aa8e0edb774ac8167229cc4d7567f67690d2b209daae83d7fe3c70f3b00e8fc5

Sharing

Copy URL Twitter E-mail

General

Target
i640.cab
Size 31.3MB
Sample260831-ppcfhssalh
SHA256 aa8e0edb774ac8167229cc4d7567f67690d2b209daae83d7fe3c70f3b00e8fc5
MD5 d1e81008c6c974218ce551ce50d08a0c
SHA1 c454e34d8c88b2b43bfd04f197d5601a940af401
SHA512 69f31a9d458090b2758282c19129044e9cdb9657d2ec204fcf5cffc034d2b004fe6f4358f5aafd0c7fe97d9f131d7a65ae650d990f8e9d03778041ecda77c799
SSDEEP 786432:yAln3SafnVWHPGICrNr9cY+mys/od6eicpumHbtYXQ:9COVcf8jvys/HbcAkOXQ
TLSH
T1177733FD6E9A1B81D56F22B55494D22E903DA3776D1F8BDD21D03E3C8A63470C92408F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  ApiClient.dll
- Size 128KB
- SHA256 180c04ad0ef7a47b711dbe785469becc5361c7069187f74cca09601f44c38600
- MD5 7a94ae5a03540bcb4eefa1f8ed4c91b6
- SHA1 6e3dfbc4fa5c64a6b59f8533dc26c892ad30bf51
- SHA512 36a9aad871647ad7452850a39bee1c06e8776b2c0d0045c0f93e2cec8536be37616c7942c6a98b857bd21f82974f6105157f5e7c5642ff9f38d280f895bb0365
- SSDEEP 3072:MS9p1pZp/pLpqi8uxW3CVt84drBmEQ0dXeiXljXr:MS9p1pZp/pLpqi8V3CVHW0dOub
- TLSH
  T1DED339A5F72451EBD1ABE27481AB9DB3FB72B8964551A30F0762C1061FA3340BF1EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ApiClient_arm64.dll
- Size 312KB
- SHA256 5646d9f3e75b1aae19d322aca7ce192fc3e5f971c7beaaf963cc5cae89b9df53
- MD5 4d38520ad98aa3dcc50558e373d2a8bd
- SHA1 7bcfcd5d192620630e16f4a82e2a5700d387adff
- SHA512 61164e951cb885fdff7150b5614f7a8112ed424a19f6093ed2ce2be41d0ddcd67e22bea10a6c4832f3980aaff54775e7422f61af8a9529ef1c224de22e93a65b
- SSDEEP 6144:MqRgId9Q5DrmS/yQ9dCxmaYOY/wZFSj4dmijGmTF+d+dQQRz0ZkBWB:2Mf2dCxda
- TLSH
  T1FE64F7C23ACE9CE6CBC293398C628760367BB95D5A14D703B153231FDE6E7C19EA0456
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  AppVCatalog.dll
- Size 505KB
- SHA256 2da34fb6d5a67284036e4c566a01dd4fda7302982a91ca32ee990f97e4551d17
- MD5 31a5aad3607c5bff296da16edc1c913e
- SHA1 55cdae7f98a12f4a8aa78a282d15cfc727b8fa81
- SHA512 bd1e1cde93f4065dad22ec264551adfcb946c8e82fc11e2b32b423c2cfee5546f8595f2725614646e9b114abb74bc1f4cb61625621816e99dc29cbb76aff41ca
- SSDEEP 6144:Qtoqu9Po8oWpOTMEtNv+LMWGNU6ITL/k2WPKCGfGHuANjlJju0:Wh2OWkTvtILxGNUbTsPNG4djf7
- TLSH
  T1F4B44A66EA689625D2BBDAF85B37C532EB767C514230D30AE3A0D1562E33F90361DF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  AppVFileSystemMetadata.dll
- Size 243KB
- SHA256 e391754cdeed05f995c1535a8d8df73a1c940a3076e06630361adef1c26aaea9
- MD5 8181cdaacbbb0717b734e7ce3de5e7ee
- SHA1 12d9dc5120c4bff32937bfb4c0a653cd63a0a72b
- SHA512 7910b743195ddbc9bfe605518e532ed51bc39eca2c0ce19217a0422120d7a46778860792fc04e9c0e9509f7e3a2ea623fbaf0a0ce4447b3352c10b9ef01a6719
- SSDEEP 3072:Xarj9MPRGxMOt8RAusGfWGNU6ITLqn2junby0cZbBAv6L8wI28N:A9MkfuDWGNU6ITLq20gB8
- TLSH
  T1BD34E567DEA5E413DBBF6DB857338620EB3278604630930DC2A8D06D4E477D09E69F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  AppVIntegration.dll
- Size 1.4MB
- SHA256 10f2898a03ed0c29a2777388e19f97a9bbddfa947ad81e6930655c2527d8aaa4
- MD5 7b0b84fce76d2e3f71d97a684a81352e
- SHA1 209fa7f09a23cd7f10bbd588371ffe3d46333a07
- SHA512 1be39c54f63049953ece3c4fed71be4e43c3074bbf8d820b220fc00ee793a982b3dd29cb3d55a86ffb7376c0d48a97a1c570edecf33265281a1f3d680d6292aa
- SSDEEP 24576:tfJqhoJIc1Zsz5YKfChJySCVGgIgxK87U:nlZsz5YKfCcVGgIg0+U
- TLSH
  T15A654B03FBA44369E5FBE3F48A7B8932E772B8414230935B57A4D54A2E63F50592EF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  AppVIsvApi.dll
- Size 357KB
- SHA256 7995ff871232558558a135e8ce4bf6e69d50c7827f0331873281120e1b9458bb
- MD5 5e8ae28a8aeb55b92a10d831d57f73c3
- SHA1 b9f8cf328ea62d5238dcd5c331ef5d0b2c580f1c
- SHA512 ceb164bd1a32b6efc946fe03f23264af72227f4790db2061dbaf992e8e9cf6024bd0aded2f36d5db2261ab605c85bacf0a08b2bfdeddc48f3f2d7a08cf062030
- SSDEEP 6144:wujcRR75ImQgNSWKJWyIg2e6WGNU6ITLMukC7hXna:8RImQREkLGNUbTtha
- TLSH
  T109743A66EFA4A124EA7BDFFC8B77C622D7B674514230D20EC3A0C0096E1B7D1665DE24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  AppVIsvStreamingManager.dll
- Size 179KB
- SHA256 88c0378500c5c7ad98f57ca302979f61b5b891c2b5abfa96d6acb570866bfc3d
- MD5 709afd8ad6d2490ec7d0130b4eea77d9
- SHA1 14abe1204ea16edc89b5266867075413809a4118
- SHA512 49216bfd51c3cc365f82f6f601e752142f60db996e7bc317bb1767dbb9940de6204257ff92cd6fad59cd1d5f45f755d3276cf1b92c5652c413dd107ae6833eeb
- SSDEEP 3072:TAj4A+B2LH4rFWGNU6ITLZe0F91F9Ndtl1tX+9nLkXFcO8ze7TzW:TAj4t/BWGNU6ITLZe0+9Lk7fzW
- TLSH
  T18E04B3BBDD34E817C3BE6CB49763CF20AB76E6614281220AD274D16D1D433D46F8AD29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  AppVIsvSubsystemController.dll
- Size 895KB
- SHA256 304d55eed46ac01f5fff53339705d3347904e06041f2f4aa18e68da463e21d7d
- MD5 aeae9f02d3b608c7f2da33faeb8d77fe
- SHA1 848441a67592d4288234765a0c90752edd683f88
- SHA512 50ec05377d2902ea06b940283542291c360c1f54427729a7eabb2006ab2765f2a49df73a4588ee62bcb1db47a0a1bffe0ab65e8d505222c1b5fc4c7d16ca39da
- SSDEEP 12288:9CF1+/8y5tYZt/MuJrPyNttLXN0GNUbTAFk9685oPnpSgUr5pH:AFM8g20uJrPyNttLdJhIgUrj
- TLSH
  T1AC155C1AEBA8526DE57BD7F5876B8932EBF3B4414230970783A0C15A3F577A01A2DF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  AppVIsvVirtualization.dll
- Size 460KB
- SHA256 a36ec8dc280fab306185d9bb254115bb9338a91356f78e23d272ba0addfb2e3e
- MD5 6e20b94b28e564dc7034f3b938593971
- SHA1 9387eb24798ddacc91d6afeff5e00e03e3d8abec
- SHA512 23b046b72a6dd21a6f95f4e5fa976ec91fb211ab6e4c8c49e2ca5a53596b706941de5f35027229d7adf3b5ff1f25e230969325b5624e8c34d5405b8fc4c5d106
- SSDEEP 6144:uW5uQi3GRgVp9FEIgtrU1ZfMvwOGWGNU6ITLB61wYLEWNgChl7lkj6m:uWkrTVDiI11vO/GNUbTSPg47Y
- TLSH
  T18FA45A66EE649425D2BBDAB48777CA32EB727C5142609307F3A4E1662F33FD02219F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  AppVManifest.dll
- Size 855KB
- SHA256 6b67f4aab5a188c275459ee77681fcba1b7f99f40f30b5ce7592d0fbb0104207
- MD5 f408b994410f4e555cc3534d8a464f8a
- SHA1 737d51c650d18069adc35ab8dde45744c49b18a8
- SHA512 b3608753f18eb72ce0d39e03ddfba28c9db9dcb59ed4cd4789b55d37fb328a7313efb3dff0c345b8417b0a5ef87da80a91a43e00a128dec7ad546bc9a9a14356
- SSDEEP 6144:k043OpkBi/4wr2CANtxpKMnWYlYmk6BdVkLPhrQMBDWJdkzjoWGNU6ITLJidEexA:k043O6YmBLg5GNUbTdiaXl
- TLSH
  T1D915B603BAED0610F6B79FB8D9778460AB7B7C510934E30D0299954E4FA3F4198ABF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  AppVOrchestration.dll
- Size 736KB
- SHA256 8db4eb6556ae63c8069dcc5c7117c637aaedd07af29f104b52e164724fafa6d3
- MD5 396b956a77ffbe44ee6fd19ae7f7dcc5
- SHA1 ea2a3c3822bea23f0cfa22ec745fcbded5898628
- SHA512 37d82303d078dc4c00432b36f810dfa338c2cbab19d62d39def3b7d9f1dcdd7b8f5badbc85423529fcfa6312d0bb091cd5d6b4cca7643335ae4a66939996f79c
- SSDEEP 6144:CP3DH8DL9UxfHtIdPpQkl3oKPbY3b7cPfYJNdyUYoUlm0uw3ZOGveiHzGjRrg67a:+0Uu+Z4HqgefKGNUbT+9kqt6
- TLSH
  T1A6F44B11FAA85324E5BBE7F9D6778632FB72B8814230934B43E0D07A2E23B54196DF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  AppVPolicy.dll
- Size 936KB
- SHA256 94ced6c2041f65f50515130f9cac987258d092fb5c379276353b66822ae39977
- MD5 6c5b543a7c3c27de1b30e710105b5dcf
- SHA1 91f8c4d9a1a641cd752a30833f9408018b248263
- SHA512 befcfe24d80b84b78638b11f71f5209d24e60a66a55d397f1eddc39219c9442572c6303faa0e0f4ba61d0aa17918d948c6a86a8c43317bbf5dacf5fd3636b85f
- SSDEEP 24576:suvHZVKgySj3GUuzZ8/BYSOHePkFp2kSvO42:suvHZ4gBGUuzZ8/BYSOHePkFp2kSvOf
- TLSH
  T15415A403BAEE0614F2B65EB9D97384609B777C414934E34D029C694D8FA3F40D9A7FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  AppVScripting.dll
- Size 367KB
- SHA256 8411bd5326691fb240b45dc8a7185b2b438c52e86642f1734fb7100155b4d1c8
- MD5 29014cb77303d61ef7e4bb582f4239bf
- SHA1 33dda20e79b03d83f672bd5a5ac8673177fe9c9f
- SHA512 ed5dd86760914b7e7aac014ef5dc0076e571f6bbbab1d0d1e811366800be241800f49909557575406d64ff89fbb18c21d8d0e2d13cac3e559efd2fbd6a1ffc2e
- SSDEEP 6144:yxZge1NVSEP/f+LNMGkYM40kT4WGNU6ITLsUmM4nngKbSzL:oienVSEP/kM7kRGNUbT1ZUS
- TLSH
  T1EB844967EE649465D2BF9EFC9B67CA22EBF674214220E30BC3B4C1562E03BD0525DE14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  AppVShNotify.exe
- Size 216KB
- SHA256 35bf7394f4757f72c8ee930ec0f4ce3c4a7074d594a6d98c9ba690ec7f78489e
- MD5 8f9c03e0edc460de473db2975e3090a4
- SHA1 15e239bc4c2873ef61247a11d8d85e099a17c198
- SHA512 c7c9b07e4027910a0353088418407d650d708e6828581fdb45c6620845f6b045e70a13c14570e9599ff453b7d5b665d6e44cb1e8ec72f57df62bb90ac050928e
- SSDEEP 3072:bgOwJ6o+4Zy093Ao2baDbWGNU6ITLLaWM4grs0wbA/JSTz9:WJNyBmvWGNU6ITLLaWVgUAI
- TLSH
  T1302417BBDD34F4E5C3BF9DB4AB62C720AB75B5314391230AD278C16A1E022D05F99D29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  AppvIsvSubsystems32.dll
- Size 1.0MB
- SHA256 44f42ad53a2fbd69d2f11dc5f789343ba1d20721c0139a0923129515de23ac6d
- MD5 2f7f63af69ba55e2d57c6529df708e86
- SHA1 cfb126fdf606188c4dd8172dded97a3ef9d53669
- SHA512 46ec2dde85e0407ecdcf5a1259540330ccdc31991c05deaff64a7e33b12af2140b9d70ca2914d63b2f9553f39d25b951dc2c98b664dc5cb8dd514f8d7504a6f4
- SSDEEP 24576:ZT2DmkNjz4Hz9IyS2PeUYLv1KJ32edgkG5LUfLTX5:SN3Az97S2WUaMhg55LUfLTp
- TLSH
  T14A356B73A588C438F2BF0A712A38D3648179B5720DB1824F77E497AD2E715D5DB2AB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  AppvIsvSubsystems64.dll
- Size 1.4MB
- SHA256 d68b24a9cd3dfd4f76d0efbcded0d42a9a13dbc58718868d7dafaa14255c0032
- MD5 e141466145b2a1ca3383ddeae7924071
- SHA1 705fb55b9c5c9ca1f03df35f21686cbb5ab993e2
- SHA512 11b48f46795fa29d141813cb39570caec82cfded171200c4f5b55226222627cb5ea058ca3c6739c55b45334474073472b73a99748ac2bd7a7ca500bd5834e658
- SSDEEP 24576:WBCWLoeLDGmqBpmK5o0qqlsoIL37ntDc8XUm1vnS/gz/fM:WBCWLXDGmwsmTlsfvEm1PsgbM
- TLSH
  T19C655A16E6A88264C1FAD3F4CA77C913E7B27455833093CBA7F8954A5E17BD08A3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32