853afd052d6e287a131891c938b08c865f31fa64d71647bf0beeee61ba9b8fcc

Sharing

Copy URL Twitter E-mail

General

Target
USBUTIL_v2.2_rev1.0_EN (English).7z
Size 807KB
Sample260703-xdncmsaz8n
SHA256 853afd052d6e287a131891c938b08c865f31fa64d71647bf0beeee61ba9b8fcc
MD5 feb0b88bfc906350295f172e4ffa0bc5
SHA1 22361a1059918727e9d21edcc85e311c4a8a7dfe
SHA512 e1c377fa4763e88acea1fffaee263c1819ceb582bf88104650d05caf94b29de3d0b79aae887e33b98ba3b0f8fdab888c52a104ae78429587597a299e02d5401e
SSDEEP 24576:0RxTeveuMuRKpven7Ujlie6FrDgKfyLaj4A:aseunNNfv
TLSH
T16F05230A50164643AF16D5F8BC3C365B35EC60345D88EAE1D95FEE5DFCFE99200A28B8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  USBUTIL_v2.2_rev1.0_EN (English).7z
- Size 807KB
- SHA256 853afd052d6e287a131891c938b08c865f31fa64d71647bf0beeee61ba9b8fcc
- MD5 feb0b88bfc906350295f172e4ffa0bc5
- SHA1 22361a1059918727e9d21edcc85e311c4a8a7dfe
- SHA512 e1c377fa4763e88acea1fffaee263c1819ceb582bf88104650d05caf94b29de3d0b79aae887e33b98ba3b0f8fdab888c52a104ae78429587597a299e02d5401e
- SSDEEP 24576:0RxTeveuMuRKpven7Ujlie6FrDgKfyLaj4A:aseunNNfv
- TLSH
  T16F05230A50164643AF16D5F8BC3C365B35EC60345D88EAE1D95FEE5DFCFE99200A28B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral1
- Target
  USBUTIL v2.2 rev1.0 EN/PS2LOAD.ELF
- Size 213KB
- SHA256 50a418bdd965889bd67bc8ca68c64900e2bbe88f3930c51af61ef6c51cff3e46
- MD5 b97672b7710123b9051193ce7250704e
- SHA1 6e539ed22c03b9a7b0393c38573580c54332a5e7
- SHA512 dd1d12ff8bf36c91f3ba54774a2ab7781cebebac8b28c3e82b34eb376365b3a3cf394f7019558deb492b215a3838ec74620ac1a27f8866791f5ee483642b8f57
- SSDEEP 6144:XypHVRsXwUdSpcCD1/7csKTU08uXo+1WtdOH4Q:ijsX2pcSnKrl2gH4
- TLSH
  T1C42402265E2B58C8ECAD27380AA764130FC40D3F6939274352D48ADE34AB74E8F67709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral2
- Target
  USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP16.IMG
- Size 89KB
- SHA256 520d74545b4e24dc25ab0d01c660da271c199080d0834b38a20114caeadc991d
- MD5 8093588e168e015bf3f85413f6aa991b
- SHA1 8804a72c4be4651bfe47ef4fa3a8b85e2f8e6230
- SHA512 041dfdccbbd69f47d480f859f55a66f4eecbaaeef5fefe105cd3e9f447230a181278f8b00d9c5c9313db1b5ed82430ef1fbf7d49f72d5e6e3bb2da9ef7a4cd8b
- SSDEEP 1536:ReGLkOq+xRV/ZgrbRLVixGm2/MmWdj2kjHGiaQ/XapQiR/PLoCcZk:ReSkYRZ4lL+Hj2k7GiaQ/KpQ2W
- TLSH
  T1D593B386CF76AEEBC47D0A3CCDFB06517A2802C55056A2AE43343C7471A63369ADF5D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP165.IMG
- Size 96KB
- SHA256 9a3f9d337a23c71ade451e95f7fd03e038f4cc4b21d47b3032c57591c83a4557
- MD5 b326b2c91930a524f568a50489435e1d
- SHA1 d8d2bc74ab39ec8d977742517fa803164b7f8512
- SHA512 75c393b080303244b165b85f73627c3f97db7d6f966a26f36995566772305172ae999a9b2bf43ba7a60c8b9ec5dd8cca17de8c28e339ca4fcb8bd17b5269b40b
- SSDEEP 1536:YTeGLkOH04pJKQuaDWNGY4qtIxtljarXXdGJj/u7ILuPtr/Ny:YTeSkSrKQzYi+rnKj/uILuPR
- TLSH
  T1ABA3A482CF799EDBC87D0E3CCEF70551382852C5611662AE83347CB836AA3715ADB5D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral4
- Target
  USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP20.IMG
- Size 107KB
- SHA256 8613460cac02cf87a65f23446b86a04a9072a1faca796b05e1d67b910a31316a
- MD5 8863d0011eea0b4a1d347c37b83b46c2
- SHA1 f09c265eebb8a1acf06c39e8bed0f74e48e4da5b
- SHA512 18e51a9eb2d4be29887a83b584fbda39a344f4c5dc90d4e27c29547d146691a172ac26c02c8c1d6a6fc0f01fe6a6c3b9f83406032aa4b7b549793eac218da13a
- SSDEEP 3072:he6XuxeDVajhOrMVPTQvFLma4g9wLtrj:gxMQ40TQtLma4UwLtrj
- TLSH
  T102B3B386CFB59EDBC47C4E3DCDFB0911392846C5610262AE83347DB832AA3355ADB5D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5
- Target
  USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP202.IMG
- Size 108KB
- SHA256 e4857da724efb48213d4cb805637b461846767e4dd659905c32d9a007f5f90cc
- MD5 13875a11fa87184ac64cd1c0306000d9
- SHA1 7167b9db51d4a18142b096c22fe10dc971ef5d8f
- SHA512 d158470ff4a61476c22b1aaf8b5cc0b46e4d3d6652b6a1f76d49adf2686b8351209f3e212c1bceadaef4496d9c6bb2434485b7f6cd7d4572f62363886aeab07b
- SSDEEP 1536:deeLXFaxK4SKCRlvnpk4qdzDTK7pFzEGXcVPTQvFLiFoD019w11rTujyIKN4Ah:de6XExwKeZqNNVPTQvFLQa019w11r8Q
- TLSH
  T1F8B39486CF759EDBC47C4A3DCDFB0915392852C56102A2BE8338BCB436663326AD75D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral6
- Target
  USBUTIL v2.2 rev1.0 EN/USBUtil v2.2 rev1.0_English.exe
- Size 1.2MB
- SHA256 b89175f78ac89288cd4dcd0d9cfeb1f9e9a9a255571b8447c9d9814fa1a571b7
- MD5 55af75d93cee31f9f70b5e803cb5a9d7
- SHA1 c696ee15dd3670adc6e4b715cf3cf9d70360735c
- SHA512 16e54a2f8f54e19977b6b815f220f1d9965a703cbfaae9b7798c500bc0ff3a8b721fa3b797d6c7928278fd0a035660f4186e846bf9e855189278a76c32363ef7
- SSDEEP 24576:BpMojfQseCuOZv0fqG4v+omCY1QkzJCAbo:BpMojo6dGiMek05
- TLSH
  T157558D16BF54A433C5539738591B03DE982ABE03BE28E44A77F93D4C8FB83427539296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  USBUTIL v2.2 rev1.0 EN/USBUtil v2.2 rev1.0_Spanish.exe
- Size 1.2MB
- SHA256 bc26534208b5f8f21fc7838ccba9f1649fe506172e09e95fb4430a90509c1dfa
- MD5 582bd887ef644b20df4ca0765e7ff6f2
- SHA1 8dd7af5707c125087cc8a1803ffac390ad2d0dab
- SHA512 7aedcc8c0cc69445eb3eca13c347f6a67d5e7eef070e657ec248fd1027db18df4043e85efc698371235027fac75ab0d56e8f10c6dffb9f1f029992bff1b043d0
- SSDEEP 24576:GpMojfQseCuOZv0fqG4v+omCY1Q7z5aI:GpMojo6dGiMe7B
- TLSH
  T179558C16BF54A833C5539738591B43DE982ABE03BE28E44A77F93D4C8FB83427439256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  USBUTIL v2.2 rev1.0 EN/usbutil.aso
- Size 171B
- SHA256 92c6ec278340f220ac8637ce23e4d2932f6f0be191f91956cde1beff3ea00830
- MD5 c4d606832b8501d65456cc3652dca456
- SHA1 7b2eebc08c2581a9a807d6b3bb89f4780a8d55d0
- SHA512 f8f938588adc85fce587647439a56e7db11392dd8908646ba1e83c7f9ecf9a96cdc51e1567d8f1a969b86d8707793013ace3e5cb8888fdfd84b2b322cd2ee2de
- TLSH
  T15FC08CC74D340C25E4B36FBB1C71330208A4E1163661EAAD12C4CECFA88C81207A5D38
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral9
- Target
  USBUTIL v2.2 rev1.0 EN/usbutil.dna
- Size 5.4MB
- SHA256 5f9101608719fb3f7c480b4357ea95669c47c24c9d2cee372e5df8b5922b1351
- MD5 d6cb32f085cdf3b16bc43a509e4b77a5
- SHA1 a3202b32ea5400ce3bbf5160cbb179e8ae17d0a1
- SHA512 3351a6bca763aa8839dccac908b355bd553596bd68e0615f47471e1b61f65183f419488ab4d071b98ed82e50657e57eb3efac2bcc14a7e556215160fce18fddf
- SSDEEP 24576:PYy7uEECpxKhSKB6KJqK5GK1SKlTKtKKlOK1CKhCKpuK9uKhGKZeKZWKd+KFXKB:l7rc1FVVJqB9FtFp5xN9S
- TLSH
  T10F46B346CFB55E9BC47D0A3CCEFB0A16782446C16207626E83347CB472AA3356BD76D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10
- Target
  USBUTIL v2.2 rev1.0 EN/usbutil.dni
- Size 2KB
- SHA256 69b85962ec09526f5b2f7e6c54e8bc4bd216fc059e6cf294b9122e0a6eac652c
- MD5 b2a0b50d68cf5e3dcd1ee717808482cd
- SHA1 8b962c3f3ea12f5e3479e92c45c9304fdc45f200
- SHA512 33585a731903486a504cfc602b1a3d8623e93c4afdcd50e26011892ebaff965d5d504e49328f2d848cbbc06713590fd3e7a7a14578cbfd05f6042f865c93ba45
- TLSH
  T1EB41E06D428F36B2A345039F164F3A53E5E491EAD82547D362B3D29044C5CC883D59EB
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11
- Target
  USBUTIL v2.2 rev1.0 EN/usbutil.ljs
- Size 33KB
- SHA256 2110c7225587ba95b0270dd32c1dfb1f862399507ed367a9ef84d889d3da747b
- MD5 baf6260c201c595c192445d3c477312a
- SHA1 eda4c0f797c0f1d2ee027d8502b3e505364007b7
- SHA512 042d84c39d1d34f927a140695067430b60005af34073a2c89387a00065908c8058fa70ee69dece0d32eae7a489338aad8a0ba830d3635f69796cc9c982f9ea28
- SSDEEP 768:3s/HKb2BoDITQVcIeYADGMg2+Qj3ozdmdXYQwEfTX9yQ7psj0MtsbvdSX:3s0cImUSOdmNYQwEfTXljgsbvdSX
- TLSH
  T101F26C37A584025784938387960665B5F439A881873B5B3F08DE96AD3BC1C6C63FB1BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral12
- Target
  USBUTIL v2.2 rev1.0 EN/usbutil.rcn
- Size 7KB
- SHA256 fe3d284df4f9419067a2256c5bacb4cda896fad9c30eaccfdee352382d0d028d
- MD5 6747db7c7f86bdb7d5ed3ede75936c73
- SHA1 eeb24567c47bc21447f19e17642948952220f879
- SHA512 746342482f0aa08ee78de21428eff7e09aeeb454e2c2c29d6e44ee4e4bf965bef23aa0cdef610e809e4340c704d15b0315ee8999383bfd32045341102ffcd6fe
- SSDEEP 192:2u++hQ0qDqNadSbRrd7Un83InmjPHLLg8pFA8NRwSuHNMB:2uA0I+RrlujwrU8fDNi5CB
- TLSH
  T1F2F19E4AB3F7DE365D605778400BE6ED65AA6D50C1D2F8D178824D1FAB068F48A4E804
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13