2021b93cb15159d6c8c8ec80d4fd77346b3d8ef1b2645235274bb22e0a41621a

Sharing

Copy URL Twitter E-mail

General

Target
parkcontrol.exe
Size 1.1MB
Sample260908-lf4xmaxarb
SHA256 2021b93cb15159d6c8c8ec80d4fd77346b3d8ef1b2645235274bb22e0a41621a
MD5 1b7322c6cd72727332e1ae2cb0bc758e
SHA1 91e51a625bf1834a4e388c151b9a750ed4d01312
SHA512 daf6edc69da6e976508779a4a7ba70316355872a46d1703b8014f7dcc1981834fe3ceadfaed4239c3088e5963e68a038c5c2aeb61da92e9a96563d9f4fb98b3e
SSDEEP 24576:nUNiJjXafU5RwJi1729/86J4h9DAnzr3c+QT6GgpYEe9gcjgOfQf4:UN+qi172xrJcAnfc+QYETQQ
TLSH
T1A335234DAEA4E115D832A5710DFDDDA37634B610385A8BCB6F40EB20FBB11469C2D3B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery persistence

Malware Config

Targets

- Target
  parkcontrol.exe
- Size 1.1MB
- SHA256 2021b93cb15159d6c8c8ec80d4fd77346b3d8ef1b2645235274bb22e0a41621a
- MD5 1b7322c6cd72727332e1ae2cb0bc758e
- SHA1 91e51a625bf1834a4e388c151b9a750ed4d01312
- SHA512 daf6edc69da6e976508779a4a7ba70316355872a46d1703b8014f7dcc1981834fe3ceadfaed4239c3088e5963e68a038c5c2aeb61da92e9a96563d9f4fb98b3e
- SSDEEP 24576:nUNiJjXafU5RwJi1729/86J4h9DAnzr3c+QT6GgpYEe9gcjgOfQf4:UN+qi172xrJcAnfc+QYETQQ
- TLSH
  T1A335234DAEA4E115D832A5710DFDDDA37634B610385A8BCB6F40EB20FBB11469C2D3B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery persistence
behavioral1 behavioral2
- Target
  $PLUGINSDIR/INetC.dll
- Size 24KB
- SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
- MD5 640bff73a5f8e37b202d911e4749b2e9
- SHA1 9588dd7561ab7de3bca392b084bec91f3521c879
- SHA512 39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a
- SSDEEP 384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh
- TLSH
  T1F2B2E69157EA135EF7F19F347475EB2249BBBC214821C8CF5633268E19B2242E930727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 6f14c8f01f50a30743dac68c5ac813451463dfb427eb4e35fcdfe2410e1a913b
- MD5 ab1db56369412fe8476fefffd11e4cc0
- SHA1 daad036a83b2ee2fa86d840a34a341100552e723
- SHA512 8d886643b4fc24adf78f76b663227d6e61863f89e0cbd49548f40dd040666ca94ea46bec9e336850e4f300995d56e6dc85b689c8e09ff46758822d280f06b03d
- SSDEEP 48:S46+/zTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mxofjLl:z5uPbOBtWZBV8jAWiAJCdv2CmAL
- TLSH
  T123C19474B3C248B9C491413368AB33D36612EE746784500F9B6315AA38209E7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  ParkControl.exe
- Size 585KB
- SHA256 4d703a3ea70ab7a84f8506628b57ad15df9ee97b2f23ec2853c9aa3753a1fd40
- MD5 239ddddd24575284d302d1130424b9c0
- SHA1 449416d55d972d11948fb4a722897c56efcb0105
- SHA512 22f20acb47f1190e5029961faff11649cebd6266def783f939d2fea179ee0e26aed4b9992f392c07a09b64a3bd711fab45319b4d256160c194104f681c251818
- SSDEEP 6144:4kgeYqzi58Yj9fonOWtyQX4R0I0tb2txGpB1m4tASnUlg/22ZQbzfZEUTikpmYaj:qSYR8HKtxomGtUly222fGRumLEQ
- TLSH
  T198D4185FE6B623E4E4BBC03485526136F9713C9C47389BDB5690A6671B33BE0A93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral10 behavioral9
- Target
  pl_rsrc_bulgarian.dll
- Size 1.9MB
- SHA256 a0a0b6b05a6a7c959eb37a77c1c1a1b8bd99ced346022a43884b34ead044b586
- MD5 a490df79d28561e09568939e45f0635d
- SHA1 a13bc80d110bb3c19bfbe3434e464438484fab32
- SHA512 6fb0a3f847ba59c152fd7be323aa9a1d3e69920d8872e6b1529e9b563833527ce464f10091e17ac489c623da2a49f874985d8f1758864023440934243a19a251
- SSDEEP 6144:bkRfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dnvuDjFC8fB4adLxp7WGCNE/Jt1icNe:bkRfcH9vunFzLXKGh4ZJe6cwTqREewn
- TLSH
  T1F99592CF647ADC54F108EE380E904FD914DB3E8DA93835797A3B7919A83C2762528D87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  pl_rsrc_chinese.dll
- Size 1.8MB
- SHA256 a64afe491994f8e0f0c039b4b83102eb43a9b4e835643976955d20d18bafb0a0
- MD5 1f6096020fefa21a352ccfb9fabdcbe9
- SHA1 800ef6dcb071b38815e885215f30fc7376f71e29
- SHA512 ef0bb070dd4d22d371b3aee5637dc1af55ebe7aef1fbaa8f0285d2dc6457b753aa4370b06222bc02a6b1cb962edafb325b80ade844351fa71083b6aeac8dccba
- SSDEEP 12288:jfcH9iVcFzLXKGh4ZJe6cwTqREew90EEiVIz:jfcH9NhUHTh1CPz
- TLSH
  T14F85D5CE1476DC99F61CEE781A804F9818CB3C8DF83C353A7632751EE97C2765828996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  pl_rsrc_chinese_traditional.dll
- Size 1.8MB
- SHA256 06a17651accc6d58a2e94964c52eb22341bd529e11693720a6b7f390bf8c9b5f
- MD5 057ef4e61268957b4776978168c45500
- SHA1 4d54f9b2789e33e36b89a8c160d1ba246520a18b
- SHA512 f7c1ef6bfb389e4655dba9583c1fda2e36fe5bf1aad78647a0c274c2247ab60a4ed1ed75fd9baf850235fdfa74b7e7d0bc98bb89d4128e765013afad102d9f67
- SSDEEP 12288:g+fcH9zgcAqFzLXKGh4ZJe6cwTqREewMSzdl:5fcH9mohUHTh1dpl
- TLSH
  T17595C5CE15B6DC99F51CEE781A804F5818CB3C8DF83C343A3631751EE97CA765828A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  pl_rsrc_english.dll
- Size 1.9MB
- SHA256 b5ea322e6c1bdd84de2d56eca77be67ff0d85a7681dd0588dae1c09b8fef5048
- MD5 618679fb5d723656ad404fb1dcd26772
- SHA1 5d7f8772aaa351881c9babbd756803180d922c28
- SHA512 981c1c3354ee47f0e0447a3eab9a43106a3e25eee6d9e421dafde8f9bc533d12de95bd2ccf98530e7395ac4b794ce12c0ded91ba47a4b3d41c48063b8a9bd6a5
- SSDEEP 6144:ufFa9MmhuV2FFdq7qFrwnim0gsZEeV3dncdgBxjFC8fB4adLxp7WGCNE/Jt1icNa:ufcH9zBVFzLXKGh4ZJe6cwTqREewU3S
- TLSH
  T1099572CE12FADC58F179EE781DA04E5818D73C8DE838B13D3A31711E99786669828F53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  pl_rsrc_finnish.dll
- Size 1.9MB
- SHA256 92d6d9399b00fa3cabc0c5f53bab60d2a14abd2dc923374f7e7062ec9ad25535
- MD5 244d0c4b369301e774ce6d2037a3d249
- SHA1 c86a6fac8deebc2ccbd414d482b866aa098dfce4
- SHA512 dc385d3816c4ac0bbd250622ec2526fcd235507891886058b0a690f098302823cd2ccd140fcb9639cd87a14da1c7289ce9ebdbddda1154c1577edd34d3c5523d
- SSDEEP 6144:LfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dnhpLjFC8fB4adLxp7WGCNE/Jt1icNE/m:LfcH9hpvFzLXKGh4ZJe6cwTqREewgew
- TLSH
  T1519583CE15BADC64F27ADE381DA04F5818D73C9EAC3CB0393631711DD97C2A69828B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  pl_rsrc_french.dll
- Size 2.0MB
- SHA256 5a8364844b577fe29db84b0deac2a3f18b1f4927b158d6993136a0d5e0e9680d
- MD5 c2e57e2e657d8235b0ff02848964f115
- SHA1 b749f9dfa3f95e8165ff185882b189ffc3375bd0
- SHA512 5360d3029d8330d1bfdf1dfe3a23ce23a9366ca42ca7c808781ce594756be3d0499a6b3399aec514b7f83409d6fd9765f74ecbfcd6af785b4b0f92501f1f14be
- SSDEEP 6144:kfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dn+uijFC8fB4adLxp7WGCNE/Jt1icNE/Z:kfcH9+uIFzLXKGh4ZJe6cwTqREewGUl
- TLSH
  T1669563CE52F69C55F279EF3819B04E5418D73C8EEC38B03D2231715E9D78A669828B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  pl_rsrc_german.dll
- Size 2.0MB
- SHA256 21142277b90770df26db8517029e3dc91b36399537916350758d50fd29f14805
- MD5 9dbf5de169b888ca08d72e4f8f3791bd
- SHA1 a3f98bbcc6cf9a56f647e8da0cc0824e9d59b1f3
- SHA512 3fb3a165624f2c761a0661aa344a963a6a64a101ae96177e6f8866ae5dda77f51415bba70aa327a6b9c4fdf56c88aa359bacc2938da5fdd790f1adaf39806063
- SSDEEP 12288:XfcH9FRWFzLXKGh4ZJe6cwTqREew4OEiM8/:XfcH9UhUHTh1rMS
- TLSH
  T10BA572CE16F6DC58F2A9EF781DB04F5818D77C8DF838B43D2231711D98786669828B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  pl_rsrc_italian.dll
- Size 2.0MB
- SHA256 d7a7e32b5355fde60647ee0b58d2104a250950e3d9df0d8e7121ba9f2ca38ccb
- MD5 86977e3287379dbbc9eddb527784d7a6
- SHA1 d742fac00ff03f0b2d75fa0dab50f36f3f64e9da
- SHA512 807b5857bbd13abe42aebfe93a30dc66f6797cb8f3aac2429d1a2d50c93513703441d12b021fb3581594b08d9e100fbc0dec9c1adb8f93d0d0898c9df4c299f9
- SSDEEP 6144:KfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dngYVWjFC8fB4adLxp7WGCNE/Jt1icNEJ:KfcH9gYSFzLXKGh4ZJe6cwTqREewEM
- TLSH
  T17E9584CF15FA9C5AF1BAEE381DA04F6818E73C9DE83CB03D2231711D99786665824B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  pl_rsrc_japanese.dll
- Size 1.8MB
- SHA256 a8731d37edec72febae1587988e16aaaeed8f83a19ff40a9e5db3217d8dc05a4
- MD5 e439dfe6840c48328d302e7e20fe6f6e
- SHA1 f1074683771de14cbd770d85263be7ee3e17ed82
- SHA512 54afbee0c5fd1bb4c7d6b82fb8cb9061f8396fb3017f941e17ec93776ba66de2f5ca484c93a32521e2c9b4bb48529cfe9a45a12a7c8b76d99abdf1d0a82113f9
- SSDEEP 12288:VfcH9aAGFzLXKGh4ZJe6cwTqREew97nWOhfAm:VfcH9ghUHTh1B5Am
- TLSH
  T1A195B2CE25B6DC58F11DEE781A904F9818CB7C8DE83C74393A31710EE97C6665828E97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  pl_rsrc_korean.dll
- Size 1.8MB
- SHA256 c9bc918e1e699d46c958acdb7ab6baef4656f6ea8c600e727c9d1bc25e5abce0
- MD5 a4533b458a7c319bbb59e72b094cffa5
- SHA1 604f8b64dab0b93c2a70477f60828b8480b1d129
- SHA512 d7bc54ba3cc2962e3ad56ab7b0adbee5181194ab51e4b5a49bb9cbfcdae3f32a228f431ebc6d1bb7f13b868b29866b5c2d3f42b3e6293fd7ef241c753fd312a1
- SSDEEP 12288:zfcH97ar/nsFzLXKGh4ZJe6cwTqREewtTds9AftP+:zfcH9K/nKhUHTh1tTS9EtP+
- TLSH
  T1F795B3CE2476EC58F51CEE781A814F9958CB3C8DA83C343A7A31751EE97C3765828D86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  pl_rsrc_polish.dll
- Size 1.9MB
- SHA256 b4c5e949fffb3bab42f339ac5e5a8efda63ea0f67d2756b481f875cf54a5a05f
- MD5 836d59e259e1df559792dfdd50bc2fa4
- SHA1 e069c05dd8e726d8b8172d8d4d6a2c4484ca0fcb
- SHA512 db59ae01180bedc6d8bce641e0f5eb2b2f051d4ffce71754f2a5506a28661734ea82f1d1ddf28d0f4e24f444128efd8c182f8adb3cd0c77c5beb67e899a0a851
- SSDEEP 6144:lfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dnemOjFC8fB4adLxp7WGCNE/Jt1icNE/2:lfcH9em8FzLXKGh4ZJe6cwTqREewO
- TLSH
  T1F695B5CE11B69C54F17AEF781AA05F5818EB3C9DF83C703A3631710E997C6A65828B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32