Overview

overview

7

Static

static

3

RenderRepa...z8.exe

windows10-2004-x64

4

RenderRepa...z8.exe

windows11-ltsc_2024-x64

4

$LOCALAPPD...on.ttf

windows10-2004-x64

7

$LOCALAPPD...on.ttf

windows11-ltsc_2024-x64

3

$PLUGINSDIR/7z.exe

windows10-2004-x64

3

$PLUGINSDIR/7z.exe

windows11-ltsc_2024-x64

3

$PLUGINSDIR/Python.7z

windows10-2004-x64

1

$PLUGINSDIR/Python.7z

windows11-ltsc_2024-x64

1

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

register_task.py

windows10-2004-x64

3

register_task.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    RenderRepairCpt_tl4xz8.exe
  • Size 14.7MB
  • Sample260910-jfr7qazemd
  • SHA256 02ba2a11fbe8133bf996df2126ef5a58c39d58281f6c5d785c86c7170cbd37b1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecution

Malware Config

Targets

    • Target
      RenderRepairCpt_tl4xz8.exe
    • Size 14.7MB
    • SHA256 02ba2a11fbe8133bf996df2126ef5a58c39d58281f6c5d785c86c7170cbd37b1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral1behavioral2
    • Target
      $LOCALAPPDATA/Microsoft/Windows/Fonts/Sparkle Passion.ttf
    • Size 1KB
    • SHA256 01539713a5c39876c5f0ee165f0514b35cbd0e923156640779bb47661a06f02f
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4
    • Target
      $PLUGINSDIR/7z.exe
    • Size 732KB
    • SHA256 00f85beb322fe51ab3a3b88abcbbbe40f019a7ee53498e27a507da6824adaf76
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/Python.7z
    • Size 14.1MB
    • SHA256 fe0a7177c705be7868be1c1ca603bab2a49558ec5e081ea1cffefa1674cd6f6e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/System.dll
    • Size 28KB
    • SHA256 a9cb4580afcc0d0ed6754169237758d04d0a29759140206662af8f90b209def2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 11KB
    • SHA256 47263c25c6c4b5e50283eb5dc6affd7f0cf72e4fe8533c836a49c5da65adf2d3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      register_task.py
    • Size 1KB
    • SHA256 3bea06a97af14b4f4cdaa300ac1b2c94f6e622fd2ff1fa615044ff24c71cd50e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks