63b02058cf7e6b0db7d414232eec8f3ec2cdae9c0e10ba116d8f52ed6a8ad4a3

Sharing

Copy URL Twitter E-mail

General

Target
MfW10_Fix_Repair_GDK_V7_Generic.rar
Size 8.4MB
Sample260720-x1flbaet9z
SHA256 63b02058cf7e6b0db7d414232eec8f3ec2cdae9c0e10ba116d8f52ed6a8ad4a3
MD5 27850cb7ad0626356be8ad74186378b1
SHA1 350af1451b86a3cb7539fd93fe509169de7213ae
SHA512 4b44c85a41fcfb0d768514041b4455fb0d6370bbe8cce577bb9f3ccb6baf404181c57c393c4b2c47eb9a33d987f34b41deae77338cfbce9f6ec01aa6129d4161
SSDEEP 196608:tZze2gibZjjtcvLPVBlXGqN7FCNfl1jPTVx+jR2QjDOcyoeJ:/ze2FSFFrC5PTP+jR2Q+b
TLSH
T18D9633AEDF24203FE14655A71C9BCC009625AD9A35167E6FD33C6E6B0AEEC4003E7D58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  MfW10_Fix_Repair_GDK_V7_Generic.rar
- Size 8.4MB
- SHA256 63b02058cf7e6b0db7d414232eec8f3ec2cdae9c0e10ba116d8f52ed6a8ad4a3
- MD5 27850cb7ad0626356be8ad74186378b1
- SHA1 350af1451b86a3cb7539fd93fe509169de7213ae
- SHA512 4b44c85a41fcfb0d768514041b4455fb0d6370bbe8cce577bb9f3ccb6baf404181c57c393c4b2c47eb9a33d987f34b41deae77338cfbce9f6ec01aa6129d4161
- SSDEEP 196608:tZze2gibZjjtcvLPVBlXGqN7FCNfl1jPTVx+jR2QjDOcyoeJ:/ze2FSFFrC5PTP+jR2Q+b
- TLSH
  T18D9633AEDF24203FE14655A71C9BCC009625AD9A35167E6FD33C6E6B0AEEC4003E7D58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  OnlineFix.url
- Size 46B
- SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
- MD5 59bf167dc52a52f6e45f418f8c73ffa1
- SHA1 fa006950a6a971e89d4a1c23070d458a30463999
- SHA512 00005820f0418d4a3b802de4a7055475c88d79c2ee3ebfa580b7ae66a12c6966e5b092a02dc0f40db0fd3b821ea28d4aec14d7d404ead4ea88dc54a1815ffe26
- MD5 SHA1 SHA512
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral3 behavioral4
- Target
  OnlineFix64.dll
- Size 10.3MB
- SHA256 52cb3902999034e01bae63c6a06612d1798b0e0addc1bd4ce7680891b0229953
- MD5 b3e8218b465f3747c87a3556e0dcbe50
- SHA1 8acf603b9106a527c9394b6dc07c5e62db67174a
- SHA512 60915a81d87cdd03d3bbad2fa1ef652ca510d92c44c887349eb726181c8ed908470a0d3754d4a16fccc2ea05bc3156bd64a442337d0980ec2d5d04b773e944df
- SSDEEP 196608:52AHZACBNBNw8+xrW+g+RjLqesqk89mSP0tg+htwB0EEfoegB:5B1w8NnykG+fwkfA
- TLSH
  T107B6128A68D9C1BCD845CA70D6092AFCE0DE34694DB9643B7FCB58017A31C99C8E5F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  winmm.dll
- Size 494KB
- SHA256 cb8baaa2054a11628b96e474e1428a430c95321f8ac3b89764255cbd6628a9d6
- MD5 67c049e74d242975ffd0dcab9bc3b041
- SHA1 1f5b8e6dfa8e2132264a7dd1f66948a0948fe4c4
- SHA512 f98d04258d3f77362a023278713a30c3cd4f8013adfcea5a26a548a6f95d0786da080a8fbffde40579bd783d818fd9c4f4714decbdc34f84bb1b10e5fbd0fe28
- SSDEEP 6144:0lHx0Al1TCgUfptsdNqB9G03mKt/SI+vnYvvooI7IreqdDp8:0hx0AlYsOdKJYvvooI7uzdt8
- TLSH
  T1BEB48E19E66842B9F56BE138C9530A07E7B17849536097CF03E09BBA2F27BE0573E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8