General

  • Target

    Release.rar

  • Size

    19.2MB

  • Sample

    241121-mwbrfs1pbt

  • MD5

    91091e51b6d67d7f20adc20403677671

  • SHA1

    a3d0a4cf9ee3ca0302a36430117494ff22aa67d6

  • SHA256

    4e49d441f723fe62674ac9a653e049873e286749f92c3fea4487dd7c9d93f61a

  • SHA512

    feb38097cc28e22abb1a5e341a22194fb382e7cefc8c5fcc45b2060280c9b6502ab9c8c3f360f4884d389511d71a6eac7a0d23da96ce3129c9870235db1266f2

  • SSDEEP

    393216:U+21CBUDQL5zckHIWlZ+3ZhtgOjUC5ECpBfwjrVetf81bIFXpdh4k4qgeUCxSwMU:LcCBUDYLITiKzMEtfIbYx4dCxcU

Score
8/10

Malware Config

Targets

    • Target

      Release/Atlantis.exe

    • Size

      11.3MB

    • MD5

      5961654e85bfaba8a9ecf3bf2bee24a9

    • SHA1

      bbdd2ae25b31aed0e8b219d014be1faf01531ac0

    • SHA256

      62bb9df5b11f8f8bc9f82e6e3721f3f668f99735f3eb1fb469e79ce4d9789b26

    • SHA512

      b66541da4c915978ecf6cb2c1756414c2d6767b27871c64c7a7b916e2630ca0acc6878a2047cfc8fd0028bb9fcdefb288215568acc7020f40091a21b9c275295

    • SSDEEP

      98304:JaDTGUBeqiZv3ubvSxOS9CCKLBscvPuxuXTpRpN0pEV5ctEVdX5xLeTydFjFs7gP:JGTNev3uUcrzvpXK7gFO2b

    Score
    8/10
    • Blocklisted process makes network request

    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1

    • Size

      264KB

    • MD5

      37502714c8fee8ebbde8b093e4de893f

    • SHA1

      c45ffb208d6454a19b2fe1482ef4049664434dd9

    • SHA256

      d95bd99ccc997d3698df98486d3ee227526afdfb0ab2bfd8d0f7b5b00d149a4b

    • SHA512

      513e53f7a049afab93b2e84e965b510dd0cd9e59bf3931159318f9166f0114d1fa04dbcbd5fbdb3db7191de7b5d1363c7c2e1c9775fa5bd79a3e1c37acd9c117

    • SSDEEP

      384:nSmR1e81VymR8gh46204wmeDVwbmRYewHBX/YpwxzmRZeGXk7yxmRmeuYzzC4smT:nk8fym+zLbwfwHl/BQk7RuYq43

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2

    • Size

      1.0MB

    • MD5

      3cbf3bd4145da57fe0826dc0950e95d3

    • SHA1

      c3f7f746224a138bd0ecf20232db96aee7285810

    • SHA256

      ccb12bba8e548b2170b57b088472e0ef61d659205a3ad8e2b339f5e09367bf58

    • SHA512

      0447127e0e28afa0638fae8f0388ff9b21d88f287af9f0fbf9be88975a7fff517747ecca7e066044d9205cfabf1e63397c07943aca5402662974a983dd18ccb8

    • SSDEEP

      6144:gAjjEyN3yKkNpEcSKz+N8gDqnIgihpE8811ubrFRq:ggjByKqpEcSKz+N8gDqnIgihpE81

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3

    • Size

      4.0MB

    • MD5

      86f80166ea7f2bbcd4637424a470d1cd

    • SHA1

      1b7be02db0cd387d875b340b369f0cb479ae7be2

    • SHA256

      b1980e7af5f4ef4ca6ac2eccc11e35520fb2fe08acb11d025ed4c91a1709968e

    • SHA512

      45d1f73632ee765eee3008e7a3fd5ecc2bc97b46e95e5f75503ae50f95c0251e63ec24df4fbb0df9d36f2b1805b7b1128b6e273ac95a4ec38748c0e3ada4c836

    • SSDEEP

      3072:vsiW9XLlPLbd5CkI3HX8L6w9zbAFHyp6ROm6JYI9wI7S:09XLlPLbdQkI3HX8L6wtbAlyp6ohYI

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001

    • Size

      58KB

    • MD5

      a7c69aa036f55e374ff28cccf3218c21

    • SHA1

      be199a6c6e65eed1dfabab4e2ab2ff605b186335

    • SHA256

      8c4394b431263a5323a73a86ba143754fc0d5a961f917aaeb975a10e831981d3

    • SHA512

      efe0e08371d44defc5828f33fc3153b89ec25d829e5687046773eb1430504ca50baf613e00bd6354ecc8ae52ff6c538c2111d86bb8eb9cf0024f70310baa873b

    • SSDEEP

      768:geo+6xjQ5tHORb23q/EUYQ4UfOs1fH/X4RIGzqDcTmUroW6HwU3sVo8cR:376xDRb4qbHOs1ffX4+XnYfklR

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002

    • Size

      1.4MB

    • MD5

      659ddba56bcf5b88946ff3714ac5aa04

    • SHA1

      e2bb6f1a258e11d2b1908c44d3009be02ae44ff8

    • SHA256

      3ecf1320d3a216e6dcaf6e5946a276ccba3631b50add2380507b8843a67aa98a

    • SHA512

      5e93bb78ea736ed374f9d4b120e4086f29fbd3cb741db18957d66940cc0b3360663ba1d6d85d7e1045e72fde09fa177dde62da21d9cf948e92b3f61ec8921767

    • SSDEEP

      12288:oGmVxsGmZ7CsvS7Y+4JUQBhUlCkovqB9yclYPC834Dv2tpVcOKwY16sTgKT:oGmVxsGmZ7zsBTgG

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003

    • Size

      20KB

    • MD5

      2de14202bba0d16da8b8887605804002

    • SHA1

      0d642d3ae6a99c8d0822b7da5a86ce845b96d748

    • SHA256

      9984c06edf42d94a72f5be9356ff642a0e0a448a81d9b1d91a8749d78c6af981

    • SHA512

      b9cdf7b94b5924cee6c8c79989351caa7b1da0f6c0b501b43ac34833e3e871c21cf3a87e8a28f4bb3cfbad11893f1a5e26aeac311800d8c7a6da03099c5deac8

    • SSDEEP

      384:wGtI5ZJI2SKxyNsBPhPYO313y6SwDnOUo9L+jOUyJ:bI57I2SKxyNsBPhPx3y6SwjOUo9L+jOn

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000004

    • Size

      16.0MB

    • MD5

      4e3bb15e926e41c1cd260e904b5b44e1

    • SHA1

      846fe54177fcd4f85162bbfcadfbcf4455a459ee

    • SHA256

      8018e790e8db61adbcd777842fca156c83ec79668ef552ddf08a383a874fd882

    • SHA512

      554b4ba048a57da7574170bee0ef8a83e5c17e687929539cb30abe36577a492fed3a0fb94e97ec639f89d87b8d0162dfcfcf2506b9ce9ffb1635623b47ff5241

    • SSDEEP

      49152:/RGBlwf/xKSnQEp7LaBCwIeNk45qecbwCtbOclm55srLIwriFe2eyogT+lmwyNHB:/FE

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000005

    • Size

      324KB

    • MD5

      05b0631984746638a8674b4668d2df50

    • SHA1

      e55b3faa269bf68f2bb43188bc7d3640d786d9f9

    • SHA256

      680d6266405de1a6fe01253444da178f08bb44f3dddc00b9c4615952f63685e5

    • SHA512

      c286020c81f8761b118416f8b18441b519b8a16129dbcaa3fc6b37450185f39b48aecff07268594fdaf018e0c72494aab3174b308b0227f37559bc74cec6e441

    • SSDEEP

      6144:d+Ll5c4uN+Q5AvDDRCsUSUehYu73tiTAHPvEfem0pZB2XmAwWaUJP6:d+fc4S54zUSvCu7vn0mN

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000006

    • Size

      16KB

    • MD5

      4f8b50ddca61aacc0a2451eabbff7946

    • SHA1

      e726a7016ccbb88552d3835d0473df5cef795e8c

    • SHA256

      ea16d3650e7ee48e7af6b2e49aca3d5775a408b2fc15c25f160e3f8da79890d1

    • SHA512

      9f0b9eef6a337a31897c6031ac4a08977e5bff4849e9739318df0f953500bf1c8350cc887b58f48f300dc023b32e55ed01c0315724221193fa9bc4266d36e3b4

    • SSDEEP

      384:HIjoFykqQ/q/hU6eUGz2ScQcyQ+4Ft//XjvllTkBa:HIcs4qU6eUNP9yQ+0H5lF

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000007

    • Size

      59KB

    • MD5

      fe87c96d0b3a825d32e771563a18d171

    • SHA1

      49e77cf57b301a48738f484bdb17a85354225d09

    • SHA256

      b22579af0f2c1b6afd9b96fbb5d4a14dfe2f084f167112457d14da3c2242b8fe

    • SHA512

      2c6745bb226ae4f52bb3dbfa529ef8c371dce96d575b447297e9b9a4412b0dadcb11e9072e3ffdcf01601e3aa15393f098560a640c3a8fd25df78d1819b5149b

    • SSDEEP

      1536:L9DclcbcLc8cscGcccocCc9cPcrcFcBcOGcW9HFKG9Wyybm25/eGZ3uTmbPu1OZr:hGcW9HFKG9W/5/eQ

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000009

    • Size

      17KB

    • MD5

      949cf159201f65adad3b89f1c5bdc301

    • SHA1

      4c20d58cfbe6cb2c69a433e9ddbe94d80025063c

    • SHA256

      c7ea085d1f13cfd73e54315e09884736926c5b08d228fe1c27c5b22a2224fdb8

    • SHA512

      f2b07d699615f5f349d8037e8b5e03904e710e634bc0c189fb351f76a92477cf16b07bf17d5127b2e0cab3dc894e12840e9a080e19fa592744bae8a9c317faf8

    • SSDEEP

      192:VNaCZY9tJ5YA0zLHur9GoGc35iFMBvZ1HxkdJa382cMjCyCZyfugG6O68JZQfLjr:VNaDtJ5YA0+1P6BX9IhZy71xOLiyihlI

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000a

    • Size

      20KB

    • MD5

      aeeb96cae8b02ecacb44ce7e0539bf57

    • SHA1

      c34a1551c4d486a71a5596840b4409cdb773b895

    • SHA256

      c0ec2ae034f12ea84a4129c81ad06e85a0a59b5c77199ea0de036564150239cc

    • SHA512

      1ab01ac3a40d66e649f698218322258e566416b3551948228799ad06941fb3623592e4388327cc911260a5840235c7ab1247e14a40126e672b4fe9ba6ee59ff3

    • SSDEEP

      192:YnUQgdyNrokmhj+tkyeE+7qV79kWQiiSCm1AiDz6KEn7/MB8XvSYEH7UTOyMeB3J:t2ojhj+Dhg5RjVZil10a5laf/KtQOXba

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000b

    • Size

      20KB

    • MD5

      235df4e3b5b8a9fe945dfd5fbbab5eff

    • SHA1

      499936fa75fa93658bb0a135a4c7219f636b8a1d

    • SHA256

      4a03eedc92120d6c4bc964d9c6d53c911ff4efeae28db0987829c4cbc58aa2c5

    • SHA512

      046053f99ad0720e381cb3fd87ea01e5631ed7882182f738a8a5f3cca046f521e663aac72d3423eed52905595de8cf2c92036c2370a83babca11d145de4dd604

    • SSDEEP

      384:1/jMho4zEy34l6pn4H6Qeesueye3kpOS1HTLbVESNC:1rMhZzEy34kpn4a8sRN3kQS1HTl/NC

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000c

    • Size

      48KB

    • MD5

      024db683f4c126deb6ed4c9706545617

    • SHA1

      34e15cd64be0f56e4c2d297d00bec5bb2a5fcc71

    • SHA256

      e3aeba46dc4c252870e320cd2f6a2094bde4a209753468f0c4d7ec14ccc70d5e

    • SHA512

      e0331a23c6420e549d55fe3e3af603bbf33e0187e4f968f3b23919f16fb483656ddd63e6f270e7c208e9b41675c9ac7587396d02a3da483ab29c9e9c168b29cb

    • SSDEEP

      768:mlZglxUONhVRbraXsUK5WzLmJrOZe6HyTfsIH3/N5Js:+5AbWXsUK5QSkSoIX/N5Js

    Score
    3/10
    • Target

      Release/Atlantis.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000d

    • Size

      49KB

    • MD5

      30d45aad9448537334853568828858d9

    • SHA1

      7f53a0623b3e8e7776daa94e036b07ddc25a9712

    • SHA256

      a847d0eca0f4215b717249dfb160a1e46229e31afdb582a67ce8be9bbe90636d

    • SHA512

      8b3cc2a6fc9c4f26029c589716a748085e4b1a185a7694ed2a1014d27d39c69a396fcbbb3e621fd19a30bcf46287debee4dada2489beb4aa93ca26d9ff218d77

    • SSDEEP

      1536:DfIwRzUDBJrBBLFuKFOZPD97PLNT+47eUM9EMaLCXnjnO/+XLZCevb5qNlsp93vh:LuDh94F6

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
8/10

behavioral2

discovery
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10