mintsloader | 0b454d10005df0fbe3be6963d95956ae87b32345f8c487feb13b2fa380817184

Sharing

Copy URL Twitter E-mail

General

Target
_0b454d10005df0fbe3be6963d95956ae87b32345f8c487feb13b2fa380817184.zip
Size 6.7MB
Sample260710-trd5cae17w
SHA256 0b454d10005df0fbe3be6963d95956ae87b32345f8c487feb13b2fa380817184
MD5 3bd6a40cc6579453c05d925f6b0b2895
SHA1 5f4ef87a4fe793b5dce840d452b6bee734f90eab
SHA512 6fa9b8cdef9485eddfaf31c6ad1df7a9412ea2747a0df0922a7b6f613d917fe72f835b944e9dac14f5041b74098dc9c332b282ca435156c419e25fdbab376afa
SSDEEP 196608:ImDKjIkptC5nCJCHUxrlWOnD+toeTDDiWss5iX:b+jIcmnCDrlWOatzTDTssI
TLSH
T15F6633D8053DAC6ECA1F5BBC15A832785280DB471FC722511473AA029EDD881EEFA7D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  AccessibleMarshal.dll
- Size 228KB
- SHA256 622e9a704ea0046143cf03db33be814d14bdd1f7a8cae8be049845d9cafc6202
- MD5 c5c06576399b58548c67c6e0aac3a623
- SHA1 317f4fc804ab4b71f07084ade9aad88b92923cba
- SHA512 e7bf59670e7e0f06b5b0a1a46a9fab78c21f00e2191ccbeb945469299ca3c3d07f8142da0ae68ad7e4de074ef81f989c655364cbb88c53a5daea07e3edbbc532
- SSDEEP 3072:mAIyIZjJQTRz0niJtsAICGzoRdThjqD2t6ldLO1xHxOqlbOehxQwNgnFPcRyr3:ZIyvTRbIGThjqD2aNWQL0
- TLSH
  T1FA347C4B76A158BCD106D039930B9A7BB772B88A4730FDBF12E496302F56E512F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  firefoxupdate.dll
- Size 229KB
- SHA256 40a03d714c66d3c75c43d568e9c69ef2d4fd295215762c16bf82bf463926f1b2
- MD5 f7c7c01e0c304dcf982dce6250928fac
- SHA1 bf1b1618490acbcad6bc36988406d8c420cc7e6f
- SHA512 781cffb2520e578232cfde876c7f8dcf4c83ed4c41a4129ab1e0688a4f3f46c685c44dfa8e6d9e73f97816c3595ef83ac43cb81c8df026d0337834a43da215e2
- SSDEEP 3072:5xceGQYLn3ZnYUTqYtHZNOCGzoRXjAqSGtrn9NxHxOqlbOehj/g5Oswkpjej15s:56eG1RlO4jAqSGN9R/IOGg7
- TLSH
  T1EC348E4B72A558BCE106D078935B957BB672B88A4630FDBF12F496302F1BE511F2CB09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  freebl3.dll
- Size 228KB
- SHA256 4f658d0047a03ed6246a5daf1794614a3759420936c118423fdc8647fc0d331c
- MD5 9d10fddbe7082ae6abcb09704814dd73
- SHA1 7c4fa7ffb22fea0e914ad1167c7ad90a95582a2f
- SHA512 88d479db2ccb38fd3462e1d5a3ea977927bb96bf2816f8d851f804fc2ebf65eef6655d68f775d03e916bece850349a9f48334c1fede8b06f3f35e368e3fa6c92
- SSDEEP 3072:z9XfQgvdSpp23C/tTTggCGzoRS7kqu2gN/8/pq5xHxOqlbOehqDwR7GT4N3gV:pXfWpUgZ7kqu2pMsD4
- TLSH
  T1ED347E4B76A559BCD116C038A347D67BB672B8864230FDBF17E0A6302E17E512F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  gkcodecs.dll
- Size 228KB
- SHA256 2b5123a2cd7c178bcb79e062591f5798c4228605e5e39cf17a307d1787891a1a
- MD5 1bd5e027ebe917fb57f6346123affacf
- SHA1 055869e08da5c2a6266a76bb020e383a6d3f081a
- SHA512 34f5ffb0f996c88f13df0326326bcb53f08e8b4c91df34ac7c744d5fddff41d405039718029723dc9e0822d9583c9af0c8409ff0452103a57615cd49971f887b
- SSDEEP 3072:y0cUSQ1fmnd4UXkwtdwZQCGzoRm/p7q22387sfqwxHxOqlbOehiwwAlnF/MGlMb:QUSPdGQl/p7q22Py/wVl
- TLSH
  T142347D4B72A559BCE106D038935BD67BBB72B8864230FDBF12E496302E17E511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  lgpllibs.dll
- Size 228KB
- SHA256 c1dad56fbad6fcf65e351faa6255d985fb08783535ca0d70bfcde25c2ce4b872
- MD5 35510b191614b4557254074848be03e9
- SHA1 10d10b3acd23e4f3df5a72e334a4c7b08162a493
- SHA512 d5d22c3db4718bce5e8d02010748c5da10ad04fb70c534137394764c4a34e97a454f58a586970feebf73bd50eaaff81293edd98e306575fdb383e8f0cbbbfceb
- SSDEEP 3072:zAfZQe/c4XLlZXNft8F9/CGzoRkEBqW2RlMAeqSxHxOqlbOehiOwYOyHp4q3UHrM:EfZ4SLy/PEBqW21PZOdVnAr
- TLSH
  T160347D4B76A5597CD14AD038930BD67BBA72B88A4230FDBF12F496302E16F511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  libEGL.dll
- Size 1.4MB
- SHA256 74df4d73ae2e06d23d48e6b483214743e0dbc521fb190e96f278ecdd45938ed2
- MD5 ca05c7fd09191ff23c2c1583a0b21258
- SHA1 c912f64c29404c1b7b8b188fba163ff01fb5509f
- SHA512 4ed829d5adae7f4197cde3b2c46098c4f45796f4d88b641431217d00cd82d61f07515b74750e2292ea4fc70c1298171a65e52529dba892d8aa587f1949e012ad
- SSDEEP 24576:OX5ei5ZpA9ZPCh1LIZ5VtURYfC58dGm2VIH06iy9FMmx:c5eSZmPCnUZ5VMseIU6isLx
- TLSH
  T18D658E43E6A181B8C05DE078D3579A3BFA71BC8DC93476BB1BE08B212E15F90971DB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  libGLESv2.dll
- Size 1.6MB
- SHA256 212ffc04072e2ef3ec7a97f347286522ddf0e89f4384b10e8b124d818177ccb2
- MD5 eb1c94c3fa2d18ef1ca9eb49ab11f712
- SHA1 d1076f85ba4c54b9e93bbb464d3aec8249033062
- SHA512 ad0bfa5f3cdff38db5a4f3f39e399b14f5fd814857b6e19a9bf48eb513b193d29da24546bbf717385908b6bf01dfb375b4ce2df0fd73f693a0ae0c1f855ee248
- SSDEEP 24576:RkEJz5XO3XcAp6THoXfOGs+fT+PaiYgXYdGmoVIH06iy9FMI/:2I5+8Ap8qfOGs+lgYAIU6isX
- TLSH
  T121758E07E6A580F8C099E0B893579A3FFB717C8EC934766B17E08B112E65F90970DB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  mozavcodec.dll
- Size 287KB
- SHA256 723d0104e7bcf2280e8367b1c487788756be62797f8593374a2697a49b93804b
- MD5 619a9f3384e25be230ad918b9533e015
- SHA1 c805c1257793ab36e15dac663d9a8c26e4af8da4
- SHA512 20d83e7ab78cf8e9ee324a0f0d020b304b70695ed26bc784288ee3368e7715d582620d07e6e05f15ff150a61971bf36521ed6bfe147554daf0f2fb1d1fdf0058
- SSDEEP 3072:q7yDF96npzgJoUwFDB8ddpvUdakHSGzoRZXzqhTRE+i/0xHxOqlbOehqdSGtmeOh:+yDF9GlDYsHeXzqhT6/jdSSO9mrmcFa
- TLSH
  T14B549E47B6A150BCD146D078931F957BBA32B88A4631BDBF13E4AA303E26F516F1CB05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  mozavutil.dll
- Size 231KB
- SHA256 88986a9d6bd2ba03aff27229ef8b5f6fffa48cd3631e7c9707e0579cfab50b55
- MD5 3d351c37cc1582e7c4a10acbc4fd38ca
- SHA1 e8060ec3c11bba5872b5cc1c3af3011cbbee16e1
- SHA512 8f5359355f413ad04df64856cb98ef33f5c23b1926f308dd3d0a4306f991693d8488b8318ec69c0b9df1cec72b5134659d7d5667a9a244934b03fcc974b94e17
- SSDEEP 3072:rEFog/CBTvJ8Cbn5EuBUSGzoRweRq4FPUZR1xHxOqlbOehvmAeKQ2Kt:rEF4GKfBUHeRq4FWRVm
- TLSH
  T141347C4B72A559FCD146D038930B967BA772B88A0231FDBF12E49A302F57E511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  mozglue.dll
- Size 558KB
- SHA256 495b05833f83e1b9b2b66b6d0cb4b1ba30792ab6896564a79fd873de40b2c40f
- MD5 82ba801b25fb975cb01235566cd942b4
- SHA1 11716cd7ca2939488e07509a7cccc519214f80cb
- SHA512 3db25ca0b5fedba96746815a60cc6844f17532dadfc1b245fbf85d2c0d99de5396d59ce52693fd1eabdced3b1f94a742f7ffba58063ca5c89332b35bf0164fbe
- SSDEEP 12288:dg06PIUkeby120e3U2QUf9t7DlO0VvlhlV5EiW6iI7V:d0PIUS120etnpTlhr5EiW6
- TLSH
  T138C46C07F2A291B8D05AD0798357A67BFB73B88A8131BA7F27D467313E54B50AB0D704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  mozinference.dll
- Size 244KB
- SHA256 6482a036494636167952d881936d983988382dc824f82c59620f839b39286f0f
- MD5 ff82febfa2def11bfbe0bbabf29f144c
- SHA1 eac6060b70bb9e6a89ae8f7401a6963ddfa7a1fa
- SHA512 35bb38e3a3c5d3b090f5ededa2438b62b9f394f39ec619440369ca5b5ee3d7a81a1dea005ee23ad806691eb714b001f01ba819d5b94883c503590650e8aa98f2
- SSDEEP 3072:ZdrHBsSuTdHoPNa9O9Luo8SGzoRi7Fq9m2KGvzWxHxOqlbOehD+wEbsTyz6QhU:ZdrH9goi86o8x7Fq9mSzE+kTc
- TLSH
  T118348D4BB2A554BCE145D038931BE67BF772B88A4631BDBF12E096302F16E512F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  mozwer.dll
- Size 229KB
- SHA256 b584b811ab4653610b7f4114091e9c9a4bad9495f6d1d68bde00f7c64be1b379
- MD5 10397be7e4bedb66d7ed757b9309ef5c
- SHA1 60d70bf8b2f9c59e44c2dc39694e48ae99744dac
- SHA512 5fe895ba8912ffa930e3b553452659107f0b3d112757a2f0173fc7bf16ec97391279a992ff947a92f2e44ee44658a3b50644f9910bb199b1dd517e646d70f020
- SSDEEP 3072:tpQwPHaBkgS6FS7ltvKBCGzoR05pqj2t2ku75xHxOqlbOehB8w3GpMNycLgzJvx:3QwJgSiBz5pqj2XWP8DIU
- TLSH
  T1F4347D4B76A558BCD106D038D31BD5BBBA72B8864321FDBF12E496303E26E511F1CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  msvcp140.dll
- Size 540KB
- SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
- MD5 4e3fa9bd90ef020c14359639dc19312b
- SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
- SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
- SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
- TLSH
  T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  notificationserver.dll
- Size 242KB
- SHA256 4f0c45dc34fe2772c1673cca1f0cbb79ed71bf38742ea9b2b928b6843b5751b2
- MD5 11594f86fa9e76005011a52fa257147a
- SHA1 76cf3e49b41790aa712c3563184f7a8e0e6e69d7
- SHA512 53bc7e73eb0e32df7bddd30e59d1df89f322fd59cca0719eccce9b0b3c26a7b6721130fc912f4a815bf45f8b5e25d0b0df03182ab39ae06fa1a5dbdf6f43cf4e
- SSDEEP 3072:7HzICPEgR5YCk6kWIgoVeFTtkeSXpCGzoRTH8qiULrwVsxHxOqlbOehc2PH+LNJo:7TpPE36mgexpkH8qiUAV92/ONJ
- TLSH
  T1B8348D0776A154BCE116D038931BD57BBB76B88A5230BDBF12F4D6302E16E512F2CB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  nss3.dll
- Size 233KB
- SHA256 a677cdcefdcccf3c87f489d8b7343927cc2a408d22445310f26d6d54e9b8a8ca
- MD5 aa80747597fa15c515e1de0bd4e29a62
- SHA1 2dad3ab985cc972226327259342ba65720bce538
- SHA512 f5d99e0beaabc27ebb39bcf3a8104c7e9b2cba96784ac8013576e66fd20b2a3613381c02666383e8ffb3a79850b4733a9ccd3be7e8e470d8d88b98b253b2ecd3
- SSDEEP 3072:5pkRJUMNBytDhnvHdKT+tveHCGzoRgCTqP2h5wP63dxHxOqlbOeh0vw/K26bThiU:XkRnN4hfKHnCTqP2wWmvZ
- TLSH
  T151349E4B72A559BCE106D038935BD57BB732B88A4230FDBF12E496342E1BE511F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  plugin-container.exe
- Size 141KB
- SHA256 653a27b36c41fbb6ac9e7538b481e95b77ebc7eb4f83eb99b4838c81bff64dfa
- MD5 6935302137f3152317eb6a3b4a74f8c5
- SHA1 494e7a194ab5e7c6934c0154f6a2e48a001d199b
- SHA512 b2c987911aba4f77df7844a6612034fd8516ab7671527c918be013179a61c28082a9ecac69625c66e5a7611535dc180f3792302ce75760d4a3d2610dce1da138
- SSDEEP 3072:Xkxq4w6505dcKCB7xjLrWqQo6SY5bBL/zp2Z2x7tg:Xg9wzXCB7xjXWQ6SYhNLpy2lS
- TLSH
  T1FDE35A13FA5950FAD549C974DA824612DFB2B8860B30A7DF23944DA12FA5BE4BF3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

mintsloader loader suricata
- Family: MintsLoader
  MintsLoader is a multi-stage malware loader.
  loader mintsloader
- Suricata alert: MintsLoader Outbound C2 Communication
  Network activity triggered a Suricata alert
  suricata mintsloader
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral31
- Target
  softokn3.dll
- Size 238KB
- SHA256 f9184fa6faec1e1aa7a8b41e90a5aec318e562d839d500304001d22735d6b58a
- MD5 48cc2d1dfeca7b72b764db74c754c5b4
- SHA1 b40c8d871ed02b00c49eb54005cb58b7cce729bd
- SHA512 9cbb388e7971dbdf2502690e1536500ad229e1460f628126b65cff630a2f0797777d6e2f7bb28e6f071178c66f1939f7e0ff51a17532715807b005d69ee65f39
- SSDEEP 3072:Du3XUjrj42R0RXF7um/tYqIMCGzoRcitbqN2+6q78vxHxOqlbOehhVwf8vZqVSNP:OXUvRa0jM/itbqN2OYRVD0
- TLSH
  T1A5349D0772A558BCE506C038935B957BB772B88B4630FDBF16E49A302F16E512F2CB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: MintsLoader

Suricata alert: MintsLoader Outbound C2 Communication

Suspicious use of NtCreateUserProcessOtherParentProcess

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32