770fe3ae0919ca3c4d412f58c985eb27f5434decad809f7e8206de4e8852eec4

Sharing

Copy URL Twitter E-mail

General

Target
RawAccel_v1.7.1.zip
Size 1.5MB
Sample260821-2yn7wsyeme
SHA256 770fe3ae0919ca3c4d412f58c985eb27f5434decad809f7e8206de4e8852eec4
MD5 7570c4c1509aee407944768ac0dd4e1f
SHA1 31ed019e6b0ad60aee633418222819add1ab8f9d
SHA512 804606a77223cf49b70d9cdd2815e08f3df4e83442d276193ce1dc993b73d023b7a52292952d614d8afd3b211a60609b52dfb611638c6bd6284285dbfd2c844a
SSDEEP 24576:hD5/zT2VD0CoxaHxNoC8y6t7T+iowffZVsa3vU028C2TZU4EWktUctDB:dRT2V/owxOCl6t+U3ZVsa3J2r+49FtDB
TLSH
T19965333A87E6A001F48217BADA5F16336367FABFB90B5518404C25D3BCB5A42D1FEB05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Targets

- Target
  RawAccel/Newtonsoft.Json.dll
- Size 685KB
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- TLSH
  T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  RawAccel/driver/rawaccel.sys
- Size 55KB
- SHA256 8a62c4deef2774b43a7363b352eda79897533a1080c9c26ffeff0559e43358d7
- MD5 3b322b9a39f3938154e0391207b51de9
- SHA1 68e400e0a24d43260fc476af910af945a239d8cd
- SHA512 5b39818f84e25e3e0e31ff08eb5b02d8850bace83711fe0e51d49c073ea04635e1f186ece37dd5da02d3e12aef08914900ada3c0c0aa07c43a3a77d24eabd8f3
- SSDEEP 768:s9hrkpOcCNgCfikstkNlGHHcnCHp4e4ExHtq6Cbf2Q+IRNJ4zbln/23xds9zgrE:urkspWFHwCHPHoUqNJ4zbp/2Bdkz8E
- TLSH
  T118439E56619922D6C432583096FAF963BA723501137488FF07E0CE290E7BBC1AE73667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  RawAccel/installer.exe
- Size 38KB
- SHA256 b3b4948de9470a5727390ed016507b59d2c628463e42aaf1b75e906ee04f58a9
- MD5 0eac10f0cebfc7e76d99ba4a5ca33a7a
- SHA1 7a9e8f09492e79028973efcf1d8286b1aa508dc5
- SHA512 902e3b1f2b80a537530d732c700c7697b03221320e40b91959bde403890291a4cde170e69c2fab165c4030b5b38a5bf2c84065b9c9141a73a42341bc3278ea9e
- SSDEEP 768:EpUH7bdy8yWRA4jsbWiV05Gd0X8dp+fQfX0y3y71+O:ESH9ysRsbWix0X8dpzfX0z71+O
- TLSH
  T1A5033B5BE76900ECD5A2C17DCD9B5986D2B3B8080761A7CF439086252F763D4AD3BB83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Drops file in Drivers directory
- Executes dropped EXE
behavioral4 behavioral5
- Target
  RawAccel/rawaccel.exe
- Size 435KB
- SHA256 64cbf09cbb181b81abd3432e9184b896dd227ec258deda547074f5985cfad88d
- MD5 fc35afe9036c9e2263191e1015254901
- SHA1 dbd2a34fefc46a74d83b54bb3ce2978f7ab06aa6
- SHA512 39711d2de7479dff2d3eba5de05bf5c6f29947e8a48913734c3501261b10e24a7b8ef2125e3b58cb54fb612a98fdb2ec94263b830c768ac2d8bd1ce82005ba1b
- SSDEEP 3072:HcSZDhLOsKdBPqeHZ8gCNm32LCCuoGc+BHrNhkNn6ei5PkTF3Cp0mb9mXmb9mRo:/DROs7e5Tm7Gc+BHrNGNRSpZ9mXc9mR
- TLSH
  T18A944C213268E59BD5EF62F4C420C49007F2BD397AA6CAECBE507ACE1DF6F418911917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  RawAccel/uninstaller.exe
- Size 36KB
- SHA256 62090da1ecd73aa18c2119650a4384d80691fcbabb90716cf5f731ed084a51ca
- MD5 aaabd272a0038e5c4d472013198b1adb
- SHA1 2da6fd2af94e2e0572a37de65f254539bcd78027
- SHA512 0ce22cf97c7e47703cb2be983c98fd9c0f0eb88c489e3b3fe9aab48635f38fc3b68c8cacd413f32aa6eeb3be0c5c5434fa53eb3c44b14ed0667c73df28712944
- SSDEEP 768:qpVHUJxEJ1ZTiYqsEd9OlDo1FTcSjxp7egl7Nojv3ZAv3:+VHUTE1VEsD8v7IxAv3
- TLSH
  T106F23C1BA76A00ECE1F3C27DCAA75596DAB378054752FBCF035052261F372D0AD3AA52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  RawAccel/wrapper.dll
- Size 475KB
- SHA256 e17d540fb0bb5e47ba7c8e01aff39f1570bfb7ef673a1ddc0bccd2a26f9efb78
- MD5 ded4ebdb2d2790b549d2e07ac126f512
- SHA1 38cab2d1eddb39beef78670fb3eca4b59a46adbc
- SHA512 0099bdf535e34ff436679d9adc0010be823fadc42eafe1a4600a9100364fc1ff3f0bc98d56a7284e63d0f7b4614d8c1ae6ad90fb7f63f72608532979469d5390
- SSDEEP 12288:Q3ABHW6okHO7034S+E7ebHqnaFcnsnKLvc803+hYuZ:nHW6of7034S+E7ebHUaFcnsKbc8q+hYu
- TLSH
  T156A47D2962236BA7FB36C37944BB2752D630AC04FB429BD343A5D6790F42BCC5739602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  RawAccel/writer.exe
- Size 5KB
- SHA256 b53e29c7689b9d72838ffbfd1502b8d0407160d3f77b54eb15a7c632f689aa04
- MD5 8df8a6000f75cdb409864c3e800227c0
- SHA1 ddda6ed437c48cfbb5e5dc4ea9de1616fdfe024d
- SHA512 462b1022f8dc1e52b0d39d5f9e1548e21b4c73aa0b5c93046decc72596c9feea74d42158683768a1567bc04f48251442425c3e1d7f51c49e4e2ec7b564a82622
- SSDEEP 48:6KqNzSUD0PUZ8EJiNRHTYhYPsJrNM1p5OOlNuSeyFgYzlbEIHpsFtXsOhlQyRpfG:oX0s5JokhYPsJe80uV3Yzl43fzNt
- TLSH
  T14AC1831183F84632FEB70A72AC32571027B0F7159D27EA5F5895601F5E27B584C73BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13