0ec10fa08acad79fe9c1713acee9be01a7771086a26aed235e4f866c9e371d9f

Sharing

Copy URL Twitter E-mail

General

Target
InminAPP1_EN.zip
Size 619.4MB
Sample260624-chzagshy4l
SHA256 0ec10fa08acad79fe9c1713acee9be01a7771086a26aed235e4f866c9e371d9f
MD5 66eb4b06f7767aa813f97f818e2e8d44
SHA1 bb1b48b17ec92e4afcaa5093e97b6056760093b4
SHA512 54214f8c1434201a4b1ecb3a759b2fa04b3c1d6f06d16d58139e8c4d03b65b2f79920085e488bef65b0254fd4a89f071fbf68660cb9ac45f803fc70634284278
SSDEEP 12582912:7v5JX/BbzGrxp6Q+iudeRYIldArTsxae9Drh0D3Sz17yaMaEvVI/vq6+dNuw2pZO:7xDGmQ+3eRYaoa9q36yuTRO
TLSH
T1326933D71691DE925A787F2BCC9CDDAD2B3A5093A10101DD044CBF196BEBFC4AA04AC7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  InminAPP1_EN.zip
- Size 619.4MB
- SHA256 0ec10fa08acad79fe9c1713acee9be01a7771086a26aed235e4f866c9e371d9f
- MD5 66eb4b06f7767aa813f97f818e2e8d44
- SHA1 bb1b48b17ec92e4afcaa5093e97b6056760093b4
- SHA512 54214f8c1434201a4b1ecb3a759b2fa04b3c1d6f06d16d58139e8c4d03b65b2f79920085e488bef65b0254fd4a89f071fbf68660cb9ac45f803fc70634284278
- SSDEEP 12582912:7v5JX/BbzGrxp6Q+iudeRYIldArTsxae9Drh0D3Sz17yaMaEvVI/vq6+dNuw2pZO:7xDGmQ+3eRYaoa9q36yuTRO
- TLSH
  T1326933D71691DE925A787F2BCC9CDDAD2B3A5093A10101DD044CBF196BEBFC4AA04AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  InminAPP1_EN/Data/BGM_audio.idx
- Size 1KB
- SHA256 d8953cdd8c080214ae5c4168b498695f628f8f5ba55d47b0519c9064bb8296ff
- MD5 ee3096cb647b2487b62ad783955e64a2
- SHA1 f65d9a32eabd59d72d1e6e1678f87cf847e7bf37
- SHA512 4eb1ad1f2b1d57532c6dc98aada721c1de4800f9ace2872073aa92fc15dfad2db0e55a96fccdf6f48c59c58c9a6384f51be06ae9d7b6a9ff0a8ffa94adf54ace
- TLSH
  T1123103727DFA13CDF6A2573596B091F1463BECA5C801832804E58EDE2927A636840F77
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  InminAPP1_EN/Data/BGM_audio.pac
- Size 30.0MB
- SHA256 3119bdfcc0487b4a43d89727d2fef1047cd26d166d32148dda2fc4161e0b2696
- MD5 4485d3569ddc827ddbe75b0259128211
- SHA1 430cd66170ceaf9af4a65d3ef3b6726adb38c97e
- SHA512 7e5733282642d360a692683b97cc05e00e735e84c9906ef3c6452d9a4e4fd53c36056293d7954ebab63183a607f05666caa6432ad2354b5c597ea8ea0dfb4e99
- SSDEEP 786432:FYONJXhhrgqus2LUYKO8oeecBHGDM0HdZfneqHdzI6qN:FYOPxhrgqus2LUZWtqmDMsbndH9I6qN
- TLSH
  T1D767334AED891ECAC458397406374E0237BEE43E5771C6930B74A17E8EBFA046D1369B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  InminAPP1_EN/Data/CG_pic.idx
- Size 16KB
- SHA256 3398583d08999ef0ed586183f0cf15f1c70b115553ca98d421711f88b6a63b1c
- MD5 d8a51e7be1b61364889dd5e9e825e466
- SHA1 fb113a95414fe1c5ac1a5bddd3783c7127a941e1
- SHA512 e231a4cf01131ca4fa716b81fe3b96f14a06919efbbdc7f359efa51070aa5c43b2d39d0ac4892e5019790d47aecef9fcea970970905e964f4f58060cb997ef33
- SSDEEP 192:yVF5BoSYKXZEkPhX3QLvQwWzil5ZDslX+z1JP:yVjBPXZEkh3I2yoMJP
- TLSH
  T17372EE696814632EF37057EDA6D457EF93BCCFFACA450B2404C54F02E71A283AAC4978
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  InminAPP1_EN/Data/CG_pic.pac
- Size 353.9MB
- SHA256 6e60af431c36dca257108a72df1e72e5d90338f279f8cfd01f9c8839ca817389
- MD5 d7326362633548e7a846efc4e7fa5d78
- SHA1 2430b2c6a742033af06766ffecbc969883fbb87c
- SHA512 dfec81da04624b8c8148bce860f4a30543a8a47530dd34523d3cc88dbe41bf698ea2a0bab6c49808a76f9c8645d01c74ec92a67511876980d2901e5496435428
- SSDEEP 6291456:ysXtR/58GXI59itQW5uXYfDTt9EHz6KNy0sqVWDZuUY90j+yrkAlohDrllmCyC8V:ymR/qofDcBNSqVm0Jog5uanbP2r/Ioz
- TLSH
  T1160933C717C1DE9199783B3BC958D98C2F3590ABE59001DA041CFB1A7FBBAC889489D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  InminAPP1_EN/Data/CharaData.dat
- Size 36B
- SHA256 a3e487ade4d98f3f04e2f49a794e72cb6ff6852177c90cfe708362850ab16c50
- MD5 185d91aa82d59409cb9f85df4e6d4be8
- SHA1 b8bb0c04ecb8a786ed221d36d834d62ec5301f32
- SHA512 52ed855a004b09cd4109996e9e4a4975804daf5640c27d489d6ec3621fd04f53835985a7247279cb494087f462b824c460de510730502713367d4a65acb35ca7
- MD5 SHA1 SHA512
Score

3^/10
behavioral11 behavioral12
- Target
  InminAPP1_EN/Data/CharaStand_pic.idx
- Size 2KB
- SHA256 3e56f33fe65a095e7ce2832095e086df4ba7fbddd363712d12f903cf4468ce0f
- MD5 f6fef74afa1c69795d4f7dadd07ecfed
- SHA1 7c2d51848612b54b9e267905dd8d47d498a01b0d
- SHA512 62268c9e3492c9151372b5e3867b075d5e8db28c9a20d3998c82022900fed458c406f84536db30e51d0817ce9c7273e3e6314ff0582d78c3c69d125b1e7da73d
- TLSH
  T179412E647F01634AFFFF67F861E2015728A89CFBD801828088819B1C9E3D32A5C96A74
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  InminAPP1_EN/Data/CharaStand_pic.pac
- Size 10.4MB
- SHA256 a600ff561c50d8a60cf15a0915b7c7adc4ebdefbb3b4572c84aaf564babe91ab
- MD5 0375a889eef181326e4140cca177a121
- SHA1 933eb2b2b11deabd45e551eccf46b40eafab56e4
- SHA512 b657618ab55c5e329baf21f4aba99e7ce613fd0f76950ed0d2382df51de41374671b97d3b99db9889f916716457ca5638de29e0ee9fc41800132bccd257c0385
- SSDEEP 196608:82iBVFchF0Gw+cFMziqbdIdBJXIaf+hq686GBI33/smCgtO:cFFGwqmDdBVR+AlKfsmZQ
- TLSH
  T105B633ADE4EEB65BECDC0536CC8A4D1853F074032297436C121CF90F595AABD96A1CAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  InminAPP1_EN/Data/Configure.dat
- Size 336B
- SHA256 b4fbe306443ac089428eab16da2fdf6ddcb8142247ac46d491c3b1a6933d494e
- MD5 772a94c3272367984cfe98e283016d59
- SHA1 0311244f5d4ca421852782d2ac7cf97c66d2c6b9
- SHA512 55d349cf309f94f324008ba57596c4749ef5ae1ffb51ec775d6edc6a5770da59cd062a9c221e6c988ff915d1c54cbc75126c1a80f799e192efb87becdd8450af
- TLSH
  T1B6E08C51A3918B33C9500B3018D7131131F4EC50FFC30787315473318C113910996F19
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  InminAPP1_EN/Data/EVData.dat
- Size 3.1MB
- SHA256 ff5a8a38ec5dc7dd2780bd621c79b394c32b944c083b08bb839750a14c4bc867
- MD5 c620395cce95ef4dc2527578fe5b7ae1
- SHA1 90ae166fb6977a13443d3d49f708e0a19e9ff119
- SHA512 fb60da3ab4be364ee20c21cd9842ac0e8365869ac852fee3a0becdb90f69944c714df5f737056969c19d376e67c74fdeb3f413507cc819ed7c423ff7a43f99a5
- SSDEEP 192:udLf5siGyYYqZqP52/xCe3/Uq8CQcICUEM2QC8LJu4z2I5t/TXDGfM:udOR/fCLyFvNhXe52AtmfM
- TLSH
  T17FE526087A95D982C41D9E378EAAC27C2220BD45FF42B647BCC5BF2F39B76F12842545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  InminAPP1_EN/Data/EVDataCN.dat
- Size 995KB
- SHA256 cff56b82c96a6323d69190fad4c1a44ea68d6e57fd000fe704e33f54b50dd639
- MD5 0a5a4ae0e4dcf17d5a84e9207cff82d0
- SHA1 7f347bfda951dca19e20501cb1e193ea440eb1a8
- SHA512 9ad9561dfbd988a221adc81c3c4767dc032e30fcfec12fa32921a7541a8cf36499816ff74d237313ec128aaf14e36ab81fa43a24d09bf8fd85af02c86363d3e1
- SSDEEP 96:Wotl0cA7Ht8i7yKxDBGM2TZ06ggNBLuZJ+13GdLF1GXks7GZoGJZGJMGJpGtf:JHKHfP6go/SLbYks7uo2Z2M2pc
- TLSH
  T179253604BA95D946C41C1E3B8EAAC27D6220BE85FF06B6073DC5BF2F39B76F01942585
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  InminAPP1_EN/Data/EVDataEN.dat
- Size 3.1MB
- SHA256 ff5a8a38ec5dc7dd2780bd621c79b394c32b944c083b08bb839750a14c4bc867
- MD5 c620395cce95ef4dc2527578fe5b7ae1
- SHA1 90ae166fb6977a13443d3d49f708e0a19e9ff119
- SHA512 fb60da3ab4be364ee20c21cd9842ac0e8365869ac852fee3a0becdb90f69944c714df5f737056969c19d376e67c74fdeb3f413507cc819ed7c423ff7a43f99a5
- SSDEEP 192:udLf5siGyYYqZqP52/xCe3/Uq8CQcICUEM2QC8LJu4z2I5t/TXDGfM:udOR/fCLyFvNhXe52AtmfM
- TLSH
  T17FE526087A95D982C41D9E378EAAC27C2220BD45FF42B647BCC5BF2F39B76F12842545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  InminAPP1_EN/Data/EVDataJP.dat
- Size 3.1MB
- SHA256 ff5a8a38ec5dc7dd2780bd621c79b394c32b944c083b08bb839750a14c4bc867
- MD5 c620395cce95ef4dc2527578fe5b7ae1
- SHA1 90ae166fb6977a13443d3d49f708e0a19e9ff119
- SHA512 fb60da3ab4be364ee20c21cd9842ac0e8365869ac852fee3a0becdb90f69944c714df5f737056969c19d376e67c74fdeb3f413507cc819ed7c423ff7a43f99a5
- SSDEEP 192:udLf5siGyYYqZqP52/xCe3/Uq8CQcICUEM2QC8LJu4z2I5t/TXDGfM:udOR/fCLyFvNhXe52AtmfM
- TLSH
  T17FE526087A95D982C41D9E378EAAC27C2220BD45FF42B647BCC5BF2F39B76F12842545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  InminAPP1_EN/Data/EVData_Setting.dat
- Size 812B
- SHA256 d084438916df9c70c4ae66e4d9a725c42ac18b8bc7bf4b7abd991255e3da81e7
- MD5 7160cdf3401a14945da7e103852ba348
- SHA1 2ecd37a202ef0814912a215072bb2a26899fb0cf
- SHA512 5049ecae87240c3c4ab20c6fc8e2e6bc32701bc1d835d7bdace968a6c14d435b19e0495e3009d777f050fb4ec553dce33e8ab43614733be48fd0700b425164aa
- TLSH
  T1D40102226949D404C1B71C735F2AC6940150BC45FF80B2833CE6FF1E69378D56A56618
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  InminAPP1_EN/Data/FDebug.dat
- Size 64KB
- SHA256 21215a03abd454c09bdc00a80bbb1521887c24364b5ebd3ed5ec0db4fc2ce44f
- MD5 ea9e9acc9a2cb5992da20ed3405f320b
- SHA1 90f14889e982725b3cc9afb5027d2165aae6d07f
- SHA512 59994fb2eb6730ede9fafe92066a40858ae665896f2aa49361a0ddfb2b6e1db4c26381caa2e711abacbf3c52e5cd65a16963df5732fd0c9a55c359b76e46b11b
- SSDEEP 3:Gfl9tVt/PtVatl3tVHlVtV0/clCu:GftV1PtVaX3tVntV0MCu
- TLSH
  T1E153015C30CD64C8DE10B1330BB391C42172EC07DDC172CE30E37C66195DC411101054
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  InminAPP1_EN/Data/FDebug_Setting.dat
- Size 108B
- SHA256 7c1edb055228bf398876d99fb45f0ffc433a5dd4b2bf40defc4964a1f5f0dc0d
- MD5 17cb9664fc9bb3a8b08511e58e6a6bdd
- SHA1 5c6fb6efdd7b7cc944ba924642cd985e47c8eb80
- SHA512 02f7e1b45b1f6acfbb0fb01a771e54a7b77d9c10e1493e9834f26ad201ca7824ce5654bf6d6b0bec82eee65abb81c5c01bd07611ed67591472f01f7f4d5d8cb5
- TLSH
  T18BB00224214A740CE2204C330B52C1481252BC17FD10B10A1CE0BD5E1973CC11201058
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32