Overview

overview

7

Static

static

7

LEAP Insta... 1.exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

LEAP.exe

windows11-21h2-x64

7

LICENSES.c...m.html

windows11-21h2-x64

6

d3dcompiler_47.dll

windows11-21h2-x64

3

ffmpeg.dll

windows11-21h2-x64

1

libEGL.dll

windows11-21h2-x64

1

libGLESv2.dll

windows11-21h2-x64

3

resources/...age.js

windows11-21h2-x64

3

resources/...ies.js

windows11-21h2-x64

3

resources/...ain.js

windows11-21h2-x64

3

resources/...at.vbs

windows11-21h2-x64

3

resources/...oad.js

windows11-21h2-x64

3

resources/elevate.exe

windows11-21h2-x64

1

resources/...url.py

windows11-21h2-x64

3

resources/...ey.dll

windows11-21h2-x64

1

resources/...ey.dll

windows11-21h2-x64

7

service/le...ce.exe

windows11-21h2-x64

1

service/nssm.exe

windows11-21h2-x64

1

service/run-leap.bat

windows11-21h2-x64

3

swiftshade...GL.dll

windows11-21h2-x64

1

swiftshade...v2.dll

windows11-21h2-x64

1

vk_swiftshader.dll

windows11-21h2-x64

3

vulkan-1.dll

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...ss.dll

windows11-21h2-x64

3

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

Uninstall LEAP.exe

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LEAP Installer-2.3.0 1.exe

  • Size

    77.6MB

  • Sample

    240527-n7fefsbh82

  • MD5

    a9d15f6cdd62f66be221e2cb3818c8b5

  • SHA1

    14ac5a3109bb2b10fd76fc3cd3aec48f429502f4

  • SHA256

    e522a381dec8f166ed5c1f5817b21ddc76518f73b1da5a94324959ae7c283ce4

  • SHA512

    ea1d17551f650e9fcafc18d506c3e4a2c622915ca957490987566c5b240f1e33ff4b34ba4ddd25e623baa90716aee5d0fd91ea28fc383b591731b933d7462a35

  • SSDEEP

    1572864:7HTRwV8hyp4W2cvsRqkPY/FRF8oKylX9RwnfkjDCGziLVkTekQWKJTJ:79wV8hyxlY3PY/LepylywzGVSeBJ

Score
7/10
discoveryexecutionpersistenceupx

Malware Config

Targets

    • Target

      LEAP Installer-2.3.0 1.exe

    • Size

      77.6MB

    • MD5

      a9d15f6cdd62f66be221e2cb3818c8b5

    • SHA1

      14ac5a3109bb2b10fd76fc3cd3aec48f429502f4

    • SHA256

      e522a381dec8f166ed5c1f5817b21ddc76518f73b1da5a94324959ae7c283ce4

    • SHA512

      ea1d17551f650e9fcafc18d506c3e4a2c622915ca957490987566c5b240f1e33ff4b34ba4ddd25e623baa90716aee5d0fd91ea28fc383b591731b933d7462a35

    • SSDEEP

      1572864:7HTRwV8hyp4W2cvsRqkPY/FRF8oKylX9RwnfkjDCGziLVkTekQWKJTJ:79wV8hyxlY3PY/LepylywzGVSeBJ

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    behavioral3

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      14KB

    • MD5

      adb29e6b186daa765dc750128649b63d

    • SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

    • SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    • SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

    • SSDEEP

      192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs

    Score
    3/10
    behavioral4

    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    behavioral5

    • Target

      LEAP.exe

    • Size

      104.7MB

    • MD5

      2dce21796448469c197f383d0d9622ae

    • SHA1

      4b33c8b801af1ee98ee5c1c470735734c961df5a

    • SHA256

      b81ceb8bc593977311384ed03ad194bf392b25c640e47656cb99b12f5e162b29

    • SHA512

      3d230747263459b9c0c9a6cb4dfadfd0bc4f47a002a483478af31815055bc05a8a27b2e1bdf8ee4c6dc28a6899f1f443b445757adc7eb2510a0f65fd97757312

    • SSDEEP

      1572864:UKqxYPeXS8KTM9GUvTkbVn/HEuLyywaom8Wbw9vIqprmCOj6hXGX5WAtF4Kalz9C:HCnCREuLyywaoZ9EOrGpvT6rw

    Score
    7/10

    • Loads dropped DLL

    behavioral6

    • Target

      LICENSES.chromium.html

    • Size

      4.5MB

    • MD5

      d4a79b5d46f0931b9eb7125fd40baff0

    • SHA1

      3a38fb263dde2251b9fe157b5fddec7acb07c53e

    • SHA256

      03f1d245e6a2facca9edbdaad108169e0765dd9101875bc2d123797994b9e80f

    • SHA512

      17cf94805f11d499ff12d8e42cb262ceecbeb265f56338e0837d291f6a7ed7f8135a025dbe99fdb2e2bb299f2267bed9365976ea51269aafd4c3220cffef9339

    • SSDEEP

      24576:thgBBmnLiLArZ62BrcrnKHq/kUkBAwi9QxruE:rYBmLAehN6KK+xV

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral7

    • Target

      d3dcompiler_47.dll

    • Size

      3.5MB

    • MD5

      2f2e363c9a9baa0a9626db374cc4e8a4

    • SHA1

      17f405e81e5fce4c5a02ca049f7bd48b31674c8f

    • SHA256

      2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

    • SHA512

      e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

    • SSDEEP

      49152:sXMoHAsisjBFjJMLhHELxJm8ZU8W/GBj5Z535TMpinAizxkl/cD11bqCG7jHbOkD:srZOb8W/G5hnAizxz7NZy9AG

    Score
    3/10
    behavioral8

    • Target

      ffmpeg.dll

    • Size

      2.5MB

    • MD5

      54f1cb94776e46864f987eaf0593fbb6

    • SHA1

      f3a9957e79ef290b31e600726b0eef771858b1bd

    • SHA256

      81cab2e7ff56c8a06421419a2dac9481b87d5e50ef6f89a40e9de2d28d4998f2

    • SHA512

      f5aacf89877ac29f4da3263cc7b37b5f25a3425762f96bad90a8389dc596ccef470292f548a1dfce891abd47f4df10d6f2a95fa2f1a4d3a59c2da2ed972c91cc

    • SSDEEP

      49152:DHX9HL2Iv1LDjOzm8H92kpGaWJlAtksQcUfn:TX9HLjdL/OzboAHWb6kDfn

    Score
    1/10
    behavioral9

    • Target

      libEGL.dll

    • Size

      358KB

    • MD5

      c83a0d55e9d4ba00a41c79a677c444f6

    • SHA1

      798b64c0326459c99278eae214cfc6159f1ab16b

    • SHA256

      9322a0e0d0c8a8be035d29e581de402284ffba4d980806596dedbec7be8a08ca

    • SHA512

      121d20db79975098fdec00d4299aac57c61b3ce4bbcfa45aac79243a46052851e91b466c5f4697db039f59b02e1be7ac2f90cf6dcdc4365d8038a1387ebdeba9

    • SSDEEP

      6144:ZesPGoRqGG68Zl1cCmYku/1haDuE4mbd2W8GgtSUIKrcO6+fBgCJNz/WuLF0hWA1:csPGoVfgEimbMTGgtD6+fBHKuLF0hh

    Score
    1/10
    behavioral10

    • Target

      libGLESv2.dll

    • Size

      6.3MB

    • MD5

      ecabe9e35db94666c73b78408aaacc33

    • SHA1

      29368f59ad5854d775f81f10987c5813248db413

    • SHA256

      8b9571808714bcd01c3156c7cd254fad104797cbe1ff6c823677b713dcc352b2

    • SHA512

      1a39cd4fb3fdca40117f62031804e48da2f7ec63fe1e6377902b5a8d5c76b3d40b155d028481801ec4338332a486c7999ee685115d5fb4546c2ddd47b0693971

    • SSDEEP

      98304:qY2sSNCHdB7mvvXarXEOE/HxyPX2+et5/1+wu2Ed0:NON2+ar05/Rzrv18

    Score
    3/10
    behavioral11

    • Target

      resources/app.asar.unpacked/node_modules/active-win/Package.swift

    • Size

      145B

    • MD5

      ae9c8696b3d57d433f653fb6b6ab63ff

    • SHA1

      51e32dae892708d63060470a7901102f72f9a7ec

    • SHA256

      0cf5faf10bcd4780209defd4ab3d7189f2754be269d262e1900e336ef99e59cc

    • SHA512

      4e992c6b2bc8b6d1cc0d1f55fb9f6145c9038591aac40d51b7345e8e6882a23829ac825495a6f958f46d1659553872c3e608267e81508fde7983482c902985a3

    Score
    3/10
    execution
    behavioral12

    • Target

      resources/app.asar.unpacked/node_modules/active-win/Sources/active-win/Utilities.swift

    • Size

      652B

    • MD5

      b8fb6d4197dcc0b7579e6eeb9ea35cf5

    • SHA1

      68bf22b63fb19806de9d234690d8d028f7028ec7

    • SHA256

      94637f9cdce493fdb8384550ec28fe43cdd44016ba826ff8e880595a33ec499b

    • SHA512

      8da9985cd0d11d597ff645712e9866d91105a385c07799d94c0cf841c99111d84c92031179fe7690de04effaafac53fc1a7fed066d762c01db773bd7a746e84d

    Score
    3/10
    execution
    behavioral13

    • Target

      resources/app.asar.unpacked/node_modules/active-win/Sources/active-win/main.swift

    • Size

      3KB

    • MD5

      043447683d1ba50bc29960e6e8da7125

    • SHA1

      39598e4a6f4bf3cc382281603131bbfc902d6181

    • SHA256

      a06d85ba8a70a08d33b26f35fdd1bc04fd1c9008f7cc6e43ba06b9bd00762f47

    • SHA512

      8ca464a7c7371fb294b26b807c7b8dec21c3d975e068d4b7148031655e2884b8c35e9185c154a2701ae887765601eeb740f107bab66ee88f870e8ddd42808366

    Score
    3/10
    execution
    behavioral14

    • Target

      resources/assets/vbsFile/launch_bat.vbs

    • Size

      157B

    • MD5

      5cb2628df648658fa72ee83021c5a08c

    • SHA1

      28980ad39f1f0e0f5b25fec71cee383549a66b3c

    • SHA256

      22fe05773804d2479a7b79f0c32d3f7669cc8d95e17797b13905f8ba3a23413b

    • SHA512

      529216ae5e00b22d2c56868a32a20841f420014c0d9b5dd82793efb659777549a51f92e53c2e017631c676902316b2f20c77d2807bdb733e7debb8de50173059

    Score
    3/10
    behavioral15

    • Target

      resources/assets/webview/preload.js

    • Size

      2KB

    • MD5

      6004ad8d926696ad68157321c4bf88ff

    • SHA1

      3c24daa39285a005f1d12edfd8e1bda1093d6271

    • SHA256

      62487c4ecb1d2f0aaeab3f25ac9464be18d3dd1e7da4b1ce6592bc1e214391a6

    • SHA512

      da3e182f7ed094524a162a24f4fc3d48393d5c0092411c6118d9cef338bb9799cd13172e9a2ff55ecd1b57026d77804c7b37cd59054edc8b944ca43ff2193022

    Score
    3/10
    execution
    behavioral16

    • Target

      resources/elevate.exe

    • Size

      121KB

    • MD5

      ac2774589ce892224e4551816ed56ccf

    • SHA1

      884a7c191f9e956881633a9fd5ae0ce3b1bbc349

    • SHA256

      8fa9d3a3035c8936119c7b204508adad5d5e566299d43912ede1427481d67a49

    • SHA512

      08e73bd7fae276301f499a11d1caaf062b234c3e88288cb0f760b2c7fd6539231a099a64b2a4c19d627a8435e24682e8bdafbac7ef42fb5ff259d55113b75236

    • SSDEEP

      3072:VnbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlNVrY1Vrol:1PrwRhte1XsE1l08l

    Score
    1/10
    behavioral17

    • Target

      resources/platform/nix/get_url.py

    • Size

      3KB

    • MD5

      db395ab0c80b54e63b2da4571a18ee14

    • SHA1

      1df52ce562fd2af5151bb447f91a18e85bdfb10c

    • SHA256

      23586c3b1cc995f02b903cb558536a55182f182f1ae88904748fac882d452444

    • SHA512

      86afe9c8773ae43599630ea9ed77d117ee4df306bf4dcf9d7eee3f15f0a47c84f0b7318d6a4128610b19b8fd23ce600c98406cca253de7b197a42a7422ba6ab7

    Score
    3/10
    behavioral18

    • Target

      resources/platform/win/ia32/AutoHotkey.dll

    • Size

      1.2MB

    • MD5

      95ab7620bf0c5e85e64c53afdcf074f4

    • SHA1

      4e0cc42ff634a4462abd3b7a0384e0245cc2f8a4

    • SHA256

      338b46b94dccedb04aad39d40bce74052d26733c770af3a0bec9a6b08822263a

    • SHA512

      34b8cd54b397a7f6a73045b860b0157442bd60495bf18879febe9d0802d2777e8e8c3f43fc519612115d2911d402de617010eadf2df0b06a76cc2ab9830ec279

    • SSDEEP

      24576:RJb97cdBkQcHDWDuwzcZd6uc6tRYNyGxuoUGVcvN0R+G:nm4dCfceCtayGc50cvN0RN

    Score
    1/10
    behavioral19

    • Target

      resources/platform/win/x64/AutoHotkey.dll

    • Size

      1.4MB

    • MD5

      e5b190d388b0d21fc5fdf7d7a88a55af

    • SHA1

      de53f00d2974dadcb3b611c5f99b0a8b80298045

    • SHA256

      d3f2e9d6a5bddc1ceeb49d9c6ee80ee2d8ac25ca1dcc5e58f2268dd0b6d97518

    • SHA512

      7decdc024723a2f5155633e6f6ea6fcc9d8289a7c7c5712962926f64a85d7c81ac98b4e5d1c8292a39ebe9af6567be75a1dcdfd28edfa2f3472f7cf7bdfe1a86

    • SSDEEP

      24576:pL35i4FuW+gbdV1BvRyzWvcmr3QIRXjOwH8CmOuqAQKL46W1zxk:popW+Udhv8yvBrjNjO3OuD39W1

    Score
    7/10
    persistence
    behavioral20

    • Target

      service/leap-service.exe

    • Size

      33.5MB

    • MD5

      7fda75c55277f5806c798f5573254294

    • SHA1

      5da2a01ead392a95fe2b65ee093c6d201d7f16ac

    • SHA256

      3db564484aede8965a108b23ae288d7a7a6e2f5a2fc5f55d470cc1427b21b8d9

    • SHA512

      7aff362c82dd4613df4976419a573221f686227cd71b52104a157ab8ebbd544bb74e03f7ec287914976560d45dcf9a80962adf5507b37a709a04241656de3832

    • SSDEEP

      393216:Em+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDfUWsNWcxjQK:Em+GCl3YNWclz

    Score
    1/10
    behavioral21

    • Target

      service/nssm.exe

    • Size

      304KB

    • MD5

      9c7dd71efafeadcb6eb9c7c055939004

    • SHA1

      775f463daf14c7a0b64030a915595e554c29a002

    • SHA256

      9a642106344df30eea9558ec8e346fb6fcce4cb2e9fb1f4795478ecd298379df

    • SHA512

      72e8e3c8e45fb598bccbf1bfcf94ff246969e1fa5b8c571559de4c26bf3b8ff5f449034c0fe039c2ef7408448b8cb49d855be899e1a0af452fb5159a12d5505d

    • SSDEEP

      6144:rBULviqYnI3QA7JTXRnZSHL2GZbkG/TZgLgst2rDkXNBtJd:TqBlG/TZgUsxXNB5

    Score
    1/10
    behavioral22

    • Target

      service/run-leap.bat

    • Size

      201B

    • MD5

      1194f2521a17aa9a96965269e7c2183a

    • SHA1

      43ec7ebff035497f37dca25a87503c5e44ed7dcd

    • SHA256

      ee9740b24ff32a7babff8d03519da34a7d294dc39895de661281aef37832dd4c

    • SHA512

      3122f7bbe1e31e2308ab2bd38ea2cffe8c846dffe27c93f970a92d1c343a48ab58d799c5d10567eaa31ff27b27b384907f7551c8d9cf6fffbbd8dd7220eebda4

    Score
    3/10
    behavioral23

    • Target

      swiftshader/libEGL.dll

    • Size

      379KB

    • MD5

      2b35e2670411b0e46569c702723bf455

    • SHA1

      23059a9001e1bc5d4ecd2a2995a80bce01dfc217

    • SHA256

      74f934004b27fa48154876bba8710e301c75aa3d9125e6180c4486b139159801

    • SHA512

      822821a14f48d85a6c265530fa93c46fc781149e050576f031a6f27d0288f24f7f9b341fd7fe9179b1b32627f91b7db44301aefb73e51dfdf778b10a9d1242f7

    • SSDEEP

      6144:cayLoJ01tUL3Q3LjSPu5FUuJiHMPyfV2Wf5gqIhCTQVBGXaZDseVMgfu1aNwqNxP:f01tSInGV26iPCTQVCaLfu1aNwGp

    Score
    1/10
    behavioral24

    • Target

      swiftshader/libGLESv2.dll

    • Size

      2.7MB

    • MD5

      6a5704a246535ee666b1cf87e10eb53c

    • SHA1

      c9d74edd160314b780a76b5ebfda3c0cfe2e5606

    • SHA256

      f3ed98d9c3e915b6c55bcb9a17e162134ce9897c5246110bc2955cac5851fe2a

    • SHA512

      e8b2a39bb50a6117738fc593cdb07f8b4a87bc6465fd61de82cd33156ebdf5d714d389b2e74f0d284801e0ac09704a21b46a005ded8ab8ad9b9291bbbb5a43be

    • SSDEEP

      49152:rvRd9FO9MwdFA/w1s+Glqa/KxB2CgfFK1GokWFBB4PD6xABXGfSqnVjxSEhnR3qq:jRd/CcMxgUrXr1j12eJQo

    Score
    1/10
    behavioral25

    • Target

      vk_swiftshader.dll

    • Size

      3.7MB

    • MD5

      8cafc6a2d708c9f4d3009d7e135a641c

    • SHA1

      e2a4aaf005ffce737246a2cdac38322664ae6088

    • SHA256

      e481daf4a92f3b1e73ba4cd85546d561a21c214ef74bfedf9c8f87319857a83e

    • SHA512

      1c9f365eb5ae2b78dec93f567c32c420e9a5706b82d51b1129cd899959404a53ca34c1fb70cc041ebd191e5ca5479b21e1505b70dbe6fc203c79fa8b930a4a0d

    • SSDEEP

      49152:NkCQYIV3ZtjgctGIW0yPC5X/23J2/8JrtVkjY0eGrtiOjhfwqeAztw3GjaWBeRnt:bBrPaOBtB+rtiOjhtMWjaWkRKNdh2

    Score
    3/10
    behavioral26

    • Target

      vulkan-1.dll

    • Size

      624KB

    • MD5

      7949e1e84aea85b9e34b68b607a9467e

    • SHA1

      b4dbc6a149c3482b98f246b625917e68b21a7a21

    • SHA256

      3e04a5ad696827a41891bb61befd845004a0d0816832a69f070716c16e621803

    • SHA512

      2c573f47ce99a2bb7396ca954aa066bd641f879c0aa6a78f700b17acdfad6c6e5fddcd50371fdd76571fc47683600e6a7f29559df59b21af831706d1a8369bcf

    • SSDEEP

      12288:KbHuIeVEXjDNOWx4ooMWRE72YcXVgnvVW+2c+xUpmuHrwYuulnRG9:8HuIIcc9RvAdW+D+up5u

    Score
    3/10
    behavioral27

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      466179e1c8ee8a1ff5e4427dbb6c4a01

    • SHA1

      eb607467009074278e4bd50c7eab400e95ae48f7

    • SHA256

      1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

    • SHA512

      7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

    • SSDEEP

      192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc

    Score
    3/10
    behavioral28

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10
    behavioral29

    • Target

      $PLUGINSDIR/nsProcess.dll

    • Size

      4KB

    • MD5

      f0438a894f3a7e01a4aae8d1b5dd0289

    • SHA1

      b058e3fcfb7b550041da16bf10d8837024c38bf6

    • SHA256

      30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

    • SHA512

      f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

    • SSDEEP

      48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj

    Score
    3/10
    behavioral30

    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      424KB

    • MD5

      80e44ce4895304c6a3a831310fbf8cd0

    • SHA1

      36bd49ae21c460be5753a904b4501f1abca53508

    • SHA256

      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    • SHA512

      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

    • SSDEEP

      6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck

    Score
    3/10
    behavioral31

    • Target

      Uninstall LEAP.exe

    • Size

      260KB

    • MD5

      0de9f023f9e918f80e82739c61a6cce1

    • SHA1

      6efd4aebda39a7a1f3bbcc5773639af7bbcc2cad

    • SHA256

      4257203c1ab77a9737c3a730f2c761f06b545a8973d7b12e74d7471cbf62fd5f

    • SHA512

      a994375c575382e7d973ae9891bbb57f142863ae5c81ca78e91d8dc2c181d6122dc67134b1f687bf64bdabae6adde83f149c708d216ce91c1754b3597e2dc73e

    • SSDEEP

      6144:Q740IbyE5s2C0By5bUKYWJ6j4Pdk2Ua8T2t0EyL+tar4H:KXivB6blKj4F7CLRKEg

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discovery
Score
7/10

behavioral2

Score
3/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

Score
7/10

behavioral7

Score
6/10

behavioral8

Score
3/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

Score
3/10

behavioral16

execution
Score
3/10

behavioral17

Score
1/10

behavioral18

Score
3/10

behavioral19

Score
1/10

behavioral20

persistence
Score
7/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
3/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

Score
7/10