fe7222cfc57d013b8013f6c8805febcb64b21a57d6877b4c4e0d9fd3394d407f

General

Target
TweakNet.update
Size 217KB
Sample260910-pr9tssw1ht
SHA256 fe7222cfc57d013b8013f6c8805febcb64b21a57d6877b4c4e0d9fd3394d407f
MD5 ee46af7df61195d8267dfaea275217a1
SHA1 c143b4111874f8f0938483f790af116b940ce717
SHA512 f2841db691b083b60152ee922665befcb71e52f48e002f296b63ca22a7290b100abf9ae835c27e85b66b2b40e0aca94a87ba8be960b395ca4645b9d56cc6b700
SSDEEP 6144:vlnhrwtqNGRwx3IgGRIAY8EYnI7tLyWcDIMadD:vlntNGu49Ivwn47MaJ
TLSH
T1D4240104F688C433D8320A348D7A52E73AE5FB17D7A4E38B1B907F5EB832386951B655
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  TweakNet.update
- Size 217KB
- SHA256 fe7222cfc57d013b8013f6c8805febcb64b21a57d6877b4c4e0d9fd3394d407f
- MD5 ee46af7df61195d8267dfaea275217a1
- SHA1 c143b4111874f8f0938483f790af116b940ce717
- SHA512 f2841db691b083b60152ee922665befcb71e52f48e002f296b63ca22a7290b100abf9ae835c27e85b66b2b40e0aca94a87ba8be960b395ca4645b9d56cc6b700
- SSDEEP 6144:vlnhrwtqNGRwx3IgGRIAY8EYnI7tLyWcDIMadD:vlntNGu49Ivwn47MaJ
- TLSH
  T1D4240104F688C433D8320A348D7A52E73AE5FB17D7A4E38B1B907F5EB832386951B655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $EXEDIR/TPNET.EXE
- Size 584KB
- SHA256 12c738122323e7d87c6c26b656ef7660a289de188e28025b26c6e9d979dbd008
- MD5 59e77460591cc6966a3f3bd13a10c3ff
- SHA1 5177cd9b11c177c5d5ab10fd46d06403dc928af5
- SHA512 9c794b44f0c7f8501dfffc96850a475cd2949248e807301251174229548201c59a8cb822e8ca5ef51154b1285584b6fe9472436e244413c545d02616d7e3c72b
- SSDEEP 6144:S4yus9v70qWkGRAjCJObEW9qbnZJUQAqsHulmoLGL4x5NBG:vdiz50W9SIfMyL4xn0
- TLSH
  T1D0D40862F6808550ED650B313CB5E5BD1EA3BD966F7BC20F320CB26D1B73A924821767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH
  T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6