0173e21ce239d3b97d88c0d3e744b2b20a7099a0de3d88808e29b364c00ce63c

Sharing

Copy URL Twitter E-mail

General

Target
XrayUI-win-x64.zip
Size 27.0MB
Sample260706-b21f8ag14t
SHA256 0173e21ce239d3b97d88c0d3e744b2b20a7099a0de3d88808e29b364c00ce63c
MD5 d3a5320c2533806bb03e3556768d06fa
SHA1 522a10787bb8d36bc76b0afb7dd471692adb999d
SHA512 ce84ff297512375039ddd9fe0b7345ff72435d165927210a621d5133b877e2d1af7d58f873818b87bd20bb20bad57e6e42ba22df2e1f6abfa1c1f5f1caece4a8
SSDEEP 786432:TDspdy3vHb7gvvC7siJNNN9PewypeyV29OWWmC/J:TApk3v77gvdwPejeyV2Sh
TLSH
T1F45733FA9012CEB8C444D2F4EEB9DA44F4210F36959BC6216116DACBEC051C9CEE979F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  Assets/engine/wintun.dll
- Size 417KB
- SHA256 e5da8447dc2c320edc0fc52fa01885c103de8c118481f683643cacc3220dafce
- MD5 e861eb5789c50997d9476a6172d1c269
- SHA1 647eb6588b149efe2477fd192c8cab74d018d8ef
- SHA512 d8b49a6834c1ea5d73fee6979c59def18900c86d598ea900ab741ce71eefdaaadb4862afefa14e6cc093007eae5d4325857633549f1ade555baa0344b18e6112
- SSDEEP 6144:uNsLgQtz9nDZL4tFDjiaOE1DfsnyDQhWmnPIt:iggQh9nD2tFviW4/Qt
- TLSH
  T1E2947D8273E81C96E9F3CB3889638901EB3779544770CADF1261826DDE6B7D09E34B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Assets/engine/xray.exe
- Size 25.5MB
- SHA256 ab30cccec922428e29ffe7a489163f2e81527abe7b8bac3744e7433dd98841a4
- MD5 4108d00e276d5e82074434fc58aa787c
- SHA1 cd53ca6013d8c33bc9ef9f5e8e07bf08b16e7fe5
- SHA512 1ebc821f0e2da913a2d09f3e5985ee462a80700bcbdbba6769fa8974c9f9b1c96b4e2a08f945caea935246d0f48e3243415a8b8e23aa536b71845748f486bcf0
- SSDEEP 196608:Y68Y8DsDI9hkLcN5hNOAcAuCC+z1HcXLe7d4H:YjYg9TGAcAuCC+z18XLe7dm
- TLSH
  T1EA473943F9A514E4C5EDD034C6A691277FA27849473433DB2F60D620EF6AFE0AAB9710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Microsoft.Web.WebView2.Core.dll
- Size 775KB
- SHA256 17ccd9141c486d7a3689ed38d72d3bd8bb0e216b7990fcc76c132dc9102c6320
- MD5 e6fb2b085bc11e777318c6ddb2d934c2
- SHA1 0c6b40efe569cb911c64f874aa7683a9ce2c0aae
- SHA512 360d3e4853788abd357aaceb081354c5a07cb5df8a2ca21de04b7e86095b25563cfc0518407b696f1e7dd96c778ba863bfdd0745633accf2360d4f2b8a09a23b
- SSDEEP 12288:QAf6KkH0mTWQdfBOPNM7gCfU5fKivmTWIZn5pe+NFiqqiwc++ZJPj9llFQ8UoTfG:QAfLsOPsgC85yTWIhns
- TLSH
  T100F44A4AD6AD1185D439D838DA334909F972B8065360E7CF06A1C76E6F3BBF4963BB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Microsoft.Windows.ApplicationModel.Background.UniversalBGTask.dll
- Size 84KB
- SHA256 9b16c5d42ef55a4d91746f1eb1b39ba4d58b689f984b475867a18f7eefc8938f
- MD5 8a5a043f6874a2a1ec74d88af9c1da0d
- SHA1 39bb0022ff6bcb5badd9d4407408d3fb800c26e2
- SHA512 f6811a4402c61d5dcba115b2062c07dc81a78c7de7b2c66a65077183d7f2fa173bd87bb5c78f82675edbaa64450b3107a193d9f95f3b3cc17df62a949d948dad
- SSDEEP 1536:EaBp3ah/L9FX+e0tBZ4r+MQ0R4C0puqYTg4h9075ZzH9:EaBpKBXONBSK+R4Ciio7fr9
- TLSH
  T1B5835B86B2B841FAE43B907DC5D75A0AFB36B451572213DB0362932E1F27FC59E39280
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Microsoft.WindowsAppRuntime.Bootstrap.dll
- Size 384KB
- SHA256 2201517f3eeac2f810b4b14789b6b704ca723853f840f4a34bd7442614710ceb
- MD5 f110d3b981c2c531e96b870f754a4af1
- SHA1 558a6dbb8da3fa73d4f20a8593060d24b1cdad7e
- SHA512 e02d3cfb483822840ebefa34b5741f7d07c7adcfc63dfba00bee04b738de2e8b877fa5953485b0f21a9faebd6e3cb483f7232097bb346477d5b6bc9ff1b28746
- SSDEEP 6144:1As3AvP92f0fl0CmqX5V9ph0lhSMXlBXBWnbsQf:1As3AEsflnmqX53ph0lhSMXlibsU
- TLSH
  T1C3848D25FBE941EAF027D178D9B74B06FB33308D432156DB026981291F77BE6693A381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  WebView2Loader.dll
- Size 156KB
- SHA256 ae69309c5e356350ea28d6b71a900bc43ee7e3f7a457d80a1f82efe6c419cc08
- MD5 7e36757d54d02eb93bfc13f8e81a79a1
- SHA1 48c5f26555d696ef0806d9d136dae28b5ea294de
- SHA512 a3fca3f610a652b63326d021ed1a8551d3fde7780371955a7232b239833e120de9046138f58df64fd07ef3a9c4762ed2d768640e1ee674ee2c0d143784c71386
- SSDEEP 3072:S8Jjy7/ph9euiDNQ6A93jJBC9JGv6TSMEtJ6mj4UrAmx:6/NVZ6A93j/QEtJnrb
- TLSH
  T19FF35C5BB2E500BBE17BC278C5A34A15E772B8111760AAEF036447791F13BD0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  XrayUI-dev.exe
- Size 15.8MB
- SHA256 9eefa43e1d1e14c7463c02fa33226772829eb7bd0316fa61703892cf2b3faa49
- MD5 ce9ba2c4949f42bf5d34c912ac380923
- SHA1 3e280e998dde9a2e3ef95774176718e85f8f9a60
- SHA512 f031d593b5750b4ce72ecea8f49e33cd38549d9af8dad779c4f418be0b108e27eb8ac50cc2b8a53ce74d7fb7b42bb7810dbb16ea042392834b727376be80efb3
- SSDEEP 393216:fm6nomM7xI6/l/RME5nkRcn9APuIQiPTqGNnuQNM:7XMfy
- TLSH
  T127F67C4DA3900DE1E137DA74CE65C633CA70BC917A35A36F2194E20B1F736419F6A63A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7
- Target
  XrayUI.Updater.exe
- Size 227KB
- SHA256 48dd53532ed10b4e11d4f4a77171cf8ec7c009c75094694d3b9fdab84ae4bc00
- MD5 a0a8cbf66438273ca3ed5b993d8f5875
- SHA1 2e4324c6a091e0f5c07f8effe27de462f9783a15
- SHA512 53297adae43fbe3ba769f6ee523deb0cf470332ff3cdcf3e58cca0273e9a4d24003ce6ae95ba63ac221d2e56a2ad8ec4c13abcdc606ff2c018c88601cfb4935a
- SSDEEP 3072:e+ANcvd+tRAR3V2oDPHwcY2Dd6g3wXCO2sOEjq9CqT39nITz70jbCLQC:nANcF+A9V/PHw3TPEEMCqtwzj9
- TLSH
  T1B7344B217E455CB8D59AC03983468AA36A7274CA0B31E9FF06D541392F2EEF57F3CA14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8