General

  • Target
    Douzy-Setup-0.10.1.exe
  • Size 200.3MB
  • Sample260823-paaclsgl6v
  • SHA256 7915b87f0f681a3dc2c2eaea807ab95f48f8610e6ef8e84f432b856d51ed8e06
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Douzy-Setup-0.10.1.exe
    • Size 200.3MB
    • SHA256 7915b87f0f681a3dc2c2eaea807ab95f48f8610e6ef8e84f432b856d51ed8e06
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/StdUtils.dll
    • Size 100KB
    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/UAC.dll
    • Size 14KB
    • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/WinShell.dll
    • Size 3KB
    • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/app-64.7z
    • Size 199.8MB
    • SHA256 fe2b950398b4d47048a080645400b6df0b2e60314805974942ff625159e2e932
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/_version.py
    • Size 704B
    • SHA256 46db65f810da76d716d50cc69cd7df09603f59cf6650a0cc3813d9a7ef8c9ec7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/__init__.py
    • Size 509B
    • SHA256 8341c613acde41befdf033f817d90b02c50735207e379427d8c510ed80997a73
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/core.min.js
    • Size 6KB
    • SHA256 18da6ce0758b416e7ae645084f4f8801f9f9d59d6c477c05eaa0ff94ebd8cc00
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/lib.min.js
    • Size 148KB
    • SHA256 c55987fe697e5b9ee18830163f7af85327e9bb5c3e674b969d38c8d205eaa577
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/sidecar/win32-x64/douyin-dl-sidecar/douyin-dl-sidecar.exe
    • Size 18.0MB
    • SHA256 77e372841614b75a684755e75182dce3822a8fbee3c9db743df3a719182207c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/sidecar/win32-x64/douyin-dl-sidecar/sidecar-version.json
    • Size 28B
    • SHA256 a8f922d91ac8e791a61034a3dd3e26e1953972a2defb13c5bc27b5afd88a3824
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/sidecar/win32-x64/sidecar-version.json
    • Size 28B
    • SHA256 a8f922d91ac8e791a61034a3dd3e26e1953972a2defb13c5bc27b5afd88a3824
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      snapshot_blob.bin
    • Size 299KB
    • SHA256 c1da41052abe31791ae90a9dbe54442a641e1ecbb018ef35c44e7aed05b8f72e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      v8_context_snapshot.bin
    • Size 663KB
    • SHA256 83a8345ea197020e07fe2cf53e74f31d0cc632ca1537f5c9c1db2fb2665ab04f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      vk_swiftshader.dll
    • Size 5.1MB
    • SHA256 46afb1ed7ab1b1a679e00784b2e78cc2358cec615553699624ff77882f55787b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pyinstaller
Score
3/10

behavioral1

defense_evasiondiscoveryexecutionpyinstaller
Score
7/10

behavioral2

defense_evasiondiscoveryexecutionpyinstaller
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

Score
1/10

behavioral32

Score
1/10