818b4ee5b37fd360c912f4cd6b6eaa3f9240d32f754a8ed719f5dff224c94214

Sharing

Copy URL Twitter E-mail

General

Target
maid-cafe-se-installer.exe
Size 1.5MB
Sample261029-1tp3ysfs4v
SHA256 818b4ee5b37fd360c912f4cd6b6eaa3f9240d32f754a8ed719f5dff224c94214
MD5 9bf170f9ea5eefc3a1f832302077052e
SHA1 6323411e2e5c2cdf1b3bcb1f85f91f5edf86a5cb
SHA512 ad224d9d9a4531a15b964f5abefde08dd16662a2eb2935ec43c3ef6f0e67893bb2c6fe424ef2268575d785290eadae7ab4730afdb65b211dd28081908cbdcac0
SSDEEP 24576:HnoX4c9QcnSdjdZlGquMzhYT648r5GAg+jUbf3xl8NmMzielV3JeD2k1rxm5abeN:H5c9QcnSUMg65e+jUbf3xuN7X3Jk2wiT
TLSH
T1997533852F7AB073DA1F0AF2BD7A5F6517E7D31142CEC3470BA25246BC35288446EA93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  maid-cafe-se-installer.exe
- Size 1.5MB
- SHA256 818b4ee5b37fd360c912f4cd6b6eaa3f9240d32f754a8ed719f5dff224c94214
- MD5 9bf170f9ea5eefc3a1f832302077052e
- SHA1 6323411e2e5c2cdf1b3bcb1f85f91f5edf86a5cb
- SHA512 ad224d9d9a4531a15b964f5abefde08dd16662a2eb2935ec43c3ef6f0e67893bb2c6fe424ef2268575d785290eadae7ab4730afdb65b211dd28081908cbdcac0
- SSDEEP 24576:HnoX4c9QcnSdjdZlGquMzhYT648r5GAg+jUbf3xl8NmMzielV3JeD2k1rxm5abeN:H5c9QcnSUMg65e+jUbf3xuN7X3Jk2wiT
- TLSH
  T1997533852F7AB073DA1F0AF2BD7A5F6517E7D31142CEC3470BA25246BC35288446EA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
- MD5 c953dd0aab774f1446fcd63fa7c5f613
- SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
- SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
- SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
- TLSH
  T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  maid-cafe-se.exe
- Size 4.1MB
- SHA256 02c7a46aa404dc4f884923fca28044370d853037d647608878319771039a7d18
- MD5 49ed6de4268c695ad7295a9312c7864e
- SHA1 6d17fbd4968aecf3c8d75d707af5ac86d582bc3e
- SHA512 0bc6882f7c0e099fe2895f54fa6e3765d80b99bb4462e352de49c9437e4eae3c9804e607e08d03a7a5a8daf9343cd9be855bafa2b00796f80ec62630c43f3c58
- SSDEEP 49152:4+BPhRa5Y9sg6y3cvQZm4PrB280LydX7EbNfUk+6tO/yclsFFFtFFF+n+pT7UgI+:HNT2u//yDQ+7rI+
- TLSH
  T109166C61BA9655A8C1ABC074C3978A72AA3134CF0B34A9FF41C492782F76AF45F3D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10