Overview

overview

7

Static

static

3

hl7-2-dcm-...64.exe

windows10-2004-x64

7

hl7-2-dcm-...64.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

Uninstall.exe

windows10-2004-x64

7

Uninstall.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

dump2dcm.exe

windows10-2004-x64

1

dump2dcm.exe

windows11-ltsc_2024-x64

1

hl7-2-dcm.exe

windows10-2004-x64

1

hl7-2-dcm.exe

windows11-ltsc_2024-x64

1

hl7-parser.exe

windows10-2004-x64

1

hl7-parser.exe

windows11-ltsc_2024-x64

1

manual.pdf

windows10-2004-x64

3

manual.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    hl7-2-dcm-2.1.32-win64.zip
  • Size 3.1MB
  • Sample260731-plagraae87
  • SHA256 05ae42db11245fa025388517246c5e023ac53d6c92f5107b94e2c2e7ac59b025
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwarediscoveryinstallerspyware

Malware Config

Targets

    • Target
      hl7-2-dcm-2.1.32-win64.exe
    • Size 3.1MB
    • SHA256 35ddc702c20a7d50601716ce27f382a17b5091e27bfcfa543a06c97a93fc21d5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 aaacc7ef5cb2baf2338ac8e8479227e0a6336a6509119543680efa1dcdbae6a6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/StartMenu.dll
    • Size 7KB
    • SHA256 27fb85eede9b98f4fb6cd9bd22f1f268e13d3bb365a4bb8da744090d032c76e4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 ac9dfe3b35ea4b8932536ed7406c29a432976b685cc5322f94ef93df920fede7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/UserInfo.dll
    • Size 4KB
    • SHA256 a912514823df595ba3a048099d3b89e925a4d41742afc67e772060952892f312
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      Uninstall.exe
    • Size 288KB
    • SHA256 d9905baee2af135e3e0320f33baa3c782fbc55e3a6f82aea939801ece3ecfb72
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryinstaller

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12
    • Target
      $PLUGINSDIR/UserInfo.dll
    • Size 4KB
    • SHA256 a912514823df595ba3a048099d3b89e925a4d41742afc67e772060952892f312
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      dump2dcm.exe
    • Size 1.9MB
    • SHA256 854dc6af3892aafcab5f411fdc65fb6ef76df6def12138a4634f52f8659c3dca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      hl7-2-dcm.exe
    • Size 5.5MB
    • SHA256 dbc4edc43606ceeca5d9bfa70645cfe4870cc470fd2642d67731ce15ea592bfc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      hl7-parser.exe
    • Size 280KB
    • SHA256 6ad260f7810f86ee328b3a74983f0ce39c289faf952bcca4f06924926074fb21
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19behavioral20
    • Target
      manual.pdf
    • Size 156KB
    • SHA256 d2c4bdf3d5ed64aa254a039cf23688e71983b68c956a0df08f980fc0184f4d09
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral21behavioral22

MITRE ATT&CK Enterprise v16

Tasks