4265618c3979a239032be4c2e60555677e5039ef0fb80e03397c1bc8963a8218

Sharing

Copy URL Twitter E-mail

General

Target
digit-exe-windows10-64-bit-without-installer-file-12.1.zip
Size 24.1MB
Sample260818-scp3mavalg
SHA256 4265618c3979a239032be4c2e60555677e5039ef0fb80e03397c1bc8963a8218
MD5 a1bf48b5fca1f47f170731b8010420a1
SHA1 7f0a06b7e0017967d5a3d4c82bcd22512bae5b56
SHA512 cd18cc7947fea7aea808fadb14702fa3bc9cb9b62458c52e92e553e0892c9715196580cc88d1d771e626c9f82b0a889725fcfb3c363c94d247834103e0b8ca5b
SSDEEP 786432:QYdJz9L7eoLCi5XobxYDqnzGJU84InvY8jD6tvyVJc0Rq:QYTzdTCcKxYWqa8XwKgyVJJq
TLSH
T1D74733395262E183E9E6D57194F851AC476F3C93F50A8D60CA4207D21ED42E38B3EB5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Engauge Digitizer/Qt5Core.dll
- Size 5.8MB
- SHA256 345cb42a00652e1d0e1d32d637fd026c323698f70c4f3031eaaa2e6116c30ece
- MD5 15aed9540ba8c99e0265db26312fe915
- SHA1 d6c90b5e89ab3ed945325f284a5bc2b8c8e61d34
- SHA512 d19d3dd3c3cc83688b97fc781048d8b4fd91277d1c405669e242d6e23a94b51b18ef7733109c64c337e5badb0372c2eec0131e4cc489c21ef532e9ab4c88950b
- SSDEEP 98304:gM9Pgl7gkFPAKJsv6tWKFdu9CuuC74hjaJrqfC0:gWPE8kF3Jsv6tWKFdu9Cuv7uaJrqfv
- TLSH
  T1E6567A57B7AA4061D077C23CC9EB8256F6B2B8115B328ADF1259620D5E733F0693F31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Engauge Digitizer/Qt5Gui.dll
- Size 6.2MB
- SHA256 f2c69efb160f927e85577728ace8466ad28d02572f420bd56693b2f0fe1351f4
- MD5 9f61e551e39208e317063b20d16b846f
- SHA1 7a83dfabc1b6acbb8589095414aa4c0760d63d38
- SHA512 5e4c25d3785033989fde6b2ea2bf7c7941a382e4bdabcebe13081750a4b9655b5d2b7261d22e8ff731e8b99193399641fe3f54cae01f941713a72bf67829c28d
- SSDEEP 49152:qBmaKTUCVr+mxzIAHC6g5f2m4hi0AEOQVlSi1ejo1klbRTOmFgruVosUxuJUmILh:KmaKTUCTTkGgk1ejFQGA4
- TLSH
  T16B560786725A6152C9B7E27D874F052FE1F3B85283528BC348159B580F637EA1B7FE02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Engauge Digitizer/Qt5Help.dll
- Size 308KB
- SHA256 1a94d73a97bff86abd2821fd0f96136e2ac8ad363baac6302cec29fc7be192cf
- MD5 d30649d8d6d19c5850507554a3b51cde
- SHA1 72d82b898dce498991df38be81d5eff515ebed64
- SHA512 2140d4a5c7220b270f1b2b42965c4344dab30bc9b8efb3d19523524ac8e785ac243b241f14462e08a5dde59ca7afb1e071e12602ddf8158a32c41c2c64702cce
- SSDEEP 6144:37CQTWM2tc89isMLdwnouhIb4keplngPxyb7AJG/3eYMNtdRVDfDTzgH7b+pz2u:LhaM2tc83MKouh+4kAM
- TLSH
  T174644A5BF3520B82EA67C278CA478502D07374504363D6FB5629DE267E2B7E2BC3D684
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Engauge Digitizer/Qt5Network.dll
- Size 1.3MB
- SHA256 d0e5cc45131928a906d2e7e9a93f3956b6efaa8363e16c351f6eddd1d15e0141
- MD5 75014c1cba17ef706fa6252bff2ac33e
- SHA1 ae67cfab5b2c9908e108f6c7a5aadc3b5748538a
- SHA512 5f5e32e04325dc077bfae77e3cdac6326b66dba40ab7a54f84f3561c336cf9808350c5384bb0642102bcf4d794565c4a9787ff1b9b7ea2e02a6c2cf91aac014e
- SSDEEP 24576:7LQdUFU5tZVgPqvYJ3yDi23UMg94230KSA14cwsVnb3u:mD5bGPq+CDipMg933P4XsV
- TLSH
  T1E1556B6373664291D5BAC238CB5BC607E6727000A3669BEB5229CF592F237E3273D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Engauge Digitizer/Qt5PrintSupport.dll
- Size 311KB
- SHA256 2378c33b37ca0c78a4912a4ec5cb9c3fe008c2c38fb73568cfabaa0e1c5fa80c
- MD5 069ff3ea5fe50b04e6fcbe65b532ea1b
- SHA1 40f2a5364170a34edc4b1193ab8b34040328c5b4
- SHA512 0d022e2aba7c067ce61b6fed07a8ea56ad0e7c021b6e5154fa42cb680cd4b9d69debff4556c7a0c2a61b06c3cb4a69ad9d2703cbbb809b1be1f32d13a162192d
- SSDEEP 6144:WAGxamstpZRUKheJMqA2aqWs+49GwneY7Rx/1LcafGoziNKpk/mndma9Bhg/9RqO:WAG0mstpZRUKEJMg
- TLSH
  T110640883F7260D83C996D639CE4B4112D273B45143A3CBDF411A9A1ABE233E2BCBD655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Engauge Digitizer/Qt5Sql.dll
- Size 200KB
- SHA256 3787c55f42b2f0b322e9567a6692794815272100a56d6ff9ed9407d6852bf865
- MD5 c6fefbc0d190a6b1ee8b78f5f8273113
- SHA1 6f85186b1b7b2874d2d67cf0fcd10c362782d8d9
- SHA512 7ab1d957d48daf54a2bc1b71862f5b5bde0fe4842486161d3d681214222ef72d970e3d71f060c3fad7798eac7b38c2e5b62a78ae3a8ac3bae7b5ee3b6e904de2
- SSDEEP 3072:JsxtiiIDQwGZVuHQ667btzp1iNk9h2w6rVEjNfk9g5B:exJIDQDVuHQ6yH1+EjNc9
- TLSH
  T12814189773660262D027C678CD8A451AF6B3B410472397EF431E8B7A1E277D3B93E621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  Engauge Digitizer/Qt5Widgets.dll
- Size 5.3MB
- SHA256 24b62555381d4ebf04b0fc8f20a3b9d6e6806e89fbba8ab7b952c1a8c3c3a20b
- MD5 05ffd59dbe12374bc88af185486bb7db
- SHA1 a8be9ede8adb59fe779114ccc7b3655ed0c9f849
- SHA512 31eee47e064f15ea33708c903e9c080e3a66b4ff82418b77eada4efa6fe65f1336fc151c86e48feb00a58c62a75f80fe2206ce7ac9a2254992e5b2097c48efe3
- SSDEEP 49152:VrGif0/XIC+b1uNy5NHxfwcLXwUBYDJz/J1sSEqe5zwtwTxsXb/1x0HjLABLVJCy:r0/XWXcdx/JXEkx0HjLABLVjBxuh
- TLSH
  T17C466C47B3A60185C16BC23CCE8B8617D6B2700587638BDB255ACE592F337E22E7E745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  Engauge Digitizer/Qt5Xml.dll
- Size 186KB
- SHA256 8261508e5c5ff7ced6efb2a21110af87c20df202fa620862b0bf579a80f4cda6
- MD5 e8e864ca43f182edde9df251d0aa868a
- SHA1 7d3557d7d3322143abf3c22cf8f84f9a7cd2d7eb
- SHA512 7d3c6d75dcf7b7917157aea985ca685035dc4bb8a3c9eb091438841f2477064247048b575ea9ebb19b129300f3b6baaf7f015783a359b43157652381a868dd8e
- SSDEEP 3072:zsWk/JziIooX0qrzBg/xs8EhJnsxO8WocGxi5kkg90LDi:4d/H3X0qBg/xShJnsw8FcGH0L
- TLSH
  T10C142B97332A42A6D16BC138CD5A890BE6B3B850176347DF82558B391F33BD2793E354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  Engauge Digitizer/bearer/qgenericbearer.dll
- Size 46KB
- SHA256 ee83feaefa6ddf3c81e4b8c414250e5f9d9c805db0e5407b91bd56f94c7f3222
- MD5 322bc6283debbf04f3981106ec334a6a
- SHA1 c7dab09826c724f4efa741b9a15bfd5ca3ea22b1
- SHA512 382dbd6f50b8a8414aca4e9045feef0e7bcead0ac6d61eac54e919af096f1ef3d934100df2a46f034ee0330fd158c80668e0705b4668f783865566ab5fab0af2
- SSDEEP 768:MHuRvz/vUxnRDVGUNotxLsJPKjaQ4gqbdIELQ9Tx1EgYwb:nbvgc+oEFcCgqbdI9CgYwb
- TLSH
  T16C23F796335750A2D076C239C9A34E09D2B6F26297239BDF5239972E1F633D02E3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Engauge Digitizer/bearer/qgenericbearerd.dll
- Size 179KB
- SHA256 458cb410e6ed8638ca13b5fb71cb2017da5cee59bb72032adeb1a323470a2217
- MD5 fca705fff19a645f2656c73d28382a6b
- SHA1 9335ebf6c92c871169d750a8db20fd90aff3feea
- SHA512 9c3d8e9833723940d08b1241765de23b5d974903785177ed9e0595d1680f0973c80d37f0e39834f0d4f3c7cde0f8e330aad45ccc2743228fc637d449a9a0e3db
- SSDEEP 1536:vpaQywKJzN/qXxJPITjT9ohPPGZupGo0IffXUdlSXKRfx:Qw1xd+jihHGZupubbPR
- TLSH
  T1CB04B28BFA5D10A3C5B6E13C65C1326C7075786243118FC399A18E794662EFCB97BF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Engauge Digitizer/compare_local_and_downloaded_references.py
- Size 1KB
- SHA256 8d6ed9141fbe2864dab41d0164b7098e6f67208027a8a834d0d822ec35067435
- MD5 b9cf9f996931f8e76fd58e4b659fb0de
- SHA1 96c6df5b3af5cba2cb69a5b2e912a8b9d2b734ea
- SHA512 999df941d97ac22601fac382d49c2ef2d6b50c4a162c14bdc3140fc08decf291dd013ef28bc9d05f6f3148b3039e304460e083b5a6b82010f52738caedbfeb68
- TLSH
  T13E31787AEC03800012FA520FAA5F3151F180D15BD6271D4173BDF1699FB453E4A9A36F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  Engauge Digitizer/concrt140.dll
- Size 325KB
- SHA256 2d533faa5bada768bf645da22ab2fb0621399fccf9c2b34fcf37492e27c21796
- MD5 c8dc168d371bdea660abed609ac8e477
- SHA1 811507bb13e38bf7d59a896fee499882c94dbde5
- SHA512 75bf5dbdc34ecfb007ce4fa4d7f879a70387a1d12485776aa094b7c4a6fdea436f5aaafc7575cb7bb93a4d332ce4513738792d69174ada3ae80a0693e8b40fb1
- SSDEEP 6144:CMVzSHmHM61wfScgh70p2pKd/6D5St2O/TXklLiPnWzgNTdRI+rcg:CYz49/p2p1BiOzaZ
- TLSH
  T189643C5AB7244CE6EA63C139C552864BF3B2B8402B52C3CB1268535F6F677D0D93A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Engauge Digitizer/engauge.exe
- Size 2.1MB
- SHA256 10fce43f64e6eba8ea34d8102c5645c7c7421ae638244c5880fc39fea91c9fdb
- MD5 dddef6450eb45f03505375eef225e000
- SHA1 cdb5fceebb7164e88b543847bdb27ef51975bc27
- SHA512 0148f0bbc1c4f2e5bff9c8e07bd327d64a3d32cddd9544f29205771b1dffa56274abf74e2c7362d89083b301a2f4252309c53f775f097cb289d2feec1c06ab36
- SSDEEP 49152:ZTJwn3emAjmvGd36RGfqV5AdftS87se3v:dm+BAkS8oe3v
- TLSH
  T182A58C0F6BD542E1CE2BC17DDDB64982E2B27090BBB20AEB44599F5D0E332D10DF9616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Engauge Digitizer/freetype.dll
- Size 798KB
- SHA256 e724cec8d04fad7f65680b499a81aceec7ad82257b32beccd65d8dc63e40089d
- MD5 2597bd0afba9e78c3c9e4f48482bec54
- SHA1 b31905f70abab171535e089455eb1c59ec5dd810
- SHA512 95a2f469d216f47607dff7e30caffaac5e9a6939f1712239eb6b838a35600e0d7bcd8ab8cf38c6a53e214853031afddf432b70c520d8329f23b65d7591a8d807
- SSDEEP 12288:yRwtwV5g6VzKjPW2sUC2pZxB60Z9LhzJfEWmD:yGtwzg6VB2sLWxBLsZD
- TLSH
  T1F8057C8AF7B416A8C677C23D8617871AE37175051320ABCF56A00B6A7F13FE65B3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Engauge Digitizer/iconengines/qsvgicon.dll
- Size 34KB
- SHA256 8643e648567526d35020aab429811d82d8339b75fedf9252488bde2881f92707
- MD5 381416468ca398aff18868dfe3c041d8
- SHA1 caa86b7ba8c00f4c61e6ecc8c28bffb3c0d0bf6b
- SHA512 0b2bd8752091b9aeffff4bd1915a836a473fbd7172a7d2de3222b4c817bd24aa3625a35afde1dde84b0fa1ec31dc8427c2cd3ff571938785ddde3757d1a06f7e
- SSDEEP 768:7yK9XT0p6fa+mtWAELb6uPxe6l7z3l4w:7jF0pUaFtWAAb6uPxll7z3l4
- TLSH
  T146F24AA3736B02D6D176D378C96A050EC577B4550BA383DF42594A382E3B7E2383EB44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32