MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0967dfa48bd1d2d0e282f762e9be80315cc6ea75b6e1b34d73f066c47ab46612. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Tofsee


Vendor detections: 16


Intelligence 16 IOCs YARA 18 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0967dfa48bd1d2d0e282f762e9be80315cc6ea75b6e1b34d73f066c47ab46612
SHA3-384 hash: 9b70164a5a4c0fc8362d4b4cab7de75c07592a897d497c1459f601020b52b03f8583d037e2c3c542528e4a0f3e8bb890
SHA1 hash: 0e3d67a5c6f97f6f1d23a9540336b3ded4eaa13f
MD5 hash: b101be318ab44ddbbabf025ef02e9a29
humanhash: fourteen-beer-paris-nine
File name:file
Download: download sample
Signature Tofsee
Create hunting rule
File size:326'144 bytes
First seen:2023-05-11 20:26:01 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 4d0a7f70eaa3e152ceda1701c7d8bbd2 (3 x Smoke Loader, 2 x RedLineStealer, 1 x Amadey)
ssdeep 3072:TpXtNfDL3hmn5585BYMpYEvLDWPS5Z2wg3z2zxBUb5EpMYNY0lKRfeJ:RnLL3h45VMpYi2czjlpxPcQJ
TLSH T16F644C2383E17D94E9264B729E2FC6EC765EF3504F597B6A12199E1F04B02B2C173B18
TrID 37.3% (.EXE) Win64 Executable (generic) (10523/12/4)
17.8% (.EXE) Win16 NE executable (generic) (5038/12/1)
16.0% (.EXE) Win32 Executable (generic) (4505/5/1)
7.3% (.ICL) Windows Icons Library (generic) (2059/9)
7.2% (.EXE) OS/2 Executable (generic) (2029/13)
File icon (PE):PE icon
dhash icon 0000218884123308 (1 x Tofsee)
Reporter andretavare5
Tags:exe Tofsee


Avatar
andretavare5
Sample downloaded from http://176.113.115.239:8080/4.php

Intelligence

File Origin
# of uploads :
1
# of downloads :
292
Origin country :
US US
Vendor Threat Intelligence
Malware family:
tofsee
Create hunting rule
ID:
1
File name:
file
Verdict:
Malicious activity
Analysis date:
2023-05-11 20:26:55 UTC
Tags:
tofsee trojan miner
Link:
https://app.any.run/tasks/7db59524-3f87-47e1-b347-5edffb985b29

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
Tofsee
Create hunting rule
Link:
https://www.capesandbox.com/analysis/388549/
Detection(s):
Win.Packer.pkr_ce1a-9980177-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Сreating synchronization primitives
Running batch commands
Creating a process with a hidden window
Launching a process
Moving a file to the Windows subdirectory
Creating a service
Launching the process to change the firewall settings
Launching a service
Creating a process from a recently created file
Launching the default Windows debugger (dwwin.exe)
Forced system process termination
Searching for synchronization primitives
DNS request
Sending a custom TCP request
Creating a file in the Windows subdirectories
Connecting to a cryptocurrency mining pool
Connecting to a non-recommended domain
Sending an HTTP GET request
Possible injection to a system process
Enabling autorun for a service
Sending a TCP request to an infection source
Unauthorized injection to a system process
Adding exclusions to Windows Defender
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
greyware packed
Link:
https://www.filescan.io/uploads/645d4f5b0bf0f2d19b62c1cd/reports/772a079d-5086-447c-8106-c393610c3458/overview
Verdict:
Malicious
Labled as:
Babar.Generic
Link:
https://www.hybrid-analysis.com/sample/0967dfa48bd1d2d0e282f762e9be80315cc6ea75b6e1b34d73f066c47ab46612
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Malware family:
Tofsee
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/9ae22876-cc65-4442-bd79-8a709acfd34a
Result
Threat name:
Tofsee
Create hunting rule
Detection:
malicious
Classification:
troj.evad
Score:
100 / 100
Link:
https://www.joesandbox.com/analysis/1231142
Signature
Allocates memory in foreign processes
Antivirus detection for dropped file
Antivirus detection for URL or domain
C2 URLs / IPs found in malware configuration
Changes security center settings (notifications, updates, antivirus, firewall)
Deletes itself after installation
Detected unpacking (changes PE section rights)
Detected unpacking (overwrites its own PE header)
Drops executables to the windows directory (C:\Windows) and starts them
Found malware configuration
Injects a PE file into a foreign processes
Machine Learning detection for dropped file
Machine Learning detection for sample
Malicious sample detected (through community Yara rule)
Modifies the windows firewall
Multi AV Scanner detection for submitted file
Query firmware table information (likely to detect VMs)
System process connects to network (likely due to code injection or exploit)
Uses netsh to modify the Windows network and firewall settings
Writes to foreign memory regions
Yara detected Tofsee
Behaviour
Behavior Graph:
Download SVG
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 864129 Sample: file.exe Startdate: 11/05/2023 Architecture: WINDOWS Score: 100 51 microsoft-com.mail.protection.outlook.com 2->51 57 Found malware configuration 2->57 59 Malicious sample detected (through community Yara rule) 2->59 61 Antivirus detection for URL or domain 2->61 63 7 other signatures 2->63 8 pbresrjn.exe 2->8         started        11 file.exe 2 2->11         started        14 svchost.exe 2->14         started        16 8 other processes 2->16 signatures3 process4 file5 69 Detected unpacking (changes PE section rights) 8->69 71 Detected unpacking (overwrites its own PE header) 8->71 73 Writes to foreign memory regions 8->73 83 2 other signatures 8->83 18 svchost.exe 1 8->18         started        49 C:\Users\user\AppData\Local\...\pbresrjn.exe, PE32 11->49 dropped 75 Uses netsh to modify the Windows network and firewall settings 11->75 77 Modifies the windows firewall 11->77 22 cmd.exe 1 11->22         started        25 netsh.exe 3 11->25         started        27 cmd.exe 2 11->27         started        31 3 other processes 11->31 79 Changes security center settings (notifications, updates, antivirus, firewall) 14->79 29 MpCmdRun.exe 1 14->29         started        81 Query firmware table information (likely to detect VMs) 16->81 signatures6 process7 dnsIp8 53 vanaheim.cn 176.124.193.55, 443, 49709, 49710 GULFSTREAMUA Russian Federation 18->53 55 microsoft-com.mail.protection.outlook.com 52.101.40.29, 25, 49708 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 18->55 65 System process connects to network (likely due to code injection or exploit) 18->65 67 Deletes itself after installation 18->67 47 C:\Windows\SysWOW64\...\pbresrjn.exe (copy), PE32 22->47 dropped 33 conhost.exe 22->33         started        35 conhost.exe 25->35         started        37 conhost.exe 27->37         started        39 conhost.exe 29->39         started        41 conhost.exe 31->41         started        43 conhost.exe 31->43         started        45 conhost.exe 31->45         started        file9 signatures10 process11
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0967dfa48bd1d2d0e282f762e9be80315cc6ea75b6e1b34d73f066c47ab46612/
Threat name:
Win32.Trojan.Smokeloader
Create hunting rule
Status:
Malicious
First seen:
2023-05-11 20:27:11 UTC
File Type:
PE (Exe)
Extracted files:
52
AV detection:
22 of 24 (91.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=bft57jel2hjnbyuc65rotpuagfomn2tvw3q3gtlt6btmi6vumyja._file
Result
Malware family:
xmrig
Create hunting rule
Score:
  10/10
Tags:
family:tofsee family:xmrig evasion miner persistence trojan
Link:
https://tria.ge/reports/230511-y7t8qacg5x/
Behaviour
Modifies data under HKEY_USERS
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Enumerates physical storage devices
Program crash
Launches sc.exe
Drops file in System32 directory
Suspicious use of SetThreadContext
Checks computer location settings
Deletes itself
Executes dropped EXE
Creates new service(s)
Modifies Windows Firewall
Sets service image path in registry
XMRig Miner payload
Tofsee
Windows security bypass
xmrig
Malware Config
C2 Extraction:
vanaheim.cn
jotunheim.name
Unpacked files
SH256 hash:
ca07ed841c430fedf79b2696148963cc5c5c989641e40aa34c022d4685e8ba3e
MD5 hash:
a050f3c88055b70ddf52d04747d4f527
SHA1 hash:
3cc54919cb27b047127a1d14708794f0eeff5739
Detections:
Tofsee
Create hunting rule
win_tofsee_w0
Create hunting rule
Link:
https://www.unpac.me/results/a721db93-4267-4e85-b516-bc1970573c8f/
Parent samples :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 hash:
0967dfa48bd1d2d0e282f762e9be80315cc6ea75b6e1b34d73f066c47ab46612
MD5 hash:
b101be318ab44ddbbabf025ef02e9a29
SHA1 hash:
0e3d67a5c6f97f6f1d23a9540336b3ded4eaa13f
Link:
https://www.unpac.me/results/a721db93-4267-4e85-b516-bc1970573c8f/
Malware family:
XMRig
Create hunting rule
Verdict:
Malicious
Link:
https://www.vmray.com/analyses/_mb/0967dfa48bd1/report/overview.html
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/0967dfa48bd1d2d0e282f762e9be80315cc6ea75b6e1b34d73f066c47ab46612

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:cobalt_strike_tmp01925d3f
Create hunting rule
Author:The DFIR Report
Description:files - file ~tmp01925d3f.exe
Reference:https://thedfirreport.com
Rule name:CoinMiner_Strings
Create hunting rule
Author:Florian Roth (Nextron Systems)
Description:Detects mining pool protocol string in Executable
Reference:https://minergate.com/faq/what-pool-address
Rule name:INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA
Create hunting rule
Author:ditekSHen
Description:Detects Windows executables referencing non-Windows User-Agents
Rule name:MacOS_Cryptominer_Generic_333129b7
Create hunting rule
Author:Elastic Security
Rule name:MALWARE_Win_Tofsee
Create hunting rule
Author:ditekSHen
Description:Detects Tofsee
Rule name:MAL_XMR_Miner_May19_1
Create hunting rule
Author:Florian Roth (Nextron Systems)
Description:Detects Monero Crypto Coin Miner
Reference:https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Rule name:MAL_XMR_Miner_May19_1_RID2E1B
Create hunting rule
Author:Florian Roth
Description:Detects Monero Crypto Coin Miner
Reference:https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Rule name:MINER_monero_mining_detection
Create hunting rule
Author:Trellix ATR team
Description:Monero mining software
Rule name:pdb_YARAify
Create hunting rule
Author:@wowabiy314
Description:PDB
Rule name:PUA_Crypto_Mining_CommandLine_Indicators_Oct21
Create hunting rule
Author:Florian Roth (Nextron Systems)
Description:Detects command line parameters often used by crypto mining software
Reference:https://www.poolwatch.io/coin/monero
Rule name:shellcode
Create hunting rule
Author:nex
Description:Matched shellcode byte patterns
Rule name:tofsee_yhub
Create hunting rule
Author:Billy Austin
Description:Detects Tofsee botnet, also known as Gheg
Rule name:Windows_Trojan_Tofsee_26124fe4
Create hunting rule
Author:Elastic Security
Rule name:win_tofsee
Create hunting rule
Author:akrasuski1
Description:Tofsee malware
Reference:https://www.bitsight.com/blog/tofsee-botnet-proxying-and-mining
Rule name:win_tofsee_w0
Create hunting rule
Author:akrasuski1
Rule name:XMRIG_Monero_Miner
Create hunting rule
Author:Florian Roth (Nextron Systems)
Description:Detects Monero mining software
Reference:https://github.com/xmrig/xmrig/releases
Rule name:XMRIG_Monero_Miner_RID2DC1
Create hunting rule
Author:Florian Roth
Description:Detects Monero mining software
Reference:https://github.com/xmrig/xmrig/releases
Rule name:yara_template
Create hunting rule

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Dropped by
PrivateLoader
  
Delivery method
Distributed via drive-by
  
URLhaus
https://urlhaus.abuse.ch/url/2513471/
Cape
Cape
https://www.capesandbox.com/analysis/388549/

Comments