General

  • Target
    playit.exe
  • Size 31.5MB
  • Sample260711-gymnvae141
  • SHA256 2d660eedac61814dfbae5f95c2d0a200a58e9769d6386ccc0e80a59f7d8c9470
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      playit.exe
    • Size 31.5MB
    • SHA256 2d660eedac61814dfbae5f95c2d0a200a58e9769d6386ccc0e80a59f7d8c9470
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/System.dll
    • Size 10KB
    • SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      D3Dcompiler_47.dll
    • Size 3.3MB
    • SHA256 efbdbbcd0d954f8fdc53467de5d89ad525e4e4a9cfff8a15d07c6fdb350c407f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PLAYit.exe
    • Size 174KB
    • SHA256 891f92136eac91dc3501fb6d83f7878b330bf1d511574ca5048f98380bdfa218
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      Qt5Core.dll
    • Size 4.6MB
    • SHA256 23fcd971ba4f32e5ffb60e3603bb145f7094fef360392caabc42d95b5d418f8e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5Gui.dll
    • Size 4.7MB
    • SHA256 e6005d3498d0e500b2b666554040309df20a5eebc941909ec3ef3fd1e3ac8f62
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5Network.dll
    • Size 944KB
    • SHA256 c406b7bc74107fb8419da7e2a8c67e47a331d5a54baca94257bade86ce061e24
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5Svg.dll
    • Size 264KB
    • SHA256 d8b65260e9accf0c33ad8b5bbfdbbea0678a00d481e2b0a9ed2c92baa096ec80
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5Widgets.dll
    • Size 4.3MB
    • SHA256 173299de94585b38e872ce40fdaa84b42617b9766812d9772ec954832a197dc7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Uninstall.exe
    • Size 177KB
    • SHA256 1d97338d798e0f96849db3f5afaa5ece993732ff282b34fe2a8184653a60b84e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Target
      $PLUGINSDIR/System.dll
    • Size 10KB
    • SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      avcodec-57.dll
    • Size 10.0MB
    • SHA256 78f4a5e11238fc4cb5f3db7fd14f696bf7f6f6f8f78b10cb3d52b7a8c9a01c41
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      avdevice-57.dll
    • Size 131KB
    • SHA256 09e5c1b1d9609727dcd0d5597b4182bd69898a2147df26d7127e35e2b1b932aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      avfilter-6.dll
    • Size 243KB
    • SHA256 8bc3d68546da44e3ddb9aa51dbe4c99bcfa965d94f7ff785ff9731ffcceec68d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

revoked_codesigninstaller
Score
8/10

behavioral1

discovery
Score
7/10

behavioral2

defense_evasiondiscoveryspywaretrojan
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

defense_evasiondiscoveryspywaretrojan
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discoveryinstaller
Score
7/10

behavioral22

discoveryinstaller
Score
7/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10