5806a9ff0ee5ef23fdb2d7cb9f12c3c0ab4b69b77eedf3aef2387672f8cce129

General

Target
ekstre.exe
Size 704KB
Sample240214-qb4taace55
SHA256 5806a9ff0ee5ef23fdb2d7cb9f12c3c0ab4b69b77eedf3aef2387672f8cce129
MD5 7817f076ff826896eea5d88826f1e0bf
SHA1 0706b2ecec41fe1af96790fe82d0ea746134da2a
SHA512 8463f80871e07d3fe2232c0f4c17ef8b4752073bf718d92f2c711ea9cc9ab93f352234a89530628712cf796d1a2ec3fd79fa95b681458c04b6646ff9bb8a0b75
SSDEEP 12288:9cgybdNrgTB1myD5W3swba2cQxifyvYMaQyLi6R/LohEdIxL33vfy:9Sbd0PgDcYiqvYML3eU33Hy
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

persistence

Malware Config

Targets

- Target
  ekstre.exe
- Size 704KB
- SHA256 5806a9ff0ee5ef23fdb2d7cb9f12c3c0ab4b69b77eedf3aef2387672f8cce129
- MD5 7817f076ff826896eea5d88826f1e0bf
- SHA1 0706b2ecec41fe1af96790fe82d0ea746134da2a
- SHA512 8463f80871e07d3fe2232c0f4c17ef8b4752073bf718d92f2c711ea9cc9ab93f352234a89530628712cf796d1a2ec3fd79fa95b681458c04b6646ff9bb8a0b75
- SSDEEP 12288:9cgybdNrgTB1myD5W3swba2cQxifyvYMaQyLi6R/LohEdIxL33vfy:9Sbd0PgDcYiqvYML3eU33Hy
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 c4c6fe032f3cd8b31528d7b99661f85ee22cb78746aee98ec568431d4f5043f7
- MD5 b55f7f1b17c39018910c23108f929082
- SHA1 1601f1cc0d0d6bcf35799b7cd15550cd01556172
- SHA512 d652f2b09396ef7b9181996c4700b25840ceaa6c1c10080a55ce3db4c25d8d85f00a21e747f9d14a3374be4cdd4ea829a18d7de9b27b13b5e304447f3e9268fa
- SSDEEP 96:L7fhfKaGgchPzxK6bq+pKX6D8ZLidGgmkN538:RbGgGPzxeX6D8ZyGgmkN
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  Nonmental216/Midrange/avlstyrenes/Malasapsap/Dagenes.Ful
- Size 42KB
- SHA256 4dd97bef5427d351886f28613e7bf046849f21c3b3f22b66a397e217594483e4
- MD5 2fff737d32cd6ae12fd9f0f6eff695cc
- SHA1 93006508926aedcc953721c6e32e5c3ef5518030
- SHA512 53358f44ebce1ed85ef4fd20b28f569c7b3932daa75b56a58a379ebe7d9b962052c9747c4390908ea80a0d58165b3c43c7419ebbea0717744541aea3e13b058b
- SSDEEP 768:NlpGhu+LjBww8gFG/7q3ybqzWmbE/ItPkorejZgMiHYbuBT4hQ9D7uU+M10yp:N/PTgQ/W3ybiE/wMoWiHQuB843uUdrp
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6