Overview

overview

8

Static

static

3

ecc1f9fd3a...08.exe

windows10-2004-x64

8

ecc1f9fd3a...08.exe

windows11-21h2-x64

8

$PLUGINSDIR/Un_A.exe

windows10-2004-x64

4

$PLUGINSDIR/Un_A.exe

windows11-21h2-x64

4

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-21h2-x64

3

$PLUGINSDI...nk.dll

windows10-2004-x64

3

$PLUGINSDI...nk.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    ecc1f9fd3a5c4bb7b1b4f7f691bdface787774f5959abbae3da18dcb27912d08
  • Size 216KB
  • Sample260601-caewwabt4x
  • SHA256 ecc1f9fd3a5c4bb7b1b4f7f691bdface787774f5959abbae3da18dcb27912d08
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecution

Malware Config

Targets

    • Target
      ecc1f9fd3a5c4bb7b1b4f7f691bdface787774f5959abbae3da18dcb27912d08
    • Size 216KB
    • SHA256 ecc1f9fd3a5c4bb7b1b4f7f691bdface787774f5959abbae3da18dcb27912d08
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/Un_A.exe
    • Size 155KB
    • SHA256 72ffe8859eaa63637f5a62b7c454241db35938f8326f6ccf20352e00f8df2fe5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/LangDLL.dll
    • Size 16KB
    • SHA256 4fca692a36f0c99e26b5bc7ef9db5269d2c1e21288184953898130fea9b1c4fc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/ShellLink.dll
    • Size 15KB
    • SHA256 eae7829a3df5d8d63e16787f7c3d5ae4b82b3b79c2cd7aad9c2532374b6ea522
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 17KB
    • SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 7KB
    • SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks