General

  • Target
    Full_Version_repack.zip
  • Size 26.3MB
  • Sample251029-tzkbbsan9v
  • SHA256 7c98075093579134f7c9eed9a49120517c501e2efe2fa8c19b001cba2f4978c3
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • hijackloader

Attributes
  • directory

    %APPDATA%\com_win_runner

  • inject_dll

    %windir%\SysWOW64\rasapi32.dll

xor.hex

Targets

    • Target
      Library/MSSOAP30.DLL
    • Size 688KB
    • SHA256 31588c267b8780156832e80e8013e4d257659b7a8c440514b7c3e719b8c82f8c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.Azure.Management.Monitor.Fluent.dll
    • Size 763KB
    • SHA256 eba1024441cd2801652b02e9bf60813cff30b7fac68e31f055e056ac75135d6e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.ML.Transforms.dll
    • Size 745KB
    • SHA256 9f4b5dd31266290321db61b5913fdde1707cfca7d9b978e675322778f6dea68a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.Pex.Framework.dll
    • Size 619KB
    • SHA256 ed30b279a155fda6d605790e7eb7e0f590a36ab40138254d2ea6d77e590e0505
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.VisualStudio.TeamFoundation.VersionControl.dll
    • Size 1.2MB
    • SHA256 d21da2f6f2402703645d9d22bbadd1c471fb0e8a621e70f02e935787b5e7616f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.WinForms.DesignTools.Client.resources.dll
    • Size 339KB
    • SHA256 24cab8fa74050ec9f3f91ffaa6c4b39e92d685d0ad1f782057ef27a42202e990
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Qt6Sql.dll
    • Size 311KB
    • SHA256 ca43e048d389f3ca852447d24024ae63050d579a9e2ab9b5402a7cf2e45f88c5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/System.Numerics.Vectors.dll
    • Size 113KB
    • SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/System.Runtime.Numerics.dll
    • Size 326KB
    • SHA256 3e654e81dfa4bd7dfd8710f59b0d597488e8e680b564fe274686c28c26c61bf3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/System.Security.Cryptography.Algorithms.dll
    • Size 787KB
    • SHA256 cf6e6c23ca7c80337a8f873984c30bf6a9c57efb037cca59cb3c6a9958ec871f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/VirtCDRDrv64.dll
    • Size 214KB
    • SHA256 0dab365c305cc851954d060bf95b44d22470b940d813c2cbb7e9e0aa6bbff4f4
    • MD5 SHA1 SHA512 SSDEEP
    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Target
      Library/cpde.dll
    • Size 888KB
    • SHA256 30d93a023c334d5fd930507ba2692294fedff1211d9e026a3770cbaa2ead21ee
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/javafx-font.dll
    • Size 309KB
    • SHA256 900ea5bae7c8f7b5b3b30bfab506ead91abcba13055910b80a516318d76940c4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/libeay32.dll
    • Size 1.2MB
    • SHA256 33dc10e86dfc598dab8ce80c154c0db951733fbe10b486dbb19009d9086b06da
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Library/mswb70804.dll
    • Size 1.1MB
    • SHA256 798dcdbe9e2592b030d9b465a84ff8e804b52c34ef9d13d91cdfbcb7b8f797d5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/odffilt.dll
    • Size 1.3MB
    • SHA256 f997c1aea868bf8146b74a657a128fb9567faaa68c578028209a5521e62591a4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

hijackloader
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

persistenceprivilege_escalation
Score
5/10

behavioral22

persistenceprivilege_escalation
Score
5/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10