02ba4b42b078a6fdfe49912dd3142fa32a64825a4db37535b52bc41ec433d881

Sharing

Copy URL Twitter E-mail

General

Target
NoBoundz v45.7 Legacy READY.zip
Size 359.8MB
Sample260809-13kvlawfpf
SHA256 02ba4b42b078a6fdfe49912dd3142fa32a64825a4db37535b52bc41ec433d881
MD5 1901a4fee20ecf79606f21a2655a08a1
SHA1 aec9ed506b9d35784479dbb8257fda341b1267d3
SHA512 ec2d3683ecf051dc3ed407c9d9d6c639b733b429be8879bf118295a564df3139c9f0292233c08bab8bf220297a058dce80a45425486ba07dd2578e950ed4c658
SSDEEP 6291456:AxEoOGnm1Xskt5GXzoe2sLNfrBnoUVv6LyWBLVR39+EG0giygA8iOE2Jnw/AZK6f:YERGGck/GjoMNfd9myc19o0tFZKZ4l6Q
TLSH
T1B609332EF9F51397F62EBC36E625BD3A3559C419138E862F807C9BD1C9CA404C6B710A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  App\index.html
- Size 103KB
- SHA256 ee474a4a6e09f56c2c62dd9dd65b208fa664039ee614ee4d943b88fcfc981828
- MD5 bc2a41219ed5203d11be434bb34bfdc4
- SHA1 f557d39f61921c5a00315dc3f10fb45ab49603aa
- SHA512 6e08c5d7f51955d2985b2eb15ca6b83b0b8eea97c15ae8736c1bd7a9d069ab6df7c31dc3918fdb0ff9ea2ce987d0a751464f019a0bf22a631f143c1d5b53edee
- SSDEEP 3072:bExhHqOeSAReyOvNhW/UUVO3mWeAumiSbH+AEDo9z+CEfBg:bExhHqOeSARjOl0cUVO3mWejSbH+PDoR
- TLSH
  T143A34AB473242635927384F374D6139E72389246E20385D0FDAD62940FD3E92B77BBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  NoBoundz.exe
- Size 135.0MB
- SHA256 24effec4daa560e6acf52169026d8cc8bf00c16163fc30d2a2ba75862006c5db
- MD5 5ea2ec1e2f5ec6324c9c6e3ee9376024
- SHA1 19dbc8d3ded047bdeeeb7651563e7a495e225795
- SHA512 625c8c40a569282b4f1659c3ffc24aafe48a932d6d7ca218e1e36aefb62d4f929bdd0de4b201f9dd1882ebdbb7bbe9954c8fe87fd5efe256b1a3cc973d32c81f
- SSDEEP 786432:u860elys003YrFHmZlOH09TTbdLDMjNQbvfw+mOFXkM9X6KPujqC7yj:u+ns00HZRvaybvfw+PRf9X6KPuJmj
- TLSH
  T1B168AD14A3E80615E67FC2BCD6638212E6B1B8535361D2CF0498DA4D3FA3BD19A36377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral3 behavioral4
- Target
  START NOBOUNDZ.cmd
- Size 47B
- SHA256 d09b6c1eca25876d5da812769c6df954f39424044540434bcaa94b3e96d01073
- MD5 9998915d8e04fe8de2f4c66d1de9cc78
- SHA1 6af50fd3a8230399ce3e1eb0286410b5bb57dee7
- SHA512 77cb87c9a3b20b418cf6a99ca62466949285211c225998f4c3a967ece3a0a3232633f93e17ff307d82117e72b495ca636b5b37139330f58e55a6b04c4417f655
- MD5 SHA1 SHA512
Score

7^/10

discovery execution
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6
- Target
  Setup.exe
- Size 62.1MB
- SHA256 4f30e5b938fe359ff4e102cfe40702cd80a07579c22c37e1a77fc1f65840cfac
- MD5 b310b987b13272d95e5386ba01f8961a
- SHA1 04780de12311090693a9d80a40771b4bf1b15996
- SHA512 15149db92684f1251d31aeea4330f489c8710b878284ac8fb52a9571052a61c500b3b30c7efcee7e8d9425f5c123c0da5d6b51e33d3db9941c0641bc9a15f95e
- SSDEEP 1572864:ah+nctRbAEk5KM0BW84OQf0IM8IungjMke8QQqJ19NgmU:ah7n9p9Q86IunmMp8qnNrU
- TLSH
  T16AE72256E2F900E8D4BBC0B8CA5B4627EBB23455133457EB12A48A692F37FE15E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral7 behavioral8
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6Core.dll
- Size 6.7MB
- SHA256 689c990a8ae6acb9698f4b1711c49a81e4633b20443fdc9dcef29215baa3c100
- MD5 ab12f2d6903bf7f9bffea916ca56fb47
- SHA1 ba4f57e4fdf52843d5be7ae38a3a69d52eb092b9
- SHA512 32cd5c2578178b1e4dba429d65fdfff822e040ed051559f712b641a8798bbf75096f0f17ee84fd713bc68a1d46d978065d94ec7053a4e5603e6c187e1157cb00
- SSDEEP 98304:xOy3c8W8PPm9Ar31/peN8wowGLKFdu9CwJsv6twUbWpFezP1:jpCc1/EuZKFdu9CwJsv6twm1
- TLSH
  T167663A13E2A220ACC1BFD134465BA772FA317C5952343A2F5698EB352F71E60633E725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6Gui.dll
- Size 9.8MB
- SHA256 c8cecd0725a70b285125f1797425f0d076c1d807a9d966f5ed3960b788d8cfab
- MD5 c63c891c30a5e3923a65f7ee19f60943
- SHA1 fb90750d24b930c4b0a18b25e7d4522600adc2b1
- SHA512 df2d56c46724e350c6ed35f1c38ea2636ae0ec738ec783b8784d1edce9ca9571f850da8e40edd9642ffae09e1a9073378e563b76bacd0262f327cea9457e9ed3
- SSDEEP 98304:YxZqulpTAVEemxWhkKwVKb3Oy+Og9xLNCjRQKOqS7BKHIuFmiNrOxto7:YTTAVhkLO+y+AjgKHptNr
- TLSH
  T100A63A57E1A360ECC06BE0354357B633FE31784915386E7F5790CA392FA2E60626EB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6LabsFolderListModel.dll
- Size 145KB
- SHA256 f5615300d7864ff599d6e0fe3526caed27d02f5d2301bc9eb3a9634ff74c854e
- MD5 fcf489a9c5d68be7c2581c05b5ec01f1
- SHA1 4b6d136934d83a44c4dd589b0f25a071842c816f
- SHA512 bac3454b8748f73a2176602e1e3ae97e77ac06b415ae0c480cc5462e2bb1c01d495c6208ab09344d0a22fce7012800419dd28764a81f49894bddac4c908992cf
- SSDEEP 3072:eiZ8zc7CndZ+Qmhy8MaMRkxobzLz/ba67RYyRgT62u+hFW:RWzcAZ+Qrz//7RfgT62u+hFW
- TLSH
  T1EDE30936B39654FFC4EAC23D85CBA731F9313CC9472A1A1F4684CA362B91EA4363D645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6Network.dll
- Size 2.0MB
- SHA256 73e3420e87a2c11db2150cb9eec0191df11b3faa5ccbaf1775319d35a4911b2f
- MD5 4e97b3da1daf515221481105606d7a11
- SHA1 2ee98ee03ae66cda6eb87d0cc66f6159ebf74d0c
- SHA512 3705c775ca19977755c4fb1d5b82ce149fd3b9b3e07ce77356180ee79b8ed7c1c023c6ed7bbf1ab66e08f41fbd01b8a396f0a78b92ed5e949820db29f24711a8
- SSDEEP 49152:fpjEK9PmuAPE1UtRtTjHZdqd9dudkdbdZdzQ6B6PEQV4Q64QwQVpd6d8d4d+d9dm:Q0mgCe8j/Sm
- TLSH
  T19CA52A63F16220EDC46FC1788247A732F931784946386E7F5758CA362FA2E6062BD75C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6OpenGL.dll
- Size 613KB
- SHA256 048dc19124ac851a99bb72869daa7460244a0dcc2bb1acc9d28a574565c79431
- MD5 9f7cc24d63c1318e83abfb7480090c36
- SHA1 7de8ef9a7cbd76be2d3363a93208bba18801f887
- SHA512 804034d43015fb66e777a549facc6124cfcdd2c45f8d9c3ba49e21470ea2bfa38dd635f1ded1d8b51a7c5747ada5d8a7bea8d236fc43b1cfc7085d7e0eec072f
- SSDEEP 6144:2b6raGpiAQL5yc8yNqOZW8gMvybiBUna6pqAjWEYscLboc89aUCjN5VGSjsJUER6:N0gc8WqOZWXMwiBIpaUlRG9si1f8Hm7x
- TLSH
  T1C3D42A92E29279ACCD5BD23D838B6A35B631BC440174AB6B714CD73A2FE1E20137D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6Qml.dll
- Size 6.2MB
- SHA256 b9f135b410a7dd74358d2c0a7cbb9ce37dd10886853af2239035a66ff4dd8a77
- MD5 30e82064fde02ad703f6d604635816d1
- SHA1 b033b8f321a588d7575011671430993ff4dcc3fa
- SHA512 6722112a9f891a508eeb97cef075e9fd02b628fdea7267ae9c8a58582746c908c0fbbedd7a2a06f5b21855729d6b6a1d7d0915699d7a084507cf83528c652ec9
- SSDEEP 98304:2P5mdZvI+hoyCWnnWxXjWZFTJS3ElyJJCLLlssiwwwHNj0wNuj0Tv8AXX/zllsv+:w5mUC9nqiZFTJZsvdPE
- TLSH
  T1E0663B23E1A360ECC06FD139475BA633F931785912347E6F1398DA362F62E60627D798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6QmlCore.dll
- Size 148KB
- SHA256 f44c1f788ff692da70174dea3997fa8e18b9e830905406f688962e69fb3f01f4
- MD5 08f328430427b3fce82300aad4f103d6
- SHA1 6cd2be0f056b45cee036f21afed4b8c4b64fe8fc
- SHA512 9373c9eac1f4f33453f7afa4fd24b49af43215fa02e2f40839dfcb58e2f7f7cf3fd971f8443e3e26833cb44910b63730ac84d66c19a23c66432a87b9aca47595
- SSDEEP 3072:ZP8N5opcsmUhci5MzX9rEL9PHgrjL0HCrcU42rlPvRkxp0bT/38CrjdzBRNZ2n2h:2o9Bczr9I2nbT/MCrjdzBRTKVr2xZcul
- TLSH
  T1EEE3F827E25258FEC8ABC139C0979331B7317C4507366BAF4288C73B5AA1E68773A745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6QmlMeta.dll
- Size 186KB
- SHA256 8982d08781e1611b64e78da7756cb174b5b98e5a3d5974ab57134bb2b8550dd7
- MD5 fdfaa4e44b2b93dcaa46c0fc5d421b94
- SHA1 be02660f8e48c54fd3415fa338f0dcb69409947b
- SHA512 294c212b0b8af1ec6899ef17603d7ef47e2929dc65c21ed754694201e390ddfd129417bdd5c470fbad1ceff2e3bcdd53dda97ae7eea31165a1b1cc2ee044a793
- SSDEEP 3072:UHbFPb5pcUUL4tRD2pVWjSaICEuvOsTa4M5odkHRkxHGdpD7Rz0VH4Q5u+3/Swso:U7FPb5pcJflawnMdK7RgVYQ5u+3awsPw
- TLSH
  T118141837A25258EEC5DBC278C5879B32F9317C940739AA6F4354CB362BE0E207239759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6QmlModels.dll
- Size 1.1MB
- SHA256 a153e8310e8b4eb0517266ef27ce942699e73edbb032c745351ec88aaf71cdc3
- MD5 180067f66cad317bfe38344fe9515b22
- SHA1 61c70ec1d89e448d5d6a4a3a98ede19fc009a0a7
- SHA512 4b846a274e43b4b9c5bf71f404c8d0d311c12a7fe3cee137dbf60f7ff80fba17d8c9c82a853b49febb5369bdea0bc8e2f4029b7d939c8aaf2c115e8b28021c13
- SSDEEP 24576:iDAq41bDodCLEAJmFicfotdPRXU2gsuwSYPSpod0WQ5S6dDdlHvwZ4QC:i8qricfojJkjHYPsod0WQ5S6dDdlHvwY
- TLSH
  T192451967E36364BCC06FC239875BA633F931788402347A6F6694DA353BA3E60623D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6QmlWorkerScript.dll
- Size 91KB
- SHA256 cd718ef5e1f5abf581bd01681496bd60076d517c64f435d792b05f4bcb47ad3d
- MD5 d25b7cd8ede0af7c1d403e9e7f9b5f79
- SHA1 56788065f5aff7456344452d109bdaec7ecf1817
- SHA512 9e06fdb3accdb7637e34d42e46d5df57d87406b1e544efad226df40be313489f602ef1712a6cb9f611b00513dc7e2b7588a5ec08da36cc639d3aefefb014cb3c
- SSDEEP 1536:Z74Thurvgws3J4/k4shwBsjtRkxi1r+My7Ri8JDMw81jOHcBH:Z748i54MOuRkxi1r+My7Ri4DMw816Hcp
- TLSH
  T162931A36725948ADC8EBC23D82EB5232B7337C550B34B71F4188DA762F61A647D3960D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6Quick.dll
- Size 7.3MB
- SHA256 6273d6a9442e55b16a0a7f908df572cb31a13f2165f00319dbf656fbc5243c26
- MD5 e0d2c839b7b5e82ca6f800da38c37783
- SHA1 6af6add1523c9416cf1aca46c0fd10eec3a05b68
- SHA512 cb11ceccf94c55cab41fdc70224e0ee36907529f4a9cde67ef6d5defa7938c3a012ac721c452c3f80ff0403b43e4ebcc45e1d5b7844c979768c2e1190bbaf757
- SSDEEP 98304:AksN+S42B+7l/YtXNmfuXPJ/zP7fPFJVAAnVzxlQyst:0NXgAB/zPFAAnVz6
- TLSH
  T1FE765D17E1A264ACC47BD1348657AE32F9717C8416386A2F1654CB362FA2E70337FB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  tools\chiaki-ng\app\chiaki-ng-Win\Qt6QuickControls2.dll
- Size 106KB
- SHA256 1adbec0132f4263e41657906f7f0605ffe414ab7422c446f66c050c7c2fb6b87
- MD5 9fbc5e940ef171df666ca1b3a9b1cbf2
- SHA1 acbc547fc4d2985481e66c2e7c5ac00d970749dc
- SHA512 88553b2aded644578590be4a05a8aaa9bb8f23dd0f5bd2107c74b3406a9bc87148d0bdd2d72f274e416f15876354d2319b8a30c0bbfa5c5cf6b8af385570b277
- SSDEEP 1536:LXnHSsOI9/ZRZtUq1pRkxuxyZErU7RI/RMdyrLWZIEQj9eBofQ:LXyqZRTX3RkxuxC7Ra2yvWCjjcBofQ
- TLSH
  T1EFB3D83AB38154AEC0A6C27888CA5731FB32BC845732672F4258C679BF50B74BD39759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks whether UAC is enabled

Network Share Discovery

Loads dropped DLL

Network Share Discovery

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32