cd5fc59d5dce8de56f788c1d680edb0649944096dc69821d18bd2aaeb500bfc5

Sharing

Copy URL Twitter E-mail

General

Target
SetupVega_x64.exe
Size 11.0MB
Sample260508-pkg57scv3p
SHA256 cd5fc59d5dce8de56f788c1d680edb0649944096dc69821d18bd2aaeb500bfc5
MD5 36b6d55196ebb7de380dfefe42403a36
SHA1 5858d13915417795ee6d463250ba6e27032de57c
SHA512 fbae7a14c70bdedfa81cf7706b0d77efca80c9bd67d88a5551dc69a7163b7aff49ed5e666bad5c3ed65db7d8169c2e4f25b5bb4ee8393d4d4d9df36a8eab57a5
SSDEEP 196608:+O+W9+R25uOfi4Y+vlZ+aFZnxNajWV+dBS6wcF7UevaHlWsHV/8ve47YpgIPxjG5:+O+TeuO4+NZ+aXn3YS6wcNH6pyvVNb2G
TLSH
T1E7C633D69114CE7BCFA8E63E0F460230BFB3461135EF5B14935994D3AC6365A39CA8B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  SetupVega_x64.exe
- Size 11.0MB
- SHA256 cd5fc59d5dce8de56f788c1d680edb0649944096dc69821d18bd2aaeb500bfc5
- MD5 36b6d55196ebb7de380dfefe42403a36
- SHA1 5858d13915417795ee6d463250ba6e27032de57c
- SHA512 fbae7a14c70bdedfa81cf7706b0d77efca80c9bd67d88a5551dc69a7163b7aff49ed5e666bad5c3ed65db7d8169c2e4f25b5bb4ee8393d4d4d9df36a8eab57a5
- SSDEEP 196608:+O+W9+R25uOfi4Y+vlZ+aFZnxNajWV+dBS6wcF7UevaHlWsHV/8ve47YpgIPxjG5:+O+TeuO4+NZ+aXn3YS6wcNH6pyvVNb2G
- TLSH
  T1E7C633D69114CE7BCFA8E63E0F460230BFB3461135EF5B14935994D3AC6365A39CA8B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Vega.exe
- Size 19.5MB
- SHA256 63b1b7b892ae62461a8049a17852c61ca64cc032d0c313c07cf99aaf6862c099
- MD5 64fcf8887a71a5f708dece27ba4c89f9
- SHA1 0d379ed41da724542d49dd2a6e0dff162e021581
- SHA512 cce2d87c8cda3b3fdeed49e4f9cb1493be9a4ff78f47bf6077718ae0118ef5d8c8fd4d08e72aee71434f663116c4981a0bb123ec5f4a431f3a0e993488b80fd5
- SSDEEP 196608:iYM3AbOzTe7YIyMD0FqFn4MykdfwDbZlCu3t+gMDxghu9ixA6CQezb0ZntMa/oqX:iYM3AbgTMYIyMQFfMhYDbZlaIH
- TLSH
  T1BC276C07F6A660DDC44AC175830B9231FA757884C631BDEF16A49B323E65BA05F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  VegaTeam.exe
- Size 7.1MB
- SHA256 f0a6259514988fb4d088d0604b606262ac74e696756a21633fa655a244406e43
- MD5 ac19ca4d83d096f497957772323fa0dc
- SHA1 a607ca706a90ba21791094838755127cf34de95b
- SHA512 cd42e7968c91f53c78915d607b3c2e9d23b312263e25ca89774a063af5570e6c3977674143701cecc18f9f902139d77ec15a2926750c163c36e36d085388425e
- SSDEEP 196608:ExiZ4zQ/UG0ap+ZGU//DDArbV9fWP1y0dA00F0I72Z/ISrXf:ExiZ4zWGaR2
- TLSH
  T114766B07B25290ECC449D1B582066374F665BC869731BEEF1574C7322E3A7E0AF3EA25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  badgetemplate/WordMaster/Master1.docx
- Size 23KB
- SHA256 babe907ed88983013e4909c3720eab25ba5c5999043b1257798481e102047c02
- MD5 75ff20222ceaf1864abb13d46599b1a3
- SHA1 211ab9761a4d0e864b23e27271303284826dfd1e
- SHA512 b830a5c44cc98472988d6dcdf8c40f466fbd716f765792878da7ca3e0314155896fbb4eafcdb12aa6bb69a8cf749af6805bb58bc761c7471d2fc90c501c0d49c
- SSDEEP 384:3/3XbN9VoVNSLQQzDvUhG6Le8I1MlruCb9c/1hp1YYjjn/:3vhKNeQSUs6y8I1M9uCpc/1CYjL/
- TLSH
  T1D2B2C07BD10A3594C0F8D939F07123AADB8B4CD3774093FC54557BD982A098B0BBE9A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Drops desktop.ini file(s)
behavioral11 behavioral12
- Target
  badgetemplate/WordMaster/Master2.docx
- Size 22KB
- SHA256 39437e1f73ebda05019e9f98e06be19d1564169c9ada296dd5a42227bd39633c
- MD5 0cd45e57f44b3537f44ecca068f6afe0
- SHA1 9a7bd36405e2ec2b9205f0f1ea82c26dbb146b8f
- SHA512 7d7a7f7215af2f50c8cefde5c91cf49fe001e6a8ccf05aac91e105cf46c33dd3622ae5ac36df48167ea986919e869f7c5f0ebc7639c3acc92e5bd8c11fcfe235
- SSDEEP 384:3/3XKKZwO7EbSLQQzDvUhG6Le8zSKgCH/m5J6cc/1hp1YYjjs/:3vKKZbWeQSUs6y8z9gCH/m5zc/1CYjg/
- TLSH
  T174B2E0ABE71E3514D095C53DA03536A6FA420CD37A15A3FC3886375C93A0D550FBE56C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Drops desktop.ini file(s)
behavioral13 behavioral14
- Target
  convert.exe
- Size 464KB
- SHA256 a580785f54a0c0a447155cdfc7389fc20793aec3c95905618cabe65eaa5fff2d
- MD5 bce79d9c948909787c32eb2590fcc0a3
- SHA1 37add0d738d7106dbd4792d8f3170d86597fb457
- SHA512 2513d20c45738f474bfc1e613675429782814e4ff79f1e23d45f50ace261b14d9378c3f37e78708d7adf275c677d5c9197b2fc9f0bbb2d94d58427b89b573594
- SSDEEP 12288:e+M3jkKOtDAd7f4FOEx1Mxo8aO3ITMoF7LF:e++jkKOtMWFO01JO4T5dLF
- TLSH
  T1CBA4BF11AEF3C1B1D59501754CBBCB695D7F946023320FD37BE82E9E9D663E00A3628A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  libmysql.dll
- Size 4.7MB
- SHA256 51b8ea3e4a09a43b5bb59bd4a0d15b1b75e6ea694ffade644631a19aa20a587f
- MD5 327f4d56c31a3b16415093aded5a848e
- SHA1 c48481ead4a5a348a13f3bd6f497c103ba10d2b3
- SHA512 14d666bd8a532fdb7737aafd9a0080a953906f6e7b988da9ebf7bd5b8e7ae6e2fa8fe4cb927be176c48f1efa00fd7762df43260c5bde971920e6b773bd794b0b
- SSDEEP 49152:SPe0L0m7GFWmy44TpBVtMf07Iu63FcRCgAe+:Ee0LYW5R6syg4
- TLSH
  T1F136AF66FED15E22D17F8679806B1E4BC3A6E0001B1643FF272946DADD933E305B9239
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  pgnviewer/vega.html
- Size 4KB
- SHA256 009e29a73d921a7fb36737b4819d32ab82ce7a51f52c68b62c0897fd6aaeded5
- MD5 6c52d3a5fd56c2b6e175cdd2a0c1c9ba
- SHA1 6301a99c0a540da3b1459f756720f7af3a07d53b
- SHA512 ceb427472eec552564e0722905231bf06b74953d42db9cd96f35abfdd3c987c2df47b5e03b83e8be4a652678b2ae45db420e98071a6828b23030a25d3864e1c3
- SSDEEP 96:pKymbVtHUvZAZFUSrV2IlbwJLZFUoutyoAo5c5yTrhWuvT4qvPUT2:paVBYumE8Xktrc5h47PUa
- TLSH
  T1BC91B60E8C275C2191728178D5D5F25CE7624A8F8312AD62B49C903B7F7870F99ABDEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral19 behavioral20
- Target
  plugin/arpo.exe
- Size 510KB
- SHA256 b4162e6b2e0b0d072153c32dc3eab13cfeba75a4a81626882a7bdd96e259dff8
- MD5 0265393808eaf219ae67b4407d821bbb
- SHA1 6e348b4bc35848d5e657a37ce0ee659578da4431
- SHA512 0ec63f337db1d8f148fc081388cd59667e47f6e5212c0ee62dc9a8e514343e34ba675b4fc0776d1cf1093d85b6e135964c339e04c33551081bca058c189fcff8
- SSDEEP 12288:s7slc1BX7WxgDmZpr78P5ufR54pqrTcoiur0ULLF:s7slc1BX7je8RufR54pSTpLBLF
- TLSH
  T142B4BF01FAF3C1B1C59610748CBBC7695979E8A413324ED73BD82F9E8E662F05E36186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  plugin/javafo.jar
- Size 376KB
- SHA256 dff4ec2d3541bba3144538f8f95fdfc37246ece8a4311775b3cfee3dd5cd4848
- MD5 a09fbe9e75648b88e537ced84c08d0fd
- SHA1 38fa1a348c8c1538f03d0a5d139dc4a95c216fed
- SHA512 cde6842a0c4c1d7f2d803f340192586a23bc2603a62046da0498dd90a4881955637e15471197c16dd39881ef0579e7ee4516c7e93af63ee00edcecf7616bca79
- SSDEEP 6144:9ZyWii1M0G21TtP3f9vXglSSsAp7y5OCbXTGe8dKQyDzX1jhR06EN4LxGSNXAh3p:XtT11GYNESSsAVHWXqxKf9jhRdEsGS+L
- TLSH
  T1DF8423E4F4C9C9F88EF87379A3D1136D692E195848E2E90AF2DD8E134358D8C1CD5A78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  plugin/javafo1.jar
- Size 246KB
- SHA256 9f3b9cc8888604eca6f86b311f4e0a9285647266bb359b8cddf0453b876f2fcf
- MD5 668f45fe08284aa889cb08fdaa0e06dc
- SHA1 cdea535f4a9095bbc24fc37adb79505b5c5687bf
- SHA512 343b6618e926b1119e03700447997f3c6707942204c0d8cf37caee13614d89d8be8318400b1c8fc73c76e0bf28bcef47410f60abf83116947afa1febd614bcaa
- SSDEEP 6144:tZyWlk8dygZrO2MYrFDicn976YmsEbD6AKp5i:HtuaygU2X5maIYmsEX6AKbi
- TLSH
  T12F342364863904F0F87420F3E6580B11FEC9C6773D59977B2A45B0A53BACCC8BD5AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

Drops desktop.ini file(s)

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26