General

  • Target

    8b01cbd5cadf019f301814cd0a259488

  • Size

    2.1MB

  • Sample

    240203-blbg6addf6

  • MD5

    8b01cbd5cadf019f301814cd0a259488

  • SHA1

    754be5bfcb6d2a9e8bd479043526a601ed2394e6

  • SHA256

    6a0972e45710f3f23f3a05ea5ac582c20f511b3b4479d11204bcae5e56b15e85

  • SHA512

    1ad0419a2edb8bb822fc26da6d20e84adc43bf02dcb8dc59ffd48786d2e733df3d7d46bfa4703399a62603d7ce8fe1d04aa00a4838a916e03ee29963cc5c8339

  • SSDEEP

    49152:4Hmf776RPw9inVldaqtndm0/YTSH6Ozynkoo5WevfLiy:y0GdWutdm0w2R2kf5WCf

Score
7/10

Malware Config

Targets

    • Target

      8b01cbd5cadf019f301814cd0a259488

    • Size

      2.1MB

    • MD5

      8b01cbd5cadf019f301814cd0a259488

    • SHA1

      754be5bfcb6d2a9e8bd479043526a601ed2394e6

    • SHA256

      6a0972e45710f3f23f3a05ea5ac582c20f511b3b4479d11204bcae5e56b15e85

    • SHA512

      1ad0419a2edb8bb822fc26da6d20e84adc43bf02dcb8dc59ffd48786d2e733df3d7d46bfa4703399a62603d7ce8fe1d04aa00a4838a916e03ee29963cc5c8339

    • SSDEEP

      49152:4Hmf776RPw9inVldaqtndm0/YTSH6Ozynkoo5WevfLiy:y0GdWutdm0w2R2kf5WCf

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/CustomLicense.dll

    • Size

      4KB

    • MD5

      ae97fd89eec5000b400e6bc7e8db0e56

    • SHA1

      7ec1073f712ff5bd68deec894c36c0385bacdd68

    • SHA256

      bdf2d5ac95808ffe5b29aac71fcc2eb64bdca5b272a9c4082a74e20d0b1f20da

    • SHA512

      2e0d0182d7fda547bfd3f25c56d0c20ba75809ac8d4c96c2b40aad3db9a61c730a650c7e02c6050ab37abdf8ce66ea1e4479921d72e21f55b6fd42a3dc033ec3

    Score
    3/10
    • Target

      $PLUGINSDIR/Firstlook_EULA.rtf

    • Size

      92KB

    • MD5

      7bdb34466392f623ae36f0eadf63e515

    • SHA1

      4056d693b04f99bbf654cf7b5d3a90c3cdb7024e

    • SHA256

      97dd5233cd1a60d2f5f07dddac6f9fd9edef811ce2300f67500112162284f3df

    • SHA512

      57b276387654c171744e9048e4b614160b684d4ffbd948d285f5691dd59ade305ed406cb64227190ab24c8b2daa843059708e3124b310d26e948686d233fcda6

    • SSDEEP

      768:3lA64dNaXAoDeu8bgSDYAa92TwS1MPSXolD+cQMlyfDa3X7LjShAZqCm:3lSabS1a92TqSXo0co0XVjm

    Score
    4/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    • Target

      $PLUGINSDIR/TXP_EULA.rtf

    • Size

      61KB

    • MD5

      78a6e403f8ae9faed0bb57e2299751c7

    • SHA1

      57b6555887a5c94b9efd50767e979ca58e721488

    • SHA256

      105cae7b46e4852e848aba1af13fee2f941578ea504508f5a1597ee7cf9347ff

    • SHA512

      590d1dc00fda25d74d68bd2bcc383a5c4a7f705a123ac8a1077fcc28d9fd6c0b64104fafd93a9d5bde3655398ee2c0df9680253b2dcf8064d78c7a7ff77b3ad0

    • SSDEEP

      384:Antwgqb7PzybdKkuh5EBmF4bnVVN4DJCfE3eroHvnr6c/ZoD80YrYjIi6rGsNAYs:Anqh5EBDnVVNBoT6ZD80hghAZqCn

    Score
    4/10
    • Target

      $PLUGINSDIR/dealply.exe

    • Size

      923KB

    • MD5

      b68fad30ba12c18528ec302f8735f1b1

    • SHA1

      5057293950ea2d2798deff0e6e6da7f71e0f5a06

    • SHA256

      9b6eb72e82c2baae30b48d405c3172469343b76e95539fd8e19ef2eb31d45de8

    • SHA512

      abf73190d37da6e296da4fc8d054d4606d4d74c1c2071ebc8f26d266d5dd94018e9e61dd43eb8bfddf1a7dba49e505e9929479f848301d8a9159c574438f7d12

    • SSDEEP

      24576:HKWn4ndjrpbPhyiE4gIMcXFKW3O+Gxo8wIl:qdndjrpbcizcc15LGxo1E

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      9384f4007c492d4fa040924f31c00166

    • SHA1

      aba37faef30d7c445584c688a0b5638f5db31c7b

    • SHA256

      60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5

    • SHA512

      68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf

    • SSDEEP

      48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2

    Score
    3/10
    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    • Target

      $PLUGINSDIR/nsRandom.dll

    • Size

      21KB

    • MD5

      ab467b8dfaa660a0f0e5b26e28af5735

    • SHA1

      596abd2c31eaff3479edf2069db1c155b59ce74d

    • SHA256

      db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73

    • SHA512

      7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301

    • SSDEEP

      384:LCHDPMs4GdtyO5roguusMxUXiO3wOw95euooP2UgKbd9BvNtf:LCHD6Gh87MKXil/5r2U3z

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      $PLUGINSDIR/nsisdt.dll

    • Size

      5KB

    • MD5

      df4795dfabe3bc9278a73d496cc4b40d

    • SHA1

      2648ded47e29ecf3e1a1cc20c631e83caf566897

    • SHA256

      2261027077f23c8dba6b72af28862832aaa059740d0f5634b46cabb14326dd10

    • SHA512

      013d9712c3d699a7f41ab3e55931c9abb421fb2eda3542da5a4831ad2f073a1b0643120cc78147db0bfcd01df98ade3045ecb2f1e252fff1dc40be845e5ae303

    • SSDEEP

      24:etGSyYi61xyMmuEwv61OVXOwr+t5blXgO8ELnD3TPrHjf7Xz5CY1aeBEW58q6TvK:6y2xyNuEwWwU5blmPeB958xTvT7L/

    Score
    1/10
    • Target

      $PLUGINSDIR/registry.dll

    • Size

      24KB

    • MD5

      2b7007ed0262ca02ef69d8990815cbeb

    • SHA1

      2eabe4f755213666dbbbde024a5235ddde02b47f

    • SHA256

      0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d

    • SHA512

      aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca

    • SSDEEP

      384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA

    Score
    3/10
    • Target

      $PLUGINSDIR/version.dll

    • Size

      6KB

    • MD5

      ebc5bb904cdac1c67ada3fa733229966

    • SHA1

      3c6abfa0ddef7f3289f38326077a5041389b15d2

    • SHA256

      3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75

    • SHA512

      fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f

    • SSDEEP

      96:nPtMckE1e91BopVyXwUhn3f1I0vOKeoqO4d8QvS9:n1MMuOUhdI0c04yV9

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      $_0_/extensions/{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}/defaults/preferences/defaults.js

    • Size

      90B

    • MD5

      6089beb98867572841a008183b4b9a0e

    • SHA1

      8bb3b7edc6d0693cb623763712fbc78c4cfb93a5

    • SHA256

      994f6d16c168dbb78a68b15883dcceb4581e45c32bfd4ea477bbad7f46dfaf84

    • SHA512

      479a222870d06410ca329779690230526b1e309835cf259a3e8976a76e139c280aab32980514cec79c563ff0e3f30a5baea439f5c135760c0deec03efc7f33c7

    Score
    1/10
    • Target

      background.html

    • Size

      1KB

    • MD5

      bcb61d7c44a330b592b303755a5fa2b8

    • SHA1

      b7180bfa7063c03de956d1f55f2e88cc6d58c386

    • SHA256

      cde9fa114a23effda3202d21d7afe6c2a13506b71a588ad2afc0b9579472b109

    • SHA512

      92d433cabf480285c9473867256b34199bf999ba627df94189d19d08a12ae83ad91a561daa10e6a14963f18adf9a56985ffa4cb3c104effdb2888a3aa5c7e1d3

    Score
    1/10
    • Target

      DealPlyIE.dll

    • Size

      81KB

    • MD5

      53905cd4461961f341c0b41d4d0ec02b

    • SHA1

      aa9d6284707f25a4ad35336ed6c131ac56f175aa

    • SHA256

      c28c50700c5560d834b058e0ca816e1ccd003e77fb58777f55cd4b9d015f9013

    • SHA512

      84da2711dbeed65043150ed5afc23a6482ebb13e080a2e311f687ede136751c5f6e5fbeb947c0380e8b29ac64cb5741226a8ec23d69cd340ed8070fd48177248

    • SSDEEP

      1536:FXEdWDidDMsRs/sbOyDsxbU3Q+HUWY9f5YJ+/W5P:F0iX/AyS3HHi9f5YJ+yP

    Score
    6/10
    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

Score
7/10

behavioral2

Score
7/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
4/10

behavioral6

Score
1/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
4/10

behavioral10

Score
1/10

behavioral11

Score
7/10

behavioral12

Score
7/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

upx
Score
7/10

behavioral20

upx
Score
7/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

upx
Score
7/10

behavioral26

upx
Score
7/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

adwarestealer
Score
6/10

behavioral32

adwarestealer
Score
6/10