9bc63319b4ca513a7c42912aa5d0e645d31a0ddf52fbe81f5a7d71a6607326e0

Sharing

Copy URL Twitter E-mail

General

Target
buildwithdxwebb.rar
Size 3.1MB
Sample260723-ynk6psap2s
SHA256 9bc63319b4ca513a7c42912aa5d0e645d31a0ddf52fbe81f5a7d71a6607326e0
MD5 c1cdd800c90f2c2fd7b1ef69cb0c95d4
SHA1 b036499f7d28101f0392c62e4992380e437e4af4
SHA512 69092cd2ff87a39790ad1866dd74cf19138d94ba0e187c307199ad2673b0ac603097bec0f4fbb3cb96dd64ffe37a75d7fbea2aff2177c1bef5bfe097c6978a01
SSDEEP 98304:9DdYPOxMn5Eu4/nqw64QDa8V1KvPFH2ETt/Df89:NXDu7YQm8V1K8012
TLSH
T1C6E5339CBF5C2F2C427002CF93A8EC6EB50E6B3CD9541391460D4AAB9DFC644D4B5BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  brotlicommon.dll
- Size 134KB
- SHA256 519282c91f165d4a7fa791a025446e1c13a21693476c5cd151bb410450b8395a
- MD5 76ad6fc0cd17ead8b62610cde0f1966d
- SHA1 d2313f11be636e140a36701abb9645afa5c3bafe
- SHA512 1be305b5d632f125d01531a4780f6d45be0f416303828476885bb4b76dee53c83abc1fecbc6cb758f1cdeb639dfeec8c4a3ea1b0e61f070de6573695d7b717a5
- SSDEEP 3072:74lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBN:74AhdNorGvHdbi09GJr
- TLSH
  T1EAD36BA1F3051736C26B227AE45A6BB9F33582B493670551B4A9026D20C3DE4873F7FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  brotlidec.dll
- Size 49KB
- SHA256 221ad8c4039b73872d6364e08e9ca20b5bb386dbcf26ece84ad8084ade0f7f07
- MD5 decc0c83caf92ee4c437bd25b6563307
- SHA1 d3b2e9aee758d6a5cc52328c31ad6c0517bc295e
- SHA512 76b8ec0c4c94a8176c23fbd69b75b51afe289c548f3b40194e01b27984fc0c9b02152d9ee09da92126f9db7605344bd8fd628304096348904227627e29510a14
- SSDEEP 768:nUwDM0oE4j4vwyu/x6oOWIH880mL/RkeqW/azQxARbYs38NmG:nUwA1ewyu/xiHfL/vmKmG
- TLSH
  T14F335D41B5E65A58DD13813883EB976FE7BBB8499301E3E7F2D0E6223E07AE11375244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  bz2.dll
- Size 74KB
- SHA256 b0b6fbb75f11b820821ef0c97a7d99db306b94099a2763bda0f7413a9df62901
- MD5 ebadafb6f712e1e0a0e0e1193b29c944
- SHA1 9dfd2f716d907939ea36ca0ba367340bf3657655
- SHA512 75c3b28cf4c5adc7d48dc00ea77ad6f7202d7c9a22a7dbdf7505690b31cf81bcce4dabb86de0a88d3f8dc1b8a646af58017dbd65b071b9c3c36d4985867024c0
- SSDEEP 1536:EMaoPj/yb4mgmidK3qFUYGwrxgaE7eJ6yUnz/2l/Jap82:iIe78BUnyram2
- TLSH
  T10E733B81A7A6BBEDD61B857982330212FB38BD3C0B5157BF22A4C7362B41FA55C71319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  dxwebsetup.exe
- Size 288KB
- SHA256 2cf71d098c608c56e07f4655855a886c3102553f648df88458df616b26fd612f
- MD5 2cbd6ad183914a0c554f0739069e77d7
- SHA1 7bf35f2afca666078db35ca95130beb2e3782212
- SHA512 ff1af2d2a883865f2412dddcd68006d1907a719fe833319c833f897c93ee750bac494c0991170dc1cf726b3f0406707daa361d06568cd610eeb4ed1d9c0fbb10
- SSDEEP 6144:kWK8fc2liXmrLxcdRDLiH1vVRGVOhMp421/7YQV:VcvgLARDI1KIOzO0
- TLSH
  T19654F15197E4817BE4FA1B311DF2025327797DE86CB9E32E838658881D71780BE35B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral7 behavioral8
- Target
  freetype.dll
- Size 673KB
- SHA256 68728a9d0440f80e6fd31d828997adbeaa09345f22409f291d0a89b55409b925
- MD5 a1996e8fb1588ba7d8fd0431fb58d63e
- SHA1 e3a6770ef621c2cf75e9bd8da88afee50598197a
- SHA512 1af064e986829daf4ec60fc062478436d6c440a32c27939202cc42aece37dc82071cb05d919f80dfb57053376e63c792866920bf8fcd12efe8d28979a3a0337b
- SSDEEP 12288:Sm/uv5eYe8+OZFaqSxZycfZsGf+JgxJL1AfEWmhKLImIiUv:SmGvOgZ87ZyqZsGfkgXHZhKLIzB
- TLSH
  T119E47C82F3E015ACC667C27C8617872AE77674051310ABDB56A05B6BBF13FE16B3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  libcurl.dll
- Size 638KB
- SHA256 9883961d1ea6b501420b8d57ac4c22e6786874fc5c33a60f51f1092db6b6d503
- MD5 406828dfb7b5b0010ae6ef42aa191edf
- SHA1 15d3aad6fb91a25b40589e6a7ffef706171ca709
- SHA512 2bb385b88c08c8cbb3679b378d5f88ff6d2a734aec38ba5d3c0735159cf013d5467e873de82853eeb1a0baee2edc1ff7aded7a6b363c2749170795570c58eb03
- SSDEEP 12288:W/clYFXBoBWhlYxOw+CyB8nRfTed5/gklQnAPlgTgc:W0lYFXBoBaYxpbBed5/gklQnAPw
- TLSH
  T1E4D46D55B3F401A9E167C17CC2439623E7B6B0546321A7DB07B4CABA6F13BE2673A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  libpng16.dll
- Size 191KB
- SHA256 53189f4a5426b5adb71ae7dd004333ca5f53ecd399b597380dfef9546a21fa8d
- MD5 ebbc3038e08d5cda059c24bfac13a4e0
- SHA1 5cfaa78de6480989b52be112c704d70e95b1a692
- SHA512 a409751612e62a55b57d94f5d66df8f1fd6008cd4fdb93407f25a18e68961e9dc8e6de41480dea636c5670b94139adc64e8efd453aeb3e9d1a9c26e08155b9cf
- SSDEEP 3072:27pKLB/uHavmCFuAViLJNqkzFUbZgyXY:2ELB/u6vmySJ8dbZgy
- TLSH
  T14D147D87B26500B9ED93D13C8642A117D2F1796813609BEF4BD08BBD6B13BEC793A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  tc1.exe
- Size 4.1MB
- SHA256 0d5733ac1b570297b0ee54f153668eec3b483392a0c0829dde98c83c9c9cd4c2
- MD5 a7d67a898422f204e22e52f17234b49b
- SHA1 fa230a73fe68bebddcea20a9c88372147ad2d037
- SHA512 ebc349c60f027a54e775fc21f8f4c10cb0e46a93519de14133903f86ec3749acfea54b1ce0980f3a8082e54bef25ba5ce3c56cf80cef53899abbcd846153c8fe
- SSDEEP 98304:bnn0D9do/Y7mgTm05AwJHE6hCJTlZqL9PlF:i9ag7PAmklLZqL1lF
- TLSH
  T14416BF42B391C5A9D2568539CE41E7A7D2323C084F2246EB379CBE1A7FF26D04E75B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  xxhash.dll
- Size 57KB
- SHA256 c3af6cb87a7f70b2d8546bd01c4875bd1ff6ed9daf470d98c6da55c800f9187e
- MD5 466300a481b35f64f8e1478658b0a2c4
- SHA1 95fe877d0ceae5b52a6d9c2f063a5fa4d2ffcbf1
- SHA512 37e8b0a69fe66549985794e6ac2a48e9725d6027cf78c4c1390007fe63cb7dbd4a787807843cdcc9ec55c67dc7fefad3a2e6b5f2e4b3b5797ae42542f21fb571
- SSDEEP 768:upGDuJCwTes5ovICVq1XwxMBP5+injQZOl2GnWrkiASW2fJ:KoOcxKxPjIY
- TLSH
  T1A1435BDFD952A87CC7C6C33CD79F6D4649B6F6200170472583A361642D136AC8FBAE92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  zlib1.dll
- Size 86KB
- SHA256 84dd681f219d5cb111261ad419b34aeba32de10427a51f3b79e62ce3d843bab9
- MD5 3aa82ee2533e2d4eda982780b08a3bef
- SHA1 c54288261067ee2f13f2965bffd67cf2531aba18
- SHA512 b3667e7f7c40459c0af04a9b078db195d4d433b736452d007efff2b56f1be4dcc039def6d741f9021324b4e7a83890181b0b1d8a272052ac56a952f9a0ec2329
- SSDEEP 1536:io5L+dFVRXa8tQahDhaBJeJ6FQMhX/FexTIOcIOZ9cydZ/:io5La9Xa8+EgJrdh9C1SZ9cyr
- TLSH
  T1FB838D95AAB422A2D6B34178E8D3479DD335B01403645BDF938CA7691F23AE02F353ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  zstd.dll
- Size 640KB
- SHA256 d580e36ca1480c544c7bf8b036dcd8062168fc966a9761358f12149a22767a23
- MD5 be019017d876b97e3114d10fc38c80cc
- SHA1 92cf519932d4a1f104c9f74c6094b46bd9ad4964
- SHA512 3d39a64f5c618e81efd749edabb3a3888ec4ab9b139221abe570a683890bcf97e73c19d792058d3a65aabe1a5efd92d252a6de6476204d1b84af201bc1690524
- SSDEEP 12288:udFgvkkkrBELbqJBPWT/ZKg39+Pedp1FLuOxAtGdiNyb:winGtWT/ZKgtqedp1FqObx
- TLSH
  T199D48D83F29592ECD02BD139C6565363EBB67C4513006AEB83A0EF653F13AE55B34386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Adds Run key to start application

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22