ac9dd64763ef351917393466ff534e8580224d9cb234007208a6537771fd474c

Sharing

Copy URL Twitter E-mail

General

Target
PineconeMC-Windows-MSVC-Setup-11.1.0.exe
Size 22.7MB
Sample260909-jcr3jsdk3t
SHA256 ac9dd64763ef351917393466ff534e8580224d9cb234007208a6537771fd474c
MD5 58f8892a67bacfe8bcd05e171b663984
SHA1 43f054afbc62731c0c7833a5e7b0542d7ae01f7f
SHA512 87dff716ae998464d9b95a2585fa8ec8c423f199bde97b057db3bcd16c8381845469e2cd1891f30bb9f6b4b8805e83d477303e2dcb09eb208d54a11790a3c34c
SSDEEP 393216:tcU9VeBresonBCBglg21N3RYJzk8D2RAIACcspokbGHM+zHaxsGd0GoPOtOoKpX:tQresonB9dhizk8D9CcsaHM+z6xdLIwu
TLSH
T1DD37237691BF954DE1ACEA7E017A2A0D303EAF0227B03305FEB2BDD715B4300B955A59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  PineconeMC-Windows-MSVC-Setup-11.1.0.exe
- Size 22.7MB
- SHA256 ac9dd64763ef351917393466ff534e8580224d9cb234007208a6537771fd474c
- MD5 58f8892a67bacfe8bcd05e171b663984
- SHA1 43f054afbc62731c0c7833a5e7b0542d7ae01f7f
- SHA512 87dff716ae998464d9b95a2585fa8ec8c423f199bde97b057db3bcd16c8381845469e2cd1891f30bb9f6b4b8805e83d477303e2dcb09eb208d54a11790a3c34c
- SSDEEP 393216:tcU9VeBresonBCBglg21N3RYJzk8D2RAIACcspokbGHM+zHaxsGd0GoPOtOoKpX:tQresonB9dhizk8D9CcsaHM+z6xdLIwu
- TLSH
  T1DD37237691BF954DE1ACEA7E017A2A0D303EAF0227B03305FEB2BDD715B4300B955A59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery ransomware
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NScurl.dll
- Size 6.0MB
- SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
- MD5 bf43de0fb8a2c38abcf7b1cf6be7e7ce
- SHA1 5c14855ddbf563da3bc14af40ea5650d627ab81d
- SHA512 145388afde1367253d723ea78501dfd61ebcfb17d440d324dbceb5d9b1c50dbd5a69946209722396f1d0f3699dc967bedab690dd670eedc9910b75a4e7d13830
- SSDEEP 196608:ohFz25oFKhmagHDetua42OOMoMy+Tgt/VqiWWO+ac88vdPkR:oXmSLTgtDqU
- TLSH
  T1DA563994FECB44F1E91384B0D8DBA37F9B349B118021D6BAFE4C5E56F933701252A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Qt6Core.dll
- Size 9.8MB
- SHA256 b98eea394a95563879b614dbd4432ce074b0fceeb154c3bae252f4e7a9376a40
- MD5 8119eae4c693c51b6760094df8515a9c
- SHA1 f7195e76416b8242c8d087a60f4ec9f9290672d6
- SHA512 0a7a795ea6d781ed53609b696ab98f7789b993052697f991eef1c9d756d924a1b8a829d7fe9c0dd9e8f3ff6858cdfd3ed15d872c1c1e885b1cd270b031b2882b
- SSDEEP 98304:4VLKyLebAofeVMKFdu9CwJsv6t6mJMSKgVcC/3c/:WWPBSMKFdu9CwJsv6t6mSStZ/3u
- TLSH
  T1E4A6390766FA0011FAFBDA34DAB75112DBB27C466B3496DF025861185E337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Qt6Gui.dll
- Size 9.1MB
- SHA256 28ca8b9e7d3d1c4e3cfafd6fe63877a05cf10202a240134a11f98384f01c9e37
- MD5 bf3ef92f9e109770a7effc3f623caa17
- SHA1 3dca2e5b640731c88921b26380c3af740b9a9b44
- SHA512 20ed40767f103a393e6ec7777d20bf484ccff1f08fbb698dc8d9b856e169d6cc31c2fe69893529d75feed6da5b6f82bc21a1a6b69a53096d0efd386daf1b29a2
- SSDEEP 98304:n17B8zKQ16be6OAZl5XWv7StQiYBNXcqQYOPTmeL:36ie6ZZTdtQiYBNMVPTmE
- TLSH
  T192A68D57A2A911D8D57BD13CCB9B9517EBB2701503629BDB02A0CA152F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 905e1ce3947fadaad566b6deffe345daf7f6efbc57207ea7fcdbfa77669e3de6
- MD5 db8f3337ef680c805b0c49504cea7ab2
- SHA1 9348cfb2f237047c638b231faf7714ac97e919e3
- SHA512 aaa0cda6c228b54a96c9c6d5b24f1345609f61627788f0e67329d68d515cb38393691aa78e140d1da34dcea1ee4a4ddf6074c31a199d6239ea2b34898ddc0f24
- SSDEEP 12288:D9onO5TLgx8PlBYyrw3hutJJ5za2rJq9OeBEd4yhexi9TQ75L3EXpX1mil:+83gxGmFRiJJ51rJq9OvdDhOi+75mXIM
- TLSH
  T135856B57A3A441D6D46ED13DCB4B8A0BF772700483669BDF02658A152F73BE22B7E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Qt6NetworkAuth.dll
- Size 285KB
- SHA256 2b2cee4bf6cd28c7c65cadc21089902062ac8c76b74340c7c205e2b5db79a4cd
- MD5 489b1972f4c7b330515b4739de58ad95
- SHA1 077934747efdf78732e1ac4a900ac1d03a091f0e
- SHA512 1f2dc46edea7651a23493bed86154b0f8f87c51a36778fbd3862c87a8e3f2b3add3ec4e779a0b6a346b6da66587f49b98fae7342854ea0381ea28c21150b386b
- SSDEEP 3072:nPntlHGgash+B1RBKQ5NSuxBqcKu215Pdp8CqhwoLW1kJERAXWBJnuo1kIuxmwBe:v/+B5N5Bqcf215PdpToyyiuGux9Bfm
- TLSH
  T1A1542917A3A20DC2DC2BC179CA5B8613E6B374004752DBEF46658B4A1F677E2BE3D244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Qt6OpenGL.dll
- Size 1.9MB
- SHA256 a41b71127d07924ddda67e787e8765ebf60f217817199f1becdd63f3db88847e
- MD5 a29a79ca0a5bd2a88c09b43c9a7f95d3
- SHA1 98ba5b9b7a4493085603c5416419c6f3f397a3c6
- SHA512 35868eca9195b3d8738a8e84e1263d067141ef3823499cda32e8a33902bd7f229bd06d0a57080e8bc1c8138f37d77f1432eb2f455b36927aa6437c28301f1a0a
- SSDEEP 12288:XyA2ngdKBJuEum86y+TjfI1CkX9RDYXKI297FcVlE/LY9QS:QaYum9V/feRzDYucGLY93
- TLSH
  T19995FFD5624AB622C976E2BE930F057E60F3AD57C3424BC388155B490AB57EE0B7FC06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Qt6Svg.dll
- Size 617KB
- SHA256 982a589e52680d7b525da0031eba783d3bbd77e6611cdea5cd276a2b9213f4c9
- MD5 07f4bfaabb00650a39f46072d517554c
- SHA1 75269c10d4eff23559355a0e00b4543d9b9a6328
- SHA512 e01335f2d79fc7b1222645ccf196bc6c138a2e0cd72056455de9a65a62f3b39c89ce43c0cfd3b4b566960c46acc0c2996f360e35c62824bf87ee7137e5fca467
- SSDEEP 6144:Z10fGG/FNHToqobivsTRkcjIfIl3mIRuo2zibhHmCBGyOkOc0CH4x5Yj7Fm3yWZ+:Z10e+NH0xb7rZmIRWWZmCRmc0mx51Gs
- TLSH
  T173D45C67B3A60785D4AAD13CCB5B8422EBB370440362D7EF41B58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 f383fb6b3f6996efe23327ff607e7298fc47ee76e8b8ef8a65f8d2e0a91707e4
- MD5 10cae5e4a928d4f4c027a2a689916144
- SHA1 b48b2719f4fefdbfece73addc2e3efb5f32bd3da
- SHA512 5e4adcb58564346b38fccc96fb992d9069a9cbc2c5b47c6cd5781abbc718634e14237e219a58210e7e9bfc21a02bd1e35efa8321b5bfc0bdec0322cc8c560e8b
- SSDEEP 98304:JLNqD/uTGvqxgiJaj4mxHJpd9tozE2XJHTY8:5NqDaGvqxgiJajFxHJpd9tozE2XJzr
- TLSH
  T1C3666B5763EA0185C5AFD13DCB0B8A17E6B2700443229BCB1169CE592F73BE16E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Qt6Xml.dll
- Size 156KB
- SHA256 c9d4c5c5dbf8d9ef3264f27c67bbaa0cd1aac98bee2f258b4a0a19664e9f18e5
- MD5 6bb91e7ecb5b3cd133e6e91b9b6ccfaf
- SHA1 b60655124cb6e94bc4fe2a856368d25bc4cd8c46
- SHA512 473ddf110e42c592864777d9fc3344580a349336c820e4895fa42e90ef576f274e160946fe0019790d8835cf20f89736a77483ccb88015636da83888b62a88a4
- SSDEEP 1536:Z7LLdm+5hICv8Q0wCslIfO80V+NFu4jRcDXIDlvxe2obYTQj9sYpxABNqN7ug:ZrfA7QIm/VWRcDXIDa29YjAPqNP
- TLSH
  T157F34B877368428AD46AC278C91B091EFB73705057629BEF82648A392F67FC27D7D350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  archive.dll
- Size 716KB
- SHA256 a3cb76e6565089c312fec64bae707cd35604b94338dd6f549c1d7efe7f93129b
- MD5 92f7fb457e8a9d4b4a7e8103a2f6b5a3
- SHA1 6f98c3cb9362633fcca5457c3932f41245114027
- SHA512 3c6c4b94cc1bbb4d7dce97305c93cf4f5c6f969b391ce065d11499e5090b2c2319a4234240fc4832e667bde69c18a9e11eb7ba0db684df614a7f15f8c850391f
- SSDEEP 12288:LMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCcezics:4SFVwT75qEtXm8KgQNjVTNjzxwjnor
- TLSH
  T196F48D82BBF40668E977C1348546AA27F3F1F0551760DBDF06A487653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  bz2.dll
- Size 75KB
- SHA256 c6c183f7097c44bc820d24ca6965c9a48f7c2bd5a98f5afd8cc15dae078b5fe1
- MD5 c263101a4f591998cb5d2cc1ff439bb0
- SHA1 650f37ef7034b2cd91e8c4041faceb8361384163
- SHA512 3e9c0dedf3f1c8809661daef25bbb264f8855aede24d57ec978d7ff4ef1c07beedec8590aa9dfa44e7a6a2376753113aa0310d840692a5e19bd6dd0340b83112
- SSDEEP 1536:0BVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLr+ti8y:ouxAUhbrYVLrGVy
- TLSH
  T143735B40B6A3FBBDDAABC0385623074BFF35BD280B1117BF3560D67A2B22A910D74516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  cmark.dll
- Size 140KB
- SHA256 1fd506d50413c880c68ba8c885871b402aeea606a894c5f738a964424c88bc93
- MD5 5dafb0da0c77f2831f6a2afd916e1d61
- SHA1 239af9e2a6cc74d630bfda11362decc311c8c805
- SHA512 3ec87ad96586bd6dd53dc6948aa3cef804bf61d1f580c74ae0d4fca1490e1c3c970adab125db3c94074392eed96d7c69fe09d073eec8c8628873fc5088b46b77
- SSDEEP 3072:A5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIiY+:8WcBSGsvVlFVtaOmROEiY+
- TLSH
  T122E34A96F5BC0066CC1BE07D4D2EE596E3BAB2173310C2E716400E65B9E7BE27636352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32