ec7d7127c089d091713c2d703c340fbaa8a21aa5fce5f1425ba451ba60ed0539

Sharing

Copy URL Twitter E-mail

General

Target
SimBrief Downloader Setup 1.8.2.exe
Size 119.2MB
Sample260711-lc8fmsfs3q
SHA256 ec7d7127c089d091713c2d703c340fbaa8a21aa5fce5f1425ba451ba60ed0539
MD5 f9471499913ad855c16d8bdcbee6c328
SHA1 ff3764a1b223624d0e604dd85ae1736cd6a1f449
SHA512 6a37633c653b7fa5fc35a4eb7314e71413e2c0b56abaf8ca3aac346dddb4e995975a8202c62a7c316a27574c8f368e4e0ba9690f43f9b07756d30c7fabdc408f
SSDEEP 3145728:oe0upvuuZJsFaphqcvweRM60upvuuZ3F7mAtG1d4jgJrf:mItQ09p2TIt5K8Ex
TLSH
T1CE5833B76E643129E8020B771B3238B89177EE9075F42259B8917E6BD43F7A634270C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  SimBrief Downloader Setup 1.8.2.exe
- Size 119.2MB
- SHA256 ec7d7127c089d091713c2d703c340fbaa8a21aa5fce5f1425ba451ba60ed0539
- MD5 f9471499913ad855c16d8bdcbee6c328
- SHA1 ff3764a1b223624d0e604dd85ae1736cd6a1f449
- SHA512 6a37633c653b7fa5fc35a4eb7314e71413e2c0b56abaf8ca3aac346dddb4e995975a8202c62a7c316a27574c8f368e4e0ba9690f43f9b07756d30c7fabdc408f
- SSDEEP 3145728:oe0upvuuZJsFaphqcvweRM60upvuuZ3F7mAtG1d4jgJrf:mItQ09p2TIt5K8Ex
- TLSH
  T1CE5833B76E643129E8020B771B3238B89177EE9075F42259B8917E6BD43F7A634270C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery defense_evasion spyware trojan
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 9a3c2fe5490c34f73f1a05899ef60cfef05e0c9599cd704e524ef7a46ead67ba
- MD5 ba2cc9634ebed71cea697a31144af802
- SHA1 8221c522b24f4808f66a476381db3e6455eab5c3
- SHA512 dcc74bcedd9402f7ac7e2d1872fe0e2876ae93cf8bbd869d5b9b7b56cea244ba8d2891fa2b51382092b86480337936f5ec495d9005d47fbfd9e2b71cb7f6ba8f
- SSDEEP 384:Zhyd8Y6pu8ZaLf6Uksnw1g8BUcyHisUVb:Zhyd8Y67WGg8B/EiF
- TLSH
  T189623C45AA6084F2C7A3167034E33A3E6BB18F751A1485C38BF35D4EAE15317B33A987
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  resources/app.asar
- Size 12.1MB
- SHA256 e05100833daef97eb16535ef12941aafb8d9ea3dac709d151eb9e6ee5d596d9f
- MD5 09fbc6bb5753584052f29327cf4cf671
- SHA1 ce0ed1e2a464def41196fc04e9c837b775e064e8
- SHA512 f48eb3264b684c1e42b0750d7a5857b0b2f175536c9e4ab183ee99c74a427cafd609b110327ef68ab334567f8ddfc9736d7ab6673fe5545dd879f4b5a19cd1d7
- SSDEEP 196608:M/+thvqhBKyiXhsxuYVUJpQLIbkbzb07jA4p3n9c:M/SqhBKyiXhv7/p3n9c
- TLSH
  T1B7D6CF957AD130B1C6536076462FB840F13AAC3B502CC818B88DF3E45F75EA96277FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  resources/app.asar.unpacked/node_modules/elevator/bin/elevate-ia32.exe
- Size 26KB
- SHA256 123fe1336ad137b0a7fe05fa8e42453597356c21960fe925b06c635db50b567c
- MD5 a148b2f0dfa699f5c5c9de8587a590c7
- SHA1 67bba623e13d778725c7c30d21f43bdd6f3390c4
- SHA512 b25e161bec544f18ea8a5d18d88dc6c8c25061009cf921baa32f3bb5579c6555596da45d540f5ff18b20a361b7eee6d3efca55d1dc7279c4b92f07a7a01cb3f4
- SSDEEP 384:arorOQiLotzEC5x6bNyEIYi2mL4HZoNUy8Rc5/pIYi2ZoNUjy8RbmL4nNysxO:EqOLc3H6oYiDL/65q8Yihg5ALYO
- TLSH
  T1DDC27DA34AE85C01EE675E3034F49536AE72BA962DF1C1CA3158C15A4B913427FEC3B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  resources/app.asar.unpacked/node_modules/elevator/bin/elevate-x64.exe
- Size 26KB
- SHA256 e82ea21504ba927aad682215f5ccdde5aec4dd9dfa450d4fb898379e87407b99
- MD5 79a20563c671e4e403b2a308de6b4cca
- SHA1 ed6ed881e02682bc529de494a3c1fb70fff02792
- SHA512 6f03a6d02a03f608232e97cd7afbb3f2af687163d8d962858852da206dbad87026c83d2dbffb82fac853e873d86c60442093af06f74d59f51c7c95b03b5da70b
- SSDEEP 384:grorOQiCokdzEC5wK6LNyEIYi2mL4HZoNUy8RV2fJHIYi2ZoNhy8RbmL4nNyOVRy:iqOLTknH6YYiDL/65mJoYihH5ALX
- TLSH
  T1F9C25C9349E81C05EE675E3034F49526AEB3BAD62DE0C0CE7159C2568B913423FEC3B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  resources/app.asar.unpacked/node_modules/elevator/gulpfile.js
- Size 1KB
- SHA256 afa18a51709758f7f903bc52f4749e2b3cabed81ebb5cbbf8246e49f8d06ee1d
- MD5 5dfc8dc64923a452e7e6bfab98be5a0a
- SHA1 a770c21da40d82209bf24dce1d39ffd87c233af0
- SHA512 3a1831c6e19d0ae824d498dd0b745c352c901dd2ef3840acf7bda6b8dbf43ee6d16dbd6415b6029376d65b187b9447abe4563bab18a2c583ff088350b49935d5
- TLSH
  T1BF4194AF37D3076A10A303B10A2D74C9B45AD06A27AF594498AEE1D41F540FC88BBC6C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  resources/app.asar.unpacked/node_modules/elevator/lib/command.js
- Size 3KB
- SHA256 21d389c2dc1813a78986517525f0fdf86dfd0242f7b731c5cced2338ca242494
- MD5 13ffa83f1fad94659a2e20de82537fe3
- SHA1 16ea705380ead34818a23bd94d227bd16a95a26e
- SHA512 2f5dcd9c573fa1265161a714c591c8ec496aa6a4f1df6de3a1622b7701d8eb13619fc05114b040756101d3971c0f65cd6ed8352749b59870f92485379a2be89f
- TLSH
  T1B881430A75ED133141F3A3B013AB6A4823BAC3363217189599D2F7C42F696E5C6F7CA4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources/app.asar.unpacked/node_modules/elevator/lib/elevator.js
- Size 4KB
- SHA256 fd6c8304d64aa2bc5caadc125978046f15d75dc08dfef87e6ef6db66ad0fdb13
- MD5 c13c8e53bb1bedcd8839d46d6c542b4c
- SHA1 8070a6689703f77c50bc8140d2c515c1fdbdefb6
- SHA512 928b92f6074bab607d9b311aed4848d575238a6b864e9677cdda0d1f49b2ab54ceeafdab6e98d592ddbdad21eaa7a4331c9e61dc759f8ece5bd79e0ea9ffe583
- SSDEEP 96:AhXrgtYMQHqEorWa8y0mcnQzhkC/ycg+bLWa8y0mcnQnEvTX:ACYMQHRczZ0m8QzJ5nzZ0m8QELX
- TLSH
  T11DA1936F6AF9133045F7A5A252AA5B201227C32AB3171080BD96F2442F4C9ACC7E3DD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  resources/app.asar.unpacked/node_modules/elevator/lib/utils.js
- Size 2KB
- SHA256 a38e1466a886a7e588a361a95730f6f1d0b65c301f98aaeca85f895e5d5f6dbe
- MD5 f891b3bca458c34f23bb43995e8a3460
- SHA1 082cca287a1afa13edba5014ee94899bacc20667
- SHA512 b584f23c40681e7fabaed92ca7fe0042c639181c308ed0ea04e26494698ab7842691831f6c38c5dc13344c6fb49e73882399daefc7f008305a9ed73bc55cb680
- TLSH
  T1344173DB2790132B596F023606DEA1C172227046BA3712D4648EF2AD3F45098CFF7F84
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources/elevate.exe
- Size 125KB
- SHA256 328667ff8dcb5ee0a3b0a706fdc8c05efe58387e64a0848da5c601d6a97db2db
- MD5 22772141739f5185358269e00522ca17
- SHA1 4f60dc327ed48917880727a84b54b4cd022db8b2
- SHA512 2faa47577ca6dcf3bbac1b5f8d9149004622c0430a857f3f2eb2d4557ce60f8acfb530530abcb2a91f6b0dc9b267f02b5aead8e82b34d5c939f2a76513a973fc
- SSDEEP 3072:pabLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlBJ4:4PrwRhte1XsE1lA
- TLSH
  T1D7C37D1278C08471E9731A3525B4C9714EADFD711E71DEEB2398427A4FA02C0AB79BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  swiftshader/libEGL.dll
- Size 380KB
- SHA256 fbadcaf3bd135ecb3b08f3c37270e2de2d2d0e93eeb99ff82972e20d35266a61
- MD5 597ba5cef2735dd3c03b2c1c0f88189b
- SHA1 1ac69ffaf1a31f74f8f7f607435340feccba4694
- SHA512 829d01c8bf0c1fb5cd3330bd32a918be3943bf358144ce7c85f1448d0906892112b72a7beb0d8e27977372d058c2ee7fc59296e84c027e4e65d9c61453e54fda
- SSDEEP 6144:cnnDGfjICPhRPvvFT0I0Ygsni1ImmcHebjuVKIq2qcsW8xm8H4ZdbClbK753QeOo:cUvFZ0YgJEjuVKIq2dbub+Oo
- TLSH
  T1C7849F10F940C036D49E21343829E77D993EAA612F2E9DDBD7844DAF5F301D09939BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  swiftshader/libGLESv2.dll
- Size 2.8MB
- SHA256 6bb02a050946e8e6f0288f7ef2192444d74cc8b0cecf98042b4840cac5f8bf37
- MD5 367a957d96daec0b8d256a2e0c5f5491
- SHA1 4d7ecbca76506b85721bee06c1c49bb60e7c7528
- SHA512 4d9290faffc2330d2d4e5f38c2a60a27fbc9b5b543fef8d6638cc0ca68f12f3e8331d50a68168895eb91447049d732bd2ff939bce69ea077623cd9daab447a47
- SSDEEP 49152:C7u4Gh6DBoKnJ2HB5BxN/VP1FZ7mbY7jEtwKVeyiUN6/QbDv2X6h9SLVf8+3Kn4y:cuBh6tOhctp9gt8+3W
- TLSH
  T125D59E01A131907CE81A53B3B61DAF3DAD35878007768EDB87582DD5BFA42F066BF11A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32