d7014b74f80b9a00ac25c2996f9432614fb1ea693a87f92718ca97e28034b0aa

Sharing

Copy URL Twitter E-mail

General

Target
d7014b74f80b9a00ac25c2996f9432614fb1ea693a87f92718ca97e28034b0aa
Size 3.4MB
Sample260730-s248vabg56
SHA256 d7014b74f80b9a00ac25c2996f9432614fb1ea693a87f92718ca97e28034b0aa
MD5 2c2ef86bbd0b4d55d96975297735d619
SHA1 13fdde21deedbcd1be64ab129334bc6a6a6d9f92
SHA512 61b2558bb7f05e732f695b2dc2ae434f59ae412e3cc40c62b85f8f40c14af42c8fe674ca0ec7ab9945a413bb69e5975762910c750d173843b3b178c07c3003f3
SSDEEP 98304:kecutxqBGwT1gEaQyGLILPU4gOXOb8ALj8YBLkPbIKNU:BjqBD9DIr3BaLoYBEIKNU
TLSH
T1FBF5332D8C4B62F2E61FABB5C35B84B384B17081756510F9267184D50F76EEA2F2D23E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  CodeWalker30_dev46/CodeWalker Error Report Tool.exe
- Size 41KB
- SHA256 d651a3a11f5b598387471e4fbb6ec160d8a5e8b5d5d0a2d24a3085f51416cfb7
- MD5 eef4e89bf382510da60485038e520254
- SHA1 d4042a839b237646ac50af4cbb03a5667bab01f3
- SHA512 5844657025b005d700048eb390f7c4f5891eb039c15bf80b726379b8d704c863979e40cbb0caf2e4673c0479d5078cc67191489915d99f1a780c4938c1e52ed7
- SSDEEP 384:xPkc1EkvwKwq6u2rxbGOIv572fjSuTso6IQFGaxSFJKum7V6MzVcWLNV8:xn10rhZgS+no6XGIeBcV6WLs
- TLSH
  T13C13C58177558AA8E9195B3A0830C9CC92E5FE842FA8F78DBCC4756F3BF2BD46210355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CodeWalker30_dev46/CodeWalker Ped Viewer.exe
- Size 21KB
- SHA256 cf44ce9fe309c74f08eb229ba550c1b59c8d63dae390afa9b434c34a63b65d0a
- MD5 927a9ec0f7aa7159880029d730f736cb
- SHA1 27dd41fd82e22ffa6847fcea7bd53f249e6e4ee9
- SHA512 8a84b68982c62ac10b287fc2cc4a3b48b1f6a55eab73eca844e326d7bb1e8069f7dfbb9664d8ba49b4aa1e2608fc3687ec823b7eca280182e474989cef111171
- SSDEEP 192:pO1GwiilkjPVT1Wcg39/S47/Z5FlfAmaSJ2fh7FH0Awv27ughoLkVjgfT2OcLOKx:s1/iKcDCF7TzAmsp7CkSMzVcWLNIhj
- TLSH
  T15FA2F88252845B98D9295F3508310AC896FAFF897EB8F79DAC44756B3FF3BC42211251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CodeWalker30_dev46/CodeWalker RPF Explorer.exe
- Size 21KB
- SHA256 c9c925524f950f4881c99fdb8732323da6048287c7d19f7d8ef9a441eba25047
- MD5 05c358a1b353b81743fca73379e5a3ae
- SHA1 0ff603390f4f795fb73900c928e2c300e18cb0ce
- SHA512 fd80b11aba4cf45ffe5aa79d129690f5c5d4155a362959a00213f35e4e2bdeb614657e9403041a866df73d05af4556fb392a536fc2dca39c0bb7b156fe21f682
- SSDEEP 192:iGmMdNaZ/UXBD6in7Onh6YYYY2zughoLkVjgfT2OcLOK9Mw4VT1WcUiN3AdlbG4Q:iGm//UBDD7u6MzVcWLNr+el9z
- TLSH
  T10AA2F682528047A9E5295F3508320FD867FABF897D68F78CAC08B6673FF37E46111644
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  CodeWalker30_dev46/CodeWalker Vehicle Viewer.exe
- Size 21KB
- SHA256 84e72fca18a9597c25f66104e608eb190385cdc737186c54959506de6f74c853
- MD5 8c3cf5da9996d866ada42922f7734e06
- SHA1 189213900b7791d82cfe3726f898b24ed79007fb
- SHA512 43dbb246ef26cbddf2b6d5dbddc8b97390798fc1f7060ce9cf2db5e2cf253eb0b4b8aebc59d88bdbd05796720c0ad0a4cb5b65a8550901298c63f3c300e6da82
- SSDEEP 192:nGtqw7y7IcVT1WcwiN3dlsDkSRPwR0nNSaS32m7OnhhYYYY2zughoLkVjgfT2OcC:XSSq5oS6R0nsum7V6MzVcWLNbhsHCo7
- TLSH
  T13BA2F886628497E9D51D5F3508710AC8A6EAFF987E78F78CAC44B56B3FB3BD42210344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  CodeWalker30_dev46/CodeWalker.Core.dll
- Size 4.1MB
- SHA256 3d2bb91b35cf0d1888c12772a9af25441adea3ccc8510a149fcf0d47c8e71ca8
- MD5 b537a46e6bff61d6f69a1eb2b85e4863
- SHA1 619034fd85cbb933ee5ed74ebcace01e0b9f0acf
- SHA512 67189082df09f6b09270a322734772bc08d0037e210dbf40d155cb90334e7cc08e7b182b26e30efbc63c3caa0df4b440eca723e00f3fd2762430e9730a752efd
- SSDEEP 98304:ZLIt7dBEWbT1UksMPtWbnF8o0xhtDDsZQmQKEBY8g5gOKN:Ixo/Q0C06
- TLSH
  T1331608099EDFCF1AC49AA931C0B1D02763B3F8AD3B55E35CAB71A45C38467870D06BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  CodeWalker30_dev46/CodeWalker.WinForms.dll
- Size 146KB
- SHA256 4c7cf43a44ea2b5cd1fa281cac844e83aa324a97b3fc725331235942a3558d70
- MD5 b554be7674cf1c13bc43652aabe3c7a0
- SHA1 f4e9646c475758f0c1781f351553252c05a2d7e5
- SHA512 5996901b03d5c466a87186c0d3a1af65ff79feefe439218e62a6e50b1422598b68693bc44d8bd23c4ab75adc40d672737e376bf1b7d30289ce3a37cbb2218d8d
- SSDEEP 3072:N1/GFOOhYSPMXnm+sXnmoBoFOe9SPWO0nQ:z+FOebP2nm+oBpxex
- TLSH
  T1D8E34A153BAC8B6BD6DF0AFCE064815283F4D622B15FEBE95DC460FD1C437A196122A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  CodeWalker30_dev46/CodeWalker.exe
- Size 3.2MB
- SHA256 264bfab08f0cb6b7f1c8c196b6c64318c23fc69019f729122cc6d24d59edb633
- MD5 bac08577752e88f4b767e06ba3c486c6
- SHA1 22d9adb6fe7db81b00ea8f5929b78ec70891228d
- SHA512 37a0844e2b45c9de8da46134b938d8b6fec9a1620d760f1013a0ab176f7682cd8f95384f0c31af7af21ae9368072bbc3884af0c77b63f611f2f0bda0e8caa444
- SSDEEP 24576:wZfNH9dVdRP4Xpz9+t6LaXZ1E7N0tknel/UR6Qe2hX:wZlRQXEDp1Inel/
- TLSH
  T1BDF508803374DA59E02E5B7BA12084DC97B1FE5B9FD8E68C7C80B65F29F2B505906363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  CodeWalker30_dev46/FastColoredTextBox.dll
- Size 323KB
- SHA256 ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9
- MD5 8610f4d3cdc6cc50022feddced9fdaeb
- SHA1 4b60b87fd696b02d7fce38325c7adfc9e806f650
- SHA512 693d1af1f89470eab659b4747fe344836affa0af8485b0c0635e2519815e5a498f4618ea08db9dcf421aac1069a04616046207ee05b9ed66c0a1c4a8f0bddd09
- SSDEEP 6144:0R0J4lx4/7BA4xvNdcwCOg04j0y5mwZkdmsqmLDi5eNH+Dl1SIP0:0R0J48lAovNd7CO34D4b4eNO
- TLSH
  T16564391012F84659F27F47BDD4B9C01CC3FAB566A99FEB0E89A560DA2EF37409905233
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  CodeWalker30_dev46/SharpDX.D3DCompiler.dll
- Size 57KB
- SHA256 268b44a78354f7a225e5b1567223179c7b73453c0a27eb4bf18bb57d7a8e08d9
- MD5 66aeaaba0629daf8544afc8008079386
- SHA1 1e09e5d24e1aa3d1700b265c6ff94b7524813f4d
- SHA512 dd2cd1df484600e6cc3e686e64559c3447f255f723b5f57cd51f76a838a79416bf68b7a7b380467bce172fc3ec868eb54a0d754108926782d31bb0cbd66f5a54
- SSDEEP 768:VbFZAPoGIjmU9ZMPVNOhTJCj+775suxTvJREFhtK4shNeYJub4h8ZGdwv1PmQYEQ:Vm9SXGunREFhtKhNeA+4h8Md81VYExO
- TLSH
  T1E4434D21E7486256F68E0BFDB0264F064331F2467417E78BB9CC98E52D97354EB1A3A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  CodeWalker30_dev46/SharpDX.DXGI.dll
- Size 145KB
- SHA256 bc0243134c93c55ea105d0e9c2a43b6030e973290d0a061cf3a61986a2268a88
- MD5 d2edde626c241549eab636aa87fb5d38
- SHA1 8d836febd477b3ec44cc37f4f0aecdaa1d7db788
- SHA512 490878e20ed764e81e42b8f43faf2adc0810dcd2f65d36f6d6980411617fae9543f0d7b6f110e5363be494097ba3b30dcf3695aea41314fbe19c6a59a55538d1
- SSDEEP 1536:x/xP0dmNHRIfvXyTjUxk0+8shTbRqpzMA1JhkrIAcFpZMD9hVRg5bT+02nBJdbea:x/OSSfP60kpVxbUuZKq/4qaTXc
- TLSH
  T1CDE321826D7483B4E9CF7FBEE695B92A5523F1110481B64612E27A004BC52438F9FFDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  CodeWalker30_dev46/SharpDX.Direct2D1.dll
- Size 484KB
- SHA256 9f4b5e240cb42ce903082f81633bba0c781c1e684fd5903bc3915e3805b5e83e
- MD5 b992dfabf27b4c32c57d5cc2960cd8e3
- SHA1 b012190d4cefbca3c63218f8fcd6e7211de40913
- SHA512 f6d86cb73cb44c2d0ced4585f628f953ff604adde07da724f64122c6d07536985c4052a4aadfabee69f16a47797ef87f48e46eb5ff9601d0d3564aa4979f9467
- SSDEEP 6144:90MJT4AfGTJX022MfHZJo/AuiEqQvWW9mArUXCxfBRh2O4OFr77:l4BJECZSxBW6mvS7RhQ8r
- TLSH
  T1B8B44B1127D84B2BD98D5EF7D171861892F8D10BB227EB4B398691794DC33214E0EBEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  CodeWalker30_dev46/SharpDX.Direct3D11.dll
- Size 276KB
- SHA256 56f525e33494f4cd2a560a71cdf237303a3fb54a8fa44e1693eba35c9245c60a
- MD5 07137e5cc4d5ecc95ca267c9dce042d4
- SHA1 d82f5e3d718bc9172fcfe0e8c50cb20251762058
- SHA512 9d1d6eb2887653260b62a24d3ab2c358bf15b89f68a1a3a1104f1eb5362725eb535218b9a53211f9cdb67d7793ce346c520a289d66c3edf786b0da5db7c39f0c
- SSDEEP 3072:zTlyoOCGOd8DxSEjnhkHTI4A2j4xBJz+gM5w9HDAVvbLvm5KhgeeCjDrgvmjG0Wz:N3n2lB+xQyUeklXAknj1ur
- TLSH
  T16254F911EA084E8BC98E55FEBC12F90782F98C15004AF7A7E84DC59B1ED23D9D91E7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  CodeWalker30_dev46/SharpDX.Mathematics.dll
- Size 210KB
- SHA256 4c9615496970ea84320e2a6e99f8fb828e3c7790384df5585d93fc368885d94e
- MD5 50e6524b7ee9c2c93f5210b63cb1ca54
- SHA1 3e296ec3bb24750833ea80515e6fb4c73874c91a
- SHA512 f9d3b296e14d72f4bff727acfdcfb520ae1436ba5ded03be04a559f493d4a8f9f915c0a2f498214309d0b84d6b3ae29750186615ae3250ad218aeb09dd7175ab
- SSDEEP 3072:BW+i1u3AZ2YRCPJ4e3qHKSOZ53ZSOUE5Cgil7MEcR5hpGO5wZ+iEZUn1Bt+ZknSB:BdAZDCziyEs5Pib+ZknSTpc
- TLSH
  T14324E75CCFEB4576CBAACAF9F01D0EDB67295158122FEF1AB19894FA0803369D1012D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  CodeWalker30_dev46/SharpDX.XAudio2.dll
- Size 90KB
- SHA256 dea60551b50418ac950bdbe9ae68c3b3357f18ed5535915868fa48af7234e72a
- MD5 5cdec4bc7a392d63e959ba9ab97b3826
- SHA1 62adc1497c47df9dc21d6af87bfdbb68fdb29965
- SHA512 c4603059caeb5ece12b73459895218ecb6b4b5045adf885359631ffc0bc821eb7070c2bee49df142ab357acd2595e9bcc9b4a295e45a83be4ac654c585a44af1
- SSDEEP 1536:TWT4EdLWb6QAlbSXcuus17uN7dm7a7r3oLGDqHBopQCtE:Ss6LWb6xvsoN7dm7a7raGD0BydtE
- TLSH
  T16893C6E6138C4F56D24FAE73E4445577C735D8436287EB56BDACC2E22B137024438AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  CodeWalker30_dev46/SharpDX.XInput.dll
- Size 13KB
- SHA256 b4808043d91f93f31369ade5e40b5d1016c527956c7868602d00e51482e34e33
- MD5 3aa932318beb4a089726ba441b9f66f0
- SHA1 a09a691671e4d43f926e13ea5b4887932a674f5c
- SHA512 6e452e4c84647c556e29a4927f79ecbf1df861eeb2ec276ce49528bd432ecefd51220d0bb871d62394b1f2c4864af17a92e4bc98d6ab536c2cc06a272f80de74
- SSDEEP 384:aqGDz2M2x43EKnwnKxlEbYy5REZk6EZZ:aqOz2M2m3Fy5qTQ
- TLSH
  T1B75208748F889527D86E2776E9A302802B74ED1C4713E7FB034D55A57E1F3A28BA1363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  CodeWalker30_dev46/SharpDX.dll
- Size 268KB
- SHA256 a0af255ea4b09a8cdb995b8c6fd1075e46f098e23c2351c974e6ded9b8b620cf
- MD5 c52a44933d17d576d4c97b4cb0545841
- SHA1 092696fdcc034910aa02c94a5c93f4e1e86e0c50
- SHA512 8273ddb86a54c4834d469bbc856d1793c86f2577e21411f30083d4e597427170fd9ca38da2e86f081d284043d5ea4a6d3330037eededd17e37aa885927d0a76d
- SSDEEP 6144:IyfsmUCs3Zchh2UBSFKu033XbEUsHBEAT0C:Iy7UCs3Z22UXuwbkHBX
- TLSH
  T118446D36FF0C1A93CD8E46BAAD63951303B098102552D64FB944A6AD2DCF7847F267E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32