7974a0dfe74495e6aa37253d9ca8cd846210d5bf742e664f2b05c71d06b17fe6

Sharing

Copy URL Twitter E-mail

General

Target
Practical-Basketball_368934.exe
Size 2.5MB
Sample260809-vgrhcsscme
SHA256 7974a0dfe74495e6aa37253d9ca8cd846210d5bf742e664f2b05c71d06b17fe6
MD5 f1b692f48de3827074d944b24803e896
SHA1 48f797bf5717098cd3952e0ed8b76280938464e5
SHA512 7a05d523900d965bbc5fc944fe7f76fe56b94f07c8a41d724c7ff63af72b5e8784d54057abd4588072651a36bbac8da9da16889030c5c06fd21fa27e56972516
SSDEEP 49152:2v/OmYN6itD+37wIeSehRgnshF7S6Il7UZwm4KaxLD:2v/OmUltUkJhrEbRUZwzKapD
TLSH
T1A1C51281E056E003C644653CC59BF2F42CA86EE2D29F520F6C727D6EFDB08E9562A15F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Practical-Basketball_368934.exe
- Size 2.5MB
- SHA256 7974a0dfe74495e6aa37253d9ca8cd846210d5bf742e664f2b05c71d06b17fe6
- MD5 f1b692f48de3827074d944b24803e896
- SHA1 48f797bf5717098cd3952e0ed8b76280938464e5
- SHA512 7a05d523900d965bbc5fc944fe7f76fe56b94f07c8a41d724c7ff63af72b5e8784d54057abd4588072651a36bbac8da9da16889030c5c06fd21fa27e56972516
- SSDEEP 49152:2v/OmYN6itD+37wIeSehRgnshF7S6Il7UZwm4KaxLD:2v/OmUltUkJhrEbRUZwzKapD
- TLSH
  T1A1C51281E056E003C644653CC59BF2F42CA86EE2D29F520F6C727D6EFDB08E9562A15F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/INetC.dll
- Size 51KB
- SHA256 5b55469966e2cc0ab9c341c33bcccaed26c2bf061ec17a070779c9aeb96e465b
- MD5 101f9f259b59cc62e14dd9e98dd3fb5d
- SHA1 3352ea7fad1fbd5f8852255406898cbbf1c8ca04
- SHA512 162150f3b4d8d8524db21f4af16d77b46be611892ec14fadfc7c33bf444646ed5ec728d92f93df809787756088b158e61edc44995e62caca83ef5bcd2d699a7f
- SSDEEP 768:Nn9Whk09GSrZxdLl8Q/IMbtMhcBO/ELzUBhFG2+YXDuDcElh:N9WhpGSrllzIMbocE/ELzaUYTuAEl
- TLSH
  T1E133281257E0067EFBB6063978B78593167EA831632695CFC6230F9D2DA13D2E974313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/Nsis7z.dll
- Size 505KB
- SHA256 116521906678f205f437ec5dff78fe17d7f31f1ca4193f9bcf882be21e53a79f
- MD5 9ceebea3ed27d423e0cc874f91b85d82
- SHA1 9268eb7ed6147dcef78d1655167c6606b47105dd
- SHA512 9f4946778f80664727b148c20eb386ce59c28d76f21a6035258f6e6eadbb07457f9f1a2027a6f9c69221853d7a93f64a3b23d2d578472785a2e5dc986f9fd32d
- SSDEEP 12288:+13M3R+bIYp/B5ymLhjhyXUOS5loXb0K08D9eqD0eJGtgC:H3AbB9plor0K0y9fd8t
- TLSH
  T1A5B4AE21B981C175C52E42304A5AFB6A59BEB7704B24E5CB7398977E1FF48D0A728F03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  LuluNotes.exe
- Size 5.0MB
- SHA256 1fe75a96618cc24ae7d17e8d5ad0c8e3983f3e6d1c26264cc6f3ef8037d7e376
- MD5 c63d6692474002f9c16f95828b4e0fdf
- SHA1 57adba19e8e189ac010314a2b3426cc697f36a7e
- SHA512 f5e2809aae2bae581fedc1c9f27ae6f0a3f4b12f6ccb99f5d1947a72a64c3ff95d3ea00ff97794fa22bd94e7ecd10bd7a8ca6fcb10bf668fa8f9daa04b0ffc0c
- SSDEEP 49152:vOqLtQC7k23mVyIW1V8oNPOe7n+7QtEcKl3Rw305y1P8sDNcCLfjKZxP4DY:vdg23ssZcOEXCkyJ8cNc9xwD
- TLSH
  T10D365B02E5A3D063D8952130D4B7E2F68D687FA0D327A8FF51B47E69B4315C09A3A35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  lnencrypt.exe
- Size 155KB
- SHA256 cc636c9fad1426dce21130b9ec20ec12993791725e88f73dcda05a2a0c3f808e
- MD5 b42eb3aa86ada729f4225e7ccb4bac30
- SHA1 276a2ea9d8ae4cbb265a6199cd4c661838528435
- SHA512 bfb65e9d656f1e1a227056f90cab685d51a7f1ed297ef04e48c4d962c28d3f1dbcbbe00d78b397c517fe870ace49076dd798a7d54eed9f472a8644f3ee6aefe7
- SSDEEP 3072:FZzLaEotucfjMnyfPUSg8CXhmbXY7kF+XYiOuUMPFkggjKfVVerr979qAJ:FtLa9IcbMyXUCUhvkFIVf52bKVeN9qAJ
- TLSH
  T1E4F39E5475D0C871D83A24351A75CA796E7CF9300F24C9EBA7881EB75F342C0AA3AD6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  lng/af-ZA/lnlng.dll.mui
- Size 702KB
- SHA256 2a9726feb71fe46808813d973ed347406127d6442d9b7b864df2d10de918a515
- MD5 df5aeee20a24728d7ce972287b373905
- SHA1 a002261902162c7f1c9a61fcd8d14c3bd6e5913e
- SHA512 62627a0ae433af919fb1738015952cc3bfe10992bbd320bdddafc0106e93bdc2b8f12247a468bacf8f5a0cbe7de768366d59b29de85e0babaa4d6fc0c771fde8
- SSDEEP 3072:NQgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qrGM25r3C1r2Tk3dqkCzd:fZvGp1pBqWJJJJJJYcRj4WBrM
- TLSH
  T107E48940E2B5D107E0A13634DDB6C1F38D687DB1D62AE93B0AB23E89F470994CB5D61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  lng/af-ZA/mplng.dll.mui
- Size 139KB
- SHA256 cf5f584c5f341b9ca32d12c6cffe56580a86753a99c359c30789a46f1d67b6ff
- MD5 8b1a085c986d72a6257ad766e8d6ee2c
- SHA1 67ab4ff7bcd09d3f6886f7206424536ca00bb45f
- SHA512 53a6e99ac760e7d72a0cf0ae24a87c401a3d6caf431c478899a3d45d3ef8b2089a03db37bdf1845c917faaf647c03f39b26889d8e868dca459f9cc0476a6c1d3
- SSDEEP 1536:xlBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6jEb:xlo3YcDaZdennmx9nkJCxiwb
- TLSH
  T1D1D3E6D2F3E4D59DF8F55FB4287A4E500A73BC5699B2464E3294720F08B3243A53AB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  lng/be-BY/lnlng.dll.mui
- Size 703KB
- SHA256 eedce0f8f1c880c1f5b832e3316331061bebc2e1f6bc5f068d00830aac52b7a4
- MD5 cd5c5c4480ed96348fdb29b03f0a8e9d
- SHA1 46d35b1f0ae3605577adc8fc7005a376c58f24ee
- SHA512 1231e8e65ffb644d09e063b3ae8805df069c7d735731e698995efa79b3bfb736fb491a94c563484c8ccd27cca909498615d90637bd38689bb17174389c88f118
- SSDEEP 3072:8D1gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qkqi032JH:8DgZvGp1pBqWJJJJJJYcRj4WBS
- TLSH
  T1F7E4B946E671E203D0906238CD96C1F38C686EB1D319E97B5EB73E49F4748A8DB0D64B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  lng/be-BY/mplng.dll.mui
- Size 138KB
- SHA256 f69f67d6a1ac622bd60bc59d49ca3039fa0548132fe404b166d2372ca516d3de
- MD5 80848672b6d67be9cfd5dd1db24ea5db
- SHA1 486450544cee0aa745e868e1d9265f47d936c679
- SHA512 23c3a0853dd2a7c04bf1731eec8920a3ca6b4e9399e6a7e551d7c1f7dc516754cf322075254c289f5da3fc8c2c0a0a9f6866a56bf66a23270da33d70120d27f1
- SSDEEP 1536:YBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6RR:Yo3YcDaZdennmx9nkJCxiX
- TLSH
  T10AD35CDBF674C29AE8A849B008674FA106B3BD059785058F7657720F14B7233363BB9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  lng/de-DE/lnlng.dll.mui
- Size 706KB
- SHA256 1ae2b91ab5f87fad3aa434aea3139f4179d1afc0c3990e23b824011934ad85f6
- MD5 0825944f10b9b70a35ec7eac00cdb407
- SHA1 f5e2e9efff844331aae360f4a04b4c65025a2847
- SHA512 b0fe288997caea233b24e1312d9c2d648aab0a9743010a0d3aa181d1e88ac28f42fc61f3fe534e8b9530cd649e904fb3cc3a2c9583bdd77e68fc1d0c02264cf1
- SSDEEP 3072:sgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qtp1G4+ReoqRTyRe+ne1PDP1BXJ4o3:NZvGp1pBqWJJJJJJYcRj4WBADW
- TLSH
  T197F4CB40E2B5D103E1A13638DDB6C1F38D697DB1D629E93B0A723E89F470994CB1D62B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  lng/de-DE/mplng.dll.mui
- Size 140KB
- SHA256 f010f112f2a47db5703e5c4caec36deb0f0a4a45f38f68c5cf6d3f42f9258999
- MD5 db94fc03018d2ff8b323c94a6f82e45d
- SHA1 2d2c730422e6fab62865d641a88b3d2453209b61
- SHA512 3c42062d4a3295c66da95df5db8c2137e9155cb293a559270799ff5ec5c8428dd78a54d2b70dad6ee10346fe93da00d9516b7a5faa741f80700cfcdc1d775b56
- SSDEEP 1536:QBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6a6Pxb2X4Z:Qo3YcDaZdennmx9nkJCxia6Pxb2X4Z
- TLSH
  T125E307D2F7C8C559F4F55FB4287B4E501A73BC66A9A1864E3294720F18B3203A53AB37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  lng/el-GR/lnlng.dll.mui
- Size 711KB
- SHA256 7cafd9fe62233ee87a24db095ec2eb2fa884a09fd52d174d14e60312bf6f7ddc
- MD5 b3cf5992d0260229cf19c6b2a1dbe265
- SHA1 85a8a12a405eb2c3f610d7f9bc9c9dad551bc829
- SHA512 8a70a126d764d9d9f3d4eaf94f4c72bcacd8d33c7f81bedeecbcbd30520e45bf7ce126db5f524e787617a80423592df2fdfe9ead854b3a990b15b46069e2bda1
- SSDEEP 3072:negwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1q2FXnk+dEriRwU3ZkmiW8r:nvZvGp1pBqWJJJJJJYcRj4WBtaRHw
- TLSH
  T189F4C944E5B7E103D5902274CDA7C0F38D69ADB2D219E93B1AB33E89F479854CB8D60B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  lng/el-GR/mplng.dll.mui
- Size 140KB
- SHA256 cde5c362ef75e9d6565c023e21570bc1dddf61baa4dcfb68d43100fe175d5ae4
- MD5 e6619260375f31248dca40d8af0cea5e
- SHA1 4bbc76f3656d82a227b32bb21b64ab3b797c2c31
- SHA512 ab34324d2ca39460b22e810a34bffa6b8b4e96b6edabad73953e167328a26e30355c332478c0f332efb2d4f16a6448998815193b341c744013a75f9142d65398
- SSDEEP 1536:TBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6KJB4vLmIjyMwXr:To3YcDaZdennmx9nkJCxiKCwr
- TLSH
  T196E307CAAA5BC599DCE40DF5182B4E210ABBFC568551D94F32E4720F18BF20358E7E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  lng/en-GB/lnlng.dll.mui
- Size 698KB
- SHA256 fdbe2c673e2ed4dc771b21aa8ba0c383a9ee38b2469e4cfe9ff44290fd7fac87
- MD5 819c42530232fdb1a7777184a07749b1
- SHA1 abd438572029390b8b36abb99c506e90f4fe02d5
- SHA512 320a5ddfab77c4a59ac89b50f86ff8f97695d0cbabc23954e2750c538a36ef611c69408a53f43ba7db9cf90b7e772536b5bba5d1503ef34a5eb0f6fc772d0fe0
- SSDEEP 3072:HgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qrGI4fhEs2QQjsQiwXjZYgW9sGVjnG:iZvGp1pBqWJJJJJJYcRj4WBd45PQ5/Nb
- TLSH
  T13FE4CC40E2B5D107E0A13638DDA6C1F3CD686DB1D629E93B0AB33E89F470994CB5D61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32