45bf2a7a1303f8edc14777530916ec71f8b9106614f35f22805650b98909b417

Sharing

Copy URL Twitter E-mail

General

Target
ZeroLauncher.rar
Size 502.0MB
Sample260721-c4rgrset5x
SHA256 45bf2a7a1303f8edc14777530916ec71f8b9106614f35f22805650b98909b417
MD5 8fa29ace07c3827e0ce3683f1926a1bc
SHA1 59b85c681767f8f26f1869286355cc1f398b3b40
SHA512 2bfadc2e93d8e89327be9855be576a6eceecd938fe716cd72d65fd0596c3334d27fc85138eed583256400e5b8ce94c87612809f13f815693867f47d1c90834bd
SSDEEP 12582912:kY/b7CxjxywFCUxd4kxHIME94uEbwHsguxQfd8Afm:n7AdhxHIMErewHsgqinm
TLSH
T1C04933B9EC12DCA9D1EDB8770A5AD50DB3CAF313505090E94BE80F14ADAB7D809E9335
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  win-x64/CASCLib.NET.dll
- Size 366KB
- SHA256 dd5c3ccdbf2e54df93e5eec8026920cc189a41a1cf9d0907c7ca2a557ee43528
- MD5 65c13d1c09945a4426faeef67ad2523e
- SHA1 ee13c365ed3080b33ea2d25dc32c0fa57f206826
- SHA512 06084c46fb2dbccbe014063d7bb670a5f434f1c360c00db42d265cbae9186057747203b4c4366c8a07c67503b38dc5664eb61a040876c451c1a364e2cae97078
- SSDEEP 6144:vJgoW+0LNTASIXnHHtNrgGe2bTBc8IIKdQhqyoE/Yjn4Df:veoqlASQHtiibTm8uX
- TLSH
  T1C584D44722E93CE9E17642B8B7B793C6E37ABC411712D2CF5AD042546A3A6C7353A7C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  win-x64/CommandLine.dll
- Size 220KB
- SHA256 8a55501cd1a1590a4bd93a17c6fdd2c01a0ed5bff1aea9036bdc78d98c9a3fad
- MD5 05c71fa3a6fc561d7a1f919437dbddfd
- SHA1 5a8cd6b38ee5d63c60c7747de6b5469ba5d1e6b2
- SHA512 1ab183d67220c8b8999b6ac032ac304f57960faf0e908404ffa3aa37c010d1a063d7734923a1576f18a69f7300b01fbbb395e3dca971e1b125b1b3b67ab858d0
- SSDEEP 3072:6G/MfUAMcCbPpKNQ6acJ8vG+L+ERbE9K/ShQvtpEI1aEvjc94OFS/Gi+XFEbliWb:6G/zAnUPpKO6acJ8n+Ez/5wECkliitf
- TLSH
  T1AF245C4653AD0363C7BF7775E8A0219F87F6E932F894E7DE748898F20D96342984035A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  win-x64/CoreMessagingXP.dll
- Size 1.0MB
- SHA256 5b026dac6ad32896a96b4fc3c22459f7c6d1e521dffdda49887f455e31974122
- MD5 a6afdea30bad916096a5ec35eb9eea42
- SHA1 d5c7a6fca0c16efd7e889a62de5414ce3c60a4e7
- SHA512 dd5cd005b921be21d30e9c39ea58a1df20e09b5848549a7262708f38b190ef0c2eec1048e4bb529fe7a70394aaf145c0ff2474405775b927f71fd128705c23b6
- SSDEEP 24576:6T1euyzViLXRCfYVixUY5XyUfffJffRhmZfXd:oUuyzViLXRCfYUt5iUfffJffRhQft
- TLSH
  T10C251C2B6FA84497D16AC27E85BB878BF2F178531B3147CB0451426D3F27BE49A79320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  win-x64/DWriteCore.dll
- Size 2.9MB
- SHA256 a0fe99fc407e91279939d8688e103fa13e1c305be846d5a8a7de314707d1b9ab
- MD5 d1f1305b8d79ccc9311eac0219995ffb
- SHA1 ee1f7b8ee34edbc164a7728740d1b7860d600325
- SHA512 92825a2a6eed478ec9ce15e594652b0cd0339bf71121034e6f21fbcb6570ca46bbb7c99c57d983884f6005d62f9d687d2938ed5d9dad18f69bc8aae4394b75a6
- SSDEEP 49152:2YaghPPccndxGTe73ez/H5mJsdqmpvv7q:LP0cXGSSK
- TLSH
  T146E56C57F55A8899C15AC034C6878717E631345A8732A7FB2ED04628BF67BF31A39F02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6 behavioral7
- Target
  win-x64/DiscordRPC.dll
- Size 90KB
- SHA256 b3dccc78588bcffb6cdc574b1b3fbe37af32a4f1d69adcb4b0cbc81f354bd4b2
- MD5 83177cfa660abd9104a9dc2be30920bd
- SHA1 736f87eda0d7a8b1449d860726531237ad30d070
- SHA512 8b18423541172e5031f763c2270f0d568c8ad1f112d54d65d4fde4b4478519085564724c8c5bd106a7152f3d773ce00049695d2b2d2bc5ee8f88bb409fa337a9
- SSDEEP 1536:AVBs5ofyDKHSWTr/20g0Ki+km3fArbjoM9sUwtDzJv+mbxUFSieH:AVeucxCj20g0KoSArb9EtN+m4eH
- TLSH
  T12E931A3057FC8A5ADABE1B34B47052110BF9F94A7931E79F4A4460DE1E03BD18A627B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  win-x64/DwmSceneI.dll
- Size 2.3MB
- SHA256 a7213ce89e05defc905e03373430ba3fd040806da8724b8911f8596b80afa7fc
- MD5 89951ecfb256c8d23b5bf3a04732d54f
- SHA1 5514f1ca5c0a65fc19558cc9e597f534ba5dd022
- SHA512 e07d986522f8a96bf78bb50d7578736baf2e6ae9b5e4594c9fbfa6ea07431ee41f946bc07c7e2f3c00882d6dddae86434ae4fa6234ac92a6b0bcaa642eed8e78
- SSDEEP 49152:UBwNHXd4iNxR4vePDDRW9Q+5yc4NGBF/O:J3ogc4NGB
- TLSH
  T1B1B5180A679841B6C5AED3B688D78B26F33274100BF687D3039C211E2DB7BD45D7B662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  win-x64/MRM.dll
- Size 297KB
- SHA256 01d05305cc75465349c044f2303fefb02485b4697626b509f849e57047db5013
- MD5 d6c0b83cc032e43341e841575a5595ed
- SHA1 49e8c202f8de5667dfe7cf43e4f4c2c2d62f0753
- SHA512 df996902476527f8043e6ef4c02b9af1186b3428509b50687b122f9055ea01a5d43073b367b8dd110df6e2b738bcf0e2c1b84823f0175be4e65736ac3fe9d8f0
- SSDEEP 6144:2EbCd4uwT0PsGTgPNVExuV5YMHZI1gj8mFsffg+hKpqw:2Jd4vAsG0PExwW1+KHg+YpD
- TLSH
  T110545B2A63D415E6E13AA23CC9DB460AF7F1740113629BCB06B1425E7F1BBE89D3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  win-x64/Microsoft.CSharp.dll
- Size 982KB
- SHA256 8e87bcd435b594e74fd3dd1c4529e98fef9f2ba23bcf83c00cad34c9c8466467
- MD5 34ba44ac0c7a1d5973dadc1ef98a0315
- SHA1 a37c1ffcfa298478f71319186245da85c1de05d5
- SHA512 0b41aca176fd5b3b317ece67e3aef9379b3622f1b0cdcf22fd3c0144ab575308d8f3f4a69d5b0b932ee9216b07784c4fb1365cc668efa5e205241f80d53e4120
- SSDEEP 24576:a6DJq30vVE6z8LpeNY+9whtbShFtHVu9yHGsC5DUD3Iu:5Q34VEYKaY++tbiHVu9yHegrz
- TLSH
  T101257B14A3C44E06C2AA877CC2679602D6F5F453D33786EF0484EE752F837C29A77A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  win-x64/Microsoft.DiaSymReader.Native.amd64.dll
- Size 2.1MB
- SHA256 315a61c47c41b8d4c815f4274bb6584c1d24b4640c7eedc354ed5b03a9a1361e
- MD5 e4dc9335fb0065d4b3066fcb8a878a9a
- SHA1 0d66f04b77a0726f1bc2077675d485700848d9af
- SHA512 929eb77e8b843e484ee74b408edfefffa15d0ee75d70d3b47a808fe380eeaaa9dc40bb29ef549e47e89dbeab159f806b4f823e8d3dc85e657f7bb32485a1c947
- SSDEEP 49152:8oJlAZFbi/H3LzED3pattTg4nm1OPriyQ:gZFbiPcEHg4mUPQ
- TLSH
  T1BBA58D97A3AC41E4C47AD178D66B460BE7F238050321A7DF02A0863E7F67BE15A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  win-x64/Microsoft.DirectManipulation.dll
- Size 638KB
- SHA256 3d9f9a417b59fa72f57d706d862690aa56867670839051230dfc7a07e3713703
- MD5 2665beb32b1296b55975577300fdb278
- SHA1 c55772f01e0498820dfe7f09ee60db61c44cfe15
- SHA512 bfcc7f04bd505cb7b125231118dd0735f32bdf803b5b8544cde64f3044ef04e6fda295e96e19ffe07bc4d919f88d9c87d0702772abaa72637b381c2262bff50e
- SSDEEP 12288:p3cRlO9Om2A/dJW9Cn3/yuub18+lnKEs6jjpJFwFYSOg3czLCg2WgRFx:KRlO9Om2kOEnvyuub18+lnKErjpIP3ow
- TLSH
  T1D3D47C2E6BE841E5D276917C91678A0AFA7174211B21D2CB1361813D5F3BFE09F3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  win-x64/Microsoft.Foundation.winmd
- Size 11KB
- SHA256 9435856e995e81fd448430880d9786a6b861d53ab500f8d41ccc59982e6d962d
- MD5 ef59f2c9ef8c720f930c0be487aba6b3
- SHA1 50dd9b02dcb52d59c6b4aca017fb440f04fea359
- SHA512 f6749cde94d4f4e3a607ff39e073611f46ea0393f6db860cb433e9521f15d31ef53de0d2d92d435bcc5fa350ab869a47f5448ca511fc3eaafd58153c297f7fb1
- SSDEEP 192:zEsWO+qMWeLJ1T+GnHnhWgN7acW2IHG1f63TLeveIZX01k9z3AvhWxV7CisO:zz+qoT7nHRN7D0r3jIZR9zKWyO
- TLSH
  T1933239E29E686103CD9B297053E8EA973C7D57CB19006427159AFEB41D933C1AB3463C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  win-x64/Microsoft.Graphics.Display.dll
- Size 226KB
- SHA256 cff4a050f1e8f533f63ef340b32b2163ca120156b6bd45b91a56885d6eaef810
- MD5 cf7ab729c29b973368314dc2fcf6abfb
- SHA1 082560ed00efed01608786c0b058108f7586aaed
- SHA512 c202459513db263b767e8e665a3d0a0cbee92ff7c81b6da0ce77457ad28aee6e752ee2d47430b4135e95c041d8d74ab2cea90b17834ad757e8cf62a28284c24f
- SSDEEP 3072:wueh3hONQ9yegmaNX/Z+MSr7V9muqheYGzdXlub61PUZ61k/TD7pG+VWBry:shRNgnRNX/8Mw9nKmzLa6j+VK
- TLSH
  T11834196E7BA840E6E177913CC9D28A46F2B2B061173157DF02A1C33D1E27BE9AC39751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  win-x64/Microsoft.Graphics.winmd
- Size 22KB
- SHA256 5a875a3ea1494f28a904112c864156df9030bf7e34d64ac5ab4baa41a2e57d63
- MD5 f07aade47d3914900047c5589fa79245
- SHA1 f8695a8fded68d5cca15b06ddc4df7394afb0c24
- SHA512 ca25c5456e5166240fe3d97d6783ec84256d3c82dcdbcb8121842163b2565900056131ed9883400b0ceef85ab921c644f91057c46ff64994e4aee72ffc637217
- SSDEEP 384:MyfbpDck7KElP/+5zoxPAgALYNfUt9o+AjT7nHRN7Ip9R9zhmQR:hNAkKElFAgAcaDAju/9zzR
- TLSH
  T1EEA23BCEE954AA02CC5A943127FAD2A7393843E7350296271E69EC5E39D37C05319FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  win-x64/Microsoft.InputStateManager.dll
- Size 430KB
- SHA256 75d94db2df334d354ab8525d31d2242e7dadc222ba604d86a97ff43651ebef08
- MD5 b8f6e40702c96d1d9f4d00723817273e
- SHA1 e33323291ae9a63977563bc9930d026e3d62a480
- SHA512 2a9b70e409fa15c6254fa41730f100b8a981e71cd224ec99cc724a05d02d895de7ce211e1522d04953c04169d6660c72f9d7a513d5c44c17ee9683fe1830a1ca
- SSDEEP 6144:ymuywtmryD54LVT9QVWRzkL7ExvM4J2tNqnw0cvlcD5KfsAzJr362AW2zdfZ0:yzfwT3kLwxUtN27cvlcD5KfsSxK2p
- TLSH
  T166945A7BEAA844A1D63AD13C89A78A47F3B1785907319ACB02A0426D1F37FF45D3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  win-x64/Microsoft.InteractiveExperiences.Projection.dll
- Size 1.5MB
- SHA256 1d461b01a6cc3681b8db2b3fd1f5c5964604d1739613b97fe32844c9cc728097
- MD5 f22ec917c58b91a85f424de240a2d270
- SHA1 5bffcb607b5c08a33ce30c135aa30423dbc53814
- SHA512 dbed0be77174645416e2eb54f0bbedc7c0ca2d91c09c8e457deb03f41c6a91266e290823cfaf35f4a32fb3c67e04948528176cec3893c5ed972755f23ad24a2d
- SSDEEP 12288:SgGVuz6osXjcWshy6kZeA5GEkRLK0wtAQTKRQKodDfZWj3C4c/HtB2VfYNG:5u0y6+efM0wiQEQKojYgN
- TLSH
  T125754B00336A463BDA1F26B4F11616246579C2476B53E71A221EA7F46FE33C90F85AF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  win-x64/Microsoft.Internal.FrameworkUdk.dll
- Size 997KB
- SHA256 5057357289e096208e3f99f383561c7f3f55494d0eb8ba89dfc7fd282cdf3609
- MD5 e7ccc87434dc27dbee106389b0750691
- SHA1 d6a167b3f8f58b83ab7a39d105dd8be4239a35db
- SHA512 8f956f262ec56416a0b28604be589427b94cd8d386e8e6c018eb7bfcd533843f4299a766efa8f22d00592dd9b4045137bf66d5ca6b358b40de4cd1ae5252168f
- SSDEEP 6144:kbdtzmCqrLwvDAh+l4s8TyZYFKVBWBh2TCFnbQ9dnt/Y8FuJ2Y4IpcZQ9Eyu:0eCOkvcOOy+2SnU9dntQ8FuJEOu
- TLSH
  T17D25A71EAE7951E0C4B9C0389596662FF8F130E24B345BC3D9919A0F6B32FE4A93D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  win-x64/Microsoft.Security.Authentication.OAuth.Projection.dll
- Size 79KB
- SHA256 32a926e6f1bcea28455d1492fed418d73344d7816c707b2c28c4fa3b8da0991f
- MD5 e7838d67c981eda4b0643d436ad55135
- SHA1 6a95d13a4f6aaba6da179b3d23c4b1048e84833b
- SHA512 a16b26a47392e6fa4612471978776ed5c1cfc224789af138c69c5143a5a3743c4c5d11993668b651c8fe7d8c952cf281c6d58cda21221b5d9fbe6cc51b3ba92f
- SSDEEP 768:SvMdsqmsEQe7d5CDJ+ID4fuQZ3Gr4Znm5MBKxtgFdndWOlt6u5iMbkCQV7lz+g9n:jsqmsEJ7rW+IE25MgKddGu5iM4lzPzz
- TLSH
  T14783190157988B27E69F97B9F6A0570ED339D2076263BB171A04BDA40EB37C4930B1E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  win-x64/Microsoft.Security.Authentication.OAuth.winmd
- Size 24KB
- SHA256 b3d92ccc3e8739bb4ca07dd50958415adae0da3193ddc6c413ce92cf41baae16
- MD5 704916cf859deee0898fda49ff79309a
- SHA1 2eb7710f089bd27350defe7da039da7de0d3268a
- SHA512 8b87a5409e45a113d5f67327e37df82449129bcdba3f68c80bd2c50d3bb1dd6af7b4ee3616beb4d76208b1ff4861db56f9c9ec30ae8c48a506c0ad4ff0e62074
- SSDEEP 384:YCHf7miBDm7a/WDksRJEWO9RxA0WsVav6v7whT7nHRN7NP3U0R9z2CfRR:fHf7milmeWDVmjH7wBK49z2oR
- TLSH
  T1ABB2F783D9C4C827DD4E2375F19CCA717E39E3631B46EA223608BE686D8F785CB01169
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  win-x64/Microsoft.UI.Composition.OSSupport.dll
- Size 66KB
- SHA256 4e7cd65d3e6b472cf7363d8c5b54e1cfbf34a5a93932151681bd516b1f743ce4
- MD5 93235ac65cd385e82863b6a914ebd024
- SHA1 38dc2b6a6d7f584bef25f4c3218a8e3d2a5eb4c4
- SHA512 35feca630dcb8eddd1808960ac73de61ba7b7dcc33d848ca33f929674115a4b03a810234631118f055f3f5b50b3993faf5ff83ce9de4c0d1d8b55ae31e425cba
- SSDEEP 768:XNUuOwEHj/5whsTtLmj5v/shn3Pwd92ma4u++58krAju49zch:X+uOHHz5whsRCp/shnY92l4VzkrAbzch
- TLSH
  T1E5637C44A69820DAE976017CC156CF1AE8B5B36253001AFF03A4D2BD1FC3BD9A53EB95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  win-x64/Microsoft.UI.Input.dll
- Size 1.6MB
- SHA256 8e158e86c92730a68905ab72f011644686d94d9d1d72e043eaeb2aec797db916
- MD5 458bc9235ce7d37d323554e19ecaa0de
- SHA1 ba1e8d37775412e88999ad6c0b938a8f0ca1e869
- SHA512 f6349a3c16010f547ede6f85ed0556012c12e2b5f93a1d0be00706d7d1dca46de633be28dfb692b6f183ad7f62e7186c5caa96a90cc2521442d32cfca8b36e12
- SSDEEP 24576:pDkPxHpRoonjX3mucmilYhkpUJ8kBEsXO/ThGnXXkROR3v:xSJpRoonDcmTkOm6XihGkRORf
- TLSH
  T126753A2B6FA884A6D336A23DC0A74F4AF6B174121B7196DB0171452E9F3BBE44D39730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32