454b780b48cba19de9f82dccaee84fe83eacd8172da173da578a2045a297dd76

Sharing

Copy URL Twitter E-mail

General

Target
454b780b48cba19de9f82dccaee84fe83eacd8172da173da578a2045a297dd76
Size 14.4MB
Sample260816-yjgbyswtht
SHA256 454b780b48cba19de9f82dccaee84fe83eacd8172da173da578a2045a297dd76
MD5 782288daef31509020f3ad5dba95fed6
SHA1 4b9b6187206795e116f24c5a25242a81f876c00f
SHA512 6acd24fdb817fb3a87c3b93dafe57918ecbc00535b4a66ba3bbfd051fba458d30ad285686811292d835ef55d9ae04e0389556033e5fc2c0728a9572f922a8b07
SSDEEP 393216:Vw0lLLH+giPy3wh9A2ysqlcf1ebtvmfhGoTi4J7wLW2Ow:V3lLLeXP7w892tvC2stnw
TLSH
T153E633C5F7A99E4CF01D91380D56981EF7D0FFA20EA1B3396250456F3A713EAD288987
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  SOLIDWORKS Corp/SOLIDWORKS Composer/bin/netapi32.dll
- Size 423KB
- SHA256 37014d346ac9a3a715cfac404d0c6fbdd0c107f3dabc301a4cf4c643b3bafcc1
- MD5 ebf35e586e43ff8647a3b7867320217d
- SHA1 9c040ce7f680c32a262a8484c383590c794f1588
- SHA512 d7eb47f8fd60d1a64cd59012fc3c31a0fe71df121e5ca05dbca33183397273150f963583cfca6910ba909b8605f9688a1d70b164cc4197666f0a7c9459ca9051
- SSDEEP 12288:hTXOA4wjp0yPUHk36dTa9faPANFrAe7OTooi05t:5XPegl3H9FUUoi
- TLSH
  T1CB94E11A73980876FC7B817988931A42EB76B8025720BADF0350077BAF5B3E5793DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SOLIDWORKS Corp/SOLIDWORKS Electrical/bin/netapi32.dll
- Size 423KB
- SHA256 37014d346ac9a3a715cfac404d0c6fbdd0c107f3dabc301a4cf4c643b3bafcc1
- MD5 ebf35e586e43ff8647a3b7867320217d
- SHA1 9c040ce7f680c32a262a8484c383590c794f1588
- SHA512 d7eb47f8fd60d1a64cd59012fc3c31a0fe71df121e5ca05dbca33183397273150f963583cfca6910ba909b8605f9688a1d70b164cc4197666f0a7c9459ca9051
- SSDEEP 12288:hTXOA4wjp0yPUHk36dTa9faPANFrAe7OTooi05t:5XPegl3H9FUUoi
- TLSH
  T1CB94E11A73980876FC7B817988931A42EB76B8025720BADF0350077BAF5B3E5793DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  SOLIDWORKS Corp/SOLIDWORKS Inspection/PDF/netapi32.dll
- Size 423KB
- SHA256 37014d346ac9a3a715cfac404d0c6fbdd0c107f3dabc301a4cf4c643b3bafcc1
- MD5 ebf35e586e43ff8647a3b7867320217d
- SHA1 9c040ce7f680c32a262a8484c383590c794f1588
- SHA512 d7eb47f8fd60d1a64cd59012fc3c31a0fe71df121e5ca05dbca33183397273150f963583cfca6910ba909b8605f9688a1d70b164cc4197666f0a7c9459ca9051
- SSDEEP 12288:hTXOA4wjp0yPUHk36dTa9faPANFrAe7OTooi05t:5XPegl3H9FUUoi
- TLSH
  T1CB94E11A73980876FC7B817988931A42EB76B8025720BADF0350077BAF5B3E5793DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SOLIDWORKS Corp/SOLIDWORKS Manage Client/netapi32.dll
- Size 423KB
- SHA256 37014d346ac9a3a715cfac404d0c6fbdd0c107f3dabc301a4cf4c643b3bafcc1
- MD5 ebf35e586e43ff8647a3b7867320217d
- SHA1 9c040ce7f680c32a262a8484c383590c794f1588
- SHA512 d7eb47f8fd60d1a64cd59012fc3c31a0fe71df121e5ca05dbca33183397273150f963583cfca6910ba909b8605f9688a1d70b164cc4197666f0a7c9459ca9051
- SSDEEP 12288:hTXOA4wjp0yPUHk36dTa9faPANFrAe7OTooi05t:5XPegl3H9FUUoi
- TLSH
  T1CB94E11A73980876FC7B817988931A42EB76B8025720BADF0350077BAF5B3E5793DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  SOLIDWORKS Corp/SOLIDWORKS PDM/StoredProcs.dll
- Size 13.1MB
- SHA256 6978b80110e66fe3997d4ec80486a38b1039dd6a6430670d22fce943b6a7386e
- MD5 3d6179322944d27d88c14fa885dd9ee8
- SHA1 d72deb0f7b8e61a40afa99fe7bbaa24a824b353d
- SHA512 bca023a87d8d2adaa7b7675718873c2467af30c4f6f019cc2e00a901488e0d4d1e4e8911b840b45269cc2e1b940dcd4b3f641ba9392c72be7e698796ef2c5325
- SSDEEP 49152:x8B3PtbFyHM+BhRoH0dalAeKOVSGZrgSOacc8Ra5qagAZn39ZmUL5OZhzEK7JD2Y:6BbmE2JDS+UDAJ02MTUgTVh+
- TLSH
  T168D62A12729A0D64F1B7C2399AA688C2E9B37097273195DF315CB1090F3EFD49A7DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  SOLIDWORKS Corp/SOLIDWORKS Visualize Boost/Bunkspeed.Common.Licensing.LicensingSolidworks.dll
- Size 39KB
- SHA256 11ec016bbe2a9c8bc832d5068b16d8e28e73e158e6da308938b24b6ea907c456
- MD5 84275ec9c1b769dbf03042d65a0fe17c
- SHA1 c8897d7fba72abba765a8a56137446440ae7e4a9
- SHA512 4502ce63fac9ad693e33b36fc0bd3af192abd1cf3dc78d991c10dcf51da61bedd4cba583c1b0a4562cf1c4cf8b85467eda6b4d502e644d9b18a2e8bef3eb1ad1
- SSDEEP 768:8ttVRsk80K0zfToseH+T0m0Co5VsMzCSPclkOZqb6kiMR6nCQdiSWGkqCX2ehQo+:uGk8k08WVpPP9OZu96nCQdbVkqCX2oPY
- TLSH
  T135031B521BF44327DFDE1B3AF82606450F74F5AAA973D75E868894AD1A23BC409133B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  SOLIDWORKS Corp/SOLIDWORKS Visualize Boost/swsecwrap.dll
- Size 2.1MB
- SHA256 c9a24030e7de0036ec987845f70a201afcdcb23501f18595be4eae87e52e44ff
- MD5 7d7e5d8442c51ecb31e85145110e997f
- SHA1 af006179bf6970d624a512dc11ff5ea0eab751da
- SHA512 d857c8d2a0c2b1881e33b66641a1a64501955614eb23df37d7ae3939537997837022188cac8b78858aea626ff19cbf3c8ba067b6540bc75b948455a30355019c
- SSDEEP 49152:QI0JgyEZj8JDNxpOwvCCaTBgmQjfut9gLn94YR0SEyNT:QVajmNmYR0SEyN
- TLSH
  T1D7A56C02E3BA21F5F0B7D2388A664627E5B678452334D6DF037047661F23FE099B9729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  SOLIDWORKS Corp/SOLIDWORKS Visualize/Bunkspeed.Common.Licensing.LicensingSolidworks.dll
- Size 39KB
- SHA256 793a309d051f468bbc600c7ccb0b06c64ef735f2169d756eece5e6085edd7472
- MD5 a652154803a6fa981bcdbfddcae22513
- SHA1 e9067371ef9eb78120e2d5228ebd3a146dd0d6d9
- SHA512 17273fc54bc407f75f360ec8b4a0f970414810428dc28e39de8c984ab06c7b16ef683fea8642c2c2119539ce2796be9e8cef4d2094ab868f5a1388b3561fb87b
- SSDEEP 768:4ttVRsk80K0zfToseH+T0m0Co5VsMzCSPclkOZqb6kiMR6nCQdiSWGkqCX2ehQou:KGk8k08WVpPP9OZu96nCQdbVkqCX2oPg
- TLSH
  T15E031B521BF44327DFDE1B3AF82606050F74F5AAA973D75E868894AD1A23BC409133B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  SOLIDWORKS Corp/SOLIDWORKS Visualize/swsecwrap.dll
- Size 2.1MB
- SHA256 c9a24030e7de0036ec987845f70a201afcdcb23501f18595be4eae87e52e44ff
- MD5 7d7e5d8442c51ecb31e85145110e997f
- SHA1 af006179bf6970d624a512dc11ff5ea0eab751da
- SHA512 d857c8d2a0c2b1881e33b66641a1a64501955614eb23df37d7ae3939537997837022188cac8b78858aea626ff19cbf3c8ba067b6540bc75b948455a30355019c
- SSDEEP 49152:QI0JgyEZj8JDNxpOwvCCaTBgmQjfut9gLn94YR0SEyNT:QVajmNmYR0SEyN
- TLSH
  T1D7A56C02E3BA21F5F0B7D2388A664627E5B678452334D6DF037047661F23FE099B9729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  SOLIDWORKS Corp/SOLIDWORKS/RTLibraryManager.exe
- Size 6.9MB
- SHA256 abae0c3fa96fd6899274f8940df34f01594717fd535a1bd0c5d55276bab34ed2
- MD5 0eb1512173ef74863ae85b1207a0d22e
- SHA1 7684a7eb216163789eaaf4da7dca0ef1ceb1d995
- SHA512 69dabe52026430f29d1a7d0081e253d132c511217242ed2a836e7263516ed484b5a58c4513d8d4a188b84b095f63a047185d2e731c77b809bd8d3d693993422f
- SSDEEP 98304:09crXqvLr7gHfZ2Z84o4Kkix5fzuZPOzRcUt/oerc7+x2IidKh8e7IN6AIN6cneb:09cbf2vnetqFcoer/n8esN6/N6y2
- TLSH
  T183768D38B15C1E1AD4FA41F0567D6338C9B16D5E62C392B63BAD364A8F723582D0F272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  SOLIDWORKS Corp/SOLIDWORKS/SldToolboxConfigure.exe
- Size 9.1MB
- SHA256 3b6ac904976ac85e27f1a17467b1f747a9ff18df1e4e73ebe064dbb584d12b2d
- MD5 87b7b2f6756610a6857083007349d6d5
- SHA1 d6c09d69ae9ebfb9a392ebc395ae7ca1bb4a1a48
- SHA512 7d26b7f615947d9dfe347c32fb788232d15d18d0fbe5454dd3081911f7f876f267ee8deb8beced0e5735c985ff11c7f8b95939431e5e3725ff753ea2460e924b
- SSDEEP 98304:0/W4/kDGLGoM3Q/jMTBNNteIXI57OfC03rZNGZDnbqKUFF35MdOnb4TDn5NkivVe:0evWQg/gNtlI5ifC2rZosMC0Tj52
- TLSH
  T142A6BD31236A8E90D83B0532406CC33CD9A36F4D75C3813679AF7B9DD771A807A5B6A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  SOLIDWORKS Corp/SOLIDWORKS/sldutu.dll
- Size 3.8MB
- SHA256 a646e00e5466c6c5ba66963a479dee8fbfc95d951883936c9f9ed43720e1ad41
- MD5 72e0e801fa228f69851a815cf2014409
- SHA1 2be077a433e743cf0678dbbe09289101ef3f5cc5
- SHA512 ce7ca21465f299c925288286aabab4ce6443d052c6c814bc98b3ddfde3e3bf99f097f2c826e5460e9b35c974126c3596091c6e3d570545f3117e14edf0a8d3f1
- SSDEEP 49152:pl323oDFRaRekr+t8sQyw3fUD9HH2By2tZU5JndfA8ByYd:3ioOekOf92to
- TLSH
  T15C064A039EAAD1A5EC67C23C89F6FD17D5B6348583A48ADB035886150F27ED06D3A73C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  SOLIDWORKS Corp/SOLIDWORKS/swsecwrap.dll
- Size 2.1MB
- SHA256 c9a24030e7de0036ec987845f70a201afcdcb23501f18595be4eae87e52e44ff
- MD5 7d7e5d8442c51ecb31e85145110e997f
- SHA1 af006179bf6970d624a512dc11ff5ea0eab751da
- SHA512 d857c8d2a0c2b1881e33b66641a1a64501955614eb23df37d7ae3939537997837022188cac8b78858aea626ff19cbf3c8ba067b6540bc75b948455a30355019c
- SSDEEP 49152:QI0JgyEZj8JDNxpOwvCCaTBgmQjfut9gLn94YR0SEyNT:QVajmNmYR0SEyN
- TLSH
  T1D7A56C02E3BA21F5F0B7D2388A664627E5B678452334D6DF037047661F23FE099B9729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  SOLIDWORKS Corp/eDrawings/netapi32.dll
- Size 423KB
- SHA256 37014d346ac9a3a715cfac404d0c6fbdd0c107f3dabc301a4cf4c643b3bafcc1
- MD5 ebf35e586e43ff8647a3b7867320217d
- SHA1 9c040ce7f680c32a262a8484c383590c794f1588
- SHA512 d7eb47f8fd60d1a64cd59012fc3c31a0fe71df121e5ca05dbca33183397273150f963583cfca6910ba909b8605f9688a1d70b164cc4197666f0a7c9459ca9051
- SSDEEP 12288:hTXOA4wjp0yPUHk36dTa9faPANFrAe7OTooi05t:5XPegl3H9FUUoi
- TLSH
  T1CB94E11A73980876FC7B817988931A42EB76B8025720BADF0350077BAF5B3E5793DB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  SolidWorks_Flexnet_Server/installs.exe
- Size 95KB
- SHA256 5357844c0f6ca3154ca7f1ea552410738c9bfe92cdc81bfdfdf47f3c06da25ad
- MD5 40ad52111e2997dc064e000dc32ecee3
- SHA1 c233c9da67421734d5aa153ed729c9f2b65a7cf7
- SHA512 2e6737da7f2fdac09daf5594d2bac215e1e8cd0121699dc36a5762f01fbf5c767b3d1e13726c7001dfa980b04c6180f2f32bbff16023185b73a0d880840b8ca3
- SSDEEP 1536:sNpz/FLoOsSGItywYm6+nbvQYSiFOyUkBN3uLww2wylY2u:sPrFLngXNyOaPBkkFwylY
- TLSH
  T174A35B1033D5C431E11724764B66C7F24E7E78B97AA2AC8F2FDA66B50F2D690D31831A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  SolidWorks_Flexnet_Server/lmgrd.exe
- Size 1.1MB
- SHA256 f3288e15ba8cd5f8307a92b88c68191039bb2e61566c76463509ce2c289b9a8a
- MD5 f46b13fd5f544233ed3ff77404804258
- SHA1 d6352ce0683cc8f965169bbc03ce562e4bad358c
- SHA512 2d21931d4a46c29f91b2b98eabc676ffe93ac0950b069c24cd4a6c4a4cad7adc04a8b9e24681e41ffe60b6baa986dc27f6a3075af96878fda5f29ab99ec7ed77
- SSDEEP 12288:7HiANc6hSw2fvf0QxyJxKzeNVrKru7vjlWpL09TG3uWXy90ll/ql21L68oFtisUG:8K40eq7vwpL09TWyw8Fl6/h15v/tj7m
- TLSH
  T188356C12F2636160EC9541BC51EF9B7D6D3E7E36833BA0E787D1189185305E06B3B2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32