cd7159a9511153f683d06aa75555dca84ffda6e840051494ed05e10cb1ca8de6

Sharing

Copy URL Twitter E-mail

General

Target
Wallpaper Engine 2.8_Andros Flow.rar
Size 767.4MB
Sample260809-x4mtsscm7v
SHA256 cd7159a9511153f683d06aa75555dca84ffda6e840051494ed05e10cb1ca8de6
MD5 587e6ddfff06f5caf172b77dfd698d2b
SHA1 6ffd224eb14dbead13f9c1bf5c417d4df1551e3b
SHA512 938793f6ee2eb4f2f6fffacc7d0bf5677843549ec22cd3fe6d15680e112f0f2634e45eb0f34cca0fc8287b56cb6141e30bc240860fef627637b48e3aa5b5693b
SSDEEP 12582912:7RejjXvsvdk6/UHXXbEMl05LSgwqRGyu22gWexyGCwqRGyu22i3OzwzP20dpWfWF:dejjXvoe6UHbEDLLRbzoBlRbzpv+0dYQ
TLSH
T11D8933B239001C09ED983334A6145E172E6B72DFB1C1C569692693CD39FEC6CBB3A15E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution

Malware Config

Targets

- Target
  Wallpaper Engine 2.8_Andros Flow/dotnet-runtime-8.0.28-win-x64.exe
- Size 27.1MB
- SHA256 e844a7edacb32435f1f70ffa1becbd88e4bfd96ae4bc75a91334b2002a2b9ac1
- MD5 352adbb6c360eab2493c81de16a11b10
- SHA1 aaac2ac9f7b64e90e479a8a1b1fe6a4f9d2701f5
- SHA512 84379fb031707ea5a64cabcabc8b77fce74e3ae6ac8fe0b8da0159ba841a22b0d72a83ed47943806b2dde068b7f2ddc7a3937f5e54487aa1c6ede58405775a8d
- SSDEEP 786432:lNmbzOBnbtGl2xURxsmZcxwcJo4UBVj9v8TDy:ebzOBIJx1ZcxBJoTJwDy
- TLSH
  T15657337291644636EAB111B3BC3467212F7CA32C6341EDABD7C0ED156A9A8C367B7343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  Wallpaper Engine 2.8_Andros Flow/dotnet-sdk-9.0.315-win-x64.exe
- Size 220.4MB
- SHA256 7c44f508b9d19429061f914dcadbb41bdaafbba3c8b8bb6c2d02e6f41ff55960
- MD5 0f6f0ff34c8d093eaaebea7883a336dd
- SHA1 5b2851e7c1317309db854041d28585d254cd7ce2
- SHA512 c8d7ceb195df850d3c0d24c506e6641ae37940df0b2b551db4f1100e388ef11c868e014183016f1e90606afc528310f89f80f32a1c8d73f2b8c1311a79ec9d60
- SSDEEP 3145728:OupdSUfw5VzM+6beXB3oN01WQ9CviKQpZvds+bUfLrDGKSZ+67xCrnVa3JR3:n7lfGpkbeXB3D1WQ9TKEWgUfSQrVs3
- TLSH
  T1BCB83333E1A4CF7CF6982A73C56DA71C641876520A51581AD3ECECFA02932CF51B7E92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/assets/scripts/jsclasses/baseclasses.js
- Size 37KB
- SHA256 708e6636167f0456eebf3ba05274d7b7763d17dfbd44c2711dc3d6d98f0cb294
- MD5 95cbc31a9144d1adc1ead53bf5469895
- SHA1 6e35523168de7a9a820d6cfc311860a143ad3bd0
- SHA512 457c093bc8e444f0c98235be75769cd9981eaa669c4ed5ca26fce1de67dee9e05b93e718e33f22a7fdeb79b7ae9bb6764d0eee0b687fca525143d8c4c2f5337c
- SSDEEP 384:wiLYi+jkglcSy8h8dcV0YVHCqWkKGlN8SfUQZceh1VAYVqJCqOmkKA0lN5kJWSf+:3J8h8+V2QzVNDeuaFrJXhcQuQIa
- TLSH
  T10003116433AE026E17CB528456348802EC6DFA37B92B51EFF56C45F4D69B084C37B9B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/assets/scripts/jsmodules/wecolor.js
- Size 1KB
- SHA256 e678a77afe86dd5ec63d9b2af4efd3b7e2add96fa9db74ab5134c186cd578260
- MD5 3db131525dc6097ce385e98985bf4e15
- SHA1 752a821424cadbf7fef64b0946ed6fd7474f78aa
- SHA512 5f05aa1c79224fce6e22e39302ff2d13a9e809dea5e1cd02717427ae7c76c65b29434a40043fa1f8ca37882fede97dace4f8dad8cfcc17d9a719b20a86568672
- TLSH
  T1E621782CB2D123870983F0444A36C584CD1A7414B1111AEF69AED674BC8BADAC332EED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/assets/scripts/jsmodules/wemath.js
- Size 275B
- SHA256 f03f87f9703b8c70f9183495c85b68b37b31edbfb9de80dfefa63819eee1e037
- MD5 9bbc95bfdfaa0fc58bf28162417c6129
- SHA1 8f5ad8c71d7bc0ee6cefa57f539ef5edf970c22a
- SHA512 68c399ab6f5de8d9a794a046a56bbdce6b7c948a009243f5a4b60284bd78450a6fa11e3e37f81f4b26c83fe83ff5498fab25a44911a29a6976b6539b0297404a
- TLSH
  T186D02B4533E3955B19C1F3048555CE033B20B021181D53E6DD0541C80CD4E19C3FDF0D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/assets/scripts/jsmodules/wevector.js
- Size 305B
- SHA256 bdaf4a1674df99367654808529c1fa0662bf51b5b0303f6df5b108c03f8c5c4d
- MD5 d2fe51409be0253c5c6cdc88fbfaa150
- SHA1 033d0c78ffab6e9c7516bc42b67626760c350c79
- SHA512 38f7c1440ad951877a8a01606e69bb03deb90e2bf83155bf6780347ba97f7520d0de46583534f0b2ee1d0f6f61e533d6c8a33d8da0fdf9240fa62bf02692d7b4
- TLSH
  T1FEE0C28AB9DEE4268F43338C422687599164A0A23C0E22786B799A501EE4C34922DB0F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/CUESDK.x64_2017.dll
- Size 463KB
- SHA256 f0d26fed8e2e3cadb9896902a17ae7b7b82e83c19c8acba45911461669f78663
- MD5 fe452903dada03954b478394f48274f3
- SHA1 9387350d0d04ea8542b82bafae9a51f6d7dcc9c8
- SHA512 0f36123507d6519af71482a3306cb9e95707edfb7c4fbdd74a0c5f3cdfa31b918e5acb44f25f40d8d5a4bf10db97738a1d70246d38220022f5863f5387d6f46e
- SSDEEP 6144:mlTZeIlL9VmX+jffwEwdjbZ+YLo+9JvVwXd:mzeIlL9VmX+jffRwdpU+
- TLSH
  T186A4392FBB484DD8E137917C89DB8F03E1B664590B1187CB15C693AD1EA3EDD1DBA220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/CUESDK_2017.dll
- Size 369KB
- SHA256 b4fcfb7a2c97320c61ce6205772b9047e263a059878d75377e53d942fd5c575b
- MD5 1f0a021b77b1ff47842f89c99b817509
- SHA1 7515bcb3d48b41e9449abb2fc147a849611e64f2
- SHA512 87bb06ce6d6dcab3094c10c940fc264441f2dae4fbc00fe9fc3eca554800b14747802b3515b96c218997003fb911ee33c18fcb63489ba85ecee9e45111bffb13
- SSDEEP 6144:zMTiYeKoTxf3qbVePuQCyvVL+/LdjW/2dMIPvuxP3y7TaDkLMPtWPqlKbYh5dSE/:YTzeKoTxf3qbVePuQCyvVL+/LdjW/2dX
- TLSH
  T1C1840A71FB13CDF2E5CD90BE10EEBA5E525CA7540B7404C38A8C2966D6756E32F32892
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/FreeImage32.dll
- Size 5.7MB
- SHA256 a784eb3e4f642ec9588f9851fe16864d48a0d6e7f321e30a7348309e1ba59285
- MD5 0dfd3152b91c9a93427b21cb63f151fb
- SHA1 e59e5b5f8565bf110d2188a9441546a7bd25855b
- SHA512 4f2862580f5518fb5e7aa357c320592b3a619eb323901f7d3c89d496bf9c8dcce6126ca71773ffe284d82779ccf0bf0f6b7f9f88da9b57e078c827f9e6bc5d5e
- SSDEEP 49152:vhZ+6yQ63ZBNUcScG703l4uRBxtWSN2oCXP7YJ/xmxTHsB/c7BDGRlK0CSjO:6Q4PN1T3/N2o9xobslK0m
- TLSH
  T185565B52FBA20DF2C89740B0847B7B76CA7A9C740B2047E38B715A1EB8663D1157778E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/FreeImage64.dll
- Size 6.4MB
- SHA256 8ad1c4f80f343c18603afb12029048d2604d42466f4fdfdb5c61d92d40fef3e8
- MD5 611271ba49913b17ba79f90d290eaad9
- SHA1 48ebe8d423aacc9465c5edf19d9b0d3c50a81030
- SHA512 acf119eb4b266e2c064c9cbf3595e6a6360107c2a331edc6bce1aa9a1480e8c5ab0e4f73c4c731085677776b5a236b95f036c6b8f232cff52a128b3a15cbe06d
- SSDEEP 49152:yPR+5A2nN4EkchxnYbMQF26WnTNdj9RvJOdgO5Pozdu77TAPiclRIIabS/OhwUWv:njSwUGjUsAp27wslK7Pwz
- TLSH
  T105665B52F7A20DE6C863C074C5B76B23DAB6BC740B2007E74B618A1E7E677D0057A789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/applicationwallpaperinject32.exe
- Size 197KB
- SHA256 0d7adc7103721a5810063d2c885cd25dd78fe3a6d67c8d4d70ba02fe8a4f63ee
- MD5 5e86fbd480b3ba70ecd994c5070749fd
- SHA1 de243fc4d39c465a7d11ea3ef0a02ff82eab052c
- SHA512 b66a6f62d213829c54f1a003dacad2f9866b2dbeaefd9d0a0c0aa93335ca729067350c838096126574a3e303b46b9b067ccca41f3bc6e70a45255eb672271d16
- SSDEEP 6144:sqz4ebTew3m6utfDcA5zBNiKUwIuqnSPc51tAOybeaBS:Kw3m6uVgQBgHuqnSPEjYVBS
- TLSH
  T107149D00B4D2C872E872153019F4EB755A3DB9158B64ADFB63944B7D4F303C39A36ABA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/applicationwallpaperinject64.exe
- Size 237KB
- SHA256 d829eb1fff8c7836517230068569808ece9955df680e55dabf7e239fc6eadaec
- MD5 2ffbb3da0642f7a98a309402cc81f452
- SHA1 233710c9599c98c9b563644e4b00022a7f8f7e60
- SHA512 aaca126df44e45e445790596bcbb0e0282918e0f0f2a8564ead24a0c972573f7dd0afe3c03524a16166d77e4c2dc48f14882acb79d669aafc21162147f2ce557
- SSDEEP 3072:3bKThj2VFLGFZys72n2dh0xTgpnZro4KPMXBAAGCMwnnemNptdSIsYBuVT9DPhIn:3eThiGqsCs8TgpZroxu3MOnBKDPs
- TLSH
  T167348E55BBA50CF9E6778539C9424905DA72BC5247A0EACF03A04A97CF337E48E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/apputil32.exe
- Size 238KB
- SHA256 3c642cf98280428b28b5df2e22874a8697167a34d6e73356fc7b3cbf1c917097
- MD5 50a29b9760db452167b61c38a9f43b64
- SHA1 96a799ba954b6919c6e709c5e20a9fb52e5d0cc0
- SHA512 561a9069d892385ea84a8e590bb95bfc3ee97a03861167e140603d3fdaa63a6ec8d8d46c19b6af875e1d94a7160c347a56fa997c35a51534d11665da0b85a56e
- SSDEEP 6144:ZVEGDycSX1fPu8XeQ5K1jiiibkhZcLEj8Jv:gG3SX1O0LocLNJv
- TLSH
  T16A347D10B8918032E576593544BAEF769D3EBCA05B64A6CF67800DF9CE307C09B39B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/assimp-vc143-mt32.dll
- Size 5.1MB
- SHA256 fc08c70b164f522a415b75ee44627ee760f600513a5013c8c00b4d9c3e2496ea
- MD5 8edeb0373008dde63852c269d4c55aa8
- SHA1 05d270d8f81c9c6818d01b10d1674f3c658ace8f
- SHA512 073f420b24945860d672e34ed79a4e671cab43d32d6ebece60adf49d848be6c413305d7dd8441533789f2678a3be8e603a67d54427361e53c5039b0b85f74643
- SSDEEP 49152:g6hjDOcoL4ppPPxsHD0ZHn2Veu2B9XwQ1GzhbgwCla0INvJwzIhJGVUiywObpQGx:g0nUDsHO2B9ZGdctaL/wObt7NWULAW
- TLSH
  T12D467B217505C435D18903B1A929AFBB929C5A311BB644D7B3C06E7AEE706C36F32F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/assimp-vc143-mt64.dll
- Size 5.8MB
- SHA256 5e9bd1320a9af1cf7b4b88bf5320deabc36029513cb69945e009a0c40b1608d5
- MD5 35d5b8b30ff65f82964dc895200f253c
- SHA1 57c1be61a5a839e75f18bdabfe43f6fe5c27dc8b
- SHA512 f4dc1c868e809adb2990b7639222674d1772e5c7e93362b90c681c6367f38ac23a94b665070e7b2acf792a80b7d3f78ee45066c6e3686ebbab95f70b6eacd3f4
- SSDEEP 49152:KddOH4axxkBrO3J1Ki7zK8nZAp0K4k1Z4oemf/IRajRBk3Rila+kwT4ltqroaw9X:eOKBrO3aaA0MkaM+vwq9go1N+i4I0
- TLSH
  T1E7567C23266901ACD1BBF178CA5B9913E7763406437196DF07D0866A2F67BE08F7FA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/chrome_elf.dll
- Size 2.4MB
- SHA256 8c875b8f86a7c91741db723c330b1ddc19f682ea1b84b73aca08c7f019230b83
- MD5 326e9c7148c54bdaece66ebc87a734ea
- SHA1 5a7331694754375f32e3e7c801560ab21e746d22
- SHA512 84ba4643b957587fffeb4db011323dab9b454b0b0707cdcd42dcc53dffe34930e32288c0f69d83d817a7ee227d02913402726a15704cb752c7825307a5be7ffa
- SSDEEP 49152:hwPWKIm12nCSSajxFPv7e+lHi5q7O5irGl/umbt:h0WKfG7I84irGl/Hbt
- TLSH
  T15EC57C53F2A900E9C05DC178875B9633AA62BC450B35B6EF0A9077162F76FE4A77D320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Wallpaper Engine 2.8_Andros Flow/wallpaper_engine/bin/cloneextensions32.dll
- Size 470KB
- SHA256 5b8fd546b54d97f0c0447905fee6b11c68905b4c39fdcf99d764984a589b593c
- MD5 40a9ce79010f152c09a2204c48479c2d
- SHA1 c2315a876e07b07ba5cb6d5b53df2421f48e04f0
- SHA512 e812a3cddef1858189cf82c5fa21497e303062d4ea28eb14a29de31d0e5d90e71da077001f5591a2b3308f78c0665c2f874caf08979a9bfc43db483819df8822
- SSDEEP 6144:B50FtHTW3NJ8qt7dfYuFg+iHgauI0d7E4Ofscu7LwRtXtbMAA6aD/ZcBsmXo4i:B50F51qddy+2zuI0d70sErA68aBsx
- TLSH
  T1CEA49E11B8808472D9BA343606FEB77E4A7C94600B145ACF63D818F9EF749C1AB3965F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32