78dc83f2b1d24d127403c2e7c9cf88b446d2cb54c1ef3fd54e23bdab18a1530a

Sharing

Copy URL

Twitter E-mail

General

Target

Yordlelabs-Desktop-Setup-0.9.2.exe
Size

62.3MB
Sample

241119-p87e1axbkr
MD5

1aa06ef3939e2ead2ca3aba330930792
SHA1

6980b64fcda3220defb7eee20396eb6e3e408681
SHA256

78dc83f2b1d24d127403c2e7c9cf88b446d2cb54c1ef3fd54e23bdab18a1530a
SHA512

9436129596dff16f116735b238de7c6e2cf57ecea2dedfbdfbc6fba294c01019e48b9015b000515be032e3eb330bcd959fdc5dc04ade83646173d006026a037c
SSDEEP

1572864:TRgUDbPzTrNUVdQ9//kB4cVNf++at184NgNaQKFKzc5TWDnI:TRLDbPzTZQKN/TcVNftao7Pc5T7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Yordlelabs-Desktop-Setup-0.9.2.exe
- Size
  
  62.3MB
- MD5
  
  1aa06ef3939e2ead2ca3aba330930792
- SHA1
  
  6980b64fcda3220defb7eee20396eb6e3e408681
- SHA256
  
  78dc83f2b1d24d127403c2e7c9cf88b446d2cb54c1ef3fd54e23bdab18a1530a
- SHA512
  
  9436129596dff16f116735b238de7c6e2cf57ecea2dedfbdfbc6fba294c01019e48b9015b000515be032e3eb330bcd959fdc5dc04ade83646173d006026a037c
- SSDEEP
  
  1572864:TRgUDbPzTrNUVdQ9//kB4cVNf++at184NgNaQKFKzc5TWDnI:TRLDbPzTZQKN/TcVNftao7Pc5T7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/StdUtils.dll
- Size
  
  100KB
- MD5
  
  c6a6e03f77c313b267498515488c5740
- SHA1
  
  3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA256
  
  b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- SHA512
  
  9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP
  
  3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1
  
  48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA256
  
  3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- SHA512
  
  c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP
  
  192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/UAC.dll
- Size
  
  14KB
- MD5
  
  adb29e6b186daa765dc750128649b63d
- SHA1
  
  160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA256
  
  2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- SHA512
  
  b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP
  
  192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/WinShell.dll
- Size
  
  3KB
- MD5
  
  1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1
  
  0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA256
  
  9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- SHA512
  
  7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  LICENSES.chromium.html
- Size
  
  5.2MB
- MD5
  
  4247afa6679602da138e41886bcf27da
- SHA1
  
  3bb8c83dc9d5592119675e67595b294211ddbf6e
- SHA256
  
  bf59a74b4404aa0c893ca8bbe636498629b6a3acdff4acb84de692462fd626e4
- SHA512
  
  ad3103f7fd32f0ec652bc7fcb8c303796367292a366037acad8e1312775cdd92c2f36ed8c34a809251ad044508e1e7579b79847de61025baf8bda5ad578a0330
- SSDEEP
  
  12288:/7etnqnVnMnBnunQ9RBvjYJEi400/Q599b769B9UOE6MwMGucMEbHDuX0YnpWQZG:sPMM5FaWStHvmUKItmfDTeHiVQZp4
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  Yordlelabs Desktop.exe
- Size
  
  133.2MB
- MD5
  
  d093c68c1bf81ee7cea29729289b433e
- SHA1
  
  078d69b5b993518f223dacdf95fc22fff2f79719
- SHA256
  
  0e9592c8c654cfce47513eb00f9e08336ecc237c3784ac14561f01e37eb70f81
- SHA512
  
  2e6deca04311cff957d94922be56b56d2764a6ff454b3a75d633fcad387dc173c963dfaf9020d24475d471408a88b969d24e6a3916e066d7e58561c08908ac46
- SSDEEP
  
  786432:vBUECRkP3tRe+G1giq6YA/4AIVqMl0WDZOMz7L2KnPUrPbQ08hoN:vD0kP3DrG1Pq6YkfI82/YQ1pM
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral13 behavioral14
- Target
  
  d3dcompiler_47.dll
- Size
  
  4.3MB
- MD5
  
  7641e39b7da4077084d2afe7c31032e0
- SHA1
  
  2256644f69435ff2fee76deb04d918083960d1eb
- SHA256
  
  44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- SHA512
  
  8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP
  
  49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
Score

1^/10
behavioral15
- Target
  
  ffmpeg.dll
- Size
  
  2.6MB
- MD5
  
  91eb7766bc774390a9127864d3320867
- SHA1
  
  43cf28afb72f51dcec6a25dc7c1015acf3b13f02
- SHA256
  
  09e8ad2600600cd4a1e844c1bef197462e81daf2c9102274fdf206d8afb94032
- SHA512
  
  1a5253dcdb29225dc37584141263990063a199882e26a4e08590976a10fef15c110abd8f1749aa65c9b9c5f49f3a8ffb0c41b7d6e5b00c4fcf7ff531bf5febbd
- SSDEEP
  
  49152:2aOoZks54czfQNk9GSQABmZuZgAp1iJxgG1broIhj4OxSZpSq:Jt59uEBm8geZz
Score

1^/10
behavioral16 behavioral17
- Target
  
  libEGL.dll
- Size
  
  431KB
- MD5
  
  d7f3324b4358d9398b851937b8e9015f
- SHA1
  
  02395791fc599db23d67f3f761e734d1dbca8f08
- SHA256
  
  b48a012d3ec61da556101e5b832f6628c1b076389c4d885d9fe9825164a5d17b
- SHA512
  
  e4de04a8933fef61916f5f027ca3db9bf4e07391342712de0eae32ec79635834653aca82b5b5c4f24489135652f62a72d6ecdb3ef7b11d1e62dd264fd97c8368
- SSDEEP
  
  6144:jpKolEK3EyQVAZvhnzGtMY+3lnLdYcUpwOXW4IUo+lTsRLGDc2/:jBl1EyyAZvJWM936wOJTWGDc
Score

1^/10
behavioral18 behavioral19
- Target
  
  libGLESv2.dll
- Size
  
  7.6MB
- MD5
  
  91f82d4036841f1576a1e9e19638c6d3
- SHA1
  
  66fba595072550348479c0a821a966db5a5a4eb9
- SHA256
  
  4bbecc8314fd0af56e47a838ed36825b32ca6ba3e9c371564985816cb7b729dd
- SHA512
  
  51aca8f9cc4e7ade2cdc92ba43fb2c48cb894053fcba5f4f84dc5a5eed25e9d0174a7652264d2e89cdbe21154c46fa6e3e2ab1412b7a425b63fe3129f4aae7b9
- SSDEEP
  
  49152:lY9Puby3lZYhHaBy1tv97fPBOl9qMVJAI7dyZwWFYn40XrHDgvlvz9aadxrVlrPc:iHbBw9rkWINOesO+QB44ixT3jpf2Fm
Score

1^/10
behavioral20 behavioral21
- Target
  
  resources/elevate.exe
- Size
  
  105KB
- MD5
  
  792b92c8ad13c46f27c7ced0810694df
- SHA1
  
  d8d449b92de20a57df722df46435ba4553ecc802
- SHA256
  
  9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- SHA512
  
  6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP
  
  3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
Score

3^/10

discovery
behavioral22 behavioral23
- Target
  
  swiftshader/libEGL.dll
- Size
  
  445KB
- MD5
  
  5ea3c0d53c7a214a0a85fb6c77b570a0
- SHA1
  
  d51b3895a2178735cf9f3b62bf302e61afb147e7
- SHA256
  
  f64864c481e74a9d004be624ba7141af720d3123b6e60fe2d47cc414d01fc1bc
- SHA512
  
  bfbe8f3809b22212a15f73bb85cbfe56fc2ff2ea3de92cd4b58556d16d7749b83c833611e2c4cea49b7ede96dcc33d78967e635203948bf51a88d0b8a0faed03
- SSDEEP
  
  6144:OldwaUBIAHXboKn7YsGfJjjvQppfSH6RdW8wrpGLFgf8q:YWIsXboKnMAfSHCRgUq
Score

1^/10
behavioral24 behavioral25
- Target
  
  swiftshader/libGLESv2.dll
- Size
  
  3.0MB
- MD5
  
  64e4c07a8cb626ce93257a741c2b861e
- SHA1
  
  772aa09ed58911cf85d1a2160c43ca8f7774b733
- SHA256
  
  eee1a349c9cce02ced6bb47e4cf7fb65199e12e690be696ddf122f853d40a4ad
- SHA512
  
  d88f19f8f47de57573c4879ddcb37c4447e206f1d8ebdbb78686057a73822fdd009b32956403ff2d72d625530a373a4bc936839223b4cc0d0119039138b6f61e
- SSDEEP
  
  49152:XNF/tcKnjh4NDNR32u7X5f2yRwT6mcavJ9BtCCp5kVtjjFCo5Z5UbNyJzSZ85C57:XNIaqrNONEniz7P
Score

1^/10
behavioral26 behavioral27
- Target
  
  vk_swiftshader.dll
- Size
  
  4.3MB
- MD5
  
  1f17a1ca7ee978c5cc3ec2aadd25b45c
- SHA1
  
  a6555ff1f48adfb65d16ed72f9be30ab2071e468
- SHA256
  
  a03975cd50566d70cbd0eee96c8b9979a6cf1cc52093abae02d3862cdcbcb251
- SHA512
  
  ebcac40ee4238ee852b01b29d808e46cb3d25f2330615ced90b84ef898375656d707c83fb3287f5f65e111f4660c17b8bd38bdc5209a9b09313fee5390b86a95
- SSDEEP
  
  49152:NmuXbIxohwCWtm32rw3lYIDkhUw2B2w/XBnbtZNDNHI6iBewVqlnrSrMrXHYtvQo:Ta9dCeKOB
Score

1^/10
behavioral28 behavioral29
- Target
  
  vulkan-1.dll
- Size
  
  715KB
- MD5
  
  9d130a99e6ce57a3a7a49963f2292d7c
- SHA1
  
  462840f8fefdfab4764847ef822219d74a3bb740
- SHA256
  
  4a48ccd412c6048f2dcf391b5835505d94fbf920d19d74ee2300ade387f3cb1f
- SHA512
  
  6e1d2c514b21282b9c1cffcbf24d21a52e8e196c36e4dc99d19512306c73a8093d73e88c45c8856e924ef873f4d2c0551d9cecb6cc341900229c11e627f8e2da
- SSDEEP
  
  12288:5Ya8yQ628GMAhXhpt1o9Sc4irKabLqYz/oDaC56:ygQ6jHAhx71o9WirKaqYDA
Score

1^/10
behavioral30 behavioral31
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1
  
  eb607467009074278e4bd50c7eab400e95ae48f7
- SHA256
  
  1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- SHA512
  
  7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP
  
  192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Enumerates processes with tasklist

Checks computer location settings

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32