General

  • Target
    c80e6dc9568e889ac758d782179f60d2f33c2f963a7ec170cb0165ce82aeca84
  • Size 8.1MB
  • Sample260729-mcap2sdr7w
  • SHA256 c80e6dc9568e889ac758d782179f60d2f33c2f963a7ec170cb0165ce82aeca84
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      PrintMQClient(202106)/Beflam.Core.dll
    • Size 2.9MB
    • SHA256 e3255a861d2d76f28e63af12a91073c9ebc9af3de1cf9271c9d19004a22150f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PrintMQClient(202106)/Interop.IWshRuntimeLibrary.dll
    • Size 36KB
    • SHA256 b801de06f65557c0c82e9f6bdd444e1e09cfd9b46184e224dbc482228e5d027c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PrintMQClient(202106)/MQPrintClientApp.exe
    • Size 1.4MB
    • SHA256 67e3619843384f1b69f0c9af9f8a212fe19d71be3d3bc2e116d429f866b273c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      PrintMQClient(202106)/MQPrintClientManager.exe
    • Size 524KB
    • SHA256 d0f9b377a0b693598c231d9174cda32226cce0afb4995811a7259302d52eabef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PrintMQClient(202106)/MQPrintClientProcess.exe
    • Size 43KB
    • SHA256 dfbdfb97da2fd50a30cb71359bdf6c459eaa2f8206c2cf4f07b8072027e80ce6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PrintMQClient(202106)/MQPrintClientService.exe
    • Size 11KB
    • SHA256 bd368f4363b9aebe53eceec550cd6433469df92a1e38b37b6afbf25f869bfefe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PrintMQClient(202106)/Newtonsoft.Json.dll
    • Size 683KB
    • SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PrintMQClient(202106)/Beflam.Core.dll
    • Size 2.9MB
    • SHA256 e3255a861d2d76f28e63af12a91073c9ebc9af3de1cf9271c9d19004a22150f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PrintMQClient(202106)/Interop.IWshRuntimeLibrary.dll
    • Size 36KB
    • SHA256 b801de06f65557c0c82e9f6bdd444e1e09cfd9b46184e224dbc482228e5d027c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PrintMQClient(202106)/MQPrintClientApp.exe
    • Size 1.4MB
    • SHA256 67e3619843384f1b69f0c9af9f8a212fe19d71be3d3bc2e116d429f866b273c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      PrintMQClient(202106)/MQPrintClientManager.exe
    • Size 524KB
    • SHA256 d0f9b377a0b693598c231d9174cda32226cce0afb4995811a7259302d52eabef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PrintMQClient(202106)/MQPrintClientProcess.exe
    • Size 43KB
    • SHA256 dfbdfb97da2fd50a30cb71359bdf6c459eaa2f8206c2cf4f07b8072027e80ce6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PrintMQClient(202106)/MQPrintClientService.exe
    • Size 11KB
    • SHA256 bd368f4363b9aebe53eceec550cd6433469df92a1e38b37b6afbf25f869bfefe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PrintMQClient(202106)/Newtonsoft.Json.dll
    • Size 683KB
    • SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PrintMQClient(202106)/RabbitMQ.Client.dll
    • Size 275KB
    • SHA256 8e7d786ae3a2a8ed01e0ae822e7284121ed792b4600856411146830f059dc169
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PrintMQClient(202106)/Stimulsoft.Base.dll
    • Size 525KB
    • SHA256 34d329238ee2149ee4c31ada124314fd56d91dea078bb81281d16aa42757c461
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
7/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
7/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10