bba384672ec5e4629c887105dc82d9518e0cb2c795a7fd3a6f77f67af0e022ca

Sharing

Copy URL Twitter E-mail

General

Target
WinRAR (2).7z
Size 3.1MB
Sample260603-p2bpragv3m
SHA256 bba384672ec5e4629c887105dc82d9518e0cb2c795a7fd3a6f77f67af0e022ca
MD5 3e38e95318b5955ed9a0195f8eae32f1
SHA1 9777acb905f0a57d3ae01904a616b36da9fe7645
SHA512 e1e7ad081e3ca225d71922683f311b7ca6c3bf11cc70f83a6809ad7ec4f4bc213022eaecb8ab2087524fb04796578755875baeb1b9aa3657a5b18a8bc8119dd7
SSDEEP 49152:WWD3Yrs5OcZ+QPLEocUNWYNwaoYiw/D5+0L27G8XJqfKjvAbL64M/oLIBvw:3ssZZjzEocCWYNVoY/DNLt8ZqAiZL
TLSH
T1DDE533459689BE0AEF4DA12939B5EA5C3E8F27CE05C3E0E4D6C30B55240FD9BE1D3468
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  WinRAR/7zxa.dll
- Size 222KB
- SHA256 e6b08993228c832c7a5b49bf1804e506d99d75b2b20a2e88ffbd7f8bacca3012
- MD5 4cb4f5216b4ff84e436e81f0244dd482
- SHA1 bdf38a1eb72946b1fa5470e241485cc009d755fe
- SHA512 3905b5a10efccab26ed0619a423b1cc7b540c290660386516ecb4ee7b3a32fbf159217dea0c1d800279f3bc34fd6ee6e8dc6dffae7c379a6bd41d8cd64ef59b5
- SSDEEP 3072:vgl7NhPmu1cwGRhNM2lFxRv7lUHSaRPQjNCRP5ItSBvAGTSkjaRvhPq1S6BPA2BS:vgXhu4cFRM2lsI5x2HX0IN2Z3zF
- TLSH
  T102243BA6F2A485B0E4ABD079CAD65B82EB7170444770D7CB1250873E2F27AE95E3D334
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  WinRAR/Default.SFX
- Size 469KB
- SHA256 fcc2065a9e1884666ef66f50e3256c05bf1800ecd93e029caa73c990251b8b68
- MD5 a06153ae2b30713717a201e817920fe5
- SHA1 aece8568f9069d0c777fb90bfba410abe2f60e62
- SHA512 cd1c3d1993541f6976729f3e394d35f28f983bdfb1ceacd45c8433c460302650246cc46d8ad7ecd767a3c5205f60cea417ea1a374d82f9ebca0259eb7bb77310
- SSDEEP 6144:0GRIMUcZeQiQHkOcxeieDw0hNGA3hjmq2iwXR2D5Yxjp6Rq/sHhTozrAy:LRZeGAfqNGA3Uq29XIDixjpyq0BErp
- TLSH
  T1AFA47D19E7E405FDE0B7E578CE824912E776BC491771E6CF03A4A9A61F232908E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  WinRAR/Default32.SFX
- Size 376KB
- SHA256 b1a0451f976be010f08b7e2d68a4172c58c6fbf2ee2aac975ff51d12a943a52b
- MD5 85216501b7cfd512b02be8de8fb47b01
- SHA1 6ad43f2e64559517b2826adad864e24d4827564c
- SHA512 55a9d874ecf5c64d0b896aab54682c7616ea205f1c31374bc3ead27e5abef9bf9f34c286b8df94f154c7ebd2e3a7ba8aabe2e9ef29676838733b85f5e63074d2
- SSDEEP 6144:4LfYcOrg1/UqXXWGIbWPbVF5myBce9ifm3FAyb3B2/u63AyHMC:4LfYcO01xXVFDBOybkb3pH7
- TLSH
  T18984BE12BBC5D072E56A1830AE399715893CBC614F61DAD7A3D03EAE6D309C1C738B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  WinRAR/Rar.exe
- Size 816KB
- SHA256 2ce9d9f8cd10e8ceb3a943e1464938ecab682313f8e4525df17068b3eae5b05b
- MD5 5b4a409a41c0032ba0070d35919655c3
- SHA1 44a9de2d53bf00a7e9087285815fd0d0184f3c63
- SHA512 b16731a4d0f5a81803b76b9e34d40ce2f3002d2a39693e98ad2e06cffe7e28bdd5b0c91ebfd1e1f97f69ca29db7e9ad84b7b091fd79bea72067fa79e5ab18fea
- SSDEEP 12288:B8XG6W55dhVSj06rSkYT2gf28DRTh5lqiSYFI7cfRTPFQN+xw6b4:B8264bbIGk62gXXWAfRKp6b4
- TLSH
  T1F4058E1A9FE801FCE0F7D674CE915917EBB3780A57B1968F0390499A5F272608E39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  WinRAR/RarExt.dll
- Size 659KB
- SHA256 db7b1ea456bd12028e03f9d88af543ca27ebe68101afc81b846e127590b70006
- MD5 76f8c35620b734c2a715c3ba41d7ec00
- SHA1 7f8d1a4c8a69da6c3afcf141889552b6816c1b66
- SHA512 286981f9f0e8640e495082fb18a33a23da3b7fc15bb761655e61e4b9877e4675f5b11bc96826d7315bf55da70b6d8d5eb190e027ad866ff9c7a7c9acf0be78b4
- SSDEEP 12288:QegJaV781ACnH5AC+6Fni6GR1AR3jUXloBQKuk9ltym:QegJ87HCH5ACFi6GcjUXloBQKdltym
- TLSH
  T1F9E48D05A6A853BAD47BD07CC683461FFAB2785583B1C7CB03A51AAA1F137E0573E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  WinRAR/RarExt32.dll
- Size 554KB
- SHA256 a174b6876f5e88a5092fe66bf421b9f623b6c80adffaf719ed8df3cd322211f3
- MD5 b048e15f27fd5e5630ce87a82c2628ee
- SHA1 900f8f6038d2cc16b54b33f5707874e4bd93097f
- SHA512 9a36e75a57e415d98ec0a0ff51efc198e266b9aa1d4551191effbc8776e7bf880b03f94f61c5ec945987d6eaee0ea2cdd12837748b099012fd1829097338784a
- SSDEEP 12288:vpf9TEQSFrkusFfpEH/mEYuCBQKuk9lty/Tpu:vpfeQSFwus6m7BQKdlty0
- TLSH
  T106C4BF22B8818072E56F1630992DEB39C2ACED310B7895C767D4197B69F09C2DF37A53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  WinRAR/RarExtInstaller.exe
- Size 218KB
- SHA256 eefc81979f082c8dbab05ff3a68930501f2226a7e2688903b2806e2eb6837a5a
- MD5 4a59876cc56186ebb4e7ebc080b57264
- SHA1 c510f9ad275cdb1e63ba1572a5ff517ea1409f28
- SHA512 519a7ffc643daf9c25a940476a3188276b127ab0dff3145929c0b95037e574e02d66feabc292514aa32b603044bc1992ce531151d012bb0ee961868281a650f8
- SSDEEP 3072:PRWaJPSzTpyd+apAd8EblNw3i9nUaszEBJFsNLbrz2x1mtdEBj:DJKzSzpAddvaiPBJSLPY1Idej
- TLSH
  T19D247B49F2B550E6EABBD435C9624601FF3278454760EBCB27500BB99E33BE19E3A701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  WinRAR/RarExtPackage.msix
- Size 23KB
- SHA256 74d160f732ae20d0e10088aa7b609d903801fd27ff16270a1c1ec0e7724fb33a
- MD5 85b4bbcd102e0d0c655b72096ab48405
- SHA1 59fa358897d58f894f0dbc3b4c87b5b72a41ece5
- SHA512 4ea213391cdecdbe21e1a7f229dce2a7cc84ddb27cfca6221ce76ecb7efbe14a125c0a72cb0e33f8a03bc506f6374cd94ddb846955773332a41add7e384ddf7c
- SSDEEP 384:deR015ziBz4oqvhFv+qkDfm0fxPZA7SxEDHV6sZd3Ns9TLrSw7EGkDw+zcLVHok5:SYzMzHshFvbkDeoZ76MsZd3+zJkk+zcT
- TLSH
  T1ACB2C0F2F74A2963DB1F45718BA38A759908ED9015034E45B7D8253082E8F3A0357BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  WinRAR/UnRAR.exe
- Size 547KB
- SHA256 e785a0c0dcf79385f0483c1eb2242e3937d0447f6b21dd158906e92757b46542
- MD5 8d4630a7958517737dba1ab88045373b
- SHA1 5816798803373fd3dd7bd1823ab8c92a824c441c
- SHA512 99d44318285e53c720400041c2367cf5bc6d421d2cb6f8c0c5eb7478c4997f4e74aba85973fa4b00cb893da1821ecdd2c9c1b7fa04e010454ed15e214f25755b
- SSDEEP 6144:ViSm+owa1lGp1pN/hm7ifjDG0opa9wJEZoaiokUI+2GIqMvpCE4mODiUU9sbHAhi:QXPGp1j/k0SrICIio/KNzAiREOzb4P
- TLSH
  T1F8C47C5AA7E403BCE0B7D674C9914902FB77BC4907B1AA8F03E444B75F276518E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  WinRAR/Uninstall.exe
- Size 402KB
- SHA256 926df1506082e88f388f394f4c9d190a23b21e1519acf03d0e474528bb920c8b
- MD5 a49476fbc8efa147bec8df78b46e1d52
- SHA1 ba08ed7bae509ae98205870493f5406edf2592c2
- SHA512 749ef159c1ec81bc819fdbbf2f2444a0d1610d1690f57eff0f2d459b2228542e74496da0fe452f7743b36c8808f7527cfc5f6beb0358b185e86add8b5a398c2d
- SSDEEP 6144:DlnAoo4pIa63bknS2ecOTJDPv0qVSfqeb0eC2TIII+Sn5HBK7jcRE:Rng3QnS2EJz8qUHDC2TIIvS5ejca
- TLSH
  T133948C1DE3A555FAE5B7D53CC8A24606E6723C558BB1C3CF03A1099A2F237D09E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10
behavioral19 behavioral20
- Target
  WinRAR/WinCon.SFX
- Size 411KB
- SHA256 346c49186436e7688a7fc417544999fe55bf165e8b49f3a5b20ae1f7f0d4c876
- MD5 f00f7b2a302244aa97ec2fd8429e6739
- SHA1 0a2720eb9323e257439cf28178cffaa4f261bf64
- SHA512 957a3e17be1eb15650ef6cc3cc12f6da575616e4ea230c1d9a5c1b61900ccf090c00136ce82a9e1c07727b28db975daa7cb1a48d47bfaff7d91be001d3669166
- SSDEEP 6144:G4jANyz3H6U8A1IN7zYrMj/SRv1ALGwArsyuUrt9F7zlhhDb4:FzVz1oMMDSsZArsyL7zlh5b4
- TLSH
  T111945B19DBE904F8F1B3A674CDB24902EB737C4A57B0968F139845A61F376908D3DB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  WinRAR/WinCon32.SFX
- Size 331KB
- SHA256 cb6f45f7eced2912eb4ea024d8fca8166e7fa20b1d688325cd2d9d499fd8ddef
- MD5 ecdb93c3139ab941ab8089eddb51032e
- SHA1 c46c71a95ac69a821ed4705d64b6082fe1baf1c9
- SHA512 4b2f059f1d9bd5520454672e4c01d6aa273e08eb3dc1fb50ab416ff87239fcd7088300f288c7fffc3fb95c58bae2028f11a8598b01433de5254c215528ee4e37
- SSDEEP 6144:xMeXtrYxBY8q0UN19zT+WyoqaVaa6FeY5ub4s:xMgVYMeK19IoqFebb4
- TLSH
  T1A5746B116BD68032E6B72E305EB556158E3FB8A15F71D5CF13C8489A9E72AC0DB34B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  WinRAR/WinRAR.chm
- Size 321KB
- SHA256 3f63a1c62f171902906e0b0bd720259aafe4786ddc5078953da73ac77f9ffea4
- MD5 b27aa2dfef0eb2c4466e2f8a624ee5cc
- SHA1 1d4ccdc08be93625a51fea34be431a381d4dc8b5
- SHA512 cf601058f1527f7e2610ce6ab46b5a4edb1f4e9a2fc3affe92856188a80c5de7b38897f34b8dd80bfbd075376787624113043ccccc2a1cef990c3072169cb5d7
- SSDEEP 6144:pWW9QxMqukTxMXyI/CKoFBWIIvEIoryJ1Mi44G9XMIyikvRSZPz:F9sMqukzI/pokGr81gTcvRS5z
- TLSH
  T1FA64120A2D0C05B2E5C8BDB9CAEC53CC1F284A854952BE1F6D6F6B3945C0FECB0A9751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  WinRAR/WinRAR.exe
- Size 3.3MB
- SHA256 b3a8469d2b132391d206d0799b34c563c0bdf6e7166a378e249f45848f5f1cb8
- MD5 1332606c405863d514138396940d03b8
- SHA1 e9a22ce1b80a1e424a024ea1acda0acf54b8312b
- SHA512 20ce0964798586cc714c0d971e73330d0d7e806570ff720397701be5b4089d5b3010ef39e6534b15f7574f7d72860205c855678606e7ea3c66ee35169bb22ba7
- SSDEEP 49152:GcwbFR+/2n/JAERZIFKBb093AXgK2x3U3Cc6fPZ8czUeT+uXEkjNEEBHLu:GDxm/AFa+uUkjDBHLu
- TLSH
  T18FF5AE1AA3E406BCE0F7C679CED5C553E776780D07B0A69F069098A64F732609E39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral27 behavioral28
- Target
  WinRAR/Zip.SFX
- Size 483KB
- SHA256 98709e7d0229fdefd513f1cc14b00a04bf7ef9c3577c84d97785c40ae66c5655
- MD5 38067c145a1147f12c0afeb4c07e8df5
- SHA1 4a11e9f1e3ff3c45ad0e6ea687057b3ce9f3d817
- SHA512 f6846a17cad559af40d2bf83e60693d0ec89813879deb1535e95b842fc9fee4997d71441edfa6b628a913502b29db72b21d158ce8450a256c146f66e8e5e4bf1
- SSDEEP 6144:ETZ9HLKOtNQH7R38d1KeEbLuyWUJlgaNg/bAQ1YfAy:+eOXaRsdIeEHuRcgaNgfYfp
- TLSH
  T1EAB49E19E7E405F9E0B7D579CEA28902EB727C4E47719BDF13A059A60F272908E3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  WinRAR/Zip32.SFX
- Size 341KB
- SHA256 d8e93c5407774a8646a6f16f86835957be76e9ea25b6d658393951f2199e9689
- MD5 a52a46b2322c679c961fd91dfcad4889
- SHA1 4901321a296a2abf619eae554c492570338fe2f9
- SHA512 d3d839204152ec312bb23fcec26e48d0b1071d269a448941d95cb03f7a1646e8280817dbbafc34400bc121934fa1f8a1b5fdb0c524a2c102bde3fc8be6a854f9
- SSDEEP 6144:vw/ZdjYCTNZj43Uy79PPYTVqGjkqr8WxF/m4KAy:eZtJ+3Uy7eTGM9Kp
- TLSH
  T1EA74CE227BC29072DA6609725D76A7558A3DBC211F709ACBA3C07E9EDE306C1CB34717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Component Object Model Hijacking

T1546.015

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32