5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248

Sharing

Copy URL Twitter E-mail

General

Target
Deskland-Setup.exe
Size 260.4MB
Sample261113-plxmaavy5k
SHA256 5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248
MD5 61afba3af36cc513c6232f53badadc2c
SHA1 eeb735f70d9c7d57389f50788740e18d1ae272aa
SHA512 cadc768163c85f8e943c87580363d856b5ab7c411f6f5076c5a12b572c2ec775578b5cc7ac3327a079a5041ab460ceb13388ad37d60200bce7a50aa978e37681
SSDEEP 6291456:WSL8uRUdJ/HJB4C4r9Te3TE8jz91cunaJkAW7:WSL8E+ZHJBN2CE8jzkunaOb
TLSH
T129D8334D09457087F18582FD83A76E814E2EF88BE03F252FF164D70A27876D496CA99F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Deskland-Setup.exe
- Size 260.4MB
- SHA256 5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248
- MD5 61afba3af36cc513c6232f53badadc2c
- SHA1 eeb735f70d9c7d57389f50788740e18d1ae272aa
- SHA512 cadc768163c85f8e943c87580363d856b5ab7c411f6f5076c5a12b572c2ec775578b5cc7ac3327a079a5041ab460ceb13388ad37d60200bce7a50aa978e37681
- SSDEEP 6291456:WSL8uRUdJ/HJB4C4r9Te3TE8jz91cunaJkAW7:WSL8E+ZHJBN2CE8jzkunaOb
- TLSH
  T129D8334D09457087F18582FD83A76E814E2EF88BE03F252FF164D70A27876D496CA99F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  prototype/auth-ui.js
- Size 17KB
- SHA256 403462e8825cddb15102468a33fcc3071b102505dadefeff72afd92ee6322bd0
- MD5 b090731c45ed352897e12b566e6830e9
- SHA1 061674fb069af348257ae5d575cb460583711ed2
- SHA512 bc571ebcbe27cf3fa39b9c585951202977c624dc7f727edab0dbd9476cb6378515e3121b8bf7315bb1789cc6e1fdf77985bf7a11be0ae341074ea511a8dad744
- SSDEEP 192:c8DmKEuUADGnVxg3bKnriFqo1eA9Xxg2eQLucQNB98+es1EmxPv9p7FbLVdS4ukQ:c8DzdGA/T7ZxyS+L/72F
- TLSH
  T16A82449296B90C32F671113ED05572BB2F2B8811124AF9F2FE5E06043FEC599E3B64D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  prototype/beach-regions.js
- Size 1KB
- SHA256 39e6f5a4f4a2785c872720e2438d14547078356b88922e7eff01e35391021509
- MD5 866b9bc65d2e1a8757e295794d2adebd
- SHA1 213b825e053489c102ac63e1b1144533b3e18e9f
- SHA512 ad67fd700dedcc09eef19d654b1690c2332f3e26bbe0cb77b3d35560e632d01511442ebd3762aae1b5d3b2479dc0e1d9ca41c6b27aa3a2df23d6d54f3bacdc8d
- TLSH
  T18921331D012F000A42A6E64F4613981E9E59F093B20BDCA0779923940FBD964E5EEF69
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  prototype/karesansui.html
- Size 36KB
- SHA256 bddbeb02b7cd7a0f5a1243a02494607968714c1c6a910d72b0b562a99af961d5
- MD5 a9625439802d0aac739e9b908ab9dd74
- SHA1 d519dee334c1c6d29f0e2d9e0df82f2decca06c6
- SHA512 70ca16fa61d9d43148386fde1d620e27eabe259b84bc417b05e31f6d78976819da77091c55c4275c514c9e309456453193ad3d0b45fcdd53701708c70784a900
- SSDEEP 768:FX3EPMHhaqvSomMrrs7twOWISWg3rsdt707ANYaceXSG:WUFKxdPSl3Yd+75bef
- TLSH
  T12AF25A5612F1243C526BE0A6AF57820BB32DC443A606D955798C42A48FC17A8C7FEFDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  prototype/lake-clouds.js
- Size 8KB
- SHA256 a21c44d27cef513b6933423af7dff33542182dc778104a2deea416016aa1ba17
- MD5 37c7a31332aeed9b31cf857692affb5e
- SHA1 9f2b4c625ab8a6549d5f531d1caa1c2006d79e04
- SHA512 2eb086a835f1db970289d39dd95503d1d332ac3603f9d329fea3d1b3d85b05e92f69793558fa8c499be624412643c959c45e3b4483f6e4218698b71b8aacacc6
- SSDEEP 192:nyZIS01sB3tSfbHAKrgrgYzil0jl8caLiUZi:yuS01sB3Af7AK0JilelujZi
- TLSH
  T11202A77522B36345309376D289838DC6A568B847B10FD9BC7E5C82200FFE0A51DBEA5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  prototype/lake-forest.js
- Size 4KB
- SHA256 0c3503133d6faf1743ff67e27bae236435b9efac896f0e5bb9bf0d5dc5fdf7ea
- MD5 0943751ef51b1e218d934e26f7aa6400
- SHA1 7feb5aca2aa2754500a4f6feb69822bfbd4a6ba4
- SHA512 52b7670d33d58c5c4733c9fcc46b5c749d55379d42b1825e3aa8007dc3662fe874c2a20b79cd2d4e30867eb8b60017eb0760a2927f65f6fdfdd5d37616b74f1e
- SSDEEP 96:RdZ6/qzGp+COKm9c0GRyqRlJl9Sb347TvtMFc9lywZRbau6fD:RdZ6/IGIXN4ScHVoc9lVZm
- TLSH
  T1E791865C56774A2A88131AF92E03014D62B8942B775BFF48BF8EE3431FB50265BF819D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  prototype/lake-ripples.js
- Size 3KB
- SHA256 dc31f0831b78bf5ff040571408914c5ffa0b31d2420f11e6fec1147333618197
- MD5 c55f33cc4a26c125ad2af9e7d7bc3f71
- SHA1 5e4669c10a7074e61601229daeefefd9cd155a89
- SHA512 0614a665746c753099f4ef112fab87e5a0f00677c0af01fc98f138e70f7a1e8bf1d0d165247599fc5108dcad99ed4e8459a203ba4ba8e43bcfec2fe17f0f72f3
- TLSH
  T16771B4A53207143D8CCB50EACB47054E905922BF5AD7D716B34DCA968F8364AB329BCA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  prototype/lake-shallows.js
- Size 3KB
- SHA256 d93b5586debcc0899d17f8e6d5a00e38bb33d9d5e5baabae8afc861dc287d192
- MD5 67b8a6c384051a41fde5e690ef164db8
- SHA1 481ad304f8f2a96d1a711027bbc6586da6d4054d
- SHA512 4b34e03750e3bf000d999f08a475adb3adf7167e9a92d0024b4ef25a991bd8a9486e7a3b942dfda348b548512726622c9de8228dd826cc750f05dfb33e125e39
- TLSH
  T17E81529903B64A4A581366B9298702DDF198CC1B3F43FFC4BE8CD3271F998566A7C448
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  prototype/lake-shore-rocks.js
- Size 8KB
- SHA256 e9b604a8d65e1cd3c00862f992e142d01bfeb31a083886e1d95091ad352874a4
- MD5 f403e7076db1cee4cbc301cea2822020
- SHA1 0bfc6df400ad375a0f72b1909fd7698011e63f2a
- SHA512 6c592e411c3d49655b2f49f9a4a96d1011742e22414dac981fcb7e210cfefb09b9bb73a11cbb6a9fa88ad8c841810fef94c77b6f70cb25c6d694d659939eac30
- SSDEEP 192:cAzzuksAihaCnkE/uV8PQ0DIfDWSYCfzL+1mjauRm/ivfzRxlF6ZC:ccuhAihV9zwFYCfzK6au8UHOZC
- TLSH
  T1B702F98D03770856705306E456030009B17AD91BB2D6FE887F8D97AA5F870A779FE1EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  prototype/lake.html
- Size 53KB
- SHA256 70f9263cdfd6c61e3e1e717126f94373217bae535178a84f8fd9c22f7bf8bb5d
- MD5 0f8385033b75b95eede0875d50dd12c8
- SHA1 dadab66b2b840cb6406c5c03345b489dd078f2d1
- SHA512 a969e4e34486e9ef630126d9c6b567a65cc35b6fb807ef3789c9947877f465afde818a3d09872b83e4765586e0509a9a0f1dfca80d07651dc6ed196cf0ec652d
- SSDEEP 1536:I9iMyDNPhl9iM9VJ3rd/ikFEytEj87op0m1+f8K40jjFVtAjrShK:4Ah9fJ3r8kFDnolrShK
- TLSH
  T13B436D4213A9153C613761E65E038A9E312D9893B10BD9E875ACC0648FC77ACD7FEBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  prototype/lotus.html
- Size 99KB
- SHA256 cdfc5061ffb92e2e1a1254e632c7371bd7f7a3974962e3bc12ac74c91390088b
- MD5 012bc2a7eeeb57e767dbbc984c15de77
- SHA1 d88a911419259b0ed9075530319583d3ba2cd782
- SHA512 95278bcb5119893f8f7eb1928e0d4dacb9c836a55d89088a28dabe32de52c6ce3a0b9d557e884c95768d66005040e73a746b12b04eefe78b2fb8423de3753309
- SSDEEP 1536:E9iMyDc89iMRlP0gRYGBkIbEZDTEytE5pfBAXhEVc60EPCGeLofLCXEZ7NoU8mX+:kgAQkSMTDlic60EPCGyoo0o6IOK
- TLSH
  T179A31A4A22E61538511BA1B98F43C40D631EE453BA0AD998B90D92208FE7778C7FDFD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  prototype/maldives-palms.js
- Size 9KB
- SHA256 ed2a33da1deea7d2dd23cd1377bee9a4751b87f8dfdef98aa1a116aa781d2d1c
- MD5 8f77051c495ee2329cbf3228d9bdfeb1
- SHA1 fbca395df986b2d5710d57cc87395b3db06942f4
- SHA512 93af98d91c86a3379efdd86bf57d57b25461ade6313d6e7817b51e94b3f09b4ee696f2b0c86c176af4657e611c4fa4968196b639f1c840d3424d8bf39cd30bbd
- SSDEEP 192:ROVcVKjJTuMyeM0tl3EfGofIxeba32/HJZ0+DBed0xFcm5BuBsHFkA+C8:ZkvLMml3Ef/ba32/HJu+oQFcmjlkA+C8
- TLSH
  T1A312D805127B24046153C0DABA4B804C25BDE053B217DB7A72DEE2604FFA539FBFCA98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  prototype/maldives-reef.js
- Size 20KB
- SHA256 5d64ad0e2b1e79af36c48b97b29924ecf0e6df4fd99902772127cab9e8c7b128
- MD5 c79eadf93087eab2ac2e082e54207ed4
- SHA1 03fefcf8f8b00967d8b56b34c45388e05cc1a448
- SHA512 05687a76710d9ab7e47a4e852b0026119389a00fcef5146eec0d41fd0dd1a2a09d5d20177177425df3ecc4644ac1b6cf1d940937c6dd444053fd674e8861ed50
- SSDEEP 384:TwoMNa/pSKDz63OyCZc8EfBYplKuEySYmBwQU8hTqYs8PyoL2ro0XcU98130M3ko:Twokz3/CZc8EftsWUro0XpM3kpbW1PT
- TLSH
  T1BBA2D61D52B31114615BE1AA9F035009621DF01BB916EE8E7E0D86049FAFC39DBF8EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  prototype/map.html
- Size 91KB
- SHA256 35de2c6d1e353fe078699aa3ddb6e470bed242aebcc58ceafb3ca796a16feb87
- MD5 73db5393cfb3568279f114d79143fd45
- SHA1 0b9d2d9aa2e44bb691844fa6913f4e86a4de9234
- SHA512 421219349a31607363117335e6b521843cb0e8c74d2cc2061a5098191c744b74ce52d3504e0781266b86d81b412bc8712df68ba6e6ffc0d489709a28e01ebd74
- SSDEEP 1536:C9iMyDh59iMBdr/PFf0QWPfpk9rHYTBkIbEZDTEytEJNZbNEZFZE/4XhE0cS4EZI:SIBsQoW9rHYdkSMTDycp9741oc6RK
- TLSH
  T1CD934B49119625385027E1BA8F43C81D631EE463B606DDA97A4C82604FD3BB8C7FEFD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  prototype/meadow-cat.js
- Size 4KB
- SHA256 ec40ff3f40da2dd2606d86aa8befbbf5a269be76415646f360e808417d9eb14c
- MD5 7cb8dba17be7e0c1e4feadcce2709445
- SHA1 1f15f2f2438818224dd46d5ba1650172d35ac839
- SHA512 8742f270e3daa3bd24b554e203f49b8a8488002a218c9bfe8c2efde3a9e027d967101a6f9f002af6ce241a36b9037a092e638ad61c9cd16bf5979080d145eed6
- SSDEEP 96:gpIzy4enuITOYPUQCz3hpJfRv9+v0xUf6xbHuCRDMlpDxfKyt:gpI2zuITOYPUQCz3hpJf59TxA6OlHSyt
- TLSH
  T187A1D79421731508642327A639CB109A26E89E07F457DED0BEDED3413FF900B9ADF5AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  prototype/meadow-kite.js
- Size 7KB
- SHA256 f4d4f9ce1b08f272849af101c3d54af4618caaa77fd184a69c7e424518b79d0d
- MD5 8425ef7c1d2ed26bf7c0123ee4eec14f
- SHA1 9db171aac24b545191027fd798e965b773acdfd5
- SHA512 b1f8f3765949e629f65f82b503dca2de85705c38fdc827043d563609063ac1f1d08fc07eed6922899f082630a0e04c1e9e8c865448bd46ad57d5f553feffcbec
- SSDEEP 192:aKMXw03v4cCG4xE1SIOx6cWEzBjAXatqaLQ393c2P83oEXin:2A4vQBE1ls5xBj+c2P83oE0
- TLSH
  T1FDF1D885113B10295423F5529B47204F152C98B3F247EF9A7F5EE2154F87A6CC3AD9CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32