Overview

overview

6

Static

static

3

dart_flutter_demo.exe

windows10-2004-x64

6

dart_flutter_demo.exe

windows11-ltsc_2024-x64

6

dartjni.dll

windows10-2004-x64

1

dartjni.dll

windows11-ltsc_2024-x64

1

data/app.so

ubuntu-18.04-amd64

1

data/flutt...fo.ps1

windows10-2004-x64

6

data/flutt...fo.ps1

windows11-ltsc_2024-x64

6

file_selec...in.dll

windows10-2004-x64

1

file_selec...in.dll

windows11-ltsc_2024-x64

1

flutter_windows.dll

windows10-2004-x64

1

system_inf...in.dll

windows10-2004-x64

1

system_inf...in.dll

windows11-ltsc_2024-x64

1

url_launch...in.dll

windows10-2004-x64

1

url_launch...in.dll

windows11-ltsc_2024-x64

1

windows_de...in.dll

windows10-2004-x64

1

windows_de...in.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    dart-flutter-demo-windows-x64-v0.5.6-rc.1.zip
  • Size 14.0MB
  • Sample261113-jp5jeahv7r
  • SHA256 bb83cb373829f2eff79ddf8f420dd07d5c90c1d896c55859f5839693ecee3508
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecutionlinux

Malware Config

Targets

    • Target
      dart_flutter_demo.exe
    • Size 181KB
    • SHA256 c8bac90c3ee6265fd847eefc4c4c5174c0fa9b690c92a3a2c1b39b63d5a79591
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2
    • Target
      dartjni.dll
    • Size 57KB
    • SHA256 c6c7249498d60eededd2f32d0e90416166b97b70b164e9942817d341376dec20
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      data/app.so
    • Size 7.1MB
    • SHA256 dab26148799c8b03887cf3d35fa4675e2054717bd6ff2e3442968807ff2fa062
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5
    • Target
      data/flutter_assets/packages/system_info_vincentzyu/assets/windows/SystemInfo.ps1
    • Size 1KB
    • SHA256 ec40cd7eff63dfd620558ec3cd3e1187d38b85bb1abaf88744249b502ffa8040
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution
    behavioral6behavioral7
    • Target
      file_selector_windows_plugin.dll
    • Size 108KB
    • SHA256 f72f14ca543dc607303ca25d9107a6e5f42c92f03b9a97e0b2d0469ab152d487
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8behavioral9
    • Target
      flutter_windows.dll
    • Size 19.8MB
    • SHA256 86022babe7b66785ad5aad2184aa348720f2eb951a97bfcc45f10f40f4336e49
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10
    • Target
      system_info_vincentzyu_plugin.dll
    • Size 125KB
    • SHA256 1d152ea4c1f3bae4ec5a91df4503a8e1bb73dd09139e50bb897fbb1a24267d3d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      url_launcher_windows_plugin.dll
    • Size 96KB
    • SHA256 a56298ac7d1fb2a89931a2ec143f7ce38cccbb0b945a20cdcf1ce0e001469236
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      windows_desktop_integration_vincentzyu_plugin.dll
    • Size 115KB
    • SHA256 4888a499f94e14915c71c93b11fc80be7fbd2652bfd8290cfd4d8109289b0458
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks