75002110309da2163f8887124e1b6fbc8ad4451b317bf4d1f00032cdf0081e5b

Sharing

Copy URL Twitter E-mail

General

Target
UUPdownload_with_converter_v4.3.770.2.7z
Size 3.8MB
Sample261030-2sg7dssvct
SHA256 75002110309da2163f8887124e1b6fbc8ad4451b317bf4d1f00032cdf0081e5b
MD5 70e6a5a97b0b6a68de7bf838a9372e24
SHA1 83dd52cfa317466f65241b971fa81c906e4ec403
SHA512 1801db5d23f59c894541501a6a3b0d6440ae8162f2b712e1155f3ae04832b2446ee0261bda920426c8f2459a727a78dcce71027e2754ba211bb014e9aa254228
SSDEEP 98304:G6RpumcbnO2Cp9qVzk9FCJ4tRw++dhmAX4Js2C0ldX:G2ULO2Cp9qVzkvTWnhz4JsB0ldX
TLSH
T1CC0633E4F065B3C2C3643E1008EB165DF91DE065B84E5B35DC8B97E4F24B46EA0D26AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  files/7zr.exe
- Size 564KB
- SHA256 5e47d0900fb0ab13059e0642c1fff974c8340c0029decc3ce7470f9aa78869ab
- MD5 f86bb4469587005a6717649c9b160f70
- SHA1 f229314ebbed02098a4adb33b706d68026d866fc
- SHA512 a7881fe868c34124efa567b09274a885d05aef008914e5d341c4b8ead58451d1b29f4ace9782cd0c93d3c8fd1acb1f6e1e6cbb5b19cd51223295777b223c1366
- SSDEEP 12288:W8wKMieUWaxG8AchmRWZesGoK3n6cZ+l8App/FrUFv8KAcxO90:W37UWaxCcsYZ5Gou6w+l9p/VUFv8Kxe0
- TLSH
  T1DCC49E167AF1C07ED65221308B1D6BB5D0FA93680B3208C763844E6D2F759E6D73B93A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  files/aria2c.exe
- Size 5.3MB
- SHA256 2646c5d3eb8b0fc57e85f30434cef3d3a261d01f065fc4ad23f020c31f1dd6bd
- MD5 53d237cbbdac5ae3dc65c9ee8a51094d
- SHA1 b2aa5c6150f556f3fa6f6904ac57befc07a14b6d
- SHA512 7a29d0fbcca4402c32756ccdf8b8c79a36512d005f695d8eb9b8c88412a57d916e581ae58c55451cf6210cd76d6bdc166121492b1b653719d30a4758a7c3a5cb
- SSDEEP 49152:fcqNj1f/q2nGRqnv9KCnLEVmx6oqgemsheXhWo4liMCgyyOOK8uDjWmLSfPcZv4+:FfS2Kqn4CnLEslfYexusOK8gyo4
- TLSH
  T102462827E2A350ECC27BC170476BA273B931F81911307A7F7698DB752F21E60566EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  files/depends_win.ps1
- Size 2KB
- SHA256 913d60aaf207d99a30b14824b567282dfe6d0c21c0be4a67830888273452bd4c
- MD5 6cb75ccadfe7163a6dc4f17ce8e941f5
- SHA1 e0317aabd60093d06e49f48ed83d9889faaec476
- SHA512 d71efaffb552b2b58efe8919912eb968a534dd6f77a97539082acd9f3b17f19a31db02c53b0e579c1226c089aeb5938070da42e1d0930383b4e11d9ba7d7244d
- TLSH
  T12F51306A2DB21621275B21EA4C1FD14C735B103BC64D1F94B0BEB2512F8203E87DD9F2
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral5 behavioral6
- Target
  files/lang.cmd
- Size 26KB
- SHA256 248e03f0594d85111413689a76f8659f597999d9ff51b5dab39d68130ca911e8
- MD5 cb01e75edbae1f3b8edbeefbc91cc55c
- SHA1 ff449d4674d3c244dca7fd2cf796e3f3860bf176
- SHA512 1e1e10bf1fcb1de02237d25427e7cc55afa21a3db9edc5f2c7ad4dc81111a86c13b2340da320dd4cee84f283c3aee4198df2a1f60de1cead387de082d31c13cf
- SSDEEP 768:vGUJZQTVvKnoo2dekkG9eaDVcoXYnNH7Tv:vhJWhvKnoo2deeeaFYNbj
- TLSH
  T1DFC294173E0A516902F9A231558B2A49F71CC8CD9315E9CC342E411FA3BFB53D6BE1EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ReadMe.html
- Size 28KB
- SHA256 b2f7da08e594d563f9520d70e9f2b70d42cb939fdb0e94d0075665af77c8355d
- MD5 2b19f6c393dbabc61f57e9b4da2dc6e8
- SHA1 7b498d78a7a7470336ce6a20d07d0ed46a924158
- SHA512 32c2f231383f386783b300cd2b7f19b567f09412b884407474aed4d07db4fd31940bf3f567030dd9bcf8d58680ef655603448e252f3ab216db76c140497039d8
- SSDEEP 768:ZfjnIAke1hS/eZpSOOgZM+l17jhzQTJyJiJgP64HZHNtyy7:ZfjIAvgGZpSOOgZMG1jGTJyJiJgP6ENR
- TLSH
  T186D296469AC05B50C77302499B56F22FEF34C0DFB2484686385EC24F6FB3967486B68B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Remove_Failure_MountDir.cmd
- Size 2KB
- SHA256 ec9ffddbc5776c3c25433e8d3d13afcc5b67cc454058ea266457c92590ac3ba6
- MD5 84d6a6e4640b2767dfb0eb611f99287b
- SHA1 80e729fd1e8f91a770f994114a14dbd5454b56e8
- SHA512 356625602b0817f3f43fc4984d8579cd7bee8483a1cf910428ef18509f5d931caeb6723524e517636c38f73cb21735772485e3bae317ded44c057013b8713983
- TLSH
  T163517138711CE0189CF0373A7A112043B29F47576364F3ACB7FB7829B98A61AB0765D1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  bin/7z.dll
- Size 1.1MB
- SHA256 3db62076e5fcc897ff29da47fe4029900a4ad696b395b6fa96acff1229444c1d
- MD5 0dce103b0102adec3279797665b7a4ae
- SHA1 c121392bab6dba8d04bee89c6b526e8e67650cc8
- SHA512 20f0f02097694579ac8794d56411fbe2d97c47d37794cb52afdabc9956c0452e8a3bb273ed34e463f31927e29e7e41c0fddb82fbbe688dd39c4113c00ec91bc9
- SSDEEP 24576:Gxb5vMX35l5UVrIdhcMEKWnttf7eePboHvVxSfOtl:GxbSz5UVrIdhnW1Pc96Otl
- TLSH
  T132458D15F7F1C0B4D98E56318A2CBBF550F8E71ECA1068C76780BE6E6F328D6C225949
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  bin/7z.exe
- Size 324KB
- SHA256 9e2631c19b243c28b0980607ced2540e9447b1166572483475547c1a9dd4ac0e
- MD5 7187ae605f4dce14bb23ea2623956335
- SHA1 f7c1df33b875c98f41dcde24117d89d42d25b7ce
- SHA512 f64522e2fb6bb61884fe53c34e79b355efb9ec33c02b2cd67d729af7d763e7b3873a5c7ce6ac7bb4567e6bcf8c70cadbc66f511e8bb151ab05096a832032bc8f
- SSDEEP 6144:J5lqo52kDzMYDJSi7+Ni2ER9Vh98+1PrEVhkQf0huIDaLOjm:JMqzBDJkk2ERvT8MPAf/O6
- TLSH
  T1E5646B127FF4D47AD6430232CF59ABE1E1F993A94920094327C41A2CAB758D6D379F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  bin/CompDB_App.txt
- Size 3KB
- SHA256 d40f2c89ccba4795856aa355545d62cda8fdc06542535cd71a4dc6c086f2a70d
- MD5 8a461169479dba82881195a5d5446dc5
- SHA1 28cf375abeb8c96141c3f278900df7d8fff69dd2
- SHA512 774be46dc7c4a7cb496cb7728aafd80385d88f2b750e77bf5e88ad9e4b5555056b0f57f4414b062185c5df89f479890cfa312a829c97ba2fb5772126a48527d7
- TLSH
  T10981EF5B9D2A48B1E16B6771069649B4FEAF90FB0C1C03807DAD55CDCAE15C8A2CDB70
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  bin/PSFExtractor.exe
- Size 12KB
- SHA256 69aa3d57c1fb049d728ee99bbf6fd341c659526ab7ebe20e631929ce6cfd36d7
- MD5 cdc246981d3c7d79133ba55f2e8e5cd5
- SHA1 c4d23fa8b9c2dc150982f53fe18aad0523a12d42
- SHA512 11ec829b781dba24c82e11eccc05967352270e6bb040a4d73ab2ca4e9dd7770a74459615e29ebeb4eff4c3040c692d56180611015eb6ac10e82032e0804ac855
- SSDEEP 384:U8yJTMR6UknEM7TjJ3Jy8WgCygA5to3Tx2PLWHq:Um/ri55y3gCE5tojgWK
- TLSH
  T135420B0497E44239F6BE47363A7247014632B77BB825C66E79CD050B2F26B414793FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  bin/SxSExpand.exe
- Size 85KB
- SHA256 9e889abd2d6068bc59aededc64a45d96e04c7ad5cb1d70f606f8ab0a96433b4a
- MD5 ca13105c6b1a532b8aeec611ec6459ef
- SHA1 9758ecb1797e4037da3a20d117119129b6c3454e
- SHA512 12eb55abfb3cd97286f8d47c9c561cde1efbb025f356bc3eaa7b4665a75ec48364b31e9aa9ff2e68dfbc06a0b56a49ae46550acc93f65afb83402322d592d2ac
- SSDEEP 1536:FBhcBqEuO81aWG5mINIRkPOybxHC2sfJxJ7UvPrnvReCs:NmqEG1aWG8ImRkPOybxi7xxJ7UvPrpeC
- TLSH
  T1BA831903B6E19434E5B22BB46D3452256E7B7D666D38811E7A9C4B4E5FF3A808C36323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  bin/Updates.bat
- Size 1KB
- SHA256 a0be753137489fa5f820cab051d310693236c0d4d90fef5570a87aaba506c6e2
- MD5 0517f2898be9960bafaf6393a05af648
- SHA1 4f36e973709da3fe5d679957127f8773c9f3c5bc
- SHA512 db29be65248acc593342bdbe6be90c974b38715842160624a9de94b6d7551c6857d7a99630c530c0625ece1c73948234f094a44b6ffbf732b59782dfa0856e4a
- TLSH
  T13C216DAF43999254FCF10FAB795BC3E4EC9F900145E021A2FC2214B6F87E12066137E6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  bin/bcdedit.exe
- Size 369KB
- SHA256 8ab894fc1acdc83d3c54a3bb6ef65f2d8d06ac8015ee39ab52872eb0dd0dd826
- MD5 e48eee77a8a6390b89781ccd1d7bccc5
- SHA1 b978202fc8574d9380f74a1c5b59fa290782079a
- SHA512 5a71b7f550c26196133ae78914f93d1ac4be7962e89ea86d298cb0481e9a522f28393fd43d1d8717927b8a783dc3704d6e9f83964295c6e878765a41dba92e8c
- SSDEEP 3072:eWg56t51b/0MQPdFo7WhYnG8yVZ19AmCE5EP2DbLZZsvtBMhdNV/ysXo3962xKeE:7Xb/YPNhYnGtZ1T5w2lZOuVsWj
- TLSH
  T1A984301362ED0115F1F27A745AB955708A3BBC91AE3AC69E029C019E4FE3E80CD71B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  bin/bfi.exe
- Size 90KB
- SHA256 8f26a3f1a1f6f9ac0c279b7df56c41c79e4f23aaefd7da6e6ded16d091d4ad81
- MD5 edbdd5893d753fa68865ec3ad7dfe06d
- SHA1 8d3a30e823f5d0c5e3fbca135bb04891475219de
- SHA512 0c0e88f1f5100a2f67ee947b86081d1c30507eb018c1484e12b9255f6578aa9e0b59d6e5dbbef8a8e34d9e36e90666d97d44e3f3cc29dbf0f8bb3bc7584e0756
- SSDEEP 1536:gIvqSxs6WCegu1660dUyL0sCtA47jpsV4FjiXDJBE5baPXYUxn5ob2guBtXZ:gIhsJ166QUFJtAKjMXDJBE5kBzvX
- TLSH
  T12A93026F3E976E3EE53A2A745B08AD285B958C8C23E6D1B74C33531D293720D7349253
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral26 behavioral27
- Target
  bin/bin64/libwim-15.dll
- Size 774KB
- SHA256 d45410402e79df165f4c3dfd2ba00826c6ac5955511e7e4b3eda55fc29a061cf
- MD5 d9df436f581d2042809bd0d798f66fbf
- SHA1 5fd64a1380b7bd9cef9247806b138f5f6948a65a
- SHA512 c8d53417bc47ee7c9c0c205241c9637c09cdb634c85ae78da886a8b87bfb7d0fbbee1d899e4b8e30fd174ad4fd08748be6868ced59717288e318d0449f4805ea
- SSDEEP 12288:u0V5hKcGd1iRoxIIgS6qoKDr+mQVyoR8vTG1A58rxOiOX+eliCe:red1NgS6qomPoym874m6xHFeliCe
- TLSH
  T1B3F46B03E3E210BCD1B7D6704A7B5732A973F8152930DE5E6298DB793F22E50862DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  bin/bin64/wimlib-imagex.exe
- Size 135KB
- SHA256 fc1d5a29a0a118f032f3f7fb62c96014d36e6439fab67df739336d75c673bb74
- MD5 03bf621cebeb73062789274d43cc331d
- SHA1 997a2200696d73bd9ad25d9af3cf68465ccb1e43
- SHA512 3160525a557e7156e21c58e531ed08adda029cbb7b5b1352804b27dfa5427aae525ba84af822a92c068d47a0e6fd13a79451c420ae0171d6161e3d2595a4187d
- SSDEEP 1536:eQBYoMkDhWUvBKvA27SVG1SJFIAq/JaJSBXJVDvrj3xlAxCBSmvc+ez1Fc:RYhkDhzvBK97SVdQKSZdCxCIma1q
- TLSH
  T114D3E801A3F610B8E5B7AA340DB75261BB73BC615A34CE2E525CD5792F63D40AE24F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  bin/cabarc.exe
- Size 79KB
- SHA256 cceaa59cb4e67f993b099c5e2693eb15231de3863e29da14ff130f24b66ff260
- MD5 a02a8702c6c539bd8648ccbb1869a604
- SHA1 c16da959c5aa9f29346e22fb07802cfa8f7b453f
- SHA512 6b871519e6d190d7703aed7e58d11b0bd69b731a44f90be0869efe00d256da982601b69d01721f8002c99d4cb5d36913b171306a79bb62bd4a5f9655f78ec3d3
- SSDEEP 1536:7xJDrXJTUZQM99pEY+7mfZZt7BN6e5ooPzUOmJ9ybae9rvpI0svZWGKAkro7m+8+:7xJDr5T6Wz7mf7tr6EUHJ9ybaOrWbKAf
- TLSH
  T1D283BF927FE89097CAC752709349B76ABF7847F20511B29F6B189C903A52FC2FF20255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32