General

  • Target

    modulo.zip

  • Size

    44.5MB

  • Sample

    250123-r8l56ssrev

  • MD5

    58a4ec2a6ff4d63bcd7f8d8f6b182e8f

  • SHA1

    7a13c703dddbdca3a54e095e64f674878cd604eb

  • SHA256

    30119e1f90ac99fdc496f0ce8c1a51a5e406667c1310588f792879647a9c1bf6

  • SHA512

    4cead44126dbfdef6f92550f9bcf5a53a968ddd175c62322583b49e9bf56f6f271e8587268253e234261f798f94b20adc97ab4ae86a8cd0fa80bb11de7f6689c

  • SSDEEP

    786432:npO7eL39aMcQkN9MOasMMkxkb71zzyILMl6uarcp8FKQMihmLf6dfrzONUiV:nQeLZcQ0MZIkSzGEMlqrw8FKQm6dNk

Score
10/10

Malware Config

Targets

    • Target

      bin\NSOCR.dll

    • Size

      2.9MB

    • MD5

      5d320299f6fcefe759626f0a07dde4f2

    • SHA1

      aee8914fb193e8ebb7e57e55ef054776ac1781b1

    • SHA256

      3c8a6e9126bf505b86a4e4176d9d45de2965117d14b11d42ab3359d631024e7e

    • SHA512

      7e9fc8446cc0bf985ddcf40b457431d723b8124bd43038999aca03b42a2785b194808f458d60a5a8031feaa22340898df8f048e42ce549850ce931f6cfe3da29

    • SSDEEP

      49152:MleC86EhPWpE//gD/2aUFuq8O7VC8hz4CXjqp8PxcdgCEUAolPSYfgv6TfN3qml4:uL8Fhu6//g65YF6VC6z4CuWPxcdgCEUz

    Score
    3/10
    • Target

      bin\NsBars.dll

    • Size

      1.2MB

    • MD5

      1bd118a433d4efed45127a4ecb0e6df9

    • SHA1

      3f9a54e5c276e1909d9b56139ac7c686ec08c486

    • SHA256

      401fea24d0f71aae181c7c7f7d8e7fc7ed330a12753ffbe86e59e9b8bd2f8477

    • SHA512

      95a71682a602381b136aad6e542b34aa9d7955dfb4e3a58dd8c81f9ca9d789a8c6782f82454a3e66989e0f2949747b05e34e1ddb73f20242366d0a80a0cacd0e

    • SSDEEP

      24576:0q5wqgfLqFgFYTFeG6W1v3OgXtrWOtqbt73jOA:0i119WRaA

    Score
    3/10
    • Target

      bin\NsImgLdr.dll

    • Size

      5.2MB

    • MD5

      cfef8d806d989363c2099b7df948c54e

    • SHA1

      723f2a414fa193df62a32b14607597a50c530f70

    • SHA256

      69555880b83878176858dcbc3ab00d661b807597b619d7560a7125032ed62a1e

    • SHA512

      9581c0ac8ef5972f908bd41b27daae240cfc0c5aec262279bd0c680b57c157661fac436bfc8847363ba3ba3e95e6307f5dfb22dedb3890a9d08fde6f5970ac3c

    • SSDEEP

      49152:H9Chbah9wK9en5gz7x9ItW8jPAKFzxe3ZiLk/HqpDDTxB/cIH21GRlKmpXQ:l+CUtW6xMILiqpDM1slKm

    Score
    3/10
    • Target

      bin\NsSpell.dll

    • Size

      316KB

    • MD5

      8f50f83e4fc8299ca6762b12a9d285bd

    • SHA1

      4b397981ab621f5b8dbe19053a89aef4a47d057f

    • SHA256

      3db372fc7a15d3c4b0f4509685832fff1523004f42150f1a15ff86fe48096e80

    • SHA512

      18cd2507bfdab6bf658df5c535f5581f76d82fa104a96693afea9989a6956bb353fc73af247ea5286de51739ef17b2680f5366bc3725fe0edb9aba26449656f2

    • SSDEEP

      6144:1CnnCgCB7hZo2VYj5oArDY4enC22FAPsByy1zyX2IST20SPhy7j:1iTCB7hZo2VYPDY4RXFAPsByypqSFl7j

    Score
    3/10
    • Target

      bin\Twaindsm.dll

    • Size

      147KB

    • MD5

      569eb253765f2b0854f26a1d7a0191bc

    • SHA1

      40c724c1622978e3df98b4cad5e8475a79fc89eb

    • SHA256

      ba747e28769d85458a33a61a2a230435612e376f99b9a2dc104a817e2d451bfa

    • SHA512

      5be9e30eb40118386b643235e70873f86bc6266b5f61d12ed118d6b8a476643cbfd85b288f2c680782c5a26342792514b0a9c7e53c1020c2b972751c90fa6f13

    • SSDEEP

      1536:/ZXCPRnHmPdKh2u9HAZ2H734pkGc239Y2/kyhrp0RW9m5waX6PF15s14dyw2r:/ZyRHmP8AudAZ2H74+2ROayXEF15LdyT

    Score
    3/10
    • Target

      bin\jnsocr.dll

    • Size

      112KB

    • MD5

      e1cafd43dae38aba094c866f45f749a2

    • SHA1

      1baa610fb9bb4f0841ccc0ec845a263cbc05904c

    • SHA256

      a6f4ca3991c49eaf52ce54e9a325292a005526f836ba99291c1527a21204b7f9

    • SHA512

      6bca34499a0e5f20c9a05b784607c3009216a729084e4d2b277bc093a411e475f5b3a574d82b74ecb4c12e85ba87010182c54659587ac37b83cbbe66023df973

    • SSDEEP

      1536:iw8o51Au7UTqbVw2ODTiGSMsab7navY9D1Nk/nm7n5weOgnEM0rI:ixoM8bVyawdTZ5weBzm

    Score
    3/10
    • Target

      de.pdf

    • Size

      114KB

    • MD5

      6feca223bf2a34d7e42d1450ca9a7213

    • SHA1

      7146ff1481beb27a1c104fdc381074faea6e8500

    • SHA256

      4cee3f1921871311b20aeb1d755e007af746870c03fe147ea6b204cb480ae989

    • SHA512

      67cdeb42b4bc24fcd4d1833aadfb26915c23e56bb2cb1c2de12b5b11e954a6e2d9916c93a6a4d491872ce52a27197b49f85a885ac5fdfbc882c5625e45ed4eda

    • SSDEEP

      3072:EMmLlGzzQR4765rKg4HpfZZ866zutGIBigzL2l:IY76xGpRZtTtLBigzal

    Score
    3/10
    • Target

      lib\Viewer.dll

    • Size

      1.2MB

    • MD5

      9cc1be4fa12ee5d1ef9eb1a293bdbfa5

    • SHA1

      6b33a6ecb4e4b66a1cac0d3f650c280f22cc0ea2

    • SHA256

      9d75768379185cf440a0cfa980116d3d6dbb582f6db01221ba1a61f5f636307e

    • SHA512

      88de6d23d30cdc629ec81c3187f05e278aeef4c51b5c8e99fbb0367fbae73b3c59ef446e3efac1adaf565335c5284e670a748bf5fc85aa197439a9ea29a54040

    • SSDEEP

      12288:Ajw2fKMk8tbPxkx1DzY/uffIJx366gejyfVduNPGH4vIeFO/:AjTKMk8NaY/ufAJxKYjyf3uN8RH/

    Score
    3/10
    • Target

      lib\glib-2.0.dll

    • Size

      1.0MB

    • MD5

      92238afe0b954c6fe191b68d4733961a

    • SHA1

      ea753017afa50f785eaaafd46e540af2053c80c3

    • SHA256

      a7678c361aea71ea380fdef953f78eb66a8aa2bb4172e428aa4e7e50f77340f8

    • SHA512

      6a19cee5e73958d53bf498a2d8e76bd8308f8b9241ec69ffc53ebebb1b055047389c979c941ee1b43e24cac4ff8c335831a14dd84ebf9e9ca164a7eaa59e8a81

    • SSDEEP

      24576:5BfY5Bk0z3dbKpIQVtKNn+NILjtatvMLI1E4:PY/zt+ntKNnMSYtvJ1/

    Score
    3/10
    • Target

      lib\glibmm-2.4.dll

    • Size

      417KB

    • MD5

      3acddbafee9296ce9a3e1d8af0052b6c

    • SHA1

      ace72003da3a8debb6db8dcdf43319ec0b823433

    • SHA256

      6dd6894e096cc418a88fe8f317b9183f2465e9af2c3347ead0a6fb8bae73a32d

    • SHA512

      df739cb5f57e1168e81820ff5612d050319c45b1b6c21929f37735076561d90f34f6f4980c8a0362ff88a119b52f68e70b96fbbaf64cacfa89e11d8dd88eb60a

    • SSDEEP

      6144:OE9kbBnhQVH7QPCQBA9/QgbJ0CB6vol/o3GlQyutjDlNr0o5:OE9CnhQVH7QmdKCBKod4DlN

    Score
    3/10
    • Target

      lib\gmodule-2.0.dll

    • Size

      25KB

    • MD5

      2d6688fa479e1795d62763fc8ab6cb36

    • SHA1

      9b0dc5ce61bc7162a779aca03ed92e09adc55f52

    • SHA256

      335380d7b84007738565fa424b6d7c7b898b561d9c38f2be0e8bc10d11ac078c

    • SHA512

      d1f68cf97e6f50aaf67caba3b76a0e3e7eef5eb764418abaa31360ce53567e658c6167e4bb2cb4cf22a4361eeb38cc9dedbe10955fb7e62cbbe208093fd2e657

    • SSDEEP

      384:RJHZl2yJLRHtpFJp4JbHEiiiHqx+bC9bBL1cIYiBpxxeuFA4i/8E9VFL2UtHk:DZtfBp49C8+VBL1NYi3DeuFAeEd8

    Score
    3/10
    • Target

      lib\gobject-2.0.dll

    • Size

      244KB

    • MD5

      2b65ef53422048cca00f15015067fbb3

    • SHA1

      5958c6506081a923a3875fc7226d342000fa10dc

    • SHA256

      5d3eba3da17f6e0685bd60cdf6a3a93538e8620df467032aa94cd9242f382068

    • SHA512

      d26e61b3a1f2d9e2c599aefdd7600578ea609a72bb7c347054d513727bcaa55f50cc107c7d1d62a88f19ec424254320c1849d3f930f66f9a90162b219d6287aa

    • SSDEEP

      6144:Q6idB5mOlFSQupClti8XeBd8N6GC62e5F3SQDiKlcKHRNQg+:VidB53zlti9Bg6GCwZizKXE

    Score
    3/10
    • Target

      lib\gthread-2.0.dll

    • Size

      20KB

    • MD5

      f7e9547298b1a5621f5f083af6abe049

    • SHA1

      9fbc5e188aefd31d96e9ed543cb4d4085d4cd092

    • SHA256

      ebe9ad0e36a4688d30083cf05a4654f776753776da73f6f9628b5ca2b0162f96

    • SHA512

      d882c6a9348daf234fbb4b788c549f013ab53c6331529fb4e03ff8769c7f3231facd31333a7a3d302e5f9a5387416f755d9d5a4d8206522d46e8d3df27967764

    • SSDEEP

      384:NdCrA5JBUpauOKIYiBpxG34i/8E9VFL2UtzPm:aA5jWbIYi343eEdy

    Score
    3/10
    • Target

      lib\guestStoreClient.dll

    • Size

      268KB

    • MD5

      2cdd6c8d78823e2e57bae959e25bd96b

    • SHA1

      a261e089e7dd2015dcb356433fdff2061a5ce905

    • SHA256

      c454ee6473a666745c6819debd602e29b7f3ec516be545036ac54825909b9b07

    • SHA512

      fc385c9b269da36745c269785da1898027056ee34145f8574cabf5c578743cc8ed045ac96fe90934f3974f2876b51c2fbecc46c5873c9a3c91f9db9e85998941

    • SSDEEP

      6144:gmgFI+0FM/ZQr6ZnCn771ZbhVZzY5s3Sc:rf+tg6O771Z97zP3r

    Score
    3/10
    • Target

      lib\intl.dll

    • Size

      2.2MB

    • MD5

      d5f6de08818de7e84e0447195b9e386c

    • SHA1

      20309107327aeb0e84cd91e4f17dc01d08c80f29

    • SHA256

      0db5852492d23f079c8e9893fec56faf715c42c93eee16987b06faea837a1ce5

    • SHA512

      12ade83417510c30af7f3c7126b8b560064e028bdbe31adf31cba7d037de5d017b17e78f2f55c8da080e2782ed20d7e469fe65fd68d04d4f3b479ce93b906ebd

    • SSDEEP

      49152:/M3KPUhowzYENv7B8Cx7xVSaM9pvC2XGsmpQPczpc:UEUhowT768Y/XGsm2cV

    Score
    3/10
    • Target

      lib\pcre.dll

    • Size

      374KB

    • MD5

      cd71fd9c522ba4bb700114024fb1cc64

    • SHA1

      ae6fe99ceae93c33fd6d4c7979ed34c60ec81bc4

    • SHA256

      faf9d7080062add283d8cc02bd4c0a3eb141665a3c3d3252499ad0735968c7fe

    • SHA512

      6f962aea06cc18aff00bb9e89b42b4b05edadb66ae38a2392c26ba0bfbfed6dc4d1bf7c77848ac0d532ca10f63c9fec20bd58e46d2c5998662243285f1944860

    • SSDEEP

      6144:TnZu9Av/GHYwqmbLkKUv8ZJH01Fs+4zny6bdg43ppkA6:lVXG4wzbLkKpSY+4ztdg4vkn

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

pdflumma
Score
10/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10