703fcc06730fadd79ed1bb000dada722335ddcddf5736a05690f1b29da619736

Sharing

Copy URL Twitter E-mail

General

Target
AtomX-Manager.exe
Size 74.4MB
Sample260524-vrf5daft7z
SHA256 703fcc06730fadd79ed1bb000dada722335ddcddf5736a05690f1b29da619736
MD5 858f08c55798a7ec50f9764150d246f7
SHA1 d130a8cf7132cb350e0911a749874c15dfa02c0f
SHA512 6ccdd83f2a09cb3d36bcd63bcb7bf0fd102b4c2ab98243489a21280d6495e6e408dff93ec340e8339c658b0a4eb7f8cd045328ba8aa6d012c08bcee703393ae9
SSDEEP 1572864:NLejOk/3/9r0lliWXJVwH+jXTkIH3f9aktVOJoz5MLSnQqbB7Oh6:NLE9r7WXPKuXTkIXFakXEa5ikQqbtH
TLSH
T1AA08338E7B93A49DE80DE87F57889B6FCB7BF427D35406B79CCD36A4E0598900E21106
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  AtomX-Manager.exe
- Size 74.4MB
- SHA256 703fcc06730fadd79ed1bb000dada722335ddcddf5736a05690f1b29da619736
- MD5 858f08c55798a7ec50f9764150d246f7
- SHA1 d130a8cf7132cb350e0911a749874c15dfa02c0f
- SHA512 6ccdd83f2a09cb3d36bcd63bcb7bf0fd102b4c2ab98243489a21280d6495e6e408dff93ec340e8339c658b0a4eb7f8cd045328ba8aa6d012c08bcee703393ae9
- SSDEEP 1572864:NLejOk/3/9r0lliWXJVwH+jXTkIH3f9aktVOJoz5MLSnQqbB7Oh6:NLE9r7WXPKuXTkIXFakXEa5ikQqbtH
- TLSH
  T1AA08338E7B93A49DE80DE87F57889B6FCB7BF427D35406B79CCD36A4E0598900E21106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  AtomX-Manager.exe
- Size 168.6MB
- SHA256 37e70eeaa870672004395f62d69b1ca90aec9c545de51f6985cbb159a45e01fa
- MD5 87853ac3a81e4f29ec3345f484233e58
- SHA1 0887908cef321ef308c6a2db7b64fc0ddf7d7098
- SHA512 9d5d91f17823b6c9ee4fc7b25f5a561c9cdda639699cd866aeefa146b345e374a21855322c0fa8ab745a8a63b12b1c859a6420906fc4619541de155909737d85
- SSDEEP 1572864:Ygk56JPNp4z8eaOa4d/wuHxBV6KLmdef6kQ79ZWCQQ4pn4L/Xf2sPDzT9bqahMWJ:jqpxXhqxZ13
- TLSH
  T10C887C13F29641D9F05DD1B18B978236EE72B8850728A6DF2754072A2F77FE02B39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  LICENSES.chromium.html
- Size 8.7MB
- SHA256 000ae5775ffa701d57afe7ac3831b76799e8250a2d0c328d1785cba935aab38d
- MD5 1ca87d8ee3ce9e9682547c4d9c9cb581
- SHA1 d25b5b82c0b225719cc4ee318f776169b7f9af7a
- SHA512 ec07b958b4122f0776a6bded741df43f87ba0503b6a3b9cc9cbe6188756dcde740122314e0578175123aaa61381809b382e7e676815c20c3e671a098f0f39810
- SSDEEP 24576:ZQQa6Ne6P5d2WSmwRFXe1vmfpV6k626D6b62vSuSpZ:ZMfTVQ
- TLSH
  T1D296A52F7F48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
- MD5 2191e768cc2e19009dad20dc999135a3
- SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
- SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
- SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
- TLSH
  T1AA367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  dxcompiler.dll
- Size 20.8MB
- SHA256 a6bd2e1c117ece9a6085e3f11d0284a30f373f2899a3182686fd6bba2c084ba2
- MD5 765fcd519e79cf57844008d3e4ab3e4c
- SHA1 4475b2a9b5d544210c97ec8ab920c2a02b5932a4
- SHA512 efe6b8f95b254ef65b2f68d0078599bc5d54a8d54d509bf7e7543821f965f045c4b585b0afaec8208b085bef26fd170f0b17bba2b37895a8fd01ebb03bbb01a4
- SSDEEP 393216:DFMwP3WgSiT84jbMMV+myjPUaM2NEYGM0ADoWMF:DFb2mucMEYGnAkWMF
- TLSH
  T101273912768658EDF059C87087878923DE2034CB1B3ABDEF44D462262F7BBF51B39625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  dxil.dll
- Size 1.4MB
- SHA256 47ffdbd85438891b7963408ea26151ba26ae1b303bbdab3a55f0f11056085893
- MD5 cb72bef6ce55aa7c9e3a09bd105dca33
- SHA1 d48336e1c8215ccf71a758f2ff7e5913342ea229
- SHA512 c89eebcf43196f8660eee19ca41cc60c2a00d93f4b3bf118fe7a0deccb3f831cac0db04b2f0c5590fa8d388eb1877a3706ba0d58c7a4e38507c6e64cfd6a50a0
- SSDEEP 24576:LCfhbh3v3mtZDiAQeWj26k41ob2nrZ1rqpegQDJqoZtp22GkmgA9u808jQPEdkr1:LCfhbh3v3mtEAQrW41obCraeRhy9ou6r
- TLSH
  T164658D1B629801B5D4BBD178DE578E0BE6B2B41503709BCF12F006A62F2BBF54A3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  ffmpeg.dll
- Size 2.7MB
- SHA256 be75fbaf98b0ccceed2eef0d5479a6dda6cd610176c3bfa297657f4e922a0e60
- MD5 be1953592fb18c71a228dfa52bafd7b1
- SHA1 a2c3c90468e60d2359a32e1729958c8e383c82a0
- SHA512 011cfd3d30b8a452d620c6a2acc612cca5c27829fe562479e3f99ffd919d1b8aec225952308c3aa46013ddafcb7f44b21df127488c4d21fbea7cb3f443e3796c
- SSDEEP 49152:IPDtyvMYqXiOaeQ3NZ+GEMDbG7m8x7n6mfu/oBLpweNsgMzqvUWn7xN:SSOONYbQG7m8bdazlWn7r
- TLSH
  T131D5AE06F6D640D9D01DC074869F9223F631354A8B24A7EF1B909A252FBBFD46E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  libEGL.dll
- Size 467KB
- SHA256 c421e3544b668d6eb85cb65eede555c7ed735969b1e380bb896c8fc28e123956
- MD5 8b427cace6862f1527018128b18c2ee3
- SHA1 5229b1c462d6a378e73f59f5252b6a5998688ac3
- SHA512 6cf9957bbab60e63c11086bfe5800514029717f43500fea2ecd5d6c70659839e65f6d2fd5aee4a22df4bf79869d1c301c3e9d07da7a7c694a21702b0efa19043
- SSDEEP 6144:8uF2Dw0NiKxN6YTfDVTCanVJhPadWQo+EehJp/Ej4:T0iKbbTfDVJ2dWQo+Eenp/EU
- TLSH
  T14EA48D15779444A9E06BC174CA534642EE72B8960F25FBDF03A492392F7BBF85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  libGLESv2.dll
- Size 7.4MB
- SHA256 f5c0b1df4e2308373261b232537a4ee6ccdcc320e0c7fd391a6ed8cca624aa3f
- MD5 ff54963c121044dc44f6e59801a96526
- SHA1 01f571c19903376ac65289898475a240d64a1fdd
- SHA512 3f929702dcc03d05c79e9e460ca46afeebbffb04cbc30df3af9fd9e20484a7987716a6f6886cc19b6fe4649bbfe775a67321f5b922d838290da7d38ed8461b92
- SSDEEP 98304:9oM1bKXyhXV3XI9f1OW7BheoI1Ty6sDCpsXm3T:9b1TlXIH77iTHWCT
- TLSH
  T102768C03F29641D9C05DD2B98B4B9223FA31B8854B34B6DF2A5447253F77BE06B3AB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  vk_swiftshader.dll
- Size 5.0MB
- SHA256 3f695a3d4939e1e0cea964effe399e779863920f922c1dcf4074d007b5e0653b
- MD5 594ec4d441bb608de9656e57e3d0ca3f
- SHA1 34cf1753ce73925d1301da5ef9f691fd294bce76
- SHA512 315b0bb5db49342bf5b3ad1baeac163938e75e8a7c3f085b096ee832156dbe0fcf0c0bb803f18fa762d88041299d72f9bd76bee23fa75fe745ac6e0478861a3b
- SSDEEP 49152:RO6ftECL3Zdon2+a/EgBqB1y91lxfAV7xWV9MzaNZ8m8Lg1d7RXmVEZvMUn0Hjyt:RLftMUSogaEm5hZdIOlEbRaB3YIF
- TLSH
  T10F363813B2858199F05DD5794B5BA632F632F8801B72B6DF52A00F192E37FE06B39B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  vulkan-1.dll
- Size 925KB
- SHA256 988440c99a6e8726ecd5c49a4052a160d430985c34e03e8172278d7204fa4a07
- MD5 5b542cdbadd0f4bfe7cf87c6a10061a0
- SHA1 c1e0e3ce1808d08947b7ab4d382155dfd9814245
- SHA512 e1131fca5ef19c65aa02bef7191db6b86fb5da19223e94299dad4b7bd4ea52e57847ddcbc26aa6bdf8229da8a9de04395e1c013b6b2b78ce845374472cb0019b
- SSDEEP 24576:gy+lCO+5ia/1DW6pb9MLtX6Z5WdDYsH26g3P0zAk7o36:gymVqXpbId6Z5WdDYsH26g3P0zAk7oq
- TLSH
  T1DC156D139A94456AD476D034C8C28607CAB178921726B9CF03685B087F6FFF4777EB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32