RigU0MSmnqidXd3ZFmspsrQNdRL+yK9u0jZ7Jpyg:ZOeb0Wqgns8RL4Jk

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libawt_headless.so

    • Size

      43KB

    • MD5

      8ed1905a8e2ab925c79951eb2ef7f3ba

    • SHA1

      5e893701f07aac4d5104a0218ec26453360365cf

    • SHA256

      9a0ecb9699b87cb938e6395e826af18abfcb7c163869225f475e23e36673a5a6

    • SHA512

      5c9bb19fd01a314fe4d3b99636c5be8613da2f469dc9fd52785f3b0214031521d06c3348da4ead5d00533f7f67b3a51a1a9cb167078bf642e45dec353600b308

    • SSDEEP

      768:9wvR9T4RWF6DDPaSkd6qBfO1ZHKVbxHX58mvR9T4M:93DDG6qBfOZqVb9J8

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libawt_xawt.so

    • Size

      463KB

    • MD5

      64266fabe8c54c268537c3370db60581

    • SHA1

      7c9bbdf064c0188a22f89be581a94c403299660e

    • SHA256

      beb115b282130c0605f8e07c36fa0cdf9226a876c6a97f27c4430e2cb6c77f29

    • SHA512

      d5a9a2990ab9d010288eb8e210bad2f19743852b44091d4e2b82663c26103dd2b215f28fdcc55e3f4ae101c0833b99c25307d482f764691623d0925c2190c9cb

    • SSDEEP

      6144:mkd9h7ULJ0y/IjHriXnG/3Ip1/deZ/tHku5JSUjCC2k6:NThcA5vIV4BbbSs/

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libfontmanager.so

    • Size

      1.4MB

    • MD5

      4582529a912159464a817e6ef6a2406f

    • SHA1

      e9ea9b2848de26443002be53b25cd599111c919f

    • SHA256

      22ce164ea404128b424f6479bb491cc098d56f1439dc856f16eec7cf02389941

    • SHA512

      98b97ed9d2e8c8551453dbce1aa61859131ac88f0d83b101150505399fcb641056e1bb801f8f6ae1e34b59d56ebfe993de35bcbe05a19439c1119856567560a9

    • SSDEEP

      24576:Y6lqt7Ax53c+aZEbRenOdU7/Hgt5qyiOADeOdtUvvolXy:Ywqt9+xR1lLADeSGvolXy

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libj2gss.so

    • Size

      46KB

    • MD5

      2b87750810f8bad222b267f5f27a3abe

    • SHA1

      0479631a56d5f4cbb59c48e276ea534276f6425e

    • SHA256

      489961b1baa4f017a29114db8e7b0d49324fd7e39534fa9877087b8539a26d70

    • SHA512

      e35b68983e8da52d67fc80bc7700d4b111ca3153c7b389965a6e56668bc6dca3ab10a28df32dccda07f17d05417f745cf22efc50b0269ea1fbce981ca944fc56

    • SSDEEP

      768:/tZvjTeWJpmR5NFV9QraV3YeU8AIiSV4tOrPaVe+ArQ:jeWJpaNFIraV3YeU8AIXV4tOzU

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libjava.so

    • Size

      182KB

    • MD5

      0cf7fc900999ae6a1193ce9b53db215d

    • SHA1

      aa2cdbe12890e5d8b24c2092bff505b47d44e29a

    • SHA256

      cc198cbc612a5e7df81e6a58f82285db66cc65bbbd1e835872a7695788d1df04

    • SHA512

      45a0d480037172755254ed554a059b903c005ce596c03099128b7fc7b5f922170730b3285e0216257d5959a24488072781fd601068702e21ec26641a5cc06d22

    • SSDEEP

      3072:O8biZ7XL5+OcTXDala1tigp6rAZsmLdQ7Ht8b:6fkHXWl6

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libjavajpeg.so

    • Size

      239KB

    • MD5

      5d2aac1aaa32f87d660f7c0f9b88d556

    • SHA1

      9e3327132f6255bfcc21b0a4cd57819506745a87

    • SHA256

      6c05b7260dab2e4e6dd7b6e253e5296fa057ad1c341ad637dae7f87def6aca1c

    • SHA512

      fcccb5568ef29aaa21906f42c3cf2535b58b04dcf09a6ceb738b8637f860ccff7d7991ae029725a130d7d5911bfd6578cd626c756eeba792aa961caa1e0f1b5e

    • SSDEEP

      3072:+Y3xat/9GcbRppQNB5PGqX9LwRdvZtdJOzB7KlU5v3g4dkJ2VpB2n/FjfGWmrJZU:Z3xK/By5Orn7d8zB7JxpB2/FG/rJ

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libjawt.so

    • Size

      8KB

    • MD5

      d4187cfdbc12d8eb639f8da8b365c979

    • SHA1

      2a3411f4d07304c07fe72846b3d3752ed0e167f9

    • SHA256

      d560733e460f0e55087134c9a17f294165a1f3614cd136cb5837a52b906dcf16

    • SHA512

      48d78cfc30c3e4c5d37782e0623c933707ca94e6ce9f4c12c717cb6a86e6565b6c7b7db9438267679505388fafaebf884a9ee74f58582f06614f4ff1fe412753

    • SSDEEP

      96:RaaokMBWBHGoWEm9vY7GfZSNqusa7gmMBWB7GbrmwqkAJAW:RHod8tKEmbzuL285O

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libjimage.so

    • Size

      138KB

    • MD5

      9e48040cc6d2655a61ff74327a9c8d1e

    • SHA1

      c8954438d01ddf8e2b3379e7112a97c69db3c885

    • SHA256

      76ca37b73dc795a3f8646b56a3e00f47dd579d04b1853ac17d1de60dcf1b0dd1

    • SHA512

      3e2ac177717e90fe00432290a302f9fc1d92057f77444de9c8851340729ef1bb168307e0ecdcc06b59ce009a2c3048a5b0bc326438983e4d606ca337ccd90f53

    • SSDEEP

      3072:QQ/itawphYntZoH7DAyWabwM/HUWW+pyN3W5YOlZCKb26LM4Yk8dThcEgTT:/pwLYnboH7DAy3bd/HUWW+pyN3W5YOlx

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libjli.so

    • Size

      72KB

    • MD5

      6ff5f033124224bc2e59373f318938fd

    • SHA1

      2ef1571205cb39dca99e24dcd54ce43e04b38d3c

    • SHA256

      60bec149e5af2c5a3cc43db04d931a1f4ddbcc87285e976b5ec9cec9e76d68e2

    • SHA512

      abdafb64deb3f744e3ef4dd4f22a41dd92238336dc323b4b4669e2ba4ff57ee231eafbf37af2a73cb3a05f79d5bfa34a4db647daf2c4701e489a827c1c653e37

    • SSDEEP

      1536:cjwoz/4p6wTChOuuqOYYVoBl2xEyam8oKR:cj1w6wTCguuqKhaVm8r

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libjsig.so

    • Size

      13KB

    • MD5

      fc3ff24d3410a40b92310b931c7d842a

    • SHA1

      8138259182a6d7a8a3ebebbae834e6cf7d7fca44

    • SHA256

      8371a17004b78f4ed2ac41559c2869486e94abffb6bb9c18e59cb7489ad9d051

    • SHA512

      6d342dad09a057d0ead2890a53bf4cdee317c5e6be22d0e591d167295d9e72d4fe2001a02211b8e7a606a43b55b31e3f8ae74165e030feb89a68050a1f4a2647

    • SSDEEP

      192:RFoC881laR7hTnvPzJRy3hAch/ndC8Yp:raNxDPy3hpF

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libjsound.so

    • Size

      80KB

    • MD5

      ecd4f610c0562463206e78105c9856a3

    • SHA1

      5a62738d9c85af38cb135f4efd52086154867f2f

    • SHA256

      b2edb13c1955bd15cbb961c7009aebfb48863b8dd61e6a214d537a479d27a8ce

    • SHA512

      aec398409735b307017008284f5590937d34c6d0daabea9813c3a400b6bbf3c8aa6fab97f3d76cb3a807d21793aa8b8d62db4af2232b6eb559cbc560a700e690

    • SSDEEP

      768:UxPYwtrRvs3tmopKZz2LKX6kF+5vkfch6bke83IoIx6z7knBq3sW6WJCGcRINelj:yHocz2LKXS5YcsrxgsW61hRIwy5

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/liblcms.so

    • Size

      514KB

    • MD5

      002defd63c5e75f7c563d95f952307b3

    • SHA1

      3d41c84420931155bed1dcccc0243d22ca0995de

    • SHA256

      f46ff807b4050932f0d3cb6912a6e12ddb037572a07715eb5275cf44deb0044a

    • SHA512

      a0ba818faf52544e96e04ec4b7db15fb8b6a084d4e5176d7c76064ead04d30e102453e0238ec77977ee619914dc403cfbea540834d99a37728f2f3412aac5565

    • SSDEEP

      12288:55htLXtkPVUTXaogHy7rOk71vsym2LYHhozJ:vtkPVUd7rOk7Vsy4ozJ

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libmanagement.so

    • Size

      25KB

    • MD5

      ddae8868b2922bcdb1665d37bedc86c7

    • SHA1

      0491db1400976c5ef5f06c769706f25c3fc5bbd2

    • SHA256

      72d354cfc44d98de441eee4e5986dd17a17e4f7c4ebebf5306076be7b6d9a715

    • SHA512

      131492a361e0cfc79441cf84f1489f53d71fe08458ee1a24211a126e7a3e8082d6dc8dd2674b2f93ae63dd283e051db22816b1cbf9a4751e93ea5d0f28b92e6f

    • SSDEEP

      192:RTw9m8/dqgvI8ZWEZxYPOZo7F2ISAtjTFgrDnEPB1QpwWrYXHb3z56dt8gcqgBIO:ShqgiykJmAJTFgX2jZWrYrDkyqgMyk

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libmlib_image.so

    • Size

      561KB

    • MD5

      781f59dc895ff9aa1aaecee389e1ade9

    • SHA1

      fd14773c46aa325d59a8ee7e31d556b5a5a79b5e

    • SHA256

      5c1d22e625281e54c0719ccc67e2d476be779cf71b0fd4db37da41eb6c4498e1

    • SHA512

      10511299004183fb7cd1dba64e4cb10060647dbe3007eac56c122d7412664763ee6195b2a8ebc04e0780d3da1e2848bb73f52d2aa140e2e6d2b5d51077ec6aea

    • SSDEEP

      12288:uPJKqjLtQNenIu+nYcTFsHMJZjK30VhY:uP7+ZnbT6HyZj6uC

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libnet.so

    • Size

      103KB

    • MD5

      6c0c8610a43640fada17e51952f0bb83

    • SHA1

      26670b0767e93e475ec0eac3d6446a9de35f06e0

    • SHA256

      db9b8c8dbad33acb909fc127c6dd2365c6c9c867b2b5c5c3e6a001fd05b8158b

    • SHA512

      f2ba87cb727b60a9eacc2cbff2c4aeab98962d8d8e7d7c4402cd4ac9e9c40c29475dd4e873b439a634c46cf2208aff69f73b2644a52bfda78deddbc4f6c2244c

    • SSDEEP

      1536:W3/BF5C7EXlgQNaMV96sM0wR5GsY3cqiLSiHS9O5bNveIlhAiAjgyG:WJF5PXlFMVjGsmcqySiy9OrAjgyG

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libnio.so

    • Size

      94KB

    • MD5

      c4c392aa17a027ad4de0fffdede1ee36

    • SHA1

      f7c47779d723b56515d1d4aeab5d1872fad13da0

    • SHA256

      83bfe7ad0f350eb0b0f582db1f3c016f3606584032aef46f8687faef7bac3eb8

    • SHA512

      47b0d5fe15f6f95be5a7427523cd61aa13a676723c9b2a322f2c007d20f54e78b1f11c5dd48b63a8e2f4ea6bd1f57f78f9fb4a5049df9dcfeaeefdc9c0b9a669

    • SSDEEP

      1536:wlOV6dxsk36OPcxChuKybamx0sfXeo83D2zdS:UOVu36OqCCbO0d

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libprefs.so

    • Size

      8KB

    • MD5

      03165b4682ede939b0d3a6226b3bcf2a

    • SHA1

      2f2e2a54e1acd25deab028337b0ad791ec68b2b8

    • SHA256

      263dff078759ccba549da5b65ffe2179325c1af3ab79f49b03ee3f14fbbb8995

    • SHA512

      adf55f180b97188ca63f9f95da994725415181e2b4cb47279171575c923a401e9c66592413bb7ea1bfd2ab742ca9415c22cd40a60570dff3e0e62a2616793922

    • SSDEEP

      96:R6HBjBXfHE9F1zgPXPu0mWpiGGOV9A7gmLBjBXspr5w1UlJAW:R+t1fHErSPXXmWz39AFt1sp

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libsplashscreen.so

    • Size

      359KB

    • MD5

      b4fc0a37fc09b5fa5e4aafc08448a04d

    • SHA1

      db3067bf88ed528f6954ed9779f959e3f9f029e0

    • SHA256

      df6ff9005480b210c69f590bc28673f5c028ba614119218fd1e0b3394aa27a3a

    • SHA512

      9822aa885cb9951b1159af7b1ba5163bbf6636c8174ecf669a4d18d17a74686216a4cc34953225fc24ba66a6abbd2ba5864e6c7a49c09f7e36120634d17d2863

    • SSDEEP

      6144:98ThgIuqQ6dalaH5lmyEBI9Ype1GVQroeT:aMqQYHPE8Yb2

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libverify.so

    • Size

      63KB

    • MD5

      e81d4267dfe1c99885196b321309ba47

    • SHA1

      2dec35485990433d9b1ffefb5041f8afa7fac5e8

    • SHA256

      f81fb8ea1e97d375b26c3ac15bb49faa932ff2cac94e4a18065a2de94198239d

    • SHA512

      6f2eb7a7e627b55410dae7cba6807c509324867fde506e050adc7d555548406d3c16b170e3da4e35ede4922557a7fef33f832dc141e6fa968cb962bc9b566444

    • SSDEEP

      768:J+Ag4WRyWj7+Yk2ENONdg+LBpZMDJMjbRlTt+eTt4jcL7kd:UEWFHQNqgKB4DJ6b3t+eajcLId

    Score
    1/10
    • Target

      resources/app/static/local/jdk/lib/libzip.so

    • Size

      37KB

    • MD5

      271e3bcb8398569fcb34523377f8389e

    • SHA1

      7d1e121faba7adf986377b6e85b421a2267e5e64

    • SHA256

      3fc885133fddae0fb7df46abe71b70a040fae7ff73ffc10945794fd36110c0c5

    • SHA512

      5cc87e63e23c0531b3e53bda024903f607e37de13d63a664e3a2fbbe22dc59110e574d750af6d1d87ef2cc03f3f6875de971fbacddaab66e39b311f6ca0805b9

    • SSDEEP

      384:kVC65A2X8tap5x9k/pFIMbyQ9ZWTu1gnRhGQzK0uxErSaPOC65A0:ktTM/PbyhTu1Su0R

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discoveryransomware
Score
9/10

behavioral2

microsoftdiscoveryphishingransomware
Score
9/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

discovery
Score
3/10