fbabdf5b96498f82e01b84c30266ab2500b6760f87bb5695718a292867723047

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.WindowsAppRuntime.2_2.3.1.0_x86__8wekyb3d8bbwe.Msix
Size 21.8MB
Sample260717-w238bsav4j
SHA256 fbabdf5b96498f82e01b84c30266ab2500b6760f87bb5695718a292867723047
MD5 46ca2a485c4465b1310858c7488d4a4d
SHA1 982f49f453baaf5bb770b874a98252627cb27280
SHA512 9dab106eff3ed4cbaa47d6fc5262722c5e396d755ee1fbcf2c4678fef775bfe78c6d7308f66fd1064a9cdb2c4bdafba459d93364ef749dcb97377164392fccac
SSDEEP 393216:YeGlwYuJSiWanG7MeRHXylxJyPgC3LRcrg1zORDvgItgdWHdfexMvwaIWmjVKr51:ClkJ7RGQeiIgsR5ORrlN9fee51
TLSH
T1CD3733849140B947DA70F2F208AAA2E93C26C1F638B5DD381545FE4FBA6673097BC54F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  Microsoft.WindowsAppRuntime.2_2.3.1.0_x86__8wekyb3d8bbwe.Msix
- Size 21.8MB
- SHA256 fbabdf5b96498f82e01b84c30266ab2500b6760f87bb5695718a292867723047
- MD5 46ca2a485c4465b1310858c7488d4a4d
- SHA1 982f49f453baaf5bb770b874a98252627cb27280
- SHA512 9dab106eff3ed4cbaa47d6fc5262722c5e396d755ee1fbcf2c4678fef775bfe78c6d7308f66fd1064a9cdb2c4bdafba459d93364ef749dcb97377164392fccac
- SSDEEP 393216:YeGlwYuJSiWanG7MeRHXylxJyPgC3LRcrg1zORDvgItgdWHdfexMvwaIWmjVKr51:ClkJ7RGQeiIgsR5ORrlN9fee51
- TLSH
  T1CD3733849140B947DA70F2F208AAA2E93C26C1F638B5DD381545FE4FBA6673097BC54F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CoreMessagingXP.dll
- Size 806KB
- SHA256 85e5ec2216ef7638310c700a982dae9f237753f186249345b03227f56e104363
- MD5 0da0e863d53cfaa2a17a9ef8f617082e
- SHA1 dabddc2b554035cedcac74d49f34d116dde22ec5
- SHA512 d60379b098f98d0d6c79129bb47a11c33e8030283c1838adf29aa71ca24c7db8116ec3f585bc94cd02c599546f13b1d6c92701059aa59c168b94860959a9731a
- SSDEEP 24576:TS+1nDDz6nvBHNCa6amw7qPnNvjK6l6Tc2WehLViUk:HUCw7qPnNG7ViUk
- TLSH
  T13A053B337DCC85BAD9AE2570645D367662FDD8A00F7186CB1F5833EE9A646C01E3818B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  DWriteCore.dll
- Size 2.7MB
- SHA256 cf421241c6ef2c27016dae094646357e6215f38e5ec8549cc9bec8a3dabc6824
- MD5 f6f993b0b0c9f401e8d4b24414cef597
- SHA1 cf6dc2a6682da768912e86ad4fd203a5fc70c66f
- SHA512 69f4ace245344a7b11ce5362cdec77f95addfa0d806fa08c5ad5d3038ad679bd4e6849bc1f71e7df27b9986d39200faa49143a68eaf337e9b98f5ab3f069947c
- SSDEEP 49152:DR4paXCsPo0DhpTk9IaSntpVh89NkFNOkDf4DLHATYDaH/vAq:DUaXLA0DbTk9XSntpVe9NkSkDegn3b
- TLSH
  T1D2D58C12F959C5AAC6CF02308C1AE219A7687A31C77159C7FED89E9CFD613D30931E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4 behavioral5
- Target
  DeploymentAgent.exe
- Size 78KB
- SHA256 2d79abf75f365cfefe4605ef75af8730a08c233f94225b01956905936293d5aa
- MD5 def61e6eac64c1198d7f98859bb86e72
- SHA1 a6a2954aea52e9c2662c674eb65934e3df8260b9
- SHA512 1a91de0a606188cb0f48b53ca86529ebf6da670db5dbaf90b02e596e7e3e22eb864e65b22dfae889b6adb9d8fd8d1655d3f01693c532fcd1c037f0c48a9812e2
- SSDEEP 1536:/er5As1ZK7WFwoIQpHiPI5eAkORUqjsbzO17kFpIwzO50HFRzD:/M5ZGqfpCw5xYbzOGgwHfH
- TLSH
  T1E3736C53B884C5B1CC6634B2069DF62A127FD6A10B6087D3378993EE9D257C29E312DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6 behavioral7
- Target
  DwmSceneI.dll
- Size 1.7MB
- SHA256 bbe5896387c8edef57052984eb63b22a39d230b6ec76a38152af110abd7fc628
- MD5 deff9eeafa57da98186547ffde6f4149
- SHA1 99c59b27ff4e4865aea5e1651620c481a36d0988
- SHA512 3f8a4dc4ab3616419cd350ed3dabf0f75adae8a7384ed5f71a30d34bd14c92ebd5037dc0931b4fd582aa7eec4936739ae5d5ee26d9dab707fcd340f0d53ba445
- SSDEEP 49152:P6rCl3xHkxx7e3GKoQUojw82Jf9jn4bLavsYbWLJN:W2hHkxx7e3GKoQUojuZnI
- TLSH
  T1188518136784A67BD95E537988DB3B20B339E4B00FF243C30B9861A99CB63C45D725A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  MRM.dll
- Size 236KB
- SHA256 64b1747b48d9a39b6faac6f33e48be51290ca0b22c5038b4675a64bfab06b5ba
- MD5 cfba4414def04c035fd85151a198bd2f
- SHA1 89b484040e45b10022a7346617d03b7df8e6bb5d
- SHA512 95c5a0d1420e9ba00a6f54d43170247e128326d9a952830957430e4d1be2c29c9ec4d871ae017d3cd80e3339788d85d8ced395903971ac30dfe6b8fdaccb49ff
- SSDEEP 6144:Ub7tWo5xhoMrbhqrpPR7hX7jpkKztBypy3GlzV9h7Fzbu366QhXKoPRWvpeuTNTE:UntXPhfpy3GlUQhXNzkLrul
- TLSH
  T14B342AE078C806B5F8A73DB552DC3538D1ADD25007F099CF4A9486EEEBA52D27E341CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  MSIX/Main.msix
- Size 75KB
- SHA256 1e036b38fb3d21e30b02e07a5db7085a86d0cbfb1addd60ebbbbb0e7b5f06259
- MD5 a848bd24907762b310b473d579b854ed
- SHA1 38c39008065fe4eec34ed0060cab1fee6cd675c0
- SHA512 8e78c0448d31804a2f1a17afe954989590cae4edec44bb6b2d20d77b6c944026048356f39056af6f1046212e28bcdd7e3c43a0316c6e8495894c43310be9e726
- SSDEEP 1536:KJiA6vlu8LZFwC7Sf9Iv7gGRovrCLlEjyD2zcTXTDgzK:VPv9Sf9Iv7gGRMCLlkyrTXXgzK
- TLSH
  T17373127B7F2C506AD054BCB48A3E9C92A317ECDC41D5A7850B913FD825AE3E74960B4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  DynamicDependency.DataStore.ProxyStub.dll
- Size 33KB
- SHA256 2c0b0dfb8406c8bd6317074224486ea788450470188ce06969af6e71edcd097f
- MD5 77da9dd4432b678ee09f95b0f3eb79c5
- SHA1 628f18108d7fffe921c0a0706cad80fe7d15c973
- SHA512 1ad2c985bf340ca8908d97bfb2fe3663eeea55a739404cbf22dd3af594f42f9fb32e6a8b81bf547991d4fac58fd441fff8a85a4be14b54e8d16fa9cd4b70540f
- SSDEEP 384:7eAK9Mk4XK4zsdT+1jTpMVliWodG6TnGHQofrEaZ3WC6lNMAUyR9zVUth5gC:CMk8+xyHgliWodGCnGXI+LAU+9zVUxgC
- TLSH
  T12BE208C2BAEA0691DD5F05F4E8F6B71A183CF9410FE22BE316D4544A88A2FC453B125D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  DynamicDependency.DataStore.exe
- Size 72KB
- SHA256 0c3f8b60953680d198604bff4bd152789201c6470b00190132e4d96f1c49d774
- MD5 1fd4b67a45805a367e1e688f9b02fb8c
- SHA1 90c17afd1ba5e603b8b73c1ae3819da5abf89b09
- SHA512 204d9871965ac88240595f8c293d4e26bbf9cd4561db83dadc627b68a00cd28e87522447ed6dbcde1dfa7eafde2bd52985412bc4368b2366ed718028fe7954b2
- SSDEEP 1536:dgMcpHElzJ5O/dRYVmkkQJ2m5hnzdbTIJKvJ18+BzF:UpkBJs/d3g7tpbU+8KZ
- TLSH
  T1EC736D63B8C8C971CA9224F405ACB927613EF7E24B6445E3275457EE9C247C1AF322DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  MSIX/Singleton.msix
- Size 139KB
- SHA256 2294a8ac9b5b2adbeecfd896b1a387a98f3f575e353da403ac088d1deb975bf0
- MD5 113d07cae1dcf3dfccded6b85e25c0b3
- SHA1 908199842890fc7bd6c7ec63f9587c30eae2dab7
- SHA512 1e11df8a8a3a1d6ad03cee7ab4c046e0a98440bd1530a96968d75e2fb521273b818d86b44d9121f2f60452a7ffb3890437391781edfd0e1655295bfbfce3a8e4
- SSDEEP 3072:iUv9Obx1lnq1p0dp8ZQbHt4hU/HzSWopRvO2MVA55Jme/L3TEhdP:iIO9bq1pq2oHHSlRvO2oAnJ1LjEfP
- TLSH
  T19DD323996760E43BC079BBF75900A0717025D1BF44E5F5CED9DB7B89ADA0082A702F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  PushNotificationsLongRunningTask.ProxyStub.dll
- Size 34KB
- SHA256 ffe9413d283dd7ad66a48e587fc5c708bed0729d6b58e74a6c8d4f7573d3bed6
- MD5 eb3c1a08a5f1452f7883e27ae8ea4e11
- SHA1 a5bcb2c84f60dc291147a2de0c1ebe0b8a5749f4
- SHA512 05234405362aa37247f848b626703f568ade491d0649f35e563e88b32973ca557d1c27b81c9f9a9b89b8a10096aa431de611eca878b815f7e767dc9b625447c2
- SSDEEP 384:pwSw1tMk4FrlXWsEIT+dLkTAgMlliWodG6TnGHXY7Lq8rEaZSyWBdOPlNzuO9R9W:uMkqUhIqLsAHliWodGCnGWI/VdW9za
- TLSH
  T1AEF218C2BAF90292DD5F05B4E8F6B71A083CF9410FE16AE316C5644E98A2FC4A37175D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  PushNotificationsLongRunningTask.StartupTask.exe
- Size 55KB
- SHA256 14d5e8fa160cf75796383432edab91285a7a2d655ccd8dad2edd1f2755b9d561
- MD5 1ee32f4035ba6c1e73fd61ebb89b8f49
- SHA1 3bd4e09757fce786eaea6b42110a03e16fb68f9f
- SHA512 c1b4d46d5907819295dd76677c56e4dfdb03f94890ed31412a7ec46c3a890b8028ae86b19b8dc9eb585248f40212b903b2fadd7b15625bc6622513475f230e19
- SSDEEP 1536:/04UF2pHshLuvuRiikqV6jPR9LGIbNnAzN:8apMcWRi0A79bNAp
- TLSH
  T163437D63BD848032DA9235F41AAEF567127EE6A20F5492D3275853EE9C357C0CF301EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  PushNotificationsLongRunningTask.exe
- Size 148KB
- SHA256 cb1f7c1b9f035eb0a57c153e0269039018c50dc2bc64355c435f0f8e116f72ab
- MD5 29f40acc05f0a2fa6787f29cc7fcc8e1
- SHA1 b1e5a7b5bdfe4cca1efa8e52ec5c2291f95b5255
- SHA512 5908f2a0aaa247a757acf0761021fdc54a09b5882753e2d155bfb7550cf9fd78c227f3b543519f2e0e31c9270c37935cbacddd9d430cc68a4f685e5f2e16d2c1
- SSDEEP 3072:wdqplLgvsuNnJz2p3z3ccRiTJ+BgUUiYPi:wdqn09Ntk3z3ccRBg+3
- TLSH
  T18DE33B72399885B1DDA739B0098CB77A522ED5B00B7116E3570913EEED69BC22F710CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  Microsoft.DirectManipulation.dll
- Size 474KB
- SHA256 ed09dbb9b6eab4a3941605e88ad5f335bddbe0235d0c6baa694a62b590e646d1
- MD5 9d94433c2e7468b4f2f755b26d40e0cd
- SHA1 70461580d1c78b5cd2e76f21ef67776a16641ee0
- SHA512 063023a814221971a35e0bd40ae5281a8cee2a23b239e2a9fb7dcdefe6520b8dc56d9524eb6e1b110766dee5a366a8063e5f71692bf15edcc6aecf574615fdb7
- SSDEEP 6144:S3xLLmVXLDuZDMiMEjwQ81hi1w5fQupx6u3IeJU+1Lmp7RD7MGuBkkMXwXar/36/:SRmVXLD4dMTiDh+I7RfHuBkkqYar/3u
- TLSH
  T130A45C216CFDC172CAE631B424CC716B917DAE940B248AC7536066DCEDF46C05EB3A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  Microsoft.Foundation.winmd
- Size 11KB
- SHA256 2419339552b75a696475fb4a955ad81fd9c3ae9dd24dbfb94766289d304d899a
- MD5 bfd86a7712618df6e69f760de0b21040
- SHA1 48787d8eeed6580a253c119404601d052741533c
- SHA512 96bd203c7495e70733e1bc36eb6aed4b48e683639a42dd252b0b8b85975b2fe6811a08cc08d4e3366291366e78c5d3e4e4442f6b7fed517c38295a9d361ca792
- SSDEEP 192:qEsWO+qzRWDI68n2JBWsea4Wmhas7ms+3NxPOxFX01k9z3AwSSjYhkZ:qz+qqlNuO9fPOxFR9z5PjHZ
- TLSH
  T126324AD28A6C9003EE9B6DB08BACEE833D7CD7CB1940A82216D5F5641D533C6EB3552C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  Microsoft.Graphics.Display.dll
- Size 152KB
- SHA256 81000abbcef771407f3e92ac812c8c1a7e3bce60807df9cb3852819d0988550a
- MD5 ee8a69832ea660e2cf26463326059a41
- SHA1 c53b2281ed1e15ed997b59ce85253024e2b522d2
- SHA512 ee60cdde9684160240ab0dcba6fd25a6274b03b5da504d682093334cb9c4e9f7cbb1bead9738b47fa4d70aacb6ce03d18b7cbe09b66ef7732cdb25fa67be61d2
- SSDEEP 3072:lf0EkpWO/+fTxcpPkoI/hRCsg/yB5b+zgT1+If3:lTkafTHCs2yX6gYIP
- TLSH
  T17BE33A32799882B5CD9F35B458AEB76A637CE4D18BB216D3171817EEE8606C11F301CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  Microsoft.Graphics.winmd
- Size 20KB
- SHA256 303e33a48d2264cd494ee1b0b9400d99d720443b10d1a555bdef7c8bfecab19a
- MD5 6eca7881a2d5ddd02ff51a64139d74a4
- SHA1 4e7da704c386b8dc0bb9168da570e969352fbb22
- SHA512 51ee920eb3cadd65a56aafa81944809540c55cf578b469ef370f1d6a223d4e6de12d2034bceacc1b1e2f8d6cbe8755a594e3d2579bf2f0c56d24072542489323
- SSDEEP 384:y20GKBw0DKErH+5zoxPAgALYNfUtebkAplNfG3uO9R9znriIX:oBBwQKEr1AgAcaXAS9zFX
- TLSH
  T1BFA23BCED9487A02CC4ED4322BA98693293883E7250246675E65E81F3DD37D4571AFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Microsoft.InputStateManager.dll
- Size 299KB
- SHA256 1416cef59e3d6246f22c156a8ef2fbba62cedbb47a253192c22a5b775b54b1dd
- MD5 44f415ed151de46289972e1e0ed15019
- SHA1 a287bcabfbf26d21f30a775cebb8b9cf0b22c206
- SHA512 603c654ebc682eaf1cb8699febb999c76fad277ea94ea0c8cf29e4c0da1201b141823022e9ffdf650d92e09ea71e73ef2cf4fdabe717d94ab18145bc4e2e947d
- SSDEEP 6144:ou7sLOm4E+zrYF/l1EDbFhAWLWZNHTuxdZ+HC8gOr7y2bWMNjtMP:0LRozrYF/l1EDphAIi94dZHcr777q
- TLSH
  T134645B32A8488475C9EB31B4704E7776A17CDAA00B5185C3C75897EEEE6A7C06F3528F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  Microsoft.Internal.FrameworkUdk.dll
- Size 675KB
- SHA256 a559cd06ffa7f6850fd4849b40d8274b1cc0dbff1d0bee118db99e584de667a6
- MD5 df4dba63e7f40c70b0b64b935a86d760
- SHA1 f5c06bca12afdc4b5f3b9edf79fc71d1f8a2cba2
- SHA512 b0c108025a12ced254112cdd5630ad60aff68513735f71dd7c58925b56010391b2284cdd9987ba38ac6da0b203e0baeea0c8207678a6fae29f5808d7d4914904
- SSDEEP 12288:SUQlGnQiWw1r5+DjlC7+5Fpzc2DcIIdU9WKi8YU1mVviWSc:SvwT+X5tYbdiWKi8YUHc
- TLSH
  T172E4D62196026336CCFF20F55DBD706EA21CAAD1076058D763C86EEEDB666D03B3119B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32