fb7b342fe8fdc0883a6422e26f127379c94765851788cb016ab39bebb229a3dd

Sharing

Copy URL Twitter E-mail

General

Target
STND3.7z
Size 9.5MB
Sample260705-bz3tkabz3r
SHA256 fb7b342fe8fdc0883a6422e26f127379c94765851788cb016ab39bebb229a3dd
MD5 9d6dc627bc97759a00562ad8677f76e3
SHA1 a1937204e7ccc0fa0e204f86ddff947b3682b455
SHA512 afb6526ef3305aeeb885db293eb0549e6eefe6f74c483180fbdcf4e28d35c55762a0afa513eb8de36b5b662017c688258e9eecc35a539730e739947b25d252ac
SSDEEP 196608:4AUvZ4wLyejVgLQ3upMOz2pFs7Q9oK3SQcLKdFqlkgVFgvt/3k:4AUvZFyOSQ+pM2ZU9oKCQcl5F+c
TLSH
T186A6339105A7846AB6E5FD14EBC36532F3DF63410EAAB0790505BD69B0FB0C8F96C68C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  STND3.7z
- Size 9.5MB
- SHA256 fb7b342fe8fdc0883a6422e26f127379c94765851788cb016ab39bebb229a3dd
- MD5 9d6dc627bc97759a00562ad8677f76e3
- SHA1 a1937204e7ccc0fa0e204f86ddff947b3682b455
- SHA512 afb6526ef3305aeeb885db293eb0549e6eefe6f74c483180fbdcf4e28d35c55762a0afa513eb8de36b5b662017c688258e9eecc35a539730e739947b25d252ac
- SSDEEP 196608:4AUvZ4wLyejVgLQ3upMOz2pFs7Q9oK3SQcLKdFqlkgVFgvt/3k:4AUvZFyOSQ+pM2ZU9oKCQcl5F+c
- TLSH
  T186A6339105A7846AB6E5FD14EBC36532F3DF63410EAAB0790505BD69B0FB0C8F96C68C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/IMU/sfbeTxtr.png
- Size 15KB
- SHA256 0e47a1c629eedab86c081e20cb57710cbb83a28d03b95cc63ac2f23d841013d0
- MD5 d016c4477e0c0f622e365f1a6bb1b44c
- SHA1 6bc04318c5588d194bc64a6cb602d6f7b838e003
- SHA512 f075d3e06008f1580ca2e1ca28060da59a1bdfe5fb845ae3014364a250dfc0bf6efcaa481283ba81b1d93e3af8b5d84b4f20041f28c0ae97434d3da2394b7fdf
- SSDEEP 384:5c5JgptAFcknnqlHdxvmU6tte0V/Xvcc23eJm:5oJkUck0HjIeafz2OJm
- TLSH
  T18B627E05CAB64873397509412863056B89EB4BB274DCFC0A36FD22295FC7F728D3AC96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Chest/Chest.mtl
- Size 251B
- SHA256 2dfe7018b76bdd9b1891c79cbd60598a2fdf4c20f6bf74d4960711d9a8c9e019
- MD5 051a0af0dc25355bf6d72b4b35b512bf
- SHA1 b9a133b8f6851bcf8152d79a37fcd3635f0e9d9c
- SHA512 a69f8afdf3bef800307d80098daebe18ffed20d316eaed598dd3a599bd0d23127ba487f5c9977696d454e06c815473eaa20afba6022cb9d9fd18130111bcd1b8
- TLSH
  T1DDD0A9F10805688AF062EE18F4AB3B3CC1CE702F9DDCE0C01AE5D790E862824A1092A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Chest/Chest.obj
- Size 82KB
- SHA256 56f9dd6ce213128433d7c2c4fac4f18a4fde88565752566a4362db378b391f2e
- MD5 2d6b417635e507c668ec228d243f4f71
- SHA1 27d307ff787c67539d5279d5f01406923d2718ad
- SHA512 cc7def26985aa6960417d6257d5ce39559f855042bf095e10abf8793a57bbda4df3796f055ce624fbd8f215f114a1d86142afc26bf972edc65c0b8898df99523
- SSDEEP 768:zuFqumWUautSnvWJe5rseSFX5K1Iu/isNfs3hM0btCJVBzrCw8:WmWUM9qGzrCw8
- TLSH
  T1A88322F0779511A1FABE95A4382D1E9ADAC337663FF1B44C07B48DD0D63E68A2F81049
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral7 behavioral8
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Elbow/Elbow.mtl
- Size 251B
- SHA256 2dfe7018b76bdd9b1891c79cbd60598a2fdf4c20f6bf74d4960711d9a8c9e019
- MD5 051a0af0dc25355bf6d72b4b35b512bf
- SHA1 b9a133b8f6851bcf8152d79a37fcd3635f0e9d9c
- SHA512 a69f8afdf3bef800307d80098daebe18ffed20d316eaed598dd3a599bd0d23127ba487f5c9977696d454e06c815473eaa20afba6022cb9d9fd18130111bcd1b8
- TLSH
  T1DDD0A9F10805688AF062EE18F4AB3B3CC1CE702F9DDCE0C01AE5D790E862824A1092A4
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Elbow/Elbow.obj
- Size 77KB
- SHA256 cea7ac2713bbc69354fa8876434797ef9f07093946f77bb88e76344f2eac7007
- MD5 03f22e30cbdc6ef4af32834e1cca507f
- SHA1 7e831eadabd8817d6df0691ee6f931455b456c5e
- SHA512 357501f0193e44f45ab9100c0aa5a43dc50566310fe723451ebe4ffa5e83de73792225e205409a4521f472426856d85784c4fff5ed2f1cb496da9d3cb9adf8d5
- SSDEEP 768:kjW7pnBckxjPeGSZwfzXKRaevDM/FCuEDvafPZwi6i4oKEtum3Aq6/QredSlVwni:kjWUGde1YvcYAB/QreS3
- TLSH
  T1807310F843D4A275B67DA9780C3B5E5BE6D33A762FE0A84C8EE41D91D13E7C80B91844
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral11 behavioral12
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Foot/Foot.mtl
- Size 251B
- SHA256 2dfe7018b76bdd9b1891c79cbd60598a2fdf4c20f6bf74d4960711d9a8c9e019
- MD5 051a0af0dc25355bf6d72b4b35b512bf
- SHA1 b9a133b8f6851bcf8152d79a37fcd3635f0e9d9c
- SHA512 a69f8afdf3bef800307d80098daebe18ffed20d316eaed598dd3a599bd0d23127ba487f5c9977696d454e06c815473eaa20afba6022cb9d9fd18130111bcd1b8
- TLSH
  T1DDD0A9F10805688AF062EE18F4AB3B3CC1CE702F9DDCE0C01AE5D790E862824A1092A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Foot/Foot.obj
- Size 102KB
- SHA256 dcc78bfe767958ca7c5f419ee6f95ea7ba5daadafa2db68f845e720efa44346e
- MD5 49f1fc837bf037d96a1f3a9723420be1
- SHA1 6fcdd60af6470923f9981e830747de2947a8fef9
- SHA512 eb872477e89aa6b85ceb57222e69d10c0cbe93439d5278ecee359a104f720ec79a1a40edf8d96374c4378e05b454e2bc99d9768a362721155cb7819437a21a67
- SSDEEP 1536:/iOWpC/DbWpTjiFERPdbyrUOt9d8u4E/0lkQkz52:72p0af
- TLSH
  T16EA332F473945391E97CE87C7D3A8EA7E693267A2FE064480BB40D1FC63E6681F95084
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral15 behavioral16
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Hips/Hips.mtl
- Size 251B
- SHA256 2dfe7018b76bdd9b1891c79cbd60598a2fdf4c20f6bf74d4960711d9a8c9e019
- MD5 051a0af0dc25355bf6d72b4b35b512bf
- SHA1 b9a133b8f6851bcf8152d79a37fcd3635f0e9d9c
- SHA512 a69f8afdf3bef800307d80098daebe18ffed20d316eaed598dd3a599bd0d23127ba487f5c9977696d454e06c815473eaa20afba6022cb9d9fd18130111bcd1b8
- TLSH
  T1DDD0A9F10805688AF062EE18F4AB3B3CC1CE702F9DDCE0C01AE5D790E862824A1092A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Hips/Hips.obj
- Size 106KB
- SHA256 02a04eb4524738c07da42032b2a19690ab94d840691246c4a66ad547f8cb16e7
- MD5 66f44db05939b7efe490b9313ba3f6be
- SHA1 f6ef9b503e64eff6c13246a907874f1022f7008f
- SHA512 955027be0b37e41168ea8c301a814b6c05c8a314048c0ae2591ed6b8a843c5fcae511b65f6ba40ffc5141e5879b231c85db277b3757b229aab133c8815a866c0
- SSDEEP 1536:BWZ0wjWWYv3zW9v1h3VyY3eXd2O/+w3CbeT1oOSPhe2uP/6:qhWWYv3zW9v1j
- TLSH
  T16CB373E563E46395E93EA5A8783E1AF6DEC33A623FE0944C06F05C41C13FA9D1F95488
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Knee/Knee.mtl
- Size 251B
- SHA256 2dfe7018b76bdd9b1891c79cbd60598a2fdf4c20f6bf74d4960711d9a8c9e019
- MD5 051a0af0dc25355bf6d72b4b35b512bf
- SHA1 b9a133b8f6851bcf8152d79a37fcd3635f0e9d9c
- SHA512 a69f8afdf3bef800307d80098daebe18ffed20d316eaed598dd3a599bd0d23127ba487f5c9977696d454e06c815473eaa20afba6022cb9d9fd18130111bcd1b8
- TLSH
  T1DDD0A9F10805688AF062EE18F4AB3B3CC1CE702F9DDCE0C01AE5D790E862824A1092A4
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/Knee/Knee.obj
- Size 77KB
- SHA256 c9f9d40dfaa222a020e4edf4f77fe481e5786b23dc946bee9b0cc740c786356f
- MD5 76a3d07db459d88ef363fc37a81978af
- SHA1 e12e85971d06247c9c39f43014a8027c395eeebe
- SHA512 ba6b905eb848d3f366032ec1aec7e7626ff8a20e9aeb11e6763d7221a5877d6ed130b8a6a6a018dfb3bf5022e78c03fade80dfe8f729b00a9f65e187072e9025
- SSDEEP 768:ujsHkZSMZWTHn3eKU3oO98wMXLlhzQRaevDM/FCuEDvafPZwi6i4oKEtW/Kgb9Vh:ujsSCLl21Yvw9wfDJw5
- TLSH
  T15F7320E847E4A2B1F67EA978483A5F9BD6C33A753FE0A44C4EA00DD5E13E7C91B90444
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral23 behavioral24
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/Positional/sfbeTxtr.png
- Size 11KB
- SHA256 ee161ba63c36fe9a111c0a84180bedaf200d7dc372f547b6eb634d415733fe50
- MD5 7b5cd9de41704044a04dc86c5431c713
- SHA1 88e74db8473cbc2e52e624340de4483f42346276
- SHA512 35b6fc95d80bfb5fb04e9683a24aa110624a0ad0896f3e42028120bba0a9a88c2008c9c80a40ea657a9fa0cc009e317aef81c912303ba19def4fc5d7fab4c072
- SSDEEP 192:qkvzB8agXx9qnID6FIzXzDdbyQSmZ8x0cO2RMtmW7m/bk1hGttY0l4exmG9LmG9z:5vtFgXydIf1yQkxf2tmWS/bk1sfQqmqd
- TLSH
  T12C32B817EAC76433B145C672B06919D3C629DC621C8ACA6D76DF248E836BFB0DCB1D81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/SixDOF/Chest/Chest.mtl
- Size 251B
- SHA256 2dfe7018b76bdd9b1891c79cbd60598a2fdf4c20f6bf74d4960711d9a8c9e019
- MD5 051a0af0dc25355bf6d72b4b35b512bf
- SHA1 b9a133b8f6851bcf8152d79a37fcd3635f0e9d9c
- SHA512 a69f8afdf3bef800307d80098daebe18ffed20d316eaed598dd3a599bd0d23127ba487f5c9977696d454e06c815473eaa20afba6022cb9d9fd18130111bcd1b8
- TLSH
  T1DDD0A9F10805688AF062EE18F4AB3B3CC1CE702F9DDCE0C01AE5D790E862824A1092A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/SixDOF/Chest/Chest.obj
- Size 82KB
- SHA256 56f9dd6ce213128433d7c2c4fac4f18a4fde88565752566a4362db378b391f2e
- MD5 2d6b417635e507c668ec228d243f4f71
- SHA1 27d307ff787c67539d5279d5f01406923d2718ad
- SHA512 cc7def26985aa6960417d6257d5ce39559f855042bf095e10abf8793a57bbda4df3796f055ce624fbd8f215f114a1d86142afc26bf972edc65c0b8898df99523
- SSDEEP 768:zuFqumWUautSnvWJe5rseSFX5K1Iu/isNfs3hM0btCJVBzrCw8:WmWUM9qGzrCw8
- TLSH
  T1A88322F0779511A1FABE95A4382D1E9ADAC337663FF1B44C07B48DD0D63E68A2F81049
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  Standable Full Body Estimation/resources/rendermodels/Standard/SixDOF/Elbow/Elbow.mtl
- Size 251B
- SHA256 2dfe7018b76bdd9b1891c79cbd60598a2fdf4c20f6bf74d4960711d9a8c9e019
- MD5 051a0af0dc25355bf6d72b4b35b512bf
- SHA1 b9a133b8f6851bcf8152d79a37fcd3635f0e9d9c
- SHA512 a69f8afdf3bef800307d80098daebe18ffed20d316eaed598dd3a599bd0d23127ba487f5c9977696d454e06c815473eaa20afba6022cb9d9fd18130111bcd1b8
- TLSH
  T1DDD0A9F10805688AF062EE18F4AB3B3CC1CE702F9DDCE0C01AE5D790E862824A1092A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Checks computer location settings

Enumerates connected drives

Drops file in System32 directory

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Checks computer location settings

Drops file in System32 directory

Boot or Logon Autostart Execution: Active Setup

Checks computer location settings

Enumerates connected drives

Drops file in System32 directory

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Checks computer location settings

Drops file in System32 directory

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32