545d5369285abc1bd27142c6f52fcbcabeece64a440bd8ccf0b8f95c2f7bac5f

Sharing

Copy URL Twitter E-mail

General

Target
UUPdownload_with_converter_v4.4.7z
Size 3.8MB
Sample261030-2sefhasvby
SHA256 545d5369285abc1bd27142c6f52fcbcabeece64a440bd8ccf0b8f95c2f7bac5f
MD5 3f33b33b7ea51676fb9389ae5dd67d7a
SHA1 4f265c9e00c91506d11905ff8efd162ae23df674
SHA512 84aa2e4697d654c2b3d5cb2975525d96fa611b8c5a428a3267d8e7bb4c0dd05c92ab1d7cf0c57fa913596452bcccc14d1e31cdf60c10ec1c422d81f5a3b2e6a1
SSDEEP 98304:9nDKulgAfkayBdHbEu4AJbhpILBk9FCJ4tRw++dhmAX4Js2C0lds:xmLAtgqA1ILBkvTWnhz4JsB0lds
TLSH
T15C1633B0706163C2C2B05E8099D3331C9A1DE55A718DE72A91C2E7E9F29F43964F26F7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  files/7zr.exe
- Size 564KB
- SHA256 5e47d0900fb0ab13059e0642c1fff974c8340c0029decc3ce7470f9aa78869ab
- MD5 f86bb4469587005a6717649c9b160f70
- SHA1 f229314ebbed02098a4adb33b706d68026d866fc
- SHA512 a7881fe868c34124efa567b09274a885d05aef008914e5d341c4b8ead58451d1b29f4ace9782cd0c93d3c8fd1acb1f6e1e6cbb5b19cd51223295777b223c1366
- SSDEEP 12288:W8wKMieUWaxG8AchmRWZesGoK3n6cZ+l8App/FrUFv8KAcxO90:W37UWaxCcsYZ5Gou6w+l9p/VUFv8Kxe0
- TLSH
  T1DCC49E167AF1C07ED65221308B1D6BB5D0FA93680B3208C763844E6D2F759E6D73B93A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  files/aria2c.exe
- Size 5.3MB
- SHA256 2646c5d3eb8b0fc57e85f30434cef3d3a261d01f065fc4ad23f020c31f1dd6bd
- MD5 53d237cbbdac5ae3dc65c9ee8a51094d
- SHA1 b2aa5c6150f556f3fa6f6904ac57befc07a14b6d
- SHA512 7a29d0fbcca4402c32756ccdf8b8c79a36512d005f695d8eb9b8c88412a57d916e581ae58c55451cf6210cd76d6bdc166121492b1b653719d30a4758a7c3a5cb
- SSDEEP 49152:fcqNj1f/q2nGRqnv9KCnLEVmx6oqgemsheXhWo4liMCgyyOOK8uDjWmLSfPcZv4+:FfS2Kqn4CnLEslfYexusOK8gyo4
- TLSH
  T102462827E2A350ECC27BC170476BA273B931F81911307A7F7698DB752F21E60566EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  files/depends_win.ps1
- Size 2KB
- SHA256 913d60aaf207d99a30b14824b567282dfe6d0c21c0be4a67830888273452bd4c
- MD5 6cb75ccadfe7163a6dc4f17ce8e941f5
- SHA1 e0317aabd60093d06e49f48ed83d9889faaec476
- SHA512 d71efaffb552b2b58efe8919912eb968a534dd6f77a97539082acd9f3b17f19a31db02c53b0e579c1226c089aeb5938070da42e1d0930383b4e11d9ba7d7244d
- TLSH
  T12F51306A2DB21621275B21EA4C1FD14C735B103BC64D1F94B0BEB2512F8203E87DD9F2
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral5 behavioral6
- Target
  files/lang.cmd
- Size 30KB
- SHA256 c901b4ffeb2a8dad7d6009772525447cecdb8ac4e7df79b163f29b6bd9d20d93
- MD5 2d626f09b20a99d41fa39936ca4e5298
- SHA1 19438e43b0bf6c65f1111290761000f232773618
- SHA512 34bfdf098f01334a448308388dd68efaa2f42dd235c5b822b3adfa606f2718635bf19689c1963f8665c3aa4e7bced18a8aa8d5ff5db3fe215e16d716c3937c05
- SSDEEP 768:uGUJ9T6vKsM1o2dek19eaDV2oXYnNvV7ATv:uhJ9mvKX1o2deseavYNv2j
- TLSH
  T1F6D2B5173E05412901FAA231918B6A49F72CC4DE9325E9CC342D811F63BFB63D6BE5E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ReadMe.html
- Size 28KB
- SHA256 7bf180f4c653348b2b085a370ed57d10b0fc3e4d385d3eed03feb0e52c228b6e
- MD5 8cb7b6289cd6081b43ea13cf6c8134d3
- SHA1 28f2d3d788c2ceef5f597af976950119502d4fbf
- SHA512 9278fa9c8691dcd2fcef4c30160f5d547ccc59e9b2b0f45ccf357add9dc46fc1061750dffc47b6e0fb9e00c3a3457c8342a9c2f80d8aa4818fd882c4dc2a031a
- SSDEEP 768:ZfjnIAke1hS/eZpSOOgZM+l17jhzQTJyJiJgP64HZHNtyJl:ZfjIAvgGZpSOOgZMG1jGTJyJiJgP6ENS
- TLSH
  T156D296469AC05B50C77302599B56F22FEF34C0DFB2484686385EC24F6FB3967486B68B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Remove_Failure_MountDir.cmd
- Size 2KB
- SHA256 ec9ffddbc5776c3c25433e8d3d13afcc5b67cc454058ea266457c92590ac3ba6
- MD5 84d6a6e4640b2767dfb0eb611f99287b
- SHA1 80e729fd1e8f91a770f994114a14dbd5454b56e8
- SHA512 356625602b0817f3f43fc4984d8579cd7bee8483a1cf910428ef18509f5d931caeb6723524e517636c38f73cb21735772485e3bae317ded44c057013b8713983
- TLSH
  T163517138711CE0189CF0373A7A112043B29F47576364F3ACB7FB7829B98A61AB0765D1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  bin/7z.dll
- Size 1.1MB
- SHA256 3db62076e5fcc897ff29da47fe4029900a4ad696b395b6fa96acff1229444c1d
- MD5 0dce103b0102adec3279797665b7a4ae
- SHA1 c121392bab6dba8d04bee89c6b526e8e67650cc8
- SHA512 20f0f02097694579ac8794d56411fbe2d97c47d37794cb52afdabc9956c0452e8a3bb273ed34e463f31927e29e7e41c0fddb82fbbe688dd39c4113c00ec91bc9
- SSDEEP 24576:Gxb5vMX35l5UVrIdhcMEKWnttf7eePboHvVxSfOtl:GxbSz5UVrIdhnW1Pc96Otl
- TLSH
  T132458D15F7F1C0B4D98E56318A2CBBF550F8E71ECA1068C76780BE6E6F328D6C225949
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  bin/7z.exe
- Size 324KB
- SHA256 9e2631c19b243c28b0980607ced2540e9447b1166572483475547c1a9dd4ac0e
- MD5 7187ae605f4dce14bb23ea2623956335
- SHA1 f7c1df33b875c98f41dcde24117d89d42d25b7ce
- SHA512 f64522e2fb6bb61884fe53c34e79b355efb9ec33c02b2cd67d729af7d763e7b3873a5c7ce6ac7bb4567e6bcf8c70cadbc66f511e8bb151ab05096a832032bc8f
- SSDEEP 6144:J5lqo52kDzMYDJSi7+Ni2ER9Vh98+1PrEVhkQf0huIDaLOjm:JMqzBDJkk2ERvT8MPAf/O6
- TLSH
  T1E5646B127FF4D47AD6430232CF59ABE1E1F993A94920094327C41A2CAB758D6D379F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  bin/APAP.exe
- Size 4KB
- SHA256 4b68745097b4d2da4f13d4dac526b770ddd91456a1bdf5b181bcf29d3b067fae
- MD5 28c515feea00696122fce7156289be91
- SHA1 3dfc8429a4d6760c3acafbf92c26d98975e1b1ec
- SHA512 7ed7f9c6961161ba1a4773a5d5188afa45d4d75d6fba7530ea8fce633b654a8097766ee9beabd2064f0e03131fc20bb5e7854058f8083ea5489b1d5ea42621f8
- TLSH
  T1B781D805F3988EB3C09F0B3D6A73561413B7D3A56921878B9DD421197C732381675FE6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  bin/APAP.txt
- Size 898B
- SHA256 e0032a8fc8b11e3e6f457b574d2663d348132d70c695f0b921b8af05007dd002
- MD5 87250ebca5a379170543a0073c1ea3e6
- SHA1 24780f0572c9cc830e2e5f279337e15215e54d02
- SHA512 7150e28b21338be9a65ab648404bca06a800f22e6d696b71f574bdee00baa5a709d182ded20ba690897cb0f03b628581ae4bbf1fb1ffcb856d11f4cad600fe38
- TLSH
  T11211E335C54C4C3280371256EDD1DEC5F56F86DB24149EA8314B8A6C0DB26D1B201CE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  bin/CompDB_App.txt
- Size 3KB
- SHA256 d40f2c89ccba4795856aa355545d62cda8fdc06542535cd71a4dc6c086f2a70d
- MD5 8a461169479dba82881195a5d5446dc5
- SHA1 28cf375abeb8c96141c3f278900df7d8fff69dd2
- SHA512 774be46dc7c4a7cb496cb7728aafd80385d88f2b750e77bf5e88ad9e4b5555056b0f57f4414b062185c5df89f479890cfa312a829c97ba2fb5772126a48527d7
- TLSH
  T10981EF5B9D2A48B1E16B6771069649B4FEAF90FB0C1C03807DAD55CDCAE15C8A2CDB70
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  bin/Microsoft.Dism.dll
- Size 55KB
- SHA256 ac6b01b934d3a1a316920c723d11342c0bd17f135a10abde8a3e7fcc66faa795
- MD5 e7e242e90b50fdbec0653b5485535433
- SHA1 8f214e90e8e69faf0f5a3fa0bb9ee22b0ba48e3b
- SHA512 371f3d135e48c82feee41d9212d9961946754df73b4c1f2a111b97c73a38e2a5f812a1507dc01129913dd63fea690369ee19a99b66e5430f132d149a899f930e
- SSDEEP 768:dyU0jeS30Rc89H858Ghc3CRTWaJqC9EU96d1YSKlbGNHB1mNWcksXpq9MbXblqN:dyU8P2858FTNh1nc/M9MbXhqN
- TLSH
  T1AA430A1827E84F39D7EE0B7EB4A001014BF5FA4BF533D75EA659E0A828137C54A126E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  bin/PSFExtractor.exe
- Size 12KB
- SHA256 69aa3d57c1fb049d728ee99bbf6fd341c659526ab7ebe20e631929ce6cfd36d7
- MD5 cdc246981d3c7d79133ba55f2e8e5cd5
- SHA1 c4d23fa8b9c2dc150982f53fe18aad0523a12d42
- SHA512 11ec829b781dba24c82e11eccc05967352270e6bb040a4d73ab2ca4e9dd7770a74459615e29ebeb4eff4c3040c692d56180611015eb6ac10e82032e0804ac855
- SSDEEP 384:U8yJTMR6UknEM7TjJ3Jy8WgCygA5to3Tx2PLWHq:Um/ri55y3gCE5tojgWK
- TLSH
  T135420B0497E44239F6BE47363A7247014632B77BB825C66E79CD050B2F26B414793FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  bin/SxSExpand.exe
- Size 85KB
- SHA256 9e889abd2d6068bc59aededc64a45d96e04c7ad5cb1d70f606f8ab0a96433b4a
- MD5 ca13105c6b1a532b8aeec611ec6459ef
- SHA1 9758ecb1797e4037da3a20d117119129b6c3454e
- SHA512 12eb55abfb3cd97286f8d47c9c561cde1efbb025f356bc3eaa7b4665a75ec48364b31e9aa9ff2e68dfbc06a0b56a49ae46550acc93f65afb83402322d592d2ac
- SSDEEP 1536:FBhcBqEuO81aWG5mINIRkPOybxHC2sfJxJ7UvPrnvReCs:NmqEG1aWG8ImRkPOybxi7xxJ7UvPrpeC
- TLSH
  T1BA831903B6E19434E5B22BB46D3452256E7B7D666D38811E7A9C4B4E5FF3A808C36323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  bin/Updates.bat
- Size 1KB
- SHA256 68cfee5caee25321e0190815b4abdd8e208fdfbdb4dac1dfc3168fab480604a5
- MD5 964be95db8fc4b0cc11bba08f07da0d2
- SHA1 8d654e1a61f790eff9b707b697854e8bbfeb0299
- SHA512 92991b2ecf98de0df2dc0efcc0b8756daa8d128b822f67e04b0f37058dc20a94db9c5772759c083b49149934649c6141bbf6bdb1d7248df3b809d97864a65f9e
- TLSH
  T1F2214BAF43899254FCF10FAB799BD3E4A89F900145A021A2FC6214B6F86E12066127D6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  bin/bcdedit.exe
- Size 369KB
- SHA256 8ab894fc1acdc83d3c54a3bb6ef65f2d8d06ac8015ee39ab52872eb0dd0dd826
- MD5 e48eee77a8a6390b89781ccd1d7bccc5
- SHA1 b978202fc8574d9380f74a1c5b59fa290782079a
- SHA512 5a71b7f550c26196133ae78914f93d1ac4be7962e89ea86d298cb0481e9a522f28393fd43d1d8717927b8a783dc3704d6e9f83964295c6e878765a41dba92e8c
- SSDEEP 3072:eWg56t51b/0MQPdFo7WhYnG8yVZ19AmCE5EP2DbLZZsvtBMhdNV/ysXo3962xKeE:7Xb/YPNhYnGtZ1T5w2lZOuVsWj
- TLSH
  T1A984301362ED0115F1F27A745AB955708A3BBC91AE3AC69E029C019E4FE3E80CD71B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  bin/bfi.exe
- Size 90KB
- SHA256 8f26a3f1a1f6f9ac0c279b7df56c41c79e4f23aaefd7da6e6ded16d091d4ad81
- MD5 edbdd5893d753fa68865ec3ad7dfe06d
- SHA1 8d3a30e823f5d0c5e3fbca135bb04891475219de
- SHA512 0c0e88f1f5100a2f67ee947b86081d1c30507eb018c1484e12b9255f6578aa9e0b59d6e5dbbef8a8e34d9e36e90666d97d44e3f3cc29dbf0f8bb3bc7584e0756
- SSDEEP 1536:gIvqSxs6WCegu1660dUyL0sCtA47jpsV4FjiXDJBE5baPXYUxn5ob2guBtXZ:gIhsJ166QUFJtAKjMXDJBE5kBzvX
- TLSH
  T12A93026F3E976E3EE53A2A745B08AD285B958C8C23E6D1B74C33531D293720D7349253
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32