2e01a4a176afcff5f28180aa695ec611bd97921915189ba420e51eee5f094014

Sharing

Copy URL Twitter E-mail

General

Target
ProxyPin-v1.3.2-windows-x64.zip
Size 16.6MB
Sample261102-2tpb4adw9w
SHA256 2e01a4a176afcff5f28180aa695ec611bd97921915189ba420e51eee5f094014
MD5 999baa0c22f4d80a78bdcc522a8fb863
SHA1 a6b27794c056004e4ca49b90ec054f508083e564
SHA512 a03b6465abae3422992afc2dcd8bc3004af144e404ce99a297e479a7f262be58ab1aa6520c3855c3a4b29dd180537355058926f4c268fcba223830b637e48076
SSDEEP 393216:dQN1LY5VdPr7blEGAJ//dHlpodqiu0xQJkgmpPPnRXF7Ycusmem3GMToAcBL:diLY5V1bKGgnVoQBaE2P1ysvhMsAm
TLSH
T1C90733D9C4283A50F21BDEB807D658B1135162C2FF87592EB73E460471F9C3E4ADAE68
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Malware Config

Targets

- Target
  ProxyPin.exe
- Size 352KB
- SHA256 628f072998aa872c477421ae48c71828ed4cda4c7409a1ae848bee3d8afce2c5
- MD5 70ac5421d0a14a064751c1c3a0489be0
- SHA1 adff422e402bfab6d2f487436ad36981b3baa51c
- SHA512 6589c6373a94d15beb79c47198a90fe42d03644b5451790f7647b7d726d929adb427b4dba4bf02ddcc597f04d9c78858cc332b3d2a389fb44c54360263e5e588
- SSDEEP 6144:A0mQWHqoLPfRvia4C20hbNfwJE+2YxqvhQKV0uW:tQ3xi620hbNfy0DKX
- TLSH
  T12F742CA1E691409BE975937988335C2272E3BC69B7B0F68F525D35255F332CE0A3B503
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  code_forge.dll
- Size 984KB
- SHA256 43bf6079d6da5dbc88a218b09bee07b313aafdfa85c712b3ceb8603814b48b5d
- MD5 6102fa51c761de04ad9a83ba39653113
- SHA1 8ad9926c8d4d2b37d1abde0dca1cc56746d9cba6
- SHA512 9ebb71c06f099ab36b390ae83465e767cb7a7f1863c3e4b5d7d8f94ce5ab50f7c555c98983496b3f26caeac4243e5a6bc6374ffc091af1eb149375b84f51c06b
- SSDEEP 24576:Uo9K3C/FYJ4qXBmqBNg8PvSEB9wOzlM0X6FJSOrtk1jXFqpzVgrA5Z:Uo9MXcVP
- TLSH
  T1902519257A56A96DC40BC4B083974A722E3130CF0F35BAFF458596783E7AAF52F38518
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  dartjni.dll
- Size 61KB
- SHA256 a58ad78c2225f8e0454d572bec28cd6d7bfe11132e8faea3d9ff807fdff22aae
- MD5 447937a8867dc65a0fed580cbb603f55
- SHA1 ae1f557eb596bc0c13f91764340ed7a818409bab
- SHA512 537a94758488b52de85b5163bb8efbeed3371d36e47fe7778ab8d1454264c89ae9f59ab5284d5c685acda0666a5169e28d915628bb11ef9647f7e7d34cf3d9f2
- SSDEEP 1536:RoTa9YsP9vybr5/qoj8OuuRDS3ZGFbQVk0i7DiZpQafCK:aTaaZDiZpQa
- TLSH
  T1AD5363B556F40957F26592788AA28828CBA3769077830FDFA375044E7FBBFD0923D250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  data\app.so
- Size 15.9MB
- SHA256 84771cefd36caa078463a21f2331e8af84d0d7c66d5ee1e6a912084c8ee8691b
- MD5 3a7c83ca11aed36c67cd549179dc4913
- SHA1 eefe2a753fab53359eead4443ac9eb9ff7a92253
- SHA512 ef4aae3fede341c7eb16a8fe9e6668fe3ad6132e71c79988a419ca3f33d5f2461a99df2d98c9499e86f7165e133a7ccd07e7f9e289a3ca7a97331fbe29ec2654
- SSDEEP 196608:IFk7a9BLPX1/uEl4D2CtbORujjuZh0xww6NcDiD9NG1ZvRV4:ITLPX1/uEle2CtpbYSCG
- TLSH
  T1A1F62A97D0B44360C863D777FB5F66E19E147CD88E70B68A05889A253E86CB04ECE772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  data\flutter_assets\assets\js\fetch.js
- Size 2KB
- SHA256 04bfecfc165cba72a6b9c566a66ae641abf6c0ead8a464d3363f74f0dfdfb40a
- MD5 344e42d542991a5d189a0a68dce0e8a0
- SHA1 64fdcd74ff785af5a2886a47b5358cc2eb8e4380
- SHA512 f8fdf02b0035af8c98198af056aa46211ba4acfd9d19b409921f02829a5f05a373217c786c1a366d4ed04577b19b166c77836723a44c1e435464b2ad99319e0a
- TLSH
  T142517B87598171398A77B7E8EE020E09F726E62372018271753C16EE1FB2558D2D2DDC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8 behavioral9
- Target
  data\flutter_assets\packages\flutter_js\assets\js\fetch.js
- Size 1KB
- SHA256 466306adec694b9c09cfbc2702810a623396f23f51158e0fad47c513ddcf2317
- MD5 277e0c5ec36810cbe57371a4b7e26be0
- SHA1 f1262fa704ede8442a0eac72bfda6afca2678399
- SHA512 38f60857ba14c9475145b02f53fec1f4f02916c5a71301db03e93e054a8674dfda62a1a4540bc48f53d807fd1792916b5c12396caf0982503ea1b875b4a637c6
- TLSH
  T19941CFC3DB9C367A8BA635D8EC090E47B27DF5227A10C4B57C2826EF24C656CD29249D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral11
- Target
  desktop_multi_window_plugin.dll
- Size 131KB
- SHA256 8f5648d8c72d1c8a0efe5305e1e756a79e9c5149d88fa1764a205ac6e5be1d65
- MD5 3a84bf2e4e065813ec775ecfb06d9260
- SHA1 51ff1088a3bf267928d0c3e9e4f53dd861824975
- SHA512 3dc5bb5ee74a26eba3f330d1e9d9207bcb408dc4bd0ca7386a40c13c8cbcf61c20ce17ca7deb441cbb7b4657027922242681fb7c965ab1b1b85827257dac7ed5
- SSDEEP 3072:6ad4hK9gQ+b/xiNrNzRgfvaf6kCk40ri4z:9cK9gxibz2vaf6kCk40ri4z
- TLSH
  T1ACD32B2AB75800BAE22AD1FCC9974906DB72F8860771A7CF17904B9B0F57AE41E3F510
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  flutter_js_plugin.dll
- Size 84KB
- SHA256 c7cac229d110bf2adff31cd6efb465896e9031cd4945594a4ea41b12847412bf
- MD5 0224a00426b9ee3f5bb01f7bcf34a33b
- SHA1 2127660ac8766781cc6d38a1461c828e25ae529f
- SHA512 2db2918b05538981a315a9c3b89382dcf645db4469ce7ce3f5e85b72bca750eb5b4a005803dc232084a3aa758c1cdc8306b4548725c01632839cde4d73082a8c
- SSDEEP 1536:DdqJZ7wWSisNj6pnZSlgX0Ro61u1xa8CYQjLtCRMG:DTWSisR6q8G+U8CYQPtCRMG
- TLSH
  T123832A2BFB1940ABE31AD4F8C6574A05CB72F8864761A7CF57804EDA0F27AE41E3E511
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  flutter_windows.dll
- Size 20.0MB
- SHA256 d6b2b272ee957504f96dafbfe440e7301155aac9d917c541751bdae02ae09dc0
- MD5 b9f9a6d6faab3e85298f7064072fb24a
- SHA1 9ebc3c58f0f2318c9b06f6fca4ea3dcc8b81b15e
- SHA512 b2bed5eea2de16c8c7422a96225d8f30e9ccec903826bf5988eab4eca9299fb028a68e75d6449423b9c5bfa88a72fda769145ae6082a07a665c36dc9dcd634ac
- SSDEEP 98304:K6ZRHXSl6Skb/+qEAFsRP4EO4RVD+PwtiWf/IxkxLNzoq46Hml8ezVw2wXRDPea/:KY9exD+8FDGeezUR7Ys2AHHoDAMK
- TLSH
  T1DF276C03E29640E9C05DE178971BAA27F670B84A0B24B6DF3B5D47213F66BE01B3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  permission_handler_windows_plugin.dll
- Size 115KB
- SHA256 6af7e88ab014a2e56e6682349c39474a91c05c5e87b0e96ce7a1ca0e2d5d1411
- MD5 095573aa2b7769896d41fc8fc785cdf8
- SHA1 438b94a4ac3e25a37f9b029bc07e23bb145ec782
- SHA512 100503a81be862e6729b14e95b35c4ad01d29720de7e952e9d49946a2eb01bb82db6b8575b3170356297e113e5858d4f8d5a6942883fc3a7f269658d5b3f509f
- SSDEEP 3072:GQ1QdhT+L/pUiyRpyvhaTvggyQPk4jZoSri:b1QdNE6iyRp8aTvggyQPk4jZoSri
- TLSH
  T158B33D1ABA6D416BE22AD57CCE974D05CB72B88557A197CF13500B9F0F23BE84E3E610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  proxy_manager_plugin.dll
- Size 90KB
- SHA256 0682e184d85c68479b126eb4fe887deed2a8238daa3241f506caa7cff2fe7949
- MD5 f43d6a34be15a539325b6c99d0bb6ba6
- SHA1 556ee54e4c1aeb7889d587e19d2e38f92baa435b
- SHA512 e16afb829b24810ae770495d72656c3db5e89cb16f301a564e9486ed26950237d717c110e23cee887d8797d947e6d9b9145f66ee86a09695e57e9440fa64995d
- SSDEEP 768:ByH/NsVu7z3YjEFxa6QiY/MtCy6QSwJITUWaEXit2zlfuyWoVQAWomCXcX1oiB6e:BW7teniQkSsWzXit2BVQAWvCXcXOmP
- TLSH
  T11F931A3AEA5950AFE36AD4FCCA534906CB72B886076167CF57800EDA0F17AE45F3E510
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  quickjs_c_bridge.dll
- Size 661KB
- SHA256 e2051274a1d7599d131d45b96c7cc53519a9009bf43a802b922f73031d3d3b4b
- MD5 b109e4eed1e45a17cbe9ba462487c2ca
- SHA1 9726516ae5468d0660233fd844b5c65a63781754
- SHA512 865ec7bc9fff86fa2a9df1f9e612578928c53f2639312a0f318c7359fa4ffda6b785815c6deb75432a0cd015e5179d99a38486fbd3636c4b9061f394db9fbc65
- SSDEEP 12288:1VXMUN/tdpq2twzBDIa4sp0wine0fUUoBwBTbRPc9:rN/tdg2twlDCsWwinbUUoWBTbxc
- TLSH
  T134E44A9AB2A213D8C677C174C2979233E738304C27A85DEB6BF645555F233D2123BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  screen_retriever_windows_plugin.dll
- Size 117KB
- SHA256 d677ad3c6f02a04ad2c631ac7c1dd6aa20ab3efe761678dd1c23e8595e31eb71
- MD5 e5d75aea27360ec78cae925a5804386c
- SHA1 c61ba32e29236047920d3038e9925ef84a2091c5
- SHA512 91459aa8c8018cdf80c59cbf0992f4f0d26073d0e6aa1c8db8991730e3a8b1958428126ac098d3f46c8397615c9524d90303ea50a74b753f2b38676cdfeb1759
- SSDEEP 1536:8c9Ys2aAdctejCjdpvW+HvEtIiAh4moShqU3lfPw8W2VqPYWNQd3WECK/NnIjx:8cYhcMQLEtIiW7VpVIQd3pCK/N8
- TLSH
  T14BC31B2BB65D40ABE21AD4F8CA574D46DB72F8954B6167CB17800A9E0F1BFE90F3E500
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  share_plus_plugin.dll
- Size 130KB
- SHA256 dfedf61131c81a65da018f7553831ebd95292b1f9a08fc87b4b121c204fc9825
- MD5 f67412c4b9e11ffda14242809e2bbb93
- SHA1 c63fce1943ad18dad5ec4181273a1af2f3f09478
- SHA512 95894bbc5f1a1e6e50bc1443f11933d2ce8779d13e02d77f85f29c7edf64f35bbc086c3501442ffb704610a996bb3d93dff7b12dc76c0a935e631baee9fa77f6
- SSDEEP 3072:loWAR7FgxixUgWS2xxxxxxxxcxxxxxxxxuxxxxxxxxxxxxxxxSxxxmxxUcxxxxxS:WWAFUixUguPQvg45/GlK7
- TLSH
  T111D31B26B62C809FD126A4B889478E05DB73FC925F6187CB37504BAF5E277D80E3B611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  tray_manager_plugin.dll
- Size 104KB
- SHA256 e468a1f042c6a598b38feaefb5a6ef642b944414970a019a79f812da3824fc9d
- MD5 57716cd1186f5cc8e6570ab669d92142
- SHA1 c354f8fcdd2367cfd393f5341fb2a2ad60dac086
- SHA512 9b11dbccebed9480503ce26d59ea41c023a76babb1081db953df7ab0eee2858f134b7062a9970177519ce300fa8cf44f622f14e3e8b6444e7d95f85803ba4a01
- SSDEEP 1536:qz0WMWLNBuAJ2z3XiLCSYuh1KF5bP6jQ/vOipsfd12LbCriquVlQ:qz0WMaaz3Xim1u/MtV6fd1ibCriqSlQ
- TLSH
  T1F5A31B2ABA6940AFE26AE4BDC9534905DB72F885076197CF57800EDF0F17AE80F3E511
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  url_launcher_windows_plugin.dll
- Size 96KB
- SHA256 4afe2dd11b2c4ff2ad2881371cd4df89d8dfa2b89b0aae84da85a2b3de9137f0
- MD5 2d10be45db97847c856b2662fcfd6cbf
- SHA1 b4ea5122de002227f0f84ed74725108f38a2cfc3
- SHA512 91f5d57c45471b14521200eba916c6b5c9678445c88284f6e0b0383f7a0d2ec3299019a85ee36731d7e9b226ed28d2deb6165699788d02704a7a60bbe8fd5bda
- SSDEEP 1536:7347yxZcZiRaWEi6X/j27otOPUJZmfQAWZV/J91zO:7DxZcZWnEiib+geQAkV/J91
- TLSH
  T1F0A31A2AEA5D40AFE21AD4BCCA574D01CB72FC85476167CF27905EDA0E27BD90E3E501
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  win32audio_plugin.dll
- Size 128KB
- SHA256 d593e156e077f7370f2a3e04e15b9d858af2355598a8d590c6319cfa5bb3cf5e
- MD5 13daeb446cce83d57b01ce0240660b4c
- SHA1 b7fa6df409fe9528725e2372dc57ecd9fae36f6d
- SHA512 4df01270e6db62394ab66b2354d0c36e31a51d5cceef58917ce9adfd42b556e65ad1d6b21ce129b81f8961142d46b56806dda1b028534803a6ae398c1d93d11b
- SSDEEP 3072:jTLIyh00msW70pb+++vDMjSFOiqJ2+MWRN1g4QPZTEt+m:zIyhmsW70pCfgj3iqJ2+TRNa4QPZTEt+
- TLSH
  T101D33C2AF658407EE22AD4BCCA575907DB72B886076197CF17800ACF1F27EE45E3E611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32