General

  • Target
    setup.zip
  • Size 22.0MB
  • Sample251108-s28w2afq2v
  • SHA256 03c3e5d36e6297e798dfa57308494f26e4d651a034fe11aaaa0fb848dcbfb12a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • hijackloader

Attributes
  • directory

    %APPDATA%\nt_net_amd64

  • inject_dll

    %windir%\SysWOW64\rasapi32.dll

xor.hex

Targets

    • Target
      AudioRender.dll
    • Size 155KB
    • SHA256 8c669212975494d3cbcedd48ebd3f4cb6275a6eed2a0ff9e3cdac7d03d666eb6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      FileAnalyzer.dll
    • Size 254KB
    • SHA256 03607630a992c96d1d17bcf3c327619c27ee24d054a0946831f1e3708f5613c6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/AudioRenderer.dll
    • Size 798KB
    • SHA256 63055ae72febd0b1a1fe9e9adc21e0201e1888b10da552690de14928374ab658
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/CloudMeService.dll
    • Size 374KB
    • SHA256 740a4f09437f8dbced80ee926b2ae2b32011b9c83d491b938e543b57f2f1f174
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/ContactPicker.dll
    • Size 217KB
    • SHA256 ea3f179042fd9a989d534de224cbcb702661511205d89b97fac740752391ca7d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/FSharp.LanguageService.dll
    • Size 233KB
    • SHA256 25251adae4b71c694944b7072d6f654c690bdd0ff2ca0883212eed54a81ae3e7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/LibGit2Sharp.dll
    • Size 503KB
    • SHA256 08de53332aec103874f84e5bf19a8e582ff3374372963b29525ee6be13eb5680
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/MCppEE.dll
    • Size 321KB
    • SHA256 e0af44dd9edc68a7e073cd884d8708ac1327df9d86a79bdc16910eed113c262b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/MSOCFU.DLL
    • Size 425KB
    • SHA256 105a9c40f47d068b9cfca3d95969375ddac1dd83d88f33b961bc5d829e09f7ca
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.CodeAnalysis.VisualBasic.resources.dll
    • Size 399KB
    • SHA256 83747a13a175a4ea6b6e056fbeb375f61552b8f0ff9a95b187474282c73b1a28
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.ProgramSynthesis.Extraction.Text.Deprecated.dll
    • Size 368KB
    • SHA256 4c40d92ea7f785795b7df75ff5226833a9d8d6735f7963c3b44b4f3f16be88bb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.TemplateEngine.Orchestrator.RunnableProjects.dll
    • Size 522KB
    • SHA256 90d70d30a7cf0c11d554f027a1525ecb1eb04fd96f9c0a20596d45c7838203c1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.TestPlatform.Extensions.BlameDataCollector.dll
    • Size 206KB
    • SHA256 d7d02df75f19e859c368cf8781890ec2cb92a64923d5b542af348b885eb055cb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Microsoft.VisualStudio.CppSvc.Internal.dll
    • Size 201KB
    • SHA256 a310a3c03fecfe4933e56ecf8bfbebecebad10898d7c9a784d41654f7f5944d4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/PPI-NVIDIA.dll
    • Size 300KB
    • SHA256 c0f59470a7613227be04707621e469e2fa55ba3b09c7b23aa6d415e08a0f8d1b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/Qt5RemoteObjects.dll
    • Size 466KB
    • SHA256 9c7e98537a3be19bf54fc46648e588f4ca113d0968162f319c6e5905113d7c50
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Library/System.Core.dll
    • Size 656KB
    • SHA256 75f1a8ff24f8330d4a5a719ad9ff4922bb150ef13b08640ed3b823fa8f9b332c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks