General

  • Target
    files.exe
  • Size 4.4MB
  • Sample261104-ss86faswez
  • SHA256 70396cc208105b61f0cac4e0c81c9c4aa43edf385ee4c7ade971157dba1fc9d0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      All-In-One.exe
    • Size 5.1MB
    • SHA256 baecc747370a4c396ef5403a3a2b286465d8fe4677bf1bfd23b8164ef5c22bbb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: XenArmor Suite

      XenArmor is as suite of password recovery tools for various application.

    • Target
      External/Components/nspr4.dll
    • Size 72KB
    • SHA256 69e73fea2210adc2ae0837ac98b46980a09fe91c07f181a28fda195e2b9e6b71
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      External/Components/nss3.dll
    • Size 172KB
    • SHA256 769703fb1ba6c95fb6c889e8a9baaea309e62d0f3ca444d01cc6b495c0f722d1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      External/Components/plc4.dll
    • Size 8KB
    • SHA256 2dc0171b83c406db6ec9389b438828246b282862d2b8bdf2f5b75aec932a69f7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      External/Components/plds4.dll
    • Size 6KB
    • SHA256 50b2735318233d6c87b6efccccc23a0e3216d2870c67f2f193cc1c83c7c879fc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      External/Components/softokn3.dll
    • Size 155KB
    • SHA256 251f0094b6b6537df3d3ce7c2663726616f06cfb9b6de90efabd67de2179a477
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      External/ComponentsExt/api-ms-win-crt-conio-l1-1-0_not.dll
    • Size 18KB
    • SHA256 9ca21763c528584bdb4efebe914faaf792c9d7360677c87e93bd7ba7bb4367f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-convert-l1-1-0.dll
    • Size 21KB
    • SHA256 3cc1377d495260c380e8d225e5ee889cbb2ed22e79862d4278cfa898e58e44d1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-environment-l1-1-0.dll
    • Size 18KB
    • SHA256 c0d75d1887c32a1b1006b3cffc29df84a0d73c435cdcb404b6964be176a61382
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-filesystem-l1-1-0.dll
    • Size 19KB
    • SHA256 7633774effe7c0add6752ffe90104d633fc8262c87871d096c2fc07c20018ed2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-heap-l1-1-0.dll
    • Size 18KB
    • SHA256 f5cf623ba14b017af4aec6c15eee446c647ab6d2a5dee9d6975adc69994a113d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-locale-l1-1-0.dll
    • Size 18KB
    • SHA256 565a2eec5449eeeed68b430f2e9b92507f979174f9c9a71d0c36d58b96051c33
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-math-l1-1-0.dll
    • Size 28KB
    • SHA256 bece7bab83a5d0ec5c35f0841cbbf413e01ac878550fbdb34816ed55185dcfed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-multibyte-l1-1-0.dll
    • Size 25KB
    • SHA256 66abf3a1147751c95689f5bc6a259e55281ec3d06d3332dd0ba464effa716735
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-runtime-l1-1-0.dll
    • Size 22KB
    • SHA256 c9bbc07a033bab6a828ecc30648b501121586f6f53346b1cd0649d7b648ea60b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-stdio-l1-1-0.dll
    • Size 23KB
    • SHA256 b1e702b840aebe2e9244cd41512d158a43e6e9516cd2015a84eb962fa3ff0df7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-string-l1-1-0.dll
    • Size 22KB
    • SHA256 73cc56f20268bfb329ccd891822e2e70dd70fe21fc7101deb3fa30c34a08450c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-time-l1-1-0.dll
    • Size 20KB
    • SHA256 69885fd581641b4a680846f93c2dd21e5dd8e3ba37409783bc5b3160a919cb5d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/api-ms-win-crt-utility-l1-1-0.dll
    • Size 18KB
    • SHA256 a1d1d6b0cb0a8421d7c0d1297c4c389c95514493cd0a386b49dc517ac1b9a2b0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/freebl3.dll
    • Size 324KB
    • SHA256 8e5110ce03826f680f30013985be49ebd8fc672de113fc1d9a566eced149b8c4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/mozglue.dll
    • Size 135KB
    • SHA256 4434f4223d24fb6e2f5840dd6c1eedef2875e11abe24e4b0e9bc1507f8f6fd47
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/msvcp140.dll
    • Size 429KB
    • SHA256 334e69ac9367f708ce601a6f490ff227d6c20636da5222f148b25831d22e13d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      External/ComponentsExt/nss3.dll
    • Size 1.2MB
    • SHA256 17f8c55eba797bbc80c8c32ca1a3a7588415984386be56f4b4cdefd4176fb4c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

upx
Score
7/10

behavioral1

discoveryxenarmorpasswordrecovery
Score
10/10

behavioral2

discoveryxenarmorpasswordrecovery
Score
10/10

behavioral3

discoveryupx
Score
5/10

behavioral4

discoveryupx
Score
5/10

behavioral5

discoveryupx
Score
7/10

behavioral6

discoveryupx
Score
7/10

behavioral7

discoveryupx
Score
5/10

behavioral8

discoveryupx
Score
5/10

behavioral9

discoveryupx
Score
7/10

behavioral10

discoveryupx
Score
7/10

behavioral11

discoveryupx
Score
7/10

behavioral12

discoveryupx
Score
7/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10