Overview

overview

10

Static

static

10

FastColore...ox.dll

windows7-x64

1

FastColore...ox.dll

windows10-2004-x64

1

Guna.UI2.dll

windows7-x64

1

Guna.UI2.dll

windows10-2004-x64

1

Microsoft....re.dll

windows7-x64

1

Microsoft....re.dll

windows10-2004-x64

1

Microsoft....ms.dll

windows7-x64

1

Microsoft....ms.dll

windows10-2004-x64

1

Microsoft....pf.dll

windows7-x64

1

Microsoft....pf.dll

windows10-2004-x64

1

Monaco/index.html

windows7-x64

3

Monaco/index.html

windows10-2004-x64

3

Monaco/vs/...ain.js

windows7-x64

3

Monaco/vs/...ain.js

windows10-2004-x64

3

Monaco/vs/...bat.js

windows7-x64

3

Monaco/vs/...bat.js

windows10-2004-x64

3

Monaco/vs/...fee.js

windows7-x64

3

Monaco/vs/...fee.js

windows10-2004-x64

3

Monaco/vs/...cpp.js

windows7-x64

3

Monaco/vs/...cpp.js

windows10-2004-x64

3

Monaco/vs/...arp.js

windows7-x64

3

Monaco/vs/...arp.js

windows10-2004-x64

3

Monaco/vs/...csp.js

windows7-x64

3

Monaco/vs/...csp.js

windows10-2004-x64

3

Monaco/vs/...css.js

windows7-x64

3

Monaco/vs/...css.js

windows10-2004-x64

3

Monaco/vs/...ile.js

windows7-x64

3

Monaco/vs/...ile.js

windows10-2004-x64

3

Monaco/vs/...arp.js

windows7-x64

3

Monaco/vs/...arp.js

windows10-2004-x64

3

Monaco/vs/.../go.js

windows7-x64

3

Monaco/vs/.../go.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    prank.zip

  • Size

    37.3MB

  • Sample

    241209-z41rrswqdm

  • MD5

    3cfdf9542fe562cafa039b017b6c132c

  • SHA1

    401d3d1cf805acfeb8f54d93afb9003663eb463b

  • SHA256

    eee5148cf8a219e81c9330cc253677333c1b5de273593cbc86986ea0476f414f

  • SHA512

    d136a9ae181408413c15a1975abee60a34ea096f718ead6d2a7f1c8ddd0a2e057d0a80cc7e0282d11643439cb755bd184f62ec50241362dfe8c15ae520d07b6a

  • SSDEEP

    393216:LCyt8yLre34k1CPwDvt3uFRCH3dEVB399e0DG6fTKcY1ErSkTGEzADiyrcFuLtwa:LqH6fecYZKG/iyJe+4vfZ6

Score
10/10
blankgrabberdiscoveryexecution

Malware Config

Targets

    • Target

      FastColoredTextBox.dll

    • Size

      323KB

    • MD5

      8610f4d3cdc6cc50022feddced9fdaeb

    • SHA1

      4b60b87fd696b02d7fce38325c7adfc9e806f650

    • SHA256

      ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9

    • SHA512

      693d1af1f89470eab659b4747fe344836affa0af8485b0c0635e2519815e5a498f4618ea08db9dcf421aac1069a04616046207ee05b9ed66c0a1c4a8f0bddd09

    • SSDEEP

      6144:0R0J4lx4/7BA4xvNdcwCOg04j0y5mwZkdmsqmLDi5eNH+Dl1SIP0:0R0J48lAovNd7CO34D4b4eNO

    Score
    1/10
    behavioral1behavioral2

    • Target

      Guna.UI2.dll

    • Size

      2.1MB

    • MD5

      c19e9e6a4bc1b668d19505a0437e7f7e

    • SHA1

      73be712aef4baa6e9dabfc237b5c039f62a847fa

    • SHA256

      9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82

    • SHA512

      b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de

    • SSDEEP

      49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z

    Score
    1/10
    behavioral3behavioral4

    • Target

      Microsoft.Web.WebView2.Core.dll

    • Size

      589KB

    • MD5

      a53ba26a25f78f512cb2f393f9c96463

    • SHA1

      4176d5607859817a0b44a253c34f7edb3a46f21e

    • SHA256

      88a3b62f45225a811cdb85df6dfd95c2bff9a0e43e3b04f813b125eaca56cc9f

    • SHA512

      df1cd812fce4a46cae7f4d59256a12732367d16981b01f1067d58966d6612ae102eaa274fc3c9ac21aeb0422cf09ac1232fbe2b74d1daf6c76489f6e8de16751

    • SSDEEP

      12288:WrCyR/rpQ322fy+uFKcDmuRFNEMzeu+imQ269pRFZNIEJdIEY0lxEIPrEIgcvLc6:Va7

    Score
    1/10
    behavioral5behavioral6

    • Target

      Microsoft.Web.WebView2.WinForms.dll

    • Size

      37KB

    • MD5

      92acec9aed00f134ba86a0f7c496f26c

    • SHA1

      3cd10e0afdd7955716a83d5f5d59859c6f7c7353

    • SHA256

      29fc954c3fde1749817d158f3dd5ebe9efd3b3ce9708d86092fb1e9f023a1cb0

    • SHA512

      4e11772afa9282c2f5f2565b0e908102fc8d0a08c40ca57587c338698e9ab747ff5a1673d32b6cd09d7b22b0e6c2836f1324ec8257e5223754595160a4c28ad2

    • SSDEEP

      768:umgRNRbnIfWuJCRfXBkrQYZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/WG4KgL:XQR20BUQYZDgcEST3p4JjrjaeFSUyauO

    Score
    1/10
    behavioral7behavioral8

    • Target

      Microsoft.Web.WebView2.Wpf.dll

    • Size

      81KB

    • MD5

      b98c511e0f75434a66d9bf0efd1795db

    • SHA1

      515c6c1627775ce5149b410f4b19a2f25b41b2a8

    • SHA256

      1c5b6c792916d168093ef9b836f33e818d2d15d0c81f0864b5cddff97d913319

    • SHA512

      73fc64485db816be0bf135c7740ee916836c3bf03caabb85a1be7c5b3a4862cc1caa4975944cfd670f1cc2d90ae7c305cbea3dd9f27633244c51e5efcbaed2cd

    • SSDEEP

      1536:jmJUzMJcumSzTIudfRz+Ohsha87Y1DHfFWyEb30mpc4Jjr4YeUqRHhwU0fdwzvUe:YUzMJNzTIudB+Oh0a8+DHfFC30mpc4JY

    Score
    1/10
    behavioral10behavioral9

    • Target

      Monaco/index.html

    • Size

      1KB

    • MD5

      b867a373e2082f0d800d1561eea8db21

    • SHA1

      251a4f39dd0266a6f3ebbb87c805ac2521617b5c

    • SHA256

      10b8551148fef60a1fa1c65f9ef38e4e8275ecf592b0ec6c873a41bbf37544ce

    • SHA512

      c500b6bf3062c8630408d1443360e21ac9e5928970d2f523d10d2838265fb4ff6381ba92af2c245de0f8a04385c19f0730a81392a15e611cc5797e460e9839af

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      Monaco/vs/base/worker/workerMain.js

    • Size

      149KB

    • MD5

      27ead90c7702154755785e0e53398755

    • SHA1

      86b59485fe6f6ccb1805183fa75062a2ac1c859e

    • SHA256

      bdf9433692a08851e13dd58504eef19f51bd2ec7241923a68edf5772e0e53af5

    • SHA512

      6829681575179c90bb7817b17feee60e7d44d8abb15264ab39d7f0edf95dd1d030b99c12b005c753cd786c26ce6f17ff09b058c16f3363596f785e386ef78e82

    • SSDEEP

      1536:XNSxrkwnz+dTHHfvYYdBwDZ2Ogvh52xgh2hQXIvTBaB7hU74Yc6aphU1PblosJEl:XzdTagJkb+6jFlJJEt9yjjTCD2zw

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      Monaco/vs/basic-languages/bat/bat.js

    • Size

      2KB

    • MD5

      4cb475399c4490eea41982dcd6d9653e

    • SHA1

      fc97d57206ff7fa1c89ff0fc9f6e2f04a20ea185

    • SHA256

      9bca42394fe8922fec24b768eeb8ce04692de6fad82f9052d5b7e70f5c6b0f40

    • SHA512

      27eefe83cf38a7d784414d99b472f6fcd7e595691eb0f368254ba1f71aaf702840b62bf232c30c515a8fada234699fefeef496c0c24669cc158cb567227e4783

    Score
    3/10
    execution
    behavioral15behavioral16

    • Target

      Monaco/vs/basic-languages/coffee/coffee.js

    • Size

      3KB

    • MD5

      9d0c4ac1691eed0a480c3e9246490d29

    • SHA1

      38258864fd070c35cec6b68715d58771df9fe3e1

    • SHA256

      e706c9f8e5c5a0cb01b2f4e4879ec34a050d6eb2a8840284eb7badd9d78099f9

    • SHA512

      437a703607a9f0cb96ffb56312d149b95f596290591d14098c36d978b2e1fdba3c3712c9099923bc0a709c5c0ebd7eea868f63dfbcc69cdf5a9325b8a67006b6

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      Monaco/vs/basic-languages/cpp/cpp.js

    • Size

      5KB

    • MD5

      0a16509e6cd0155fb622e785cfe976c7

    • SHA1

      7afa7f823191c43d7a4bdd7d91577495de62c21a

    • SHA256

      a7c2bea7ca3d9e203a3a286735945fe010c8f4f8d46620386ee8befc6a78b32b

    • SHA512

      2cbc48cb10c467561c6a84f59405e9c2f864640b3a21e6fe5cd14ad1a7ca5667b766b3c0511df26f28205dd17338a878bd1164a4f5875235a73214f3e4aeb49d

    • SSDEEP

      96:hFDMgRs/rbV1+gqVV1+/LVb9ZRC2seM6jjz13MwVcEghhb6Yw76wGcmvRBNIs:hZGrTOcVv5M61h8hSeiYL

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      Monaco/vs/basic-languages/csharp/csharp.js

    • Size

      4KB

    • MD5

      f8f841d13c9220e15dcd6bc386b37ba2

    • SHA1

      2b8b7003820d19ed83afde98c845db5e3d5753f8

    • SHA256

      6b3be9a86ee8e3202f51745d94d24cc1eefbcf7d9e6d94fbaf70146b084e835f

    • SHA512

      0b167865b8d7847792c80144e83bdf33655db6ecc0934bb3290f8b5793fee8168aeaf9d74b3541a9424c4f180aad496c2d8710e3847a5bf9d4b2c960ddea4ae5

    • SSDEEP

      96:hFDMgRsVx+rbV1+gqGV1+hmQuq1cBh8b7gj8/pLxb6J994wGcKU7dYIkI:hZi+rTtPsRXpw9SiKUJGI

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      Monaco/vs/basic-languages/csp/csp.js

    • Size

      1KB

    • MD5

      22ada25d590811dcff4e5f5d698e583b

    • SHA1

      c43d4846967d5037ef05b102e49d1fbc54e45fbc

    • SHA256

      4b5a5d7d50986b86b00833447e097c0f01a4388ce1765b48e7e371d06e3a4789

    • SHA512

      c8373ea0b78114f82e8bf027473f72ada0d8acd51623152a0072111d8b3b7d5ac310a1cc510c4e4cd2e97a7686db3c87b2da675fc910898bd11108e4b50ed189

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      Monaco/vs/basic-languages/css/css.js

    • Size

      4KB

    • MD5

      49ad30f1151cfd7a74677fdc6dd13da9

    • SHA1

      286d47f0a4cfa26da2e4d1f1317a8c87000bb5fc

    • SHA256

      bd331fd3bd2c37b0c3150035325f163ac9266bf6d942310764815e676d856d91

    • SHA512

      7337706bfd5bd54938da0fba35e97f8e5780491c04b58d43fc6d905bd2dca92897f1ed8d48e42665f166da7684cc6e29a63ae73f8d3779a9feb97c397a642f0d

    • SSDEEP

      96:hFDMgRsozIq+q17qcq6V1+/aMj1cqTroIrqjKf8O3lzXY0Jc:hZzzv9VmjoOf8O39XbJc

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      Monaco/vs/basic-languages/dockerfile/dockerfile.js

    • Size

      2KB

    • MD5

      e32de981bdaf75e6ffb8fe40bc955a68

    • SHA1

      bef1af7b26ea01c987c7a6295bb7192d83a32068

    • SHA256

      65b86fc54e9b35d6cb84f01dfb905680dbcad6605757de1d6bca84e3029889af

    • SHA512

      a3eadd8c1389dff6c2c6e595efff69be3a573d01e4e16b8e4a8b28f63e4c48c9c439b5dd93666d81d703d1c6b5bf927cc8e47d04af270128095f0d579407c2f4

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      Monaco/vs/basic-languages/fsharp/fsharp.js

    • Size

      3KB

    • MD5

      de122b3bc44a8714f386dc80282dcb12

    • SHA1

      06888a9b616993e9af9797cec64c6d419065f2cb

    • SHA256

      1390079babc117d3f376735780d98f409f317eb4628d17106642c6933ea1da7f

    • SHA512

      ab48f2e5bfa6ea0024530141bb5d35b9090ee0254a3e8f8b86fa36cc8c2fca8000a3caafcfffc1d83e21c488e1f1990c91f537290b54fbbca1d3c7be090dfba5

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      Monaco/vs/basic-languages/go/go.js

    • Size

      2KB

    • MD5

      5b4484c914cd97aff4510b803f2517ef

    • SHA1

      8f275ac36c57c4c464e30f92f525ffbd0fd436c6

    • SHA256

      46d1757c3cd3dbc3c7b465a338880144922a1c34c30e36f06ff2db8c2ff75b86

    • SHA512

      b34c64f9997f4b72760eca270d2a0c2e22d83467d3f0bc82e7c0e63d62d8f9d74a144a28d676a223cdefef417af723801ac0535375d0dd64bb3a81e87617fed0

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

blankgrabber
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10