mintsloader | c39afc3b2f4101b057cebfe6bda48535efe0a2e6caca13fe02e0c7fa237ea30c

Sharing

Copy URL Twitter E-mail

General

Target
update-mixed-fee80ded.zip
Size 6.7MB
Sample260710-petbaabt4j
SHA256 c39afc3b2f4101b057cebfe6bda48535efe0a2e6caca13fe02e0c7fa237ea30c
MD5 294883bd2d1cc58a6e705d69f1a3db93
SHA1 187dd00403508fa486fb6fed94ce0c7b9370df38
SHA512 f023424925fde00347f648fd52f4379d44c6367ff537f626be2419a3a7a9ba172fe24717c8c483471eb68a2e224305838d7019e2cac650130ecf2fd3fe04985a
SSDEEP 196608:U1ozKjIMptC5nx8UxzL6/WOnE/Fcrrx/8Li/:BujI0mnxjzLWWOy+1Z
TLSH
T16A6633C408989D7FCE57937D16D417621200FF8F6E47B1191066DB23A94FD806AB1AFB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  AccessibleMarshal.dll
- Size 228KB
- SHA256 7a18cb650b1d6e78fb4fcd7ad4fa1be2f209d92ee084554f10da9d98f777f993
- MD5 76ee180047fcbab2260ebfcc19a60c6a
- SHA1 79e82012c808e3ac7f2c387163f879aad31a8194
- SHA512 58b0e14c8dabddfd237f3b1efd059bd4edbfec814eb8ae82fea954ee3c97adb01fdfde6997abbefc108792cdaa2e1f8f5a65825a5b3d84869efbbf0bec933e3e
- SSDEEP 3072:nAIyIHjJQTRz0niJtsAICGzoRdThjqD2t6ldLO1xHxOqlbOehxQwNgnFPcRyG3:AIyJTRbIGThjqD2aNWQL0
- TLSH
  T196347C4B76A158BCD106D039930B9A7BB772B88A4730FDBF12E496302F56E512F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  firefoxupdate.dll
- Size 229KB
- SHA256 40a03d714c66d3c75c43d568e9c69ef2d4fd295215762c16bf82bf463926f1b2
- MD5 f7c7c01e0c304dcf982dce6250928fac
- SHA1 bf1b1618490acbcad6bc36988406d8c420cc7e6f
- SHA512 781cffb2520e578232cfde876c7f8dcf4c83ed4c41a4129ab1e0688a4f3f46c685c44dfa8e6d9e73f97816c3595ef83ac43cb81c8df026d0337834a43da215e2
- SSDEEP 3072:5xceGQYLn3ZnYUTqYtHZNOCGzoRXjAqSGtrn9NxHxOqlbOehj/g5Oswkpjej15s:56eG1RlO4jAqSGN9R/IOGg7
- TLSH
  T1EC348E4B72A558BCE106D078935B957BB672B88A4630FDBF12F496302F1BE511F2CB09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  freebl3.dll
- Size 228KB
- SHA256 d3bcae1fb460ebee79d0487b709f73ebcc449523bb9728b6666b6b62e22a907d
- MD5 87bf86dcfcd0cc8f8486c5cb4421ef72
- SHA1 3835ded18691a4caee7734b293bd6b27a44b5c62
- SHA512 16e2f3416e1e1935641243a9aee80ae0512d4afed1c445fb09efa6ee813d5a24b7b87f363f76d2312c91a47fb02317b167f3c4c88dbb8124b8258c227379c9e3
- SSDEEP 3072:x9XfQgvdSpp23C/tTTggCGzoRS7kqu2gN/8/pq5xHxOqlbOehqDwR7GT4N3XV:zXfWpUgZ7kqu2pMsD4
- TLSH
  T18B347E4B76A559BCD116C038A347D67BB672B8864230FDBF17E0A6302E17E512F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  gkcodecs.dll
- Size 228KB
- SHA256 b39a491e96425bd1f5ecc4479fb0efe4725692f8806b2dda9ffb216c334fa39d
- MD5 a13978cb01a83e6b5211ddc2a3ccae86
- SHA1 8e34d3f24758063d1380e8d54c772c76cb8da946
- SHA512 f334b6b33ff4c9e3e35b0d18fbb960954b3bac30478016e0bcc74eded112c36d1231849cc4df0a5e67eb6f8f5453290fcf6aa085496e5d2cc9fc849c39ddfed5
- SSDEEP 3072:P0cUSQ1fmnd4UXkwtdwZQCGzoRm/p7q22387sfqwxHxOqlbOehiwwAlnF/MnlMb:rUSPdGQl/p7q22Py/wIl
- TLSH
  T1B3347D4B72A559BCE106D038935BD67BBB72B8864230FDBF12E496302E17E511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  lgpllibs.dll
- Size 228KB
- SHA256 efb4a975d7aa62debaef032d542cbffdcd1cb2c4ddee39ca1ae8712cf3afc268
- MD5 c357f2aa13ecf6d8f9f9de207e84d3f3
- SHA1 9049f8050fd56d3f0da82940d84f78094da3c55f
- SHA512 28ca3b06544870461ac4c96e4492996f15de1b1e9d8c17b753950249c90f80584e29e4d1748d00c7a4c68a6886ce66c922a3515cbec8e662e2617cf4dfdf6f5b
- SSDEEP 3072:sAfZQe/c4XLlZXNft8F9/CGzoRkEBqW2RlMAeqSxHxOqlbOehiOwYOyHp4q3UerM:7fZ4SLy/PEBqW21PZOdVnZr
- TLSH
  T1C0347D4B76A5597CD14AD038930BD67BBA72B88A4230FDBF12F496302E16F511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  libEGL.dll
- Size 1.4MB
- SHA256 74df4d73ae2e06d23d48e6b483214743e0dbc521fb190e96f278ecdd45938ed2
- MD5 ca05c7fd09191ff23c2c1583a0b21258
- SHA1 c912f64c29404c1b7b8b188fba163ff01fb5509f
- SHA512 4ed829d5adae7f4197cde3b2c46098c4f45796f4d88b641431217d00cd82d61f07515b74750e2292ea4fc70c1298171a65e52529dba892d8aa587f1949e012ad
- SSDEEP 24576:OX5ei5ZpA9ZPCh1LIZ5VtURYfC58dGm2VIH06iy9FMmx:c5eSZmPCnUZ5VMseIU6isLx
- TLSH
  T18D658E43E6A181B8C05DE078D3579A3BFA71BC8DC93476BB1BE08B212E15F90971DB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  libGLESv2.dll
- Size 1.6MB
- SHA256 212ffc04072e2ef3ec7a97f347286522ddf0e89f4384b10e8b124d818177ccb2
- MD5 eb1c94c3fa2d18ef1ca9eb49ab11f712
- SHA1 d1076f85ba4c54b9e93bbb464d3aec8249033062
- SHA512 ad0bfa5f3cdff38db5a4f3f39e399b14f5fd814857b6e19a9bf48eb513b193d29da24546bbf717385908b6bf01dfb375b4ce2df0fd73f693a0ae0c1f855ee248
- SSDEEP 24576:RkEJz5XO3XcAp6THoXfOGs+fT+PaiYgXYdGmoVIH06iy9FMI/:2I5+8Ap8qfOGs+lgYAIU6isX
- TLSH
  T121758E07E6A580F8C099E0B893579A3FFB717C8EC934766B17E08B112E65F90970DB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  mozavcodec.dll
- Size 287KB
- SHA256 723d0104e7bcf2280e8367b1c487788756be62797f8593374a2697a49b93804b
- MD5 619a9f3384e25be230ad918b9533e015
- SHA1 c805c1257793ab36e15dac663d9a8c26e4af8da4
- SHA512 20d83e7ab78cf8e9ee324a0f0d020b304b70695ed26bc784288ee3368e7715d582620d07e6e05f15ff150a61971bf36521ed6bfe147554daf0f2fb1d1fdf0058
- SSDEEP 3072:q7yDF96npzgJoUwFDB8ddpvUdakHSGzoRZXzqhTRE+i/0xHxOqlbOehqdSGtmeOh:+yDF9GlDYsHeXzqhT6/jdSSO9mrmcFa
- TLSH
  T14B549E47B6A150BCD146D078931F957BBA32B88A4631BDBF13E4AA303E26F516F1CB05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  mozavutil.dll
- Size 231KB
- SHA256 88986a9d6bd2ba03aff27229ef8b5f6fffa48cd3631e7c9707e0579cfab50b55
- MD5 3d351c37cc1582e7c4a10acbc4fd38ca
- SHA1 e8060ec3c11bba5872b5cc1c3af3011cbbee16e1
- SHA512 8f5359355f413ad04df64856cb98ef33f5c23b1926f308dd3d0a4306f991693d8488b8318ec69c0b9df1cec72b5134659d7d5667a9a244934b03fcc974b94e17
- SSDEEP 3072:rEFog/CBTvJ8Cbn5EuBUSGzoRweRq4FPUZR1xHxOqlbOehvmAeKQ2Kt:rEF4GKfBUHeRq4FWRVm
- TLSH
  T141347C4B72A559FCD146D038930B967BA772B88A0231FDBF12E49A302F57E511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  mozglue.dll
- Size 558KB
- SHA256 a218975c399ca338a9bf6c98385aedc1c0f70e358ecbb60646961d7591747b03
- MD5 bdf0f34cd24edefa4de6215ecd007946
- SHA1 1c68bb00948fdcd5e367cdb0793e260ae5f802b6
- SHA512 af123a8ce5078e8c93367dd432d612560c2786b318b03cb81747a7e12255a6130055a8c33af897a752b5762243558856df43bb20b3d97be73809d6ee03e0a00e
- SSDEEP 12288:yg06PIUkebZ120e3U2QUf9t7DlO0VvlhlV5EiW6iI7V:y0PIU5120etnpTlhr5EiW6
- TLSH
  T196C46C07F2A291B8D05AD0798357A67BFB73B88A8131BA7F27D467313E54B50AB0D704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  mozinference.dll
- Size 244KB
- SHA256 d41c6497a31dc4c187fa3110d459bb4da985a5499d3512d115fed0f8f484b218
- MD5 46842b2f43e0c9ba8bafcecd03e923d0
- SHA1 4524ae1b04414a9d5116f0b416e7b9bc6d71112c
- SHA512 90b90cfc0a7e800cfd628324144d574d0ae89abc3625fc4d731633f1f03c3e3d8bb9be82caebd678455a38736f88538eaeb31a6a667f5eab6109a1991b839dc2
- SSDEEP 3072:JdrHBsSETdHoPNa9O9Luo8SGzoRi7Fq9m2KGvzWxHxOqlbOehD+wEbsTyz66hU:JdrH9Woi86o8x7Fq9mSzE+kTc
- TLSH
  T12D348D4BB2A554BCE145D038931BE67BF772B88A4631BDBF12E096302F16E512F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  mozwer.dll
- Size 229KB
- SHA256 fa37fe964539249c01bf55ba62067bac22db29d0c9e4162b3f6cdee33775eaf1
- MD5 37eb40f9ba6dc6a0d76a735202dd0e27
- SHA1 4ea301a8be24a4b4da783d31fa3a2fa743608560
- SHA512 036485980fe94eccbc2dd4ef5ce74dd726c8804776e25ccf17e4a3d39cfd08188db8693d0b0db61c1ae2a541dd03f0277f3c74bd1f95b565ccc7b0c37c49f263
- SSDEEP 3072:BpQwPqaBkgS6FS7ltvKBCGzoR05pqj2t2ku75xHxOqlbOehB8w3GpMNycLgzUvx:DQwMgSiBz5pqj2XWP8DIB
- TLSH
  T131347D4B76A558BCD106D038D31BD5BBBA72B88A4321FDBF12E496303E26E511F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  msvcp140.dll
- Size 540KB
- SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
- MD5 4e3fa9bd90ef020c14359639dc19312b
- SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
- SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
- SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
- TLSH
  T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  notificationserver.dll
- Size 242KB
- SHA256 4a5de7dabbd0776f622675f46f213ba99ce6eb08782a7cfc65c53c242e499252
- MD5 0e18c723dabcc769b63003a0eb079483
- SHA1 6790c6462eb56db0478826c866e350cba0bdfedc
- SHA512 5edfcd2825280c2ff076e9872978a80a1b41fe3c2e8d00e0dded386470dc7184f7df9bda0085daeea57aed05efad4a3186d7a9388e7df4c73c2a303e52b99848
- SSDEEP 3072:VHzICPEgR5YCk6kWIgoVeFTtkeSXpCGzoRTH8qiULrwVsxHxOqlbOehc2PH+bNJK:VTpPE36mgexpkH8qiUAV92/+NJ
- TLSH
  T1FD348D0776A154BCE116D038931BD57BBB76B88A5230BDBF12F4D6302E16E512F2CB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  nss3.dll
- Size 233KB
- SHA256 ba5464c9d8ec428ddcb99a8979ed49cf2782bad7a8f370c1ca1416a3ad3c3ddb
- MD5 497e3f5ff02c23fb1b19421e95103d1d
- SHA1 9a7c9fda9a3f0dae762227e7f6e7ec5e5471a8f5
- SHA512 8b80b8eededea7c24e82f3b652d63cb255a794643764637d63625099afd52f09ed4cfb2c9f26f7c42989904231e15e4a39679d1aafdaf6a348321aa8e0421922
- SSDEEP 3072:0pkRJUMNEytDhnvHdKT+tveHCGzoRgCTqP2h5wP63dxHxOqlbOeh0vw/K26bThrU:+kRnNVhfKHnCTqP2wWmvS
- TLSH
  T179349E4B72A559BCE106D038935BD57BB732B88A4230FDBF12E496342E1BE511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  plugin-container.exe
- Size 141KB
- SHA256 653a27b36c41fbb6ac9e7538b481e95b77ebc7eb4f83eb99b4838c81bff64dfa
- MD5 6935302137f3152317eb6a3b4a74f8c5
- SHA1 494e7a194ab5e7c6934c0154f6a2e48a001d199b
- SHA512 b2c987911aba4f77df7844a6612034fd8516ab7671527c918be013179a61c28082a9ecac69625c66e5a7611535dc180f3792302ce75760d4a3d2610dce1da138
- SSDEEP 3072:Xkxq4w6505dcKCB7xjLrWqQo6SY5bBL/zp2Z2x7tg:Xg9wzXCB7xjXWQ6SYhNLpy2lS
- TLSH
  T1FDE35A13FA5950FAD549C974DA824612DFB2B8860B30A7DF23944DA12FA5BE4BF3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

mintsloader loader suricata
- Family: MintsLoader
  MintsLoader is a multi-stage malware loader.
  loader mintsloader
- Suricata alert: MintsLoader Outbound C2 Communication
  Network activity triggered a Suricata alert
  suricata mintsloader
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral31
- Target
  softokn3.dll
- Size 238KB
- SHA256 d651749df701ad551bb8a7fca0c90be2d7a8c41c465b23b6d070f91290b17734
- MD5 2c21c5dbcfa603928531b0202369338e
- SHA1 dd0e20354225f69db210779f02c793c677073531
- SHA512 1c9c6e1c976f630ee9b460786f97bcc48191e5d6f3c46bd4d5ea32662d971642857a1fca0e3a64c123b6af46809c9510a3ba99bf52d692c29efb058140bc87a8
- SSDEEP 3072:Nu3XUjrj42R0RXF7um/tYqIMCGzoRcitbqN2+6q78vxHxOqlbOehhVwf8vZqVmNP:4XUvRa0jM/itbqN2OYRVD0
- TLSH
  T131348D0772A558BCE506C038935B957BB772B88B4630FDBF16E49A302F16E512F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: MintsLoader

Suricata alert: MintsLoader Outbound C2 Communication

Suspicious use of NtCreateUserProcessOtherParentProcess

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32