Overview

overview

7

Static

static

3

Rate__Conf...55.exe

windows10-2004-x64

7

Rate__Conf...55.exe

windows11-ltsc_2024-x64

7

Microsoft....64.dll

windows10-2004-x64

1

Microsoft....64.dll

windows11-ltsc_2024-x64

1

Microsoft....ry.dll

windows10-2004-x64

1

Microsoft....ry.dll

windows11-ltsc_2024-x64

1

System.Col...nt.dll

windows10-2004-x64

1

System.Col...nt.dll

windows11-ltsc_2024-x64

1

System.Col...le.dll

windows10-2004-x64

1

System.Col...le.dll

windows11-ltsc_2024-x64

1

System.Col...ic.dll

windows10-2004-x64

1

System.Col...ic.dll

windows11-ltsc_2024-x64

1

System.Com...es.dll

windows10-2004-x64

1

System.Com...es.dll

windows11-ltsc_2024-x64

1

System.Com...er.dll

windows10-2004-x64

1

System.Com...er.dll

windows11-ltsc_2024-x64

1

System.Dia...ce.dll

windows10-2004-x64

1

System.Dia...ce.dll

windows11-ltsc_2024-x64

1

System.Dia...ss.dll

windows10-2004-x64

1

System.Dia...ss.dll

windows11-ltsc_2024-x64

1

System.Dia...ce.dll

windows10-2004-x64

1

System.Dia...ce.dll

windows11-ltsc_2024-x64

1

System.IO....ve.dll

windows10-2004-x64

1

System.IO....ve.dll

windows11-ltsc_2024-x64

1

System.IO....le.dll

windows10-2004-x64

1

System.IO....le.dll

windows11-ltsc_2024-x64

1

System.IO....on.dll

windows10-2004-x64

1

System.IO....on.dll

windows11-ltsc_2024-x64

1

System.IO....es.dll

windows10-2004-x64

1

System.IO....es.dll

windows11-ltsc_2024-x64

1

System.Linq.dll

windows10-2004-x64

1

System.Linq.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Rate__Confirmation_PO_37104355.exe
  • Size 41.4MB
  • Sample260714-aj8t7sa12m
  • SHA256 aad65d2c3b40cf1d25812c85c4c85f825e61b7bde774d341e29ced5c03da4bb2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      Rate__Confirmation_PO_37104355.exe
    • Size 41.4MB
    • SHA256 aad65d2c3b40cf1d25812c85c4c85f825e61b7bde774d341e29ced5c03da4bb2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      Microsoft.DiaSymReader.Native.amd64.dll
    • Size 2.2MB
    • SHA256 7f8dcf37d9d66eae14c48a79fa2fcd447bd0f38a21be0203a9c4a89398aacf28
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      Microsoft.Win32.Registry.dll
    • Size 19KB
    • SHA256 ccb9f291979e086e2fc5d170fd672d48a8c2160def8408ed924dfa1d6b3105fe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      System.Collections.Concurrent.dll
    • Size 27KB
    • SHA256 1923b6716434830595c945786f0d8daf3162da5a97e10e11c1fba6330f44f109
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      System.Collections.Immutable.dll
    • Size 21KB
    • SHA256 1b7d17ce95ebcff990a5cfa8115f4100f257e7c6bbaa7bc914658af10f86d41a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      System.Collections.NonGeneric.dll
    • Size 7KB
    • SHA256 c42608570971d4d77a63420ceb96ecc786e551b6f780f34702d3d4abb7b3b466
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      System.ComponentModel.Primitives.dll
    • Size 11KB
    • SHA256 55baea682fccb0a256e6c25cfdcbe16954ef4f39d66cccafc08b331ad77aa5d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      System.ComponentModel.TypeConverter.dll
    • Size 14KB
    • SHA256 839dbe47ce52055f5f88d98a2c246fd6c5f5f8d29a8f7875d21d4f8401397827
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      System.Diagnostics.DiagnosticSource.dll
    • Size 107KB
    • SHA256 cd2b45890b42243f79103172c8d4c6cf67f2c0fd830b8c96af538e97c6371f09
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      System.Diagnostics.Process.dll
    • Size 77KB
    • SHA256 b0d322ef0601acfd5fddd33bcd9fb29566a5a2f88d8c4a13b50c1d09516f19cc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19behavioral20
    • Target
      System.Diagnostics.StackTrace.dll
    • Size 9KB
    • SHA256 db79713503ad7046c6e547e14642a321e5cfbddc61799195446a41e46d1001fc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral21behavioral22
    • Target
      System.IO.Compression.Native.dll
    • Size 916KB
    • SHA256 98df9d6c5238362c1cca25187f073b06399c55e284c7483c92477cffb97b539e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral23behavioral24
    • Target
      System.IO.Compression.ZipFile.dll
    • Size 12KB
    • SHA256 45186a1125c2e85f7bd9d15a10112f4010b353ab478d4f2e24e9fd3c88bbd215
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral25behavioral26
    • Target
      System.IO.Compression.dll
    • Size 96KB
    • SHA256 c752ef46705a4b0b8f5c78db0ac3761b2fa9a6bd6e1cda3baa6d9924331b9763
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral27behavioral28
    • Target
      System.IO.MemoryMappedFiles.dll
    • Size 25KB
    • SHA256 bdf4265b184b50965900061c0672bf372982bec9600dbb5c808aeb26646bd127
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral29behavioral30
    • Target
      System.Linq.dll
    • Size 21KB
    • SHA256 b0fcd924c17e765fba5f6ba03635d69fccd286605f382ebc4526879b0ea898ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks