ec18f1854d7962687e74eb61a0469a8446a3d6e2eba97eeda3aab77c7bd95dd5

Sharing

Copy URL Twitter E-mail

General

Target
Sv_gui_SV139_install.zip
Size 24.3MB
Sample260724-pfcpxsdq4y
SHA256 ec18f1854d7962687e74eb61a0469a8446a3d6e2eba97eeda3aab77c7bd95dd5
MD5 0233cdcd75bc5470d16a740d73a3d517
SHA1 e282624e13dfc1f0d98dffbe0bafae3c06039973
SHA512 97d27482b1f238119fe790b4a8d1248b6bab38796b03994ff1ab2bc11423586a192de500025ab22f47bb2303996d6c7e0fe7d01ad8a812ca1354a8c09e334dca
SSDEEP 786432:sLZxtOfygFgid7fq1iCGPRtJIX3W6qsJ7e3vwC:sTCfNTq1iCGLJIXOsJiZ
TLSH
T13847335AC2260732FCAE14F0066445D0C7ED36143857D9E7E758A8CD01DFF9BBAB28A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  sv_gui_SV139_install/Config/GPSKlient
- Size 851KB
- SHA256 d19d3686bed518dc987c2b6f7a9ebb5e1be54de0bbf9f3222e35a31644ead2a0
- MD5 ee71b2c69be3222d32af001ecf9b2152
- SHA1 aca565a96b4216b06d449c69831edfec9cc49b49
- SHA512 426a71bf30af088c6d4ce99b11d821efb83d1bb9b7f8d825c51f233cbe3a4bb484c34fa151c20cc7f0096fe494d52a4594b258cff34e9bc29bfcdff7c268c7af
- SSDEEP 12288:nOTY9wA63cg8rZnoK8B26EhXGgAXb44u+scOswRmwd7DGCChvlt7SXx:H9HjgSmb44u+scOswRmw1GCIHS
- TLSH
  T1BD057F33E3954C37C1B32638AC6B5365993A7E013A389A563FF81C4C5F396817D252AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  sv_gui_SV139_install/Config/Pcomm
- Size 64KB
- SHA256 dfa7f57e519ed3f8c5994470e073e52df702ff0a228016bd19ee71ac8863c61d
- MD5 a21d9ec316dabe2892e198ea6bfe10b4
- SHA1 7de9c14072be771ef4cfa69dc43cbdfb2dcdb78e
- SHA512 f24211173ac8393199d22c525fa46b0fc7cf8ff5f0a9ed34a066f973ffe3d4410200aec800eeb8975b241df7dc4e83b3c38a3111a3c4833eec3680d0eeb5810f
- SSDEEP 1536:QNqZFAWdRRyfwXYFHGTwX51VTnKSUstzrZKi:QN8ZRRhyBpTnKYKi
- TLSH
  T19C536C29F0C682F3D6DF1CB534AB2B33DA2E5C1546A54893E793CC91BD53023AC66786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  sv_gui_SV139_install/Dlls/Msjint35.dll
- Size 120KB
- SHA256 3016d572ea5e695b52b1759432dd30b7a9cbc2b53ac42e8c7735854b464e7d34
- MD5 4fb4a9fbb17ed82edc6ac5c3c6e71c6d
- SHA1 15d9795d55f40658e874ccdf0dbbb191ab075a3f
- SHA512 4935db061b0d2a1bfa078d1666dfefd12b64e57e40d295f2c95c1d6b8cf0814ae80b20c9d410aaa97b50dc5e41093837df83c693e8abb608af9488de469c77bd
- SSDEEP 1536:AEhrCMnu8LylA1U4klSZ/v3P44XW9qT1z3RgYPx56gbpNvqb7m5:Aoju8Lf3db1zX56gbrqba
- TLSH
  T186C3684167F99618F6F77F706DB91AA44E3ABCAAFD79C65C1210805E0972E408DB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  sv_gui_SV139_install/Dlls/Msjter35.dll
- Size 24KB
- SHA256 3430b3680415b494ba7eb41f7bc83933da68d364a94287b9c07384b2fe3dcb54
- MD5 72f160302ee06a2cb12fa2ffa10ba3f0
- SHA1 099e3c78f511665ca9e9db3acca5dc244bcb744f
- SHA512 5f794b9a48c82764b9790fd084933030cd5a34eaa6bff5a99d74f625015fa50f4918e3f80625537023ec253b7de390afda224a76622e0c41c371d45f744656b1
- SSDEEP 384:Nj13lSJr+vZqNhbzRKLfsg+E08IC1cjyr/IBPKqBPERNU4ij50XHyWk4SVWX:Z134rOZbV70R4cj4aKYmyzj58H1/
- TLSH
  T16AB2920ABA940D31D3F3C6700CFEC7266E26A3DF299B5549754CA75C3CA6670283972E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  sv_gui_SV139_install/Dlls/dao360.dll
- Size 544KB
- SHA256 35492bea7a9e32c571cab91a6915d4317ce046a44f85e540ce08b097cd1cfedc
- MD5 1da02671577387ddaed0c84ce900c87c
- SHA1 88f9e3e7926f8525e5a6b2a6a05d55b080e42986
- SHA512 720f823fde853d9933d6c4f5454b7fb795eccb3b2d79541c78c4d988e25668c9427bee068bec3c0684db0f006cded3b202e1c6be41d3a576358ebc20f7b94aa8
- SSDEEP 6144:qho/2JuarZmXHSrRz4dHOVTiuKRk2VbUnzPMvo2jwdIh61yvYbesZj+yLr1QrbVv:QtrSk5+OVV4jjwW+VXGjI
- TLSH
  T16CC43B46F6C641F6EE0778741467A23BFF3867065515D80AA3A06FAA2EB3740331F17A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  sv_gui_SV139_install/Dlls/msjet35.dll
- Size 1.0MB
- SHA256 91dc7e10f4f97c0046b4b91b04b5195b95f3f0fd36260fa6433ef2ef623cb0dc
- MD5 2bcb3e39703a69b0235ad937c0e4b1ac
- SHA1 8a3a66c533f3e9361f698f280423dad4bfa7431b
- SHA512 500574ed6231d2354165052de53383190c7c187399991d3fb1ccb95709dc8cb795f4a9241d6da4f68f66ada5f1adc782786e6f2fd2a7a46252d0f9c599cefc03
- SSDEEP 24576:mTZtL5tRvRV0sjN+YBMxd/r3oc90orxuD6AmuqbdRM+92b:6LvHAYmxdj3codNAmnb/
- TLSH
  T163259E62F1C780B5CEF26674098B772BA7361B16013ADDC7FFE81C699933902571A263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  sv_gui_SV139_install/Dlls/msrd2x35.dll
- Size 246KB
- SHA256 66c74e4c9dbd1d33b22f63cd0318b72dea88f9dbb4d36a3383d3da20b037d42e
- MD5 954ceb4d7c7dc5e94ea237cf96d387a3
- SHA1 6dfba7f606d75782bff9694c3b098ffb6d6da1ac
- SHA512 f1d2913fb16c6f78bcc8e75ae17e08bf6d7b13cee0a1deab07372f97fce8d1a8347bb1bd289bbfc874eeb156eb9a4af10d4ca5aeb83a5057bd1caf765be93b58
- SSDEEP 6144:ZI0uKc+/y/n20qecWHUe+4nwO6WP2wpU:Ti2BenHUTzXWOwy
- TLSH
  T1C7346C92F5CB41F5DDD29A7905A732173A329703031AECC78BE42D528C637E21A3A7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  sv_gui_SV139_install/Dlls/msrepl35.dll
- Size 405KB
- SHA256 0dd108a0ace7101e55e2991f37ebcefa1d0258763d121a04b5516f037c0de2c8
- MD5 87be086e054ccfdce2c7913d56cb4ca2
- SHA1 d8f6b78c2c11bd023bd5a48238f1317a59c8be46
- SHA512 7c6b92da42bdd081158509b5cd994347b7e5fb217686a23843b89de0b1b06c60db2883e0090c1ad9f09788561bcd4c72440894c83c8d290fcc6edc062f2216ac
- SSDEEP 12288:tZE9GvGy6JJKHZuieu1RXQ1YFEx40uGQnJpiMED:tZ0GvG3JJKHZuieu1NQeFExzQfi
- TLSH
  T1A394185DE78B50E0EFF189310E8B7367653F160BE045A8DBF2F56E6168E6B011A26343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  sv_gui_SV139_install/Dlls/msvcrt40.dll
- Size 63KB
- SHA256 25f7b54f6f7a7b7ad200b00290b94bee152a0aad87ea5a4791a374e7cf1d07d5
- MD5 51a2ff3173d4ccb76d5b4bac35736e1a
- SHA1 c0775d2b8496b356891b65aeafd2b4d2d5f7da26
- SHA512 4e177710add083532bed3747ba4ddfdd800fcfa280ae3540577c090ccc0b81bd12c28ee1c97c287ed323b7171f72be68c4c79c11b4860b6dfb8a1740eea61944
- SSDEEP 1536:dU9r05e9wtrx8oKoGCBXbmrUmGR36M3vu6QMp2IOpQWQZaYaSN9P7dipCCzmlKq:tGCRfKM/Nn9NkFk5b+kq4FSuYV/YHVQ3
- TLSH
  T144531032A9FF200BC18CD3315B5163B40DDA612A5FEAE30F6459F1FC3A48E668D79568
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  sv_gui_SV139_install/Dlls/vbajet32.dll
- Size 30KB
- SHA256 6bb8c41742f0e86ddcc1ac813c27eceb605f83b57d78ffc9affc7f09e049cce7
- MD5 8690a2ebb67b6865bd49bd3aaa99dfb0
- SHA1 50bbab8d2bef2ff596a7d43e2bed89d0dea797fc
- SHA512 24758daaa1fde0a3b5933117fe86c33330942101585b6293c0c4fe58d5e415a4ea84c7c912770c469563aad6e99721d5d1c5fe386e3fb853789dd95cdfeaa845
- SSDEEP 384:aCSIfnFd4JnB2fo9T0PsDLns6I/sojFoe+3bYGVwW8p7sQBrFgtcWIzZWRa0:aCSMFd4mKnDLs10ojybYl1Fg6W
- TLSH
  T1A6D26B196A904972F0D3AA7415F2FBFAEB3E1C1A05178B87C740D9F61C79261AA37307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  sv_gui_SV139_install/Dlls/vbar332.dll
- Size 360KB
- SHA256 ddf8f7366a4e44bd7efcad0b3f20c8b0eb82185cc909b03ce6935415bd8c6a10
- MD5 9d1864ae5f6ff8bbde86a3f5a448110d
- SHA1 912dba207d17697be8196e46a0cb1dc13f291519
- SHA512 39f3730f91c464d46ef0432e85275747d515cef33f0b85ff878c3d25946539222b147d320521df87afc9e2d9fe74e292e30637a608cfbf915c203b4f3783662a
- SSDEEP 6144:uLa8OZI7UqK2EltlXtHTIo3+CAOlvddPxsCzp84J:/I7fKplthtHTIbUV7Px
- TLSH
  T162747B03B98180B3F9B455340C67679AB67C8C219B16D5C3B3D47A7E5DB37E2232932A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  sv_gui_SV139_install/Files/prezentacja.pps
- Size 1.6MB
- SHA256 828bea2e6b27665247a7afffe3775f3dbcb5400f53f80ebda5422c836de85270
- MD5 28f01314e4ee53f07eb7b0698c37f694
- SHA1 e85af3346ca56999dd84507fc3d2723970253f5e
- SHA512 142ba42adb60a82a04413e86a1ee63e9cc97e2db33190efa672182190c192b52b8535c7c7350c019ca449643e737900c4c52c5b10e0ce0d5a6095d96ddcaf2dc
- SSDEEP 49152:fp99nZqWpuDHi4xryfIt84u0OIgf0liKGG:f39D0OOrQIt8f0lxGG
- TLSH
  T180853310A46B9B76D66F957808A18A3C52BA2E50D110CD077728FB5C71BFBA6D1E330F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence ransomware
behavioral23 behavioral24
- Target
  sv_gui_SV139_install/Files/specyfikacja.pdf
- Size 561KB
- SHA256 8f65e8cdc68a970fac625163b36beff2b963b95febbeb1caceb30a24991cb58b
- MD5 d4be1fd257cd10eaaf8ff542ebed026d
- SHA1 b7c7232dbb3799993f7f9128050bb9e794fc29d7
- SHA512 304460d3d4d77061b854ff734ab2e71cb4b8a08ce8028c1c263f0f3351ccd26bfe47e3f83ec55ea0d4e221c2fe4684ce12d24c361d3fc8e953cfefc04f131001
- SSDEEP 12288:/3uoICDSY8IJtDX9VjP5+SW5QqJS8q2VHEm6IDoDbL9Ijj6MrHLt:/sY5fDXrN+lE8r76YoD39srZ
- TLSH
  T1C9C4F197F3C3D71EF50EC670EB651FA11662BC28D3AD4EAB39480E51E9D461CB824B48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  sv_gui_SV139_install/Odbc/JetSP3E.exe
- Size 3.7MB
- SHA256 aaa9c0cc3bd946904936ce1b02f730c17fecd9eaa02471a339f6917e9370e286
- MD5 76cb36068fb3b0696a53826013112884
- SHA1 bb143f1d6a8c39c53a16aab19eb26d23a7c22c52
- SHA512 a77eba4c73772a5f695a2553a6bc196d002921252029667d0e015fc58f82e623c0ca9f031c6297d9ee4cab0b7621057da94a72abd803b078b33fd29e6e67c1dc
- SSDEEP 98304:B7Qn5jfbiyiYm+Vund1txVwoOs2oT7Kdcv6bbqRA/zH+pD:B7Q15Vud1txVusrT7scv6bbqRSgD
- TLSH
  T1020633465EB7CE51DC947532C260FC3285AEB43415E26F9A93C80E4A0D7BEEDABE1205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  sv_gui_SV139_install/Odbc/MDAC_TYP.EXE
- Size 5.0MB
- SHA256 4d06c59a02977adef9cae9ba4f4591f2c1d70ea33d19cc06a6da14c3713ac0c8
- MD5 515e9daea28c94a54ea2ed0169d9f166
- SHA1 ea11c01e50ae147d8a723f52c9b99ed97765efa7
- SHA512 452db07076f7c43c799588f907bb160ef73ef5c0598ed9469537ba634129f400658b59482ec7ee7ad2ae8f79322fa254f84b9ed9e9890b9f999fa22afbdcae1d
- SSDEEP 98304:+CTHcjdqvKuMWOtNor/7yHjNE9iEBJUZhF3O3IUySUCIwrr3zcpnxhgXlx:7M8MWOfor/7yHZoiEQForXrUpxhg/
- TLSH
  T1C236339346D10932EE7E0B7505F81C971BFC7AA36E76D36A8B44A9410CB7A5239F0339
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral29 behavioral30
- Target
  sv_gui_SV139_install/SetupFiles/Help/help.htm
- Size 3KB
- SHA256 20b8dc264854807afabe1d5d05131c203e4723fbbb631b704443859d47224f69
- MD5 1f9c3dc53f1d268955bbf014cab83ae2
- SHA1 be9f2b99ffa710885ed1e1a4d234129c7b9c9488
- SHA512 d8c581513c2ce7a143038c93d3c5b34229ccb0d7f27081ccd4e0078ee51b1ecd8864378d90ec96c5c2e590fef2729461d57e8319c8600bb347cf20f84d95d5d3
- TLSH
  T1DD81ACD3FB84F95F8A232718708B09CF5C7A54F75329E754E97D990B80C52BD4A20AE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32