Overview

overview

3

Static

static

3

9384da648c...e3.exe

windows7-x64

3

9384da648c...e3.exe

windows10-2004-x64

3

$0/PotLV64.exe

windows7-x64

1

$0/PotLV64.exe

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDIR/nxs.dll

windows7-x64

3

$PLUGINSDIR/nxs.dll

windows10-2004-x64

3

KillPot64.exe

windows7-x64

1

KillPot64.exe

windows10-2004-x64

1

PotIcons64.dll

windows7-x64

1

PotIcons64.dll

windows10-2004-x64

1

PotPlayerMini64.exe

windows7-x64

1

PotPlayerMini64.exe

windows10-2004-x64

1

ffcodec64.dll

windows7-x64

1

ffcodec64.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9384da648c70c68e525fa5b2391c23ad8bab96647a6b41a61b47219ae66ca2e3

  • Size

    3.5MB

  • Sample

    241221-r5bv2a1ne1

  • MD5

    1db2d74dfcb2f5c1a75d8f3408ceab5f

  • SHA1

    6de893c9df5c87c2117fe2b7bdeb5e8a76cb9797

  • SHA256

    9384da648c70c68e525fa5b2391c23ad8bab96647a6b41a61b47219ae66ca2e3

  • SHA512

    d07e30dfb3efa96c8d8e7c8ce67f1677a8a3d6e3d834c49246505c2fcffab5b47a3bb4e0d77fa4c1c45ab69f04184513ef00905114ac4fd786ff38d164f899a7

  • SSDEEP

    49152:vEK2EOlKGbxh3LPyRktAO8VQpxiJeQ/cgIUxHdr40ZoO76yyKYevMRXclTms04xd:v12EXilPvtlNgLvV7pyZKMRuwsd

Score
3/10
discovery

Malware Config

Targets

    • Target

      9384da648c70c68e525fa5b2391c23ad8bab96647a6b41a61b47219ae66ca2e3

    • Size

      3.5MB

    • MD5

      1db2d74dfcb2f5c1a75d8f3408ceab5f

    • SHA1

      6de893c9df5c87c2117fe2b7bdeb5e8a76cb9797

    • SHA256

      9384da648c70c68e525fa5b2391c23ad8bab96647a6b41a61b47219ae66ca2e3

    • SHA512

      d07e30dfb3efa96c8d8e7c8ce67f1677a8a3d6e3d834c49246505c2fcffab5b47a3bb4e0d77fa4c1c45ab69f04184513ef00905114ac4fd786ff38d164f899a7

    • SSDEEP

      49152:vEK2EOlKGbxh3LPyRktAO8VQpxiJeQ/cgIUxHdr40ZoO76yyKYevMRXclTms04xd:v12EXilPvtlNgLvV7pyZKMRuwsd

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $0/PotLV64.exe

    • Size

      647KB

    • MD5

      a66d9e8f8525315924710f84af19e5b7

    • SHA1

      00386a1d980032f0359e4dd42176a5c530638b7a

    • SHA256

      606e8fa7eba8b9ded6a333093b033ac8842d48ed06d4b2bc491ad49e2f8e4299

    • SHA512

      af3fbf3ca735bc9a6c984f98dcc1f068219ed840cb4a17e164c6f489484dc3690083e18037766292f1a4dbe5b2e082349ff64f32be846fcc05640dd11dd9824a

    • SSDEEP

      12288:jr8jq1NzkoiabmRG6EUQtWrvt9BRAaCPr:vPFrXUQtWjH/ir

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      192639861e3dc2dc5c08bb8f8c7260d5

    • SHA1

      58d30e460609e22fa0098bc27d928b689ef9af78

    • SHA256

      23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6

    • SHA512

      6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc

    • SSDEEP

      192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      18KB

    • MD5

      0bea21545b130f74ad40160ae8ac05ea

    • SHA1

      3f969905c51d27a884c060a31d0d32b1024dab86

    • SHA256

      3239a185c653b1f2385fbb9716172e116551fc68867e36ffdb96d5d7c8eaea5b

    • SHA512

      9af245e112813226bf5db78554348d3596defe41d6cb3a98da52353127fb0f16a5c93af742afe20c0d646e76a55cf70055c349deb5650c2e48a2c821ea453510

    • SSDEEP

      384:XoUK4FRQZIltb0m0GZPHe/qzddyCkA39:pLFRQ+Rd0GZPHewxkA3

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      b7d61f3f56abf7b7ff0d4e7da3ad783d

    • SHA1

      15ab5219c0e77fd9652bc62ff390b8e6846c8e3e

    • SHA256

      89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912

    • SHA512

      6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8

    • SSDEEP

      96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nxs.dll

    • Size

      6KB

    • MD5

      725a694a4711245e8ec2beafbbb60d2a

    • SHA1

      f7b548df9469faac87c68ac020b32985c62d4e0f

    • SHA256

      ee9da9fad0ae660326395e1d5c293838253389f4939d6216aab945e0228fecab

    • SHA512

      88cd491084fdc23eb604422931d0285aa015f52f877d53099211edc3c4905b59a33fecdd9efb41b77b396aa84e59638479333692bf1ac2f93936a0ffac75d49d

    • SSDEEP

      48:qnnS4Fiv7O5iWwqirm3lg8uyhOdR7r2vR1RWCs0UvudXAgQAsRNZYawUy11C+zQy:an+NqiS3l3TqR90UyYAueawvyvy

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      KillPot64.exe

    • Size

      89KB

    • MD5

      67b4df7a6fb5e6b59012926177586732

    • SHA1

      fdb725af9ac8daddb8a718e541db6d6718b3b301

    • SHA256

      00a1067fc96eb2c1d440bb5b44b32f43b9900fdd3a65c985d65a63b8f1535ef5

    • SHA512

      f1ff7d14ee13cda94412b4d66277a5315c557e66678c6e1b6a2ed357d9d4868732e9aa383c38db0f561abbab6c4fbe0b2b0c5347c6a38010a5064d6e32284d3e

    • SSDEEP

      1536:48d6OORYdcD9PjCX0Mr9TW/6gusWgSdc9dl9Xcg7/VG:48d6KM9PGkMr9k604UPD7NG

    Score
    1/10
    behavioral13behavioral14

    • Target

      PotIcons64.dll

    • Size

      2.4MB

    • MD5

      ca6748a29531248370363084849b954b

    • SHA1

      6a3d8855694f902db14efcf46b335f34baaa264e

    • SHA256

      6af27ae826e386bdfef67548ccacc00982b9b9d0b54f77b51c29bdaf4946f94a

    • SHA512

      99287fa0763a34ddec06f37e6070b1df9fcc8e6d8904d273bb6d342cc09aa515e0fb5c8384084ad0d1b77deb29df92b070825730a28e6525a6f4af084c226ba6

    • SSDEEP

      49152:A+zQBkhvzoW3G+i4TK/QKqG56DxcZpdYVaGxuA7moTy9snWSX9/HyG1VdKNegZHR:A+UBkhvzoW3G+iGK/QKqG56DxcZpdYVw

    Score
    1/10
    behavioral15behavioral16

    • Target

      PotPlayerMini64.exe

    • Size

      247KB

    • MD5

      ea7d2db4bacb87dfd3405aad1a0304df

    • SHA1

      c023050a5b4d19b5b8ce9ae74c22058f8dce9aa7

    • SHA256

      1015e3d51688f6b68ed59ea9e9ce9b9ca44ecc04888f9e9049278a62b7efaec7

    • SHA512

      1d93d0c6b3fc37db74dc44460590836c78a320a4fbce856c408a6779b88734075de33a3f239ca16324716986ba6919f5bc65652b801fe6f04e0e610f2e3a7cf4

    • SSDEEP

      3072:W0ai9KEFFnee2d0bLzCU+5DmcIqPlczN6:FnPEe22CRdUw

    Score
    1/10
    behavioral17behavioral18

    • Target

      ffcodec64.dll

    • Size

      6.7MB

    • MD5

      a7b1c5877beeb815eec4341e3c9851c2

    • SHA1

      e659d5a1016123ef07deb5f7088c35cb62b1347e

    • SHA256

      e00f409fb8d7ecd23347a22a5ff89b9bfe2e29fa53a6a378b7ab2c29221c84d5

    • SHA512

      2ba65ccaf6ec2b40d587450f60e9e10260b69555c738fd1523bc493106729f3e1468a5ef64d7279bc9c4cf1f5709dc18cb7912a5a1b4c3b68479959795a58139

    • SSDEEP

      98304:u7tVifbDCW5Kmly/VBbQpld/jLn1rx2u4gAxB+01oCFk:ws59sALnggR7

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks