General

  • Target
    OCSInventoryAgent_CO_x64_v2.11.exe
  • Size 6.2MB
  • Sample260824-t1msvaan2y
  • SHA256 0ca4b75d5ba98a8bc468b51d069bd007677727ff7d3fa1beccec6294e4104249
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      OCSInventoryAgent_CO_x64_v2.11.exe
    • Size 6.2MB
    • SHA256 0ca4b75d5ba98a8bc468b51d069bd007677727ff7d3fa1beccec6294e4104249
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/OcsSetup.exe
    • Size 6.1MB
    • SHA256 6dd18e9a9a922a5a40df6ff1b7a851bf012d2ab5c3dbe556732fffb20b069018
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 1a0f7da84f2eaefd5bf89058066ff12d6fdf9e06c847587dba13fb9ddc6190dd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/KillProcDLL.dll
    • Size 32KB
    • SHA256 ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/SetACL.exe
    • Size 601KB
    • SHA256 4efc87b7e585fcbe4eaed656d3dbadaec88beca7f92ca7f0089583b428a6b221
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      $PLUGINSDIR/ShellExecAsUser.dll
    • Size 43KB
    • SHA256 a7dae4ce70fdba99f1613f7a60204f25357f29788f7975c95f1cf3a36f0b1436
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/SimpleFC.dll
    • Size 177KB
    • SHA256 f0c87f14da19606989f6c2e9908ce9c331298d785ad640031770ce3e71b49bd7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 b80a5cba69d1853ed5979b0ca0352437bf368a5cfb86cb4528edadd410e11352
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/UserInfo.dll
    • Size 4KB
    • SHA256 01d867e3a1f0aec39a4ff02fe9fafefc78d6a12390a0da8ecbf4e7da5379e42e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/advsplash.dll
    • Size 5KB
    • SHA256 2722555ec1f72523774b64d25fd4c2b460000bfe82140876d6100dc4fb1f62b1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 5157fe688cca27d348171bd5a8b117de348c0844ca5cb82bc68cbd7d873a3fdc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 6KB
    • SHA256 370e47364561fa501b1300b056fb53fae12b1639fdf5f113275bee03546081c0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsProcess.dll
    • Size 4KB
    • SHA256 95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/services.dll
    • Size 7KB
    • SHA256 065564c3d7e19e7dea083fb9a426dfdfeabba6ca3a7587bee938f75db5753114
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      ComHTTP.dll
    • Size 62KB
    • SHA256 b3ee91fe65139771fcf66f67b27cb1589a9d20e97a802bc1be6bf7c2751086a7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Download.exe
    • Size 440KB
    • SHA256 a2bb49d6be701651685a1ea52ec92a7e7e1906c3b3031c321357299bb6f4f2c4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

installer
Score
3/10

behavioral1

discoveryexecutioninstaller
Score
7/10

behavioral2

discoveryexecutioninstaller
Score
7/10

behavioral3

discovery
Score
4/10

behavioral4

discovery
Score
4/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10