258ac34397a4fb929060efe5e4e3387bf8f1b9df61e55ee4bace95b3f9c18bbf

Sharing

Copy URL Twitter E-mail

General

Target
FRAME-Windows.zip
Size 31.4MB
Sample260818-rm6mpavwez
SHA256 258ac34397a4fb929060efe5e4e3387bf8f1b9df61e55ee4bace95b3f9c18bbf
MD5 1f112d62e858ff8dbd4dac21a66677a0
SHA1 0fc9c396d9f597324d10c573169aa965cd191ce8
SHA512 4c87023634d825ba7bf7f58d5c6760cf4cb03e8bd879b37bd8dad554707aa1ae67ac3c0a2bc6f01af2a7e7067ba26593e037d13f542d22d69f232bb6b0f307b4
SSDEEP 786432:5up5Cbvp9Phk+cl3R2o6bErxPvnemEzgjItxgCP+y88oJ/CG6O741:5uWbvjhZctR2o6bEpmmEFxgo+y88oJ/W
TLSH
T1397733051059D3AAE4B772F08C080053D74D0E17D39FE607D5AA6BEE6CDDBBA13628AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  FRAME\81d243bd2c585b0f4821__mypyc.cp310-win_amd64.pyd
- Size 211KB
- SHA256 5b80e8963c54771f2d923eb0469a7a293cabf172bdcff8ef2f28804948c4ec8c
- MD5 b0e271fd313010344c828ebbddf45235
- SHA1 d1d820b006f4dfe0d30d5368c15331174e666fca
- SHA512 a4ea7dbd92957a64d3a48bcc597acf6a8331c4ee269cb6d9cb55d0dfeeac5b6cd07411ff7b7f9db0ea65d6fc00c76ebb32004367d0f4f3c2895a35d4a59bb24a
- SSDEEP 6144:q/Q8nHRnSJNmWW+hYxkP8VXaVHaT8fyFmiGJZMzwjAToZK+:q/fRm8R
- TLSH
  T1A424293A52480060ED7752798C639613E5B3F6620B3156CF09E0C6751F17BEAB7BEB0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  FRAME\FRAME.exe
- Size 5.5MB
- SHA256 7407c34908b375e9c8dca63973baba722d251782315b808482c6c690ede0ec47
- MD5 d2a9836d65b13a3f535cf769757545f4
- SHA1 0d9f5b5cc42ac471aee6169c72dfb40316981156
- SHA512 d50273ec3d20373d949e19cf3727fb5a9958db9837abc692804f6f4d01b01aae37b171af9a1400ca2a2105f4dba07b8a5e94c6dad68d4b777b287c6b37c1b781
- SSDEEP 98304:waX47vieaK/to+NySkyNdi7Mzd4VfJ0/hoj2du7QytDDEpva9NxQV/uujYF4O:waXWvieafCbx94VBrvsMNqVFm
- TLSH
  T19F4633856BE240BBFDB6017D88B3D2E5DBA134AB4770D6EF533842561F572E06A38321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution persistence trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Power Settings
  powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
  persistence
behavioral3 behavioral4
- Target
  FRAME\Microsoft.Web.WebView2.Core.dll
- Size 488KB
- SHA256 5e7faee6b8230ca3b97ce9542b914db3abbbd1cb14fd95a39497aaad4c1094ca
- MD5 851fee9a41856b588847cf8272645f58
- SHA1 ee185a1ff257c86eb19d30a191bf0695d5ac72a1
- SHA512 cf5c70984cf33e12cf57116da1f282a5bd6433c570831c185253d13463b0b9a0b9387d4d1bf4dddab3292a5d9ba96d66b6812e9d7ebc5eb35cb96eea2741348f
- SSDEEP 12288:W/TcW1virB3ye+iKzORFNgeA+imQ9pRFZNIEJdIElxPrEIgcvLcglxMwCepM1STy:W/1C4I
- TLSH
  T17BB4522123FE466AF6F26F75557412208AFAFCD6BE79E34D459C212D0D32B419AA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  FRAME\Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 50b2e46c99076f6fa9c33e0a98f0fe3a2809a7c647bb509066e58f4c7685d7e6
- MD5 4cf94ffa50fd9bdc0bb93cceaede0629
- SHA1 3e30eca720f4c2a708ec53fd7f1ba9e778b4f95f
- SHA512 dc400518ef2f68920d90f1ce66fbb8f4dde2294e0efeecd3d9329aa7a66e1ab53487b120e13e15f227ea51784f90208c72d7fbfa9330d9b71dd9a1a727d11f98
- SSDEEP 768:SNGbP6+wTftcZDgcEST3p4Jjrjh2jJFSUyauYv1JKia5/Zi/WGQKVu6bRaMBo0wx:OGm+otcZDgcEST3p4JjrjaJFSUyau01U
- TLSH
  T140033A0083EC8617E6EB9F78A5B491610B3ABE837D61D39D5C88F19A1D737E098143B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  FRAME\PIL\_avif.cp310-win_amd64.pyd
- Size 7.5MB
- SHA256 4947c9880a49b8b935a5e106e6dcdc4cfed9febf8ca0a4e2cae6db2ebc6f07c3
- MD5 45b0c1b1301b030035bfb7cdfcc9be1d
- SHA1 db9ef8a18ce0d3f6b37afdbd49506b87c3b5809e
- SHA512 aee77302122a663c8422b9a302d63483103a8348bdb2ca132e96ba7deb3b56b1e915c4636e1fe647dc41a02cb33d31d83fe05aa9d1ba8954b7f5cfe3a3e7403f
- SSDEEP 196608:aooXLa6fubZGGQ+5RJbsg4pG7I/8JepmqRuZDgMG+l8vtDUYanI9hwepl9oeIrk/:IXLa6fWTQeJbsg4pG7I/8JepmQuZDgMa
- TLSH
  T1E786D08AF19391E8E13384B4857BA716FA24302E9759527B33E5C5297F937E04B2EF01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  FRAME\PIL\_imaging.cp310-win_amd64.pyd
- Size 2.5MB
- SHA256 a6150bd6d42c8179bb0bef700765b1dba247b89e115808f70727eb5a04fc344f
- MD5 d805a22f73ad2583eaa37a69ae5b1f4d
- SHA1 1a5272c6ecfbbb98dc9a7553bf7c502e29084529
- SHA512 fdce50817ea6957ddb2842b510f1e281712f0e61840be9304816065b5fde5fa7d7e3c9b0fc26facf65674ec8bc9307ec8fdc53226c33444c0713040527f54a66
- SSDEEP 49152:CFAousqlTovqRYXo4iVPBIYA7BVFavH3yROE76eZ:HpNI3FaveV/
- TLSH
  T126C56C06E9D19599C6B28034CDAB8216E3B1B80D17F187F77684A7F53E23BD0353A396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  FRAME\PIL\_imagingcms.cp310-win_amd64.pyd
- Size 265KB
- SHA256 908d4eb2376d2c139992e766ef0a979f4b8ace248ea0d55d7e070bcc8e6a9d9e
- MD5 150179abfd064b83f866509c77e82cdf
- SHA1 dcf1925930397b24cce20bdaeebfcf2bd12c55d6
- SHA512 124aaee415649fe6c583453dee4f356ab4af89d95dce6c4786d740ca5e7dad9bdab337a5119122ccd66480dad612a71b694a4dc903b45f0af94b7ec52e590270
- SSDEEP 6144:AxoWnBT3aiMkA7RI7O+hjbmLg9uP1+74/LgHmPr9qvZqhLaHLTLrLfqeqwLZKexV:AxznBWmhjbmLg9uP1+74/LgHmPr9qvZv
- TLSH
  T1D6444856A2981CF9D477E139D197A50BD7F038110321CAEF47A08EAE2E17BE5693F342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  FRAME\PIL\_imagingmath.cp310-win_amd64.pyd
- Size 24KB
- SHA256 78bc4bafd396a01252d95d9bb089daddef778938069d3319c24a66a18cee530b
- MD5 8ff1df98eb1dbc6106258ac6b44140a3
- SHA1 eee1adb2620818e2690a12f584c3da3745f96326
- SHA512 151eeddcd301104ede323787a6f2805022bea90a60ee8b0e23546c27a90701d25f2066f3c7b1a6ae589d26f9b1f798bc9b12a363c19889c7a8b880fab67b7bac
- SSDEEP 192:p6wv8lmOmBtlkL8WoXPCJfb00JBUpMZQ7o3FDaK9MW4wvzzZ+c4tPBKlD5KgeAgs:v8ls7NfIb0DC4UFr7Z+clDUAgJGUJw
- TLSH
  T1F1B2F96D5F802495CA1E473E88620A658529385723E09FDF82E2F2AD2BD3FC3563DF50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  FRAME\PIL\_imagingtk.cp310-win_amd64.pyd
- Size 14KB
- SHA256 088dfcf4e20ff451b79c87561a1055b7278049f1752219b5a0fb54902d166ca7
- MD5 56cd8180bce5c69c7897b7b1ed31af7e
- SHA1 c511435ef11be551bc5c68dbc1f473b37820c03e
- SHA512 3d1678fb006919239c8a68df8f622150a09bfb336115d52afb7b241afc0bb926233c7ec7f8771467c57ceced1f852ba177df6054a7f73243ea0ada2ed023b029
- SSDEEP 192:cLSFtgQf8p8RYFomnlolBxJRREBWY0aQAZdXgTAU:cLCu8C7lGdRWOAZaAU
- TLSH
  T1E5622949FB6408F7E5248075C8B32E66D276F6345322A3DF4370D21A0E727D26E36E49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  FRAME\PIL\_webp.cp310-win_amd64.pyd
- Size 400KB
- SHA256 591ea5cec38b93a7ff6eb9e32a025fff57e82b0780a48b411af2c4d9cb50f326
- MD5 a2236fce3a01d6f6a317dca287661c1c
- SHA1 e5fca6c5226a8cd52f696d343ed7ea93035c319d
- SHA512 a5de12e5e75ee1879dbcf1c203f19a78b1a2436613aba16f95e2b96c5d31a09832a415489b7c3747f2b10af26f9ec3f7d057abb0d16800d5a3608cb779d16605
- SSDEEP 6144:vanWoGK5XKp0cA2N6d/XWClA7rLF9oneW3INA3eCc6t6MzyAiBqSYQ:vasAc6dvAZ9/Wz3eB6t
- TLSH
  T16E945A46E9A225E8C5ABD078CAEE515AF6A53C1C035096FB47E4FE253E33BD0563B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  FRAME\VCRUNTIME140.dll
- Size 95KB
- SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
- MD5 f34eb034aa4a9735218686590cba2e8b
- SHA1 2bc20acdcb201676b77a66fa7ec6b53fa2644713
- SHA512 d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af
- SSDEEP 1536:ywqHLG4SsAzAvadZw+1Hcx8uIYNUzUoHA4decbK/zJNuw6z5U:ytrfZ+jPYNzoHA4decbK/FNu51U
- TLSH
  T129A36C5A76A442BBD06BD274C1E34A1AF770B8408B3093CF07B6856A4F67BE05E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  FRAME\VCRUNTIME140_1.dll
- Size 36KB
- SHA256 34048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32
- MD5 135359d350f72ad4bf716b764d39e749
- SHA1 2e59d9bbcce356f0fece56c9c4917a5cacec63d7
- SHA512 cf23513d63ab2192c78cae98bd3fea67d933212b630be111fa7e03be3e92af38e247eb2d3804437fd0fda70fdc87916cd24cf1d3911e9f3bfb2cc4ab72b459ba
- SSDEEP 384:5hnvMCmWEKhUcSLt5a9k6KrOE5fY/ntz5txWE6Wc+Xf0+uncS7IO5WrCKWU/tQ0g:YCm5KhUcwrHY/ntTxT6ov07b4SwY1zl
- TLSH
  T113F24B9463788492E46B95B0C4A35F2BFB38F9625750938F0BA4815D2F637D0F63E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  FRAME\_asyncio.pyd
- Size 60KB
- SHA256 2c9f565254e4b2744d52b58f4960d5da1330c7846059b772044e4415804d933e
- MD5 3aea41c0a41765d6b0eb3363804d94d0
- SHA1 26f05e3e458d5b90326ea40c6bbf236a3dbd49f0
- SHA512 a1f5eb597c43a053d28e16b48f365760189eeb129ac3ea1eaa3bb6648332c5f11a4a446d29dcd90e773858fb4b6367568fcd9c778ea1efee5d4972dcdfe4a0e6
- SSDEEP 1536:YWbvivBeDp/HmflsqHEY8ZIv5n4U7Syy0:YWbvaBelmflsqHEPZIv5nvE0
- TLSH
  T1E5537B86E2908194D967A074D8A30F46E771F6945B0403CF62ACD29E3F6335247FEB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  FRAME\_bz2.pyd
- Size 78KB
- SHA256 31dd9bfb64b1bee8faf925296028e2af907e6d933a83ddc570ebc82d11c43cfb
- MD5 d61719bf7f3d7cdebdf6c846c32ddaca
- SHA1 eda22e90e602c260834303bdf7a3c77ab38477d0
- SHA512 e6c7eab95c18921439f63a30f76313d8380e66bd715afc44a89d386ae4e80c980c2632c170a445bad7446ee5f2c3ee233ccc7333757358340d551e664204e21f
- SSDEEP 1536:IzXz7Bgrj7FUHfuwtvm8hbvwyhIvtVx7SywqLZ:kXzVMFOfuiRhbvwyhIvtVxiqt
- TLSH
  T1A3838C92B3A495B5F05BB27985B10357E371BD0D03A093AFB794822F2F03B816D6536E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  FRAME\_cffi_backend.cp310-win_amd64.pyd
- Size 175KB
- SHA256 c379126647af2cbfb592d6a921f6218da59b886e2a56e9b82f8159aced6f1100
- MD5 04fd1a452e91605545a267cb04cdd78f
- SHA1 482d3bc8b0059d7c755cff695c0366be402c86ba
- SHA512 12549b3a03e869998cc808079da1ca13e00949efa7c15ba97aa510feca2e481bdc74eefa12ab1f6a08d9cca06957a6d4769aa67e9973b59ad4fb9ef04a95b37b
- SSDEEP 3072:1X9Iup1Rz9vapoU+EX+QRhbUvpzLcmIXPpSfJ0KN3kS7ORSTL7K3gqFb2HF:1jL0poIFRhbUvpncmIUGDRSTLOwU2H
- TLSH
  T140046C5A329C10B6D6A6513886579B53E3B3B430174197CF0160C7B52F1BBEABA7FB80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  FRAME\_ctypes.pyd
- Size 117KB
- SHA256 b545db2339ae74c523363b38835e8324799720f744c64e7142ddd48e4b619b68
- MD5 3fc444a146f7d667169dcb4f48760f49
- SHA1 350a1300abc33aa7ca077daba5a883878a3bca19
- SHA512 1609f792583c6293abddf7f7376ffa0d33a7a895de4d8b2ecebaede74e8850b225b3bf0998b056e40e4ebffb5c97babccf52d3184b2b05072c0dbb5dcb1866f8
- SSDEEP 3072:sW66GKh4hqyIVQoavMSutRSfrSd4etFx3FIvQPVv96:T6QKtkSu3SfrS3xr4
- TLSH
  T114C35A1B235400AAEA67507CC5B35E47DB71B859572083CF02A4C69E2F67BE36E3E706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Power Settings

T1653

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

Power Settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32