General

  • Target
    Installer_L_X64_x86_2024.zip
  • Size 52.9MB
  • Sample261105-gx93raxwdv
  • SHA256 b7b67b9bb10531738ad2b46cf7d342b8e326577bef5f3505adfc62ed1fc072fb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • hijackloader

Attributes
  • directory

    %APPDATA%\sys_system_stream_x86

  • inject_dll

    %windir%\SysWOW64\ieframe.dll

xor.hex

Targets

    • Target
      Qt5Core.dll
    • Size 5.1MB
    • SHA256 ab59bbf77d79437ba0cdb8e52ae4857ef32ff08c7dc9de623996aee61f05b4bd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5Gui.dll
    • Size 5.6MB
    • SHA256 80016776efea2b2a838c3ffa4c82e5f146baff68c36073c0c34668809d1c4297
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5Network.dll
    • Size 1.0MB
    • SHA256 37275f3ea79d15a2792bf21f71f1df825f201cf8b33aa1f94ca93d62d76b216c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5Qml.dll
    • Size 2.8MB
    • SHA256 e45f26ebbc2b0499e0e90f1666fd13f1bb2bed1073e828d30b6a3a70599d4bc9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5QmlModels.dll
    • Size 341KB
    • SHA256 065c8d687dc74964123f4bb06319565b163b164ab09dadc1eb6929ee19755735
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Qt5Quick.dll
    • Size 3.3MB
    • SHA256 5f246016691ff883243ee9b3c9215eb16b859b12aefc5f4bbd2fbda3911883de
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/027.phpt
    • Size 2KB
    • SHA256 323fd1f93e0048ad7c67bd0225823e13dcb497e3a60530d1f531a32193dafa6d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/MSPTLS.DLL
    • Size 1.1MB
    • SHA256 7226480ec7a67706947615e76ad35cb8124b1617e3e2383f5c81bac5cb6df3a0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bin/Microsoft.Azure.Management.ContainerInstance.Fluent.dll
    • Size 230KB
    • SHA256 2d0752dc9d84160cf13e91d7e00be3507a6d0183c0f02904bcaced5a8b00a777
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bin/Microsoft.TeamFoundation.Git.dll
    • Size 720KB
    • SHA256 f4833cb4c2145870b3f68f22c468913c1bcd386d71af393c629add4653548598
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bin/Microsoft.VisualStudio.CMake.Package.dll
    • Size 1.1MB
    • SHA256 1950becf00f9aab8a7fda01f4aa02599946331d9953e87fe86625996c0445088
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bin/already_occupied.phpt
    • Size 753B
    • SHA256 8610e5bf1e47c063ff6ce7491eb1e07610b2663528b89b436fd411dd5d8b0806
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/array_021.phpt
    • Size 377B
    • SHA256 23cf6d0168a0ed263e8fb8e5fea5f3a70f30b3e9254ea6b31f792b36d63c876c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/array_diff_uassoc_variation2.phpt
    • Size 4KB
    • SHA256 14537f8ab40c1ec23cf77848b0dffd4f9cb60980668cca64065f3bb0bc570042
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/bug48336.phpt
    • Size 652B
    • SHA256 29049189023a9e93e6133d21a1cddfb53fd9a796c9f8233cf0b74d1e303ae27d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/bug51368.phpt
    • Size 656B
    • SHA256 00634260f43ac14e66d4cd2d21587bb1744185011340ebdf2f21dbc888055231
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdflinkloaderhijackloader
Score
10/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10