4aa96d63691322d5ca481eb67e17ff49418f91f09b331bf2f6054fa384daa7ec

Sharing

Copy URL Twitter E-mail

General

Target
VoidsLibInjector.rar
Size 28.5MB
Sample261024-as9g4aws7q
SHA256 4aa96d63691322d5ca481eb67e17ff49418f91f09b331bf2f6054fa384daa7ec
MD5 dba8167f5620fabd61fc72a6a73dae9e
SHA1 72dbb8538563898c314918640457778c1343c9a6
SHA512 32ed993d705738fa03ca2c13720648e24cd742ea3d4ae3a8cdf3e9d1bf27aeb1af5b9ead9b2cad54e8fac55b54e7bdfbee78bfb098dc0fb4d0bccba12d69d2c2
SSDEEP 786432:/FXRTdiBWzIX4DLiIEAPdGglMWKjzBvRc8p9NXQ/3Sb:VCEDLYgtaWqJRc0XC3Sb
TLSH
T15367337C2F99D3C2EB6191EAF98456A3E78ACCB80854663271CC3454B7A50FCFA73512
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  VoidsLibInjector/VoidsLibInjector.exe
- Size 11.0MB
- SHA256 c399db033c1cd9a7b0f31396d555643ca3a7f7662093ec2704bbda54043f8dab
- MD5 7929baa4acf82248f2cdaa9ed0d53c95
- SHA1 cba40a1ce84d2a2cd97d78685bfad06edc8ae1f6
- SHA512 da6b7d7a4472d0a72b7cebd985df85b976be3245f3562a3845c1a8cb04b6994541c0162bb7b172adf1beb20a380dbc5ad8c814432b5aa999a101b2b358403b69
- SSDEEP 196608:fEmG0W8UAgoyfA4aHzfiirGUFOmFPALCpuDYOYOpq82ZYdiX4Jkz9Rwpr2Zwl6CM:fEmxW8teaThrzFjPALiuDX91GXLwqMtq
- TLSH
  T175C63388B7D208B4E4EFA63D98D15C1A56E5342143A8C3DFC7F52A702AA35E5FE30752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  VoidsLibInjector/pyarmor_runtime_000000/__init__.py
- Size 103B
- SHA256 0de658fe51036af14ee1282befa322b8a0f205b45a60cf336ea203ecd1ae6f47
- MD5 95185b96d4177f4153d8f21a0efbf831
- SHA1 ebd99e6861289cd1a25272d2ea5ac614760e77bc
- SHA512 a06959cd5fd5452a227d75233d33771735ebc6a29d06dd5413bbf81b8f2b1c2a7c18be8cdcf952628451616010ef85d8d8698aa83c20321095f1b82605c262a8
- TLSH
  T182B0129108957E83F231A1C1C26D647903B934E33FC044B40E489770CBDAC52CC80211
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  VoidsLibInjector/pyarmor_runtime_000000/pyarmor_runtime.pyd
- Size 624KB
- SHA256 89ee6ab468e5dcdb55f5c1f7bfdb01ce598d44e5f3335763d76ca9ee1e7a86e3
- MD5 0c9521382689b318280374fdcfa24255
- SHA1 41f2ed340d6dd153f90157ead96acacf49ef6486
- SHA512 6805b8d3ee62d9099c3a2f2b0c5e1d3f27eb87e43fda225cd84368bc4cabc2a4423fa4bff77b62d8671cb91735e097946aa16a8ec61ac08c6c510ee02ad82e8a
- SSDEEP 12288:iNBCMeP0acxOctjdcg7fUoPakbnanExLJ:iLmctjdcg7fUoPakbnanQ
- TLSH
  T1CBD4294BE1FA19D0E6B6D17C078BF2337C3ABA5C8160775B355CD3A127D0A5222E5B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  VoidsLibInjector/tools/apktool_3.0.3.jar
- Size 14.8MB
- SHA256 dbf930b076c6b9be08d57c449cacefc3bdd6b71ebd59b3066fc0e1f5b14f9423
- MD5 50d98c920b005d2fcdc18d3d52e3f23b
- SHA1 d1b008bcf7456dd74474af9146e38d4255f548a3
- SHA512 db981572137fe44f2de7315f8b016317ac5251343b79dbe9127f130cd49316ff4b70891e8264f62cb1b3d5c694de8e8f95f65ab0611533b61646fe03b3c39298
- SSDEEP 393216:U2LT6PuZEemGwt3sjfhYMBKeXhSntdh8i0:U2LmrIhnKOonbhM
- TLSH
  T152F6334EBDACC038E4C39077103A93A2DB51C158C404965F07BAE98D9DECE5B5B1ABDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  VoidsLibInjector/tools/uber-apk-signer-1.3.0.jar
- Size 3.1MB
- SHA256 e1299fd6fcf4da527dd53735b56127e8ea922a321128123b9c32d619bba1d835
- MD5 d1dedef51b68fc0ae1f94199ab35b894
- SHA1 1da0c40d1606c91ef3c509a1acc479137cea15cd
- SHA512 6b31ede83c1384d69c819a73ff728b2a94a42f0bfdc837b1b86a4b684fd2a9c66225ef76f6189769639481a1ad47b6bfa5abd47690ba78c580781c456b60eb11
- SSDEEP 98304:j6q394wIE5XBldJFBcTGmdFAchWSQnYvRXTJVjDflcBp:j6aiBwBBvcqEqchfYGJlBlcL
- TLSH
  T1A7E522126EFA803DF26701325066C426FA1A66CDE096E25F26E45ECA4DF4F835707BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  VoidsLibInjector/vli_core.py
- Size 156KB
- SHA256 6e9ec1f31e2f8727e452d65eeb724460491e0058f50636bb6e0a6c366b60e011
- MD5 c9d3ef0f12ec0727fb2efd2017db2345
- SHA1 668212d0d2ba2a44df1545df0974312e48da524a
- SHA512 8e8213c8a226aadada3050994815d221b554b2adcbf787a11936d56384ca4657194756b85a80a3f9f6d180daef126cff019a57df975cabafef99d915f85fdc51
- SSDEEP 3072:nzvNWYyWPgiOcXT4Yjd3nrBG8YfpTE8+utYC5QysSqOpPBY6L015XmkJ38Kl3hDW:zNW9KXUsrBWZSCPsSqJ3h3D9/eB
- TLSH
  T1D9F3A8855622E17E5B96CE192F43AEDC2868D9EFC4C9E701F0845A4FF0A873C94E57C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  VoidsLibInjector/voids_lib_injector.py
- Size 156KB
- SHA256 02ccba1221eaeaf84de24258bfe6ca73317135c3d455fb23bcc5f8de041b9e65
- MD5 204c179af9f7cf3abdeb8d33970a1492
- SHA1 4aa661f0e5c824bbcc8358e38f89bc481d82db9a
- SHA512 cdf6068170c8df7a5ca06463d4bffbfbcbd0cfd78084ae25aac170b77691395e5252a8f33bc0d7c8a798fec8e287bb07f988f61a4ac93004e8c4a89cae1ab2e8
- SSDEEP 3072:57pUFO+PvyyKjb/yVH5GUVthaYMITg3OUJoJHo66yMkTe3NlfgtSqc/i6IPvki7/:57pUFO+XN2jy1thFBc3IIpJdmSqc3DE/
- TLSH
  T1FBF3AA855622E17E5B96CE192F43AECC2869D9EFC5C9E701F0C45A4FE0A873C84E57C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18