Overview

overview

7

Static

static

3

2d9c9ba012...97.exe

windows11-21h2-x64

7

language/ind.xml

windows11-21h2-x64

1

language/ita.xml

windows11-21h2-x64

1

language/jpn.xml

windows11-21h2-x64

1

language/kor.xml

windows11-21h2-x64

1

language/msl.xml

windows11-21h2-x64

1

language/plk.xml

windows11-21h2-x64

1

language/ptb.xml

windows11-21h2-x64

1

language/ptg.xml

windows11-21h2-x64

1

language/rus.xml

windows11-21h2-x64

1

language/sky.xml

windows11-21h2-x64

1

language/slv.xml

windows11-21h2-x64

1

language/tha.xml

windows11-21h2-x64

1

language/trk.xml

windows11-21h2-x64

1

language/ukr.xml

windows11-21h2-x64

1

language/usa.xml

windows11-21h2-x64

1

language/vit.xml

windows11-21h2-x64

1

libcurl.dll

windows11-21h2-x64

3

lua51.dll

windows11-21h2-x64

3

msftedit.dll

windows11-21h2-x64

3

msvcp80.dll

windows11-21h2-x64

3

msvcr80.dll

windows11-21h2-x64

3

resource.zip

windows11-21h2-x64

1

sqlite3.dll

windows11-21h2-x64

3

tlb/desktopcal.tlb

windows11-21h2-x64

3

tlb/dkappcal.tlb

windows11-21h2-x64

3

tlb/dkbase.tlb

windows11-21h2-x64

3

tlb/dkcore.tlb

windows11-21h2-x64

3

tlb/dkctrl.tlb

windows11-21h2-x64

3

tlb/dknotify.tlb

windows11-21h2-x64

3

tlb/dkui.tlb

windows11-21h2-x64

3

uninst.exe

windows11-21h2-x64

7

Resubmissions

01-12-2024 00:29

241201-as8kssvmek 7

01-12-2024 00:19

241201-amnnfavkek 7

30-11-2024 15:39

241130-s34npssjbj 7

30-11-2024 15:34

241130-sz6znaxmgs 7

07-10-2024 06:29

241007-g9dkbavcnh 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d9c9ba012ae8a50b79ef502e6c7dc05451eacf69c598c54c31c91b9c1623497

  • Size

    5.1MB

  • Sample

    241130-sz6znaxmgs

  • MD5

    6ee7ac1240012848440758195631f74c

  • SHA1

    45a42a492d9d02cc3457a404377c73c69c219e92

  • SHA256

    2d9c9ba012ae8a50b79ef502e6c7dc05451eacf69c598c54c31c91b9c1623497

  • SHA512

    e5af0638e0a44e076432ea0af9c814b3a7e2a65c4acf185a5e836ee12a317895706bf4d32ae66af829fd6bb8aac0ba3ddbd650d0a1482dcf189d930e666d0525

  • SSDEEP

    98304:fn3Y5tIFveFoHkXrloeemyJF2yg2YsB32cgOSyj0sn1zf1x3KEkKyawM58iawWHk:fn3HJeFMkblFByfg2L32q/ndNx9kRM9P

Score
7/10
discovery

Malware Config

Targets

    • Target

      2d9c9ba012ae8a50b79ef502e6c7dc05451eacf69c598c54c31c91b9c1623497

    • Size

      5.1MB

    • MD5

      6ee7ac1240012848440758195631f74c

    • SHA1

      45a42a492d9d02cc3457a404377c73c69c219e92

    • SHA256

      2d9c9ba012ae8a50b79ef502e6c7dc05451eacf69c598c54c31c91b9c1623497

    • SHA512

      e5af0638e0a44e076432ea0af9c814b3a7e2a65c4acf185a5e836ee12a317895706bf4d32ae66af829fd6bb8aac0ba3ddbd650d0a1482dcf189d930e666d0525

    • SSDEEP

      98304:fn3Y5tIFveFoHkXrloeemyJF2yg2YsB32cgOSyj0sn1zf1x3KEkKyawM58iawWHk:fn3HJeFMkblFByfg2L32q/ndNx9kRM9P

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1

    • Target

      language/ind.xml

    • Size

      44KB

    • MD5

      00f46ab9bfd602c2d34020e106c3270c

    • SHA1

      b24e7f16f091de165323df3b20a9a1df60a9d881

    • SHA256

      dcd40f112a4032f96301a0b9568558ea0252c130818e3f095155344b702ff91a

    • SHA512

      438366c5b03d25b2fe5598262ff81c2efb605d0476fed7161e88c56dd792e59041059736bf50ae4af93233b61d3c431a725966c9209798254af45ac121f86fa7

    • SSDEEP

      768:qU2aVjoQ46exYHdKH6nEGAHOoAVexv8avRKcZ+M5wrQ27+gXINxy35Y3CTByCvPI:d2aVjoQ46exYHdKH6nEGAHOoAVexv8a3

    Score
    1/10
    behavioral2

    • Target

      language/ita.xml

    • Size

      45KB

    • MD5

      a41c9299da09a912bb087330dd1e1ef9

    • SHA1

      4b158e51a10c2e7f537944fa88e0213add5d2901

    • SHA256

      925c647cdb5276cb700bf71239af8158d8da5aa03c398f5589d2ffcee76bd57f

    • SHA512

      61a75dc76c590111af6e178f4c5c43e219f59d0b79df1507777d7e970601399a26ea746ccaf9aea629055d5d114caac582c285ff4039a6b3ee07aeec34cac234

    • SSDEEP

      768:LC05pNt4rCvppAAgiU81OofwKq2jqKdtH5PJ0FeHxpkETFJsYpW4VRZSCpQXSU5Q:W05pNt4rCvppAAgib1OofwKq2jqKdtH3

    Score
    1/10
    behavioral3

    • Target

      language/jpn.xml

    • Size

      48KB

    • MD5

      c8b0b809431d7b7f624039e6e12011ff

    • SHA1

      271da505277299ed150ae4317a3cb9e359cfa807

    • SHA256

      b92d7d7ebc2cfff781befd4f1281eff87f4e16e1ab18801e8b69fd6efea01ff6

    • SHA512

      c0b437e75d8958538e73a16380af1f5aa8d18603ce2ab469e7715d9b382e49f9d20148a89710db91e5554734c6dd62a39b7222d990f8a37974eae31bbfc4d5b1

    • SSDEEP

      1536:ewX7pGyNQ9RPteHkOppeh5OYtV1t42LPKoG7AHf+6aRfFjFwaY7gwtCmbIIQ7VDC:YOppeh5OYtV1t42LPKocAHf+6aRfFjFW

    Score
    1/10
    behavioral4

    • Target

      language/kor.xml

    • Size

      49KB

    • MD5

      bd709091c5ca411be103ccb6576cc8fd

    • SHA1

      01387ce8e40b12c964dfe77c1d5d7fd1070bbfd8

    • SHA256

      1e1caadb12eac996c714815e6422e534ddfde86da706692c42204838785587c4

    • SHA512

      0953804caa9d2fa6be5038e244e5bdee10e43885f937049648ba546d7d98eecbb1daa58a1d838ed97058f90453095942d1b6ae6468ff301f417917fcbbb9795c

    • SSDEEP

      1536:9Va2t3QWE1FJnzmBffCzTaT1XFcYkGcBs8Lze7eyE/ynpxGlFIIKSZACyJKgPwDs:9DDCzTaT1XFcYkGcBs8Lze7eyE/ynpxn

    Score
    1/10
    behavioral5

    • Target

      language/msl.xml

    • Size

      46KB

    • MD5

      fa8dd6bb71b4f53fd85f11ba44786071

    • SHA1

      cdafc1a705c3856f6c3e6cafa10465ecf19db984

    • SHA256

      6d0a2cdd49274cdfc493664680e233df4a79a5a8c1f9bebb6af9727f7e6cb41d

    • SHA512

      2a0f954feb235480f271d4325a4549df5019c2bc3f7f4015dbe04ac8011a17a83f81b9e8f983e6534c70b59a1a39302a04b409a45bd71f51a342d55368334b77

    • SSDEEP

      768:Lg2G8tpdJeMUjNAYQJtOFuxydvjxOyPiNd/qTC2JK5ct459uDFtDiIBKC1Pshg0j:02G8tpdJeMUjNAYQJtOFuxydvjxOyPi5

    Score
    1/10
    behavioral6

    • Target

      language/plk.xml

    • Size

      45KB

    • MD5

      a363ad7ecd5d8ca4d006290a2bdf1310

    • SHA1

      18405aaeaf4ad1340a763ebdb43e4839cdeeaf41

    • SHA256

      dda09b9d0996a4aa44ea3f27a68c868d2e71e560766dad8f93b1e9dd32e85799

    • SHA512

      dd6fd3aacc08bcd68811d4b05e8e14656387722bc97e188614ec535dbf26c9c95328d2c84da357a17621863b53fd2acf58b07c605c17c0f6fe409b537b7d397e

    • SSDEEP

      768:qBUWojSttYrjEcBjNJkDx7LFTvOrdL404xCWWiTNDDAVcqIZM/QNNtWPNfe6cBEo:ihojSttYrjEYjNJw7LBOrdL404xCWWid

    Score
    1/10
    behavioral7

    • Target

      language/ptb.xml

    • Size

      45KB

    • MD5

      d0d1e035f041f1e544754051847ef43e

    • SHA1

      fc8c8334d2a5aeee3a2bdd9e237c4b40e455a6d9

    • SHA256

      486ee610b4468757ce925931f1b7693c2286e41bec74c36333a92e2814beefab

    • SHA512

      3db863145ff32d2d354ad6672fce84e0a342954aa0aacaaf24885b2a9cf4148fe36cd7107fb00a180d9e828eb43f1c7f7d359c2bacc67cf90d58e04d45b9184f

    • SSDEEP

      768:q1HAn4ujAh0D2G8VMiPsnb5COVswHClLHEPcLwAIbq3jmNCMYthnNfcMWBZwCPpf:4HAn4ujAh0D2G8V7PsnbEOVswHClLHE5

    Score
    1/10
    behavioral8

    • Target

      language/ptg.xml

    • Size

      45KB

    • MD5

      cad42d048473af22e2273e143af05576

    • SHA1

      8bfad6160be2132d158eae693016ba799c108652

    • SHA256

      4fa67b45ec100a256d8f9fc75aeb5bc85e544344d05ca2a078c70a3007000065

    • SHA512

      56b1d7140e015e236505d52971d1766d50248156be9ed6eb131b729f95bc7a2c2854f7e526bcb7a0fe409e02b3136e12178e0a2cec827305bb04e36eddfc6ef8

    • SSDEEP

      768:qeAn4ujAh0D2G8VMiPsnb5COVswHClLHEPcLwAIbq3jmNCMYthnNfcMWBZwCPptp:9An4ujAh0D2G8V7PsnbEOVswHClLHEPx

    Score
    1/10
    behavioral9

    • Target

      language/rus.xml

    • Size

      57KB

    • MD5

      f0fd6d9eb117dd8ea7f856c3c51d0452

    • SHA1

      b34bf7a5eb4c4f4840d51443ecafe6131fa9f22d

    • SHA256

      2b8b573c829cc15c332169e6687c82cb268ee9af5a3f6965a1aa981cb7d2230d

    • SHA512

      b38ebdef037de0d18a4dcf978cdbbab223b5835bba87833203f56600d66643a77b4ee0b8c96825d11a181c91c673736ad09f39beb38fcdda2dc1c3347f60597c

    • SSDEEP

      1536:N+3/FtWEBUqpPBukA10m9fYlrlgIAhzhteIOUuyBBvqNkm5vnb+7erNEFw74BTRm:CA10m9fYlrlgBzhteIOUuyBBvqNkm5vZ

    Score
    1/10
    behavioral10

    • Target

      language/sky.xml

    • Size

      45KB

    • MD5

      7802e24c3814c955207f0585cdea7828

    • SHA1

      4042da1359a70a12360cb8455e9a13b3fc72f308

    • SHA256

      5304bc8125592ab0f367f144f46f5575d1d03e314b02efe27f7c15ab9e14fda6

    • SHA512

      3f909a1f3412415eb48f5e3c6e72e1b685d4bf3e7822b31e34b635e0dd3fdfca8aa2cfb899877ab200211c8ce830ad5610a2c41d480e66189a3d8a2b2de0acd6

    • SSDEEP

      768:qFYetEdKrc3j1IBFmZ0Of6RL1wZIqVWF/CYxJf6wU0+PpH7AxRe8pB3C3pZb0tRq:UYetEdKrc3j1IbdOf6RL1wZIqVWF/CYW

    Score
    1/10
    behavioral11

    • Target

      language/slv.xml

    • Size

      46KB

    • MD5

      4629041f97bc595eb42b100cd6084ca7

    • SHA1

      5493fd3143991b526267e5e26ac75487500171e6

    • SHA256

      356703de8d632559adac8a2ed5e9754c3ff0a7148fc72a248699186b6c7006ad

    • SHA512

      498fce84dd97791566dff02184fd815e864dfb5fae62047ab26f5b022c596b2b3ea17c11d93eb6833e47399df3093b281aad4e8d1643670b44654284afa21050

    • SSDEEP

      768:qVDoAn4AjUUA5caQFE0+lrMDd9Om+cDaf6A/61G7GDWhRhW+N2Iqlz18OjnZiWBH:cDoAn4AjUUA5caQFEngDOm+cDaf6A/61

    Score
    1/10
    behavioral12

    • Target

      language/tha.xml

    • Size

      62KB

    • MD5

      7272ac6496a079504d4e348784d165f3

    • SHA1

      76a0f0c4834290abb9b8889406d7b6c61b176501

    • SHA256

      b23d4ba49f2757b48166e3f03a72e7ea70d1f85450a51d8fea4bf7e766212040

    • SHA512

      6a90ea14ebf26eb93097924f912c915d7d5ca2fb3a1a6c0c64c29ef042d4946ebc463a9f75fa6804eacbfcf1b05d513d5161ba2b97920302cc99a6c89720c099

    • SSDEEP

      1536:IMIatYpGN7ifky2F+NUJOb17scY1H3HnBzAG1oEo82Sc6Gf7STwO5iiC/ZBClAvw:IfUJOb17scY1H3HnBzAG1oEo82Sc6GDY

    Score
    1/10
    behavioral13

    • Target

      language/trk.xml

    • Size

      44KB

    • MD5

      5d2a90eb66821877ad1b36e0ad33c133

    • SHA1

      6c43408132c0fa78c656a5046a17b962694a6a54

    • SHA256

      14255e1ee656d85dac44d51d8096607b227cd59f0a353029e282b9cb869109bb

    • SHA512

      09a996a76ad71975968a9bd7b648f33f783e0fe6c13f9f4489b8798d610ed92edfbff6cfcc10fceb47214fb8b98c254d832e813e4457516d23760e61b734dc9b

    • SSDEEP

      768:q4BZPUEzNacJhMIi4qR7mfnAqO3hlkcCpbT66S6OM2Cx/H8CqYFUrlBECrRB7Cod:7BZPDzNacJhMIiBc5O3hlkcCpbT66S6S

    Score
    1/10
    behavioral14

    • Target

      language/ukr.xml

    • Size

      53KB

    • MD5

      33455ad09b8d9459e87ed1628b2e2f1e

    • SHA1

      0a98ce1af2b3d86461dec8a14990b4db58342ba1

    • SHA256

      2dedaeddac51bb899806f4643daffd9b862b9b8e823993206d458be42394e3a1

    • SHA512

      6c35bfbe5a80892af78014a25412db401e4cfc979d982d6aca46043ab36d6d8efaccb054bb3127c135c393d64cd9354badea11ce434bf0d094d6084478d8548f

    • SSDEEP

      1536:l9bX+pK/hubs1J5rfw7O0isCGGIeqEg0X7zhMyEzaFd7DRGDfIiQDBLC3Y79OMDp:D2O0isCGGIeqEg0X7zhMyEzaFd7DRGD4

    Score
    1/10
    behavioral15

    • Target

      language/usa.xml

    • Size

      44KB

    • MD5

      a5bdc8a3b9426f3e9fd6bdad1a818f1e

    • SHA1

      4e89aeb0442e6302b3d3f09b7f6cb6425dda3b36

    • SHA256

      89c19c078358b9ea7097a70750417f3a28429626be6285d08ba3840ba4f571f3

    • SHA512

      e7a1a5f2737849bebcd8fc02b543c1cdb67750c81dcdc8cefcbd5aaada07692de3d31b924c91901d60cb8ba402e5ae1ce035a6f981409475fe051fcf8b4dde61

    • SSDEEP

      768:qkpj0Dt6ppL/3j15lhfQPqdmOowl6hlgaTqJaKro7rzNeXU6GkeI46qbI5B7CFry:5j0Dt6ppL/3j15Ht0Oowl6hlgaTqJaKx

    Score
    1/10
    behavioral16

    • Target

      language/vit.xml

    • Size

      49KB

    • MD5

      727dd389edae4103b436dc991a8395bb

    • SHA1

      a5fe27c49a9e650506d3bf0f5ec1cb7c1001c623

    • SHA256

      9073877388858f931dd0a523e49369e8fd05d044ed7628e1c0f1c0c07f8112de

    • SHA512

      cf96c18260034649be82cba97588e55bc85129afc9a859afb33280cb467f3f7d956f3f2ade0543161fc7335ab1ff9b46cd5e247eac16283ff673fb0b55a5cfb3

    • SSDEEP

      1536:bZ8OTt7qeBKDgQjLG3j8L8hy64Xqp7ODNTaY9YgOkC1yG5cPrWa+elept2WcTavL:cG3j8L8hy64Xqp7OBTaY9YgOkC1yG5cA

    Score
    1/10
    behavioral17

    • Target

      libcurl.dll

    • Size

      482KB

    • MD5

      b1f4e12129881373bd2017ba6fd1e50b

    • SHA1

      530006812211677e593d87b12f808a3070a76468

    • SHA256

      f11d86d65ebd3406cd876e96aaea7f1a0b316efb5887baf3625556e247621cfd

    • SHA512

      c5923a17b5444e3a5543359547d4089d0c3d2d4be11e8d48ebace13b204f8c1edcb439507c5f874de26c6907c89a1ab8cae9fe0b83087b8aaf53441bc0a9031a

    • SSDEEP

      12288:GPY9H04ucMWSZHYln6M5KkZ+j5mbcdeSNiW0wZiyKNST40l+:GPY64uQSZH0nwj5VgW0lAT4R

    Score
    3/10
    discovery
    behavioral18

    • Target

      lua51.dll

    • Size

      136KB

    • MD5

      590d9c36dfad77891d55165b27b6b048

    • SHA1

      8b28a217188139d208a7a882e18a7b103f2e51df

    • SHA256

      198b37482d8c1be56bf80b0b55d3d33b63e0868fe39908a82e0ff56bf5ad9d6b

    • SHA512

      e45a0c3d6a18927ba095b014335d72e5b2545a74d3c9c8ac8608590687d8a4272b7aa14248cd3cf2a46a81dc7ee21352b6ccca87834c1cd4de70e892954ccc50

    • SSDEEP

      3072:RzwXKqLPDD0bb9fQAWRcXreOKQjG8IopAjkUkYai0lmhnnIDkx0uUds:ZwXVLUbb9fjAO5jGrxjBmiGmhnckyuUd

    Score
    3/10
    discovery
    behavioral19

    • Target

      msftedit.dll

    • Size

      578KB

    • MD5

      3a16ea01fcfaab40882db5bfee632322

    • SHA1

      48d846887b9a196936357a881989549e5f8740bd

    • SHA256

      04ed66befdb822181ebd1d84cbf0b17aaadf8455ae742f44d7adcb26ab07bdad

    • SHA512

      8e2fdef30336adc7819ac9e30ef3fee77ec1d1af25b1af881c44dfb80eed610a77d3228db552ce1bea303bb322c12157a9342a6e5f1bc9ee9aa165b4d3b89678

    • SSDEEP

      12288:dUYtYY6nhW1D1hNA8EGt05w5uEQVcbAN8X/Yp30Bris+xW2sdlxz:66ac1o8ft05wM5cbq34hg9Gx

    Score
    3/10
    discovery
    behavioral20

    • Target

      msvcp80.dll

    • Size

      541KB

    • MD5

      8c53ccd787c381cd535d8dcca12584d8

    • SHA1

      bc7ce60270a58450596aa3e3e5d0a99f731333d9

    • SHA256

      384aaee2a103f7ed5c3ba59d4fb2ba22313aaa1fbc5d232c29dbc14d38e0b528

    • SHA512

      e86c1426f1ad62d8f9bb1196dee647477f71b9aacafabb181f35e639c105779f95f1576b72c0a9216e876430383b8d44f27748b13c25e0548c254a0f641e4755

    • SSDEEP

      12288:UZY4lOHMwLwXBt+ia3htSUa/hUgiW6QR7t5j3Ooc8NHkC2eSQ:UZY4lOHMM8wiShtSj3Ooc8NHkC2eT

    Score
    3/10
    discovery
    behavioral21

    • Target

      msvcr80.dll

    • Size

      617KB

    • MD5

      1169436ee42f860c7db37a4692b38f0e

    • SHA1

      4ccd15bf2c1b1d541ac883b0f42497e8ced6a5a3

    • SHA256

      9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46

    • SHA512

      e06064eb95a2ab9c3343672072f5b3f5983fc8ea9e5c92f79e50ba2e259d6d5fa8ed97170dea6d0d032ea6c01e074eefaab850d28965c7522fb7e03d9c65eae0

    • SSDEEP

      12288:bxzh9hH5RVKTp0G+vjhr46CIw+0yZmGyYCj:bph9hHzVKOpXwymGyYo

    Score
    3/10
    discovery
    behavioral22

    • Target

      resource.zip

    • Size

      79KB

    • MD5

      ac637a3a9ff6c74375edaa0ac0a20180

    • SHA1

      aabc500757a8afcecf44d7ac0853d3943058d51f

    • SHA256

      2f8fb59ba5fde76041bc4293683a2c21b234289090c78c7af30a85c1463b3538

    • SHA512

      8f99b28925f48c50fa095b24c125964ee8d900db645d72d88506f6026c45e06e9d6e942425ab10dd3e9737a7d973ada6bf2551849d1eb7d679aa07fcc06e75a8

    • SSDEEP

      1536:p79Yw64GhE3XEfLQL7RF9P2qbXggWT85EyWpZ:p7Ow64r8Ql+kQgi8yyWpZ

    Score
    1/10
    behavioral23

    • Target

      sqlite3.dll

    • Size

      552KB

    • MD5

      fc7db46484442ed0deb46f93f58cf573

    • SHA1

      5195565f5e753fba6a077fa92d608e5dc57abaab

    • SHA256

      4f9a4eeecf20a98a38117d3ef334c8a8270f8bcbeb07bf0d1a86b56fe5a53aea

    • SHA512

      fe9bae58dd480b9bbf9b98902f8901a71fb43c9c1da5ffdd93fd08e4ec1c63894c11de58fdfa69a8122639870ea1c3b9672b584ee646c36b8d241d740a1a2cb2

    • SSDEEP

      6144:lfo9Vgepyk0s2svRQ/6RRFhlgo6tuEvRqKaGFy33amfXdIB6yMPog3sNiYC7CL7Y:hPGRFngo6hpqKaAmKiv7s5V/4

    Score
    3/10
    discovery
    behavioral24

    • Target

      tlb/desktopcal.tlb

    • Size

      28KB

    • MD5

      9329de364b8d57bc964cd97e45990d96

    • SHA1

      6acc713617a08bb2091dc712c0e65abc2f21bbd1

    • SHA256

      a541eca3fbdfc551b85012742fb2c8e0794d0c999ae21fd289b48cb61aff6917

    • SHA512

      1f9fb84788192a0657008cfe0e2933f38c2bb3d71583335d5ee9321e956306c8e8c481c36e558b3c5523d1637cff120e1520375a2422c7c9d907831c7f95ff9b

    • SSDEEP

      384:h6+yFPqpn+BUDFbSTretc3sS4I3cDTYNenz1lVU1eTlD2I4Q9oWgbNPzLZEis6SQ:h6+yFPqp+BUSfeu3crU1KAFWGP1

    Score
    3/10
    behavioral25

    • Target

      tlb/dkappcal.tlb

    • Size

      118KB

    • MD5

      e447af901e0be85219dbd299855d6d36

    • SHA1

      4c9b647f16ea9b7d08ec50829e6d09bce9628c39

    • SHA256

      f8f8183341353f776c607c380d3c9f971ffc7e1e407696a165a6b873628d03a8

    • SHA512

      fc116d7dec47c0d72b4612949d491ecfc8d6ccde70e7945a8550177a44c3f722e352fe860630f063b298d34e5580ce46019189092c05900e71ae666d05730fbb

    • SSDEEP

      1536:PPrKdXmFd1Uh7w93Y2jga4G1qBMUhtibSzDGwDpMugaSXt:PPrJF8hKjga4G1q+UhDPGwDpkt

    Score
    3/10
    behavioral26

    • Target

      tlb/dkbase.tlb

    • Size

      50KB

    • MD5

      ffd6859c44d058594b943883ed207546

    • SHA1

      48f7a8ff2fa44baff50f45f585a41a3f0e9c172b

    • SHA256

      7ca1d5fe6dffc351f3b99b76efd6602fb05129bf1d28b1ed3b289aced2a54ee2

    • SHA512

      8f2ebea1ee81bf2dfb2164ea5865a0941167628be6c8416768bdd9a49253155db6a78ecac3bd2b3a5bc00233ccb03f627414e4570f811249a8121b83d6d3f303

    • SSDEEP

      768:07Ni6fm1/7NoEJLdfQJoAxYrPK6VWTmn8i1Mt1jmSTaWbzp/yAOcXRXJVq8Ng76K:07UJTJLdfQJlYri6Vy5AMm0fc/ZXt

    Score
    3/10
    behavioral27

    • Target

      tlb/dkcore.tlb

    • Size

      43KB

    • MD5

      60db0ae78a90209d125e8b1e3ec6e816

    • SHA1

      df8aceacea0330c044a78384f131403aa82a5ccc

    • SHA256

      957997f3dfab26bd27735e79d84cdfc337a9a483a8458552fa16644de982385a

    • SHA512

      b1a2e804b156e9406a87dc1620851a899f7a7639e6b307bbacb6ba68f28a87a43ed8965b801695239bbb01c752dfacbcf58a09591702fb2f3a141d48f0dceeee

    • SSDEEP

      768:fXzMKdPkb1j93fXKTEjG6qwUFGIMIeLMTecTT3rMc9HvdB+:fD9CRj93yTEjG7kIMHK5u

    Score
    3/10
    behavioral28

    • Target

      tlb/dkctrl.tlb

    • Size

      119KB

    • MD5

      fc5407ee5753ac483af6dd308090b230

    • SHA1

      f8ce24659310beed5c122e081c54fb63bd009a0e

    • SHA256

      86588ec04096b8827bc99d43adb89ffe0c3222d366af4d294b476d51f6c95f2f

    • SHA512

      453b523f7b90ed063c41c9d9370ea25741cc3241499c01d315b0dc00057fe38a52c5702ad344bd527f929acaafc386f9f19f46e572ba0c2c0c5a5e7ed11e7fad

    • SSDEEP

      1536:ngK749fn5VYsrZ/6lxjyfMQbFOAN/htcjcrFff9Mdh2:ngNzdQjy1PcqFff9Mdh2

    Score
    3/10
    behavioral29

    • Target

      tlb/dknotify.tlb

    • Size

      21KB

    • MD5

      83cc2d32bdbcb3c765bfbac60bcc1f45

    • SHA1

      f3d5282594ac64f4136c5a2e54c725f24b16cbf5

    • SHA256

      8ce9c7b02bef3d5b8e8a3eb3fdf6f4805bfa2c0c56256847da49796574b199ea

    • SHA512

      3c4c784be5b06027105325db273c6b84ba31903515f494041b18b5f6afcfd8f69af0ea5f45232385a6f4dbe693390beb0a30d071fea1687fc771755aab0b9e6f

    • SSDEEP

      384:QvoyccwHvMZCYc2inhgmTB7QpM5RunPlqDV1Wna4Q9Xc3MEpAhvcqWeRu/J/:QvRccAvM8Yc2Sg8QL8DVMhZ3MbRA

    Score
    3/10
    behavioral30

    • Target

      tlb/dkui.tlb

    • Size

      113KB

    • MD5

      3945f9273770a518dc424e73f2406ced

    • SHA1

      ff6f1e27c240d7e6525a8aff56fce2b37bd06a46

    • SHA256

      25d2992820d448893530ba54c4f6f614d5c0712e508c308727c1e2242c2bb64c

    • SHA512

      e03398a089fd69148daa6baec2e181fa7dc91f8df2e978e9834f0b1c2d021319ed538a82045149d3cfc92e73b40633176d93ce6f86dc65032f412dcc58bf8e44

    • SSDEEP

      1536:wJ+cf4K4kXSz9vMkhWZhonWuLbdSrFClGaytPjP7N:wglK4V9ZxWuLbdTtujP7N

    Score
    3/10
    behavioral31

    • Target

      uninst.exe

    • Size

      416KB

    • MD5

      5b3a0aabf9dfda83b5fafe646a056a63

    • SHA1

      8d48747e1922d6c670a901ab0771b1cb57117ae4

    • SHA256

      343e0dec2324709cbe89630f9c604310e8edbe422e220dcf5fee93ce0dea8f36

    • SHA512

      5425b8791c54a20e765205a312d0acc8c862bb2807664b52ff47f0716e27be8799df7964b5c61bae50a6ec83144a004dfc05bfeb41cfe8e148cb0c181ceb8d77

    • SSDEEP

      12288:1mJ5sHn/ztd4T/QW0lUCMNpnio+WQgsLQVNf3+olbPY:1mJ5sHn/5de/ZmIP+FgQURuolbY

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

Score
1/10

behavioral24

discovery
Score
3/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

discovery
Score
7/10