97e3c19cab1004ead7082286f31f61cf3e2ef25294ccaab7bdb12bdf866f9331

Sharing

Copy URL Twitter E-mail

General

Target
AtomWealth.zip
Size 2.1MB
Sample260416-alnbaae151
SHA256 97e3c19cab1004ead7082286f31f61cf3e2ef25294ccaab7bdb12bdf866f9331
MD5 9ad8c65609decec44a032c2ca3d9b07b
SHA1 70e15ce81e900366eebbef1108bc04c9bf69739a
SHA512 8d057d43e310586b32ca3bdda0a56441932c8b77868e761a44cdd95aae6c9e60e16062af3c01ebab2244590e16fc17d3249a94bb48ac8cb7b35ff776dc44b3ee
SSDEEP 49152:CClmrYIbdT9Wi83iONKI2Owft2BdlK7TwUGzMTHWMwyap:LmrYyOiONr2OW97dKUHWMFap
TLSH
T1E6A53376978DBF5AC016A77604E8065B1703C1799B4B072C382E37705E8E4BDAF46B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  AtomWealth/AccountInfoCtrl.dll
- Size 247KB
- SHA256 33baece085a0a948c8109f908607780a0eea2905d4f3475bf44cb1ca97424215
- MD5 8a0e7eb19600836123edcd7d17110d9e
- SHA1 4e01998cbf46c364b14ee39dc2889ba8f5310150
- SHA512 b0522abb65568884998550eb02fee9ccc32b017c48deba16a53f198df55ee05c871b1574781775b76f18a364297719eacdb0d404409cd49b44799d1d035a3ea1
- SSDEEP 6144:BXGk9Fjybg3CH7frfnrA9YSmia+qUEzKtLzBhMXjvu6tnoRIb4iI7Y6DZjax:T9Fjcg3w7frfnrASNinh
- TLSH
  T19A34C7501A58DB6FE6599F384164783002A0B2315326E759EE6E417F2C1FB81CBFE3A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AtomWealth/AtomWealth.dll
- Size 2.5MB
- SHA256 b4bddcd2d636ebd299c2cc465fbbdfe1eb3bbc0140af68e6b007d2fdcae641f0
- MD5 11c4796d39c0b8e7b5ed4e6cdb1c6306
- SHA1 b92f8d502b41944a601ffc62142f7b93785d76cb
- SHA512 1bf30d83c855d1f793a6c3c5e195d8247a70f01e36379e5298a9e439541f358e240baa15f7da2b84756e24111bedb3e0ae982f845e124e58acb045def85c0f19
- SSDEEP 24576:rdB0lqm2+qS4/giWCTUQRykMHGWTjMsqBK6NxAIY45CFEMIQfetwifm4fyB8vBW:gqS49KkMHZEVCwfE8Z
- TLSH
  T1B9C5D48123B8AE6CE27E8FB91161042803F9F949D7FDEB1EBE0464692D767404DC5E63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  AtomWealth/AtomWealth.exe
- Size 161KB
- SHA256 39847cef500b25b7e6ed8b661f0f8c16d789544a32448baf5bf8e7cdf8bc40cc
- MD5 58b2e04016d93c597dbb3be3d0f4833f
- SHA1 e7aaa42891730b38e298ce57fe1e10c2fbed33be
- SHA512 5069c9df1d606fbe46f33637dfb9777fa0f2d166cbf518fe6735b2d0ccaafac1ddb88fa412d4097bcdf7bb8b6f6cb35498d0f57d175af9b96f196ecd202d69a0
- SSDEEP 3072:jXwANETcQt1Onb5RHrfqDQXFn4dePYseJwmI82jT6ZbeA8Y:TlxnlRLfyQXN4XDMob8
- TLSH
  T140F33C03A6AC11FEE1B3D679C9924941FB7278594B71A6CF13504EBA0F76BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  AtomWealth/CSharpAPI_Lib.dll
- Size 199KB
- SHA256 44e66cbad342cf7520fcb37f1831a59f11331ee1947504f7dee82d2dd32ff8e7
- MD5 5e5c2d55055267a86fe8399138a34a9e
- SHA1 663dea26c646088b14bd4ba8b78cb808343d840e
- SHA512 bd3499c49b99dffbaad8a7fa8682d7de14195c17150fe612fbad6c8e80230b64a9c1c803c177e3c1601065bcd91f66bfe1be4bf3267e08c2b63b756e910c5a9c
- SSDEEP 3072:4MqkbfebAarJ3vNao+gAcD7I2vC2ciKM5eNRyFNm9E2MPd0u:0AeJ3vN2gAh2vC2vKPNRyN87
- TLSH
  T11614083517B4961AE6FA87BCD0F14125C2F2F5263266FB5E8B90B89E2A73741D800773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  AtomWealth/Microsoft.Web.WebView2.Core.dll
- Size 490KB
- SHA256 4045f33c0cc195950aa92908bab5f904f41f04f54cb2219c11ddddf0268e1a4d
- MD5 63635b1fbe15beda6f357133921cf38a
- SHA1 ba6439b3c19b84a0e3ef15a8421a7cbc8b87b6d7
- SHA512 5364e606c583e0fd552fef8b95794a9d872d667a31a9844819e97f9e692a854ba5fbb8ef5a034cc8f61d53ca333cd81ea196d8d8f048723c0bf1abdbbe28e587
- SSDEEP 12288:ECtxgrB3ye+iKzORFNgeA+imQ9pRFZNIEJdIElxPrEIgcvLcglxMwCepM1STUP3i:geB
- TLSH
  T16AB4412233F9462AF9F22FB5557412204AFAFCD6BD79E74D4998611D0D72B818EA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  AtomWealth/Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 5d2f7c295af119d901506700e3510cec5369cef665a6265755b51dd98d4fb0f1
- MD5 774b91d056c6dd97979d7f56935b656f
- SHA1 6ecb5f80b719ba9579adbdcd145990d79b999b33
- SHA512 c1a1e9fa75fd46040f9014b8bba835b8d1bd2adb82cdd34cf18470bd5fcfe02a1517d5beae5f49ec15b4eae66ccf50133379c57df22ded21263f1bf692a2e6d4
- SSDEEP 768:tN9HFciBtBZDgcEST3p4Jjrjh2jJ+SG2auxvxJKia5/Zi/ZGQKqu6bMood3RtC9L:D9fBtBZDgcEST3p4JjrjaJ+SG2auVxJJ
- TLSH
  T149033B00839CC617E6EB5EB8A5B481611B3ABE837A61D39D5DC8F1E90DB3BE055103B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  AtomWealth/Microsoft.Web.WebView2.Wpf.dll
- Size 44KB
- SHA256 55c3e5549f894ba2b13dd9d8985782faee3169fd99bb24827c6c6eef51b7e32f
- MD5 785578a5b457e65046cbae53ae03d38d
- SHA1 4f3239ce74edab758ef5d79bd483b6d0e0fcabc2
- SHA512 fe00b25df49d51c4e59e290ada8c1c1f9d894152f352b98e8f9ce0081f78324bd53e574f9cc3cb031302fc8ea1315489db84ff6f37352e959562084c4aa38aca
- SSDEEP 768:WV/yvu12smfD0v7JNYHbidNi6UAuBkvQf8Z8lBDP/ryEH0UBy4JjrD1h2jBhsUaZ:WUz8NU3D0Z8lBDP/ryEH0UBy4JjrD1ao
- TLSH
  T102135AC443EC4526D6EF5EB494B489620B39FE8379B1E7482AC9B0E90DB33D059453BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  AtomWealth/Newtonsoft.Json.dll
- Size 695KB
- SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
- MD5 adf3e3eecde20b7c9661e9c47106a14a
- SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
- SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
- SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
- TLSH
  T165E45A2123E99B2BE0AF2775B032491647FAF542F6B7D78F5604D8AA1C43F558D82323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  AtomWealth/System.Data.OleDb.dll
- Size 119KB
- SHA256 5d185f35094813d500c14d98086441e39ffea4dad02410b3ac24f4d751ebf8f8
- MD5 03d8ac0d1727b627a61f58220d6fb860
- SHA1 e5ca8b5b0a105994004a6a2a1f6bcb04d7e1dfe6
- SHA512 1218002737f58819d0e5cbe71dc0506aa5b11bf4aaac46cbc1df4717d304c4ac66850ba599146f56aaab25a0c5787f829f306d77ea0c575d0f8b55a423591a53
- SSDEEP 1536:6cHm8U8J8B0IIMgfpc5FrtpAauVzrbtYC/xB69j6MsJrk:jK0HfpE0rbtYC/xBa65JY
- TLSH
  T1EAC3562437E473DEE9B72532766B5116A93DA6C27613CAAE3D4C000B8733D7112B3B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  AtomWealth/runtimes/win-arm64/native/WebView2Loader.dll
- Size 134KB
- SHA256 8af79ae5fc644659820c943ca871ee452deebee3b21291ad050882b7958d44e7
- MD5 c25768323103104b2f5b075c45057a10
- SHA1 d00ffc23ee17aa2243e14412eeab884ddacb7de1
- SHA512 31f100537391f6aa2f6fe925e474f9ff9c90d27bcf73351b71cee5518340f9af93baa3d9b809f85fb8165ad0cbb1c963f8c28b5457bc386410d1a87e03b448ed
- SSDEEP 1536:9VMcQjNRhcdP5myyqH1LeBMtH+IpKiArGBUsWhd/TcwWEUEtCqCiAwpGUtZhzU:/MHed4/qCoH7e+y/TiEUEtCqCiAwsmho
- TLSH
  T13FD3199327DD1443D6D3EB3CC8278A50272BB9B88530CA4B3253015EDE5FBD5DEA4A26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  AtomWealth/runtimes/win-x64/native/WebView2Loader.dll
- Size 158KB
- SHA256 28b898e4433291c969cd4f3bc46377b195527ad9138df2fa57243ceb6717a6b9
- MD5 8838e584de6b554189da0297b36afd2b
- SHA1 3fd613f6c14b484446c71aa651d2cca2c3515e2c
- SHA512 57984d7c948a2535c25ee01703e7dbe208768f9a8711392928107c603d2158a224ecb6f4a25c3e6e5c60eb13d08aed8f921770af0d55a3376647db1cc7a7978d
- SSDEEP 3072:QtWvF4bCEAJ1/fEyClkpOpji64PsvI8SCOT9dEt+NsgYjzbU:mWKY1/sygQi4skEtTA
- TLSH
  T1DDF35B57B3E400BBE1678274C9938A16E777B8110B50ABDF03A4476A1F237D4AE3DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  AtomWealth/runtimes/win-x86/native/WebView2Loader.dll
- Size 114KB
- SHA256 5659cbae9f3d412662515671a6c85aefe08eee17118c3de1330a2fed74dc415f
- MD5 91ad16b368c7703e9b3d7ac665d67a47
- SHA1 95c801d6d350a5820607253c7a3b7df527651575
- SHA512 cad3a972eee03acb3e8ea4d5d1d306eba0e2ff65388250ebeb65fb36ce0def82323487a70a9fce0d8ddf633f68a12619b3650a1bf2e2ce4876c47f5ec023396d
- SSDEEP 3072:1ny/h/lA9t2JqgDyBGFHyklk3QKHS8TXoEtpAlyh0uchBa:A/lct2JFkxk9Etiwzcva
- TLSH
  T144B36B51B6D08471E5BE0A3C0874EA655B3F7D60DFA08DEB37581AA94E313C09F35B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  AtomWealth/runtimes/win/lib/net6.0/System.Data.OleDb.dll
- Size 356KB
- SHA256 51544a9070e216616eccafb8a5a6b4b6d61f7f047e7fe38cc8794c212874dd9d
- MD5 b219124d0c3bc95cb7e9a9be80d1fc3d
- SHA1 2d11c4ce33a646bc10d1808c70ab78b688ad200c
- SHA512 c988f375494be3f2b24dfee256e99b58f693a7204fec079f8bd37984ed1cccd3b2549c83a62905f6b9d5dfb205ba83c2bc32201350653674e773b6e16a16033b
- SSDEEP 6144:mzlMypanWaDrnIjX1bmlCjVG5TcVxw63XnH8OY+yrbtYC/xBj:0uEanWY789mFExDXnEsC/xBj
- TLSH
  T13374392433E8624EE5BF2676A16B0411DA79E246A313D3AD3D48506A0F33F72953376B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26