8d000758f68f5c5181e53972882b731e6450b2d6bf064992e6bf6de9499623eb

Sharing

Copy URL Twitter E-mail

General

Target
supQ v4.zip
Size 2.9MB
Sample260804-s6ehzstejd
SHA256 8d000758f68f5c5181e53972882b731e6450b2d6bf064992e6bf6de9499623eb
MD5 c559ef6e7e31e26584be4bf0b0903fdd
SHA1 2b4ea48708e06c9ab9e9eb39129ca5c51516d382
SHA512 7b8bea9d2c2ee2bdbe9d2349aa41382845c8b6c1c8c062261059655fc5eb3c3146dc54cd1c5091f97bfc690b49e4b35ff4026fa31b65c02f3373dddd1f7ce611
SSDEEP 49152:5AD0D826jIw301mocrvj3Zi4GsbSy1IUZb7iBCdX+EojvQO313AfQRcp40okeXKA:5AbDjIq01qTjJ5G8mRdRjvLSp40okKKA
TLSH
T185E53303C60B61B8FBC642BBB665509AC7A652D4D0F04A76EF7C7E782CD470729B9036
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Release/ICSharpCode.AvalonEdit.dll
- Size 608KB
- SHA256 0fe9ac94aa22e60b32d670a3d35c58fef628d1b3352d56f32f2986bf5f96f844
- MD5 5b5bae107f9007dc699a29899171df43
- SHA1 34f7a876b5cf0c9ddf46c7e46cd3b9920db0b8ce
- SHA512 8a6262271d3e43bce9f64e119c1a36c338b77bb94ccad4dd25b007879b8c721bd5cd32e651f838e4fc4d8ab0b8b69d7b773c13b497c37c9b0e0e82ab70977410
- SSDEEP 6144:SZnm+2rRLUWzCplOmoG+HRksdH7Dn9JYD//T+jvD+cXXjaoUsCfqMZsCQIJjBZjl:SZf6UWkOH5H7JSLy3JCl
- TLSH
  T1ABD42A2933AC592AC27E1777F5720144A3FFFD87B269DB8F244461BA7D427224C41AA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Release/Microsoft.Web.WebView2.Core.dll
- Size 681KB
- SHA256 24b1a6be3a7956e00d0509d4eaebf08e418fc219e964b6c269d2e04439333685
- MD5 ae915341870f891f090228905277064c
- SHA1 749ebcdf4be274d7777124bd081f093403941cce
- SHA512 aa3f2efed0a7e91dbfae414f344f41ca8a5ea5ab05d93436526c6360676e962969e1f29c3e05d428de07571bc5e774cd091af05d5fd3826f564ffcdb4f56f0bb
- SSDEEP 12288:GJ4dCXzRKX4EcJupbSRi461R1VDrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNI/:GJ4dCXzRKX4EcJAD1RvQy
- TLSH
  T1F9E4301223FD8619F5F27FB9997412609BBABC97BD78C34D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Release/Microsoft.Web.WebView2.Wpf.dll
- Size 82KB
- SHA256 04151e577d83c6fe7a1bd1dc402b49db53ddbd1c48f031afc094b847b551bca6
- MD5 9fd59e7a28c266bacf161320acc22bb0
- SHA1 a1bc2450b4512c2196be410b7699100c8ad5bd42
- SHA512 c9a7eb9c8f4174529b66e83c48d6e6f09264ea893e8f89feff856d50b6bcc2a83da4cf0375a851e033ff062f90b437ed57c61eecc24ac5152a6331ceed17ff0f
- SSDEEP 1536:dh6tArbn5DTtWQZZHIPL2/GC3hJ8KYYUDHfy7yEW30bfc4JAyr4YeUqTHhvU0sdY:dh6irbnbWwZqjSJ8aUDHfyy30bfc4JAr
- TLSH
  T1BF836CB417FC8C23CAFE4ABC697042940FBDEB837A12D78F1589B5D9589338125523A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Release/Module.dll
- Size 1.8MB
- SHA256 88477335bff9430919a79744124b0a38a7d2f003e51bcb172c1a1e45f45b0248
- MD5 43c5f6843a45a39bbb35df1fff4f8b6b
- SHA1 5145e0fd42f18fea5d9628557b3faf57e8ab6428
- SHA512 dc607eecc70e1f018ffb8b6353a050f3cec109af9f48d981269d2737713012af9934cb1296099aa03cf9b9ece06f47bf851da19b18bf64f18fbc90f22a6f8a58
- SSDEEP 49152:Dodbq9bvIMCA9LDHGg9LVXBA5hzSQJxKhFNAYOKyxXA:lNIMCAFDHGg9LVXBahzSWxKnirxQ
- TLSH
  T1EF95D02AD8B742A55EB3A2F11D0100EE854073713EDEA53AF7AA5FCD19B4231B1B4F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Release/Newtonsoft.Json.dll
- Size 706KB
- SHA256 a28c251dfe36d881e9e2462e171441b8b0ec156fe3f452602c9149b1b9efe05b
- MD5 c252fe44b67a08e6dab4eade3764db49
- SHA1 fcf801c0915cb47f400c74b1b459eb55ff4a5f9d
- SHA512 40656f812e273cd828b41ec58cba21dfe0cab186b8f5847744602005a9ba7caf1267729af8d37a420ea26f50221dcda85cc9695019a83f271fb81b6c32afc9c8
- SSDEEP 12288:BJJdZj8K4VopGZ5kYNkx8mJ0YHlyGBty0PJxqDo+3:B1J8xNe8MBBty06
- TLSH
  T159F46B0533E8CB2AE5EF6775B4314A1547F6F41AA2B2E74F6904A5ED0D83BC09D40BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Release/injector.exe
- Size 49KB
- SHA256 5661789114d1715cf6aa612bc24357ca406293430e00a2cff7ffc542c184187c
- MD5 3716feb20236b8fd052ec59b79acefa1
- SHA1 963654245e6f75df6f494f64fe43218fa4184649
- SHA512 cc0c75db6ffb9741ffea166672b09f3f09f29b539d25aebe21c0a37ea6afc7cfd229af6a584e3964cb367a47b301b41960f714a65cd6e65fc0445ae8aeb4ed11
- SSDEEP 768:yMA2G5XOazGJeV1qubma/WYfYL0GxDq7w4EM+qN6vHz6:yMAF5emGJKdB/WYfYL0yqvEM46
- TLSH
  T188331962F3AC50D8E136C2BCDA635E42EB71B44D07107BEB079191922F17EE4A63D7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Release/runtimes/win-arm64/native/WebView2Loader.dll
- Size 148KB
- SHA256 eef3eba85d4c28eebddf966f016b1b43df1ee584573210c5a6eb9483387467c4
- MD5 a3844afe1fc850b46d08935983c9f3ce
- SHA1 2a20fba705abe4e3444c282364c62483a0c08a22
- SHA512 968e581db5352975293b10dd4d0628839e561beefbb39e400c018f803b1a2f74d839ffe459ee4c4be9431a892deda0bb2bbe743a1105e28b5b2ff376a261451c
- SSDEEP 3072:nHYVsFqAsEendrQxJAcTsnKBEtJAtbEJHK4:Hdqou3n+EtJobyq4
- TLSH
  T174E3199367DD1843E6D6E73CCC678950132BFA788930C95E6152420EDE6FBC1DEB4A22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Release/runtimes/win-x64/native/WebView2Loader.dll
- Size 160KB
- SHA256 239a9d6614a6cfade62b47cdb0be36e3069eedc438c3e0647a9e7b7c84ef6ea0
- MD5 cce1332e0af440bc54fdf04eb543d4a0
- SHA1 c7f6c049ff3eee4ed337a98d3163fbb5c4686ff7
- SHA512 3484febcb142beac708faa1775699450ff22f5ce13b7e90da4d6d27ac9bbedd1c2477dc33125cbcce00fc7d59d416588300fa7b3c1c607bda0d1e874cb0425a9
- SSDEEP 3072:qjAuqhU/3A5evuBdyoioiVO7kKlU9tKTTnhTEtJI8w6lKIc:36642lioiVOAqnpEtJs6W
- TLSH
  T1ADF35C57B3E500BBE1B7C27885A74A46EB7678111B609AEF0364433A1F237D0AE3D761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Release/runtimes/win-x86/native/WebView2Loader.dll
- Size 121KB
- SHA256 5388b73b5ca00f1faf2a569cd923fdff00e316a254ef6df9fba240e3839a2c45
- MD5 b99ee8dbcfee7b2c17211c8be731e608
- SHA1 50eac72d43f0251bc89b24cdcf8411063b8c02b1
- SHA512 d34873575b32aa2a1745ef7f87cc266c534d169bec87a523d777af53722d07bc8aedb7591334b8be2012a4e18a0e012ea818176af8a59964d00943d0950cc9fc
- SSDEEP 3072:KyCDCc+IrkrCn0y/smK5dRMt2LILt4CVbA5ThnjuEtJZIJDI7vHNNSp:lUCWrkWdoduIELwnSEtJe2fNg
- TLSH
  T16CC36C00B5E08031E8BF15791878DA759B3F79A1DF608DEF2B9815A94E347D09F34B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  Release/scripts/UNC.lua
- Size 28KB
- SHA256 e8d53406c916b8e827c65c8f00d8a18b1379e693fd0379e8116e749bdf860cf5
- MD5 b76726d10354343d9af5c268e40b47c4
- SHA1 7103c78071be0c65c8b3a217168cf7909aef748e
- SHA512 5caffd8a06058e890fe4ae35430539281cf53fa791221189f0f6660778a83fa42cc3e5374ce06ff325420d92006c2bfe1003f1486714e889964075da66b046eb
- SSDEEP 768:JopEYRzOKMrGrE7BWf9r+T+f9TkIuP4hUUsbU8FqQFBF5UXzRFEe3cSG5Sg/i5rx:JEKcZuy9p
- TLSH
  T150D2866EF583B5A202F130F0F53FD009B676CD70A2395559B1DD50E46A289AC8893EFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Release/scripts/saveinstance.luau
- Size 1KB
- SHA256 5d25b9199767db40f7b55da4c55d9ed2ae0948285ad57d7afe37580a5d90b783
- MD5 69c32e096d8a140e51d0bb025aa780d0
- SHA1 4cb9d31ddc37027a43dd58adf7f9ef9bb7ecc5d5
- SHA512 23506923eb832b568ee920156d98bf88fe17594f10d46398eb4c4fdf157897e9f3867e13e830008a415d309fa147143987a3c3bbc49bf44a3dc3971790bd56d5
- TLSH
  T1C531468F13132DB90A3910E4A94F7486BB7EA15D01359570A0FC78887B9676AA1E72CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Release/supQ.dll
- Size 721KB
- SHA256 6b317314cb24041780c16a8c33f478a7f0b631a1ff1cdf18f5cc141b638c2297
- MD5 522e21338e21530ebf94286dbed08a00
- SHA1 54a44132f7b916f3823908b00437c0a750a3a056
- SHA512 25315de4d3da1e2657548e757da743dd8277323e2705889f93bc02986810c10538f394364f5c041f025f3e7094c567bd0117fc790cb5ffd2a47d6e773fc8b2f2
- SSDEEP 12288:XTkxjrq8wZo7/HPC/1bfACKc3STXO+kz55g7WkjACxqQLK8IPXD:XTc1vCRICKc3Sbf05ma00V7
- TLSH
  T173F4D01073FA0619F5BB4BB949B681404B3BBA1EA83CD71D35AE98DC1FA379245107B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Release/supQ.exe
- Size 216KB
- SHA256 6b14ceea049869ed8f7903a3421b643c3b3a93804fdb9aab6711d184a6aab7b7
- MD5 f335bd29b2185f55e09885ed792a7d58
- SHA1 dcf8613914a6152df52caad46a1da996ad39d074
- SHA512 63cec6a0012ab7b0da49d361142253b3b6b25829119d04d8e13adf777dfc33ed88a4c2f35ebd914e8693001e9532f122150c034ba3ffab2af0079157bc4e0876
- SSDEEP 3072:LqeXA/4yIbHkNPN+6H6xCYOigUE2653JBHjhXOm6NFOZqLia:LvdHkNFdaxmMEXJzXMFOkL
- TLSH
  T143248D07E6A850BEE1B7C679CD924C41FB72785A4B71A6CF07504E761E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24