7f7c55db6d9a8a387088b607c5ba65a9330829a719b63f9075923ecff0a94806

Sharing

Copy URL Twitter E-mail

General

Target
DS4Windows.3.5.x64.DS4-Windows.com.zip
Size 3.6MB
Sample260812-m7azasvfrf
SHA256 7f7c55db6d9a8a387088b607c5ba65a9330829a719b63f9075923ecff0a94806
MD5 d1f3bc7fd319dc7408a4caf8cb715e56
SHA1 392ef8c00c93c0a78ddd7f923ee0d94f98ff9955
SHA512 b41c881baa3ddb2db8d6be37c7380e05d499b69472f1e36937d205b5207c29a1975babdb7e5a08d742e989c761cb244b69cd0d4d0f307188768d72532c1ff067
SSDEEP 98304:ZUPnUHc1N6z7yVYke8cSvP+xxTKbN0iiY:mnL1NE7y2tLSX+xxCNj
TLSH
T164063323D5048749CBBF23F48B0A643C897ADC195A4D6ACA4D18137E959F0BCA364FE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  win-x64/BezierCurveEditor/build.js
- Size 421KB
- SHA256 5a60d65fa005b61ca741c00bea5304a0ef0309ac6ceb6b598ecc02b33584ff59
- MD5 57b4a10cf9a19e9287dfdb59c1c6417c
- SHA1 8c38b18b9c78a190d0aefd2cedbd34eaedad9ab2
- SHA512 0d8778392b0ac8feb33f7976874a0a7b1214ecf6e34a43903dc182f943af0e526ca9599b9c49a445805cb466f099ff2150b2b3364352f0357d8014b48036095e
- SSDEEP 6144:GOJ7Ek2J1DLRf8En9cPTySOKdYaCPpgaL532nmExzWf6yMAiqRLNpQLDH1:JKk2J1DLN8En9cPuSOYaL5ff9dpzAr1
- TLSH
  T13394504AFAF124305247B278467F880672B5504B1E8DBC143E0C96A91F6D97C93BAFED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  win-x64/BezierCurveEditor/index.html
- Size 183B
- SHA256 fce8290546f6fac7b12dc1e4eccc095365729772ad3e9310c971cfb6b88e1201
- MD5 116d5c5237e58c80c46746c0fe0bd128
- SHA1 4f3bef1b117c69564fbafb4b682f1e1052df0a54
- SHA512 84515217b116b5641f44382e149e8c25f43374223998285928b84df58ea0687fd2c34fb86bc797fb8edace8025bd6016c73dffd8e8a7c6daa1521d37659d277a
- TLSH
  T1B1C0C0874C0150014070C6C00CF1F7083086C118B4F4D90021F2E002FC483CECC4B06C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  win-x64/DS4Windows.dll
- Size 3.6MB
- SHA256 bd7497e24cfcededa70683fa58c738901e4ca86c1d8ec98567a971faf03ebffd
- MD5 462d3484bf0da94db90b84645b4925fe
- SHA1 77116a6e7509333def82f5589ad889314a7822b5
- SHA512 9544f8c507caaf1d36991848ed6e3e5bbe18f4f4f8ff65484394ee4a66ec628b9b6ef87ff589ac93ed2a32e31df01c27b4cfcd6a06d89f59aa6567d7cb379c67
- SSDEEP 49152:MryLfEhWoBmo3mjneFgnyce3hevmCMx9XVCkuPdjHm:3fPj8u9H
- TLSH
  T15C068C1933A0CE69D96E16B8D530C4F65375FD06A322D25B76E87E9F39B270208463B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  win-x64/DS4Windows.exe
- Size 227KB
- SHA256 6267cba17b87ada8f13ec6e187b309e3c76aa087acf2c255ab19dc2db6799a34
- MD5 b0c2e8f94ada5a57364acbdc320523c2
- SHA1 fbfbd68faf7c0f5c9cf2603b86f288ea7f19e952
- SHA512 563c5150d2cb030a8690c05fd9083cd5658c2cae2417c1f174b9ae0a7793b5031e5ae9542de872c3b2385dd11c6da64995e36fba33b816c475a528c265707264
- SSDEEP 3072:qqvmgiYSo4k8uIPzlSRwa/5B26mBIgO0zM+D11JHzFEvJ1DndoHR4t2l/CH3p9J+:q6ok83LlMvvaIgFDCvD+HR62ZWJ
- TLSH
  T127349D07E2A851BEE1B3D639CD924841FB7278198B71A6CF17504E761F77AD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Drops desktop.ini file(s)
behavioral7 behavioral8
- Target
  win-x64/DotNetProjects.Wpf.Extended.Toolkit.dll
- Size 1.1MB
- SHA256 8038eeaa3483c1a751f04f5acd1cbe5d01c772f9049d04e3bf0d07d04f5723bf
- MD5 8983f161391ab632b9d2aea51a69c4ce
- SHA1 d1cba0b5310e7e12e67532c6ac299624d2a8e7f9
- SHA512 1bbb924a992008848c9ab6811795591e3be6174eea95136e0470e32c025223fde3a453d5bb06ef469779ed4204f101c4348d90944a03fa47138481c028c42c4f
- SSDEEP 24576:eNT2tSXxytYVB/70FAKluHz6I2uP+LvUaLz3bb4lvYlvx92V08XxjaRdV8WHvG6a:eJx+U/70FAKluHz67Bv3Lz34lvYlvgVp
- TLSH
  T1B9457C5023B4887EC87F4BB9506200186631E95FE3E1D31B65894B9E7CEBB124F51BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  win-x64/FakerInputDll.dll
- Size 14KB
- SHA256 7e3d67a3e6b4ef2aba039a3b1e079acde3ad95e0286a87623949ad74607d1a50
- MD5 7c87a11e5c2bbd4e2414c568ea4f4360
- SHA1 c67a1108118994de1cebfc7149aefada4b2db416
- SHA512 f826b4c8caa89aa27489de32ac426a7f76971c9bfe797a679cea20514e79aad6d35d17d0226ad54b19f13be3b104b77afa178d3ebf70aad66c6361b5cd37a01d
- SSDEEP 192:F+vcSldLwhPcoJFYMV2n9ywc5I9uUcAcqy8:06JgMAn5yIpcgv
- TLSH
  T16C620787FA9A1CFAE56941B688671D28E679FA25433147CF03B013090D7A3C63A7C669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  win-x64/FakerInputWrapper.dll
- Size 10KB
- SHA256 4792671766a575394d3402a9365af9908af94e812ec1969bfe4975c0ab4f5430
- MD5 25989ccc74dcf12a2216c196d8c94b9b
- SHA1 ae0693dfa6da746c952f2f0140c33ca9e321368d
- SHA512 23ebcad4e9eb948c70a557c815fd31af188808ec5ce1c301a912f4bdc6acc7352941514bef801b249fdf6384aa60f120b0b4c27b1929d42fc70c85a3328e4614
- SSDEEP 192:4VwjZiJ1OhXNgCBViwTYrXx5ic2XGIlabgU3K5shX4vJAyT:fiJALxgXx722Ilg7a52IBvT
- TLSH
  T183221C19D79C8137DDA68B79F0F30612622AD9A47202EF6B265C90445F137C9E6332BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  win-x64/H.NotifyIcon.Wpf.dll
- Size 107KB
- SHA256 65bf44ba535e1efd5ba38c6f0ccec5756d1dcdbcf458d22b436eb7502f19f73d
- MD5 be2a9028bc37629428f8b36d58fc4723
- SHA1 b4bab6b42a51000ddbc672e8b83233d4ec30a612
- SHA512 8ca62e90934900f1c4a863fe7449fe363523ed95d430fed24ca8c99cd7400b6edb07d60f72acebb29956495818046fafbdd039edd550caca80c1e5300c685232
- SSDEEP 3072:FMO55R0jszmJtf68LlPHbS+em1lShoG0:FMmeJjVHlh
- TLSH
  T1D0B3CF95377A827AEBFE63B0AC9A11304335FD137672DB180D98596C48DFB8602922D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  win-x64/H.NotifyIcon.dll
- Size 331KB
- SHA256 2afe988b67f36aba97cab8fdafc522df13c4399fc3a9d3dd521f38d25bf0461d
- MD5 a44681119866a16fd9a3461a839559a8
- SHA1 a8ebb0b0dfe0559cd35225d2257f58b50aca1540
- SHA512 5212746fe3fbd62a2342ec16938d07b94ba8acee83f6aa29a90ae7e11d7634a4ec8d64b377e6ba983979ac0a4586bc675d758930f2bb5f725a52092f5c5eaa63
- SSDEEP 6144:jlTZBDxeagx5aAzicZg9B5lvBgAHZDx8akE2D9/BCN:jHbg66pZI3unEQ9J
- TLSH
  T17A745A17A5361F7FC608C47A3033150724AAC50DE23BF53EC5AEA8AD39D9D820E5E6D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  win-x64/HttpProgress.dll
- Size 13KB
- SHA256 a6c28242c760db5713f12a292a87c470e39e42aef8663d02af8e72a3658b97ba
- MD5 e97fb25cb7d477d5c3116f3add7c060e
- SHA1 a764ff39dd41f97f0a4d224acec348d75eef337a
- SHA512 6c1580d60755fc2f89403138ac082ab7b57d215cb20493f092502d30fb5604340cc016aa5c72300bfc22d3e4add0b12d487f3bcf213044d41c6c13e9b1dfbcaf
- SSDEEP 384:D4DXA5xR0vFPNBJYEk7tpwkjRdmTBHeu5unsEga:D0e0dN7YEkPPmUuDG
- TLSH
  T14C52091467FC5237DA7FABBDD9F147814332AA12A412EB5F088CA1DC5C933498C6079B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  win-x64/ICSharpCode.AvalonEdit.dll
- Size 607KB
- SHA256 d41138d2e17998e77aeba0a5dcdedaaa08c2601aa72db6a6b7b9b56910372515
- MD5 36bafbe39e16b7827e04c2a75e40999e
- SHA1 aa677b03098bf2a601e5d8c7c52ce62124d528e0
- SHA512 caccfa7c357d5bd0e0fce3280b6af4fd5a0f70d7b500176df1ea518ed4cf15b2ecf60efebac5bba175af17efe46b2b2fdd0dede10c8ebbdb4510eebce814c75b
- SSDEEP 6144:YrbNGioV9q3JxbQ+D0eQ/8NLjdkEJwZCOjka+WPXjWbUORPsXlZjou:8R+q3w+Vo8BdkEJJbI
- TLSH
  T16FD43B2833AC161AC3BF1777F2715204A3BBFD56B269DF4F2584A1BA2C427635C41A93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  win-x64/MdXaml.Plugins.dll
- Size 12KB
- SHA256 84fc480bedbf9c7acba1959264d099e4bb6617203a82a6eb1a13e80c70326d50
- MD5 0c67ec9300175ad493c5bf52fc9d739f
- SHA1 382e6cc21888d56085244cf438e592541d74d25e
- SHA512 a9daaa0a9dd887bbb12703fd95a46b07d09188d9dd94c47eb698ab6286ea5ecc71e015f5d93c6a2dee8581e8e09f1fc8e366af2e5e4c9f3d6957c2a0b43b95a0
- SSDEEP 192:Tom7ymXzlN4SDepV+tQFgMjV3kj/FaasAChkW4l6Z4nQC5FpS3/2V:7zl+SDeuuBJUj/FaapCyW4lFQC03/2V
- TLSH
  T1A642F9276738E33BCD68873EB896954D22B18F903603DA678A54B1CE6D573661033E31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  win-x64/MdXaml.dll
- Size 149KB
- SHA256 f4e17fb362edfb4f6b3ebcaa0f7b582dba3f3c97bbae461e3c060d944bb57efc
- MD5 5f1b0e3d04b499a0386a15fb98975a75
- SHA1 863a3185b412945af7fe3591bbdfc606d07c65f3
- SHA512 e731d20ecead72295c31d5c29a234650ca0eaa58363cd83af43e1ba60715e2209b2ca41e244561810ab707d71bb05df8aac0604792f2a7c278f262fe5c52a7cd
- SSDEEP 3072:1wKKG59pp9cSuPBN+xJFmL8sUv5TK50Bu:1jsRixJsLT8K
- TLSH
  T13FE36B5253E41922F69E167CAC6465152333C26765B3FBAA0ECE28EC1FCF392491077B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  win-x64/Microsoft.Win32.TaskScheduler.dll
- Size 329KB
- SHA256 3ef8d978dfb0a2611436de1872ef76abbb0f3ab1368bcd2bcd0bb584dbf9d60d
- MD5 f991dca7413cb6a9e28ed527205655b5
- SHA1 d9e6ef1e9295ae6ee48daaba10b214bff9a6cb74
- SHA512 036e0ed4df4bec37dcb9e549bd829dc988c6cfff74af75a988347065e61e3b010bc2a3874b3a2550428d6a34e71f087c195bb1e854f908355942bf7e1403b7df
- SSDEEP 6144:s/MJkc67TmIylYH8w6NFtjVpX18BxWbCIi:s/kkc67JMppdeIbu
- TLSH
  T11A645B2167FCCA3AEAEF0B3DE035021687B5F846A4B6DB1D2584DADD8D333409952763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  win-x64/NLog.dll
- Size 817KB
- SHA256 d1fa8afdb365d0e921f9dad343a3ffdc9b7beebb2eaf366de09dbdbbf4257423
- MD5 d530d8481f6df12b200839723c70ad6f
- SHA1 ff2c2ab7866b1c97186bc4de124d6bc682096c99
- SHA512 49554c594b82edb3e2350e996d8771062eba6e3ed03f1e2fc6a50fc89ba5bc914baafc01a7a266161dffe7d1a65e4ce0df1bbb9990c2675c53cc71954d4e82a3
- SSDEEP 24576:2NfTnnnvnrP73xsciU1iVrUR4ndguriMGRAYmDo:EfTnnnvnrP73xsUuriLmDo
- TLSH
  T12F055C5133FAA65BE2EF7739F030561D0FB0E48A66ABD74F5501E29A3E923855C103A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  win-x64/Nefarius.ViGEm.Client.dll
- Size 208KB
- SHA256 8486b3126ce49ddd77456d7beb2d5be98ba77db699dbfff1e6fe1cd9dc8a7c02
- MD5 816e2195f1dfae52d9df622d84bc2795
- SHA1 d5a74d061a75b53f89bd3187d118889c3bb163ea
- SHA512 685d6c3a9d3f47eb1003c8fd614f1c58938b49d23b354b729a779f4142d696d8eff254bb5465ba602578b6920f7fcb64ba318fbc0b8695fbb2f34593876112ba
- SSDEEP 3072:Fprshh0vWF7S5RnX6B0E7EiDASQKwwpJ1UtADKZBoTpanY0qVbnr2ZW:frs/0+JSPX6Bx9kDKwycZRnYe
- TLSH
  T1B7247D0673B8407BEABB8679C8A31A41E772B4160751BB9F03A043765F2F7D09D39762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32