Overview

overview

7

Static

static

7

fd2211938a...09.exe

windows10-2004-x64

7

fd2211938a...09.exe

windows11-21h2-x64

7

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-21h2-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...33.rtf

windows10-2004-x64

1

$PLUGINSDI...33.rtf

windows11-21h2-x64

1

$PLUGINSDI...52.rtf

windows10-2004-x64

1

$PLUGINSDI...52.rtf

windows11-21h2-x64

1

$PLUGINSDI...in.dll

windows10-2004-x64

5

$PLUGINSDI...in.dll

windows11-21h2-x64

5

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows11-21h2-x64

3

$PLUGINSDI...zU.dll

windows10-2004-x64

3

$PLUGINSDI...zU.dll

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    fd2211938a705d23acce51d28fffd2c045e86e314a591956447bc151da3fc609
  • Size 2.0MB
  • Sample260427-h1mmasds91
  • SHA256 fd2211938a705d23acce51d28fffd2c045e86e314a591956447bc151da3fc609
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryupx

Malware Config

Targets

    • Target
      fd2211938a705d23acce51d28fffd2c045e86e314a591956447bc151da3fc609
    • Size 2.0MB
    • SHA256 fd2211938a705d23acce51d28fffd2c045e86e314a591956447bc151da3fc609
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/BgWorker.dll
    • Size 2KB
    • SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/StdUtils.dll
    • Size 100KB
    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/licence_1033.rtf
    • Size 8KB
    • SHA256 daccd786518d207889cc439d899bafc240d67200738271f5757eb3a4256b771e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/licence_2052.rtf
    • Size 12KB
    • SHA256 3769ae61e5e2956dada78a14fc90bee2a97eb0d63f05937a5a24ce7e03c24c6b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      $PLUGINSDIR/nsNiuniuSkin.dll
    • Size 288KB
    • SHA256 21a9a74fd631030981cdca42ab580f5aa030068ab80c183b73e99bea2d4f7708
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14
    • Target
      $PLUGINSDIR/nsProcess.dll
    • Size 4KB
    • SHA256 51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16
    • Target
      $PLUGINSDIR/nsis7zU.dll
    • Size 424KB
    • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral17behavioral18

MITRE ATT&CK Enterprise v16

Tasks