2c964c1ed8d71c9e31686586a9221d943fc3dde1cf8006167244d855c5217336

Sharing

Copy URL Twitter E-mail

General

Target
AimmyV2.3.0.zip
Size 55.9MB
Sample260620-kkmcpsfs41
SHA256 2c964c1ed8d71c9e31686586a9221d943fc3dde1cf8006167244d855c5217336
MD5 a36cd1a25b9f167fe4052a54961322ac
SHA1 31b1db9a73c171cb97da63ab3a2bf1e27d01d912
SHA512 777d68a7fef577d4c6744214bfdf34a5729bbe096f666c23c0d662608a7a8f5c5e0c984cb58bd8f2d28ad40c27bcf6c1c22ed553e9250c0020a483134fa0caba
SSDEEP 1572864:gZ72Vgh5Aqo67lM7MsSEGv71zl16H1S2RYl16H1SkItJjKkE+bqbD:8jLAqVQGjtH6E2RYH6E/tYkzcD
TLSH
T132D733C9FCFBD781F50CA931605BBB8CF890C1AAC81016E9A74F19A873969D75C35CA1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  AimmyLauncher.exe
- Size 161KB
- SHA256 f9b275cef715b35cd5357b881bf2e62a22a6ea01a46f917cd2c072cdd2b3a18c
- MD5 1b61edaed8b5543cd875d3d22a219947
- SHA1 45d0ded1b50b37063f3a0f328d56f676ccb0e519
- SHA512 668b3ee30fa7b2dd4a8e368f8b8eaae387f0641b2f874984e398a11141f520102568520f4fe27b6cd370b0b927f809073f9080092a413086e6f37a06de785a7b
- SSDEEP 3072:BKta93TRDiicws0MWbs2OJiKF/ODxT5CyV9u2jNI8m5:B2wX7bJ39uyNJI
- TLSH
  T1F6F33B07B2AD11F8D1B7E23889A20942F776781A437197CF1390867A0F77BD49E7A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1
- Target
  DirectML.dll
- Size 17.7MB
- SHA256 9c9e6d822561c6c41b90e6994b3e8857cf1d66dbfb1e0c4c799c7c89b4e92da1
- MD5 abc458767c27ab4691e8910714d47ed6
- SHA1 a9cdf72540b949520045ef11d7b44879e2181c79
- SHA512 97af8aef5fbd25e87012351d93129e8a0a64a96569c4f8f458d5389f1ffc49239f6a14d9bc99f8b0a41e915ef12ee1fd781e391fae67f9774c08311b49005131
- SSDEEP 196608:/AZfeTLx3Ohq0Ytzn7OBdzIkRnyrQAH5+sM3TKC:K80hMtz7oZIkByrQo5QTH
- TLSH
  T18A17D01A6F6415A6C17BD23D9A534A43E3B6748A43706AE706F80D311F97BE05B3F382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  TotallyNotAimmyV2.dll
- Size 7.6MB
- SHA256 b76a060b01e29b3ddcf3d8c0ea8d6561220a543671f9bdc352773e16959172aa
- MD5 01e9c48d8e751848631c996c26bfde2b
- SHA1 67b2861b217f82b51ad1cedf507f8e860df4eaca
- SHA512 33c98370a043bdd948b09bee9474c19c347204952ec48c3f3176baddff235637ecc2649a35c0e1c0e7055b7422197c74956e6735a87e6a76531c3746334cafce
- SSDEEP 196608:aR8cuzd4H2MBBRHsYpvrCSqO+jspY2ATxCRQiri18z:6zqKvulO+jW/FRQil
- TLSH
  T16786D0125D9D8814F2206F37F48F4FAB4D69CB59681111CABBCCB7CA9D25B35CA230DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  TotallyNotAimmyV2.exe
- Size 136KB
- SHA256 f5c59a9033a11bab1dd90318875f121336d1aa820703263fb518a27c7268efde
- MD5 a8ebbf44e8e138010914bd997a2fdfed
- SHA1 8fd7b03abe2d8300b83bd54a450fb319ddcaba44
- SHA512 6b28f967bcf55963b60516afa0e103fe1a2ef0ebd47024e1036a0ab853159e2ea947769f8b2883db01f3029ef4b1e19c70fab4d60797dc1285460adce7208196
- SSDEEP 3072:J454jE83DwHBoi2r7Z9V58lmpCnblxuZmPgBZN:J454jECi2rd9V58MpmxuZmYB
- TLSH
  T169D32947B2A800FDE1BBA37889A21A05F777B819477197CF0390857A1F67BD09E7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  onnxruntime.dll
- Size 15.7MB
- SHA256 95366724919f4e95ecc60010912ed538ad9804b6683fbd0aad389749102834b9
- MD5 ef6a6a5c7b8d0e817338b418e66fa197
- SHA1 06b4491ec739387477be0202af7c83673c71dbd4
- SHA512 8633b70944f536d6714c54888315f6a7ce18003a3294df09e327b5bf55a84e9898524e607541062ac8340ed0920541fbbc729ba0eaf1ad5a22dff8c5dc557294
- SSDEEP 98304:gbYBxWqE5ZUWWvQvNS+gMWV8oI44+jofdx0SCQCPfvbBgD+FH7rc69au:gbYLEwWWvQvYSNbfv0ZQCFH73D
- TLSH
  T1C7F66C16729902ECD1BFD1788A4B9A13F772744943716BEB01E141A91F6BBE09E3FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  onnxruntime_providers_shared.dll
- Size 21KB
- SHA256 dea79756b1ef0deb317115aa5da45eca8946eafcf1be2dbd9fa3b309551faae5
- MD5 1fb55208ab4a3b320592cb7bd5d462f6
- SHA1 1ed8b89cdd940a5062a7e266660f3d9858f6899d
- SHA512 6d04bd760e28d9ecfbefec3f993652af1ca3933dc7457cdd191f99d3b3db7f817551558a74cb470e43aa33d53664998d0d036fed30936501ea88ba70341f4337
- SSDEEP 384:wDbe/6cG6buG5XWE5WPT7nHRN7lj6o7R9z4aN:+qyb6a+nat9zr
- TLSH
  T17EA26C99EF68444AEC9A497085B6DE07B83D77820710A38F03B4E6192EE33C1EB34759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  runtimes/win-arm64/native/onnxruntime.dll
- Size 16.5MB
- SHA256 c544001fbb76c7217fce76e9c24dada4a35d263b7ae3c0024474d9d7323a888f
- MD5 6dfa1f87e3e53dd060617f1424f0ef85
- SHA1 6653a3b32ef98c51bc3a10e58fe12bf110b36f3d
- SHA512 b31ea5f4298438e0edd54ece3a289c40f506a6fd01044e3eb4e926d84dca465dd0d38c0f7102f46e73ddff69b55ff328b042779ccae3a8de023cbabf33a550f0
- SSDEEP 393216:V4wZItMQabJUMBuq+rTxRao77m2YGTTen1/Ffr:6MBuTpi2U/J
- TLSH
  T1F0078C65BF4DF874E1CAD33C9E978B98322BB520967086C7741A034DEDE53D185B22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  runtimes/win-arm64/native/onnxruntime_providers_shared.dll
- Size 20KB
- SHA256 f89d81ba9d248629cd8c044fa8d8212b1278b9e0aeaa2670a06af9f874cf412a
- MD5 da90d37f88ebe1ae7dab0d2c7e8d29f1
- SHA1 06ebbedeb96019de9246d05b2ef0d753d90dfb1f
- SHA512 9e3b6b6a9c0d1a41152dc8b87723d50989ec607b7957e43c4c95acd081e6891be92ee8f68e81c0f4b00a55115a053dce1d7ea70611121c2ce73d5f18c7d477bf
- SSDEEP 384:fq5r/8ZPcibWE5WzKr2VHRN7pFad2YlORR9zjEAqD3:flziKOpwzK9zS
- TLSH
  T1D7925CC29BE808C3E9C79A708566CD156D3FB7EA4420D1163352B61F5E973C6FB2421E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  runtimes/win-x64/native/onnxruntime.dll
- Size 15.7MB
- SHA256 95366724919f4e95ecc60010912ed538ad9804b6683fbd0aad389749102834b9
- MD5 ef6a6a5c7b8d0e817338b418e66fa197
- SHA1 06b4491ec739387477be0202af7c83673c71dbd4
- SHA512 8633b70944f536d6714c54888315f6a7ce18003a3294df09e327b5bf55a84e9898524e607541062ac8340ed0920541fbbc729ba0eaf1ad5a22dff8c5dc557294
- SSDEEP 98304:gbYBxWqE5ZUWWvQvNS+gMWV8oI44+jofdx0SCQCPfvbBgD+FH7rc69au:gbYLEwWWvQvYSNbfv0ZQCFH73D
- TLSH
  T1C7F66C16729902ECD1BFD1788A4B9A13F772744943716BEB01E141A91F6BBE09E3FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  runtimes/win-x64/native/onnxruntime_providers_shared.dll
- Size 21KB
- SHA256 dea79756b1ef0deb317115aa5da45eca8946eafcf1be2dbd9fa3b309551faae5
- MD5 1fb55208ab4a3b320592cb7bd5d462f6
- SHA1 1ed8b89cdd940a5062a7e266660f3d9858f6899d
- SHA512 6d04bd760e28d9ecfbefec3f993652af1ca3933dc7457cdd191f99d3b3db7f817551558a74cb470e43aa33d53664998d0d036fed30936501ea88ba70341f4337
- SSDEEP 384:wDbe/6cG6buG5XWE5WPT7nHRN7lj6o7R9z4aN:+qyb6a+nat9zr
- TLSH
  T17EA26C99EF68444AEC9A497085B6DE07B83D77820710A38F03B4E6192EE33C1EB34759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  runtimes/win-x86/native/onnxruntime.dll
- Size 13.8MB
- SHA256 096329ad50f72724bba72f34c533a2c9373a13a1513bce26aa4383d8e0c0e38b
- MD5 2d0b39dcaf68cc5fdfe4b161e40556bd
- SHA1 16cb02d22b9372ff4f58fe39e42137365591f636
- SHA512 2243ccbd1db125ff92bfba6148bc29fb278c87970b4b0865fe772463e9f971b9f2e97846f47338b220d9289cddbdfdcca4ccd0ddfeefc59ca7e7d39edbc49844
- SSDEEP 393216:W4Mp2nLHRkODAEwoMaq+1nJsUymDuEON4CFOSmYAqu3qkXV:kiHRkOD0oMat13VOqCF1m6u39F
- TLSH
  T1E2E68D62B345C171E54E12F1AA5C9FABD318853007B504C3B3D8AE6A7A351E36B32F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  runtimes/win-x86/native/onnxruntime_providers_shared.dll
- Size 20KB
- SHA256 8927398d67ad81c663d95fe196a2271fef4a8dbab7c23edbec1ccffe785540ca
- MD5 b6478f65b04518a97bc510dd88c896b2
- SHA1 76201199523b9df5be72e2a6d5323fd92559cac2
- SHA512 827dd7f5f0b0c1766b0fcf121192d431352f068917327c08826afea2fde0929375adf14c85748d7b4141abbfb9336f361f2c2dc3d5b8053d1eea393dea15db12
- SSDEEP 384:yYNvModTrjttozWE5WaNtT7nHRN7GzxIPaR9z6LR:KITNGbfGzxOW9zUR
- TLSH
  T15B924AE6F6A84A83E9AE097063F9C95B6D3C7B920F50545327A5E6080D533C2FF3066D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  runtimes/win/lib/net8.0/System.Management.dll
- Size 305KB
- SHA256 6dee08f8cb8d859f65cd91366168b3583239dce525ca3c83df28fc231ee2098e
- MD5 058b67952f25066cb40a783f6912ca57
- SHA1 ad817b2000629e9e0fd37b2d401bad14b1f3ccd3
- SHA512 ff86d1ca7770bb287f4609736cc61ba3ff57c8d9b47f53f196dc55eedb0ecb826abe0e938ef48a3e52561b0ab4b4ff00ab19242c9499becf6f2f18233d6cb8f8
- SSDEEP 6144:nyj+butGieusJEYE1SF7c39iwjwmppwbHV/ZqPJko510iSxptULQk:n4+butGieusJE31Shd/kXyxpkt
- TLSH
  T19B64172023F88A44E8BF5FB5A0706060CFB5775B2A6EDB9C4D917CED19B2740856732B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13