0b27ee17336c981354646138f2846e6625a15f3e53d9370a50bec55a57cf3131

Sharing

Copy URL Twitter E-mail

General

Target
STND3.zip
Size 15.8MB
Sample260705-b9bstsgt81
SHA256 0b27ee17336c981354646138f2846e6625a15f3e53d9370a50bec55a57cf3131
MD5 b6f35082298741d21b57ca1c9e18b04c
SHA1 a59e681359c7700bad8e434a2abeb0ad6c3ef8ea
SHA512 6d2dc22058de86ea1ce67fbd4b184c1e69088d6593ebdff8e318df6a5e3330a8f6ed6836cc659b6be0d2c531b0d03675ec1ca21884ee7029d1f0d0bda29dee3b
SSDEEP 393216:3G7o0SW4VQ/eR3StMdf+EkRXKBU2EGkSnJVqKWX+mGH/hEnn7:3GNR4VxCy3kRYUhz2JVxWXla/q7
TLSH
T110F633F0D235F6A0DCDBB1B7B569008138154C81EF3A987FBA4BA57A0D7787811EAD12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  STND3.zip
- Size 15.8MB
- SHA256 0b27ee17336c981354646138f2846e6625a15f3e53d9370a50bec55a57cf3131
- MD5 b6f35082298741d21b57ca1c9e18b04c
- SHA1 a59e681359c7700bad8e434a2abeb0ad6c3ef8ea
- SHA512 6d2dc22058de86ea1ce67fbd4b184c1e69088d6593ebdff8e318df6a5e3330a8f6ed6836cc659b6be0d2c531b0d03675ec1ca21884ee7029d1f0d0bda29dee3b
- SSDEEP 393216:3G7o0SW4VQ/eR3StMdf+EkRXKBU2EGkSnJVqKWX+mGH/hEnn7:3GNR4VxCy3kRYUhz2JVxWXla/q7
- TLSH
  T110F633F0D235F6A0DCDBB1B7B569008138154C81EF3A987FBA4BA57A0D7787811EAD12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  STND3/Standable Full Body Estimation/Standable.exe
- Size 21.1MB
- SHA256 0c110562c0c9202e194d5980fe239376de80771e3a44e4f36131af3f3598feeb
- MD5 a5850639d09e60d36f31f70a4b533286
- SHA1 af18a2a3ce01040139622104368b4c8f33cf4e58
- SHA512 60789e0a7d71454614ff0c8b6ca1bf457a78afb397350580f66152dae63c739f8165d62438294e205fdcdd260760ba319266ff430949a10cd77752b73e6d789b
- SSDEEP 393216:OMeky9CiPLWu1YioNN/PALHaYcqFWdzP:gky9CizWNioNNA6rqM9
- TLSH
  T1F9279C8356593C8BC1656BBC5481517CF1CED82DABAAD3F59DCBFC1A50874820C82FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  STND3/Standable Full Body Estimation/bin/win64/driver_standable.dll
- Size 1.1MB
- SHA256 fc3512657777f181f1908ee544f0d26b8e84e7e6721f6c9fbc7ddb94f0ec10fe
- MD5 c8033bf1285c0b21518021cb58c3bd43
- SHA1 336c63c9558e05a9fd295cfd89d2078fba615c4b
- SHA512 de43a44fc520846405008afb12d6aa0933a8fd3f08eedc976a59bbb6c55748bd557ee1b9ce8c39e0cd708c790586a94ef8bbc0f76141209dcd38af414afcc4b6
- SSDEEP 24576:z2foqH3m0IB0AJjEL2MkSEzzEGlLoh2kBZCA6w+auNVmKdd:Cw2QNJjhMkSvhreN
- TLSH
  T106458E57729501ECD57BE178866BA51BE231300503308EEF47E08DA62F6BBE16A7FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  STND3/Standable Full Body Estimation/openvr_api.dll
- Size 817KB
- SHA256 e61701f75930b4c47615d17f5901ca62edf1a948f5ea804d4cbbdc94ad2e6e2e
- MD5 54eb6a56af2f4d200deb231c68e4992b
- SHA1 e56f5bff92c13f0f6ef54a65b7d267394fb53acb
- SHA512 a643436ad25606fa22f875fb17f0ccfee9b14e5972d28e3c288f2ac1dc22b3fd9ef4ac23073d4492f981e1b41d6596d6e9cfe6f2385ba4ddef53081211e42c3d
- SSDEEP 12288:hFYe5MciNJpY1Vz3Jo+w60MnHEdiQ60FClVojGA0qh+O:hee5McSpSJPwYnXzGa2h+O
- TLSH
  T1B3058D497BA880BAE467D136C5978646F7F2B4461B30978F03A0037E6F677A15E3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8