0732d1fe9944829d017bc3c8a93c69c08a6c3aca997b83e0d63e2c8b118d0eef

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64.cab
Size 276.6MB
Sample260810-23v61abb39
SHA256 0732d1fe9944829d017bc3c8a93c69c08a6c3aca997b83e0d63e2c8b118d0eef
MD5 0c5088c2794a2541417de3494416423e
SHA1 ebf364fa913b94739307906afda211ffedf7b78a
SHA512 4f1f8b2e433e8c6b3700605eed881c716c078e5bd3c168d4bd7b1f771599c1d43e5564ca59be44656d68f4738f4039b1dd7e0b25fc506969b8c8a19eb51bd458
SSDEEP 6291456:QD87+dGzNpIK/S3RhSBhy9t5NPXqRK6efeeOsP1vp0t1gtUAd4t7PBgfSIUue:QDczNpITe09t5taeeox0Wd4LKUj
TLSH
T162D833D2E67B07B3D0ABE1229485FA7C1576B36D493A0CB473B512A694C74E6F332027
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/EBWebView/arm64/EmbeddedBrowserWebView.dll
- Size 6.3MB
- SHA256 a66f23bde5ba7862ec341f72b53bb796b11784880db33728a91ada27017b1edf
- MD5 6923016279629c0c5d7833172d85e32f
- SHA1 5b6abd3cf7d5fc365a68e02d80241d5aa9acf9ec
- SHA512 93c67eb8c8f46447233f0d67384f1f21a16f3ead5b25e3bae35b071fff4ac65f34d3198656298e456a5559b498422b41cccb95396781788322225dca0f8fd1c2
- SSDEEP 49152:A0scH3GEkSxKe1Dw5c17omq8IWsgshKaD7rs2vVlIp37:A0tH3GEZKexw5c7qhWsvKclIp37
- TLSH
  T155667B90755DAC16E2C6F57CDF734BB5310BAD641E6880AE202A310DFEB2BC2C699774
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/EBWebView/x64/EmbeddedBrowserWebView.dll
- Size 8.5MB
- SHA256 92387b1af5a34e580a767c343c4f79b3a4f4cb3faba4e1bcf86203772cfccbb0
- MD5 859b867b216e561e5d16925efad865cf
- SHA1 c5bd92db5a47be851fd18d0d393d9de40dfd721e
- SHA512 55216e173198ea1288c65430fe1dafeb2e33ad250a32e684c6cef151f486b2f323837daff5e49088dd1d1788adcea064d021ad292c1590919550ad8aea2902d0
- SSDEEP 98304:PtwhrW0ZZoV3ZDwhxaN01GDeUF5rXx3WyowJn:sdkSmJrD
- TLSH
  T114965B03F19A41E8C059D179CB679232AB61BC4A0BB1A2EF165077D12E76FE47B3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/EBWebView/x86/EmbeddedBrowserWebView.dll
- Size 5.4MB
- SHA256 245821ed6f4b17cfd4ce5fd2665289e2f2fdc3dc701fd06b5b011b0ea251b12c
- MD5 ecf3aa329eec42b615e008339b921855
- SHA1 de07140f87f2546e8fa61caaf92851952afb505e
- SHA512 d966f35e42d8adc7f5c42d8973f150fc5d23f4728aa4932a4981775c8c3308b1d1c9cad6c8554491e72eafbb79215c2e8d85771170e9592023283abe5fc18ac0
- SSDEEP 49152:NL7l5XyJAPQEyyG5CuM+KINKvoBhzFiVY0Y0ApHlCXPiSvk9/1Yls/PHDpyszxpP:9RQ37KEwVYhlCfzk9/2s3HDEuY0Q
- TLSH
  T18C468E0364118074D14621B2E83DBB3BA7306B5A8FF249DBAED57C942F74EC1363669E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/Installer/copilot_setup.exe
- Size 30KB
- SHA256 2c65eee677d875182041b648d6e9c368aa4b08b8eb61cabc382776b897cd4dcf
- MD5 1fa712ce76f048406a13ed617a8a0e68
- SHA1 b77b90f5786d866e091f0be35bb258c593021fc3
- SHA512 614374562bcb72ee25057f585716962e8f79433bad57e7d0086cf6f01dcd97c317459d139d12fe66756de2645787a5ba7eec28b7adc51d22996283dd9f0fa32a
- SSDEEP 384:hMwaiORqD9wMJt5r7yWAH/ELvmtmrWYu8WQ/QnIHlNS2R9zIcM2:OnqDF5r7yWLqE4O/X9z+2
- TLSH
  T1C9D26C85AB6848C6F5E61D74597CEAA33C3DFB710860C16B19A0F14C6C1B7C2EF28766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/PdfPreview/PdfPreviewHandler.dll
- Size 257KB
- SHA256 90fb91a072dd88dfaf29e6a0fd77177298f9eb5e5a006ba191ca3aa0061d7571
- MD5 8c719a0733634b7d6a313e60e89fa0a8
- SHA1 5bcc23db61d78c443cf3a7555de6bc6f11d308fd
- SHA512 6478d59df716c4c1a365eaf5d6e83df0f03a725af5838cc9a4f361c4f6344463e6dcde41e060f0b895b976d09dcd55027585926574ce3dd6b4d690c19083f2e2
- SSDEEP 6144:q3nx8F9k+TkV0ziAhoj9jfOJ7cqEVn4PbBx+:+ni9kf0poj9jfOJ76eT+
- TLSH
  T174443B51768C9C96EEC6B83C9F6287A51277A9905D22D21F3225034EFE7FBD1CD812B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/WidevineCdm/_platform_specific/win_arm64/widevinecdm.dll
- Size 16.4MB
- SHA256 ef9ba256548fe37a47fc308646860240d7342b40087f2719f9365847475df0d2
- MD5 dfcd922198c7370a3db3d1ed46a4182f
- SHA1 8cb3037d77b257f7cdda2b58728c3f49a03b32ae
- SHA512 5610838838f686dd07aab8f8b1a3cefafa53a18c1685851faa0cb55afa744d5177c21837e66aa5504b6b597088bed3f9ceed35450476eecb22845261204af581
- SSDEEP 393216:nB3pyYXaoDzoOM+7JtLhQ4LkxRQIuJfA6YafH8Zxmzo:n/yKM0MQdA6lfImE
- TLSH
  T1800712A6694DFE06E9CDB8BECC070E5174B9ACA042B1D852B00A364DDD30B96D75D3B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/concrt140.dll
- Size 718KB
- SHA256 58de9ec561e4e58a4792c2f61a55468e6af3288a3fb5857d6a2266bab63114a9
- MD5 1e5456a8f8fba82ed8028b4709b0f2cf
- SHA1 44ab024dd9fbbb9c5e1fe7572c620fbcd2648e95
- SHA512 8988b539747faa4d1d2f3f34566835021fb5b10418716e30afc23dc3d27351a739cf9bee9c819c992616b4207bd757e6fcb70eb12b4804bd5d5df112c9053f8d
- SSDEEP 12288:gU2FuN7dYwzyT4IBFXcXARWQMaITbR7N0EqLpBTAms/Kz1zzMPj/VJ:looG48FjsR7aZ6Sz1zzS
- TLSH
  T19EF417D13B8EAC92D2C2953CCC3282A47177BAAD4925C6873097522FDFADBC5C7A0553
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/copilotapp.exe
- Size 3.3MB
- SHA256 27f293c86e1e6e6fdad44a7589e92c09dfa4c067125e3919f04beaacac79c346
- MD5 9c545be2106227e9278aa25223635c28
- SHA1 42d9609633ba256f074929d3699c9802bc75ca6d
- SHA512 ca32c014adb91e316d27720073db8760b0067f3a2bac31b5e5f8e1c166c635115ff0da91c1aba71e45dcbd021c54ce1961fa202fa57208e335351299484a71e8
- SSDEEP 24576:11nRz2/YDXwcQJZ84brecgLpX2Gt+vJ2lBccMzC8s0oAddMrGWgbAVLT8J9vTLon:l5gpDIAGtxcIkMrGWgxdvXTjZM
- TLSH
  T149F58D91756DAD86E6C6F43C8E154BA5300BADA85939C1AF3026320DFEB5FC1CAE5331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/d3dcompiler_47.dll
- Size 7.8MB
- SHA256 d558b2e71a324978c73c358f41caba09c1eb99a22438debd40d9631226571b29
- MD5 9c10bc9a9af6442ac072214316c7fea6
- SHA1 852b4de657697fd75402a574a17548f7e120a15e
- SHA512 798f5d6169a08e5e2e3c2a9b2a883d76107dc1c62c770f20de39061b411b5da116d078e0315bd05e900d24f926b01182e3964731ab39d8b48fbd67b877ea907e
- SSDEEP 98304:5hD0C7VaFIIswhwOI+VuHWi6ytMJo0xWUa2lHo:5h/HwhwOI+2Jtt0xWUC
- TLSH
  T1C1868E81AB4D68A2D3C7F67CCE074F10F02BBD78841495CB2253215EED6AFE0D6B9652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/dual_engine_adapter_x86.dll
- Size 3.1MB
- SHA256 c259e957f60fa9723511cca3f55f3d4339fbf31b7259ff6606924920173b7c26
- MD5 016de613731e330c196b81a74a5c9bb9
- SHA1 264180b0b3b8144546c07c9e197757f2cf8308ef
- SHA512 fd62de186ebb485cb629bffa0132b4a67e7f68ac02844e52dcb126b9fd313acbf2f19805a8d21aeab3369a305228da8ebc916bc69dbed1e8d0e0a9d90cb0dcd0
- SSDEEP 98304:d6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwG:xzyiDo
- TLSH
  T117E54C6172206178C84E9871987C6BBB151C1DCFEB7187EF09DC3CB16A749C23639B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/dxcompiler.dll
- Size 18.6MB
- SHA256 bd68174c286a42eb772c6ca94668f2fc2d8ca8e63e63c0e2047a0d07d5c57831
- MD5 7c5418fcd56ff09f5ea39d79a37ab66c
- SHA1 cfc408ec4f06e1ef39895909258879e5ede1d65a
- SHA512 1aac1a7bd9896df437165e67de5e04e956278ed10b411e42bd67d09ec0b55e9a73d8be5984b339b06b03a14dd8a25af635a210580919499fe215b3f0b1e9555c
- SSDEEP 393216:Ow4q8fnubiErtcyDRVNkSev4Smmftr/5CBs:Opq8dKtceV9AVpfpMBs
- TLSH
  T1561739800A9DDD26DEC2B8BC5D6F47A1A94635D88A2D95BFB0A4300DED31FD1C6DB270
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/dxil.dll
- Size 3.2MB
- SHA256 69853282c1ae889f5c70c1dae66d9adf692379ba37dff2f9793b9607270537eb
- MD5 209bcdce10d510ae785065e66c4d767e
- SHA1 349af57c5cb1c8e51a3bccac1a69dcffc1519235
- SHA512 891e51fc705940ecc8046b8fc0310656241e0bebf61604b61d063437b8a9eff57d7d2fa43bcf1a94dc23f7375caf68e3b792860fbcfc209bad2f9114541ca2cd
- SSDEEP 49152:6ii0e0NH+jCi2/bbtA1QzNNaJ6G3zNCxqDc0cVdUZR9YdO:zWjCfZJrGD6Ac0cVdeR9v
- TLSH
  T156F56E51AE4DF821D7C7E37CEE664FA0302BF5B49538858BB01B420CFDE5BD196A2252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/elevated_tracing_service.exe
- Size 4.1MB
- SHA256 4bd7a8ae0660ce4c36d5cf87f360d150a71f6aea7d295858d4747f4b963d4f24
- MD5 a154d9864b029b0b1374b8ce218fc0cc
- SHA1 2201a4a29a083a2a9f63574c6d3cec2d7c17822c
- SHA512 0725113e4eba6ee6bdba5f3f906927d11a2f54c5d004021ee381228bfaa5079d563d78f9fc76d46ac4458440299585f1bdc9f50f650c108021851ce148a4e9f9
- SSDEEP 24576:p1PPQ1Ig5O/n1xkSPVqSNDAuLtaq1svL3Hr0raTmEocTCfzE1U3ZLPK5N2z4tT4t:uSPlLl14iVzz4tdLsjJzdB/
- TLSH
  T134167D50756DAD86E2C6F47C9E654BA5350BAD640938C09F2026320DEEB5FD2CFEA730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/eventlog_provider.dll
- Size 15KB
- SHA256 04b042510547f68e7b8f18a5c9cb1dde3bd946c3d78e54a21af52b6e13b5c78b
- MD5 5f85d7bbdb8676ead8d3eea4eede9799
- SHA1 72cc5d9ad478f5ab1ef7ca97a994422c3bf0df52
- SHA512 6a3c8a07e4354466161a76de7d923a0943785414894f8508de488a83b52e707586ec520f384e7404e8518d8adfd13bccf9097e74277b2a1bd9d875af01a528e4
- SSDEEP 192:/qqXWdnLVWHWW0MBIHBWseaIWlezthuFwleX01k9z3AodlkAyF:/WdnLVW3IHlNKUwleR9zJPyF
- TLSH
  T11F7228D29B7C4082FDAA6DB09678DE977E3CB7C20950A15A1296F04C1D637C1EE3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/learning_tools.dll
- Size 1.2MB
- SHA256 d0b2ca033f8877389498268d3940e898244744871a79cc49ee0925ddff2fd664
- MD5 2f8002545c5c1e99804efa0a9a92a763
- SHA1 0c6e6b38917e9a3d2a18eff53e8d036875f8b19f
- SHA512 28b66dc59d9b9b2a5387229cbec42705500ee82adc461baa45213299d036543ddd87fc64de2fa89b86528dbaf591274477b7f0ee11823b721c47f5c64f2f6c56
- SSDEEP 12288:iSHdsw4U2CrbhWLuI3YEpnYJj3YgkLcIzOcaQIVgkLcIKcaQbgkLcIZcaQdsnv/v:Lrbhs+j35+snv/CHgXxpgn65
- TLSH
  T1BF556E21720A6C37DACE81B8EC725382B231B891741784BDB11D9DCF6A5EFC161E6B35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/microsoft_shell_integration.dll
- Size 444KB
- SHA256 423072d8860867b4af863788e91dfcf0f62ebde596c7aef576fc000582d60973
- MD5 e93a83fc6c12b62e00faef3d0edbe0e5
- SHA1 475cbd02fd02cc6ca3f4bff71eff76df1276b0a1
- SHA512 af54f1841eb0736c28398f602cb6bcdc9d92a1f51b55e8be63920af6114f373cee58c532675449cf68da79f8f1954fd84a70b158ca30cd29ba3ffd1fe88d6fe4
- SSDEEP 6144:tSv3lZa+sfE1lD9gpxqHjU3e9hAs9rEeUJmNBY5DNu/stF:tStbssrD9gpx6w3e9hAs9rEeUJ6aukT
- TLSH
  T19BA45C506B8D6C86E6C2EA3CDD278B50205FF9A88C31D11F3116526EEE6EFC1C9D1762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/mip_core_gn.dll
- Size 7.6MB
- SHA256 442c013245f7460f7d9defa46d6809ffcd3e689ef2b58303d785c1558b4482ca
- MD5 7e0feedb5ceecc4d7dba7aef0c9c5be7
- SHA1 2aed632be95114ed66aa72da997d0931d45c59bc
- SHA512 2898db03e884bfbbfaa44fa065b13bbe83a54a2a8e563d946209452c95a9628ae8a128b216ae373fae2393cce3709f347a8ad91aa638ff64ce9223b2305bef59
- SSDEEP 49152:lIYMSfXj7xj1b36MiklxoCvwTpUyTxvbFlvG/nQEm7clhOw5hkCu5dj:lIYMgzNjYOlxoEwTCyVxXw5hUf
- TLSH
  T177864C03165DA98AE9CADCBC6F7D8FE4351A8D519838968F5072740AFD72BC1C9CB234
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  Microsoft.WebView2.FixedVersionRuntime.151.0.4129.78.arm64/mscopilot.exe
- Size 3.3MB
- SHA256 cab3ad38a8150393e4405fc2c0ea7c69463d4d18511706eed65d70b3ad7cc1cc
- MD5 bcfd66e46852530a124a7092ac9f6f32
- SHA1 bace7fe1d858698f745ef4458c9323439384bc2c
- SHA512 0536b4f4cd2d2fd9a5f369a00e7f3d36ff2d7400a5f1e354810ec9bb2b1c6b4731ccb117b9eadb9d8178e1cbd1ffaa97a854a4ffcd9f9b054b4d768658b74e7f
- SSDEEP 24576:p1n5H2DwPbAwjRdA5zrmMgLVvuyGr9OVJcUIpMecckcY5JUrGWA/oVLLAph3TzoE:pdMqSIkyhcz/wUrGWA5R6qT7
- TLSH
  T186F58D91756CAD86E6C6F43C8E154BA5300BADA85939C1AF202A310DFEB5FC1CEE5731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32