Overview

overview

5

Static

static

3

Microsoft....er.exe

windows10-2004-x64

1

Microsoft....er.exe

windows11-ltsc_2024-x64

1

Microsoft....es.dll

windows10-2004-x64

1

Microsoft....es.dll

windows11-ltsc_2024-x64

1

Setup.exe

windows10-2004-x64

Setup.exe

windows11-ltsc_2024-x64

System.Col...ic.dll

windows10-2004-x64

1

System.Col...ic.dll

windows11-ltsc_2024-x64

1

System.Col...ns.dll

windows10-2004-x64

1

System.Col...ns.dll

windows11-ltsc_2024-x64

1

System.Com...es.dll

windows10-2004-x64

1

System.Com...es.dll

windows11-ltsc_2024-x64

1

System.Console.dll

windows10-2004-x64

1

System.Console.dll

windows11-ltsc_2024-x64

1

System.Dia...ss.dll

windows10-2004-x64

1

System.Dia...ss.dll

windows11-ltsc_2024-x64

1

System.Memory.dll

windows10-2004-x64

1

System.Memory.dll

windows11-ltsc_2024-x64

1

System.Pri...ib.dll

windows10-2004-x64

1

System.Pri...ib.dll

windows11-ltsc_2024-x64

1

System.Run...es.dll

windows10-2004-x64

1

System.Run...es.dll

windows11-ltsc_2024-x64

1

System.Runtime.dll

windows10-2004-x64

1

System.Runtime.dll

windows11-ltsc_2024-x64

1

System.Sec...ms.dll

windows10-2004-x64

1

System.Sec...ms.dll

windows11-ltsc_2024-x64

1

System.Sec...ws.dll

windows10-2004-x64

1

System.Sec...ws.dll

windows11-ltsc_2024-x64

1

System.Thr...ad.dll

windows10-2004-x64

1

System.Thr...ad.dll

windows11-ltsc_2024-x64

1

clrjit.dll

windows10-2004-x64

1

clrjit.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Setup.zip
  • Size 10.0MB
  • Sample260804-agylfssva1
  • SHA256 4ca98b55c01ebdee28a367a4d390e02803dffdccb08685efdd8cee5561c5f754
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
execution

Malware Config

Targets

    • Target
      Microsoft.Spark.Worker.dll
    • Size 104KB
    • SHA256 c1de6d475b7aeb878ef38c1f96bff5d650af029dcfc4c824c8ad29f21822bc3f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Microsoft.Win32.Primitives.dll
    • Size 15KB
    • SHA256 150ce7473f17d708e846ccafd9beeab9c341c28a130f6e37630acaa622754a8b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      Setup.exe
    • Size 146KB
    • SHA256 03e515e9cdd1250bee3c25e23d5efe95c9efca6abac057ac3628132c15e98547
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral5behavioral6
    • Target
      System.Collections.NonGeneric.dll
    • Size 102KB
    • SHA256 891a7b6baa99b3a98d33947e69cb35f415bf735d9515da628d6624bd64595bbe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      System.Collections.dll
    • Size 254KB
    • SHA256 5b20181ee4e188aa6b328c107fee9506e63efe3a4f9d2c3517ef2972b6aa1211
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      System.ComponentModel.Primitives.dll
    • Size 78KB
    • SHA256 304635dbc025b5c3bff78df48c19980e9b52c632a7d3c145b61288f546293bf7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      System.Console.dll
    • Size 170KB
    • SHA256 8469deb8c7d532e8857f5c68deb291035103dee3698bf5005f4e08c5bd05775a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      System.Diagnostics.Process.dll
    • Size 330KB
    • SHA256 7bbca593ed7f5b8f8650ecd5e597190d7d55bc4b1b9d8a992c7a1f887e65dcc2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      System.Memory.dll
    • Size 154KB
    • SHA256 536310fad46e9710e2378e6ab65715489c267b13a08ad96139978d97974bd282
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      System.Private.CoreLib.dll
    • Size 12.6MB
    • SHA256 4cd6810b4ebe8d6e1f5928f2026d257c112380d33b557a60bcfa9c7f2bb012e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19behavioral20
    • Target
      System.Runtime.InteropServices.dll
    • Size 94KB
    • SHA256 127ea3f2ff47cea14c082b2ed22066554d22c9d8f97dc0d403b17042fac62a5b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral21behavioral22
    • Target
      System.Runtime.dll
    • Size 42KB
    • SHA256 9c506c9347f872c3375255f744dcf83b71a96ff71cbf4a19b39873fa22f73c22
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral23behavioral24
    • Target
      System.Security.Claims.dll
    • Size 98KB
    • SHA256 9aedeb23632f45084722906ced314074fb14e08478545a221ab6476febbaff0b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral25behavioral26
    • Target
      System.Security.Principal.Windows.dll
    • Size 182KB
    • SHA256 59815feab7b47abf6e7d4231a7081452b256704a3834c6a927a9e74c03897b9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral27behavioral28
    • Target
      System.Threading.Thread.dll
    • Size 15KB
    • SHA256 ecbe1cde0de93b08489005de9b2ba627725dc55646735dcf0f027e0e1fce6f6c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral29behavioral30
    • Target
      clrjit.dll
    • Size 1.7MB
    • SHA256 0dfe34be78144cad7db5b66a7fca3d86178ec0f353aafba6c81eb72e797e383b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks