8521b7aa790eb6cd910f4707f4407fc5ecf5d5d333a0665901c9659f4e8e2ed2

Sharing

Copy URL Twitter E-mail

General

Target
HiAsm2_13b.rar
Size 2.1MB
Sample260801-plagrayzgz
SHA256 8521b7aa790eb6cd910f4707f4407fc5ecf5d5d333a0665901c9659f4e8e2ed2
MD5 c159d0c9860f494854f58fdc33884893
SHA1 6f977d5b6c50c0202a6cc9c0542b29a0731b5421
SHA512 0fb018e8e0141dc14d0037aaf2f1918c27fabb39f548e48ad34473fbf1548b6719c11e4798912702a31cb9eb3eb26ecc7f4c2f25af93fa387e231783b72019cf
SSDEEP 49152:xCD4tZUjkZr6CV+IAyyj9AXdCQ716dR4U45pK5GL7uXA06O9s:xCdj8rID99QImAs076O9s
TLSH
T11DA53368B9B80A0EF29B1F79AA990B367014236432F3FE2941DC9957750D7B6F42734C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Element.pas
- Size 30KB
- SHA256 12da0a0c8ed8a0d1276f7b4565563fd73e64c07d021a08c34c3562153ebe3442
- MD5 78b8ddb97da97f3f9864d7b77ed01d7b
- SHA1 53a51600fc2f08daee51847264b900f1e9fdbeba
- SHA512 5a505a41b59cc56ae3972c30574d2f1154c913d06fc3d6ed765f11f56ee706f87dd93260d0fb92f11ca676e2a3b4ff6f7fb4768851c1d14767a3f0b6c95f03b1
- SSDEEP 384:0ShHuGXEGGF4uiqC8k7FTVUq4Yl0eg2ItPOtIH41xrSivfxSxvXkUqz:bhBERF2TamtusSivee
- TLSH
  T185D24006FE9AABF644B660DC97614149F680A00B91C0815078DDB4F31FB9C9DBFE8BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Elements.pas
- Size 86KB
- SHA256 86d5d02b7cd3ef9e8372923055626a3d76ded3611d11cba687057e2b438f2645
- MD5 f18d8a430cbcc8179de8f2d6756bb9cd
- SHA1 59013f8539728a4b9d564e7217da443af84938c4
- SHA512 f8db714805d2c7cdf5b16e45d10164cfb6107aed723b5be2b680b12dc137adc7899be8fa55daeace1948e90ffebb7654ead5cae69af431be4d61f99c5b242233
- SSDEEP 1536:kKUFJwnCR/FpGdZqMPpuUMktifn8k4y8kb:4JwnCsqMgIlG
- TLSH
  T14293845EFDAA97E649F320E81B1B810AC7845007C5C4839074CDB6FB2F7AC89B664779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Elements.~pa
- Size 84KB
- SHA256 3b6aefba2f999dc08e3a4649d4f7e1e09e641031ccd211fbbb3a7e87a12cd797
- MD5 2d89d2edff45a18de9a9d10fd69b627b
- SHA1 357439ae9a8467015c080f883fe16a45312cb8f0
- SHA512 60d2d98c7132d91b897304b21e55e53b529db52211bc86bede85293ac109b7dde0649ce91ea606a83eafcbed5cc62ea02e4ff7d525c4d9b4e04c13537ae59217
- SSDEEP 768:kKUFJwnCq+/FbuMAOvydnZpbx9tzbM7MPpuUuO1f3CH08k4y8klwe:kKUFJwnCH/Fb6dZqMPpuUpfn8k4y8kb
- TLSH
  T13283835EFDAA97E649F320E81B1B810AC7845007C5C4839074CDB6FB2F7AC89B664779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  Example/hook.dll
- Size 3KB
- SHA256 4103fd134856f15b28d86a1ac39bd271ba52b059a2f3af93d6dd4013d8d9e36c
- MD5 7564a19945096e5f0bbe964bb6b322bb
- SHA1 f3a4010247fa1b381aac51bfd2d558523a9cfcb2
- SHA512 bc654174be46e410555f8f97738d8466a111b8a2a04f0ea0923ecea8292d1fec28dbade52a14c462e956659a708454911fa36dbd129571edc3c1dbf389654c89
- TLSH
  T1D251CB73E3A918F3F85C13B416CB81083773A03423A3920449A2031A35952A29DBAF01
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Help.pas
- Size 12KB
- SHA256 9eea4b449dda75ce20ae0bac000a195493e47d2c67a20a9fa5eebe5e1fb51b74
- MD5 af68f600754df14c5fed3c80e7dd978a
- SHA1 5028c2fd904754eb6b8fa825aeae142d4f83c682
- SHA512 ae48f804511cb781c9edd1deee7e0e620e2a0288bcbc9a431a01d3f32ee37d54dabbc3ed7e031c2a3abe81605065e9e1389a3c80f2dc9064a4053b23ad4f9377
- SSDEEP 192:OydKWeykKwpFx7dPdqz9ufwqL9ftGKyfQuXwwvQCals1KBmQAdsSyrXD:/wHx7dlPfNyfJVr4BZAmD
- TLSH
  T1DC426315F6DBA3779871448C97662846CA89002B47C0965139CED0F61FB2CEAE3F53BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  Help/About.html
- Size 2KB
- SHA256 0de525d50c2f22062d371be5803687d5c5fd56aebf4538a2f09577282a2ef222
- MD5 7ae490ead19ca0c62e8a7ca7a473d74c
- SHA1 a7bfa69035c724a6af638fb851f15bc5a0f8d38f
- SHA512 cca8971f97da612427da6e7ec027c7687decbc40a63d4be63905c0647cee6d2967e62d66e2ab4f5d36913c1661bc115f81ba899637cb6f86c40c72579b8345bd
- TLSH
  T17C41CC7256D0F2158932A928E745BF24ECEB00338B861854395F9E9B4F74C92D627B1A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Help/Controls.dlh
- Size 7KB
- SHA256 a2d037fe7d24c293b220e6724a5d9e8529fd44d4d2c0faca8f3789a5e40e6261
- MD5 d7375c5b571f3c04af346c6016158b5a
- SHA1 5c6abbbab208dfa799b82e8880e2d477d059e880
- SHA512 5ffdbac19e7edef0326e9145eadacea4de7f26f6001739f94521a0dba9e0e8e89d4c5890b3c8a4d552e37a8f4404ea904390721ea2c258c841be19ac15a55e7a
- SSDEEP 96:hPPkIkReGyHYXDrgF154xHbn6HLapgR+u1TpEuZoEw:hPPkxRefHYzsFb4VrY2pgR+gNE8w
- TLSH
  T178E1A5E28E904F16C14C1D7C1E4F170194E2596E59CF42838C8BFAAB672A0839D6EF67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Help/FileTools.dlh
- Size 4KB
- SHA256 a8d1fdcee15b7f4b667dfd6a6c6a850a07926493636ff3d3f999521b0bbd2101
- MD5 ece211dc533de074da528ec51d179535
- SHA1 d055d68ffa4be61cb775eac282a9825a275fe8d6
- SHA512 86fade9fb1d358f339b0e9c75837023be2930514f39188de4960f375cb396bfd30ab153ced5eb34fb0546f5ab49bfa1e9392ce62799179be0df14b0cfd2eded1
- SSDEEP 48:yisi7c2kjPcXbFwEEDlmUu80qZsU1WBInfu9xDBMz6VZBfpBo:DyMEcWiBanf8G6
- TLSH
  T1629131F3CF852F73D5682E3427DE2652A9FA15648FD642824D57ED1F332A0015C2AA87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Help/How.html
- Size 13KB
- SHA256 fba54ae3c0f4ca435d621b88b2bc05a7c3e0748864102d906e7e41b8c08938a2
- MD5 43f7853199ab3658d5c42e519b1c81ad
- SHA1 f4084e63681205a86b83b01dbc63a3cda5e26db1
- SHA512 54a2af89966e0c06a5e505d8f88693968ac51614dae672a265d0aaf470aa4fd6dd1569eaddb05c4dbd413a97357d921e1444822a2c6cbb7cdc7d2f0aa9344e54
- SSDEEP 384:Zx3EBpYVRU35n4rENSE0IYqOaJLwX8T+oFg/x:FPW4recbRZ
- TLSH
  T14852B5F277DC847A08830D7B5CBA0A0494EFDD74966A8A91F477847B034A0C65F3ABA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Help/Install.html
- Size 2KB
- SHA256 199f97a7bac84332013f2eedbf221cf0bf6a35e399640d47c6994c9dd1c50312
- MD5 5562cb0477f64dc0b32e5401e684fa00
- SHA1 8c3c4a53df595a38c91480824fbfc6b1f2ab5c4d
- SHA512 c6c12e531fa2f8eac6f802b06cb20ff561969cc47aa08860c249223d81665e158cedaa2c37abd0d8e5a0d2cbd3977cd6a234f1d732da4175a25e4098ca08a202
- TLSH
  T1B15142A18FC0CA2151331C29DB011F24DDFE892B8399AA81745FC21F9FB9D02DB87D52
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Help/Internet.dlh
- Size 5KB
- SHA256 dc89b7698d979ebda9a014870379ec05e9e7d65e6734347d4f856f83dfe7d54e
- MD5 93ed42733824d41f76f2fa4a08ae99c0
- SHA1 cf61012b119db86b8b5093cbc0d78b69b070fd8e
- SHA512 2b5918c05992f93723109ce84782832fe1eb6de7750ec48e328c6a5f30c39a72413f27096b7d1a7b6f351e00af06bf491127fda103fdecb935c31b722b96bc80
- SSDEEP 48:yiswM/x3OktwH5VItwvru+CsXwadFgeM0C:Tsx35tK5KtKq+DxC
- TLSH
  T12CB174B3EB99B166ED481E381BDE1609BCF50DE018CA27D10DE2C92D3A3C559EC34B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Help/Logical.dlh
- Size 4KB
- SHA256 0683b0395c8991588a28ceead36b553907cac5036d9825a6fd10cf77c44e6a4e
- MD5 910a6483810c3535a6531105a487d019
- SHA1 91d71d1b172d001f7444077f367faf16eceb5fe4
- SHA512 5407cbd9ca3f0df45a2f066cac7d48f393d49db62be8356acc2378c68de3a3390b06e96c93337b3fa4dc2cf2e6481e32b2503003bc0a0dfbc33831b58f09eb7f
- SSDEEP 48:yis66ycILM3fPrVk6YYGYb43FVWP56h7PSYmiPAQffDL:IOLM37Vk6Y3mO7qYmi
- TLSH
  T175915277C3919F61C5001C7C2BAA6502B8F2A817EEE482D04C47D55E21DA98A6939F12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  Help/Script.html
- Size 34KB
- SHA256 69147c11f22cc78db198aed3765d4159df03c8e76063937e54543e31f2b146b4
- MD5 ad5dedc21ce415816c436d5643bfb0d9
- SHA1 1390c542fea61a13e48f6fb01913eaa60ddc1f30
- SHA512 d81de1da06624e8824da45f2a8188f37617d50a767ff1db21e1c71c3be714a787bcf5b2f5c6a57adaab7994f372fd2515d39c84f5363a5851fa7cf17dc732e93
- SSDEEP 384:w83gp+hRaTlpf/XFBTflmfZCbV0l9mfPoZoIog3fqmfICb9rl2mfUl5Ffimfv5Cb:Hs7fv1CHxEl6ecy2+w94kvFamONGP87C
- TLSH
  T163F2A9EBB6ECC1791C93286BD4B46C8484DFEF3556794260F43BDA330168550AB17AE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  Help/Special.dlh
- Size 49KB
- SHA256 6d607e96d61bb762256b0cc9e80031a2ee42083c0177a116b9daf2ad014cc7ac
- MD5 42321ffed6aa73971ca962fed1726162
- SHA1 a5c2b001e1aee4ef213941196bbfc5760809c426
- SHA512 2c515a2691eabd4c73c770c8110d71f21315fc03431eee30e59f6d101bd32a2c6c3c96ac414cdb5e3aed3ebf716bc147695b5a50bd567bf9edb7780c65a0ec53
- SSDEEP 768:Y+qMal7FtEZ587i6WEo7uNcNQiYUYZmJyt2s2srjWRtuH4iks8:YB7p+uNcNQlUImJg2grj2U9ks8
- TLSH
  T147335C2275CCC12FC6C3283792351F59D1EFEDA443BAC715B9B7993B43818A49F42A62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  Help/Strings.dlh
- Size 7KB
- SHA256 aac5d0197cc31a7c09f90d8b714defb9ad33c135658aa5ca7f390ad22d59596c
- MD5 a8b4007f89a6169cf69ee220073c5f46
- SHA1 e20138ba119dd262f055150969756489db88439c
- SHA512 ddf5c84de5fba3d405efc55befe677e632fc26c00d8f8e8bb62e204b9a65546cb55b67b7db0e64c7dcfb1d7c8a1ee0f59eb77ac09cd9133beaf5a1d82aaaacf1
- SSDEEP 96:9kukFQdZIcqSbLHxHFmx2efXXrui/f53Mvw:9kukEecrbvi/yiXRMv
- TLSH
  T195F153D3DB411A43D14A0DF8168F5615EBD06C90CBD75382CE82E86667391B199FF707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  Help/Tools.dlh
- Size 7KB
- SHA256 450435e7fd440af1b419a1e21398b936fe7485676d5cf616b4d86476ae2031c7
- MD5 56a8e3a817de8e990a66c9572c87197c
- SHA1 f58a27f4affbba81c1a003dbbaf8b3180f04d1a3
- SHA512 22c28d20dcd152458cea0305fefb957cc3eac39a298c01432364ece3e6e82d00a6a5c2597617142d0e64e1a62a3d5dff8817a752ae75707b55fa1c74989739c1
- SSDEEP 96:G8Tj2SXD+4x0DcOLXquTuMck48c57PMTY5Vwv7z571uOCHr:jTj20D+qOxX2X8cVMs5Vu3CL
- TLSH
  T1F4F1B7F366842F11E9412D392A8E4101EDF024D5CECBD7938D7364AB13390A99E7DB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

Enumerates connected drives

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32