Overview

overview

6

Static

static

4

Terabox_1.32.0.1.exe

windows10-ltsc 2021-x64

6

$PLUGINSDI...fg.ini

windows10-ltsc 2021-x64

1

$PLUGINSDI...fo.xml

windows10-ltsc 2021-x64

3

AppProperty.xml

windows10-ltsc 2021-x64

3

AutoUpdate...fo.xml

windows10-ltsc 2021-x64

3

AutoUpdate/config.ini

windows10-ltsc 2021-x64

1

CEF license.txt

windows10-ltsc 2021-x64

1

ChromeManifest.json

windows10-ltsc 2021-x64

3

DuiEngine license.txt

windows10-ltsc 2021-x64

1

TeraBoxTor...le.ico

windows10-ltsc 2021-x64

3

VersionInfo

windows10-ltsc 2021-x64

1

VersionInfo2

windows10-ltsc 2021-x64

1

autobackup.ico

windows10-ltsc 2021-x64

3

browserres/cef.pak

windows10-ltsc 2021-x64

3

browserres...nt.pak

windows10-ltsc 2021-x64

3

browserres...nt.pak

windows10-ltsc 2021-x64

3

browserres...ns.pak

windows10-ltsc 2021-x64

3

browserres...es.pak

windows10-ltsc 2021-x64

3

browserres...US.pak

windows10-ltsc 2021-x64

3

browserres...CN.pak

windows10-ltsc 2021-x64

3

cacert.pem

windows10-ltsc 2021-x64

3

icudtl.dat

windows10-ltsc 2021-x64

3

module/Ter...ist.db

windows10-ltsc 2021-x64

3

resource.db

windows10-ltsc 2021-x64

3

skin/skin.zip

windows10-ltsc 2021-x64

1

snapshot_blob.bin

windows10-ltsc 2021-x64

3

sounds/1.wav

windows10-ltsc 2021-x64

1

sounds/2.wav

windows10-ltsc 2021-x64

1

sounds/3.wav

windows10-ltsc 2021-x64

1

sounds/4.wav

windows10-ltsc 2021-x64

1

terabox_ex...me.zip

windows10-ltsc 2021-x64

1

terabox_logo.ico

windows10-ltsc 2021-x64

3

Resubmissions

27/11/2024, 20:39

241127-zfpdtszjes6

27/11/2024, 20:33

241127-zbwbksvqhl6

26/11/2024, 16:40

241126-t6j9xawkbk

25/11/2024, 22:14

241125-15w1mswlcp6

25/11/2024, 20:57

241125-zryrmswke16

25/11/2024, 20:51

241125-znc1rsvrgv

28/09/2024, 18:21

240928-wzje5ssdlc10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Terabox_1.32.0.1.exe
  • Size 85.5MB
  • Sample241125-15w1mswlcp
  • SHA256 9ed5767db68fb669b3f18a0565cae471ee3800b94a187c4512e5a6691797c511
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
discoverylinkpdfpersistenceprivilege_escalation

Malware Config

Targets

    • Target
      Terabox_1.32.0.1.exe
    • Size 85.5MB
    • SHA256 9ed5767db68fb669b3f18a0565cae471ee3800b94a187c4512e5a6691797c511
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    discoverypersistenceprivilege_escalation

    • Adds Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation
    behavioral1
    • Target
      $PLUGINSDIR/SetupCfg.ini
    • Size 75B
    • SHA256 fe2e95678fbd1a8b6609eb95f3e9941f67018ebab32149cf0b94b0a200354a54
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral2
    • Target
      $PLUGINSDIR/VersionInfo.xml
    • Size 90B
    • SHA256 db29f712197b209c5118c680d1ed5e007eb24ca0a97d688fc895d3adaf423e48
    • MD5 SHA1 SHA512
    Score
    3/10
    discovery
    behavioral3
    • Target
      AppProperty.xml
    • Size 50B
    • SHA256 843a030382ce12299411cf34be5d9fb0dedf97775782386bde41e0f62b36b06a
    • MD5 SHA1 SHA512
    Score
    3/10
    discovery
    behavioral4
    • Target
      AutoUpdate/VersionInfo.xml
    • Size 91B
    • SHA256 41be369f328416e229a7f9bda1b9cadd2ee39392aacc6c33c1442559a738b4ef
    • MD5 SHA1 SHA512
    Score
    3/10
    discovery
    behavioral5
    • Target
      AutoUpdate/config.ini
    • Size 52B
    • SHA256 61d88eb427ba7668f56c7391410c4de3a8e17cde7baba80291f8a06efafbef7c
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral6
    • Target
      CEF license.txt
    • Size 1KB
    • SHA256 abf88b626095dff3754b2b90cda1f7353b809c8ef20c5fdce34ff8e8c11a66c8
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral7
    • Target
      ChromeManifest.json
    • Size 237B
    • SHA256 51da5680465903bb76c4f718016083703730701702bf3b64a77c9338f9832584
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral8
    • Target
      DuiEngine license.txt
    • Size 1KB
    • SHA256 3dbcadda6e0a98d5f8759cfa75d0c29e473a57772c0341cc605ac63d54324c68
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral9
    • Target
      TeraBoxTorrentFile.ico
    • Size 67KB
    • SHA256 98b0815a45fa11e0c22e63d68597d5c16c928afdeb41ace3d693c07fb4a21ea5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral10
    • Target
      VersionInfo
    • Size 192B
    • SHA256 7c71738efeb52cc51e923b4aa64fa29af5a99f60802fd922394e7ad30d25574f
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral11
    • Target
      VersionInfo2
    • Size 192B
    • SHA256 b6068bceb6383167b13dfd64daae7af01df49bb87a87644984072c1a3f18c235
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral12
    • Target
      autobackup.ico
    • Size 36KB
    • SHA256 9e61d5732a0bbe798dd197d8d8d7ce2cdeafd9130018f1911b2ab574757e9188
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral13
    • Target
      browserres/cef.pak
    • Size 1.9MB
    • SHA256 c91bb3bd9431300da48e18f9f4d576b76c5cfbb0749c0d7dbda159fdb99a3edd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral14
    • Target
      browserres/cef_100_percent.pak
    • Size 200KB
    • SHA256 3b83236664a5fe0aaf4ef723f636c844ef60cf1f33eca92927503ed4f7c1f115
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral15
    • Target
      browserres/cef_200_percent.pak
    • Size 274KB
    • SHA256 6b9df3dcd3b36213d54effef64e2dddab7266ed46d24fe86bd725f4e9f036fe7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral16
    • Target
      browserres/cef_extensions.pak
    • Size 1.2MB
    • SHA256 5e69193b8dae120e541cd0770f323ccafb8481b198664e532f2c4b6c4dabe4cf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral17
    • Target
      browserres/devtools_resources.pak
    • Size 1.7MB
    • SHA256 4b2f4fee4ad2a54df0ff9da1156ea176abb869c3cdd9c7f91e71ef394b140038
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral18
    • Target
      browserres/locales/en-US.pak
    • Size 233KB
    • SHA256 bd799271706e33afec2f95de07f6601e22b619bd2c2d08659effaf707ab20aa8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral19
    • Target
      browserres/locales/zh-CN.pak
    • Size 236KB
    • SHA256 88604345796c5452e70b34e581be7be0b4300031ef2c1e9eec424da694df62ef
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral20
    • Target
      cacert.pem
    • Size 205KB
    • SHA256 611313a5da2979bccb1a1ece5953b073e4de21885f8b9d1e7dfa5acb14ec5581
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral21
    • Target
      icudtl.dat
    • Size 10.0MB
    • SHA256 27993e2079711d5f0f04a72f48fee88b269604c8e3fbdf50a7f7bb3f5bfc8d8e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral22
    • Target
      module/TeraBoxModuleList.db
    • Size 16KB
    • SHA256 3009fcfc02003af64d2a4d1cea439d2ae67ad75a19302e3ae0416534e0882ee4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral23
    • Target
      resource.db
    • Size 52KB
    • SHA256 eaea3e43ac1b3afea07a20b9f838194fc3a730ad88ef431ea243f00211a614cc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral24
    • Target
      skin/skin.zip
    • Size 5.5MB
    • SHA256 247ee15ab91e6dd08abcf7e621c32aede0557c5cc026d44402fc57fcbc488f8f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral25
    • Target
      snapshot_blob.bin
    • Size 49KB
    • SHA256 0277ddcab9928ca71f51484bf499077c09736b144889d75980bd08faa2b6c857
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral26
    • Target
      sounds/1.wav
    • Size 38KB
    • SHA256 d260aa325d9fd4ac15bcfcf092270726451577477919bd42a1640585d71c7974
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral27
    • Target
      sounds/2.wav
    • Size 377KB
    • SHA256 7fa9cf8acd084895cd9841386df059a29897b7cac9d52cc5e1df16e6a9162549
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral28
    • Target
      sounds/3.wav
    • Size 126KB
    • SHA256 a84110a22bb431b785dc931790efbde81c012f5fa1f44e822e85093366c13cae
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral29
    • Target
      sounds/4.wav
    • Size 123KB
    • SHA256 564eeafa8c6eebcd622883c2acf0addb3c8537a52cc47e80e0ebf52e23f66900
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral30
    • Target
      terabox_ext_chrome.crx
    • Size 169KB
    • SHA256 abd139cf05cfb99922766f68292791ef239b589acd0e78e6623b6cd57dcfbee2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral31
    • Target
      terabox_logo.ico
    • Size 106KB
    • SHA256 4519c96322a111071fba87a3599fe1f9acf991e0d2dbca9190437eca88e1c738
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Event Triggered Execution

2
T1546

Change Default File Association

1
T1546.001

Component Object Model Hijacking

1
T1546.015

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Event Triggered Execution

2
T1546

Change Default File Association

1
T1546.001

Component Object Model Hijacking

1
T1546.015

Defense Evasion

Modify Registry

4
T1112

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pdflink
Score
4/10

behavioral1

discoverypersistenceprivilege_escalation
Score
6/10

behavioral2

Score
1/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
3/10

behavioral9

Score
1/10

behavioral10

Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

Score
1/10

behavioral26

Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
3/10