General
- Target 7cb66bed16a0790145ebdaddeaedbfdeb5150be423b78a57fb11039c53667f39
- Size 14.5MB
- Sample260706-r2laasgt6s
- SHA256 7cb66bed16a0790145ebdaddeaedbfdeb5150be423b78a57fb11039c53667f39
Score
8/10
Malware Config
Targets
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 caf64a4e9449220ba618a9aa2ae4ed3774c5d0f193bda44be22676c27ae0ec95
Score3/10 -
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 20e642707ef82852bcf153254cb94b629b93ee89a8e8a03f838eef6cbb493319
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt5Core.dll
- Size 5.1MB
- SHA256 0ded0e1cdb33b58ccb8fa20837ebfa9d17a9737bceb078d0d16f3ef4ac349c5d
Score3/10 -
- Target Qt5Gui.dll
- Size 5.7MB
- SHA256 55b26b1236a79a6985dc9b6114dd227f5dff06d6932223dda02d9ed95968b779
Score3/10 -
- Target Qt5Network.dll
- Size 1.0MB
- SHA256 c9a7571426bb7d0f0939dc4d39d22329373fbd0320708ec6b99c0f516ff77d78
Score3/10 -
- Target Qt5OpenGL.dll
- Size 263KB
- SHA256 bd556ec4b575e00839d41d99fbc0390ee4368bc5b2d9caeebf48d92dbe84831c
Score3/10 -
- Target Qt5PrintSupport.dll
- Size 260KB
- SHA256 b39d58dee6c977ea0313a02f3345059ff2374cb46e1d7697782811c2968c4318
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt5Widgets.dll
- Size 4.3MB
- SHA256 baa679fbb6b375ea4f9a2c536e8cc750cdf25946379dced876d2a855ddaa838c
Score3/10 -
- Target bzz.exe
- Size 14KB
- SHA256 c9ddd9e5b51bb335ed7e463f7f354c24ea7227fbd4c93787007c868834b4159f
Score3/10 -
- Target c44.exe
- Size 27KB
- SHA256 a3587fe3a26e2b0a8795a0baa828b6f18398de875e4bb51fd902fa9e593b8814
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cjb2.exe
- Size 38KB
- SHA256 a0cd8bf7ed5dec36368c1c94bc4b231fe1ad6abba6b4d76082cb558af7ff09a9
Score3/10 -
- Target cpaldjvu.exe
- Size 28KB
- SHA256 6a3ffd18054889cc66ce298307a65e925713be3a2a79d53f9ba7d507d494fd7a
Score3/10 -
- Target csepdjvu.exe
- Size 48KB
- SHA256 7d44e34a9faf3eaec3762e3b8d7f5fbb4f5dcf516d04e9073c1a337492361de0
Score3/10 -
- Target ddjvu.exe
- Size 78KB
- SHA256 5a3dba5d3630ea8947ddbc78fc470468cec1fe0b05d9ddd5957ccf00cf1f58bb
Score3/10 -
- Target djview.exe
- Size 1002KB
- SHA256 c61c5cb37d3e378ae5aa237fcf52e614ab84ac43e0ac06fdb19ea99dd3eb347a
Score3/10
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
3/10
behavioral1
Score
3/10
behavioral2
Score
3/10
behavioral3
Score
3/10
behavioral4
Score
8/10
behavioral5
Score
3/10
behavioral6
Score
8/10
behavioral7
Score
3/10
behavioral8
Score
3/10
behavioral9
Score
3/10
behavioral10
Score
3/10
behavioral11
Score
3/10
behavioral12
Score
3/10
behavioral13
Score
3/10
behavioral14
Score
3/10
behavioral15
Score
3/10
behavioral16
Score
8/10
behavioral17
Score
3/10
behavioral18
Score
3/10
behavioral19
Score
3/10
behavioral20
Score
3/10
behavioral21
Score
3/10
behavioral22
Score
8/10
behavioral23
Score
3/10
behavioral24
Score
3/10
behavioral25
Score
3/10
behavioral26
Score
3/10
behavioral27
Score
3/10
behavioral28
Score
3/10
behavioral29
Score
3/10
behavioral30
Score
3/10
behavioral31
Score
3/10
behavioral32
Score
3/10