6fc852617179fc5674cf2fe751299e6adb4ddc6df947fb588c549f3e16918234

Sharing

Copy URL Twitter E-mail

General

Target
SvcinjCrypter.rar
Size 2.1MB
Sample260905-qtypzswapf
SHA256 6fc852617179fc5674cf2fe751299e6adb4ddc6df947fb588c549f3e16918234
MD5 a8cdd0f5092833cb57bf168944b590ba
SHA1 a7f3efc552915a620c4f679e7ad35f39733df5e9
SHA512 4c84e45d8bb04b10f292316732d91ffbd287bf443622caa6a291d66026ecb189b77b800228f7297daa0c9ecc6307a6dbfccdf442ac74e2d90d64b03de4b76692
SSDEEP 49152:IEviJSRHPI1Yc1a640Ab5XaNsdHIy7fBXNoeNqK8mXyvqk:IEvGSa1R7KtSGoyjBTyvqk
TLSH
T130A5332CFFBDD24035A92F63E629CEAB01FB621B94B9D12F154B1123D461BB8C1546F2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  SvcinjCrypter.rar
- Size 2.1MB
- SHA256 6fc852617179fc5674cf2fe751299e6adb4ddc6df947fb588c549f3e16918234
- MD5 a8cdd0f5092833cb57bf168944b590ba
- SHA1 a7f3efc552915a620c4f679e7ad35f39733df5e9
- SHA512 4c84e45d8bb04b10f292316732d91ffbd287bf443622caa6a291d66026ecb189b77b800228f7297daa0c9ecc6307a6dbfccdf442ac74e2d90d64b03de4b76692
- SSDEEP 49152:IEviJSRHPI1Yc1a640Ab5XaNsdHIy7fBXNoeNqK8mXyvqk:IEvGSa1R7KtSGoyjBTyvqk
- TLSH
  T130A5332CFFBDD24035A92F63E629CEAB01FB621B94B9D12F154B1123D461BB8C1546F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SvcinjCrypter/Guna.UI2.dll
- Size 3.8MB
- SHA256 8e0ebe5cebbcb46b3e870b6bfb20412a52f534240846220b7a5da7cad2d71903
- MD5 a29c7159170dc36961cc7c6ae0ac6e40
- SHA1 8fcaff77cda4dfca269f12d7f7284bd1dfb35df3
- SHA512 475b1695efc339b52d052ff17e7f9e245e1973f5fa93b79f482fb8baf9757d539cd8d5582544663824d091ad6919e315c0c524b055756a219bbf2fd901bd3537
- SSDEEP 24576:cVaMMD+dmfoN6y42wVXXicKsZv76OqM8wd/8++XJVkhIiA6Gu1cJCyHQ/jzhpb:tAR7wVCEZvum8wJ6T6nmO
- TLSH
  T106065B023B919417C16EFFB7A463001C87B1FA15EEABE74E7485F36C1A9B36458423A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  SvcinjCrypter/SimpleObfuscator.dll
- Size 1.3MB
- SHA256 2e1ec55f41c6f928179dd89dd672e8ed612f2f59d3642412b895365e65ac0279
- MD5 9200f1cd66a7338e48cac4ff660d5f6c
- SHA1 fc4f61241ab7a0d956d200753822c1ffcc1d2df4
- SHA512 e96c531f4dd9441472ad6067516a4e935122e980377c92bac8e537e6a7bc136b76a9130353257ee78f23d864ee75156b685986ff5b23a2430d5f78ffc17af407
- SSDEEP 24576:/+1LkeJrpjIMrRN0phVFCpEblUkdWChDEuTOLgDSRU8iHh/v7fT:/+1LXJrAhVFCpEblUkdWsX
- TLSH
  T1F4556C1477ECDE27D1AE5B75A0B005204BF1D506F363EB4F16A8A5F82C53B05AC862BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SvcinjCrypter/SvcinjCrypter.exe
- Size 336KB
- SHA256 cb2d35ce9f1f587bb8b1b4e0db8bacf1966f50e0bcf2de1828da0499029a134b
- MD5 28edea2563a1dd23a24009f053030bb1
- SHA1 5d1570f74026e8e2d4ed01df27f92394150d2908
- SHA512 676b186ec564d113556a942bae359b5c85c8d328adf209b953b41a2e86a61c27895296de82070e39bfd62266f6a5c810b69762d5fad2e633540f152517c25017
- SSDEEP 6144:+9k+ePj6NOFqCy1FwONQRD6KvUdbzatg96e8:LBPuNNCyoOmWz8j
- TLSH
  T19374BE2A3394A764C47F97750862849087F2AD13E316CA1DBDCF70991F33EC8469B7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral7 behavioral8
- Target
  SvcinjCrypter/iconextractor.dll
- Size 10KB
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- TLSH
  T179223809E7EA4B37DEB7873654134656E334BA10994FEF5B05CA50642CA73A00B12FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  SvcinjCrypter/injection/injection.dll
- Size 167KB
- SHA256 b185b29b50062038c531c4301129bd06e0d51027e7512c3ecb41569413cea893
- MD5 c6b3538f7bf8c8a7ce900edf5994df5b
- SHA1 1c89d3a09d86ab5f67ea9877534451cf778132ac
- SHA512 ebfcb2d810afb3f267662700d3e54d40a83aa10b2a7b1c38af4cf909a7457bf1eb768085eba69e7af679f20a9d02cd73118f52a113bd2cdde05987b0a9e4a085
- SSDEEP 3072:fo4cTDxLDwpnNnNSeBfAEHBAnpK37nXxOalx+o2bHQe0UBagDeo7QA74tyohsaQs:fjwBDwpnRNSe9+Qx/nfU8FoisaF
- TLSH
  T187F33C0123D8492AEEBF1779F87523249775F8475873DB09B88C99FA9B237808523763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  SvcinjCrypter/injection/injection.exe
- Size 912KB
- SHA256 4a0dac9d63c87b726285cbcab13757db23acb82f29f4bd4806a26997ce11f5f4
- MD5 35a3dc21f6e0ed6a8423f7455a379f9c
- SHA1 631b3d76f02b386e0bac33fa8a0cb464cef984be
- SHA512 3abea20d1e5d6083faca67901488d9ce318a4f9929afb1b223a9dcff4fa440408928183aa712e6d0d25dbcea603da31eae09a481641a6bcde9e8eda95e336cfb
- SSDEEP 12288:X0zOaLOF4xKbTQ+ZyoMyixinEcD2B7I3x6cDjGCErg1oh:X7dLM9inTxtRa
- TLSH
  T15A1518587EE9E317D3AF67BE80F6155983EDE041A102975F17A059F91C23342AE202FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  SvcinjCrypter/notify.wav
- Size 883KB
- SHA256 e140f8c30d19899ae7cb17f494ce868f8d4328f3affc3df059f98d2e24211c46
- MD5 abe80411604dceaadf7b6e9a99720540
- SHA1 7d5b805660f287de39b7e18299b1935637582738
- SHA512 c568748b9bb3bcfa8087438012d85205ba1c0df0097182a21b2bd245e8f5ffbd255b82287d547be4dffd9a225868eafb5381d922ad4f3914c3e271904788d784
- SSDEEP 24576:r7I0CVcyQ15ufh2rNm3KEyiSOiypYczgo:r7Nj7jJU3KEVqczg
- TLSH
  T12215D0B2E4838E56E7C7CB77DBD26E100CA1B11CE9B8652F34C89E14D2D774071663AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  SvcinjCrypter/tool.png
- Size 30KB
- SHA256 19c70484e3c5e22f774ca5fb2b616087636f0501e22bbf3b720b6e5fe7c926fe
- MD5 3f491dda289085f97168514ce3eb4ee2
- SHA1 7fedec74f5d65499804c52ea8a3f92c1c683b6a7
- SHA512 3686dfe1ed9db987b3581e9bb7019da1c5a02e2fe043d72c437746e4a25e641d3f244d28d989cf7d7fe0e622d5428817e4133aea03b84aaaaf0365c29332aefe
- SSDEEP 768:fXUx0ZUe6gwQUJSLM9MMMMMMgpbeo+UQhSFtC8oN4NjMMMMMMsozg0FVKe0cGUQ9:fXqzezSmLNictFBW9
- TLSH
  T1F3D26B6C835381B0BA4DEFF09A69670170FA09D05654BADE5FB2EA610030D9CFDA73C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18