General
-
Target
Diavlo_Setup_3.2.4.exe
-
Size
75.1MB
-
Sample
230904-clh3nsdg55
-
MD5
3d611ade68c73b73527e06ac4d7e8346
-
SHA1
8ea1cc101c74208e8d436f97d451860bbf5a9566
-
SHA256
ce2dc31d05f459443b7526c3839ef1df7a8c2899338f3e878fd2a1eda2f53604
-
SHA512
478d4960268bd142833172056027cc3900f7429ea21edd540bb91af3385f6f5adac0a3ff3741047b2f1ffaa4d393e812b8087db175761d99aba69903cdb83093
-
SSDEEP
1572864:2e8JFVMaN1UZ81ZvR7AXnyyCtL50tw5DIL3qD6VmuUg1YqcuMs3DMKszSgW0K679:2pXn1UW71Mn5CtLp5D63G6VP1ULs4f8G
Static task
static1
Behavioral task
behavioral1
Sample
Diavlo_Setup_3.2.4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Diavlo_Setup_3.2.4.exe
Resource
win10v2004-20230831-en
Malware Config
Targets
-
-
Target
Diavlo_Setup_3.2.4.exe
-
Size
75.1MB
-
MD5
3d611ade68c73b73527e06ac4d7e8346
-
SHA1
8ea1cc101c74208e8d436f97d451860bbf5a9566
-
SHA256
ce2dc31d05f459443b7526c3839ef1df7a8c2899338f3e878fd2a1eda2f53604
-
SHA512
478d4960268bd142833172056027cc3900f7429ea21edd540bb91af3385f6f5adac0a3ff3741047b2f1ffaa4d393e812b8087db175761d99aba69903cdb83093
-
SSDEEP
1572864:2e8JFVMaN1UZ81ZvR7AXnyyCtL50tw5DIL3qD6VmuUg1YqcuMs3DMKszSgW0K679:2pXn1UW71Mn5CtLp5D63G6VP1ULs4f8G
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-