Overview

overview

7

Static

static

3

0 Mouse De...ay.rar

windows7-x64

1

0 Mouse De...ay.rar

windows10-2004-x64

1

0 Mouse De...ay.reg

windows7-x64

1

0 Mouse De...ay.reg

windows10-2004-x64

1

0 Mouse De...er.reg

windows7-x64

1

0 Mouse De...er.reg

windows10-2004-x64

1

0 Mouse De...V2.reg

windows7-x64

1

0 Mouse De...V2.reg

windows10-2004-x64

1

0 Mouse De...ay.reg

windows7-x64

1

0 Mouse De...ay.reg

windows10-2004-x64

1

0 Mouse De...Me.txt

windows7-x64

1

0 Mouse De...Me.txt

windows10-2004-x64

1

0 Mouse De...es.png

windows7-x64

1

0 Mouse De...es.png

windows10-2004-x64

3

0 Mouse De...on.exe

windows7-x64

3

0 Mouse De...on.exe

windows10-2004-x64

3

0 Mouse De...GS.png

windows7-x64

1

0 Mouse De...GS.png

windows10-2004-x64

3

0 Mouse De....5.exe

windows7-x64

7

0 Mouse De....5.exe

windows10-2004-x64

7

$PLUGINSDI...md.dll

windows7-x64

3

$PLUGINSDI...md.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...al.ini

windows7-x64

1

$PLUGINSDI...al.ini

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows7-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

Resubmissions

23-12-2024 23:38

241223-3mv2qsvndx 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0 Mouse Delay + Input Delay.rar

  • Size

    3.0MB

  • Sample

    241223-3mv2qsvndx

  • MD5

    0c528e3b045c5ab227f5eafddddd801b

  • SHA1

    7cee0f0b1a21714d24ae80c214614df116228f43

  • SHA256

    b36314ddd6a40030323302f2566d2bd73dce793c7f47a4a1ed2f76025c1c8afc

  • SHA512

    e7c412af691b02fc52c8be76f0410df8096b93a1b9aadcca034f30bdb40986a7149f402af4d87e5e6896288b696bbdd1ffbb6ff884af2340098e18ea6cbd1d7d

  • SSDEEP

    49152:6NTztXrN1e+ruNNmFIVQY068frKe1z/WWloIIy8zBofzDua8bJSa9/E1FHhfWJN6:6N1b/e+ruHq4068frKIz/WxIVkofz/o+

Score
7/10
discovery

Malware Config

Targets

    • Target

      0 Mouse Delay + Input Delay.rar

    • Size

      3.0MB

    • MD5

      0c528e3b045c5ab227f5eafddddd801b

    • SHA1

      7cee0f0b1a21714d24ae80c214614df116228f43

    • SHA256

      b36314ddd6a40030323302f2566d2bd73dce793c7f47a4a1ed2f76025c1c8afc

    • SHA512

      e7c412af691b02fc52c8be76f0410df8096b93a1b9aadcca034f30bdb40986a7149f402af4d87e5e6896288b696bbdd1ffbb6ff884af2340098e18ea6cbd1d7d

    • SSDEEP

      49152:6NTztXrN1e+ruNNmFIVQY068frKe1z/WWloIIy8zBofzDua8bJSa9/E1FHhfWJN6:6N1b/e+ruHq4068frKIz/WxIVkofz/o+

    Score
    1/10
    behavioral1behavioral2

    • Target

      0 Mouse Delay + Input Delay/0 Mouse Delay.reg

    • Size

      381B

    • MD5

      38289d707fa88eb65305a206ae22eab3

    • SHA1

      f011057298a8f47947047157544a31609805449a

    • SHA256

      ad9e9b34ec4f48b4472ed9a296b36dd531acfeb32e8a86e98216e1977723600c

    • SHA512

      7c6b711a3c2a7d2c181cf0e9a86a9d2f6f38ad1b8c47977ddf567f921815e6f6384eedba15a0f34526cea4081a537f89ce1f46a61fba2314c945c9bc939580a6

    Score
    1/10
    behavioral3behavioral4

    • Target

      0 Mouse Delay + Input Delay/Delay Reducer.reg

    • Size

      421B

    • MD5

      15dbb8ab08a3c872eb8de86a9499baf4

    • SHA1

      3bab0de81ece7410159c83f4b3451b5af54869bb

    • SHA256

      144243d6a71b302d6b2a076562f1d7a71b7a02e8e144fcfba1c037baef8dc84d

    • SHA512

      24bc2c46a7ac7be6b6362eb502da59782ece03186bbdda7c4a15904fab6a7dc246358a9a6ae2135384be9e4f8f99ed8ca2a4b6cca16fe79f746d7e387f29da98

    Score
    1/10
    behavioral5behavioral6

    • Target

      0 Mouse Delay + Input Delay/Input Delay V2.reg

    • Size

      1KB

    • MD5

      e28da2ed9d241df9f2748de3aa14216e

    • SHA1

      333f6a38446c2a53ffb43c1405cd585c525c0c53

    • SHA256

      a68312fefa1593ff2399356d847fba9ca38165b1010d8b182070ad575b59c1a0

    • SHA512

      8b46271861dde566b8873cc7db0fca4d8e9daf138524232a62e128207e41d15b31af8f58fdeb194e193619384ad4736fe77176f96196ac766c9cd95066fde34e

    Score
    1/10
    behavioral7behavioral8

    • Target

      0 Mouse Delay + Input Delay/Input Delay.reg

    • Size

      258B

    • MD5

      28e1433796de23c501d1b48f3d8c3a15

    • SHA1

      ccc03d5bd391b88b291a25b711957616c75b930d

    • SHA256

      de8f342e5f4dff61b98b9b238b3643c6040718edf6ab1c4a5e1d38b9eb8cc3f6

    • SHA512

      1def9fe0bca80999675697e7908d7126edcd889377518045b72e03388f9b4d48e45428638e1ff8faf10e15d0fc7512ea58dc0808af62c63a10ab245a1d7aa70c

    Score
    1/10
    behavioral10behavioral9

    • Target

      0 Mouse Delay + Input Delay/TimerResolution/Read Me.txt

    • Size

      332B

    • MD5

      efc5ed953cb0b4767701677ceb87de90

    • SHA1

      99ce73b3816d3d8aef6ddf6e69840d5a15a4cfe1

    • SHA256

      ceefa22ccc2255f6ec26c9f579ca99e93ed19a2c56566f8bb58281a9bd031fae

    • SHA512

      3651a3f6cabb70d3a511383278d7557444b9dfc115fea94139e907adeb9be720eac2e510280410df7d7ca22174846de003b0dbfe47b750e821a9ac2d03300751

    Score
    1/10
    behavioral11behavioral12

    • Target

      0 Mouse Delay + Input Delay/TimerResolution/TimerResolution Properties.png

    • Size

      25KB

    • MD5

      51dc45029605de9bfab3c6ea71f012e2

    • SHA1

      798de4eb6ea95abf5555579af67c5c9d811d4727

    • SHA256

      e010e8ca25db1f175656c4cd28b5441053669e9ad31a17e4dc2a6b2c51b345c3

    • SHA512

      91473954ef56bc84bd7fe4c42aad9db27fe2450960c5d9661805cf30356d07d1349475e822323eecf34536a945bd4f1d18df7399b218728172e32b612d72c19b

    • SSDEEP

      384:F2cjZMpEW4LI29QoPYDxs6rGakgyA1KMbWCZj3pAWXHd1oi9n3NFnMofDYxUOcq:F25MEloSs6rG/YWI31JrMo7YxUOf

    Score
    3/10
    behavioral13behavioral14

    • Target

      0 Mouse Delay + Input Delay/TimerResolution/TimerResolution.exe

    • Size

      32KB

    • MD5

      2c9017dbc6c38d2567d550177d64a81d

    • SHA1

      f77de1de8e39c17c299c25696cc7965bfe07028f

    • SHA256

      8a0c6871ec6e09e4193f537884111006a947d7b3e9260110907777d0c4dd68d3

    • SHA512

      244430ea44c510b61351941cd459278e2cd7bf88750643c49b2d710139b3c71b4a35e8379d2dccbce23a15105e1b6ad6c9444875dabaefeb311a45a9a0fc580a

    • SSDEEP

      192:h0ZL+FnJA4o2TCFFlsDof85qan7hsDofi1oynazAetV0qMI18rii13:h0enJA4/2fkJn618zAo0qM68rv13

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      0 Mouse Delay + Input Delay/XMOUSE SETTINGS.png

    • Size

      52KB

    • MD5

      5eacc84bbc40e0a7c3de41f350edd73e

    • SHA1

      f988d50b235c0ad76b771b46980fe2a65988e21a

    • SHA256

      510fbd9f7ecf42554605fb33717bdb8a5e1edeabfd8e47745aa92057d0062563

    • SHA512

      9c650ac17c9bb0aecc549c339c319d454d446427c0dbb565e8d6da9783dbed7ab3a1cecf47c422d6c4edacb12963ee956fac656ef662c9975bebee661db54a89

    • SSDEEP

      1536:bHWLQIDpH7GSpw0slL2d+3ZS2P832NlbP9kh1:LWQIVHqSwVL24pJP832NpP981

    Score
    3/10
    behavioral17behavioral18

    • Target

      0 Mouse Delay + Input Delay/XMouseButtonControlSetup.2.20.5.exe

    • Size

      2.9MB

    • MD5

      2e9725bc1d71ad1b8006dfc5a2510f88

    • SHA1

      6e1f7d12881696944bf5e030a7d131b969de0c6c

    • SHA256

      2240bf5fb5d80938b0676c46ef9f84bc1739c32f60c473ff85e530ae0eca2818

    • SHA512

      62bd9cde806f83f911f1068b452084ef2adc01bc0dec2d0f668a781cc0d94e39f6e35618264d8796ca205724725abd40429f463017e6ca5caf7d683429f82d39

    • SSDEEP

      49152:n65SJw48kZN+nCYk7c44+Y0hdwn4Km2A5aT/pVE0hYYajihV2Qso0SWMrboF:tfpeno4oY0QZm2dlNJsrHM4

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral19behavioral20

    • Target

      $PLUGINSDIR/ExecCmd.dll

    • Size

      4KB

    • MD5

      b9380b0bea8854fd9f93cc1fda0dfeac

    • SHA1

      edb8d58074e098f7b5f0d158abedc7fc53638618

    • SHA256

      1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244

    • SHA512

      45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c

    • SSDEEP

      48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      d753362649aecd60ff434adf171a4e7f

    • SHA1

      3b752ad064e06e21822c8958ae22e9a6bb8cf3d0

    • SHA256

      8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586

    • SHA512

      41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d

    • SSDEEP

      192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/ShellExecAsUser.dll

    • Size

      7KB

    • MD5

      86a81b9ab7de83aa01024593a03d1872

    • SHA1

      8fd7c645e6e2cb1f1bcb97b3b5f85ce1660b66be

    • SHA256

      27d61cacd2995f498ba971b3b2c53330bc0e9900c9d23e57b2927aadfdee8115

    • SHA512

      cc37bd5d74d185077bdf6c4a974fb29922e3177e2c5971c664f46c057aad1236e6f3f856c5d82f1d677c29896f0e3e71283ef04f886db58abae151cb27c827ac

    • SSDEEP

      96:GFZf6PnleKYcBVGKLyhkrw0qyz/sRXQVgKXohw8FFtkqCp:Gnf6IKTAKLyGOCqQomItQ

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      56a321bd011112ec5d8a32b2f6fd3231

    • SHA1

      df20e3a35a1636de64df5290ae5e4e7572447f78

    • SHA256

      bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1

    • SHA512

      5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3

    • SSDEEP

      192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/ioSpecial.ini

    • Size

      211B

    • MD5

      e2d5070bc28db1ac745613689ff86067

    • SHA1

      282e080b4cf847174c5c11e4f9157b8c338ecb19

    • SHA256

      d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0

    • SHA512

      a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de

    Score
    1/10
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      25KB

    • MD5

      cbe40fd2b1ec96daedc65da172d90022

    • SHA1

      366c216220aa4329dff6c485fd0e9b0f4f0a7944

    • SHA256

      3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

    • SHA512

      62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

    • SSDEEP

      24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

Score
1/10

behavioral18

Score
3/10

behavioral19

discovery
Score
7/10

behavioral20

discovery
Score
7/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
3/10

behavioral32

Score
7/10