be0e2b25667a837ad16498ee7e4e964efd011a38f76961b689d8acff525930e9

Sharing

Copy URL Twitter E-mail

General

Target
Boufbowl Fan.exe
Size 38.1MB
Sample261022-yyefxabd85
SHA256 be0e2b25667a837ad16498ee7e4e964efd011a38f76961b689d8acff525930e9
MD5 24323c37a02c91a6d3839ea76f5fe304
SHA1 5ad03893fe8bb0bfc080adae564d9152c1059ee2
SHA512 fff95ddf226d00ff43ec2fd8e6acbb395d7328dda39ad16a0f736d1cb11f7557551ef6e5218c2a37b7c06572f7d4eca7c889791809cf9443038da2648e3d29a3
SSDEEP 786432:JRjX2FeRt5/divZrJr+Occ3chlznZqivG932tF8S:TmFez+hlSFc3cn7A4v8S
TLSH
T1DC97331419B65499CC1C1E30E5BE8E2D3A6FEC508B75B84E2538338FAC366C05F6A5E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Boufbowl Fan.exe
- Size 38.1MB
- SHA256 be0e2b25667a837ad16498ee7e4e964efd011a38f76961b689d8acff525930e9
- MD5 24323c37a02c91a6d3839ea76f5fe304
- SHA1 5ad03893fe8bb0bfc080adae564d9152c1059ee2
- SHA512 fff95ddf226d00ff43ec2fd8e6acbb395d7328dda39ad16a0f736d1cb11f7557551ef6e5218c2a37b7c06572f7d4eca7c889791809cf9443038da2648e3d29a3
- SSDEEP 786432:JRjX2FeRt5/divZrJr+Occ3chlznZqivG932tF8S:TmFez+hlSFc3cn7A4v8S
- TLSH
  T1DC97331419B65499CC1C1E30E5BE8E2D3A6FEC508B75B84E2538338FAC366C05F6A5E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/nsExec.dll
- Size 10KB
- SHA256 61f0e47b09316d39979c62a05403a3baa3ee58841dfd97cc00fb4dc086843815
- MD5 aac4f3facf83975d0cf2b02200ae8212
- SHA1 8ea89129df40923951610b6f003c10ab7c5cb238
- SHA512 b0d4a5f2c129ac39e55ee20ffcf8fe1306b0ba791ec9ade8249a3304e091941476a032089e22a7e1ffb709f6e0a591d026091707754a387e147fcc6af996336a
- SSDEEP 192:CCtx8+SjrhYnUMu3Oad9z3Ykv/RWwCh3srduaO4:vx8+SvhYnBu3Oad9z3YkvcwCh3srdu
- TLSH
  T17B2296C9BB0579F5D0639934B18AF12F4DA97C31CA2B840EE89A1E35B82F5E4571DB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Jouer.cmd
- Size 669B
- SHA256 1e682c43526392047f262f39651a815b5a367facd6ac00809fc77428da9b5fd9
- MD5 7814d71a80b6fb9401b593a3acd65faf
- SHA1 0be25024a72db89d3e808f58290e535903f72332
- SHA512 494bc18c47c27700c88e02b1d04605f313a251dcfad34379de76f3d4d10bc86cfff8cdc202b415daa18963058d8a65e7aca8e592dfad10b6d3cfa6b6ce9a1dad
- TLSH
  T1A601701334402F8A4C76008CDE1F06427165867A576F6DEAE99202BF503D29E6DD9A33
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral5 behavioral6
- Target
  flashplayer.exe
- Size 15.2MB
- SHA256 a4b333ac1da12026989549015303d82231982838bccfb544ba5fd188746066f0
- MD5 08c13d0cc4ccdac79b38821e846a53b7
- SHA1 7736efc1c76e6a80132a22e1f9fc87a5884fa375
- SHA512 87e953e053e249a5c202ff4639aee6fa5915b0b86e69ad5eee76d9091545aa4d201a8477d1c2525db9d3ebb053476cfd9ef31a8c7b232a4dcf84c2dd86f35860
- SSDEEP 393216:nZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBK:nZl05Yt+kTVTL/xlFVaPP
- TLSH
  T12EF69D23A60144B1C182217DCC3AEEAD617DAE15873415C753A47C1BAA72FC3AA3DB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8