dcd79d50de9c5fa647a9cc28606aefd3e990130a925da4f7b5940df88a6c12ca

Sharing

Copy URL Twitter E-mail

General

Target
MyDockFinder_Cracked_Ver_1.9.7.4.rar
Size 12.4MB
Sample260625-zbct8se18v
SHA256 dcd79d50de9c5fa647a9cc28606aefd3e990130a925da4f7b5940df88a6c12ca
MD5 30049c9d37adef5d9bfc0cb82826ef96
SHA1 b0f368bf26abcebffc5383e8d3a65febece5dddf
SHA512 cd4e46b8a39b32e5c5e7b1baaef3a5c20e887e1bb291e41010604a4a5f03c5fe1c1da87ec9c667486eac307d1eb67b24b0d9bf34dd4c9a5341b4a78523f23b1d
SSDEEP 393216:SCmFoomLVPglidfrV3Z3tTrypPOpou2w7W0KC:5mmhIliNRp3tTwo7WhC
TLSH
T15CD633BF987860E06E10730A7734096DD7E7C35361F0ADA68E6FEE945D0139406A8FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  MyDockFinder/Dock_64.exe
- Size 10.6MB
- SHA256 c8982957267813be60b206b7c253a1a68e4b3683b548da917fce58d4044f7bac
- MD5 ddf15c566a6a09864afa258ba0f5c2ec
- SHA1 bcd083c412f3e5df20eccd3759e9151b2fdbd1a6
- SHA512 d718bf72cf04d0f8bf6ec99c3be6bac2c8a14080eb787c110b342740d76e3ba56948fbf414599909977e77719efdfe8947a8cd415dab6d5b0132409df4cf585f
- SSDEEP 98304:VUsFEFc9Kd4mLQWFAXZK7u8thuub+5HF0qihuKPWsClSRn:pFEe9e4mwXZK7Fu95HF5iAKPWsClSZ
- TLSH
  T1D8B64A1971BD0295F0B7C6BD82E79907E9723C154735DBFB06A0861A1F2BED08939B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  MyDockFinder/Dockmod.exe
- Size 410KB
- SHA256 38381bb043270dfd416ec5f0263172dc1dbaac5d94938a1fecd350c235531cec
- MD5 00e4333e5ad45aef07ef3706f6f85dd9
- SHA1 aedf16e5b39f6a517cee4663c9bd9075762561c7
- SHA512 457a1ef420ed1dcd8aa996f4a4792379a810d885c84c08baf02ae0324ee82021b9a8fb67e6e10f20deac33b802530c0c80d0fd279e57924663fce06bf82114cf
- SSDEEP 6144:6n7dHFax/3dAE9quLl3slpO3x/uUdaYTAONT+Gdh5ZfMuluK:wdHFap3dAE9qDPW9daM3f5ZfhEK
- TLSH
  T122946B01B785C432D96201321AB5ABA65A7DBD203F55CDDF63D43A3D9E303C1AA35B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  MyDockFinder/Dockmod32.dll
- Size 103KB
- SHA256 8e6b175f09a7f084c6e2a1aa8c95646e67eea4ecb229b2eb9dc2c07f6c43f427
- MD5 926de8ce21bcda1ec769d899fb9eb836
- SHA1 fde77cb504bf98cb48a86bec4833fc4877c8e0cb
- SHA512 8123d8d4723cebaf0f3811fc51d90e4a3b29e9adc51c1fdaab0d093614e46da217f1eaa929fa27211644d939b280ff72565c574ace147c11049b3e5665762557
- SSDEEP 3072:qBUYB+5SmXDZNJlxYaJZN8xJauGxPwu0xo:iA8mlEgv8xJaumwu9
- TLSH
  T1E1A37D1576909475EEAE19302464DA715F3DBA20EFD0CCAB335946A94F703D2EF3092B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  MyDockFinder/Dockmod64.dll
- Size 128KB
- SHA256 07aa352ee78eb3ac1ebe7317ba96cb4846c49795c08cce5c4a58ef263234ddfe
- MD5 11d6c9a9e02325a22994db29db9cc7f4
- SHA1 1221450e63d45e1e857df6bb7a536fdd57261cc8
- SHA512 64d9796b98de1dd03aa8df33bbed2270ba6ef6e456a4b4ce4e2a32246a2683ea0452523e4c7027ca0b97546decb66e17bb720c3c7054b507832c9d2601495007
- SSDEEP 3072:i1joWFbby3iDgZ/QbW0aZaZ8rV7R7UeLhQR02ZkEQuGxz3u5x5:iKWFb2sgZoblNW2AuyuV
- TLSH
  T19ED37C1B77A404BBE6778675C4930E15E772B86117609BAF03B082990F633C15E3EBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  MyDockFinder/Dockmod64.exe
- Size 280KB
- SHA256 8c31eb557a9b42ad6ac110b069b2059c3507e4affa9d81d669036fff26c30651
- MD5 c5885fea4bcccbf13ed2765a8f8e8193
- SHA1 df72dd4800048a95bd2c001819565159ffc6f0cb
- SHA512 529dd1e5ec1c94c6dfe98406fe36a5b6a2e36930cb250b78c7b485c64fe91a18bb1dcbd8b8db0cd868fd9f80e44893824ac1787a17650ca4d71620ba549ee8d8
- SSDEEP 3072:i/TUcUPYpnCgIvQCbDhYGYDoQUdSMBeePnoY46bBRJc5018EVddjLuGx3uJxJ3:iTqYNCgI4C/h1YDNdaohMcWJdZu+up
- TLSH
  T16B545A1B7354E4E6E126423488914B02A732BC617761DFBF13E0B77D5E723D06E2AA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  MyDockFinder/Mydock.exe
- Size 226KB
- SHA256 ddd24d9edb3b8f388348f62fafe44548185016aa3796aac4740362ff52693b4a
- MD5 6d89ef34a16db4a180947265c7d44254
- SHA1 c20909ca62c983b45214715f7648253bf9771e11
- SHA512 a050c34e4abaf14114c4edc9ad2327b05d5267a7ec792311b25fbd46ced259fc3dd0a28ebde2355f662cc1255515d5c537da34b7af7bf1d624ad7b8875b76b27
- SSDEEP 3072:QIwwBgrFicU16rO9V2DOVdNN3DvbrjQheCx57vxaGEVddeWcvwuGxdDu0xZ:9ww6pFvrKNputaxdFcwuEua
- TLSH
  T157344B1237C0C972E5650A3118A0AB615B7DFD207F61DE9B33E8772D0E743D16E2296B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  MyDockFinder/ScreenRound.exe
- Size 505KB
- SHA256 ed5885191597622a6ccaff14f81e74b3c595cacb81358bee70af1e71f93415af
- MD5 e15a48955b006275561162d8612a8f3e
- SHA1 9ce2dc542cf3a4a35a80adc216ebf3da5b76fe2b
- SHA512 45603d9a24c9480bfc61834a68a69a8f9ef42ea60e53f79a2ecf45652f0920902d0026762ab76bdfed154a471ef551338275d3fc78ef12e31b27b50a4aabf1b1
- SSDEEP 6144:U1CbE7OypydRgCxMC+YVMe+UAOGp2/j1uXuk:XQSypydbdYw7Uek
- TLSH
  T1A4B42911BA91CC33C63606F14CE4D3752739BE600B924A5B73F87B5EEEF02909E616A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  MyDockFinder/SystemTrayico64_update.exe
- Size 255KB
- SHA256 012f79eaf1584deee8908161f2d43b5a968d1062ec1d4ccd79a434961ee3c661
- MD5 e24ea909894dca2fa607adedbfd8b6de
- SHA1 35f91cdd46002a514eff69cc974533f16e34d996
- SHA512 6e3bd7e7d3982ec27b16e117fea32ed1eaecca2c85c420a311cd6e22755aa8eacfa5d0e2c5409c7067f721306abdbf5e452eccb32d69836bee6360aa8328fa9a
- SSDEEP 3072:X9wq3EkrWuTcE9wiqy3m4unUGKgi1uQ4AJEVdd0uGxE2uex0:twgEkrjTB9wiv8RiczA2d6uf2u9
- TLSH
  T1B644590773A0E4E5E066463984924B019772BC357B61DF8F13E0B65E1F732D1AE3AA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  MyDockFinder/SystemTrayico_update.exe
- Size 220KB
- SHA256 1f25cef7ee585a1038b7ae5068be8d3b80dec919335f89d672b14033e4bc0d4a
- MD5 02c82feb53106d33e6e8aebb31ae523f
- SHA1 1449b1f430898ecd9c9e386fa61c208d0d18290a
- SHA512 dd25141e43f16b8d2a7c87bcfa4ec6f291fd94813f1518dd3de232e85686d4557e74b9fe8fb39885b562bfab583d67ca006ebe55a9f764164ab1bfeafb808201
- SSDEEP 3072:0IgVjCLbcxMLZ7YcMklqtM9ET/uilmF7VLsYPTEVddSd4P/uGx5Auuxr:nkj6jLG6qLGVBUdA4P/uaAu8
- TLSH
  T185245B12B7D0C861E9260A3218E59B605A3DFD607F55CE9B33D8722D0F703D16B269AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  MyDockFinder/Temperature.exe
- Size 512KB
- SHA256 06348340fc923a6c1f1c5c0f5667e452a83481c6f6a14c26ee78832bc34124be
- MD5 8287b22191c92f72c126597b084e79ee
- SHA1 e4c1e543c0dd5814c9104c3016c79933be2d77fc
- SHA512 980e50994d347317127c4f1236756525a0cf7a5d918251033e9787f19a702725b046e1372f7e5dd74a34b19e335dcf766a8bdc8b80c5985956729290d015d13b
- SSDEEP 6144:fy+RJdJEYPEVo3AS3HkedsC/WBEXljDcxoBvjalrD+8uQuxC:KWdmVTS3HLiYacRNxC
- TLSH
  T168B47C9863E48E09E47F2BB695B245459B70FC963E22DB0F11C574381F32382DA2B75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  MyDockFinder/UiAccess.exe
- Size 236KB
- SHA256 faa0f0728cff54dba7150f5c128f084ff454e1bcb1c11ce1ec6f2a115697e799
- MD5 5190b686d3220c07989f955a1a7b59ec
- SHA1 3cefb37e9180f2a7dbc1076ad04d15a464b0da52
- SHA512 46b19bb69ee21a15b22f9e67fac1dff2f55a8d884b13f5d8e272b3c0d55e29f38ea97834d27b0602a66cf88dc6cfaaf306dadd1aa75250daefb96aecc38611b1
- SSDEEP 3072:SAjNM0TSjPWYPPYveOfyZChBUVBYvrEHQUPBlEVddRuNWup8:du0ujPhPPKeOfyZ0U8vcJqdPu4uC
- TLSH
  T16034590B73A0F4E8E126463588964B15A736BC313A21DF5F23E4775D1F323D15E2AA2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  MyDockFinder/dll/x64/Microsoft.Graphics.Canvas.dll
- Size 1.6MB
- SHA256 2538f397a08f78c7ef872095da10982d0b854333323988e260f288b66f279010
- MD5 f4e3a5dad2ddbf03dd1560a53a557df7
- SHA1 436ca920e7bb10b6e5739a160c58bb089eca3aa7
- SHA512 1965ca9af2d97652caf4fba4847c64a953810f01069a65455487beed779ced0b0098cd1acaa6798c9db7d31a7a6ba31cf7388d9c51c0659a83ae033506403ad1
- SSDEEP 24576:pWwBuzYWMA24IF89jKflDWFgB5n3CL+p7He:plwclWIF89jYMFgBpHl
- TLSH
  T15575086B5A9D0561E979B03DC8678F0DF5B1B8220B2367CB0132465D9F6F7E49A3F220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  MyDockFinder/dll/x64/concrt140_app.dll
- Size 56KB
- SHA256 d72a4391c4852bf4f0937f18d7edbf9ac4343e19861d7856c249615c12e4dd9c
- MD5 12e45a362a21898d50b468ed52df13fb
- SHA1 a8c80d57b613c89c5f99f1f4355df92d01f0135f
- SHA512 142d8166f955b7072cae60a2f9fffb17ed0f07b1847d9883b6627b92e4773327d3366645f9c2245da78de4c6f73685d234c56eca48c590db40a64cacc27d27df
- SSDEEP 1536:2okGO9imU3Sz3CkkDPZB7y77Qs82cnuHnCcDkwD9/f/iCHe:JOnU3Sz3CcI
- TLSH
  T1FD43ECCA715204EBF7A2A23B85E1CB2B54B3AF41321B45E5142EF1841ED1F54EA7BD23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  MyDockFinder/dll/x64/msvcp140_1_app.dll
- Size 18KB
- SHA256 b5d37b76fe107d5d23f498b582cf11dc1b3c4649c844ed7dc7c2e27001072823
- MD5 f261ee6a2df539dafa4f2c622d43f139
- SHA1 1a277e14891ea1d62df26059137fa2520b2809d6
- SHA512 ec0f19940b8d35acbf46838adaf374875fe59afd7a7b37f7173ae31d2d59e395eae4feb2acc7975b312297870e0190fcc850dfcc6ee45920fcad013851143dc2
- SSDEEP 384:ZhoMolT2VRxiOlxCAkTsdHRN7nBClGsrdE:jboERoOlxfd
- TLSH
  T199926DCAED7C84C7C92718B08298DE47BC3DA3C61651634F1765F16A2E937C2B70AA58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  MyDockFinder/dll/x64/msvcp140_2_app.dll
- Size 20KB
- SHA256 580c855e1e58510207b9156df9bdb32ffbd15ce4405babcb90694212a8798587
- MD5 7f8adda040f0be34433ba235389f6482
- SHA1 a414e8f387ca1f648cdd7f86e6906bbd0c04694b
- SHA512 7ef0efc1045f87210fe8d5535a63bba4614eeb0effa5a3c93558ada6456bbeeea05fef6401b1d00972c331cbc56162f3e2e33db7acf09e8815da429eba56068c
- SSDEEP 384:MJs18o1qRHqhum3CAkTxdHRN7OVoiFWSlGs4:IsCo0RIum3+NHP
- TLSH
  T16DA2F7C8D83C4643E5590672C2AEFA9AAC7CA7D21D907F4A576BE11D2FD33C2A51630C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  MyDockFinder/dll/x64/msvcp140_app.dll
- Size 253KB
- SHA256 d0637809160ce043e5530daf6b93bf59611b4de409274c55ba87a2cef57cb202
- MD5 4e632650980e823206ef87df36bf8446
- SHA1 fd537c3542c8a7af9d231482332bad6bc77ac5d6
- SHA512 74e53794977b6a50729fb53d21c5ae5a9dc12984add89833a5a4b63ac3b90e7fb0186384c684cac5082cfb85d70b96003df0c49be525677813758f8675865d4a
- SSDEEP 6144:5gXQx6AECK7Z2me+wEaWoo7dMEMEik8hz:+XQx6AECK7Z2me+wEaWoo7dMEMEik8h
- TLSH
  T16F4490232B2B0DF1E59523DA71C643518FF1BC2A4E62B74363DFE0546F91189F2A7A90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Checks computer location settings

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32