3cf3aad8fe933ca20808904f0d024a9faf77b5f3c7e5836f8066a846ec8f1890

Sharing

Copy URL Twitter E-mail

General

Target
كرتييي.rar
Size 13.2MB
Sample261023-r2knrsda99
SHA256 3cf3aad8fe933ca20808904f0d024a9faf77b5f3c7e5836f8066a846ec8f1890
MD5 f57dd9b07ff259312d77409646425e88
SHA1 84e6387f2ca97a2b0b5c44d1a192e35dc7ceb630
SHA512 6406c061b56006c63bc6bef733cf5c39065a9b7f097f6590e36916bbff84d7db2d4303f3842200515cac8292d766c06ad155bd08d5db9f942b8b4ce715173b2e
SSDEEP 393216:USwjm8Fw6/he0bcRnGSWwjm8Fw6/he0bcYqHXCW:VwjmAw6Y0IRnPWwjmAw6Y0INSW
TLSH
T186D6338BD2619ECA31B34C7DC2562563E00F7E34A29C571FB15692839C7E64A93B783C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  كرتييي.rar
- Size 13.2MB
- SHA256 3cf3aad8fe933ca20808904f0d024a9faf77b5f3c7e5836f8066a846ec8f1890
- MD5 f57dd9b07ff259312d77409646425e88
- SHA1 84e6387f2ca97a2b0b5c44d1a192e35dc7ceb630
- SHA512 6406c061b56006c63bc6bef733cf5c39065a9b7f097f6590e36916bbff84d7db2d4303f3842200515cac8292d766c06ad155bd08d5db9f942b8b4ce715173b2e
- SSDEEP 393216:USwjm8Fw6/he0bcRnGSWwjm8Fw6/he0bcYqHXCW:VwjmAw6Y0IRnPWwjmAw6Y0INSW
- TLSH
  T186D6338BD2619ECA31B34C7DC2562563E00F7E34A29C571FB15692839C7E64A93B783C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  ثيم زاركس/Default/StereoSound.plugin.js
- Size 2KB
- SHA256 395752d00f8e4c27d0e4c84a84b2902b7e929c0f619a1b04b73e60226a60c31f
- MD5 f7b417bdf34a4c939f9c8650a62859da
- SHA1 50d5980dd76f4a3d2245e73f631c83e12903edf3
- SHA512 4fa5bf153b3853ba35b9d61fbf1f38a01b6d03bcaf7d185131c11a05a512dda0ea2a6b70da8055f9586d19ca5db419064f58d64ef3bfea1fc198565ac2f716d9
- TLSH
  T17341BF9CA2F2324616937274CBB7651A3639461B004FCD657E0F43C11F4D639E7E2A88
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  ثيم زاركس/Default/discord_voice.node
- Size 17.8MB
- SHA256 f7398679665a989aa326cb1938096f4f03ebb8be22ab2bfb8ecfd56193adc553
- MD5 7ca31dd9f8ba7fe271d67753eb31d11c
- SHA1 b4b8a8a47bd22d39227c3d61e673929ac856f0d5
- SHA512 9e314b0e197eed14089a05ad7f8d90a2d2a1aa3a9b23d3dad0c04a35fbce228688ff91ad3e2fd01ae1e137e77866f7a1543b9afb3017507d964bfba6207f59bb
- SSDEEP 98304:bIqBpoBdu/RY1r8aFLjOO419Ar7PjQH3ZPsM/xad+WiCjCfwUYRbpM7/hbqByMi1:tByEiP4ZPsM/x7wZPyGP6Mw0it
- TLSH
  T17C177C0BF29250ACD45AC4B4876B6A22EA25784E033576EF57D487613F67BE07B39F00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  ثيم زاركس/Default/openh264-2.2.0-win64.dll
- Size 954KB
- SHA256 9b392bf05cff1199cc44af236fa672c717f484e79c99d35bf1bed153a423d2d0
- MD5 7ffbf336333754f961bb65aa680c4dbc
- SHA1 430483568eb72a520b72775c38b2caa1cc0343ce
- SHA512 0a7ce2c3b05dcbc7be950733a5191387376bb448696f68b76fb09b2f781cb32b2d1d19f0ec9d84ee69243669726c3e88e4d9c427ad41113ee48acee5535bf2e0
- SSDEEP 24576:bCE8T5Za1prFgHg6YVIi2R/xIrlqMVKhNJ724:bCE06SbIrlt+NJV
- TLSH
  T19E259D46F2A610F8D97BD074C97E9627E7B9300E13608AEB09E0C6156F23BE4563FB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  كرتييي/net48/net48/net48/CreativeEAXSettings.exe
- Size 1.0MB
- SHA256 af50ab0bc18ddf087b792313aeea1c0f6faac0339052c2d68cfcc9713972a489
- MD5 7c81673395ffcdd8795b3e60f587f506
- SHA1 123285f41aace679956897c2463f9ffca5838039
- SHA512 9b184f8fe69a5987b1c8eb646f6badd60a82f521f5c9d43190c09ab7c0898e3c6bea834b645d6a3c808473b20a3f24f40723656c614b7e063583b643c2a5c38a
- SSDEEP 3072:4J+TmlZtqtMA0eLSFLgvYsejxtttjggg7sss4dddqddd7zQT14q:qqGAGLgvYBjnggg7sss4dddqdddY14
- TLSH
  T11D3587A970F66CDAC13D01FAF9BDAE85F2552D4C8F59B20A36127E2409F230CD84D9D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  كرتييي/net48/net48/net48/CreativeEAXSettings.exe.bak
- Size 1.0MB
- SHA256 972e654dfe0797fa8302eea6d24630f95892278c18893ff876e740aecbea3c44
- MD5 df16b4a7805579f174cd2c07c25b3cb8
- SHA1 6c16aa943d1959873e1c9c8e57496c29b2bf29d5
- SHA512 29a71f4b2de9fcc52229315afa579642984c57bea45e5a9e7020368f0db63ee5d633de53eec12f2b32d923395a6d9d829cd49781eadae0e9ac3e53476a7d17c3
- SSDEEP 3072:PyBHoBPrBDBEMAUeLSFLgvYsejxtttjggg7sss4dddqdddrzdq:PTrpBtAmLgvYBjnggg7sss4dddqdddF
- TLSH
  T18B3587A970F66CDAC13D01FAF9BDAE85F2552D4C8F59B20A36127E2409F230CD84D9D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  كرتييي/net48/net48/net48/EaxReverbEngine.dll
- Size 52KB
- SHA256 b804e3903ed87d1abb9454f3b2e685a9de945eff580851aae8960956dc204207
- MD5 2570ae96d5459fe56b678e18c7ae0d8f
- SHA1 2c078d4d72c3f1a3fc892807a067eff168506137
- SHA512 8d4a1046263d003a070f321ae2e4cfd9c675735b14d4bbdd228a6533f62373cec8371c5355935a446eacfe930c3eb32f9e23efcb4198b9434830881cb681d2f7
- SSDEEP 768:WbRNpQj30llNcj16uvYdj8r/eAfQAgOiGo9NZ8yNcmzuSxGxR9NuM4c:WXpQjElEh6bofMX9NZ8yNcmqPf9NuM3
- TLSH
  T1EC33E89677F84615F2BE97FE857243104736F9A36A33D34E0AE494AD1E327C0A8543A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  كرتييي/net48/net48/net48/ReverbPresets32.dll
- Size 115KB
- SHA256 a5ceb01b21d48853a597fbefa459501ba741e2f28135861cb4b4b82646288c91
- MD5 42b5708fcf19b64a0ed8c62181248bcb
- SHA1 a74307266cfd2141e48eac489f8b1fd9be12754a
- SHA512 43ffb4ef1ed7cd18d9ca0f43fb5a04c9abaca329ad7313141be6f26c921552283efbf9c455648f8b0d686b87730ef54d1508d3cf2f27813fa1608c3cad34d217
- SSDEEP 3072:dIFP82/J0OOOw4tayhKsbGquzWbU2gusGw:dIFk2/aOOOT0wKsbG7WbGusGw
- TLSH
  T140C37C02F580C5F9C68D11BD742DB76FCB3351489B168ED38BB49CA88EA92E15CB7325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  كرتييي/net48/net48/net48/ReverbPresets64.dll
- Size 127KB
- SHA256 507eb215983424c9d495ab0b281c5ce0ed14f7073f9e4f41403658ffb5a481ba
- MD5 cd36b34fdb4ff69b8645f62e13187f43
- SHA1 50a20de6a9cad793053c7527ef000dfefd9b7316
- SHA512 41a0e369658199314c5e3927eb0938b4dccdcd716dee6fe9beb5b81255ad679c9e9bff85c0103003335317b4dded4e0464e6f9d63a28ad1e6b3f0fe019c022bf
- SSDEEP 3072:PqUflqPiiUMnDPFY0YkZppoEePkxW8k4R:PviDPFYBZzMx7k4
- TLSH
  T1AFD35B03B58191F9E41AC0788327AA37AB3674C50B2267FF07B515342F9ABD53F3AA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  كرتييي/net48/net48/net48/Theme/Default/discord_voice.node
- Size 17.8MB
- SHA256 f7398679665a989aa326cb1938096f4f03ebb8be22ab2bfb8ecfd56193adc553
- MD5 7ca31dd9f8ba7fe271d67753eb31d11c
- SHA1 b4b8a8a47bd22d39227c3d61e673929ac856f0d5
- SHA512 9e314b0e197eed14089a05ad7f8d90a2d2a1aa3a9b23d3dad0c04a35fbce228688ff91ad3e2fd01ae1e137e77866f7a1543b9afb3017507d964bfba6207f59bb
- SSDEEP 98304:bIqBpoBdu/RY1r8aFLjOO419Ar7PjQH3ZPsM/xad+WiCjCfwUYRbpM7/hbqByMi1:tByEiP4ZPsM/x7wZPyGP6Mw0it
- TLSH
  T17C177C0BF29250ACD45AC4B4876B6A22EA25784E033576EF57D487613F67BE07B39F00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  كرتييي/net48/net48/net48/Theme/Default/openh264-2.2.0-win64.dll
- Size 954KB
- SHA256 9b392bf05cff1199cc44af236fa672c717f484e79c99d35bf1bed153a423d2d0
- MD5 7ffbf336333754f961bb65aa680c4dbc
- SHA1 430483568eb72a520b72775c38b2caa1cc0343ce
- SHA512 0a7ce2c3b05dcbc7be950733a5191387376bb448696f68b76fb09b2f781cb32b2d1d19f0ec9d84ee69243669726c3e88e4d9c427ad41113ee48acee5535bf2e0
- SSDEEP 24576:bCE8T5Za1prFgHg6YVIi2R/xIrlqMVKhNJ724:bCE06SbIrlt+NJV
- TLSH
  T19E259D46F2A610F8D97BD074C97E9627E7B9300E13608AEB09E0C6156F23BE4563FB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11