General

  • Target
    #Pa$$w0rD__2024--0peɴ_Set-Up!.zip
  • Size 55.4MB
  • Sample260912-slchwsbj2z
  • SHA256 639b46711f4669c16f35283c28173f1a7130b18bf4a3038c93580844b3d9f059
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • hijackloader

Attributes
  • directory

    %APPDATA%\USNO_32

  • inject_dll

    %windir%\SysWOW64\input.dll

xor.hex

Targets

    • Target
      BCGCBPRO1100u100.dll
    • Size 4.7MB
    • SHA256 d272ddff64fa79a9dcd965d5bd5fb5839705cea837397ea167aa3cc1f5217d02
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      BliceCtr.dll
    • Size 36KB
    • SHA256 587a9cd8487a7ed9d220fd3c772852a761330524b5dfd7f2f3dc45d6fff45eec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      CreateMiniDump.dll
    • Size 15KB
    • SHA256 e6198c53a1999e30a620a6057b4efa3ee11193adcdbf3f343859f33eb8e0f4be
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FeatureSwitch.dll
    • Size 51KB
    • SHA256 5f77da103105b72081a6c77a834f23e5c8c70b98834e57f883e733e6e63b6438
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Microsoft.ExtendedReflection.ClrMonitor.X86.dll
    • Size 549KB
    • SHA256 bef387e6684961effe3dfcce32359e3b5b7b6bbdf0d887ae343b1b72c8c369d0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PPUtilLib.dll
    • Size 283KB
    • SHA256 aa4e0509b93a8ae6f4203aebb57e51e4a886bfc92f5650d3941aa97f0924bb54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      XMaxUtil.dll
    • Size 63KB
    • SHA256 47928db81d36550b84125df30055fe43d81aa7526e4855ba2d587ca9f2e0d805
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/EXPSRV.DLL
    • Size 506KB
    • SHA256 f3e355f8c13864d36ab96584c0fbb1a765da4f4d104f4c7e45c4a8e74baee7c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bin/ONBttnWD.dll
    • Size 629KB
    • SHA256 0e5123a235eba15530e0028076a159355e80fa3a8591d4924f6abbf5a2366519
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bin/SplDoublyLinkedList_top_empty.phpt
    • Size 266B
    • SHA256 4c42da75ab600f8c11cb8fbd76bbe702f0341a78e41bfa0936f7dc94faee68af
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/VBoxClient-x86.dll
    • Size 669KB
    • SHA256 84b47308abc293515fa8b682d7ede3a53fed426a7073cfec466bcde681da715f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/bug66112.phpt
    • Size 1KB
    • SHA256 0228ef44c9dec475da522db0d10c43e9eee9bd9cfc888d7344917ca0187b3bd4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/bug67949.phpt
    • Size 2KB
    • SHA256 98358f233f894856c9b94241e992add544eb9e748c6a9059768c076f37ec0239
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/bug71882.phpt
    • Size 314B
    • SHA256 6fe240f4197bf2fc4a53b41c11b9ae6cc1b79e61bc9828e9f4b61b6546147a40
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/catch_finally_004.phpt
    • Size 680B
    • SHA256 5e409f28a0e122fbac00fd90f383fe0c83f2076dd5c177ae5d255db80a38559c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/closure_001.phpt
    • Size 983B
    • SHA256 ff57a78a533bea22c50d63bf067d30c5d072086588b859508fc6232ce266e00b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdflinkloaderhijackloader
Score
10/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10