d2333588812c402a220f5ee4f4b74427184e01934f162b996e9d7a9cfbc1c22c

Sharing

Copy URL Twitter E-mail

General

Target
download-2256179-tru-components-relaiskarte-baustein-5-vdc.zip
Size 3.1MB
Sample260706-pel7zaey41
SHA256 d2333588812c402a220f5ee4f4b74427184e01934f162b996e9d7a9cfbc1c22c
MD5 4295bb9b3108afe98baf37ce088bbbcc
SHA1 20acdb4bb4182f879cbc3e37a334ae5a42f9e1bf
SHA512 8e6565e1cabcab983f012f41dbfa5ebec45c4b89e51434f541ae35ade0e54be76d996696f4f9e14616bb93155bb6770621cd4069ac516b2eb30716838ad68bdc
SSDEEP 98304:BjhaOZTZSRvrsfY74Sfs4pw3Qz069qmo+s:lEOZYWEZp0Qz59t3s
TLSH
T1F9E5333CF911AE17C762E27D3E400AA3CE74C6DAD35D29C5F234F207886B7B6950619A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  USB 4x Relay Board Software/393905_V1_0713_01_m_Software_D_GB.pdf
- Size 888KB
- SHA256 4ec94ea146356c142bece8c49a2fd76b468980a862a5d1ea5229503416401021
- MD5 30f26b492db73daed59eccf744e18b09
- SHA1 8cd66a0c11ebd517a699f9c485e965322e671408
- SHA512 81bdbc28c1d56ff019b68116f64541bc9c8fd6d6e65a5587adc3ecf0e4443cb336eece8554cf382ecc809a834fba5daf3d6e1db3d7f13bc415e503daa6c8fe04
- SSDEEP 12288:+hBEjeXT1A5UMDgSYdk8YsDiQaaRYLZh8cB9tqzdCCv/8jnTOaYG5e8p+Ke8/2a:+hKej1UdDgxqs2QVR6kcB9tqzYD1b0O
- TLSH
  T10C150274F5DED948AF0F9419649E3C7E1B1DB6DE12C8646A0C418E47778AE323BC306A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  USB 4x Relay Board Software/393905_manual V2_0613_01_m.pdf
- Size 271KB
- SHA256 4e208dc0a91f7882528019dc3178c822a65a97e7ccda0ded3719b66acbfe044a
- MD5 6f9ee819c1d3d5e86c8a399d125eb193
- SHA1 2efe611bd2eccb7b4296b95fbc0637c945788c6c
- SHA512 e43609a871400b842456817dd7fb32770630ffea88c2bb2166e1aaa808deae5ceb7c25c3059799ac2e1e31fbce88a4334132f7336d75a91a009ba37b4089ec22
- SSDEEP 6144:JLm/yySLipmYmldl2TZblcSF5/ZYCOx80iwW9nr+sN+9U15kXWagxoi6/:4qySewV2HcsYCC88W9nrVowjs
- TLSH
  T14644D08C8947E8CD93B35BC6E719A9ED414AB39382C814B371DC8B430B62EDE655DC93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  USB 4x Relay Board Software/CP210xRuntime.dll
- Size 51KB
- SHA256 8c673a8e9b8224f936925edeb9ce5251c1a839b2b1562dc15adafe0cb292c0c9
- MD5 aa11a73725b2ed64713e8497c391723f
- SHA1 5261b5b3bfa78802868d585f8721c5b001805a56
- SHA512 f34090c5f008f2e18e55210cf4c52aeabac087a8c896249ddb17d6d741e03d5e2a27a0cf08163034e5d2c2cdfccbbce60db39b5f8086a2611381e37a5c90c673
- SSDEEP 768:14P9YFYra3VbboHNPxFho4kkMiEDNnmuhmx3ZJP2OPKgL:1KYFZotpbhk/mxJJbh
- TLSH
  T147333A10B2908872E5A76E34A4B496115E3E7D42ABF0C1CB7FBD01699F713C0AA79377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  USB 4x Relay Board Software/Conrad USB 4xRelay Board.exe
- Size 343KB
- SHA256 21b6f88be74c7ef821307d678e90646ce42e3e522352cb425161ef9d1f8470a1
- MD5 c609fbca8b9c0e2c6168a809badefb23
- SHA1 2a2364dae4087063405c43a4facc2ac3723a5d16
- SHA512 8be15741d392b0f630365fec6697d8c8077dc6120797d8aed6b03dd1b7c134568ee70a47f2aeadedbbb122384dd77ed1985b21beb86eb6efde39e338f1f34092
- SSDEEP 6144:QzzzzpzA8LpDDDAJIvIvZDeaPJEaMNbfjHvqzX4SPCzzzzpzA8LpDDCy:Cz9LcufjHvqJAzFLQy
- TLSH
  T1C574B0643AF1CA85F02B073734536258D3A06ED3B659DBFEBE27ED8AC5252825B01173
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery spyware trojan
behavioral7 behavioral8
- Target
  USB 4x Relaycard Trayapp/CP210xRuntime.dll
- Size 51KB
- SHA256 fb87f52c217cb284dbe6e4e9eaae30bedbb7fe5f770656ef97830cec84c3dd28
- MD5 e878d8f91151b15671dfdda34fb63f6e
- SHA1 e62f865620ec206613c3a98457b973e72131cd12
- SHA512 e6e14b6ac75d85f532c6ba56a0526123bce4caffab04ad48ec7150e3d16711129f47690d18938d7919cf6be0045b4033f8707fef1ae68596e8749e28db41c5b3
- SSDEEP 768:14V9YFYra3VbboHNPxFho4kkMiEDNnmuhmx3ZJP2OPKgc:1QYFZotpbhk/mxJJbe
- TLSH
  T19F332A10B2908872E5A76E34A4B492115E3E7D42ABF0C1CB7FBD41699F713C0AA79377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  USB 4x Relaycard Trayapp/USB Relaycard Tray.exe
- Size 407KB
- SHA256 0cde39fc7cb72cddc47395a675605d20732501126302fa8be9e43db3338b47c9
- MD5 6f69c28dc9ffbb2f2afcf2586501e17a
- SHA1 f0be5c7114f85c171348c71d0b70d5090ca67d1e
- SHA512 cd6da4551a8615253a8356c561003d31d055e7d1d07eeb392340b8daea4175dff6166e39f0cac2feb7e5108ef39dde57883b04c87779c2bf5897fd25d7034e19
- SSDEEP 6144:DzzzzpzA8LpDDIzzzzpzA8LpDDtRLXZy0hzzzzpzA8LpDDl:1z9LEz9LlzFLH
- TLSH
  T1DD94A0643AF1C886F00306737453A2A8D2206FE739989BFEED57FE8AC5542D62B05177
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery spyware trojan
behavioral11 behavioral12
- Target
  USB 4x Relaycard-Setup.exe
- Size 1.1MB
- SHA256 63d49b3a4863b6376acc66e937480fc5d6b0e5bad8d143d7c9ba3c05e7f4a768
- MD5 aec1c8f857d40084193e62ba77d210c9
- SHA1 3805d76c9434adc549541adef181fafeb156aaf0
- SHA512 07378b36d2f517792108dd78fabfaf25fb6ee2013a32222df152e19356b0681264b55749faeea72ae834199175417efcbb39e9e5dccc9fe0a74dd9b55f6b1eb8
- SSDEEP 24576:mRnjibtriuqJkLOwKcwBHE/bCcTxt9d/b:mtObZPqJwTw9E/bht9d/b
- TLSH
  T186353308D571791AC761E1781FE43CB38AB2F632FB2F1EE6A359335A4D52442D4082EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  USB Relaycard TrayApp SRC V1.01/TrayApp/CP2104_Control.vb
- Size 5KB
- SHA256 30db9b6d9c50aa2eca473ee922881f6f64ae5e9910c7b35ffc89218e77d30c25
- MD5 e418eb0c1182dc14a9a03efaaebc3952
- SHA1 1e12e7b6b1383d944cef2eef6ac629ad5fffd966
- SHA512 d11b6842cbda755b9f059b1349fe8565f74595ed999cf957cfdeb4416e0a2e928ed3c8001862feb89e6daf1f469337cb33ab22ac9527931665962a3fb9d6fa9b
- SSDEEP 96:+3nCtrMRxr8hGs+/USQNshFkt7qo5e2FvQNkZshFktD+B9cid3goGwqeErdQm3kX:mCtmxTsPshF6mGeHAshF6SbcidQn6WO9
- TLSH
  T14CC175A6290755788ABB0515AC6FE04BEE6233132B5819F4F08C91D88FB44DCDA377F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  USB Relaycard TrayApp SRC V1.01/TrayApp/Main.vb
- Size 6KB
- SHA256 bf8b33db56128def31e961d489f95730d497cde7a2e77ed7daf2becf84b51d63
- MD5 b56dd431e154f13b61c44e7a1c0e5843
- SHA1 f2ebbdd76102075530f6e9b9912fd1c70ce8ddac
- SHA512 93e703ca8263a4db578f2f9fd4f252078a09a7d9b68816e3d9537cf88643d7b9111d2120e73ced9e365b30bf79ff17a1f69920b31f7729a45e534ba4b706c348
- SSDEEP 192:O4O5k2/PRolZxFoc/WoFyFTNq/7Ko/M/4/w/oa35u82/Hpnx:HlhI1Nwa3snx
- TLSH
  T1CDD1F0277C0710B057B5A5D4ED89E45FEF9C182B4A2D54A4F08C20C59FB17E8E1BA3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  USB Relaycard TrayApp SRC V1.01/TrayApp/My Project/Resources.Designer.vb
- Size 3KB
- SHA256 5402f9ca0804acf90e228ac9561ce57ca02ab07fd246a76cba5f68d227f99ba4
- MD5 fabc41d44730d8f1ce1e0742da9a6252
- SHA1 cd1a381f6f9f335e047339dfc23a4b472e36f8ac
- SHA512 cb98fc3c94fc529a3b1f4722a4938fc9e68653aaad350901b4d13b36d7f3fd00b8587028e0e204ed1def3a38c1eaa6fc2913ca900acaf3840d9d91986b602597
- TLSH
  T1C961DDF31F8E84391432EE471905F452CA2542A7C128BCAAF9DD41D68FF638643BE972
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  USB Relaycard TrayApp SRC V1.01/TrayApp/My Project/Resources.resx
- Size 6KB
- SHA256 1d4febf53e8adb8a6f061359ae166d388da7175d67e7eb2a2fc2f4b3d759b178
- MD5 29f5a3d69154efe8aa2171a34d59d5c1
- SHA1 18a545e6d839eb1a771ec7d4e9e61c800231b8ec
- SHA512 b39a5335ae0425e93cbbf53d94995cb3e77c0b338a872ae734938216fdd61c4a24c88db3e0d30fca6867164ca8df90bea19c2c960f208b59a1d5c6a39da63536
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuF8829n:KjrbLPD9sLvIzSvKgIqUyahF8f9vwCl
- TLSH
  T161D13245B1C1DD260FB3482DE6526984F7A8823F02356C54B4DC661F9F73885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  USB Relaycard TrayApp SRC V1.01/TrayApp/My Project/Settings.Designer.vb
- Size 2KB
- SHA256 a9c896e8124ac3a53c85b72e8d979c8bd47436905878ce5bea8caa0306f23572
- MD5 a24fc3472c7ddbe511108f766d7a313b
- SHA1 0bfb9cbe24a66e8ae237877fc299fa6865663fc5
- SHA512 72b2b9dadcd18372f404c008135ab709b380a34807c4d876b1289c26dfbb5624b9d2ebc7e02482d32ce56916d54d576cae4ac287a913236744bdaadc5203873e
- TLSH
  T1F451FDBE2F49A17D0971DF98DB0AB553CEB001A78A1E78B0748C21C5CF3568057BE670
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  USB Relaycard TrayApp SRC V1.01/TrayApp/PopupForm.vb
- Size 4KB
- SHA256 147a5c291ba356d5f0606ad3aaf3a9a06ac4127b8f46d33b62609c3ecd000f5c
- MD5 73e0f7cf758bd3092ec09c67fd2304f6
- SHA1 812e827f9a6af6a43986ee51c1bbd55fce1d4f28
- SHA512 70a4f480a9c0a95fc5ad7f482c97fa500496683e375f5ad5adce1b4c693fad4f5f755f4b21001beed20f238ec0349c40153b38a37850b7df35c50d55c9fa6e33
- SSDEEP 96:yGZNwZx7CN+/P4ho4TLFoKTd0/CC7mTd0/CC7HTd0/CC7oTd0/CC7YaSEwke32nb:yCQCN+/P424T56/L/C/J/YaSEwke32nb
- TLSH
  T1B1A1AA27B76D106A0D3BCD0D8D47C08BEB6A34B3C4046E5179EF04A12FB5A6D7294B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  USB_4X_Relais-Released V1.1/USB_4X_RELAIS_Software/USB_4X_RELAIS_DEMO/CP210xRuntime.dll
- Size 60KB
- SHA256 f2eb3dec5e406ce8c72927e0f0fdea44ecb06918898edddcbe81efd7f175e869
- MD5 b220da6c3aa6936a9150e2435620e938
- SHA1 71e6ba1a82d0f7787833f478c4708d7ae5d4b28d
- SHA512 3fe058a361394cd386c04f90f0a7f78b9729a064cb5218ec0342e1c11bc2129bbc085c793459b2d6adf008fbef131fc3ade63b603fddccb04045ee63524cbf3c
- SSDEEP 768:67B+k615ugUAb2Xqf9aCaBYpjGxJqtBvvo7ww:EBd6fuPAa1fABH8w
- TLSH
  T171535C14385384B3E08A0575C1C64BC55FFE7C4336E2A06FEFB9155D5DA128862BBBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  USB_4X_Relais-Released V1.1/USB_4X_RELAIS_Software/USB_4X_RELAIS_DEMO/Main.resx
- Size 190KB
- SHA256 b6dae2c52a9607840a98d5c266145a3e02513d17137c0f389e4685337b5db7c9
- MD5 36805d9d099256f8bf42fe9122b263e0
- SHA1 d64563a754b093e4b29adcf2bf748fb962107450
- SHA512 0f3cf26ee6268405a2461c0aa373db76299229216b643eac8f6682e4e07abd9037ce70ab55113726ea886e9dcbe9ba2232a748ffc5e03eaa57b6235d60b561d4
- SSDEEP 1536:Kj2v6kZpEsNy5HoMf08dOzkVl67Dd+A/dxJI40esByCWs3dpz4bQIrHd:Kj2j4sg5HKgh6HMYxi40esZ4syd
- TLSH
  T14C14FBB1665A15CF3B3827C4A6843A30ED96D5A3095DD83EB0CD95A89F37CD3BA8CD04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  USB_4X_Relais-Released V1.1/USB_4X_RELAIS_Software/USB_4X_RELAIS_DEMO/Main.vb
- Size 40KB
- SHA256 c34e1228ddd4fca16310cd4154f64220b7ea9ffeefdb8405a668ebedb87a1148
- MD5 3cc2b6d1054e0b74000dfb98d9eb2a03
- SHA1 7786cdeae0947035464e4ec6ff23b8efbb540ee2
- SHA512 434b6d620e9f4c1af455cdeefa203220f7de0b7185328ea6b5454c2ab92d77b1aece26d104c878fea10119ffa4cf1a92b9294ef63a003b11dc37b71c7724ff97
- SSDEEP 768:ltYV26hgyXhuy3cWuc+pIqlIMJd0jDj9hp8t0p8tgqEPSMr4EMr4gqEP40Z:ltw5CC4hWZ+pIWIMJGT9hp8t0p8tgqEQ
- TLSH
  T1F1034376B84B127086F5942CDC59E4DBEEA01B5347192AF0F08D50899FB438CD2E67BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Loads dropped DLL

Checks installed software on the system

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32