763037af5d077824a764ce00a12bd802bca6ba84af54e1798e61e15973a9d31e

Sharing

Copy URL Twitter E-mail

General

Target
ver2022s.zip
Size 256KB
Sample260422-phlqlsbs3w
SHA256 763037af5d077824a764ce00a12bd802bca6ba84af54e1798e61e15973a9d31e
MD5 b4ba8859ada2b8df41f560c757cc98a3
SHA1 ebb6bf8c854578618662e8200fcbe4163fef6da7
SHA512 703e6654ceeb8de4f39826f757ab80d2c0f1a43386f1c7f732668689e833c6b6f12718e234208372757268f2dd7f0f527f8bc4bc9bb1cdfe564c47a7bcfd571c
SSDEEP 6144:IoksWaXlnj85iG8/T9iIvaPkwZ4vkGyNSBJCWevR:IxsWa1A5p8/T8IohqvkfAkZ
TLSH
T17B4423D7891EFBF6FE2EAA7D863B50319315E7831C88C70339963668B104FD9606295C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  ver2022s/Ver2022S_amd64.msi
- Size 128KB
- SHA256 b033c86f380c175d9f62d0d1535b42646d9054cfecd6b3765cf761eb4faaedd9
- MD5 2c637b4638c5eb4fe230aa403e454ae7
- SHA1 ae82790ed78aa508bc2fa3ab32c71af2938cf3f5
- SHA512 99143c45a7e18e370942f9a33137f4dd591ea041418fd9450e9a7f9428ce0612cd589645594ed7ef97a656a8b4e7723ab9f1ebc99d4eb028463a6f686d7759f6
- SSDEEP 1536:Ix8fEfvIjLrvvg+VXJ3lIMW10i2AinCNu0VpO:WjXInrvvgCPIMViU
- TLSH
  T15DD36D17B7448333D5C20232852FD7E15F3A9CA84BB24513A19EB26D2CB2B94F6B76D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery persistence privilege_escalation ransomware spyware
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  ver2022s/Ver2022S_i386.msi
- Size 128KB
- SHA256 036bb54a10cd237d3734f495f9dd901857a2612b5cc2746cddb4ae17028de1c4
- MD5 83567604ee2fcc125a0d052eb1a1173f
- SHA1 99f133f33a7ea7a2e15842ee4e6cb61c3f112a33
- SHA512 892742f973649862843ba33b9887113139989f87f3b8fd5641ef3c92d9a8236f3cd74ba3052581c515d74446c1b50efde6d0b41b77827bd5f9b1c6f785a75256
- SSDEEP 1536:nx8fEfvIjLQvkwoN+VXJ3lIMW10i2AinCNu0Vqqb:xjXInQv/oNCPIMViV
- TLSH
  T196D36C0777448333D5C20232852FE7E15F3A9CA84BB24553A19EB26D2CB1BD8E6B76D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence privilege_escalation
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  ver2022s/Ver2022S_ia64.msi
- Size 128KB
- SHA256 0465a93456c6e13333344eec1bae15c6b86992acf7874768464ca12e47e2283b
- MD5 3d1e0a9585f45413e5536d6bcd31eefa
- SHA1 33a8bcbcaadc0f40e2ef7e63d05f1fa73752114d
- SHA512 64d027cae49166e356f2a586876dc2e0dadbdc50ee2f74a161c5895cac54d2f3128aa75c4147129d49d2e6aa00f71dfa9656eb86280df618c05fdf8c0ce0ddb0
- SSDEEP 1536:qx8fEfvIjL0vog+VXJ3lIMW10i2AinCNu0Vd:kjXIn0vogCPIMViB
- TLSH
  T107D35C1777048333D5C20232452FD7E29F3A9CA84B724613A19EB26D2CB2BD4E6B76D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence privilege_escalation
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  ver2022s/amd64/Ver2022S.dll
- Size 7KB
- SHA256 2405f40c8f5edcb1d8f6be9262d21e929911846407ee01974234fbb2d96e052e
- MD5 3265a3802d8940e00b5a73c49493992e
- SHA1 7cac2dbd30466aac010ea88f9fa3a9cb1eade89c
- SHA512 358b00e4078838720123cb65a630e46c91d8cc79a9e8fd6760afb292ef1af09e9ae34c5d4e9cef18641fce3ca3d134232c55f2682f6f724cf29b4f914c9eab00
- SSDEEP 96:sSO6E1JSZk341YUZKxHfu4FcEm91MWUYEC6Kcl0GHBCo/vP8vv:1O6kkA35W4FcT1FUCoHs
- TLSH
  T17FF19305EEF8008EF2FBCA3099E75D16681AFD218437C25E1584161F4D797406B5AB3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  ver2022s/i386/Ver2022S.dll
- Size 6KB
- SHA256 7b5689eac5fbb525d19503b2f89a65694c04cf31342e8794fd98e95b288bccac
- MD5 c71a4f04c4ccdfaee13f8e98724e7c19
- SHA1 a417dc4bfe7aca2c686f36ed1b098e6a77c375c5
- SHA512 aa25d9d4d6031183b109f209d507313eac89ff9b61e1d60704e04ba6187a5bbec2ccfe4e39cb09fe2767d1ee3b375230ab52097918a90f939c7e6e6b3aea5fa8
- SSDEEP 96:iacea/KxHfu4FcEmw9dqYUfl6RVEmrBCocn:9Fay5W4FcuzCoc
- TLSH
  T1ECD19381D7F9005DF2FFCA3959F67116A823FD2195F3C15E0A901A0B9869640AB1EF3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  ver2022s/ia64/Ver2022S.dll
- Size 7KB
- SHA256 b1b4cb8ebb74b27188546cb76f68ce0abe944fbfacf682ea725417040b0991d9
- MD5 41278eadc32a0d33466102c091e93c03
- SHA1 3f36da7a291118535c673982cd09be20ba73ab55
- SHA512 9ad6b11be9f9f40359aafd86cf2db3c0257bba33894b0777862e2ff80335b2c564d4ef5db755eaa8c14db85cf3fd2ed1e926ebf5ccbc560749720a731f960708
- SSDEEP 96:sa6fKxHfu4FcEmm1F+Iyu+EYUYH6KLO0MQfBCoTs83:sa6S5W4FcKguUzfvCoT/3
- TLSH
  T1F3F16311D7F80049F2B3CA3449B35E1B6E6AFDA1C433E29E0998164F9C6A7407B5DB39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  ver2022s/setup.exe
- Size 139KB
- SHA256 b47eb424a2cd775dc657eb0d3f3818082eabdcaf56d496cacabc34037365e5f0
- MD5 616f969a20e980fab8d806999d60fbcd
- SHA1 cebc76924993cfcc340bb490ef69c8e6cc48f363
- SHA512 cf17ea9c1c68371ff2f5a81729c07130ec1322f91967bae3e5cb7a888d9eaa85005ab00d5e1e2eb6231ee51576b84968f0d9a9866d66cbf101f91dc6a6d6d9b5
- SSDEEP 3072:IzWP5D4zAed3ojyEKcJ3oUjoXper4GPT1Z/GdmkTdPiQg:5D4zAetIKdWoXeLrOdl5Pi
- TLSH
  T16FD3AE01B3D4D139F4F72A72E57951B24B3A7C366F31D38FA304562E2AB5A81DA31362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery ransomware spyware
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral13 behavioral14
- Target
  ver2022s/wow64/Ver2022S.dll
- Size 7KB
- SHA256 4e4cb5980a2df611af67fb6444d03cbba6edb4ca33503b20dd4541a62e219f7e
- MD5 d18c72ebd9725d0803856fdd99676383
- SHA1 7380c006f9752c906df1e359f4ab2768958396bf
- SHA512 f2997a3178a1d53182c59ea8012e891f6ffc10fb64b3c34fc7c1125651de2f5f136c0369c63bcb285642218a20e902f82aa9d63c7512856d9a7bc2d80cb95826
- SSDEEP 96:71avKxHfu4FcEmZ8GldmmKBqYUk6RVEm6BCo7:71ai5W4FceSEVdtCo
- TLSH
  T164F19511DBF4107EF2FFE63C69F36116A853BC2144F6D15D05800A8B5979640ABAEF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Installer Packages

T1546.016

Privilege Escalation

Event Triggered Execution

T1546

Installer Packages

T1546.016

Defense Evasion

Modify Registry

T1112

System Binary Proxy Execution

T1218

Msiexec

T1218.007

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Enumerates connected drives

Drops file in System32 directory

Enumerates connected drives

Enumerates connected drives

Loads dropped DLL

Enumerates connected drives

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16