Overview
overview
7Static
static
3dc8a4459e8...a1.exe
windows7-x64
7dc8a4459e8...a1.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$R0.dll
windows7-x64
6$R0.dll
windows10-2004-x64
6$R2/NSIS.L...6_.exe
windows7-x64
1$R2/NSIS.L...6_.exe
windows10-2004-x64
1uninstall.exe
windows7-x64
1uninstall.exe
windows10-2004-x64
1General
-
Target
dc8a4459e85921933103422b753283a1
-
Size
778KB
-
Sample
240321-y8frqabb9v
-
MD5
dc8a4459e85921933103422b753283a1
-
SHA1
f132a1648989d84a3b94c18635d028cc7611c99b
-
SHA256
088bb68fbf4041fb6791391b3341f072d4d80d09aee987476a0b2946f814b5bf
-
SHA512
0fe822e82e368c5ab92e49f6b0d823989438920b10527ec784126954b2666c62241b5e265d381bb839c0743767be84381acd2e875d3af8d36aa99f0a83a55ee8
-
SSDEEP
12288:5f9zqFHqwrDA/7wq17XAbaXwNDB2ZZsm9XEctglDqfKtz:5f9uFHqyDAjtZX0BmioglDxtz
Static task
static1
Behavioral task
behavioral1
Sample
dc8a4459e85921933103422b753283a1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dc8a4459e85921933103422b753283a1.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$R0.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$R0.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$R2/NSIS.Library.RegTool.v2.$_6_.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$R2/NSIS.Library.RegTool.v2.$_6_.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
uninstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
uninstall.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
dc8a4459e85921933103422b753283a1
-
Size
778KB
-
MD5
dc8a4459e85921933103422b753283a1
-
SHA1
f132a1648989d84a3b94c18635d028cc7611c99b
-
SHA256
088bb68fbf4041fb6791391b3341f072d4d80d09aee987476a0b2946f814b5bf
-
SHA512
0fe822e82e368c5ab92e49f6b0d823989438920b10527ec784126954b2666c62241b5e265d381bb839c0743767be84381acd2e875d3af8d36aa99f0a83a55ee8
-
SSDEEP
12288:5f9zqFHqwrDA/7wq17XAbaXwNDB2ZZsm9XEctglDqfKtz:5f9uFHqyDAjtZX0BmioglDxtz
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
cce5450725a9429a1d3c7aa851d40e8d
-
SHA1
05722500e42757ac03f2558452a064b906e31937
-
SHA256
d850c786a68df9520a3ecf2a96f4f091c9bae71d3adbf7731e8c172533cb266d
-
SHA512
3ddb56429e097ecf942e8a5147ba4c4191c52b736df267934f0dca75ffa74faffee8911dda47c5d2542f91138abbcaf61be3e3d68b368631d6bc21e254b5c637
-
SSDEEP
384:kKlm7i+c3QW6ckPhyDEaLnD2bbBBIXwZ:xqi8BcyhEhLKbbTI
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
12KB
-
MD5
97a3e1ae70cd46ea73c659d0c3d69434
-
SHA1
035ba01a8dedf8c668d5e48fb55164f817c7ceb3
-
SHA256
fc64cebcce78f9c836b6dbe7768c63dee829f9b88cfbaed84a1c20ca8f97b236
-
SHA512
07c1ec599b85937028379c70a804e7bdffed77f6d5dae91c13de809c6043ced17a13e61361ab399db42443a272711f316895b0f83e21f17d3b6f2a93e28375f6
-
SSDEEP
384:zsh+3xUC6g1WnaE8ozJqC6bWVUH/PAZ1SQ:zsh+3xUCUllqC+WVUH/PAL
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
24a04541a0d2312e472f8236fd205ea8
-
SHA1
c47eeee6fc23590311f2860d80baa954386a8ce9
-
SHA256
74d7ac9e94305c3d30cfc19279ee73fa891bd5ae8800610dee391d1880825e19
-
SHA512
65e061d2776bc0db53ea8aa35fb50152818c74fa9735f1a5a370315c4dacaf2cb79374ec59174d86c2e87f5b0bb8662f8cee6ff97ae93261c9a9a05bd3cc1adf
-
SSDEEP
192:hOycJo/rJVCmIDNLU0dq5RD00lspbub765L://QQ0d0RD0USq/65
Score3/10 -
-
-
Target
$PLUGINSDIR/UserInfo.dll
-
Size
4KB
-
MD5
43f01045f0ea2fba6987be0c5acc4f09
-
SHA1
de970efa43539d7d2c5ddf41e741cef7819e86b6
-
SHA256
a535dcf35a0b8f89b32fa61f0f2e168de421f90f0ef4956132050cb0d8140ab2
-
SHA512
fb187cc74b213b8ef5903b52baccf44ec9d24ef6ce18c6a38309a07a1baee5434790057fa6a892ff07ec9f94c3bee2bd6f66fca39f0995087e7611db8cfbc236
Score3/10 -
-
-
Target
$R0
-
Size
1.6MB
-
MD5
d38544390edf7a3274971eb5f5a8c9af
-
SHA1
a6a919c90fee9725b0e4be34720c28887b2feeb8
-
SHA256
2d164ef821145227866fb7c600cfb9c9ef66415ad675cdd5a93f1e68940c4e4d
-
SHA512
fa182351873f97208451ebb81fa0ed3ccfb4f4e1ba32edb1c921e28dcaf5a9311972697a0e3de18d2c404f4d2904468f84a399e98bf365d255f9f57e2aaae647
-
SSDEEP
24576:E7H6gL9E7/kFiFv8Y4uzafQwuvRmlJPN/aJQICsrmNByf:E7POTUJPN/eTrmNA
-
-
-
Target
$R2/NSIS.Library.RegTool.v2.$_6_.exe
-
Size
4KB
-
MD5
cfa2b86f8b60f54913784dee36a88241
-
SHA1
24263658f0453be06d76f0971e97f6955e9c5d14
-
SHA256
c5a4bff78edf789d80b567e928625a8c9a38f7dc7d263b8006aecda623ac4b4c
-
SHA512
4795eec83287bf8c657c2b74512655e0cc1de10dd857efc0bd7cb2191c7345860309100d3f213737a920fe873f823a04a8d5446523b21095d776d7723c731c6b
-
SSDEEP
48:iEEn8nLwNkQRikmxH2tHAmjW+wuINvRfnxhCKZLcibO8QCLU8QCf2dBYvm4DOgwZ:0YqPwI12umRfnx8KpdV2d6+4DFH/6
Score1/10 -
-
-
Target
uninstall.exe
-
Size
63KB
-
MD5
b313ef8452431f098f826a72b4997d13
-
SHA1
c567bd19afaa827acbe1da21d4d2cb8945c7bda8
-
SHA256
e3a4ea6214b11ab4589944c755aa0bfaf2b9f1a950d50de048b571f158d23714
-
SHA512
37eeda3c6c8e0d1b61b7ad9b01e9dea9282b37ef559165a1496d5234570f30899024946987ac4943282c8534140898f73c752281f4e48052fd30f252c091907a
-
SSDEEP
1536:qNtY4MevGUUiT2M8GJHEp/rDtMm81exE1:qE4MmDOi6/rDt/Kex
Score1/10 -