4ac1ada41d36f470c6abab41199d6f26ffe58bfe61aa11658a420c8e8e867966

Sharing

Copy URL Twitter E-mail

General

Target
RawAccel_v1.7.0_zh-CN.zip
Size 1.5MB
Sample261030-b92dgsda48
SHA256 4ac1ada41d36f470c6abab41199d6f26ffe58bfe61aa11658a420c8e8e867966
MD5 189379796aa5585356a5f64176a6e487
SHA1 7cd6df1568170a21f65a214d3a10415e802c8d0d
SHA512 03d41991a14312350004cad6075868717b27a34176c6132e80a5b53aed2ee99f5b6979f7323aeab6e667f4090a5b06d2bc28ce42c3238cb4532936b01ad68752
SSDEEP 24576:QdUPHUCbrb2ELbFVzLR3YARa2bx/ERTBHA2M6a5sCwtZwiMX//mpISDF+fvuGE5o:QTCbDLbFVHHRa1RTBHA2osCwtZaX//iy
TLSH
T1DD7533ACC9C84D7BDAB1406DC789C11DB1ABC9B4068F770F04808FA4DBC57AAF56A578
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Targets

- Target
  RawAccel/Newtonsoft.Json.dll
- Size 685KB
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- TLSH
  T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  RawAccel/driver/rawaccel.sys
- Size 55KB
- SHA256 8a62c4deef2774b43a7363b352eda79897533a1080c9c26ffeff0559e43358d7
- MD5 3b322b9a39f3938154e0391207b51de9
- SHA1 68e400e0a24d43260fc476af910af945a239d8cd
- SHA512 5b39818f84e25e3e0e31ff08eb5b02d8850bace83711fe0e51d49c073ea04635e1f186ece37dd5da02d3e12aef08914900ada3c0c0aa07c43a3a77d24eabd8f3
- SSDEEP 768:s9hrkpOcCNgCfikstkNlGHHcnCHp4e4ExHtq6Cbf2Q+IRNJ4zbln/23xds9zgrE:urkspWFHwCHPHoUqNJ4zbp/2Bdkz8E
- TLSH
  T118439E56619922D6C432583096FAF963BA723501137488FF07E0CE290E7BBC1AE73667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  RawAccel/installer.exe
- Size 38KB
- SHA256 b3b4948de9470a5727390ed016507b59d2c628463e42aaf1b75e906ee04f58a9
- MD5 0eac10f0cebfc7e76d99ba4a5ca33a7a
- SHA1 7a9e8f09492e79028973efcf1d8286b1aa508dc5
- SHA512 902e3b1f2b80a537530d732c700c7697b03221320e40b91959bde403890291a4cde170e69c2fab165c4030b5b38a5bf2c84065b9c9141a73a42341bc3278ea9e
- SSDEEP 768:EpUH7bdy8yWRA4jsbWiV05Gd0X8dp+fQfX0y3y71+O:ESH9ysRsbWix0X8dpzfX0z71+O
- TLSH
  T1A5033B5BE76900ECD5A2C17DCD9B5986D2B3B8080761A7CF439086252F763D4AD3BB83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Drops file in Drivers directory
- Executes dropped EXE
behavioral4 behavioral5
- Target
  RawAccel/rawaccel.exe
- Size 433KB
- SHA256 a699d38a86f43a111da2047cb56df171c89c37c8273879b3020894861bc06f87
- MD5 fa9f25328516372a01514683362be4d1
- SHA1 8a7f8c3d16a05cc7996204353f328c181dac602d
- SHA512 c3ced462bc872321e1a8b32b1ed309d5664f16e76b89a7ae8ebb1bd25b9ce2ecbd592fa651974b43466febfc5a71612200c4bfc877a801746861828cc45e78b6
- SSDEEP 6144:Gx2/Cci0P4zpCLSXLdY+sHrNf6rzQpZ9mXG9mR:GsnLSbg/mXemR
- TLSH
  T12A944A24322CD617D6EE52F6C464989007F17D393A93CBDCBD827ACF1AB6F419582923
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  RawAccel/uninstaller.exe
- Size 36KB
- SHA256 62090da1ecd73aa18c2119650a4384d80691fcbabb90716cf5f731ed084a51ca
- MD5 aaabd272a0038e5c4d472013198b1adb
- SHA1 2da6fd2af94e2e0572a37de65f254539bcd78027
- SHA512 0ce22cf97c7e47703cb2be983c98fd9c0f0eb88c489e3b3fe9aab48635f38fc3b68c8cacd413f32aa6eeb3be0c5c5434fa53eb3c44b14ed0667c73df28712944
- SSDEEP 768:qpVHUJxEJ1ZTiYqsEd9OlDo1FTcSjxp7egl7Nojv3ZAv3:+VHUTE1VEsD8v7IxAv3
- TLSH
  T106F23C1BA76A00ECE1F3C27DCAA75596DAB378054752FBCF035052261F372D0AD3AA52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  RawAccel/wrapper.dll
- Size 475KB
- SHA256 e17d540fb0bb5e47ba7c8e01aff39f1570bfb7ef673a1ddc0bccd2a26f9efb78
- MD5 ded4ebdb2d2790b549d2e07ac126f512
- SHA1 38cab2d1eddb39beef78670fb3eca4b59a46adbc
- SHA512 0099bdf535e34ff436679d9adc0010be823fadc42eafe1a4600a9100364fc1ff3f0bc98d56a7284e63d0f7b4614d8c1ae6ad90fb7f63f72608532979469d5390
- SSDEEP 12288:Q3ABHW6okHO7034S+E7ebHqnaFcnsnKLvc803+hYuZ:nHW6of7034S+E7ebHUaFcnsKbc8q+hYu
- TLSH
  T156A47D2962236BA7FB36C37944BB2752D630AC04FB429BD343A5D6790F42BCC5739602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  RawAccel/writer.exe
- Size 5KB
- SHA256 b53e29c7689b9d72838ffbfd1502b8d0407160d3f77b54eb15a7c632f689aa04
- MD5 8df8a6000f75cdb409864c3e800227c0
- SHA1 ddda6ed437c48cfbb5e5dc4ea9de1616fdfe024d
- SHA512 462b1022f8dc1e52b0d39d5f9e1548e21b4c73aa0b5c93046decc72596c9feea74d42158683768a1567bc04f48251442425c3e1d7f51c49e4e2ec7b564a82622
- SSDEEP 48:6KqNzSUD0PUZ8EJiNRHTYhYPsJrNM1p5OOlNuSeyFgYzlbEIHpsFtXsOhlQyRpfG:oX0s5JokhYPsJe80uV3Yzl43fzNt
- TLSH
  T14AC1831183F84632FEB70A72AC32571027B0F7159D27EA5F5895601F5E27B584C73BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13