906090fcd0375fd84075519b39becaf3fa40e92924163d1da4abae1596c72750

Sharing

Copy URL Twitter E-mail

General

Target
Lotus 123.zip
Size 3.2MB
Sample260916-wsajnaca34
SHA256 906090fcd0375fd84075519b39becaf3fa40e92924163d1da4abae1596c72750
MD5 3d3242a1917cf5a817517ee08d1131dd
SHA1 1ab3751db730916d6331a48d2fc3d95075a41466
SHA512 48f4b2ad45ba65b0be0f63662c2052680fdfb00b2bc09d587e9a5836e94e275c8e601e508db33fde28ff907bffb1afd0f8fe553a3ae4e8be6faeb6f7ad4453a6
SSDEEP 98304:lMLJ4dB4R0q0dtmH3yXII04LdJH2Sqczs:lMLjRlZp4LPWSqczs
TLSH
T1F7F53372834450B7C2CF32B101D75B7EA5E8CA5FCAA1132F7C06A18249D7AE19F1A75B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Targets

- Target
  Lotus123/123.exe
- Size 57KB
- SHA256 7bf8617adc742433670bbe861698d87a3e2d050253d9825e49a115d9ca8ed1cb
- MD5 cc6f0e776fc1056e6acd3f347f247fa3
- SHA1 23ba7208d4bd982d4c4ade1d02146200b61cec01
- SHA512 25ff2b2b4b65565bf25a5145b3f57de3f03e832c01cb41a4fdb680fc5ae570f2b3a07056950d810a7bf8b751f27550ba1abfc9facd162a3277c068db04ac9129
- SSDEEP 1536:4OhIKrspnihbdNg3zXiyxIR8rXc7IiJqA5AbEamfpsRe6UvWfTfQMEZod:QKrwncbdNga8rXwU6gEamhsRe6UvqftZ
- TLSH
  T11D439F1437B591D5E3BEAF798E2BD918EC6FC75AC3DD18158BA0091609C42E72351C8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Lotus123/123dos.exe
- Size 1.2MB
- SHA256 ac2800197f0c2e4b69f2b4c225920f9c401ee18dc4612bcc4e32d0d939eb8e53
- MD5 233203b1991e548d5038381380ad551a
- SHA1 184cd686be906bcfb7beac8bfb427f3e3746678d
- SHA512 77d87960ebcdc3dcd005521a2ea9bd4c1f990856eec1226b217b1059834a6253cdecd10cb500b294c91da6b5dbb7d4848c692c5f524f6877a7087d197d715c3d
- SSDEEP 24576:AE7w5YTLXs1ZnFDxkQ2fpS2w/WD2mx5wqvi2asNJPghdrf1Qn3:8nxlL/WDdbgrf1Qn
- TLSH
  T12D45AE3954E980E7CBDD6EF04A2F6BD8D24DD1EBF8C136349E90580B179E6C8B643216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Lotus123/bprint.exe
- Size 14KB
- SHA256 81f97c3df881ca6f5cf3dd9b21dee54e0045e8b3f8f880a31d081191b6676464
- MD5 ffef1d5d187f3b8484dd283a6a1f685d
- SHA1 af58b392c653b68e809501cba033b5cbc53e5b90
- SHA512 e9973ea9f7a0314eaa9ec25a761c1647cc97cde0300094eb862da6f96a0af757b907394518c35b2bd6b8368ccb53cafe384670296412c7e9215143a130d60150
- SSDEEP 384:LJHCxzCFPNp3v/ENfSdNP8poAal9IaZ7N+uyN:LJOG/p3SfMNPn9Ic1yN
- TLSH
  T175624ABF1A994A95E9B406B1DC8162B5C32BC0DFF8DC2101B49C139C7FD42E9E9E24C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Lotus123/cp437.dll
- Size 3KB
- SHA256 9608619954f0ccfbffe044fe36a22634800847914b6ff4e1e685cc8efa8410c9
- MD5 b074c1a7e08f4813668f383174b4b112
- SHA1 b3fbca1e456f9309c6e2725f34030640f27f75ea
- SHA512 68e5c74dcc580f8f461070d96b4bf27d148c2a78bd2fe735591004c0df07f33d84327752214ac48bc1af988a52ffbe32b33b7a740515e35a4041d613e4a5d0cc
- TLSH
  T1AF61540AF65AC4ABE71C5B3252EAD781B4A0DFD44A946509DA30CC3796D8F55E212114
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Lotus123/cp850.dll
- Size 2KB
- SHA256 9634e3c0c08aafe3a3de95dccdbcf6ed74a3b59963e8a472bdd3fa84bf33f8d7
- MD5 e9f883ffe4e4203a4f0f6876b3ee3381
- SHA1 cf49be484250c7c09085bf55122c210bfe325acf
- SHA512 dd2e9b9174803edfc1e21e9158be4b8bd4dae9c3702d14d19e79a2d13282cf06a87f7d25411283c465de3d7cf501ee38cbea2aae3e8f64a5771a192fada169b9
- TLSH
  T12A51124F7D21C2EDD90D6F3B51FB47CE712957D0471C840A51789C46699CF84D13501D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Lotus123/cp860.dll
- Size 3KB
- SHA256 627b4a44813f70a591ce948dd4b1f6ddb7188c34505232cae4f8f0ed524de111
- MD5 7f4b4ac14e44dc5eecb93ed24d0eddf4
- SHA1 09b74924fbc693bb87221ccd58043a8a430ef010
- SHA512 f788b5a7a4aafcf1440d508444829e6902c888646007c8d6c1e399c1fc37f9f1d238a188563ad16c27242403af671763e916ec3b7247cee740d7a706927c49b3
- TLSH
  T16661640AF62AC4ABE71C5B3762EBD686B4A0DFE84A44450DDB30DC22D6C8F48F202115
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Lotus123/cp863.dll
- Size 3KB
- SHA256 2ce7e75f5bb7b1199392bec46e4e91d84f87466a8412c05146beba68a1a07d4c
- MD5 331026f268ffdafe599d3b605f6c4f75
- SHA1 d30b31d1d0c5a0e3155a01d97a641e802fa855a8
- SHA512 cbf9072c3c4dbd17607286f9ad667517897350e204dbec5d5005e5abd9d02347b92ca64eb0d76d061ab4c50aec526824f4b8567060511668aad6310fb0c2857d
- TLSH
  T14261840BF66BC46BE71D5B3352EBE681B1609FE45A94590ED734DC229AC4F45F302104
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Lotus123/cp865.dll
- Size 3KB
- SHA256 0187a9425e0a48bb9c3a786d085e13bf654ca5eae1124e94a52bd2894c8de306
- MD5 642194faba6dc3b51c512b09c7dd0a04
- SHA1 c74185d807ac0edf2f9bf4f680ee2d18f73c10cb
- SHA512 c5d8587fd495c7a4a26b39f645eef4fb099ccd8e282896d517dfa6112a70ccd1b3dfe5cd703d4a8ad06a5a1ce1f5d5a5c3abb21e2bce0a20687f1ec15e01f902
- TLSH
  T1D461660AF61AC5ABE71D5F3362EED781B564DFE44A486909DA30CC3796D4F54F202204
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Lotus123/ins.exe
- Size 147KB
- SHA256 fe475e4203c546de51773ab54ba476144bc8401f3cdf41bd25ee86a0256e02df
- MD5 450156b17f7935e16264b03e5209192f
- SHA1 c7580dc92eaa2c4026f3ef4fbc41aed3d57f791c
- SHA512 18d5c243c31afa8ee3f1faa2ac6acc46fa19162b1972072a02a231ec3fc2e5c21493e4fd1f3bd172ab43ca9931c85c3adc98e32b39e70f08b22c25a0e05ef749
- SSDEEP 1536:/tzGS4sVz4otkWs26aYtHC9mE559Yp4ySTzONS3uQVBJSFkoC7YIpMUD5gXZTJUG:/3HI2E059Y+FOtkyE3VDOXZdHTQ+HJL
- TLSH
  T1DCE37D20B1444CDBE8AEABF05F5F6737F92E8612D7D90015A6914C38864C786AF3395F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Lotus123/install.exe
- Size 175KB
- SHA256 246c0920fd22d47b07e3d650d59e3645f341a117d47ee2cdeaa669e486052309
- MD5 d9b63defd3c51ac7168352d8daa84609
- SHA1 471d087e2f9f98e2fa6462fc5e8e82f1428121ae
- SHA512 96bc5fff1a304ff1d96ef53c142117bdb397154c8a48c3cfc887bd62bfe8b9e2981ddcb758d694248986b98695e81e70da8122527928b24465e5224fef9508a7
- SSDEEP 3072:6BCQP1S74QPFCIVL4XCts8rEcrrx0Nr1o77Hu:/iS74QRLLrEcKU7Tu
- TLSH
  T1BD047C2216484CE7D1BEDF35570B122DF81EC66ACE9C290DAEEC0436C254BE21679A5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Lotus123/install.scr
- Size 39KB
- SHA256 8c2c9765d3b15d01891d8d2a3366fbe6a393eabc654fbff622e131e32c2c67fb
- MD5 522114767b0366849dafe5b38a425483
- SHA1 0e4eebc0b5fb9312dcad53abf66691f0395f1b30
- SHA512 1d2bb9542d455d9481243fdae8d08442f2b80a8695b94c8e70cb77ca40d6c1c0f9c8e5fe45f6037cde5a88c149e0e1a95a6e22dd0a8473775b9cc4d355c3e9b3
- SSDEEP 384:x4z3we/XpQ+QApGOwCTt6KLZgFYSYCi4K7D0Nn4Dk90usVL7RP65kzxi5MERhIt2:y3eylCi4nN4Dk9EL70k4MEgZ31K7tyq
- TLSH
  T11103C7AF5607C33057A31E522B5F7A53EA29419C0A3D3D26B06D814833BE3A2D2576DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Lotus123/lotus.exe
- Size 47KB
- SHA256 e263cd6c6a9a4778d65d0d976885b21e90301eb82fa732bad602d8a934f625fd
- MD5 760db3539e16d9342aacdc5566657ee6
- SHA1 1d48195be0be42eb8e97a431803df0a141be48ba
- SHA512 7aed1647dce993ccba61811b349fb91468f3665a83b8690a6aafb4fd05240ad62b54791ddd0f4ee6322adf3d75786d4be35142c572eeb4380847885401d19930
- SSDEEP 768:HKnQbS06kz7QeMdF6I42wySKwjbQ5h8/Fg37j6BevYF45H23dg1Bn:HMmS0hPlMqI4FySKwZ/m37OIYa5Wa1Bn
- TLSH
  T125238C51358092DBD5FFD732CF4BF548E0AECD189B941816DEE92C160F942793AA24CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Lotus123/readme.exe
- Size 1KB
- SHA256 c6739128d92f476b84115587da1313ec821ae9487e31bdb108fc821fcc2adbe5
- MD5 1efe8e14890a4cb03030eea08c4c79d2
- SHA1 a08543b406efd69c2090a2a6d80720395fb842de
- SHA512 e1ad59807776cd4674ded31ef7e3828cc09c0424138427fe3dfb0d81281303abe11150636baa9b3540c5ea2c7a917d21d4fc96fee4dd5720392e88f8d3450688
- TLSH
  T19931B91E16501442C45B2C7B8F4F103688DB645116899C042188D679BEAB4ACDEFFACC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Lotus123/wysiwyg/fontgen.exe
- Size 13KB
- SHA256 49fd80a85b4cd28cbcf6b6c673ddc1e780e33a4b2e901aba7676b28b73ff1b98
- MD5 cfb0b7a38ddac534898a85356d42e528
- SHA1 73124b0ff2825a2e05e916cc260ca30235d69179
- SHA512 1aba252f380028785a08097d7395e281d42e30c4a9288ef4a3c98d6201194372ac3bc94be1b56fdbde1a396b2e607eb7cb36c8b0176148b9f11fd19791828224
- SSDEEP 192:cTqVG5EK74Xvq9a4/tutbzhchXgioTRSoRmB2dxyuhdAuqf2m9ORHFBmIJqq:cTkG1SzWdgR9SogB2xZM22Iwq
- TLSH
  T1A0524A34B04495FED1BAD7B20CE319B67E2D1D27F1FDC92449024E0A9C267D12E467AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Lotus123/wysiwyg/ifl.exe
- Size 92KB
- SHA256 ac88bf64f0108228daec7b2b4aa1c60ec86aca4486964bece722cb5b2efa6416
- MD5 b3157ef9bc8fa19f5e610fc63ee88ac4
- SHA1 bfc38502215851801434cded36dfc8ab80fb0dae
- SHA512 be416031f2c934bce16454e3651bef441c31f89b9effea48effdc478b02d4515e75d7971b996a6cabaf6def2d2bc81985aab737d4df007da838d136b1f18b27e
- SSDEEP 1536:Ip8pWP0+BrnB/EEdMK2mvLgCj0CRGgfQVuxOzPYFrLSUnDJ629aj5VY:I4WhnUCRGnuxHFrLR962Ms
- TLSH
  T1DC939F363A40CAF1ECFF9FF40A9B1668B83F821696C5381C4B914C1E7C553D4266BA0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Lotus123/wysiwyg/lib123.exe
- Size 15KB
- SHA256 e0c74a0f1f76c8f68453818c60d9218751e5a7bded0992eae1fb29ae7b57f8ed
- MD5 ebc4ce2868441f571797ae8f7ffdc626
- SHA1 000747763e0f8addb20cf2e511d886b96632160e
- SHA512 044b5e3292d1080923b258d3a07577dca5a613bc47945f35178ef90661da2156fd2516c57500b184946000f0ba694457adef100d2a2491e3ffc5514956e3b15a
- SSDEEP 384:cOKHI6+n8bYg0sQcyBEiHmxlSd+EMx486eUM2li24N3oSxSQZStG3:cOKonXDsQcyBEFEMxz6e3K94N3xcQZSu
- TLSH
  T19E725E35B91680F0E6FEDBF34DDFB439DA2D4437D9E8042D0AC05A8CCA295C426626DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32