General

  • Target

    499ce7e26fd7b500c1e05570bc2266053862c18c5b37c2f72f5ad99a2e32149a

  • Size

    31.4MB

  • Sample

    241121-lctx9azgnh

  • MD5

    769fa23d99d4ef4fe44b9583f8f5060d

  • SHA1

    6706b474317db094b00ba889d05c3c79eb3e2f71

  • SHA256

    499ce7e26fd7b500c1e05570bc2266053862c18c5b37c2f72f5ad99a2e32149a

  • SHA512

    7d6016a72ee832a36c7c50b3141a400a39c2a2ed5928420e177163d16dbdb9134ac6d917eed57e64b9a0ab41843388dd2739ab4422f39e9acadaa5a22bb544b2

  • SSDEEP

    393216:m10Z8aqapdEBXVP4wzYtiABuqRluBBd3MeNgSVvHQ1cPiNCHiI3pUBePMaWGOlpL:mcQZA18qRwBBZIkQqqNqkeP4RxIpPUn

Malware Config

Targets

    • Target

      499ce7e26fd7b500c1e05570bc2266053862c18c5b37c2f72f5ad99a2e32149a

    • Size

      31.4MB

    • MD5

      769fa23d99d4ef4fe44b9583f8f5060d

    • SHA1

      6706b474317db094b00ba889d05c3c79eb3e2f71

    • SHA256

      499ce7e26fd7b500c1e05570bc2266053862c18c5b37c2f72f5ad99a2e32149a

    • SHA512

      7d6016a72ee832a36c7c50b3141a400a39c2a2ed5928420e177163d16dbdb9134ac6d917eed57e64b9a0ab41843388dd2739ab4422f39e9acadaa5a22bb544b2

    • SSDEEP

      393216:m10Z8aqapdEBXVP4wzYtiABuqRluBBd3MeNgSVvHQ1cPiNCHiI3pUBePMaWGOlpL:mcQZA18qRwBBZIkQqqNqkeP4RxIpPUn

    Score
    4/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      15KB

    • MD5

      0a9fb96a7579b685ec36b17fc354e6a3

    • SHA1

      355754104dd47d5fcf8918dee0dc2e2ee53390a6

    • SHA256

      b34fb342f21d690aac024b6f48a597e78d15791ef480ac55159cd585d0f64af7

    • SHA512

      67870206fa7f1e7df45c8c1bc2f51fb430f0a048a2bdb55a4a41525388ca3b50203784537f139169705a03db4bb13b591162a79a5d2df81a4d11fd849615c86b

    • SSDEEP

      384:EFC43tPegZ3eBaRwCPOYY7nNYXCg/Yosa:EMTgZ3eBTCmrnNAo

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      564bb0373067e1785cba7e4c24aab4bf

    • SHA1

      7c9416a01d821b10b2eef97b80899d24014d6fc1

    • SHA256

      7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5

    • SHA512

      22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472

    • SSDEEP

      192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL

    Score
    3/10
    • Target

      $PLUGINSDIR/nsProcess.dll

    • Size

      4KB

    • MD5

      f0438a894f3a7e01a4aae8d1b5dd0289

    • SHA1

      b058e3fcfb7b550041da16bf10d8837024c38bf6

    • SHA256

      30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

    • SHA512

      f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

    • SSDEEP

      48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj

    Score
    3/10
    • Target

      PanoramaStudio Handbuch.pdf

    • Size

      5.5MB

    • MD5

      39519d1d79e31521079077b47290c6e7

    • SHA1

      1f37f8ce26ee6f95e277a3276ede47c0647efe1f

    • SHA256

      35f0ea44afb514c4865f2b3824f0e04702e94eac37da8c99b344abee21df79fe

    • SHA512

      0155b61fa31448291aef9f432bc4db3b221a3872340508464fb3c8f38cb621301d8980c3055f40b6bf6a5c414e10504eb470beb4ead3abe547d1ced50e91a701

    • SSDEEP

      98304:jMQR94PP0dfQvbO568LPdbR1JdZuytj/xXHIJU3OVhbG:oq9msdYA68z7P+qZIyf

    Score
    3/10
    • Target

      PanoramaStudio Manual.pdf

    • Size

      3.0MB

    • MD5

      b7a4029678c4f0e02bca9f30c79b9fcc

    • SHA1

      0f4576632ba434786eb65d0c66e82a454f192d45

    • SHA256

      064a4303ae1414f58b073152627926bf637ebfe1daeabb10bcaab9c86d6e9c8d

    • SHA512

      d2f5dbcd7d4308198b9ca92459f093c3a33d2397c1231db7bdd0c3026a7356aed3e7df020a6e6ecb5b5d45d4a931db3c1d3bd4851ec05ef98c089c41ce61798f

    • SSDEEP

      49152:WMQR6OOxPKApLbSEFdXd1SnsLgNs1MJPvtfN/VzXDRa33qwpeLGs4undzQUMNjwH:WMQR94PPF2s4v3hRQ3teLGs4K2ktZ19

    Score
    3/10
    • Target

      PanoramaStudio4Pro.exe

    • Size

      13.6MB

    • MD5

      712e4e52c242c8b601f3d33d69a6b3c0

    • SHA1

      667a2e98b6cf3848a2f4bc1b395411850673fe00

    • SHA256

      65baa5be4566784455d6510c00483eba2feb3fa35b9d12763baab2d113cc7873

    • SHA512

      65088b7689ce6f37ec1bd2aad1e2de3ddd216cec43c0c89cf40ba80d80f9fa9452162c355ec34c557f7ab0ea87a78b580d7bb39fe13868775dcdd16b72cad2f8

    • SSDEEP

      196608:AP2ERixkp/XXzdO+BXYUgkaiYKaV/SWItmkN:Yd/XIKXWkaiYKaV/SWItdN

    Score
    1/10
    • Target

      Qt5CoreR.dll

    • Size

      7.7MB

    • MD5

      124d16febffeb24a27c5d48a08704bf0

    • SHA1

      c8b296526db0c5c516112cafab46c725af65d3d8

    • SHA256

      b3889ac5a6d0ad54c651421962c43c5078ab9446b049f87a62cc7c356c3e33e8

    • SHA512

      e7426e4f0fa2aeebe690ca39246044049f4b1635eba44a0d25be602a547f1d74aeec82ec56162eb5ee396cd652d407b5a2fa86beeefb8a8c02f01aa12d014e69

    • SSDEEP

      196608:C/amp9aou2GujJsv6tWKFdu9CKPoMWR1J:KxJsv6tWKFdu9CMoMWR1J

    Score
    1/10
    • Target

      Qt5GuiR.dll

    • Size

      6.6MB

    • MD5

      15edcf6ec892b6c9abf7ce257cad6212

    • SHA1

      8047c10041af653451e5896b052ce21a9881b4f7

    • SHA256

      632c9ffdf7b96ab965ad1dcbb8ca7f7b7a7e0d34136ba1a6564ea5aecd8598b7

    • SHA512

      719ee1707028bb4703425e2567562a121fcc1f1dde6b1e77601b2abb405d290c9ae466b9c91d5244aaa521f3778e338da7e5fd332e30febbe2127e86fc23ebd3

    • SSDEEP

      49152:WCEASZyP8D7cv6tDA3pEZMtPpz4d0O4FBcdYSue38dNy/haCoCD+rxVSQAJWXPBC:WCE+CMHMEIDuPSXEoryTsEf5Hs1zp

    Score
    1/10
    • Target

      Qt5NetworkR.dll

    • Size

      1.0MB

    • MD5

      ec63e27340077b40d0e4493bdeb45fa2

    • SHA1

      b918117212af989185f09f55a27b2c1403de010e

    • SHA256

      69132bcc4a4fc573f35ccf6c2bd1fa2b0ce2850279dd4e33b22b4bfe2783cc53

    • SHA512

      617b62ec69e891b8f2405f8017f896947e2d4560a385eb3b7de92b3b9e3ff1fc97ce7c8a9f06682efd9e4ab85a2d037e6fb491fc56c3701996e4ca3aa1b1d9a6

    • SSDEEP

      24576:pK89xVessyVWJDd03caWKBr6DRCkslE+s:rxV3syVeS3fZBr/kslL

    Score
    1/10
    • Target

      Qt5PrintSupportR.dll

    • Size

      311KB

    • MD5

      bd174656911868cd58131f2d3094107d

    • SHA1

      279aa1ed8a62cb77bb905794eb17a10ac9057825

    • SHA256

      e8798836750e3336be35597f338d785c70c34a1a4da7f8ae560c7e0ec832b689

    • SHA512

      a7d0c052c5b2a858d8d7447c19d9bf9ccaef86b91e0a34a7c6c25afc28bb045ed5b2555faef1f2864a547b2d987a75289a7b2fae798fb6bb9426e75fa6361019

    • SSDEEP

      6144:eXTRn2+gG9l6+6pIFSgz+5RcyjVuFFhSvuFri2BlnZ24pNsfjoJz2RWh:eXMhGL6+Xz+5RcyjVuFFhSvuFri2Blnu

    Score
    1/10
    • Target

      Qt5SvgR.dll

    • Size

      324KB

    • MD5

      046bba37898e38a5c40a9c3bafed8d13

    • SHA1

      148da917e6f8dbefc3e07d211e76dab7660b40de

    • SHA256

      7b5ec35facecb2625bc903d51a49de723a20f4600b2864df522aa85d288e7ed1

    • SHA512

      b45a4aa59b06120fc5fc1d245a7a92f311a92a4dfbb2f4e1cbd6da90d751ad629761af1b3063b0e46bc763acfa216035375561d4b2babb03485efff8a213c38e

    • SSDEEP

      6144:H+PlRCVMsGM0HRNnVDg1qYdaHBmBRDGbmKduELe73sfVsQ/AC74zSF/+pDEk0RS:H+tRdxN9gIYdaHBmBRDGbmKduELe73sr

    Score
    1/10
    • Target

      Qt5WidgetsR.dll

    • Size

      5.3MB

    • MD5

      87db4db37341bc674aa2f41231b2ae1d

    • SHA1

      e3dd51fd0b5ac7109e0af4cb566b8e34222a0dc8

    • SHA256

      efb86a833e7ace8c3856eddf474369f991c8cb136a03527a46b7b20a73ef2ad5

    • SHA512

      6db10de2859a300496abebba63352191f472606d2b90f78313859be5555a8ffdf0f6a25a250156a109d58009f3442ee6278901e8580590ff7cd178c4b39df653

    • SSDEEP

      49152:wdDURQxkgCixNmdSBTES/qoHEyTM/3WWpxBfN8RmuiHnYQxkyuYcqTLPK3p1z4MD:mRzCmkT75qxqTLPK3p1zeZ3Hh

    Score
    1/10
    • Target

      concrt140.dll

    • Size

      301KB

    • MD5

      4bf3b66f4387bfa79b202b6977200231

    • SHA1

      564a14d5a15e5711db1df3302b78d293ae16bd83

    • SHA256

      0e9bfecceef8f3e33507dc9b084050ddc72d345a77521507ca5859e709b9ec56

    • SHA512

      30a173780ba6953669cd3aae047fd303146d659d9c3c2d1ac19a9b5c37bcba71b02ca81e948df4c15085e4df0dc76fa43d9c6f54f654625334ebeec625dd8a36

    • SSDEEP

      6144:FFgICyxeINCyLcZ9DqxVSFXZ4zrveUY1XvGyaotnWzg/PH6Y:cVyoU0ZXFJ4HyazzU

    Score
    1/10
    • Target

      filters.dll

    • Size

      783KB

    • MD5

      125b2ec11c6a22d0b1453fc2a8fbefd8

    • SHA1

      9e53b012a2ad70b89171f82f14a253fd00339fb1

    • SHA256

      4a73f53ae9e911774cd5450a4674da1e7937818a28a595f001fd96a48f9c3d6c

    • SHA512

      99685b9cae90bd4cb72fb3a6866ba08245243bea3b564c1894b3dcc95c8fc9bfc4dc8bedfec10edfbb640e3cac1d2f2086ab0d7e708fd87b192c5654facc50e3

    • SSDEEP

      12288:sqwIZwBSvb+HE8SHs3dv/T58krdxy1mdclHs3dv/T58krz2IaGY4zzm:fTTMy8N8jF8N8O2Ik4zi

    Score
    1/10
    • Target

      msvcp140.dll

    • Size

      571KB

    • MD5

      57e1c539476b9e59919baea9f5fd61e9

    • SHA1

      9e856c8fd5ff6ec5681e28723e3d785d06095598

    • SHA256

      ef27a68bdc1ee3d5d9a6a720b656bfb7604a8fac6aceb245a6eadc2788686d9f

    • SHA512

      abfd8149c115c308321af9cb55c495a3b3d3cf1c8faa86e073fa42dd0c7aba9b1fb308d7bcdf8bde80a0254ffac86611bd9377e4d8bbbb638703cfbd7bee70c8

    • SSDEEP

      12288:PmyAf3QHr+vzkNNpiBfxzL63R+/EE9WoF8888/QEKZm+jWodEEVXD:Pmu+d/EVy8888/QEKZm+jWodEExD

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks

static1

pdfevasionlink
Score
6/10

behavioral1

discovery
Score
4/10

behavioral2

discovery
Score
4/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10