d226e40c0cdacffcc84c09e89ef174dbee5e7e9357e879ef94a65eb785189533

Sharing

Copy URL Twitter E-mail

General

Target
Ascend 1.0.1.exe
Size 73.8MB
Sample260820-rl5n1adn8x
SHA256 d226e40c0cdacffcc84c09e89ef174dbee5e7e9357e879ef94a65eb785189533
MD5 2470065398246566c4fabd7cbb7a15c6
SHA1 7371fbe51a2be7782f58645dac6049af01264ab0
SHA512 a1cd1ef9065f968ecd9d4c98fbd268dcd7b74ee86f6f883d4875c7a8d98ca00f401042ec7c54e56f9e34bcb4616106a61484268eb4f1fa44dfa70d383a5c3cc8
SSDEEP 1572864:USnyLU23CK2DhLwYzuBfFtg2aTZyZD6TZqz2NNL9HleDeSyvAn1K+UyR7:UeyLURNLALadyZIMKNh9FerMyR7
TLSH
T1BC0833F9D47D8B30C087B77B968EA825ECEB5D082054F99D1B2A70F266980877D5C31E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Ascend 1.0.1.exe
- Size 73.8MB
- SHA256 d226e40c0cdacffcc84c09e89ef174dbee5e7e9357e879ef94a65eb785189533
- MD5 2470065398246566c4fabd7cbb7a15c6
- SHA1 7371fbe51a2be7782f58645dac6049af01264ab0
- SHA512 a1cd1ef9065f968ecd9d4c98fbd268dcd7b74ee86f6f883d4875c7a8d98ca00f401042ec7c54e56f9e34bcb4616106a61484268eb4f1fa44dfa70d383a5c3cc8
- SSDEEP 1572864:USnyLU23CK2DhLwYzuBfFtg2aTZyZD6TZqz2NNL9HleDeSyvAn1K+UyR7:UeyLURNLALadyZIMKNh9FerMyR7
- TLSH
  T1BC0833F9D47D8B30C087B77B968EA825ECEB5D082054F99D1B2A70F266980877D5C31E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Ascend.exe
- Size 177.7MB
- SHA256 ebd60d63a6c2e12bb904b8b1ba5fd615a839fb2de11a78aa1f2121aeacab7668
- MD5 b1e574fa358e98f3baa87e9a8d1492fd
- SHA1 b9959b0e206eb6c826aac57cb1b356d3a1a4b333
- SHA512 942c7c4ec94df461f8e83563fcc06e6567c0582c67191f993cf42cc20194331c1d692c113124f6ed024ea6ccdf114c17358193dbfd5a5d2aade453195dc350b8
- SSDEEP 1572864:j0ORTnjSB/Ttde5oe7JyhLfYE1xX6BSgj7zIH+r4VOv1QsiLBRzDlJXlSubMXEsZ:sVKQxx9
- TLSH
  T154989C03F2D610D9E05DD1B19B8B9633EA72B8464728B2DF26540B562F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7
- Target
  LICENSES.chromium.html
- Size 9.0MB
- SHA256 b1ac2fb5c8f0407ec73ffbfcff46aa634a3acf034eb10ef3f69cf483f43e591e
- MD5 a6788c05c8f55285267442473bc145aa
- SHA1 a19630a8a0536a80f095e0be19b5a21b9f8b7945
- SHA512 c7125e3062ce1591a646424e6f7fca36f0559cfe37197ad10f74415471916dd6d386b8d3f9c15accd43f678777b8a6f7c515be28f13b97d200942e5f13191d90
- SSDEEP 24576:c4QQf6O36j54wRaXe1Vmf/6k6T6W6r656+eGj7/4po:xseGT
- TLSH
  T12CA6A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8 behavioral9
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  ffmpeg.dll
- Size 2.8MB
- SHA256 94efdb523162f7a55884f6bc423012f3dd046f85504deccfeef59603307db71b
- MD5 5253864a60577a0aa98db449cd7c6440
- SHA1 f4423def8024c5015367747c624d035a214ef49d
- SHA512 1af68134a381499134240d9ac42874005012127a81ba77ac3f1497509ba298bd092d7a17e49ca831865034d716ff156186c5547dab1ab8484431bdd1757baaef
- SSDEEP 49152:/tOSF+Xn6Rjc8E+E4Og1JytTbEcS2E+X6CftBJyN/4O5Isy:/t9cWOgTyZxzZO/V
- TLSH
  T166D5BF03E6CA50D9D029D071979F9223F631344A8F2567EF16905A213F6BFD82E3E729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  libEGL.dll
- Size 473KB
- SHA256 c9f1fb6b4ded3404ad29e629874ff05852f48f82ac33ba606847cac0ebef79e4
- MD5 cc528ba62f3867b7ad803ff22a6e1c08
- SHA1 e13118e48060a58bff0f8d5c8394a3ff7b60cc95
- SHA512 79f74d6f951624b3f8575acff6612aacae1e9f3e32b0abf9ea9688887666097429bf35d8eedf9ad3970a30957696eafd747020c6bebb76e2fd9b2d2e8526e0ab
- SSDEEP 6144:f5M81DtTHzR8J6E8cmqLD0x9cDEZAw6wu7fPbAT1TAswwdph:BMkBB8JB8cmqLD27ZOwu7fPbAuZwdph
- TLSH
  T1D0A48D1573D444A9E06BD1708A574643EB76B4920B65FBDF02A092392F7BBF89B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  libGLESv2.dll
- Size 8.0MB
- SHA256 c636de2892cb651220331734ecc578003dfe31f6ed528ffffe66370b2114b086
- MD5 f7aa9fea497e88d41e61cd5090bcba53
- SHA1 54a9f86943d1c496d3a73dc888c39df7830194d7
- SHA512 6adf7de3f6462b15c7ccec8d4858d30f3cf042dd5698c248ee371b750896c222f7720c39b787200136eff80438d0fe977d1278f49aebb90d19ba9ada79175861
- SSDEEP 98304:6nXvuO/so95HjrmniuxV0OADYDOnOQP7sG+XC3OT56:6nXvj/so95DrIpgDfnBsvmOQ
- TLSH
  T156867C03F69680D9C04DD2B8975B9623FE3178990734B6CF269017292F77BE06BBA714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14 behavioral15
- Target
  vk_swiftshader.dll
- Size 5.2MB
- SHA256 a4c0d966165bbc827c8ed00ab4ecd4a611d17872f6c2beacdd1ffa39dd08f275
- MD5 3a7acc435c09a8e04309bd0970847ab0
- SHA1 abe8fdd0954fa50f238187b7707638211ed763b9
- SHA512 a9f7f4d4a7922268170e2dda5abb1f150681a384521941a38ecdf314af8099407dd86db76ea981363bfe99956fde3e7ac00c4b44c6cc6f454b24687114149bc2
- SSDEEP 49152:/CGqXVpyP/Xyk8pKe4rIAvp4xC2JXrjX72aqiOE+jFvboDUs2TXT3yirn8h1cxls:JOyP/ihYvc2r1O4Vz
- TLSH
  T171462803F2858099F05DD1B9875BA622F632BC801B72B6DF52A01F192E77FE06B39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  vulkan-1.dll
- Size 874KB
- SHA256 36d6a57e7f6bad5a82c096fa21a2e0c1e2b27801891c0f5f3319de18b4c1cd8b
- MD5 dab7c6d9f373359a0ac2270dcb650b1e
- SHA1 7f848a2f22b894542aad891aa05ba65386440754
- SHA512 0c5783a3709c3492bedeabe886679d9d9f5674dbef0a23eae38a48d99826be060c6f8ff4e1cfa8404b9d99065ca88f32eaaebf70af1618eff2f920e8efa56140
- SSDEEP 24576:MwklBPn5I08Atrwoyz6Z5W1DYsHq6g3P0zAk7/BoxR:ML5AAFbyz6Z5W1DYsHq6g3P0zAk7+
- TLSH
  T121157C22AA648669D47AC074CDC24603CAF274921326B9CF02A45714BF6FFF47B7DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18 behavioral19

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19