Overview
overview
7Static
static
78b01cbd5ca...88.exe
windows7-x64
78b01cbd5ca...88.exe
windows10-2004-x64
7$PLUGINSDI...se.dll
windows7-x64
3$PLUGINSDI...se.dll
windows10-2004-x64
3$PLUGINSDI...LA.rtf
windows7-x64
4$PLUGINSDI...LA.rtf
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...LA.rtf
windows7-x64
4$PLUGINSDI...LA.rtf
windows10-2004-x64
1$PLUGINSDI...ly.exe
windows7-x64
7$PLUGINSDI...ly.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...om.dll
windows7-x64
7$PLUGINSDI...om.dll
windows10-2004-x64
7$PLUGINSDI...dt.dll
windows7-x64
1$PLUGINSDI...dt.dll
windows10-2004-x64
1$PLUGINSDI...ry.dll
windows7-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
7$PLUGINSDI...on.dll
windows10-2004-x64
7$_0_/exten...lts.js
windows7-x64
1$_0_/exten...lts.js
windows10-2004-x64
1background.html
windows7-x64
1background.html
windows10-2004-x64
1DealPlyIE.dll
windows7-x64
6DealPlyIE.dll
windows10-2004-x64
6General
-
Target
8b01cbd5cadf019f301814cd0a259488
-
Size
2.1MB
-
Sample
240203-blbg6addf6
-
MD5
8b01cbd5cadf019f301814cd0a259488
-
SHA1
754be5bfcb6d2a9e8bd479043526a601ed2394e6
-
SHA256
6a0972e45710f3f23f3a05ea5ac582c20f511b3b4479d11204bcae5e56b15e85
-
SHA512
1ad0419a2edb8bb822fc26da6d20e84adc43bf02dcb8dc59ffd48786d2e733df3d7d46bfa4703399a62603d7ce8fe1d04aa00a4838a916e03ee29963cc5c8339
-
SSDEEP
49152:4Hmf776RPw9inVldaqtndm0/YTSH6Ozynkoo5WevfLiy:y0GdWutdm0w2R2kf5WCf
Behavioral task
behavioral1
Sample
8b01cbd5cadf019f301814cd0a259488.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8b01cbd5cadf019f301814cd0a259488.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/CustomLicense.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/CustomLicense.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Firstlook_EULA.rtf
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Firstlook_EULA.rtf
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/TXP_EULA.rtf
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/TXP_EULA.rtf
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/dealply.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/dealply.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsRandom.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsRandom.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsisdt.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsisdt.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/registry.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/registry.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/version.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/version.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
$_0_/extensions/{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}/defaults/preferences/defaults.js
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
$_0_/extensions/{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}/defaults/preferences/defaults.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
background.html
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
background.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
DealPlyIE.dll
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
8b01cbd5cadf019f301814cd0a259488
-
Size
2.1MB
-
MD5
8b01cbd5cadf019f301814cd0a259488
-
SHA1
754be5bfcb6d2a9e8bd479043526a601ed2394e6
-
SHA256
6a0972e45710f3f23f3a05ea5ac582c20f511b3b4479d11204bcae5e56b15e85
-
SHA512
1ad0419a2edb8bb822fc26da6d20e84adc43bf02dcb8dc59ffd48786d2e733df3d7d46bfa4703399a62603d7ce8fe1d04aa00a4838a916e03ee29963cc5c8339
-
SSDEEP
49152:4Hmf776RPw9inVldaqtndm0/YTSH6Ozynkoo5WevfLiy:y0GdWutdm0w2R2kf5WCf
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/CustomLicense.dll
-
Size
4KB
-
MD5
ae97fd89eec5000b400e6bc7e8db0e56
-
SHA1
7ec1073f712ff5bd68deec894c36c0385bacdd68
-
SHA256
bdf2d5ac95808ffe5b29aac71fcc2eb64bdca5b272a9c4082a74e20d0b1f20da
-
SHA512
2e0d0182d7fda547bfd3f25c56d0c20ba75809ac8d4c96c2b40aad3db9a61c730a650c7e02c6050ab37abdf8ce66ea1e4479921d72e21f55b6fd42a3dc033ec3
Score3/10 -
-
-
Target
$PLUGINSDIR/Firstlook_EULA.rtf
-
Size
92KB
-
MD5
7bdb34466392f623ae36f0eadf63e515
-
SHA1
4056d693b04f99bbf654cf7b5d3a90c3cdb7024e
-
SHA256
97dd5233cd1a60d2f5f07dddac6f9fd9edef811ce2300f67500112162284f3df
-
SHA512
57b276387654c171744e9048e4b614160b684d4ffbd948d285f5691dd59ade305ed406cb64227190ab24c8b2daa843059708e3124b310d26e948686d233fcda6
-
SSDEEP
768:3lA64dNaXAoDeu8bgSDYAa92TwS1MPSXolD+cQMlyfDa3X7LjShAZqCm:3lSabS1a92TqSXo0co0XVjm
Score4/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/TXP_EULA.rtf
-
Size
61KB
-
MD5
78a6e403f8ae9faed0bb57e2299751c7
-
SHA1
57b6555887a5c94b9efd50767e979ca58e721488
-
SHA256
105cae7b46e4852e848aba1af13fee2f941578ea504508f5a1597ee7cf9347ff
-
SHA512
590d1dc00fda25d74d68bd2bcc383a5c4a7f705a123ac8a1077fcc28d9fd6c0b64104fafd93a9d5bde3655398ee2c0df9680253b2dcf8064d78c7a7ff77b3ad0
-
SSDEEP
384:Antwgqb7PzybdKkuh5EBmF4bnVVN4DJCfE3eroHvnr6c/ZoD80YrYjIi6rGsNAYs:Anqh5EBDnVVNBoT6ZD80hghAZqCn
Score4/10 -
-
-
Target
$PLUGINSDIR/dealply.exe
-
Size
923KB
-
MD5
b68fad30ba12c18528ec302f8735f1b1
-
SHA1
5057293950ea2d2798deff0e6e6da7f71e0f5a06
-
SHA256
9b6eb72e82c2baae30b48d405c3172469343b76e95539fd8e19ef2eb31d45de8
-
SHA512
abf73190d37da6e296da4fc8d054d4606d4d74c1c2071ebc8f26d266d5dd94018e9e61dd43eb8bfddf1a7dba49e505e9929479f848301d8a9159c574438f7d12
-
SSDEEP
24576:HKWn4ndjrpbPhyiE4gIMcXFKW3O+Gxo8wIl:qdndjrpbcizcc15LGxo1E
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
325b008aec81e5aaa57096f05d4212b5
-
SHA1
27a2d89747a20305b6518438eff5b9f57f7df5c3
-
SHA256
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
-
SHA512
18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
-
SSDEEP
192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/LangDLL.dll
-
Size
5KB
-
MD5
9384f4007c492d4fa040924f31c00166
-
SHA1
aba37faef30d7c445584c688a0b5638f5db31c7b
-
SHA256
60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
-
SHA512
68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
-
SSDEEP
48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/nsRandom.dll
-
Size
21KB
-
MD5
ab467b8dfaa660a0f0e5b26e28af5735
-
SHA1
596abd2c31eaff3479edf2069db1c155b59ce74d
-
SHA256
db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
-
SHA512
7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301
-
SSDEEP
384:LCHDPMs4GdtyO5roguusMxUXiO3wOw95euooP2UgKbd9BvNtf:LCHD6Gh87MKXil/5r2U3z
Score7/10 -
-
-
Target
$PLUGINSDIR/nsisdt.dll
-
Size
5KB
-
MD5
df4795dfabe3bc9278a73d496cc4b40d
-
SHA1
2648ded47e29ecf3e1a1cc20c631e83caf566897
-
SHA256
2261027077f23c8dba6b72af28862832aaa059740d0f5634b46cabb14326dd10
-
SHA512
013d9712c3d699a7f41ab3e55931c9abb421fb2eda3542da5a4831ad2f073a1b0643120cc78147db0bfcd01df98ade3045ecb2f1e252fff1dc40be845e5ae303
-
SSDEEP
24:etGSyYi61xyMmuEwv61OVXOwr+t5blXgO8ELnD3TPrHjf7Xz5CY1aeBEW58q6TvK:6y2xyNuEwWwU5blmPeB958xTvT7L/
Score1/10 -
-
-
Target
$PLUGINSDIR/registry.dll
-
Size
24KB
-
MD5
2b7007ed0262ca02ef69d8990815cbeb
-
SHA1
2eabe4f755213666dbbbde024a5235ddde02b47f
-
SHA256
0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
-
SHA512
aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca
-
SSDEEP
384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA
Score3/10 -
-
-
Target
$PLUGINSDIR/version.dll
-
Size
6KB
-
MD5
ebc5bb904cdac1c67ada3fa733229966
-
SHA1
3c6abfa0ddef7f3289f38326077a5041389b15d2
-
SHA256
3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75
-
SHA512
fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f
-
SSDEEP
96:nPtMckE1e91BopVyXwUhn3f1I0vOKeoqO4d8QvS9:n1MMuOUhdI0c04yV9
Score7/10 -
-
-
Target
$_0_/extensions/{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}/defaults/preferences/defaults.js
-
Size
90B
-
MD5
6089beb98867572841a008183b4b9a0e
-
SHA1
8bb3b7edc6d0693cb623763712fbc78c4cfb93a5
-
SHA256
994f6d16c168dbb78a68b15883dcceb4581e45c32bfd4ea477bbad7f46dfaf84
-
SHA512
479a222870d06410ca329779690230526b1e309835cf259a3e8976a76e139c280aab32980514cec79c563ff0e3f30a5baea439f5c135760c0deec03efc7f33c7
Score1/10 -
-
-
Target
background.html
-
Size
1KB
-
MD5
bcb61d7c44a330b592b303755a5fa2b8
-
SHA1
b7180bfa7063c03de956d1f55f2e88cc6d58c386
-
SHA256
cde9fa114a23effda3202d21d7afe6c2a13506b71a588ad2afc0b9579472b109
-
SHA512
92d433cabf480285c9473867256b34199bf999ba627df94189d19d08a12ae83ad91a561daa10e6a14963f18adf9a56985ffa4cb3c104effdb2888a3aa5c7e1d3
Score1/10 -
-
-
Target
DealPlyIE.dll
-
Size
81KB
-
MD5
53905cd4461961f341c0b41d4d0ec02b
-
SHA1
aa9d6284707f25a4ad35336ed6c131ac56f175aa
-
SHA256
c28c50700c5560d834b058e0ca816e1ccd003e77fb58777f55cd4b9d015f9013
-
SHA512
84da2711dbeed65043150ed5afc23a6482ebb13e080a2e311f687ede136751c5f6e5fbeb947c0380e8b29ac64cb5741226a8ec23d69cd340ed8070fd48177248
-
SSDEEP
1536:FXEdWDidDMsRs/sbOyDsxbU3Q+HUWY9f5YJ+/W5P:F0iX/AyS3HHi9f5YJ+yP
-