f00b2438bf423b01caa98d693f29b40451d03cf84b653251ef2f449b6b54e331

Sharing

Copy URL Twitter E-mail

General

Target
8_spi.rar
Size 1.8MB
Sample260727-wzcmlaybkc
SHA256 f00b2438bf423b01caa98d693f29b40451d03cf84b653251ef2f449b6b54e331
MD5 1f40a47068606588e821d61cf6553a78
SHA1 9390e12c890d03c595db274ac4c318094076b4c1
SHA512 3039bdea215d41d4c71f6c12fc6b4aadf833c69af1df1603ba19e8dcf84ef68c6a65c5f0b8299a32633ca1bc2d820f42b9bc8d6d0d33e9b1e721b0b8fd667def
SSDEEP 49152:0W7p6AEQilwg2mp2oA09+LXF004eZI+be5DhqvVna+bcLztG:0qoN2mj9KiIZIqyDqxbgtG
TLSH
T1799533D04D4F3015F4BD5A4DBE46189D352A0B92B4ED7A2EDA8E24EB62761F2DEC0D03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  CMP_v2_20.exe
- Size 684KB
- SHA256 06e3433fb52071f23f3998d10e0c1eee7a9a95b39ab53f2cd4216530f5062bd3
- MD5 9184b805ce12229a82aa9647a3bc08c8
- SHA1 9517577c18fd6eb44cbf5e1e7af1c6a594907ae5
- SHA512 8a85c665a2d663c8492fd242836ea3571848e0545a4ebc116d14a40317c54a2084a110a91d3b068ae66ca91588e583b3870750d0f6c91b3c55afaf8c2bfcf05d
- SSDEEP 12288:UST0YKXQiYCzml8EF7Gt3IHbBMA45ak6ludaoV76BNFiJ:UST0YKhlEzQanuv76NU
- TLSH
  T1A7E47B2AB291C83BC1221A345D6BE765A8B9FF613D31890733F02D4C5F75A907D263A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  inst_giveio.exe
- Size 63KB
- SHA256 cae47d68c65c65a9b5036f7e461d4a8516bfdbc22e8d4f766bf7e2a20b1e1ec8
- MD5 e44f6578fcab77a561b46d545d267240
- SHA1 ed29ec6b710cfcc92dfc5111a9be4d7b8051d972
- SHA512 0f32e15e4f92308277f954e595c0e870b068f984c102ddb48ddb7e3bc03d5309bca42a1af30e47fc5fb51d762de5e92e981cd8cb52f753b99cd5b7993297cb2c
- SSDEEP 1536:x8uSHh2Oab+GoRbEAD2SHsvholNOjyFKMy+JmCs5g7blR:xqEH+GiEs2SMylNOjyFbxJM5ipR
- TLSH
  T1C953291367E9813BF0F62BB059F602531735BCE46D7AE72F138A588E1D32580A979327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
behavioral3 behavioral4
- Target
  SPI_TT_v1.025.exe
- Size 216KB
- SHA256 2b5b608000b921e8b725437d1642d2e6475d4ecf078255c53abe0777c86d7b01
- MD5 d99d32271d60f4472cec913554a70b03
- SHA1 0b6253a83fdf88cff4850fad36258137b988cbd6
- SHA512 995abb21f1b2d9e92d609d03eb087c552295df9e4425ab25e9079da7e2ecf840c0880d7e99a8876f6dc027ac10684e8ae6b397a17ebf5031a57da63547e5bb92
- SSDEEP 6144:glqnwrPNu6LdKzTvWoaG99dHkmbxjc4xaU/Lzi8C7plqzxzI4Z:Xnw7NRJKfOo3E0Rc4xaUTzi86lqv
- TLSH
  T192241302AB9773A6C21C1DB44EB5E1DF23B09A50C877EBC21BBF570E6E400629A53757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  SPI_TT_v1.026.exe
- Size 210KB
- SHA256 861d1cb63907eb5809805fd296b780ee0d7f79262afa6916039e9c3148082fa2
- MD5 fa80e95fc0223d8ad9d312b68cb1a7b5
- SHA1 4b8841bf2f850acb402bc7c560b436f52abcbec3
- SHA512 818b522f2c29bbdef5cb4571f10abb8443a176a44b5eaac9a2f909f03469e730b2b70d39e5faffba34b58d4adc68b220d71cf6616ee44a5040b60c5b6b84dc95
- SSDEEP 3072:qMeEA1Y3oonYoOEmEpLlBzIO4EWVinVPyhvpakW/llXgZI3go3D26098WTArJHoA:Kf8ofYmCLlR14rVn1HW0ZgFNWTSo0O0N
- TLSH
  T1EA2412BE87C85AC9C1741B3C429E5F205379EDC62B940E422466B53D4E8DF683F3AA35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  SPI_TT_v1.027.exe
- Size 392KB
- SHA256 2ba51c5c3bc0959b95d3469614f752684f38542f18f1eb267c540b2cc73f4203
- MD5 5c06f50cd5b77769e9be40069f3c6b34
- SHA1 91e4d7f6ef20286d8a0677f79f522fcd193b560a
- SHA512 5f1637caecf5783c4e783588e6e8a2b03e9bbe5c445450b9ef0db5636edbcf7516bc38971467c2f24e5b2944f14b7596130f3480e216ac3271e17023c207f376
- SSDEEP 6144:Z40Tyl3MFyqWNrZMJC2QAOiDpprvY18Tj7IBrthRUzLuonePl2R3UxmFzl6wY:G0QiyprWcrX6pcwEBrBU/hePl2RPxY
- TLSH
  T1948423C8FF487649D6FD4835C6E3C9320163C50A97A81797448722C98F57EAAC4B7E0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  SPI_TT_v1.035.exe
- Size 456KB
- SHA256 70b88933b2aba9b131eac74cdac06977f4c105c9943c7610e5df31bfaaa29518
- MD5 ae8f57b38c2f06583b65d532827beb64
- SHA1 5d439b93f4c4c0ca2a0c22f5937b7d5f726c09e1
- SHA512 cc772ec3b91c7cc43f0c601a954f5034991628884848881a752ecfcb2794b6161b2382929f6e74f5925a7ac0596b7ea878562f4afc4cbcc4b551236ea9d79240
- SSDEEP 12288:GL0Q3C6qvEYHM1oQQUnE0rVbzJcY5zYf03X:j9XcY0oQQUE0h39zv
- TLSH
  T165A42357A2214D75D1EE4BBAFE95CC548795FC91CA3BCF0AA2BDB832FD89004C60616C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  spi/spi_tt/SPI_TT_v1.025а.exe
- Size 216KB
- SHA256 2b5b608000b921e8b725437d1642d2e6475d4ecf078255c53abe0777c86d7b01
- MD5 d99d32271d60f4472cec913554a70b03
- SHA1 0b6253a83fdf88cff4850fad36258137b988cbd6
- SHA512 995abb21f1b2d9e92d609d03eb087c552295df9e4425ab25e9079da7e2ecf840c0880d7e99a8876f6dc027ac10684e8ae6b397a17ebf5031a57da63547e5bb92
- SSDEEP 6144:glqnwrPNu6LdKzTvWoaG99dHkmbxjc4xaU/Lzi8C7plqzxzI4Z:Xnw7NRJKfOo3E0Rc4xaUTzi86lqv
- TLSH
  T192241302AB9773A6C21C1DB44EB5E1DF23B09A50C877EBC21BBF570E6E400629A53757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14