be2e338cac9d181f42e4cd0028364f3e07ebb3879a7a183ab45c0c566eec265d

Sharing

Copy URL Twitter E-mail

General

Target
pza-win64.zip
Size 26.0MB
Sample260819-mpnsfatxav
SHA256 be2e338cac9d181f42e4cd0028364f3e07ebb3879a7a183ab45c0c566eec265d
MD5 0b10b71b66b5f353e4555e26d0f9a9a8
SHA1 4c1d588fe26d862cfc5ed7e1352fd34b2e9d43b3
SHA512 8fe3aaa827c8748d8b3a8ae96e2f8bb19005dc62b7924aa0e5edf3ebea82eb4912cc6bf37647ceefa5cbd9b44e527df1b053a4196479d09403d305de3cd35627
SSDEEP 786432:ckSH/lxZQ0ljfQ84vThNfkZGhPZxBRf+Y:ckSH9wofQRfkZGhRz1Z
TLSH
T1805733D2D4CD7A45EF6A9539D3A5B09C34CB100B4D3314B7ED6B81E213BB6A6118BF88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  pza-win64/PySide6/qt-plugins/platforms/qoffscreen.dll
- Size 104KB
- SHA256 e0ff0a8dc40db206b67c787a2a45ebf87a0896df033ca5dd2c9c7ae5c0ac3f2d
- MD5 a8fabb422bb99f2630c00142e0fe9340
- SHA1 8bafecf96209f62e312d6e58c438e162d18fd0b9
- SHA512 463ca9daeba6b71695ac0440a44351d2bd4a229ef3612d164a1a4b91b00d2f58ed87c6040b3f22d80f88b8b79699ce384275ada6b4839684cfc2919c5e4c6d24
- SSDEEP 1536:5WUcf/ewEfs0uuaPA2VSWkePhiKN9fU0E9EgoGpLNmpVGrgKxngeGzEH/f:5z0keBEWyKNJSCgoGpZmpQEKQEff
- TLSH
  T1FEA3391626760085D87ACB3EC2CB4A17EB76F0100713DFEF125A455A6E677D22D3C3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  pza-win64/PySide6/qt-plugins/platforms/qwindows.dll
- Size 811KB
- SHA256 a3bd204581461478282555b3c46b13c8d6779469a1b209b45765dbc7947a564a
- MD5 c375f728acfcce8456b3bda4c5837976
- SHA1 7de1c3476c043a58c41428b7f838cc6ab2017857
- SHA512 b739588b0adbf1e3f107709953bf68660fe7f33c9fc8d7fbf5d738483e5eca3076de92574789e21e858bd70a3f1bd1c108ca754fed08046185949a85ef38cb2a
- SSDEEP 24576:ViNwqotacLYtvCH9PL++Y4W4UjLX4OoxZgcX:ViifacMtvCHZ++YSU3X4OoxZn
- TLSH
  T10F054B5BA7A80285D47FC13E874BCA17E7B3701003A29BCB4161CA5A7F777D2297AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  pza-win64/PySide6/qt-plugins/styles/qwindowsvistastyle.dll
- Size 150KB
- SHA256 1e826a5e7dc86022a17f72980f9c9eadb0b6fb439cda43e4af5a1d3b208e91eb
- MD5 b1e8f9b4f67602d2af400f97123cd67e
- SHA1 fb84d95ac7629dee1ab6a6235aa10f0033d606fc
- SHA512 60cc251e076498396d84ffc9a3e0c742bf241d8be877a090e336f2ee7d8d96aaeda8b7527139ec7e0f523e25ab675269925484a145e8caeb9c6d92ea6f75b4fb
- SSDEEP 3072:+LseUcZ+sLqtIXtL4RwBuk1nnlFGWFF5yAPg8OVaiR0JR6KoE5:+LXBU+K+lz5yAPhOVaiR0JxoE5
- TLSH
  T102E3390373A602D6C067D2B8C25F0612FBB3705953129BEF056AC9B52F633D2BE3A655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  pza-win64/PySide6/qt-plugins/tls/qcertonlybackend.dll
- Size 96KB
- SHA256 66a91195e8c740a21d3a9561e21d7574632272456831eb67e199b1fcb735637f
- MD5 6039ea63621c93f02580758af1d34ad6
- SHA1 1ed8d50e6d952668a528039bf8cd3ca81d0bae17
- SHA512 457ca847ded573802be36cb14000b4b06e305a3a597c39df8b7270f73344fc34ae335a712a752799cfccb7761b862e317a3b083fe1925ce50c2140593571a195
- SSDEEP 1536:plXj2ShqEDxH7Wtko5e2Ovu6qGidsabXqmAhGfWQToMx93+rgKxngeakEHW:pt6wNHCtVSHqGidsILMGfWQcY+EK9E2
- TLSH
  T153A37C47129402D2F96EC2B8C713890BC77AB055A76397FF8260C66A1E637F56E3C354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  pza-win64/PySide6/qt-plugins/tls/qopensslbackend.dll
- Size 296KB
- SHA256 54ddbdde89988a81be5479803d5fb4badcfd80e8e991a200d741df0aa51fbacf
- MD5 9b32c2ce092074f6926ebb2645561d4b
- SHA1 4550fb8eef3d7424efb8121949864a9ce0c1392b
- SHA512 f3c31ff5d8695e15329a7a6544605141be82c005e34f0554abfc8b9d07ab9fe1414fc1a9becc393bb7f5931f2620b4cb99de5eb8910b73b8fd142b62f5f1b285
- SSDEEP 3072:Nhco7QZHs/mN4iLdnvwv5ooN6dS+frcPRuY0FqOSpxyc/NQKIa/nbI8Gwg2urkqF:0o7bpiYG1dX0RuLM/qOnN3urk8zEA
- TLSH
  T14A541A5272D52D99FC5BE238CB478402EAB3F40257A2DADF4210890A2F737F5B5B99D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  pza-win64/PySide6/qt-plugins/tls/qschannelbackend.dll
- Size 213KB
- SHA256 cd3c48a739d9ffa9e5a4568e023c64c51aecc55777ab41b5a9ef4d6e19b644f9
- MD5 4c28ee5e48080b3c3a5ba7f23cd00f60
- SHA1 1416663464ddc4e85f993759683fcc6e6c3652f3
- SHA512 9c2c786f6db9b40d958086f25a579dbe5a0292a19ada6847db6138e43a0f493cb228fc2ee61527deed87197fa3e647e22d65818adda7f8566d64eb27c76d2b2f
- SSDEEP 3072:1wJ51eNu4RAKJSojrnUDiD3NOjfxwT0HO+gTQY7m0plZqMVG+KYE0:eJwuhO8iD3NOQUzYhZqM2YE0
- TLSH
  T11924395732940295E86BD1B8CA5B8903F2B3705953329BEF4224CA7A1F63BF2B57D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  pza-win64/_bz2.pyd
- Size 82KB
- SHA256 00b8ca9a338d2b47285c9e56d6d893db2a999b47216756f18439997fb80a56e3
- MD5 aa1083bde6d21cabfc630a18f51b1926
- SHA1 e40e61dba19301817a48fd66ceeaade79a934389
- SHA512 2df0d07065170fee50e0cd6208b0cc7baa3a295813f4ad02bec5315aa2a14b7345da4cdf7cac893da2c7fc21b201062271f655a85ceb51940f0acb99bb6a1d4c
- SSDEEP 1536:CX8z7RFgpNVu5eYu00NI5OhgYNxx8bhm+uVIYCVH7Symxs:CszlF+uyIkNxebhEVIYCVHL
- TLSH
  T190839E93E3605AF5E45B92B9A6A04357E331BE49035093EFF75883162F13F813D6836A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  pza-win64/_decimal.pyd
- Size 249KB
- SHA256 980a63f2b39cf16910f44384398e25f24482346a482addb00de42555b17d4278
- MD5 c88282908ba54510eda3887c488198eb
- SHA1 94ed1b44f99642b689f5f3824d2e490252936899
- SHA512 312b081a90a275465787a539e48412d07f1a4c32bab0f3aa024e6e3fe534ac9c07595238d51dc4d6f13c8d03c2441f788dff9fe3d7ca2aad3940609501d273bd
- SSDEEP 6144:E7W/Dmi0FD5KaN7VqqO9a3juVQt07Ou9qWM53pLW1AT3Otjm1+Br:L/Ki0FdVI9a3juKeqcO+Br
- TLSH
  T11C446C57A2490CA4DE738474D89B9B47FBB278854320C3CF03A48AA76F577A323B9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  pza-win64/_hashlib.pyd
- Size 63KB
- SHA256 87dd0c858620287454fd6d31d52b6a48eddbb2a08e09e8b2d9fdb0b92200d766
- MD5 b4ff25b1aca23d48897fc616e102e9b6
- SHA1 8295ee478191eb5f741a5f6a3f4ab4576ceec8d2
- SHA512 a7adcf652bc88f8878dae2742a37af75599936d80223e62fe74755d6bafaafd985678595872fb696c715f69a1f963f12e3d52cd3d7e7a83747983b2ee244e8a2
- SSDEEP 1536:r5m8HQNUbaxjTvKzl9mjNLOjxNHeuNIYOIa7Syuxrm:r5m8H79mJOjPHeuNIYOIaum
- TLSH
  T174538E46A69544A4D96781B9CDA34F57E9F2F1001710ABDF0368C18D2F233C3ABFA766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  pza-win64/_lzma.pyd
- Size 155KB
- SHA256 f5e01b516c2c23035f7703e23569dec26c5616c05a929b2580ae474a5c6722c5
- MD5 b86b9f292af12006187ebe6c606a377d
- SHA1 604224e12514c21ab6db4c285365b0996c7f2139
- SHA512 d4e97f554d57048b488bf6515c35fddadeb9d101133ee27a449381ebe75ac3556930b05e218473eba5254f3c441436e12f3d0166fb1b1e3cd7b0946d5efab312
- SSDEEP 3072:esdh8kZbsOb0Mt4zorT81qjznf09mNoqCPAaQVIYZ1Ncf:esdhBZbsm0hi78YOqtX6
- TLSH
  T122F33A92A394F4D5F7628C78D6624F17DBF678090310929A02CCC36D2B1FB759A2E727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  pza-win64/_uuid.pyd
- Size 24KB
- SHA256 e6aa7f1637e211251c9d6f467203b2b6d85e5bc2d901699f2a55af637fa89250
- MD5 cc2fc10d528ec8eac403f3955a214d5b
- SHA1 3eefd8e449532c13ae160aa631fdb0ad8f6f2ea4
- SHA512 bf18089bd0b3a880930827d2035302060ea9db529ad1020879e5be6de42693bd0a01b40270b4e93ceaea3cfed20dad1e2942d983cde8bb2c99159b32209b34bb
- SSDEEP 384:8ZL2/LE/t8Cfi/1VIYZwXmHQIYiSy1pCQgyaxPAM+o/8E9VF0Ny8/r:8qLadI1VIYZws5YiSyvXaxPAMxkEq
- TLSH
  T1B0B26C92DA605C55EC2789B1A4E54F1AE935FB824B90C3CB330CC2555F613C37AAA3B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  pza-win64/concrt140.dll
- Size 325KB
- SHA256 dabdb0732b2fc14040cedbbfd369d9eb3c7a2e66b38a79892e1c05e6d6a8526d
- MD5 eb42b164d603672e07997019bb00e4ad
- SHA1 9f73f2323b167215874a7d3dd4a7f7750312f219
- SHA512 1e74ea24bfcaa5dd1ef0654a45f96c99900dbfca406bcfb73ae3abfdad7c1d0d12e773817a9ab3fd8d1d927a85d5fa6447b3c521192dccf33957f5bea00b3cc8
- SSDEEP 6144:1ndGd0wl7XIbBx5C9YtkO2MUWghMWbGynWzgcZ6rO4i47:zCpIRC6tcG5zKiU
- TLSH
  T16D64298A7B544CE6E963D13E8553C54AE2F2B9006B22C3CF1264839F5F677D0D93A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  pza-win64/libcrypto-3.dll
- Size 5.0MB
- SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
- MD5 e547cf6d296a88f5b1c352c116df7c0c
- SHA1 cafa14e0367f7c13ad140fd556f10f320a039783
- SHA512 9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d
- SSDEEP 98304:n3+pefu6fSar+SJ8aqfPomg1CPwDvt3uFlDCE:3G+u6fb+SJ8aqfwmg1CPwDvt3uFlDCE
- TLSH
  T1E6366A6AA7A80188E5BAC13CCA534617D6B1F816577097CF19A1967C0F33FDA2B3DB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  pza-win64/msvcp140.dll
- Size 603KB
- SHA256 f87819ae8c6f7c90d3237a1abb9809e8cba9dcd0c80ac3f0969a5e68ef652ca4
- MD5 a1d30ef2114e18e26e2bb96555be81bf
- SHA1 a5e3e5a5910dd0781caf0a9f58dd7b519de8c927
- SHA512 5c5bdae87327b3fb724844087257a0ba0e7ad31c194ab5f632845e8f09633f63982817ca551d1735523b1a65763efa3c2ddc8789b3bf23324d7882456e3aa6f2
- SSDEEP 12288:ttc7Tg4ObbZu3JZfzeUQEKZm+jWodEEVTMj:U7Tg4+Zu3jJQEKZm+jWodEEVMj
- TLSH
  T13AD40927BB5905B0E162E3B891C38715D7F1BC054322A3C782A7E66D2F673D4A73B660
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  pza-win64/msvcp140_1.dll
- Size 30KB
- SHA256 b05f3dfd4e999c3e110219fb59151cbaa322757f4f3ce52b64dddc853e5c105c
- MD5 a0b595f95be9cce12bff7ef199f874c4
- SHA1 7fc5f91033cd83f11ce03ab2478d9b29036e6535
- SHA512 182a0cc4227afb43228ebe5033977fcfb4c8ebb2f047d2decfab8f33453fd2262e62dd80b2b0f34cded9a8ee784d7449120a000aeb1949642bdf8cc563282b8e
- SSDEEP 384:6i/3lk2SyA04U9Kqnd5ZWcR5gW546QpBj0HRN73YxQHRN7MCMlvz:bObyl4+Kqd5DPXqW3Yx8A
- TLSH
  T1AFE25C86EE6C8847E9A34C7082AADD43BC3DF3D25710969B1256F79C0DE37C1AB34619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  pza-win64/msvcp140_2.dll
- Size 198KB
- SHA256 7d5d180c8e41b1964835b2550191e2d9054d8f4beff898ade67b3d5dd25b5101
- MD5 bbcf50b71928edb1c32c969d0533753c
- SHA1 faca1db3873d478b17fc6791b94fae651202627a
- SHA512 e3890679d21e76a19361cc181eda9323ba31fb1211124e40fa3c9834cb0bfab6f7b3b34cf349ee4d7b3cc10e50813ae728dd01dd254eee098f3971f07679d710
- SSDEEP 3072:0m2dow+wS2vEYFBeoVM4ZaeEQDjQdA05+TiIfH+YKpHANGbaQLvaOvV:0xhbBFBnPZTL0mfiAN9Q7aOd
- TLSH
  T17C143A45BA5C42BEC4A3B57485387116F63325545B71CACB1B838F3C4F2B792BEA3A21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32