fad4350564c908fcc2769e758a7faa89836b22e4b03c6ed3b7ff3753885b54d2

Sharing

Copy URL Twitter E-mail

General

Target
Loader_v9.2.zip
Size 5.4MB
Sample260904-1ect3s1cnd
SHA256 fad4350564c908fcc2769e758a7faa89836b22e4b03c6ed3b7ff3753885b54d2
MD5 f9440ee06c705c427fd463dcdd093b7c
SHA1 aab3d67e9c8ea14d77db4440e4576fce3e05f2d0
SHA512 019627a090d3ef4c055a7649ca30639d71a5604ff32c3094e9af893e31ab8dc476db26929ce5222c9da825d0cfe7f528f36c481cd3bbe06c700e2c6bc22f7d14
SSDEEP 98304:7DGmDNEg1ilEWw0CnvviMkMam3FjXeQXMAHBnuFH1NGu9Ov82GlC1w4IRvD6:3GmDJSEECnv3ko1rRNu5nfAvrGS/kL6
TLSH
T14A46337A4BAE88BFCE56B1B2541648B6D11E00CD6517737ECCAA4B0EF871C8E57D284C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Progisp v1.72/GIVEIO.SYS
- Size 2KB
- SHA256 f382ce8aa73a3cae1e45a5de6b525453e4d038018e4e8f0ab54637074915bda0
- MD5 e12640c393c1847e91f8417ec31b8e9f
- SHA1 2c5c469286d494da9713443bc08206bfa201e859
- SHA512 382017c5c24dc7f638411f4d2dc36096203649b945fc6e979eb4406fb890399c17b18f62f619183fb10196707ce8b9b0a65f5fd6962212fe899900cec60cc51b
- TLSH
  T103418301CFF92817D9E801B8ADA30025B069E8E80771411F8AB8D83FEE40B96D8D9327
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  Progisp v1.72/progisp.exe
- Size 577KB
- SHA256 533dd3ccc2a4f1d9779a2c91711930b135d52d97d1750db98433b4144b11ce9d
- MD5 c1b29586ebe8c3fd4c327cdb66d76590
- SHA1 518cb3a7edf803fbd0e8ea80198d2927e4e1e611
- SHA512 dd7fa188ee2ce9236043098bbf12879a87f8c7f183849e391b4939992d2dd5ac710223095dd5bbcb6dab800ca554d320bf0cedf52c72d057cac6021d66c28bd8
- SSDEEP 12288:hQ/SYmaaus/5fVFvRDCWG/+q8fthmvhCTL4kPggvYh0oqFa:hQ/Sya1/5tFtCWG18fmvhCf45YvjFa
- TLSH
  T1EEC401CB521D27D7D5896D7BA96C1C22C09F9CD1AA4DAF1F29ED9C2728C38D8170313A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  Progisp v1.72/win-driver/libusb_0.1.10.1/libusb0.dll
- Size 45KB
- SHA256 7b0435eea934d0f6aa12c905b3a4cf9b236f37c74fa96a052127e4d4d8ae295b
- MD5 e8de036be0a6c52fcd3a389848c94a27
- SHA1 d76e3d92547c21c9be4834d001c5576cccba4a18
- SHA512 a34de58cfa075197c85c3085b98bd1616cad9bb2e2264ff5c3dd4e0cf9b9563fb4923212bea2c458eb4ca13c841e0e3eab37757fc421ba00911eeb7f2532b4ef
- SSDEEP 768:Gh2TvVpEla075Ial4GOYFG3jn40QX1r7jLeOMzp6FxAws0sssIlyHSbm:Ghl00B944ZXLeOMCxAws0sssIlyHSbm
- TLSH
  T11F23C3077B8B04F3E1630131159BB5BFCBB4DC1091E4C16ADF642EAAED678D9762E205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Progisp v1.72/win-driver/libusb_0.1.10.1/libusb0.sys
- Size 33KB
- SHA256 e0bb3dbbbddc7613003389fdd94f295f5d7be10f9b1f3e62ca59a764e26e6c3b
- MD5 e2f1dcf4a68cc6cf694fbfba1842f4cd
- SHA1 a1dd80aa8e945064e9e1d83689f7e2bc261a7549
- SHA512 9e63e81418dc49e7fa48cb5a6466c97e5811ea85b9fc1e590450fccdd8bfb060f14476f536f95334ba818092415f68a7481e435d976c089f76ee75ce2039e62b
- SSDEEP 384:E8lAgLsTA0P/LEJ+t3eRbAebs9olclrPKsMJUffgVwMOTIm7S:E8GgLsTAkjbMEoctKsS4Im7S
- TLSH
  T144E2A622F20208F1C22504778DCD2EFF0E7AA1DB9586D14ADD9E8C40D57A6D77ABF981
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0.dll
- Size 42KB
- SHA256 ee7c1b141bee34a4b1d819ed48c84c859e8dd44bcae577b456f60e3fc359c80c
- MD5 90745f9e96b5c661bb74b69407dd6ceb
- SHA1 820f5bc61545d5eb38c973cb8878ebd4c1743adc
- SHA512 586909f5aad4cd4cbdbdc669cb0f2bf0c4a5c74667ec09289eb95d3e80d91dc84dcc6cfb061167c28e977f72071f5dad1597a3133dacf821332d5734493dce53
- SSDEEP 768:0HivL1/pHX8wcdfpizGlwycb6ajy2nZ6RBM601jV1:0M/tXelpirecD4BMt1jV
- TLSH
  T121131847B74B48F3E073913092CBF6BF8BB1D96485A1C62CDB944D6DD8AB8C9711E209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0.sys
- Size 28KB
- SHA256 4d544dbe5c70ee0533ada42a482f7653f4fd72c3318bb56de2210f3dbc265388
- MD5 34d6730e198a5b0fce0790a6b4769ef2
- SHA1 b255a19e6477a566feaec4711022c218b4e28858
- SHA512 139e733d789cb5b8f7efe794b91ee0272f92cc3deb5d84ffc2197fe762d63083a1db43f96413cd7274d9b9c610025e235b3b376d06eb5382aebfa0f7aa40d838
- SSDEEP 384:/HrxQ3qrYFp1LRy8kMh1KDPPG/IGfeUaTaRJ/OlxAk9v:/HK3qsHNyVMh4Pe/moe
- TLSH
  T131D2F9637A0744F5C1131CFACBDBB97F0A76F2C181589B6CE78C4888E4678E09E1E656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0_x64.dll
- Size 42KB
- SHA256 2a6f5dd6c76bb5d872ca70067ea7433d83c992c95219d6b281002368166095f6
- MD5 562c4d7928cd4ad1af39d61198926c55
- SHA1 3c92ddd2710f180c08550f1ebb346221022a35f5
- SHA512 2738840393a1d21fc14bf91cc1205cf28715a6f933b57bf8cae345a07ce812127ce9b8a6754cd2bbc455e9ac11e0d7d9aaa48c68a6b958bbcb1fb8c253b9acb4
- SSDEEP 768:uQbd56NZqNzz28NO/ssUKFIr15tEEJ2/26jyYJOrKkX5EO:uQb5RNOkxKaC2x3X5P
- TLSH
  T175134B1BEBE1046EE4B3813D9ADB452BD6F1B0004B3693DF47B08548495BAEE953FB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0_x64.sys
- Size 16KB
- SHA256 e0e0bd92fdb2b58e147da54a2fc5463ab58cd1e0643fe79864debf33217e9db1
- MD5 020dfdb1927c996c990e70ed86cfdb06
- SHA1 5dd792832ff584331b3dcec7309b979be2221f43
- SHA512 412ba22e7ab8308fba3038c32835cc38a598ecf9b65171a20ed3092eb2bec1343ae1b47c359a312088f6bf807cbf563aff5861e5d092ede7466c00ce728d9486
- SSDEEP 384:l+y362Z9idTD2h7g9XfkVE5NMwTZZN1nHRe0mP+L2Db:B62Z9KTD2e8uMiP1xe3P+c
- TLSH
  T1B7723B89D29455DCD5B7C13A86911A37EBB0FC218B326ADF528181236E22BF0FD3D742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  Progisp v1.72/win-driver/libusb_0.1.12.1/testlibusb-win.exe
- Size 13KB
- SHA256 451b81b867c31c4847888be50a67253700fe9078591ed6bade24c942457849c8
- MD5 15d8ed1fe73e7a691a65dc3dbb27fce7
- SHA1 cd8c53241a73c39ee37188e0ef0d47c0b9e8a9dd
- SHA512 e399ab6c77c3644e0d5fd23d796b94a6d35d1dbc3e39993497de260cdfc5684bf4f95d796c693927e2ee7b8bf66f7a513f22c93c36d99e4d0a779ce30b1e6605
- SSDEEP 192:p0aZqPDmh+OwySuHU9HpgCsv0NMyfxrQc7k3Pz+SHgwNJnvunqiOXGkv:tMZylU9HiCsuxrQF/yS7NJQgv
- TLSH
  T16552C663B5827AF2F97B8034009BAAFEDE31F1225C15805DFF9C856A6B275C9750830D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  Progisp v1.72/win-driver/libusb_0.1.12.1/testlibusb.exe
- Size 8KB
- SHA256 3b2a2e0190fda1798d32844edf99c55aae96e3636edc9af4b8488c11a348c1dc
- MD5 e687ed0ab71e2048295f637333fb74e4
- SHA1 70b635c4bce6579ef63886bcaf26136d9ccb6642
- SHA512 ce1c4dfb6642d58431bd85e4fc8d36901e445365e28741869fac8643518c53e9a910b2a0c14cceb72c940ac5b97184da6ff24d554afe47aea7024a6baef1eba5
- SSDEEP 192:9Hz7aZDJFqxa2DncUJknYfHE1oyFn4Inn:9HQDJRUJQKE1wen
- TLSH
  T157F1956B31433AF1E52F463D019F9ABC6F35E1536C56D02EFF9C880A37275A8780A508
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  USBASP_write_0x44.cmd
- Size 172B
- SHA256 d1d356e2d55b441c18c28fe2de4be23fee343c4e1357bb9bb07491f88bf32e6c
- MD5 87c885191b91e7226df1d49fbb27ef14
- SHA1 431e6a02a53dc712b320dd26b7b6fa13f9177905
- SHA512 4ee2df802f78b811ac912414d1b0f73a1a41d7b48a9de3bfdceea284ec3bd2dc03bc2cc130fe58d0cf1b0424bc0542b996118016ebecc4a1e79244b11afd6a6d
- TLSH
  T176C080E44D5111BC4C0540430953FC99D45BC201577B1D55F8500D55F47D4C9EF30C34
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  USBASP_write_0x46.cmd
- Size 172B
- SHA256 152e8d7881792183e6a7fe9e6c474c0933c197b9bda844d09a8e5bfd8a686eb0
- MD5 2ae4b855c2a981d8a9db37dd03a14b87
- SHA1 4819914411d9585fe6caa85b7b3d7eaec9a3315b
- SHA512 b4b3123449cf74fe591db040d098acf7584d83f4f43a5fbd865f6bff1c9a4018e2ded787e221ee8015db5d69bd144a3a4ff9e58b1615f039068c779665382ec5
- TLSH
  T1CBC080E45D5111BC4C0140430553DC58D45AC202177B2915FC100E55F4794C9EF30C34
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  VAGCOM_EEWriteLang.exe
- Size 929KB
- SHA256 75d82e82c0dbb185e9c9972f933d863ed0fc64529efc018c22ffba12cb2803b4
- MD5 cd21ab1eded1740ad519746725ee2092
- SHA1 8f9761c3bf0400b719075eddd4652f1cb3575222
- SHA512 4cc605be934c1e14be7ba57587c5a176e3a7d5a49d31717bf5b3f89102fbde399b0ce0cc7f570d2e424b254882a9441a916fa30a22ca74c16dec56577cc26c31
- SSDEEP 24576:RyEaXTpDnjSqc4Pl75KGmE8ZAlhjUqhQK7xIL+pCP3:MEaDpDjSqcyEmlUmQK7xIL+ps
- TLSH
  T167157DD5A9088881DD3616F4142D9CF95F176D3AF8192A4CAAC43F531B633FA0C3AE67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  VAGCOM_HWType.exe
- Size 604KB
- SHA256 b108e8009004fc444dc5b711b130a1d5837687b2453e715795cd0831ddcd12b6
- MD5 8461d8ca895bc29eda4835d1b930f225
- SHA1 f59708c454ab158206dce39e1c233bd73996f142
- SHA512 a02f889e1ca547471e4b3866fb6144df5272e2663807505b7aace73d9dbe8dcbd7b61076132429a6f72359855d4e93151d25fd9bd91bbe9dfa4e2597bdf58614
- SSDEEP 12288:hVlHekwqO7z0/3Dk9fGtznXzXeAwXUryDJ869Lq8Xa:DMlmzkQtrXzXeNEWDv9OX
- TLSH
  T151D4235246DAA49FE0F0B6F1B8B64458418EDC5E829E47A7A379FE274C371B3CE0161C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  VCDSLoader.exe
- Size 2.6MB
- SHA256 8f661f16c87169fefc4dc7e612521ad8498c016a0153c51dae67af0b984adaac
- MD5 a1e2879a10d20f2b72cb94204a2c1e9f
- SHA1 da46a17c6cac86e34b0134e32ef0074b538e6a0d
- SHA512 1bcd89994938b2be245e48489f60eac3f1f4a16a2fda1599005e55831f9e982c5107952fcf54ff5b556f2bc51ef2f06c4d674bb50deeff34fe222bdaa145e16b
- SSDEEP 49152:KE5ZT77/MV2zSKgMcL/ULrPOKB/HHrjfeBnwmtF7M3XVWfttR9fsQh6DpjGehfyY:tTvSKgMcL/+rPzB/HHffSPb7cXIf3RFu
- TLSH
  T143C512E97B519550D840CBB69027DFDA601EEDE13E78FA7A1866F6224F732F148031CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  _README.pdf
- Size 661KB
- SHA256 e53d0828598e31be1c577fdae11759a91ba545a65a1bbc5998565856dc3afd4c
- MD5 0d03950e868ac13c0660db936f1734cb
- SHA1 db2530bcca717181d5a5b01393e146788ca30084
- SHA512 f287ad7461df75d6aa2c4dbf59d82a6ed2d4ce4e474a845919bccb4a17c2abffbd128ecd170d9b29cf6c464b12f60308d235a54546fe6eb02773c7b9f92e5dd7
- SSDEEP 12288:Rs/mQLXbGg3N+RQw41Un0xEGG2Dg5elxo/XD+4StjOBzkqwxy6zOINX4:hQLfYRCTxEG1Dxo/XqeN7
- TLSH
  T150E42327DC056503E807C359BE678D5E666AB39A3FD4B6D6283A0FC378209500DE98DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral16
- Target
  ftd2xx.dll
- Size 267KB
- SHA256 2c2683d92d7f6607a0be17b143bc564107120eeaf75812c74bdcf28d956e05b2
- MD5 45e322c581aeb3efb0eb93ee16c291a1
- SHA1 91bf8715bcaab20e72ef4b388114d6ec38a4d665
- SHA512 f62ff4d2179974eb3d2aad572f29b9ae2e67165c44e48616097143629391f95736eb2b736b3cb74ee667fea3f822a942900dfc855e41b03379f76bc437bb946d
- SSDEEP 6144:EavgKexWcg0al051mYnf9dyxdO6N/+Rg1:EDzgd051Jf98260c
- TLSH
  T182448D5178C4C030D8BB02765569EA5206BEBD719FB1C8CBBBC81D4E5A345C2B73AB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17