7b8ba53849aa1d84a3ea92917bb91b7c143d542c686eeabc51c2970e57051321

Sharing

Copy URL Twitter E-mail

General

Target
Setup.rar
Size 64.9MB
Sample260728-dvex2sef94
SHA256 7b8ba53849aa1d84a3ea92917bb91b7c143d542c686eeabc51c2970e57051321
MD5 c143715641118fb8f567585fd4a89888
SHA1 7f5ce48fec9ac991ca9cd905cf00d772054363ae
SHA512 2de29d61676b1857e4a53a5b86286f7ccf4f9658fa97fbd0dd9d37aab2ff5f4aa4080beea49a5c3550193f4199a84bd03a4edda8b05ddec9631cb8139ad04af7
SSDEEP 1572864:/iGrZAR2aYnCTjOmDEwV8yXO5LH/rvX6vwHeyZkxf6/g:0AUTiQEwV8j5T/+vwBaxSo
TLSH
T178E733263C9AE4F4AC8EED4BECB875393F142253BB0D93E1878224D1559527FB8504EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  Setup.rar
- Size 64.9MB
- SHA256 7b8ba53849aa1d84a3ea92917bb91b7c143d542c686eeabc51c2970e57051321
- MD5 c143715641118fb8f567585fd4a89888
- SHA1 7f5ce48fec9ac991ca9cd905cf00d772054363ae
- SHA512 2de29d61676b1857e4a53a5b86286f7ccf4f9658fa97fbd0dd9d37aab2ff5f4aa4080beea49a5c3550193f4199a84bd03a4edda8b05ddec9631cb8139ad04af7
- SSDEEP 1572864:/iGrZAR2aYnCTjOmDEwV8yXO5LH/rvX6vwHeyZkxf6/g:0AUTiQEwV8j5T/+vwBaxSo
- TLSH
  T178E733263C9AE4F4AC8EED4BECB875393F142253BB0D93E1878224D1559527FB8504EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  About/KeyFile/1033/resources/GroupOnboardingBackground_CCD.png
- Size 281KB
- SHA256 b5cc8307253d273aa5d89cfed2e216ec9a47db41f52fc1b15a8cc4790933efb1
- MD5 5fc4323989820ca53d5e7ec7ddb5975a
- SHA1 1a94b4ffab4bcfe7d3c83437e70898e04a57ae1e
- SHA512 7f4cfb56e047e1be4e3cafdcfcb8dccc17cb2b151bea41843a6ddbd4043fcd70fae17a3f48233d58132c6672185b3fbdab0f65b5b867112d3ee8d3d75c30ac3a
- SSDEEP 6144:iTe8lhGK7hksOP+bpXxAHnxetIwI26I4jw0:L8lhGOjd94l
- TLSH
  T1B05423AAD4E34B9C849D78DFAE635D0F15F268FB5343384A9C2E58B0D241041FEA6F24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  About/KeyFile/1033/resources/GroupOnboardingGraphic_CCD.png
- Size 151KB
- SHA256 2cad134452e77c9f25a23fbad663e2f0d8bdbe7fc0155d85b64ff5ad9fcc82d1
- MD5 10615aea053a64f4e10e0b33cbfdfbc4
- SHA1 680c4883dad07f356e3912f372bfc1348d70155a
- SHA512 718ee59633f9597cbfb87adedddfeee2e822240c7fce3e6db14a87b438eda31df3cfb18700090392ed7c5518063c3569d8e41561d3c93a1447c65a1a7d77085c
- SSDEEP 3072:VjBdi+wKmOcx5GqG5KUubOq8rz1QV3xUAA2AH:VftwVfx5LgcxUAA2AH
- TLSH
  T1CFE3129284E9E933D76698DC474339A43FB015703AE66966CBF8019B160F83C2D93FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  About/KeyFile/1033/resources/captureCoachMark.png
- Size 146KB
- SHA256 73ab10ea9765774e600fe6ef7eb2ada4ab1e9d667e1033e0df954fa62c4136c9
- MD5 f189acfc03efc50de1d1e8c86c5c9d30
- SHA1 10cf952bbc0548ee445c9a896d1660ae5b3855dc
- SHA512 bdd3ce59e9a938f93ad7795282fc01de10e7c0d65552947d4ff3ffa9df13b201191e5b7e6f1eb78b0d1ea18a91a7207212feb9db764e63d7ff9f79a885b2f470
- SSDEEP 3072:VcesdZ1MZcTkX7aBSim+uEgDra02xDyiov9oubXP9TFY+Q5YlAoi:Wi28imHEgDrCG7Fo8P95YRvoi
- TLSH
  T1A9E3128AD93F98598F2F99A487B40FB6DEED1F413B75CA42DD25588D2600ED39400EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  DAC/Shared/Microsoft.SqlServer.Types.dll
- Size 374KB
- SHA256 36c3e5efd0731ccf5ac9a341c488b4fd14c69747f5a3f6e4cd976a7c1288b3b0
- MD5 25656a196ed967bcd4b152a4073b8b44
- SHA1 a9b64b8a42c9da3243378f2a17a9ff8057154116
- SHA512 3903556d2130a219e9795856a14eb28926e3b798eabfe96353300ccc1c11925aff2f417c9ca588f2ddd0df47d6a64517980a39752edade9ad725f6ee4aa16383
- SSDEEP 6144:OVcpT4frcU6MM6Hymh8qME8h2x1mobeug:vMFRx105
- TLSH
  T1AA84E81CEFDC123AEABAE374C6F04475A366BA62663DC7CF44410E8D05276C186A177B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  DAC/Shared/Resources/1033/sqlevn70.rll
- Size 2.5MB
- SHA256 4790c4c828d21865b556b48bdbb0dc84fec7e49e8fbccfd5e75c9dcfb86cae5a
- MD5 27d0d43f7ee9daefc96eef48620bdb4c
- SHA1 83c84ce3c517871dec311500001db5c501d25be3
- SHA512 fd651fb3cb9335db0a26fd58bc0831a0e91c437ca1a65355b968cf0900fecab1289b6660e64220c330b00c456e1a40e6536e8ad0a3df3f58021f6c1a47861530
- SSDEEP 12288:GgNYGl0T5TJ4IkbB84tgpciKgYLtXU558:GgNcTQtgVKS8
- TLSH
  T126C5694267F99208F6F73F6069B816A00E767C9AFC79C25C2280945E1DB1E41DEB4B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  DAC/Shared/Resources/1049/sqlevn70.rll
- Size 2.8MB
- SHA256 09c875779139587ede45c49cf14173d7ce1b68246471a4f5b67dad021e5085ff
- MD5 35e743c24d8eda76966acf60ed8b337f
- SHA1 9eacb67db44b21d2091a50f2d7a7ba7cfa7bfbea
- SHA512 a25e279baca808528e8d9c0d824ca008a3666eb62f483dc3c9f81c503c97d22689c4ef8e525bf45844f865200f85a3b0a9b1911535fc427e51269043f5983a5e
- SSDEEP 12288:Y2LLINEgCKk8WfQV8vdjH6m9csYVkTzwx/1:Y2pgn8vK1
- TLSH
  T187D59B0FF97C9254B964E2600F7685E311AA7340632895CAD68F7DB970AC63677383CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  DAC/Shared/instapi110.dll
- Size 47KB
- SHA256 fc988b3fad95fd8ad36d829c9bfa2f36dcd517de674705a3928ad3384354f34f
- MD5 f9ee4c23a7bdbbb94bbfff3da087b431
- SHA1 b8dad015dcd170bc84e8ae333c66e40c7e4090c3
- SHA512 9ba5b2865854929f6ce41139c0a2db61ff49291b0a4e8a0ba653ed622406c0cd9eaeaa4df44fccddc03f0ad621ae75db071d93b76454d4be468334069d8bf5dd
- SSDEEP 768:6YNhRVG+vZ0Q3V0qOflcSpvxxqGdhO2zUGA1el:Nt48Z0hcexKEUJel
- TLSH
  T1C4231A02DB90928FD49594B0227C917A7C3C9AB2134060DF5B67F6DA38F53DA7B3075A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  DAC/Shared/sqldk.dll
- Size 1.6MB
- SHA256 5ab3dfd1f5c303688593e8779dca3fdeb3075647cc675df4d3a23a0a3f90f84d
- MD5 9284cdf83b7b75720344b616864e8766
- SHA1 0ff8fe5eed78440044f1b6afe117e91d2453744a
- SHA512 6b9fbcbafe732720e3bc7b4ff15a1349b55d46fc760ab2961193c4103439aeaa1313a950436de80fa6d2c78e9e4334a1d64c157046ec4ce41c2ce32c6df2665c
- SSDEEP 49152:aBTO/KEiThdwXGn736mpSLa2CWtvhpW6xaf+MBAm7PdQJDdwczf4jW:ZyDThKmWtvhpW6xaf+MBAm7PdQJDp
- TLSH
  T1BC754A21ABD78039DA2235701EBDF37DA13EFD85022AD71FC164C5661EB1D02A606E7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  DAC/Shared/sqllang.dll
- Size 24.8MB
- SHA256 f51cf85cfe31f0b447ad5d6000d176b64de50b5e7a09a0af9f59c0a23cbc729c
- MD5 29f692b545d0493d4d2257439c6969e7
- SHA1 fccfcd17acf600abafe4671be0a1e0d9c06ce3f6
- SHA512 dccdd19aba438f40fd944988f4431a905633cd29048de3b45c924350db67ad481bb221546c41145de93bc1f210c5c9e830a6dcb95127c04f8c80924647f027b0
- SSDEEP 786432:bNCDpdcZRUQeXCcIOwpjfUwLMusl6xVxKwDu5ZKj0YPmSRVYUzFLSm9GPW22hlcB:bNSWaQeycIOwpjfUwLMusl6xVxxu5ZKu
- TLSH
  T15D477D327B97C02AD57226B0167DF27EB03DBD6A163CB60B9184FD251D73902AB05E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  DAC/Shared/sqllangsvc.dll
- Size 51KB
- SHA256 b5108ecfc1dd73e8023d609d5edd8e6dbc5279991a0ae1628f0ca2932b61010b
- MD5 fe645bdecf22601e9fdc293aed23ba0c
- SHA1 a665dd12847f2f19a18e68329c98ec543e295027
- SHA512 43ac5d53d58c18c0983cbee628ff31dd3ad643b6b9e2ae1bae6d604885538a6733eb05551984dd7cbbb2ae00904e43ba3755ee007c83f874d0627d891e4162b8
- SSDEEP 384:3xZhtomhKV3lOIEPiswqIWqmxD/lmXruk76OeyO4tepvgizbPVHMgBqPWbdWEWr3:DhteQ/RxlcrP9evjbdH1nlWhMGAedt
- TLSH
  T16A333D523E28D042DC926DB01AA9EAD22A3CAF851F1051DF3259F3DE2C717C29F7056B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  DAC/Shared/sqlos.dll
- Size 23KB
- SHA256 c8fe018e57adbb1a5328192e8e9be4a5eb15829ff5ab2713b00c6be7dca98e1e
- MD5 d5678b23d062bd0acdc4b6d9e88c9585
- SHA1 0f9ea289f11eec5b5bc8a00f70d36b84b33f8455
- SHA512 353669e3d65153425f45fcf0c63b603de96a1213aee9db824865c2a80955c465b2e382f01dc91baf8505ff8b970555cccafacc88f4fb4eb20d32bb1f75703d90
- SSDEEP 384:XkA5+yhXPVGfPPWY7W/hPapBjTeajCCcwvZQlHMv:RhXdyL+GAISm
- TLSH
  T15FB21982EEBCA043EC825E7012A8E9C37C3CABC32B6550EB1559F1D928927D1973457E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  DAC/Shared/sqltses.dll
- Size 7.8MB
- SHA256 ab859a1d945cb99e2e52e218ef442234d1436f9aa9a81b76ebf85068ccdebc05
- MD5 344479af61cacc9c64bca055297afec1
- SHA1 cc5e66e6dffa8a243193a8d25424dd81c8d85eac
- SHA512 cf76823c207ccbdc298a863b123c9a84e28e3e41c796ceb55d77fdebaa0ed9f7eb5262efd39bd393cc86319d98275a485e791d3d28b2f92a8d9d69866ba946e7
- SSDEEP 98304:Pcd0ZA68mlyCINfopv58AROqst91tJ/maN6oOv58ALBU10BV:ksZOGJROqshtJ/FiJLH
- TLSH
  T195869E62E34BF189D4972831625FA3392034BF3FF419B5A563C6BD35DB10A23B81C95A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  DAC/Shared/xe.dll
- Size 399KB
- SHA256 0ec09cd7d58aeb260fe82ca79ad16c353d7053a665d98f4deb26eba5e2b6e9d3
- MD5 063ca314262d277a92189028a9e094fd
- SHA1 3f8fb62d6b38ae258dbffda4d9470c78753c3814
- SHA512 0ef025c85545377d67562bef8744c0966262fd5ffe7fded4a9958ad01cab19e319b7f29fb45d4187a4930611d6b0dea0be32097cb78ae8423934080f7038193f
- SSDEEP 6144:w92cdRECvTmwWWx3t7893HQPRe/3maKQM:wYVCbm7m3F893HQsfmaKL
- TLSH
  T16F9409716A89C23BEDF22AB90D7C756E102DBAD61B3080CB93585BFE9A741C11E34717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  DAC/bin/1028/DacUnpack.rll
- Size 132KB
- SHA256 9b10d6038bfbfd7c4e734acf48b152a16cd8d3ff69f06b1b8aca008842dba34c
- MD5 9adaa0c7942bfcb41bd036f6e695099a
- SHA1 58309e42ba125a518bc7e02bda0f235d15be8360
- SHA512 87b98c099c5ce6d07b7630cf8e3bdac1d9dc8dd004684d48aa4503c2a073bf313006d53445036f95f55a64701691795985990db26e51a5aa220c4dabf9df65b0
- SSDEEP 768:gzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWg:8ooFyAJWnPhC+I2McFkpHgTqmAArZzQT
- TLSH
  T170D344D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  DAC/bin/1031/1028/DacUnpack.rll
- Size 132KB
- SHA256 9b10d6038bfbfd7c4e734acf48b152a16cd8d3ff69f06b1b8aca008842dba34c
- MD5 9adaa0c7942bfcb41bd036f6e695099a
- SHA1 58309e42ba125a518bc7e02bda0f235d15be8360
- SHA512 87b98c099c5ce6d07b7630cf8e3bdac1d9dc8dd004684d48aa4503c2a073bf313006d53445036f95f55a64701691795985990db26e51a5aa220c4dabf9df65b0
- SSDEEP 768:gzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWg:8ooFyAJWnPhC+I2McFkpHgTqmAArZzQT
- TLSH
  T170D344D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32