22c1a3f70bddff7620733349236cad54c869c685f8e3875a38b4ae9e8153f51c

Sharing

Copy URL Twitter E-mail

General

Target
Nok-Windows_x86.zip
Size 10.0MB
Sample260720-bgnxpadv91
SHA256 22c1a3f70bddff7620733349236cad54c869c685f8e3875a38b4ae9e8153f51c
MD5 02175029aa59894c5d9bd216ad05bbd2
SHA1 2486e5685b605f8d84e11463fe01458e10875198
SHA512 62674e3f186bb6d46b03364e04999dce39184d7f32fa5366e24b8c5d06fd670969cbdb11a2a0a30318e0482a552ece811ed346b8d9bacfcf9908c83991afbb0c
SSDEEP 196608:qSKvKwV2bKCfg4dRn6nyOcPT1EY1qjo+PYKn6RY4aNyXCTo9w+CE0QFCY:q5KwV2bKIg0nQ8PptMj8Kn6ztfRblQY
TLSH
T160B63335D3FA0622E013BE722E43BAEAF4889565D11C4D4776027376DD9B098E3D878E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  Nok-Windows_x86/Nok.exe
- Size 11.1MB
- SHA256 a8306d925d37eb725b59a8b8259bcba6a710adccd2f02ab1b55df93d1a43a68d
- MD5 2ce8a47525f96ad3d2180012ea39dc10
- SHA1 5a0ccf497eb4def1a464c24037fe22a45c142c88
- SHA512 623710a3ed5d7adad2bd761022a6625ac47c80b23b54564ba13d4e563d6c7bda774e68e5f7229b8c349703f47c465debfc474321c4b8643eed9199212a81fb51
- SSDEEP 196608:oKx81sE0EZgkLKNFcLhHw3MUoczZPm7TK0YfJW6HKRpzr91KFuK0qIxewx3kowTe:oKx81sE0EZgkLKNihH+MUoczZPm7TK0P
- TLSH
  T1E6C6BF21B980C0B1EAD65176B57D3B7F987CAE22072D41C367E835589F702E17AB9383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Nok-Windows_x86/Nok_Data/Managed/Assembly-CSharp.dll
- Size 16KB
- SHA256 e9251b39fe81b375ef72c119bfb70803e730c0de2f8acb6ac393ceccdd2eadfa
- MD5 74d8b0b2b903b5fec425796702040854
- SHA1 b2c7dc0e44704d70e2627218f9c9c4288d42e078
- SHA512 0010c933f20fa112217404df49059a495d9fa90ebfc1893b10af75f2923257b3b86c3501d3e8f0b9e6f4447bb19c3a4ea97c760728d520b92720761dbb027261
- SSDEEP 384:w1RZjUrmTtP/cJwIgvMVGx1+Q+ggFjK/:qTysvMVGx1kk/
- TLSH
  T19B72F8466EDCC533CABECBBA21E31A0053B4612BAA62E74B4DD890E61C437C45D457EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Nok-Windows_x86/Nok_Data/Managed/Mono.Security.dll
- Size 286KB
- SHA256 771b880c88222293b8b7d42d5739fe9715f1781e8fbd03df0c5895456b1663b9
- MD5 1e6dd1d6ee5957c1b9784bcac60cce48
- SHA1 d963df0552785c6b84c5b217179621016d93edba
- SHA512 786e80aace3b12f8d053267fd05796c6208b017f30652e677bbab7a1cbb624998dfeb15df41f54f8d4cc5454bcc96140b8e29f63d1037c3ede5c55c48518be94
- SSDEEP 6144:FyH9c7SO2eZzIaY7HJR80wopCgtwGu37NZhmH7O:QSvsaYs0woIxGuLd
- TLSH
  T1775439086BE8DB67F1BF63B8D0F05414CBF8A156A1AFFF5E1C8610E818537519A01A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Nok-Windows_x86/Nok_Data/Managed/System.Core.dll
- Size 262KB
- SHA256 bce32628839b438a6d2ca761e76441036ea42b88e8045e7ff8b8f80baad12904
- MD5 d51f6bcdbbd1c98b2ad213753e4a4886
- SHA1 06de557b35d3e7f2bfdf87b42babc46a65a88279
- SHA512 0c2ef5aa416bfbfea35a0a93d06d8614ee51d87ca1ca781ed38111d6e155850115a8ae5d13c64a9ff1ad4abc70cea051e9dec5d9a1d367f2fe8ad48c51322359
- SSDEEP 3072:qpHBMkH/a1xU5aV2JkMeztKlRbCuoy7ytyOygjqVwnGk0E7ENAbGCkbwfAXM6Obk:qphYIk0lRbMOfrE4KyM
- TLSH
  T11C444D9497EC9613E3FF93B1E870070507F4B4A6B0A7E30E589851F65C4BB816E463AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Nok-Windows_x86/Nok_Data/Managed/System.dll
- Size 1.0MB
- SHA256 6d8c5632b9bf153e4d0adfe66002d9664ea42e23b8d1150d6f42fbf02662c241
- MD5 73012040e1c97f6a40c9d7596d090aba
- SHA1 05a7a0fb4329ef28c6fbeb47c299cf3a3e9b2942
- SHA512 227774b8388a63809873bfd740ee2b9feeaccf25a8d155691ee58829dedeb2fb949a2596109119d40237d32c31c4c1b64a07b984db3b3d43c833da3e1faf23d1
- SSDEEP 24576:iCXZPkxkUE+UY+Dqzogz0yTJG8zAFPMwSRw:iCXZSMDqIyTJG8zAFPMw
- TLSH
  T14B354A2467E4CB2BE1BE67BDB0B210115BB4E045F3A3EBAF559865981C83B405D063BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Nok-Windows_x86/Nok_Data/Managed/UnityEngine.UI.dll
- Size 167KB
- SHA256 ab307b110e5dabb01259cae0136baad736ff6fe527da4f7c1be056a93ee7fda1
- MD5 68519cabcf1471451857a94af3a09bf2
- SHA1 cf33a5a230297931a2a24487bba2354bc3a97a8f
- SHA512 7f1b85495d03b6e69c671988c4e51f82e77e72ddc8de2a30bfec1ff8b9325eb4107a68754a6c0d1bb03e20038f538932f41ccefa937c1249d4391527124f0094
- SSDEEP 3072:osufnfNVLUeSXhmxOWV3b+dd3tg23rSSwSGVRy9OnCQMn5e73/X7YF7I9ya:4NVLHOWpbadLbyR1CQMn5e73/UF7I
- TLSH
  T10EF319A46699CE7BD3AE0BBFD0D0555187B4835AF68AEB8D58C0A4ED2C4335059023BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Nok-Windows_x86/Nok_Data/Managed/UnityEngine.dll
- Size 596KB
- SHA256 09059125883c6d92f01923610de96621e846e6ec3e06cc94a1b7c41cd184971d
- MD5 ca765bb8fb6997d5cae382f18d6e6061
- SHA1 da71d367dc554c9ec415a2b845a2ef583eab5c65
- SHA512 4268afa6e4c2ab99e0721366ba177c636f76c281d74ca8f423cc661fe7faa92d96db3d58b712b40f72a5c8db111e3f1eca504571ca24e537da983eb8d89dbf74
- SSDEEP 12288:1pF6NR1DerfA8f+skiipyfdvg0rCOxoua:kOfBfbkiipylZrCOxPa
- TLSH
  T18ED41A7E33F4995BC8AE9375E0A746209234C10662CEF7CB2566916C3CD335B4E36AC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Nok-Windows_x86/Nok_Data/Managed/mscorlib.dll
- Size 2.4MB
- SHA256 d3e940034039795bbcc39f1f56b481000d1c99fa26c74f8ea4957e78230e89cd
- MD5 5279cde1af35d54b9e1d2de7f5d52a77
- SHA1 814e1ad50c0da8d1fcaeec681fae00ce5849f7ff
- SHA512 904b26b71ebcc69c55d8b71579f0b40a9b4edde661c37c6bbd8f1cd57ad6b715c5879c8e3d06496c3f78c091408ebec9303c0736e6e643538d259d762a405159
- SSDEEP 24576:BzY6J4MVrdw/7icW4Eir8bghNg0UnGE5VVX3URpZM/E+JizBU:Bt4/7icrr8bg+bVVX3URpZMs+J0
- TLSH
  T12BC55B50ABF5CA2BF57A6775E8F101145BF0F842B3A2E35F361812B80C93744AC56B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Nok-Windows_x86/Nok_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx
- Size 56KB
- SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
- MD5 66fed2411c14a0fc8ce4c593ef601bfb
- SHA1 4680a34aae1193f1e4a6aac1a5dd3c307de257fb
- SHA512 331874a9956c87db0646e4d21937a88009804a59fdf5f5882ea5b1dfb7dd7ef17724e09877d98f52e7327bbf38a46dde0c54d5c85f1e860b88322bdfad64679d
- SSDEEP 768:M28utHkOFpMgMwP9h5Ij7khsp/6JtEZwMxVtkUI353cXyEyk3VbNb1gNuoT1y:ZDF6CdsCOZwMx3k5JYyklhxgRw
- TLSH
  T17743C4A0EF5C8D36499A52D9F88140CCB9BDC43291199CF3FCCDA12AF09CD6DA274766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Nok-Windows_x86/Nok_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 ae044cd9cc2c7c42f8864195125ab440472d657e5f0d55e131f7890bd45c518a
- MD5 3b3452c399f27a24ea5a589c7bfe750b
- SHA1 b06cb1d09ad3bbdf1d8214c910e3da2a228d113c
- SHA512 41c099350159e942be8bc04c8f59c7fb0fd4bd99db46f1c0158f0fa053c08ae0c73e9d169f6816b77376283cce5beafdcfe5d3d5e3b98e8b358d67c34b954a04
- SSDEEP 768:6CEPutHjWpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/q6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T19F43D4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Nok-Windows_x86/Nok_Data/Mono/mono.dll
- Size 2.0MB
- SHA256 39c973c194e1e7267f87d89d108d716b33675394f964d323e5389bcd5ce40690
- MD5 54abb7d839651acfe5a63b5a5d87ee2d
- SHA1 62c3ade3cbf7bfdd10e704b03d93a15efe08733b
- SHA512 04ad029ce8b411c9a6a2a71da5e59371e712a97079ff442c486769bf650af22a8e8f08bb5b5ed46aca4e53ec63bc43efaf46521b6f316c8250a3ea03532714ed
- SSDEEP 49152:lUQlr0e+C/KtXF9RAfBbRrhApCHeT+eHPY5B2r5P7DS3SaNOz:TXCF/AfSHJrU3XO
- TLSH
  T1A0A57C51E952D332C082007E4025572A1ABB6C62FF3658D766D8B48FE9742F0A79B37F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22