ad0bfef9626ed1b29597d403de7b9a10312f7477c405c498b4bea71f086d9a71

Sharing

Copy URL Twitter E-mail

General

Target
MosaicVPN-Portable-x64-v0.3.76.zip
Size 37.2MB
Sample261027-q6fpyass3q
SHA256 ad0bfef9626ed1b29597d403de7b9a10312f7477c405c498b4bea71f086d9a71
MD5 2b8ded14486d5ca6d6aacf66b188bdce
SHA1 77ebdd50823b10e64ee79ad18167531615fc9ec7
SHA512 7679cc510a1c4e06a16b0130b3946db349156ad128218a1ad2ffb6c72cd2c44f71a499975bae7ce842e9c8d688880739ce63315db5ee52377b5c5231543b2302
SSDEEP 786432:g4AYfoNp+iQCH1AN07jtESR5EwMSU3MtrB3FM1zK9e7JCoxzlDMAN:g4ffXwHSy7OC5EthMjVMZKECokAN
TLSH
T1C3873316E6E42F89D451C5D31A302AC6BE235BA8F95CDB783CF843199872E504E0F97B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  MosaicVPN/MosaicVPN.exe
- Size 106KB
- SHA256 c01d7f03f73fb9620009322fb29e1b88ee7cfd808b66c45cbfeb6630529a89c1
- MD5 806119aaca481c8a5f30f479b043f13b
- SHA1 af94d501984c23c1f300029b7cb158a7bb3b7e86
- SHA512 0a265f0e1fd7352cc053f54568f5271b9387c09e4b4171776d467762a32fe1a300ec9d07efe776015e3edc9eea13ec17ce5a89e92782b191a43cd5166b9711e1
- SSDEEP 1536:nDFsCuarCM0nji2Z60sZb/cYM4b79Gz3Z1bEfIMB7PExXP+vrZkHGQx0JA:nhsvdji2kvZb/cJ4X9GvEptPiPi6R6A
- TLSH
  T1EFB3AE56DB2550EBE36D9D78CA030A05DE72BC864BA1A5CF67F08DDA0E11ED09F3E201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  MosaicVPN/app_links_plugin.dll
- Size 147KB
- SHA256 d3b266d309971d7c302f7b11b436a3842a470c051a024422c9a6f9b372090cf9
- MD5 aab90139049a03d8ab88149c2529d845
- SHA1 d7860c67a88eaa9891e7104ac45f276739a90fcc
- SHA512 b40cb5c2400f96c98c3d1fc5e851d1df94707521683c6c96e6f5c2e1cd637ef63282e651bbe824fdf0329a1316a0f3e8bb854d7f620b40183175d16ccd3d2347
- SSDEEP 3072:+2KWc6AH0xTV/97Xc7ZfiJ4wMydoTsqVuQd1puXyIzW3:1HNxTp97M7BiJ4LeoTsqsQd1puXyIzW3
- TLSH
  T1DFE33C2BF669406FD25AD0B8CA534D46EF72F8850791A7CB17900BAB0F17AE85F3E510
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  MosaicVPN/dartjni.dll
- Size 57KB
- SHA256 00460b07629c625fa245a52635706e1cc4c09b479ec9e22c7249368240921945
- MD5 3902b25d8a072496ac9719a4d3a49664
- SHA1 702c41b71adb14d2340f6e2232dfbeb09a146c9f
- SHA512 7390e0074545421f1a561b092a4c1e715ae58566f410c62f0445627fed1648dc558c1b872e9a1d5536bebed66305a97c19c99a6c1beddf152f8aa6dd87f31c03
- SSDEEP 768:Cr3lrat7JgStDe3CZagCCtulJMXoa8tNSy+svx7BpZSh75jwQQ5wPREo:il+N96j7dtcyVx7BpZSh75jwQQ5Kio
- TLSH
  T1AC4393A99BB4416DE16AC1B8D063891BD273F044178387CF927D429BAF2B7C53B3E245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  MosaicVPN/data/app.so
- Size 12.6MB
- SHA256 f4646f1b1bb262d98429e5823cfb44528cf6a98a07e6b767abe063f7b88e91e2
- MD5 7c3a02e4493871124300f40b139c5771
- SHA1 ca8bb0a1eb03abee41d7be3d83b261df0b6a45e3
- SHA512 0e02518c99e8dacb8199df26c8c5c325d31a4f5013fcb120e26e1ca7aaa45a1eb07e02dee5c6dd05dc68522205912e44177785070b659597a36583b37b13c31a
- SSDEEP 393216:PUOcQvNiaO3E/EA5eM+QS+tlFPwgcMz/gMQuffauexX3iG:Pl2
- TLSH
  T10AD63A93C0A48761C463D673B79F62A19F1438DC8A74774609C85A663E8BCE04AEF737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  MosaicVPN/data/flutter_assets/assets/maps/world.svg
- Size 160KB
- SHA256 247a80953e7616016fe87e650b1e66050ca4c806cc1fb15d0286117a759d78a6
- MD5 badf136a81d500a9211fbc1133859123
- SHA1 84537a7f15d1e56b37e1ff31a45eadf595e97115
- SHA512 e0c75ccc0adda136ecf681abc4e7976cb12a97240ee59f5a373ed28fc25669c6b3dcf40f01dbe1cf09c796db1c9d38730279716734efbe56ae90e2f3d733e5e2
- SSDEEP 3072:z/eh4qujkYEDABSiMdCkXyGyDaBOppVDDpfCn32RlJfYbLjBMilWKnZAbc8A3HyN:jgND8S1dCD5hZJAbhMPqmbc8A3HyEI6+
- TLSH
  T14EF34E40B86DBD46CBDC58A64CAB9A97DA79DB9FD24F4173132CF2CC02562136E03E94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral8 behavioral9
- Target
  MosaicVPN/flutter_secure_storage_windows_plugin.dll
- Size 155KB
- SHA256 408b0fa9fa368137eb8182369b92b1036ddae3d25ac9f49bb181cf84384e88e4
- MD5 74e9759c2dee44002362e52cb1c3ffe3
- SHA1 c9b178959e7ea287c47480af33b37d29d59e5741
- SHA512 53c65008413d28396c498c57bf90b92ebe0ca0af14e6b912b8b8b99ad288894d1692961658e7e387c1b041522ee57461424cc19f2037d5ca0698df148f759d86
- SSDEEP 3072:us9yH51PDyECme7rzlX0YjtCS8iuvf5F+/IFh6ATyk1QPird4ief:uc051PDyECmclV8jiuvf6Iz3h1QPi4ii
- TLSH
  T1CEF33B27B758406ED266D1B8CA534906EB73BC86473167CF139196BB0F17BD86E3EA00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  MosaicVPN/flutter_windows.dll
- Size 20.3MB
- SHA256 8f989f1255d14d8521c20d8869484e65a9661dab5e90dc00b7da97490eaed220
- MD5 b3ef9097a4738d2006da5229f43a21d1
- SHA1 81c8c1702445837641fad6ad11d3351a43521124
- SHA512 024a2d33a98cfbc03c55c0b7bbdaec32dfcd77da3baf08101db9f1e5b24c52fc9f3acdb95ee1cda54e87189da4d7054170136992dd0f00de2ad72432601cf337
- SSDEEP 196608:dkgvRh8xgRQov6OgkYNqBnxybboACqv0K9cccc5JEw:dkgvUxCfgZKnxybboFm
- TLSH
  T116276B03E29640EDC059E178971BAA27F670B84A0B24B6DF3B5C47213F66BE05B3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  MosaicVPN/mosaic.exe
- Size 6.5MB
- SHA256 09683fa7c94c6e08ab0e10fd84e559d388c0bf97b4081d5147ad289d75cfe095
- MD5 f4de3d1c5169883cd579fbf400da30c6
- SHA1 167c9ebe189fe8a5ea84e33f1c94917e8608e594
- SHA512 c2e7f50cf225cff9818721df4c9dccc8326e474da3210802eb4518b3c299f405d2346adc51c78c8d72047a472269beb63e64e737b8da7f9854cf3a8cf07d1e16
- SSDEEP 49152:Fu2fjSK1Z4jrcA4AtNh/9xWBb739tZQIimOhKmGpdRcf7FHV0jTVZ+bVkroe2dfL:owZquAHd9aZ+mOhBGScyg2AVE
- TLSH
  T16C664A07FCA155E9C0AAE2358A679252BB717C485B3123D72F90F3282F72BD06E79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  MosaicVPN/mosaicd.exe
- Size 8.1MB
- SHA256 27aa7f792e1aa9cf6aab4d6b22da76d675d4f52658623c9a3734641cd012bcef
- MD5 f3fc64bc90d97be4902986f0a055595b
- SHA1 22d26b1e1fdcf540682de0f53656089aa6d8370b
- SHA512 e1700139f991826128e742fc6a0e75c874af5b4746a231797781fd73fc80a0f0f8fe549c677179d42f180c2ddba5e48ce656664ba6c79d1906a2653a8d73ae70
- SSDEEP 98304:vUxzg+mxznLdtmtWNLdvYZCUVjEXwfYR0mxRdhfKwmsPJY3HUEpN:vUlmL3mtWnNUVjEXwfYR0mx/hfwL
- TLSH
  T1B4862907E8A554E8C4AED631C9379222BA727C485B3123D32F50F7682F76BD06EB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  MosaicVPN/screen_retriever_windows_plugin.dll
- Size 117KB
- SHA256 8eff3c37b7d46260620371502c901a1a3c0c46271ac1f3ce76f36ac46e5ec834
- MD5 88c69168808ef4bb4dbd0c582a3437f9
- SHA1 1e1a23115c77e7b814406b30079f86991962ee1d
- SHA512 936ef7c02a5913c0d75114c2086bb708bf168c307176d90b6a5ab8bb34ab8eb2e0c458e03805cd53b4acf9735801243faef44a7db6836f58d3f352b5dafd9156
- SSDEEP 1536:esNI8mKwdNdeCCjNpP2+HPl9YiM5o42H1TlAz9baPw8dfVPPY7aQd3WECZ/QnIjx:e8IhN8hLl9YipV6IVOaQd3pCZ/Q8
- TLSH
  T12AC32B2BB65D40ABE21AD4F8CA574D46DB72F8554B6167CB17800A9B0F1BFE90F3E500
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  MosaicVPN/share_plus_plugin.dll
- Size 135KB
- SHA256 2c04d0caa8beac21827c20f7d30e0105bcd67c810c80f9d5182c1656ef80f0bd
- MD5 216f4471d515e7a90b2b676eba34d8fa
- SHA1 8bd8ff3f1896bc36d28916147676609f38000cef
- SHA512 c002e06b4682bdc3b21d0c4b0c1bb01ae661d385387d7d652b82edb7d54f5a31bafd9fcab8dcbfd0c2291a5947f67d43261d88c343502d7061f92a23783da5ad
- SSDEEP 3072:rLFGOsP+BvAihRKC59RKN+SlC+Qvg4G9uUrWm:rLErP+BYihxypQvg4G9u9
- TLSH
  T1AFD32B27BB5C809BD136A0B899478E45DB72F8935B9197CB3750079F0E67BD80F3A211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  MosaicVPN/sing-box.exe
- Size 43.4MB
- SHA256 140c46d667d16b1491f6b830812e846c25aa2b18e68bd695023c69c393ad7081
- MD5 6b3c5ff9eb7599677d3eb522aae120c3
- SHA1 5c4b04337ef3eae6d8b74d684c01049e03d02ef0
- SHA512 81fae835ffd171cd5fb2ce2a55aa6df8b2e69113edb2e896c6f6edb4782b3382ac8e92992c27a9664faa30283a5954d0b0ba8c63a5cc567ccc9a4372649c3caa
- SSDEEP 196608:FzO3KOAVdX7Z2sitYJmlHUylj0kzg07EoSQShUlOi8xGJP6JZE:F63KFZjJmlHHaOg07r1ShUlO46Ja
- TLSH
  T1CAA73A43F8694CD5E9BEC930C9A655237B703C65472027DB2B60B618AF7EBD065FA320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  MosaicVPN/system_tray_plugin.dll
- Size 127KB
- SHA256 c19a2283507dbb0dc84147991695421a0a9c9f2f264474da4b6979e593c73bda
- MD5 b56b0612388e1d3a1cd9a909ba18cc73
- SHA1 cafbb11c3ab6b77be16b91f526f45066c4191f12
- SHA512 c5b0dd2af228c1ac61d8b9daa3f3deec6c8f2ac2ee5d8cade1e9a6185de3a8bcffc668f054f0c417352a1e9cb366f21671ea6ae128e62637fb72ced91241d7f2
- SSDEEP 3072:JeMFo7cID5rLcM3uA3iM9JTlSVrRwbYlQ+1pSvzgVQ:JAZDdLc0uqi2JhuRYsQ+1pSvzgVQ
- TLSH
  T1A9D31A27BA5800AED216D4FDCA534D06DB72F8860771ABCF13800EAB1F57AE85E7E510
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  MosaicVPN/url_launcher_windows_plugin.dll
- Size 96KB
- SHA256 b1a10b1e7c4889a07ce0cacc9627a4e0089965cb36db1f4f45f66d7756e897b9
- MD5 54e35a5404b04ef3e868baacedeb8f06
- SHA1 9d871035712499e9008eac84b595d0de6b82417e
- SHA512 81933efa2529b95dedfb4a59d8089d20a52e25fe956818e6e14dd62ebf8e7b4de8f271fd1012886b9c77e0e3e6e83794519ea4e5f2eed14c87d9eba4a9b744c9
- SSDEEP 1536:bnY7CBIsJix63UiqX2zqwXimfYP5sfmfQAWZVwJM1zO:rTBIsJ2GUiyy9feQAkVwJM1
- TLSH
  T14BA3192AEA5D50AFE25BD4BCCA574D01DB72FC86076167CB23905ACB0E27BD90E3E501
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  MosaicVPN/window_manager_plugin.dll
- Size 128KB
- SHA256 12a4c93c79810335d523918f97ed65f1d3d94125cb6d416f8400272bb5c3ad91
- MD5 e772bea221435f850cee901fd0e90bf6
- SHA1 9e2acae7e0e66888f21aa747e92c26b334b87c9d
- SHA512 1596b3b1d26b553536b1d4daa969fd4fb0934c02039278ecb1f15fcb06389767571ec85b5cc9f8dec8116d5afb1c0e26ce560bce14ba44683c88bb8e3971fcd7
- SSDEEP 3072:Rvv0siLKn178/4+Binub+DXHzzHfd1ibzT+BSAJ:Bv0sw0178/4CinubyXHfd1ibzT+BSAJ
- TLSH
  T14AD34C2AF65C41ABE12AE4F8C9835905DB72F8854B62A7CF17500EDB0F17AE45E3F910
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28