General

  • Target
    8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa.zip
  • Size 141.8MB
  • Sample260910-yfs7cavfqb
  • SHA256 8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa.zip
    • Size 141.8MB
    • SHA256 8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      VFS/AppData/PKeep/PKeep.exe
    • Size 2.4MB
    • SHA256 478992fc2d0af1d5723755f7510361b8e51076395491356c7e97c8a6bf1cbdba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      VFS/AppData/PKeep/d3dcompiler_47.dll
    • Size 4.0MB
    • SHA256 af8934f48cdb8bb173cea698f2f098081e20f7651b6cde2727413d44263e8bb3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/libEGL.dll
    • Size 406KB
    • SHA256 e9842ca6fd2024dc9b9d336c9efb070235fd1c1736ebb3809bb461ee2c488f04
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/libGLESv2.dll
    • Size 7.4MB
    • SHA256 561f911d8d50c85c56fcc8d949bce2cd5a13c3aaaff9472b6e253c6474833c35
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node.dll
    • Size 20.9MB
    • SHA256 6332426a214918ff1ba7c5a932359afbc18b152c87276bed68ae18694a41f766
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/README.md
    • Size 7KB
    • SHA256 be5bbf9c6a02774a397f2ace8bcfb1a34d052723d8474bf3e46e0623066c8701
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/bench.js
    • Size 1KB
    • SHA256 b6c4a058c4fd03900f3786ef216322d57553ec83998e19b6d557dc39acfd2f9f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/index.js
    • Size 156B
    • SHA256 397441fd78b69d7bdaaa48a0f354c8d07086a24414655b0601ab4f0c26e15f2f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/abort.js
    • Size 497B
    • SHA256 2c64e26dbd17f4c5ee9e017a098cda40e5eb2234a89cfeb46287f6378b74a66a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/async.js
    • Size 599B
    • SHA256 cc91aca5b66788252bb01207ec797419eb4add90b88740395e818d12fc77bf87
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/defer.js
    • Size 441B
    • SHA256 91e4ffb114b4d60af8da177eb388d507a13dc9bc449f68e2d4912083cbc2b1f7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/iterate.js
    • Size 1KB
    • SHA256 1ed503336dc4f4b252852c45f8ea0b3b8eb9eab90dfa11189d9d00de888010ba
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/readable_asynckit.js
    • Size 1KB
    • SHA256 a23c413a059f4422ce03f22cd2a373b2fa6930ac47cc103a0e7e26a6ee6d0602
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/readable_parallel.js
    • Size 673B
    • SHA256 d254fc0dc21eb4608336a462592b44cbbcab954d3b6904a26a4766e03dcce202
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/readable_serial.js
    • Size 655B
    • SHA256 b79637514db671ef3dcecde523017542c19e63f8eb93c5a5ab42b2f05bcc9a9d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/readable_serial_ordered.js
    • Size 941B
    • SHA256 9ddda7cb6c54a672d8a7e8cdd029d44e35335f7fa6e6102daf0c9f60137b59af
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      VFS/AppData/PKeep/node_modules/asynckit/lib/state.js
    • Size 941B
    • SHA256 9c3fe921ce1c205c62ce1cca97e1eb9335f3ddf066626a36c9a44bd59bd7a2db
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

network
Score
6/10

behavioral1

persistence
Score
1/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
7/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10