General

  • Target
    MechvibesPlusPlus.Setup.2.4.0.exe
  • Size 61.0MB
  • Sample260812-1g2afsen5v
  • SHA256 b1091d37f3d5691e7bf8cbfc46970a9ed643075f07af750175d1a58e03029132
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      MechvibesPlusPlus.Setup.2.4.0.exe
    • Size 61.0MB
    • SHA256 b1091d37f3d5691e7bf8cbfc46970a9ed643075f07af750175d1a58e03029132
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/INetC.dll
    • Size 238KB
    • SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/StdUtils.dll
    • Size 100KB
    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/UAC.dll
    • Size 14KB
    • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/WinShell.dll
    • Size 3KB
    • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      LICENSES.chromium.html
    • Size 3.8MB
    • SHA256 63b85583b3969027a0e57c1cb9160dca371422ac170ea17ee9c129a21e308b31
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      MechvibesPlusPlus.exe
    • Size 95.3MB
    • SHA256 209721b9679efaa3292dc4680f2b33c5e9b274c1aaba34328ad260bb3810c9ad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      d3dcompiler_47.dll
    • Size 4.3MB
    • SHA256 dca0cd7272a56801dd74d0b253df33a8829bee61f5fa0c6d8e2ed5b62f440dff
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      ffmpeg.dll
    • Size 2.0MB
    • SHA256 ba40eca32e8046c9648e56e58d5b56aea2644f8cb1021845524aaebd1df2f2f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      libEGL.dll
    • Size 128KB
    • SHA256 5500c13934a687daa1a17ba145bcc1457baaeb4a94206b54dd514e2fd1dbd211
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      natives_blob.bin
    • Size 81KB
    • SHA256 354ff502a0e1ed73df4e5c7b52970356b04777461f6e169f72a8567ab5f4c317
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/iohook/build.js
    • Size 3KB
    • SHA256 a48159229aa653155c01a773ca64120699fd1675466003d0a6929d8ae95be77d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/iohook/builds/electron-v73-win32-x64/build/Release/iohook.node
    • Size 38KB
    • SHA256 bcaba6a47a20d7f7e270a3106b7aa5b0452677b9bbb2c8658ff2ef5467f7ba5f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      resources/app.asar.unpacked/node_modules/iohook/builds/electron-v73-win32-x64/build/Release/uiohook.dll
    • Size 29KB
    • SHA256 55f23fa8941eda217857158c7430b0ed18cad0db2f9d73cd70cd9cd7a8594520
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      resources/app.asar.unpacked/node_modules/iohook/builds/node-v64-win32-x64/build/Release/iohook.node
    • Size 36KB
    • SHA256 dfeeb05b98a526bc268df1b0080fba7a57a79f97cfa270e90c40ddb9cf3631ef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      resources/app.asar.unpacked/node_modules/iohook/builds/node-v64-win32-x64/build/Release/uiohook.dll
    • Size 29KB
    • SHA256 e19eed495d1157d66cfb31d8b3b27a0eff342e6f609b9c56c914ea034615285d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

discovery
Score
8/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

Score
7/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10