0456160bbd8372a01608d7f955564293441a51070c020cea7a179f077df02025

Sharing

Copy URL Twitter E-mail

General

Target
clink.1.9.19.77e487.zip
Size 3.8MB
Sample260417-asm9vsf14v
SHA256 0456160bbd8372a01608d7f955564293441a51070c020cea7a179f077df02025
MD5 99c4962b550a4936aad461c3d88ac96c
SHA1 7db18e0efc34b547106b3a707bdd31650742d204
SHA512 453c5ffacd512327aa2acd09a8bd3c24c179d917dcb01de2a47a8a75ab7884119d0d69b74fc97e8a0642444fa49f93a5711579734e7840b9dd8c960a4e34518d
SSDEEP 98304:uVpAB6b/1RNslekesIOndK+Nqo0K03Ju0xYlJumveHIuxvHLGo:gAB6vNsJdndHt/a9yfeouxDGo
TLSH
T1E606334DE3049D69D4E538B824E9C0B3D5EFEC1B32D574D3CB86B2670BAD9290E54AC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  clink.bat
- Size 1KB
- SHA256 8ce0dab1564dbbc1c5d0bb2984ae7c89986391fe32e2d8d9128e24b13c5b778d
- MD5 bc3a35ccbe8b9c80c1ffc3322189d0ea
- SHA1 572555e1b5e717f0052e85ff37e584b09ea327d3
- SHA512 82f047d34dce02cc8b2efd43d33421b433eeac7df60bb200da1ccb444c01e8b1db81bcedd13fb7f63b5790623172d5228c08a00951cec6ffcfde36a03b08c590
- TLSH
  T17B311182542E933E19B24943F9B2130AF527D5033757102AB557A0EE7FA31CA90EA1FA
- MD5 SHA1 SHA512 TLSH
Score

8^/10

discovery
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  clink.html
- Size 1.3MB
- SHA256 24a5d4288672a9b4d1fefdf9e3e002e866f046485bf5ae67a99f9fcbdfc2b15f
- MD5 2c6695e34d0da08ca814af7754aa4213
- SHA1 6fd1e67b367505ca8dcf215e3fc3eac622a1e0bd
- SHA512 41e2f3312b8e6c51fd462b90d3d3440e791e84c6bb9666f1c1840fbc161ae064e6558d6539082e2a18b09397bad7240cc4f4a01bbfa35ca4549a8212b28d34e0
- SSDEEP 12288:SulHkA9tzLYHMcPQ/K7gRAoocYLrDwQ4KOmDx51s0B9oVJVtebW8sawvMIw8Xr9D:Su9kAz0HMc4/616oFD1+adJHC
- TLSH
  T1BF55F87241D4563B415342FDD2092BBAF2EB406DE3120BE5FDFE870B479AD806A272D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  clink_arm64.exe
- Size 16KB
- SHA256 bbbbe515a6ea1dad6a6d41c955f9739b27ac3e05a4283e6bd79988d2a91afb42
- MD5 9457db2ab55c3a726eb54f10b0bec5c3
- SHA1 97c64df444082fc58105a9766562fcf50003bcf2
- SHA512 406f77e629c63847057eaa652e8d7d22d81eee174344662fe87cfac1c9fbecd0cf66cf3e5ba809ad16135aba609c9812e719ac23f692a87b72725dbf8b099adb
- SSDEEP 384:oitIwo34Nz72mNDGmdWXSofousWu4qNSj5f:SnS7hFySoQuSBN6
- TLSH
  T108726BA68F2450F5FA978F7099DC82679D71A7A00C84890FA00841DA3F437A57F353BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  clink_dll_arm64.dll
- Size 2.7MB
- SHA256 a8f838ccd82968b8af043bb5e3419ac06ccbba03a3fd5d7a6941f401403623ff
- MD5 b236e31a2fa01fc6b94fb3b012121e03
- SHA1 0f1871fe25e251a7566a3547c1fa20d8dfc977f5
- SHA512 3f134a4a3cb01455b13fc0e72800d7cad88db85a31f491b9c8153ff26f9e6b4659bddeb621aab07a8a4d548d113cca61d112b1f593ae65b40693e8e8f85869ee
- SSDEEP 24576:rd8Y9wZVeWe6r5Ts1GS5abOaTvRUwTmnKsJT+kljyTd4zvIXRJrMC3ByNC1oGyS0:rdLOZe6rwbjOIgrMuy819d
- TLSH
  T11ED58E91FE5C9A42E3C7D1FCCD934E903126E6658924D98B9212410CFC97FD0AABA7F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  clink_dll_x64.dll
- Size 2.8MB
- SHA256 d49728a2fa3712bbbf15b7143b318a1c76b04d906dbb9c72987aa27fb0ec6094
- MD5 cd634fcc9ba191ae8bf68d0deaf79f40
- SHA1 3d8950d359a2424130af36e948fb5d31aa45c8a8
- SHA512 8edd265732b3ebb88f2ed848e6a53bfa3ee00cd599cacbf6ace43102251543d937f354b8d6bf8d443839d4fe89820484780f470ad69aebd1b1febdaaf0d59342
- SSDEEP 49152:TZwpacFea0sIUKXzd4bvfw7EObQLnQyArMUYdD:TyFgsIN8vo7EBQ/rMf
- TLSH
  T1E6D59E56F2B902ABD06B8034C9571A53E7B1B5994724E7DB13D482792F23BF12A7F380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  clink_dll_x86.dll
- Size 2.2MB
- SHA256 de72d386e46ac09c1109e48de38563d10118fd1034585e9bb22cc4c21412fd46
- MD5 f804072168625c009da26262b2459801
- SHA1 f304ee29c1c3a785d9ffc7a8d999756f97964c27
- SHA512 e1eb0cb72f758c50e2de9dee2924eded3b2652a14b11d168193c5435780bf7cf0ec83dc85eb4e5a70d4fffdc943633f641369fc11002d2799c815715e3e12230
- SSDEEP 49152:q3Sz4Co47Bs46Til1V4TKi8r8EIDjD+gU:Tlo4NsCuTKrr85D+
- TLSH
  T189A59F42F9C646F3C14B017091BBAB621F38C2655724DAE7E39438B958613E17BBF28D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  clink_x64.exe
- Size 16KB
- SHA256 4a4676b77a1ce7b484a38948e77e50acf1e3995555b832e6a034e6f25978f4a2
- MD5 9648f95678f71d45a941f0fd47918f84
- SHA1 db0eb01c6fe728d6d4fbce7919cca5b8554494fa
- SHA512 f25c8c52ec6a004ede5e060e73b1f023edd6e624f880e2ac814c727c4e0005794cb2b589b42e0295873c5323bb45000fb85776dbcbcd75c429774e0014f4f874
- SSDEEP 384:GRt7woN4Nz72mNDpjdWXSofousWu4qVS:ydS7h/jySoQuSBV
- TLSH
  T103726CA8DF2450E6FA579F7058ED9177AD70B7A10C408A4FA04845AA2F437B53F3436D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  clink_x86.exe
- Size 16KB
- SHA256 83940aee87df92fe6501d9c980aa06a983167bb77969551b4951056063923a47
- MD5 93fd1dab92189013cff273c263799e2e
- SHA1 12e1bf8bc7bf54a33a35f64f88986764936d76db
- SHA512 009b1bb9d6df1650a5b41fa3b4997b6caa8501b69a9fee24a3686d8e6b83a6f2b0d8eedfedffc157584740dc217078caeeb8ae8875475f6409e206d37bcc5e42
- SSDEEP 384:fXBKaSXwous4Nz72mNDOIRdWXSofousWu4q5S4dc:/qXS7h4IRySoQuSB5X
- TLSH
  T162725CA59F2454E6FA528F7158EDD177AEB4B3A20C80490FA04441EA6F037A53F743BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  themes/4-bit Enhanced Defaults.clinktheme
- Size 1KB
- SHA256 20b0f61ffe34e3ba8b6422e2a6be8bbe5a58913cb5df12e62b2f0af029216e51
- MD5 ab5d1adddfdee014978f7f2b33f47e9a
- SHA1 bf721dffd4f8bb27ad060e1f39b39d88564bd9c2
- SHA512 54bf42d1422218eef8b7ce909f619e0a5ced18110a3676f0fa4989de7526d52b39bed1ef5ab87956daab803a31ea4a9cc0f49a4b46d87ce26e15449f30310240
- TLSH
  T1FA31DE2CF4C4A8F32AFF0F1FAC28D849506A2D052B32B76971CD81F09355B1650B6B76
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  themes/Antares.clinkprompt
- Size 23KB
- SHA256 87660ee7167a4c2594338f2088b2e296c19099fe402ae08389ed4afb593eaee6
- MD5 5d639e400f1ecc57be2b7217d519ca9d
- SHA1 97b43ae1c5108f3a5032fae2c24e570639969c1c
- SHA512 966a3ef3595b367bdcab8410351d6bb4e40f6c1f19576281249af4cae0f751368b75b345de6c7e6d204c9f1ae57ff40f2bfa245320bf53c7460175b11774d239
- SSDEEP 384:KLZCPFlDD5q1ViEBnSfeKFK9bobC5czBDoTUv8mmtY9Qx/2AZRjQYgcK:KEFlD01AE1XkcmmtY9QpZRjQYgR
- TLSH
  T1ADB2CB0E6E024E6894BEC51344AA65F2DA4A3557632D0194B6BC40793FB0C189BFDFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  themes/Dracula.clinktheme
- Size 1KB
- SHA256 8400084650e409302f84629815b7cb0c13e15b81a55fc856a72346fd32a3527b
- MD5 c7617b1643a9189337d407f773e196e9
- SHA1 5819f29fee357b3d71ccb94395e4ac947f146cf5
- SHA512 d5a9532c7ae7fb7a2e0e1d578e3824dca448a065f16a5a42a6828241db71882ab7be19ab87aca0413e482ccd6e57ec04add76be4a0f27dca97101c0ddfc389ca
- TLSH
  T15B31452CC4DD62EB367F0C9F6669D089C961A13421227B3872FD1A78B740B5282471BD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  themes/Enhanced Defaults.clinktheme
- Size 1KB
- SHA256 2c3105e81a4e887a8f00008628a11102f17d3a684189a71aab381614c938ef4b
- MD5 1f7a47e668aa719dec19e32ec0dd4a09
- SHA1 b7e0c56cb99570d095b6fac585592bd91a6cc540
- SHA512 b57cb82d2bb0a3bf9a11ba7d5f0c2fd2b5f72ce6f564c6e72a8fa477cba9f2f5e3d6304aed02b6d1671a70ff4ee3b04ddc1d3f06e135a104e978d397d70cfcba
- TLSH
  T13E31661CD0CAB4F7A1FF0E3E2D19C8489A6B2A292722372875DD71B4534130941BFB75
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  themes/Headline.clinkprompt
- Size 23KB
- SHA256 351581f87fd4e552644026f5ba36f593f09e29a28a9e0d77e303e307584453bd
- MD5 c6eaeefd5e748bd7e822baca66fd9419
- SHA1 d1cadabf472bb6715bef77a4a01a8f0953c57051
- SHA512 4d10b7ccb7faa946d445ce2c8fe8bc26ff864d270d1e708f99f71869dcf7e5d5e5bedf7f11211924dec6fffbd554d41dc6fae219eac5a245c77ec1704f082ddb
- SSDEEP 384:yI/VxfyFCENWJM52UId+3i7kg9wkJ+H+J73aGApwspO51jvG1E:yaFENEGId+H+J73Qw3G1E
- TLSH
  T15EB25F065D06927028B8C6BDB89B1D61FE3550932219C037B4EC41897FB0AEFA6FD3B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  themes/Plain.clinktheme
- Size 1KB
- SHA256 6e63901094a309b2e3079d98950d0c488aba00b9694da76bfa3b0768b574425d
- MD5 f91651de99673500b7f49f6f516b244b
- SHA1 8d5349fd5215730e693e25537d4fbdd758685d56
- SHA512 4248b41deb294f1b20d9c8e9540bfab4ece1d880b23294aa485759caff651248b5d727d2040dc91447d41820d4c2a5f8ef64e085adb363108e9b9c0853b3cf96
- TLSH
  T16411E42DD4C491D76ABF4E5FB829C588A02AED25BBB2EB1472D40930A044FA34086736
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  themes/Solarized Dark.clinktheme
- Size 2KB
- SHA256 3ca3ad89fbf8507fc60c025d81239e51c9c244bfdd9bde272ebee904b0ad1d81
- MD5 4271dc349cd8046bafc94082b179d0d4
- SHA1 2e27125e8da3a1d6fbb574e6f58e13a6ee08f25c
- SHA512 1ce30cc32a3fcbee80020e519e59a195064f04d580f63d577fc1b92943d4400be296c6b53879c75d8a5094f4175cde55da30398b47c4d1fc4c9cbb85a70911e2
- TLSH
  T15351DE2CDCC995D726BADAAF2964C9A7D13DE20B34626F5C3AED8C743341B40A24F431
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  themes/Solarized Light.clinktheme
- Size 2KB
- SHA256 374bcdcf8de002f843ed7e7f84058fae29a0476cd3e0315c306b229040dc281c
- MD5 0f54e3f5021015fc5d833ad00ee8ecf1
- SHA1 385bc4598a57fa42b4b3c7561f1e209bf462e6eb
- SHA512 f344593f64230fbfea5382a297a3230bb19e4f8a26943e1a36d217e00d3bfa7962a280fb2d73a4dd6623b473e81b0f4da9063a96f62f517efcaec4982028d0bc
- TLSH
  T12651C12CDCC954D726BADAAF2964D8D7C16DE30B39226B5C3ADD88743341741D24E431
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32