bc41e0d1719269d1048d07b3a609ee2ea9bcb94946ce570983bcccea6d88f14e

Sharing

Copy URL Twitter E-mail

General

Target
WuWa_MOD_WojuFixer_v3.6.1.2_win-x64.zip
Size 69.1MB
Sample260831-b2bsvsck8x
SHA256 bc41e0d1719269d1048d07b3a609ee2ea9bcb94946ce570983bcccea6d88f14e
MD5 fb39ca68439a1c66b752bdafc3fb6d47
SHA1 dba0d5939d16ef83d3eed71cf5488b63d5bd3475
SHA512 e4aae6e3b6bd411c4c2810a3a5e7f970307893e2fbbdfbd4e7e1416e43aed2784eb758171c9f7fc938542900c38c3ebc6dddef182de2363139da2dfa9a58976f
SSDEEP 1572864:YZzPTMBgRWEfapv2z8+U/9DafDv+YIrwCdHAma:Kz7t5f62za2KYVOra
TLSH
T11DF73384F10B1B1F4E4FD113276F9498506BC9D801A24A770B4B7696FBC26E6CE9389F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  WuWa_MOD_WojuFixer_v3.6.1.2_win-x64.zip
- Size 69.1MB
- SHA256 bc41e0d1719269d1048d07b3a609ee2ea9bcb94946ce570983bcccea6d88f14e
- MD5 fb39ca68439a1c66b752bdafc3fb6d47
- SHA1 dba0d5939d16ef83d3eed71cf5488b63d5bd3475
- SHA512 e4aae6e3b6bd411c4c2810a3a5e7f970307893e2fbbdfbd4e7e1416e43aed2784eb758171c9f7fc938542900c38c3ebc6dddef182de2363139da2dfa9a58976f
- SSDEEP 1572864:YZzPTMBgRWEfapv2z8+U/9DafDv+YIrwCdHAma:Kz7t5f62za2KYVOra
- TLSH
  T11DF73384F10B1B1F4E4FD113276F9498506BC9D801A24A770B4B7696FBC26E6CE9389F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 320565434e5d8a77e13980e9c0e641daa08d12693ac0d77df9ccf2b25d9e526c
- MD5 20d9ebd5020c322365d11bfe49740609
- SHA1 0c4248028be99dd04c48428537d98c19b20f12fb
- SHA512 05c98a4ae88e305ca02c961526fb7a947036a197ab8d564fa9f530325192233b1285dd3880467db89f3f8a77b84f674c6c1716ad8e62b7b74a4db32d599578b4
- SSDEEP 49152:y6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3h/d:yUdeqt737jFmRtF
- TLSH
  T177268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  PenImc_cor3.dll
- Size 154KB
- SHA256 9d1786e97faeb7c6ffe3576158ae6df43a0d13336b606aa5dded40ce8de1bdb7
- MD5 25fadb72f7caa75c1a321893c8b970b1
- SHA1 191f0b50d82e5bbf126cb67491d318d2a13b33ef
- SHA512 ba25d4812215998ac13d4af60f7ed820aefba38096bf0d3c935fa4fd4f547064512bf52933a0c57972ad529c143ed5db72135ef7721b0e479c36a09b4ab1e26d
- SSDEEP 3072:nXPIUmSkNzkWw61m48jowNwVHL63UUDFMyW+TuE9ZT/mQ7OM/nkEOIElumHkAagm:fIlZNz+6/8UwNbTDFMy/uEQEGCLcC
- TLSH
  T1EEF33913B69C40ABC429D23E85D70649F772B8111B228BDF2264932E1F777D4BE3A395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 522667ff197f31dff56d32cdd0aa9a3120222989f0e4eb8a06de550ff55bcd70
- MD5 c9e8eea76fff652ef726a96f70d1d249
- SHA1 a33f7a31dc6e3bb85fba21c669ca5b14ffffd533
- SHA512 50dd6c922036209bd0b99af40ffc7db870089550854d592c65039d90942fab0dda289c9320babaa714078546e28f18fc299855335168bb456d0b8beb22c341ab
- SSDEEP 24576:el8W6eU6UPXhA+JYCqX4T3MJj7OQ1Niqdhvc7PgNfb4i7fokJMpw5i2k1/m6eg93:eH6emPXrYCqX4T3Q1Niqzc74xb4izMpV
- TLSH
  T160453A22D2E642E4C47FC1B8C646972BFBB17409231C66DB47608B652F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  WuWa_MOD_WojuFixer.exe
- Size 153.2MB
- SHA256 323724381cf9563ded5eb085fd3228ddce0286f8bb57e89b7cf77489efb7d282
- MD5 888747b514708e17205ecfeaa243f891
- SHA1 4d79d779fc211ad3ef47a0ef209ce855f5ce004c
- SHA512 25c3ddfc12593d86fb8641f053c186eeddc40cc31c29533650d8efdef1d9ee305417216912a99fce180c6aa91f901ca469fdca8d3a837456a447df1f45222ef0
- SSDEEP 786432:Fgeua694rMue2u/0iOAx9EeCUV5OtsFRta9djbSsQcy7Tp5mav4d01okA:UaHrBC/0iRx+TU3S3SsZyfp5HQh
- TLSH
  T184788D1163E81A05E67B8678977382A1E6B1FC535711C1CF0094FA4A2F77BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral8 behavioral9
- Target
  WuWa_MOD_WojuFixer.pdb
- Size 60KB
- SHA256 cfe5773f31006fd866ead39faa27abcb82f674fac4715b4b96ff8091bbdbc4cf
- MD5 a0d8f16a33992fee6c44b62f1835b947
- SHA1 c6bbc3c4a437f7811e6d057e47c0970d34382657
- SHA512 ae42d546208c6a5db338a332a38514e4a441fffc4fa0827094c78609cc3653112d94ac83beefc675a3cc8de49905266dd47019f812acfea2f284e3864cbb7362
- SSDEEP 1536:82o40ZKLp81o3hYSYjyWIohB6fJMCTkpRsXpR:8Hh10hYRmI8Mk6CXpR
- TLSH
  T1C5534B6BEF449B1AC85502BA5CF341897731C25A6382CF27B19EB524F49F3584B732A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11
- Target
  vcruntime140_cor3.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 3d6706d54060588f88f52e1ea71f31ac3bea0b15f248074efafe0cc9c9a213de
- MD5 a05dea7970a63cb306842a88d8e32476
- SHA1 38d20dd4eb801bc44d31847f4405cbddc5f7a403
- SHA512 1b5e008868f7f7d9252e65f2669ca8c36c2d1d3c393c317359705e3dda290cd98e8f412c6f545e89218061cca8713134d6c91556e089ee5b3d3f3039c34f9215
- SSDEEP 24576:GzTCa6oqYQ6xi/2p6YkMxNUTs/M3qshFS3jgHIutHc8vQDS5qB4ibg/lKKoqjZTi:bDci/2/NUAwFWgjLQDS5w4i0JZTm/
- TLSH
  T110954A46B6EC40EAD46AE23CD9D7961FF2717810276197CF23A0479D6F27BD00A7A360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15