1e2ace3dd776e6ffae13761d6959ce58e5ec100057f0492812bbd43f667cff9b

Sharing

Copy URL Twitter E-mail

General

Target
Aphrodite-Macro-Setup-2.1.11.exe
Size 104.2MB
Sample260912-t3hlxacj3v
SHA256 1e2ace3dd776e6ffae13761d6959ce58e5ec100057f0492812bbd43f667cff9b
MD5 e7c87209533e0025ec39af8725b8c2af
SHA1 be8da7dbe2cd9c50fa87cb78401ab032be6ceca2
SHA512 277dd68ae1f5302c0b3565ab12f99c3063a88f32cc0a6244152cf0d9496a7bea070ec1226f42fedd00ab2660c3e5505332e46f03143ad711a090af8def857735
SSDEEP 3145728:xue4NBUKZ+iLbACa5w3a6vR64wC2aBcSruZkqPmDG:x4NBZbLblv3rfwHaBvr8kON
TLSH
T16C383323F794E0FAF40F4D3551F1960A854B33DE4AD2570332C671948A3FFADA468A9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Aphrodite-Macro-Setup-2.1.11.exe
- Size 104.2MB
- SHA256 1e2ace3dd776e6ffae13761d6959ce58e5ec100057f0492812bbd43f667cff9b
- MD5 e7c87209533e0025ec39af8725b8c2af
- SHA1 be8da7dbe2cd9c50fa87cb78401ab032be6ceca2
- SHA512 277dd68ae1f5302c0b3565ab12f99c3063a88f32cc0a6244152cf0d9496a7bea070ec1226f42fedd00ab2660c3e5505332e46f03143ad711a090af8def857735
- SSDEEP 3145728:xue4NBUKZ+iLbACa5w3a6vR64wC2aBcSruZkqPmDG:x4NBZbLblv3rfwHaBvr8kON
- TLSH
  T16C383323F794E0FAF40F4D3551F1960A854B33DE4AD2570332C671948A3FFADA468A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Aphrodite Keyboard Macro.exe
- Size 164.7MB
- SHA256 5b68ddb937f85f98f83fa630e4a86e75ac3a7441848822f44773ffba9a03a806
- MD5 a890810f9b88bbf2af3d945b8d3acb99
- SHA1 059f6a4f0e37dbfbc9547dea1a67ac746e84be42
- SHA512 c64a353aa6c243e9d922aaa09856be24f5d08922075fd7ec0ad835f5528ff06485d04d6d93ba0fea494153d6d3f33cef3ae188de0ac1eb3a369588e8718e1036
- SSDEEP 1572864:JmIh9FimkfWTs6+LkanRWYS8a4lN+WTi6qSFK2u73JvPaKD2JsR2/tVBcpZOcrQD:hsFWY7ihS4kVP
- TLSH
  T139888C03F29650E9F05DD1B18B578236EA72B8861738A6DF175417262F7BFE02B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral11 behavioral12
- Target
  LICENSES.chromium.html
- Size 8.8MB
- SHA256 6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081
- MD5 2675b30d524b6c79b6cee41af86fc619
- SHA1 407716c1bb83c211bcb51efbbcb6bf2ef1664e5b
- SHA512 3214341da8bf3347a6874535bb0ff8d059ee604e779491780f2b29172f9963e23acbe3c534d888f7a3b99274f46d0628962e1e72a5d3fc6f18ca2b62343df485
- SSDEEP 24576:cpD6826x5kSWSsRinoHnmfm646a6N6z68SH4SApTJ:cHSek
- TLSH
  T17B96A52F7F48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
- MD5 2191e768cc2e19009dad20dc999135a3
- SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
- SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
- SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
- TLSH
  T1AA367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  ffmpeg.dll
- Size 2.8MB
- SHA256 9d1eb0c6eb12bfa87e74a65c2fde5d61c4c93e21fb0800bbdccb6559527036a5
- MD5 14e00bf1d9d0df65f8b1a31240d474a8
- SHA1 f9fe033725b7b1b5c0efce7a14ed7ab223cb32e8
- SHA512 652724450296a739de802ba8fac482953146f37665718446e448a350295e1e7b09bd460835bcd0ac26b2e54bb9b791624a9eea11e6c96573c7c4aed22450ed14
- SSDEEP 49152:IF5qb84KtStWEK/Ju2lf3tAtiLHQVTf6yfcrhCHDXLl8+0LKSQ1SCu:IFvSkJXv+tiLAD0+D1S5
- TLSH
  T1C7D5AE07E6D940D9D01EC070879FA233F62134468B24A7EF1A9196252F7BFD46E3E764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  resources/app.asar.unpacked/bundled-ahk/ahk-runtime/ahk-v1/AutoHotkeyA32.exe
- Size 775KB
- SHA256 6a98b438b67da7316e9251eb1a92cd5384a8349d239a77903f7282fa076a77c3
- MD5 fd94b77958305a1ac3eeac27ee765256
- SHA1 bdf7f5633cd529186c7c9c87c120a58c35515d2e
- SHA512 1e97ddbe9374513ec9a1f51313efb3621f81a309bf78982688b4c19aa389f0b422a604d8adcd84dc1ba28f44135d30edde06e32705fe02762e92cf2bbc725a91
- SSDEEP 24576:Xm5sulQV7Bf5eUHngzv3xynU96at5gxqR:N8QV7RZov3xY5
- TLSH
  T148F4AE51F68580F2D9E134B211BABB726939AD69133049C3B7A43D7D0E726C27D7A30E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18 behavioral19
- Target
  resources/app.asar.unpacked/bundled-ahk/ahk-runtime/ahk-v1/AutoHotkeyU32.exe
- Size 893KB
- SHA256 ba35b8b4346b79b8bb4f97360025cb6befaf501b03149a3b5fef8f07bdf265c7
- MD5 b6af97aa32c636c3c4e87bb768a3ceb7
- SHA1 83054af67df43ae70c7f8ac6e8a499d9c9dd82ec
- SHA512 54d2e806503f8a4145ee1519fc5e93cef6bf352cf20042569466f6c402b0a402bce99066decd7729c415cd57da7a9923a1b65926b242672731fe2f9709cf6920
- SSDEEP 24576:Kbi/QhDC8mY93kyw8hC2A5CxLbRpWrzzZyP4UMdg:1/QMnl5YL7WzZyQRd
- TLSH
  T15B156B52B3C7C1B2EFA219F3D9B553360939BC68133889C7B7D8382DC9A16C06A75359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20 behavioral21
- Target
  resources/app.asar.unpacked/bundled-ahk/ahk-runtime/ahk-v1/AutoHotkeyU64.exe
- Size 1.3MB
- SHA256 effdea83c6b7a1dc2ce9e9d40e91dfd59bed9fcbd580903423648b7ca97d9696
- MD5 2d0600fe2b1b3bdc45d833ca32a37fdb
- SHA1 e9a7411bfef54050de3b485833556f84cabd6e41
- SHA512 9891cd6d2140c3a5c20d5c2d6600f3655df437b99b09ae0f9daf1983190dc73385cc87f02508997bb696ac921eee43fccdf1dc210cc602938807bdb062ce1703
- SSDEEP 24576:a3CTQQje6KWjFUsTNEDcN20pah5nQsrivkdhWeWr2O8hYzlj1TNp4j7YoqK:a3CTQQjxKWjFUsTWDcN20k5nQsrivkdq
- TLSH
  T196559D0633E6C0E8DEB391F6C5299623D772781407389BDB25E0592DDFA3AE05B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  resources/app.asar.unpacked/bundled-ahk/ahk-runtime/ahk-v1/Compiler/Ahk2Exe.exe
- Size 972KB
- SHA256 754a28ed76a7b4eba7909b146cfc4c4c2aa43aff54e10a5cd6dbc939c0732b6a
- MD5 78515b1091f74c0f828aed92d3c972b0
- SHA1 0103e030518db102631310ce4e2eb7673d7a1994
- SHA512 8edcfe6a59d56d69f0fb7672410fcb24fa0722a5d651f076a3b76a424140e162a213fb038c995ae9c2024929c88aa1fbd979694a485163c2d3f8ca3be75502a2
- SSDEEP 24576:Vbi/QhDC8mY93kyw8hC2A5CxLbRpWrzzZyP4UMd0I7W:M/QMnl5YL7WzZyQRdM
- TLSH
  T14E258D82B3C3C1B2EFA215F3D5B557360939BC78133889C7B7D8282DD9A26C0697535A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral24 behavioral25
- Target
  resources/app.asar.unpacked/bundled-ahk/ahk-runtime/ahk-v1/Installer.ahk
- Size 65KB
- SHA256 ef88ba74aef53793937ddfaaca4908772fbaf2e7c9bfb5fdeb3c0a6b95755cd0
- MD5 015d8f0a9ba93e41f418b8db8bef6a10
- SHA1 06d35e419dc82f91d123f129b88ff46511d1cf2b
- SHA512 cd034768b35fdb96251563cb87cddbfa63c55bfb798aa8ec6fdd9faa6b0155d6b42bc30ace6fe9034aac45ba3abc434613df2cb0e07a4b1b0bf0ed8ebb2e71d7
- SSDEEP 1536:iha0PbLo/88KSAn4HJzlbfuxp7NaBNZ/MXtM:ihJYxbfuLMMXtM
- TLSH
  T17C633B02BA0A4536D673635DAB336903FA16851F569706007CEC41EC2F7B52E83A9FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  resources/app.asar.unpacked/bundled-ahk/ahk-runtime/ahk-v2/AutoHotkey32.exe
- Size 955KB
- SHA256 e0464215b4d096fa0b27cd34d5e6b15dd6ea7f71a9bce837938a23fd7c8beb36
- MD5 564c4e3d2bf76b70a41596fee7c209eb
- SHA1 1b19eda50322847339d29da83741ceac84587063
- SHA512 fdbf5934bf55d3cf42a604dabf61a57bcfd92725cc32eb4331953f49fee0f25016aeda0f7b84ca5a52fcc4ddfae9afa22acd18d468b9317f76461834c1ef72f7
- SSDEEP 24576:bvWR+MeT/2/7dG/kvn/QBPU8A8uiVlasEI3G7c:bOb/+TlasE+G7
- TLSH
  T1CC257C53B3D3C2B2DFD215F3D5766A365939B8380B3C89CBB2D0582ED9A06C05A36716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28 behavioral29
- Target
  resources/app.asar.unpacked/bundled-ahk/ahk-runtime/ahk-v2/AutoHotkey64.exe
- Size 1.2MB
- SHA256 3880f9ec464dfe78c16bbd8b9f30560227154c292280337346a30c8fd92871fe
- MD5 38746d44eca1f41d1f8e16746eb182f5
- SHA1 34932f7f6530789039e6e9ebba49f4abe99a9729
- SHA512 db790a2d42403cd4324e1e5cfc77f42b0bbb119ed08b21f3d53cf6ae1fd4e56727b7d4aec967f44832464b5a63c6a82d644968e162c24f7ba590e34414c7b923
- SSDEEP 24576:DjZhmWcUs8EnqneJqexPvAzoCVCJBTvNu/3fzFfo0m:D5pAnqnewedhpBrNunpf
- TLSH
  T1D6459F4773E6C1F9CE7B81F6C9214213EA7178640B389BDB25908A2EDF63AD05E36711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  resources/app.asar.unpacked/bundled-ahk/ahk-runtime/ahk-v2/Install.cmd
- Size 66B
- SHA256 db2578b4ee5617f45acffb3af21e1d3fc31cdcf035dd9227c8061a950aa015e7
- MD5 4cfb569d3628b7e14e729de9956cc24b
- SHA1 d3a21dc771779e1785cf67867c7bc98ad4a7f001
- SHA512 7191c30b530c18bc2b30d96bc4d19164195eb6ef581366d836aff85a05c57ee94870092209bbe43da888d9946b0bb764ba18befb92b7560b494555a6239198af
- TLSH
  T19EA002529D878E157753090440AA3543740FD58F487494A4EA61489A595FA45A8C86C5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32