mintsloader | 97d491d810f4e67300adc2c3bd16747669278e003ffec3bf04f38f848a6aa6ff

Sharing

Copy URL Twitter E-mail

General

Target
update-mixed-5224d524.zip
Size 6.7MB
Sample260710-agajmaa17q
SHA256 97d491d810f4e67300adc2c3bd16747669278e003ffec3bf04f38f848a6aa6ff
MD5 ccd5866cbf1329078f5ede961b5c3f9d
SHA1 5aab61c5986e030bdb382f8aa86eac5a760932e9
SHA512 abd53ff546f8577e0b845e1799fe8a66ec01eb367a254551dc882ffae0a05ab9e179d1f3d7b2ac5c8ece853c3b574092acda533562a1ca68a96b4ba31b48f127
SSDEEP 196608:h1VeqsKjItptC5nGWRCJ0UxNYMxpcZDv5euSQ/8Liz:h1VeqnjIPmnGP7NdkZteu3Z
TLSH
T1086633DD986D253CCF5EAE3D01D430618380DFCF1FCA71A19534E6129A9D84A6DA2ED3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  AccessibleMarshal.dll
- Size 228KB
- SHA256 c6d7c68b40adfaca2204bd5a62d411d8d0b3f29c5d86141a36663ea266da00b8
- MD5 5f1398840861c185c839cf2aa0410db9
- SHA1 cfc40a4fb8d1c7eae7a15d0ceea68e6dbcb083e6
- SHA512 51ae52e407c7f76388b7fdd5900cec855a73ac399d5fcd4beb5b1638e1a043688b151dd9e2090e7c72b85f364352080a489f35d1023b996d603ef0c9d014a6b9
- SSDEEP 3072:tAIyIrjJQTRz0niJtsAICGzoRdThjqD2t6ldLO1xHxOqlbOehxQwNgnFPcRyu3:2IytTRbIGThjqD2aNWQL0
- TLSH
  T19B347C4B76A158BCD106D039930B9A7BB772B88A4730FDBF12E496302F56E512F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  firefoxupdate.dll
- Size 229KB
- SHA256 40a03d714c66d3c75c43d568e9c69ef2d4fd295215762c16bf82bf463926f1b2
- MD5 f7c7c01e0c304dcf982dce6250928fac
- SHA1 bf1b1618490acbcad6bc36988406d8c420cc7e6f
- SHA512 781cffb2520e578232cfde876c7f8dcf4c83ed4c41a4129ab1e0688a4f3f46c685c44dfa8e6d9e73f97816c3595ef83ac43cb81c8df026d0337834a43da215e2
- SSDEEP 3072:5xceGQYLn3ZnYUTqYtHZNOCGzoRXjAqSGtrn9NxHxOqlbOehj/g5Oswkpjej15s:56eG1RlO4jAqSGN9R/IOGg7
- TLSH
  T1EC348E4B72A558BCE106D078935B957BB672B88A4630FDBF12F496302F1BE511F2CB09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  freebl3.dll
- Size 228KB
- SHA256 d74512f6aaddb5217b79826f3d82f6b3126311b10470a0ba0e939c7d058603ce
- MD5 9c94730eff06bee8552cad8747a81a04
- SHA1 77d4dbf695978ce93f28fcbf38c923cf7bc39953
- SHA512 c6e42e35d903b44f9aa5238d3145001ae928a4202682cc35ea292448ba6310fe19c9faa530b0c6a7aad1866ec3ae022cecda1c0b6947c92c94e288f96d646dbb
- SSDEEP 3072:U9XfQgvdSpp23C/tTTggCGzoRS7kqu2gN/8/pq5xHxOqlbOehqDwR7GT4N3fV:WXfWpUgZ7kqu2pMsD4
- TLSH
  T12F347E4B76A559BCD116C038A347D67BB672B8864230FDBF17E0A6302E17E512F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  gkcodecs.dll
- Size 228KB
- SHA256 e6ebc8be78c026d0a48745a0ccccee52cb7b9c160ab3f851ef8b44ce3d0b4286
- MD5 5e2268709d726a517174703272d13d3d
- SHA1 0042ab5614be36d4090f5e0e8e768b8463c21251
- SHA512 5627f06441f12daf727bbeff4bc831041977243e871590c43694759bd87731b657350a59c2285c131880e68c5d7df396c57753d219b3917d03baaae5e2b34237
- SSDEEP 3072:50cUSQ1fmnd4UXkwtdwZQCGzoRm/p7q22387sfqwxHxOqlbOehiwwAlnF/MulMb:RUSPdGQl/p7q22Py/wBl
- TLSH
  T1C7347D4B72A559BCE106D038935BD67BBB72B8864230FDBF12E496302E17E511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  lgpllibs.dll
- Size 228KB
- SHA256 c4498a10c4426db900c473e7ba1c25284e6979a7d3413d8ae2fa2ff42b2fa5de
- MD5 4aa1fc7d7870b9734fcc22d866adcc8e
- SHA1 e6db6cd8e581cda724b73584016129656d732a29
- SHA512 c2bc914baa6ecb3b35ec084ab90625a727a2a5d7c75e860271a045dde9165434d551081fa33a6908aad2637d4257d4abf35251fb17048e746ff489ec763e4e33
- SSDEEP 3072:EAfZQe/c4XLlZXNft8F9/CGzoRkEBqW2RlMAeqSxHxOqlbOehiOwYOyHp4q3UErM:zfZ4SLy/PEBqW21PZOdVnTr
- TLSH
  T186347D4B76A5597CD14AD038930BD67BBA72B88A4230FDBF12F496302E16F511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  libEGL.dll
- Size 1.4MB
- SHA256 74df4d73ae2e06d23d48e6b483214743e0dbc521fb190e96f278ecdd45938ed2
- MD5 ca05c7fd09191ff23c2c1583a0b21258
- SHA1 c912f64c29404c1b7b8b188fba163ff01fb5509f
- SHA512 4ed829d5adae7f4197cde3b2c46098c4f45796f4d88b641431217d00cd82d61f07515b74750e2292ea4fc70c1298171a65e52529dba892d8aa587f1949e012ad
- SSDEEP 24576:OX5ei5ZpA9ZPCh1LIZ5VtURYfC58dGm2VIH06iy9FMmx:c5eSZmPCnUZ5VMseIU6isLx
- TLSH
  T18D658E43E6A181B8C05DE078D3579A3BFA71BC8DC93476BB1BE08B212E15F90971DB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  libGLESv2.dll
- Size 1.6MB
- SHA256 212ffc04072e2ef3ec7a97f347286522ddf0e89f4384b10e8b124d818177ccb2
- MD5 eb1c94c3fa2d18ef1ca9eb49ab11f712
- SHA1 d1076f85ba4c54b9e93bbb464d3aec8249033062
- SHA512 ad0bfa5f3cdff38db5a4f3f39e399b14f5fd814857b6e19a9bf48eb513b193d29da24546bbf717385908b6bf01dfb375b4ce2df0fd73f693a0ae0c1f855ee248
- SSDEEP 24576:RkEJz5XO3XcAp6THoXfOGs+fT+PaiYgXYdGmoVIH06iy9FMI/:2I5+8Ap8qfOGs+lgYAIU6isX
- TLSH
  T121758E07E6A580F8C099E0B893579A3FFB717C8EC934766B17E08B112E65F90970DB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  mozavcodec.dll
- Size 287KB
- SHA256 723d0104e7bcf2280e8367b1c487788756be62797f8593374a2697a49b93804b
- MD5 619a9f3384e25be230ad918b9533e015
- SHA1 c805c1257793ab36e15dac663d9a8c26e4af8da4
- SHA512 20d83e7ab78cf8e9ee324a0f0d020b304b70695ed26bc784288ee3368e7715d582620d07e6e05f15ff150a61971bf36521ed6bfe147554daf0f2fb1d1fdf0058
- SSDEEP 3072:q7yDF96npzgJoUwFDB8ddpvUdakHSGzoRZXzqhTRE+i/0xHxOqlbOehqdSGtmeOh:+yDF9GlDYsHeXzqhT6/jdSSO9mrmcFa
- TLSH
  T14B549E47B6A150BCD146D078931F957BBA32B88A4631BDBF13E4AA303E26F516F1CB05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  mozavutil.dll
- Size 231KB
- SHA256 88986a9d6bd2ba03aff27229ef8b5f6fffa48cd3631e7c9707e0579cfab50b55
- MD5 3d351c37cc1582e7c4a10acbc4fd38ca
- SHA1 e8060ec3c11bba5872b5cc1c3af3011cbbee16e1
- SHA512 8f5359355f413ad04df64856cb98ef33f5c23b1926f308dd3d0a4306f991693d8488b8318ec69c0b9df1cec72b5134659d7d5667a9a244934b03fcc974b94e17
- SSDEEP 3072:rEFog/CBTvJ8Cbn5EuBUSGzoRweRq4FPUZR1xHxOqlbOehvmAeKQ2Kt:rEF4GKfBUHeRq4FWRVm
- TLSH
  T141347C4B72A559FCD146D038930B967BA772B88A0231FDBF12E49A302F57E511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  mozglue.dll
- Size 558KB
- SHA256 975b5d9d7c08ff5401690d64a5dc18929e571b97fbca676749ecc9e6393754c1
- MD5 1d5f1d65bcacc23d679feb57bf23968f
- SHA1 83bfae576cfc476682ca8b4d2297d184ec794590
- SHA512 9ace4bb4bdc312b6d851652eefa11e55e9aa781d30ea3438e322eb9508f38fd28117c8c8fd969886a5d2a4f7c8ab160095f561f7416f551dfdd9657a1a2cbafb
- SSDEEP 12288:eg06PIUkeb9120e3U2QUf9t7DlO0VvlhlV5EiW6iI7V:e0PIUd120etnpTlhr5EiW6
- TLSH
  T156C46C07F2A291B8D05AD0798357A67BFB73B88A8131BA7F27D467313E54B50AB0D704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  mozinference.dll
- Size 244KB
- SHA256 7823ebf1552df170ead028192e422f925e23bbc1f599970a900277359cea9657
- MD5 3cd3051ebf295dcd4bade9408922fb9b
- SHA1 5053f6f9a87c844ceb1704030a56c22b4d9d64e8
- SHA512 b9bd4aa0b212d01ad9aa7b12bdcffde5aaca4c484e29be617cf0f3c9ebdd4cc8e4656872ffaee7ed66c544b020a2605b6f76f7ca7274bc0f8e976aae55d6ec23
- SSDEEP 3072:adrHBsSaTdHoPNa9O9Luo8SGzoRi7Fq9m2KGvzWxHxOqlbOehD+wEbsTyz6VhU:adrH9Eoi86o8x7Fq9mSzE+kTc
- TLSH
  T16D348D4BB2A554BCE145D038931BE67BF772B88A4631BDBF12E096302F16E512F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  mozwer.dll
- Size 229KB
- SHA256 d4a06c429447acf0d820e8de874ac23a5f6f3e53d9010576d83a5299d0a07ef6
- MD5 d70ded4c40adadfd4cbc0bae20be58ad
- SHA1 bd3768fd5329ef96d4deb2aa2ba660fc1cf290c3
- SHA512 e847e68a00e6a90d3eee65ebb4a0427f69a3023eeb5799a10dd1c36cce9f9d3b9f04e6160c9a2326b2a6dffad542d7a4469415253731a582d08cb02ff4ad358a
- SSDEEP 3072:5pQwPfaBkgS6FS7ltvKBCGzoR05pqj2t2ku75xHxOqlbOehB8w3GpMNycLgzpvx:7QwRgSiBz5pqj2XWP8DIw
- TLSH
  T12D347D4B76A558BCD106D038D31BD5BBBA72B88A4321FDBF12E496303E26E511F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  msvcp140.dll
- Size 540KB
- SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
- MD5 4e3fa9bd90ef020c14359639dc19312b
- SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
- SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
- SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
- TLSH
  T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  notificationserver.dll
- Size 242KB
- SHA256 8fbfdc56d52171f16be0012a64ed0f8a170f3a79786cd8018b5fa2752cbdf84d
- MD5 7d3a815413b34366aa383568b2a3df60
- SHA1 cd1aefad129e2bd49d207f84fa5549dda8f1e71d
- SHA512 13eb1134581a0cbd1428aaa2af35c7996dbd85764560669cc9a35ea08684ad9bd3fc682bb566fef9b4eff1969e044ae2b0b550cc9c11969365aadd7e762e427e
- SSDEEP 3072:RHzICPEgR5YCk6kWIgoVeFTtkeSXpCGzoRTH8qiULrwVsxHxOqlbOehc2PH+bNJt:RTpPE36mgexpkH8qiUAV92/GNJ
- TLSH
  T1B0348D0776A154BCE116D038931BD57BBB76B88A5230BDBF12F4D6302E16E512F2CB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  nss3.dll
- Size 233KB
- SHA256 c7852b5566cf96c9632590f165c35276175024552dd3fa7d50832119a81687ab
- MD5 5e420dd3a23093d018f0d036fc4424b3
- SHA1 861b6df2570edd7f7a81f81ded3ec7c8a69e124d
- SHA512 78bcc31c79b591f4f3b16a8bb32ef8fe3ee3369c39ca4588c7a09b778c90b52260e9984d410fe9914342819e3857b1de9cc8b3e62162eb7b8d6d812a82bc1585
- SSDEEP 3072:0pkRJUMNyytDhnvHdKT+tveHCGzoRgCTqP2h5wP63dxHxOqlbOeh0vw/K26bThDU:+kRnN3hfKHnCTqP2wWmva
- TLSH
  T178349E4B72A559BCE106D038935BD57BB732B88A4230FDBF12E496342E1BE511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  plugin-container.exe
- Size 141KB
- SHA256 653a27b36c41fbb6ac9e7538b481e95b77ebc7eb4f83eb99b4838c81bff64dfa
- MD5 6935302137f3152317eb6a3b4a74f8c5
- SHA1 494e7a194ab5e7c6934c0154f6a2e48a001d199b
- SHA512 b2c987911aba4f77df7844a6612034fd8516ab7671527c918be013179a61c28082a9ecac69625c66e5a7611535dc180f3792302ce75760d4a3d2610dce1da138
- SSDEEP 3072:Xkxq4w6505dcKCB7xjLrWqQo6SY5bBL/zp2Z2x7tg:Xg9wzXCB7xjXWQ6SYhNLpy2lS
- TLSH
  T1FDE35A13FA5950FAD549C974DA824612DFB2B8860B30A7DF23944DA12FA5BE4BF3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

mintsloader loader suricata
- Family: MintsLoader
  MintsLoader is a multi-stage malware loader.
  loader mintsloader
- Suricata alert: MintsLoader Outbound C2 Communication
  Network activity triggered a Suricata alert
  suricata mintsloader
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral31
- Target
  softokn3.dll
- Size 238KB
- SHA256 c21ef212bcbb33ba180906bc3c0e49a30a60976b784705078ed402f1f7ddf3eb
- MD5 2acc74c4eddf6e285b323bfdf0ea7a86
- SHA1 cdc69463159b66492666989aca492368876152ef
- SHA512 39debf6c4b4ae20d081ebfb49103fc1b4a716e126520b2d5e213dde81c35a54d00e29fa4f6d712c0a8cf7457ce6fba73a6de6b3e5536db152aa0476c3b506c84
- SSDEEP 3072:Hu3XUjrj42R0RXF7um/tYqIMCGzoRcitbqN2+6q78vxHxOqlbOehhVwf8vZqV4NP:KXUvRa0jM/itbqN2OYRVD0
- TLSH
  T107348D0772A558BCE506C038935B957BB772B88B4630FDBF16E49A302F16E512F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: MintsLoader

Suricata alert: MintsLoader Outbound C2 Communication

Suspicious use of NtCreateUserProcessOtherParentProcess

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32