Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

ScreenStyl...2).exe

windows10-2004-x64

7

$PLUGINSDI....1.exe

windows10-2004-x64

4

$PLUGINSDI...er.dll

windows10-2004-x64

1

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PROGRAMFI...ck.dll

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...x.html

windows10-2004-x64

1

$PROGRAMFI...s.html

windows10-2004-x64

1

$PROGRAMFI...s.html

windows10-2004-x64

1

$PROGRAMFI...Ds.url

windows10-2004-x64

1

$PROGRAMFI...se.rtf

windows10-2004-x64

1

$PROGRAMFI...om.url

windows10-2004-x64

3

$PROGRAMFI...ck.dll

windows10-2004-x64

1

$PROGRAMFI...ck.exe

windows10-2004-x64

1

$PROGRAMFI...ug.exe

windows10-2004-x64

1

$PROGRAMFI...er.exe

windows10-2004-x64

1

$PROGRAMFI...us.dll

windows10-2004-x64

3

Uninstall ...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ScreenStyler-Setup-0.2.3-preview+win (2).exe

  • Size

    117.9MB

  • Sample

    240705-yylvzsxcnc

  • MD5

    ef15ab96b59c0839f8697d3d35cd1ab2

  • SHA1

    991d06adfeb223d6a34239d1d3c1ce1e3cf59112

  • SHA256

    6b8785d7d3dc581d1cfa19fbcd2b9fd11a914be94a85692f5c78b3984a1ce027

  • SHA512

    75461d9af7a9e21a4237ff0681755c6004eb617e0d1a61c41cfdb5cfded2e4dfed295a1a886e278a6cd28a404509523de664301121cd06059055a616c8f2cdb7

  • SSDEEP

    3145728:GncogKWURfUNRX4zHAkoTO6nDtQw87OZt9hxDe1B:GnDrU7Xa8TO6DWw8e9Py1B

Score
7/10

Malware Config

Targets

    • Target

      ScreenStyler-Setup-0.2.3-preview+win (2).exe

    • Size

      117.9MB

    • MD5

      ef15ab96b59c0839f8697d3d35cd1ab2

    • SHA1

      991d06adfeb223d6a34239d1d3c1ce1e3cf59112

    • SHA256

      6b8785d7d3dc581d1cfa19fbcd2b9fd11a914be94a85692f5c78b3984a1ce027

    • SHA512

      75461d9af7a9e21a4237ff0681755c6004eb617e0d1a61c41cfdb5cfded2e4dfed295a1a886e278a6cd28a404509523de664301121cd06059055a616c8f2cdb7

    • SSDEEP

      3145728:GncogKWURfUNRX4zHAkoTO6nDtQw87OZt9hxDe1B:GnDrU7Xa8TO6DWw8e9Py1B

    Score
    7/10

    • Loads dropped DLL

    behavioral1

    • Target

      $PLUGINSDIR/Rainmeter-4.3.1.exe

    • Size

      2.4MB

    • MD5

      787c361bbe2d62bd1afeb0144672a2a0

    • SHA1

      7cbcfd5dfe7e1910ecf728f3af32c0cd47f0b251

    • SHA256

      eb8f0390f4919c5a2a16b0ff9d5c181ded835acbec12e60984bc9bbc3a1f2ef9

    • SHA512

      495434ebda6673a6206453780a6cda2460ba80aacf7e391ad802e6d1b7d19e1f8c6da6fcf45d828b15b96147210fee3e978f531cd0c23a85a8c33c64d2926415

    • SSDEEP

      49152:At/hP+Fu251/1hk4TfEUOVn1ebbX4xGOjYZdAr:At/hu351/1ht8DR1eXX4xGHLAr

    Score
    4/10
    behavioral2

    • Target

      $PLUGINSDIR/SpiderBanner.dll

    • Size

      9KB

    • MD5

      17309e33b596ba3a5693b4d3e85cf8d7

    • SHA1

      7d361836cf53df42021c7f2b148aec9458818c01

    • SHA256

      996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

    • SHA512

      1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

    • SSDEEP

      192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY

    Score
    1/10
    behavioral3

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    behavioral5

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      14KB

    • MD5

      adb29e6b186daa765dc750128649b63d

    • SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

    • SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    • SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

    • SSDEEP

      192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs

    Score
    3/10
    behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      466179e1c8ee8a1ff5e4427dbb6c4a01

    • SHA1

      eb607467009074278e4bd50c7eab400e95ae48f7

    • SHA256

      1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

    • SHA512

      7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

    • SSDEEP

      192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc

    Score
    3/10
    behavioral7

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10
    behavioral8

    • Target

      $PLUGINSDIR/nsProcess.dll

    • Size

      4KB

    • MD5

      f0438a894f3a7e01a4aae8d1b5dd0289

    • SHA1

      b058e3fcfb7b550041da16bf10d8837024c38bf6

    • SHA256

      30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

    • SHA512

      f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

    • SSDEEP

      48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj

    Score
    3/10
    behavioral9

    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      424KB

    • MD5

      80e44ce4895304c6a3a831310fbf8cd0

    • SHA1

      36bd49ae21c460be5753a904b4501f1abca53508

    • SHA256

      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    • SHA512

      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

    • SSDEEP

      6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck

    Score
    3/10
    behavioral10

    • Target

      $PROGRAMFILES/RocketDock/Docklets/RocketClock/RocketClock.dll

    • Size

      104KB

    • MD5

      b16f204c60bf89c8cf87de4402aa4cae

    • SHA1

      25f96fe711f3191b1e6e4c118805c279048227f9

    • SHA256

      ed736c6039de8fca833cede2b41474882dff2647deca3f12903bacc760864bef

    • SHA512

      4d2841538a6b04bcc642e4766954436ae022c405d40549120e56405e7eef97372bff4d4994036327f1d41a88b816652f3b465daa4c0e8630dd9ea5c9300c03ef

    • SSDEEP

      1536:387L3CzyGKUo5PpJMgI0QtImNxQkJ/RENLiT5UZr1:3a3COzG0dyv2NWT5Uh1

    Score
    1/10
    behavioral11

    • Target

      $PROGRAMFILES/RocketDock/Help/Chinese/index.html

    • Size

      147KB

    • MD5

      3a272603059b7c3628d8129e46c238a8

    • SHA1

      72e174d1d0f072cee7d2148f5805e1e8546be33c

    • SHA256

      53814db4ae3752ac7b968302dcf0f25c0c96cf6a932f6c479c33323ef2a9b61e

    • SHA512

      4ffadbf9d46efc483c60de7b6b43283515f1ea2faed38c5c5d9ef62893551fa649565170ab15e1862ed67d395546e0bf66d657bbad5d778f6161f7893290816d

    • SSDEEP

      1536:CSiI+J/1m1WYq770bKUpu4A41wsZuTKutYxeNSX6bY1QSogmQBTEcMpSNDUZokP5:D+aTcrdNsa8Z49

    Score
    1/10
    behavioral12

    • Target

      $PROGRAMFILES/RocketDock/Help/Czech/index.html

    • Size

      17KB

    • MD5

      ba1c4133df2669aaf50fdb712ba64686

    • SHA1

      cb40ff9fbabda71a166d05c432ffebdb341fdd4e

    • SHA256

      d9be4e62d1defcdb40ccb5835dfb1cdf9c84163b52a0aa7dcf60b6ef7b785ed8

    • SHA512

      8126f4a64c0c6e3970202cb949487fcff964a6ed68fe1d6546630a27aa1089cd8cd1b72fb30535f28df4a608f90b452916e022cb2c6157fd3afd097a4822eb65

    • SSDEEP

      384:W+JZPgn2qRM1fS8aZDbxKvz+Zn/Yn/8KAggAbH:WUYMxS8a9xKvz+Zn/Y//AggAbH

    Score
    1/10
    behavioral13

    • Target

      $PROGRAMFILES/RocketDock/Help/English/index.html

    • Size

      19KB

    • MD5

      0a34e887a5267a5bb9cc292019ebaa26

    • SHA1

      d529daebb885fe6e25ff308614195a852113c511

    • SHA256

      50c577ce896313f1a8b512943cb6e391798c33b0a0f0d206fd81adec81eb8e69

    • SHA512

      c5b5b1bf760df35ac9e4664fc003d35844d6aa07aed336743411e7982660c62d198752e7696256d63c3b9e6ecfa9b03b5e2851fb347d7e82b0e6895f3a8842fd

    • SSDEEP

      384:983NG/E+qFdspa2ggvHXN/e7IvBrwN8dh1jFqcbYv8BBUE:983s/4Wa2ZvHXN/e7IvBrjdj0cbYEBUE

    Score
    1/10
    behavioral14

    • Target

      $PROGRAMFILES/RocketDock/Help/French/index.html

    • Size

      28KB

    • MD5

      0b8e923c6fb43e7ce043c95d72f7f2d8

    • SHA1

      70e41a41949c47643641705656975aa77a418bd0

    • SHA256

      59444c73aed7c5a5c83e9c784a1ef7af7bb31d1661e8b742f69b93f52a467acd

    • SHA512

      6b0122487479377428f40d1018d955d087c17840fe08d21b6e925e703c60dfc27bbdd446bb021e7fbea591bdb631f078071f225988fe58961522e345cd2c8957

    • SSDEEP

      768:FO39zKYv42cvxuOJjKxDMy7Ls+w8sJ8zjhhFz:s39HZExBjKSy/nPFz

    Score
    1/10
    behavioral15

    • Target

      $PROGRAMFILES/RocketDock/Help/German/index.html

    • Size

      23KB

    • MD5

      c74865449c952377532bc1afad5807a0

    • SHA1

      6d8980e5eda855129c5630a4648b0b8023337018

    • SHA256

      46b8472d8ef58ba39e5ef55447af3575946dadc383dc888d4961e21e6d46f652

    • SHA512

      6229c3eb628d297519632750a0a51f70ccfffc63b4e865b6ccf2b8500d24aa9a8de064ff8d21d04dd3657f69891d2d849cd52c20329257ad543e9dd68e247641

    • SSDEEP

      384:NPZ9ALRorYuehhG4P9zMpOxHHOpCPtxuCOUbY9L5o30pdCLEG+kAVkF65P:NP8LRaYuehhG4P9zMYxHHOpC1xdY9Fo8

    Score
    1/10
    behavioral16

    • Target

      $PROGRAMFILES/RocketDock/Help/Korean/index.html

    • Size

      17KB

    • MD5

      5b7590ef118d55e2c59025cd64985348

    • SHA1

      30d1d7097877633efcafbf01499bb34cdfedabb8

    • SHA256

      1adfe78190fba8663c3b777108d790ae2c1d5b075807d3bbfba5315507826126

    • SHA512

      de9a70fac4c78aeb090d2b202ad1ca33d02792060fb3944f6c47215cd337312b73dcf9cecd0907ae2a2daeee8a135e66ef67f09f2f38f8cf306a0ec117ccdf9e

    • SSDEEP

      384:rEp/dYhLdcRZ7gORvlBbgXretTU7bR/kiFreQTQ:QplIcRZ7gORvUaubR/DqQTQ

    Score
    1/10
    behavioral17

    • Target

      $PROGRAMFILES/RocketDock/Help/Polish/index.html

    • Size

      19KB

    • MD5

      659997706609d270b2f3c3a3f0e51dfb

    • SHA1

      3443e43c46bb15f63e84fdead28cc0b5beb9caea

    • SHA256

      761415ea6df61c4891ebfbbbb73f24747c64f5e6c925353606777e7480056c51

    • SHA512

      71382524abab75714ec2d796c2f4f6a4b47df84bae60736f22ea1c9097c92d274d7359db24c41de885900226a8018977b617b9136ca05d8bd956acac6f900f93

    • SSDEEP

      384:WZmhyBJoaZhmoullDfd6gMkeZRn7v+n9qC3O+8EmsJzedphstA:emhSQpDfd6giZR7vS9qXqzed3sy

    Score
    1/10
    behavioral18

    • Target

      $PROGRAMFILES/RocketDock/Help/Spanish/index.html

    • Size

      21KB

    • MD5

      346d97968f617304fbc64c6bc95ab547

    • SHA1

      95a1e3678ce0db7edfbe9abb1c669d33f3f0d5cb

    • SHA256

      4a10bbdd10771fbb770d3ff8f9ae113210cb7ed870f7c13581b282566f04dfe2

    • SHA512

      0481cf2458c466eebbd82d977481679365de9b164edb131f426f5bd666c7293cab0d66d1d142b5bdef08205413dac0ad669840b3643fee9d977ea8d8690cf0d4

    • SSDEEP

      384:YiakSdjA5zAx18LQpQbr3t9rO8jF+zEkvfggYjWbr9hhkBHBuftpIJ/BD80:eMRkSbr3/68jF+zEkvfggYjWviNcftpc

    Score
    1/10
    behavioral19

    • Target

      $PROGRAMFILES/RocketDock/Help/TraditionalChinese/index.html

    • Size

      15KB

    • MD5

      a24aed4506f56afa204b7c7836b59fe7

    • SHA1

      c49a942038b714407e5ebdd35499e94d73426706

    • SHA256

      def32f74d1690eefced9e95b524832a7cf3e7ba1dd5e604b26ffb9fc300f7340

    • SHA512

      cdb74fe6ab853f3f352497f582b82c033d1cfd575f214bce2a8d6d585571ab9c64a3077193dcf6f901ef7dd7c4ee4e353faadde849e18405ad7beef04c939fc8

    • SSDEEP

      384:VZy3Lt3xne6dGNZAo0lAnOBER8x75V/iYUsIS:Lo3xjokQGER8x75NU6

    Score
    1/10
    behavioral20

    • Target

      $PROGRAMFILES/RocketDock/Help/Turkish/index.html

    • Size

      54KB

    • MD5

      cdacd9c43bf86487b5003e7fdba4d930

    • SHA1

      eadcb1bb329828600355c51d6913463d7cdbc716

    • SHA256

      453632db71ea5f0360788392f55290c8454e9653210b8347fb6d712935261a26

    • SHA512

      3c1955230993b48c9963942fdb5f4823f6c7c9329b8b83c83fa5679084dcdafacf03defe19ffededebd99e76adbdb71695587fee26366209b111a4103fe28266

    • SSDEEP

      768:Z5e+G5L5OxwZfcO3UypzkBuSVcDHhIoyxLg/glHeDW:ZE+GBkGUypIMSVcDHyoyxLg/gx0W

    Score
    1/10
    behavioral21

    • Target

      $PROGRAMFILES/RocketDock/Help/shared/languages.html

    • Size

      1KB

    • MD5

      50566311e108f3821a790027c31da635

    • SHA1

      db4269306ea4850924a6e3694b53a56edcf9ba3a

    • SHA256

      258c5a37103bed4c4e0a4da70477283d53cead55d66c5cdf500bc8e028427309

    • SHA512

      2c555f5ef932c3a1a4da86835f6e4c2928c277190e560685c6453aa137e3efbff22f743fe913ac2f5c973a94b2d4835473a5c6b7e3679de1247784f32bdafd07

    Score
    1/10
    behavioral22

    • Target

      $PROGRAMFILES/RocketDock/Languages/Instructions.html

    • Size

      316B

    • MD5

      a42bdfdda261b8e16a2bcbf2a4672df9

    • SHA1

      c7b503ab0d2f316d4aaa2d28caba47878effc9ff

    • SHA256

      40147d171b752093c84488a171ad3816ced22f2e313cbf712df9d55b83c9b8da

    • SHA512

      0d8e3ce7817b43d7fc416372ccb5282d7a0632db81dee24202b8e3549d927d28cac87f198a625ce28119a4a3ae474e203d58af8146c8a23d45bb9c9704b2deb5

    Score
    1/10
    behavioral23

    • Target

      $PROGRAMFILES/RocketDock/Languages/Language IDs.URL

    • Size

      129B

    • MD5

      15b93df7e15dc432044c50550d675b25

    • SHA1

      78ff39b407d18918773a357df9cca56622ced041

    • SHA256

      81718d6cd9a1e0d49ce1266be1b17cd67a754fd28cbb920dccdef4889ae41f06

    • SHA512

      43c6e1cffbfd4136d50f3c11445c475baedcd9fb3c3d010acb779b5b77376304ebfaa61b918e550c39c11b65952a9f5938669d22cfac3b5090b59650c49a37c5

    Score
    1/10
    behavioral24

    • Target

      $PROGRAMFILES/RocketDock/License.rtf

    • Size

      19KB

    • MD5

      0bca7c097c14d3fd23c9d2d446dca8a2

    • SHA1

      501518dcabbd16ecced6892560fd7d71e8eefac8

    • SHA256

      b3178c7ed2826a1abb669e34a0cc18bf94ce922d03ff73f2e61739c69ccfd53c

    • SHA512

      6591fb0646de7c48862efe837d9be257bd4b8692f31e3426b30eae763a1d3f5b932dfdbdd7b8b78d0ec7d65f60057f10a5a068c867e29845575603286697904a

    • SSDEEP

      384:xmNj+3sPuzBmkPvfhZpdwVJssxl4ZbTxz9gGY/2:MNCwKfhZ7aAZv19Tt

    Score
    1/10
    behavioral25

    • Target

      $PROGRAMFILES/RocketDock/PunkSoftware.com.url

    • Size

      53B

    • MD5

      c69c0e70515c917c89667be519078da4

    • SHA1

      098f203e1dcbf39e66e0e65e0a1d7970364ab6f3

    • SHA256

      94dc22390be9887a3e7b2ab20c7bf553844d3f84ebe867f47b9bf64bd762a240

    • SHA512

      8b09ed8652cc3214cdea0103f6dea01ecc86432a2b3a7e3126eea189f8ad5809554758e00dfb37c3828dda1a91704a9c24b557c748c3541a1b1ff2040563deea

    Score
    3/10
    behavioral26

    • Target

      $PROGRAMFILES/RocketDock/RocketDock.dll

    • Size

      68KB

    • MD5

      4a2a05b25df4385f5aec6f07b1c1e93d

    • SHA1

      d9c05e1960a61775f1ea7849064140c2becaf5ea

    • SHA256

      66704ce3eb7e723ba20d1ab7036ad0ba9e0a94261b7e66636b01dc76defedb9d

    • SHA512

      f1694ff27da2af33f6e8bda40dee62c5af29d1c46aa857cee6d5bd04c7ee3f25f7c0815b335f2e62ebb7b47f79ed879512c20c2ba7ae28bb03cd88069fb9533d

    • SSDEEP

      768:6xkqQ9idHmOCOZG0EW9m1FLqvWd9UqNXPZPrL01JsnjhB9C3fRNyRN:6rhCOZEX14v6NBzL01Ob9gRN6

    Score
    1/10
    behavioral27

    • Target

      $PROGRAMFILES/RocketDock/RocketDock.exe

    • Size

      484KB

    • MD5

      7dfccc67990b6de7f30f553a4e4612a4

    • SHA1

      521e9198e3dc1d41fac02eb01fb9f47f6d2a9855

    • SHA256

      9ff98d6fd2539cefc9f42103a7f72388bed6ee590400559b92bc7430228da36a

    • SHA512

      e43038e184a4271633f7925656aa37d14dd67fb606aa18e8e9e18329cf9e71965217bc9687a5e317d0ab97cea40e40f0a72b0cf6d56d5c85cf1e1038e6be30eb

    • SSDEEP

      6144:1pWCDrqrLPXrYYvxhieBqqMWvTvDlCNB2ehjBbLWbKk5+T3BUJpDy:/rqrjr9xhi8q8DlEQUjB4K9rBos

    Score
    1/10
    behavioral28

    • Target

      $PROGRAMFILES/RocketDock/Tools/Debug.exe

    • Size

      96KB

    • MD5

      e8daa0b7989b7d4dc11541a0c8919d20

    • SHA1

      a03eb714ec70fb9f0d031b0966111902ed6c026d

    • SHA256

      5dc11658f0b73da5727a14487193ff2a64396d8804869670e388239b28d5af30

    • SHA512

      0a049af034f571b24026c4d4c37299278515a2583d6956b9b8d95bd5b356e5800aa594ad244438db30dfdde2d8f48dc1f8b4d20e9effc5e97a21a5e05222849c

    • SSDEEP

      768:qgf6PxNzbrhecImVloNcgSlQM3WHtzv3xNbiL8Ar/XqF4JBp5nk6ZU9qZU9a:9i55b8MfoN5MEjhNbo6FG5xpZ

    Score
    1/10
    behavioral29

    • Target

      $PROGRAMFILES/RocketDock/Tools/LanguageID Finder.exe

    • Size

      6KB

    • MD5

      b82aaa726515572389b145bcf725d214

    • SHA1

      fe6511c976216a1550d6176668171932d6c76469

    • SHA256

      2ddecba030b54596e7a8def55b19d2462e3f172f1877d2d821bf2e845013555f

    • SHA512

      ced4e98f595b0f479b76846c2875224dff3c012dfa3c146de3c2232c68d90010745543fe2cb5264a69d639df2cff0d7eb55fd6ec53597fc273de935040850e8b

    • SSDEEP

      96:r1psSb+yq4Jtzw/3FkFIqrZuvLLjHI14BqBmn3CZtZ:9++tzw/3FkKqrZuvLXHHV3CZtZ

    Score
    1/10
    behavioral30

    • Target

      $PROGRAMFILES/RocketDock/gdiplus.dll

    • Size

      1.6MB

    • MD5

      871c903a90c45ca08a9d42803916c3f7

    • SHA1

      d962a12bc15bfb4c505bb63f603ca211588958db

    • SHA256

      f1da32183b3da19f75fa4ef0974a64895266b16d119bbb1da9fe63867dba0645

    • SHA512

      985b0b8b5e3d96acfd0514676d9f0c5d2d8f11e31f01acfa0f7da9af3568e12343ca77f541f55edda6a0e5c14fe733bda5dc1c10bb170d40d15b7a60ad000145

    • SSDEEP

      24576:Fk18V2mHkfIE3Ip9vkWEgDecZV3W9kpOuRw8RhWd5Ixwzr6lOboU7j97S9D+z98v:FZNkf+uW3D1ZVG9kVw8I5Rv6lwH9+X

    Score
    3/10
    behavioral31

    • Target

      Uninstall ScreenStyler.exe

    • Size

      316KB

    • MD5

      887029f6c3ec819b4c7ff1d39763755c

    • SHA1

      29d3aa369e2c5727155310e39a1fda0eaa4fd94b

    • SHA256

      dd28eed7eac7e6a2341a3f2a519baeeb5a9772ad9d2d4dcc054fea0f091e5fbf

    • SHA512

      75af015053232956f332af90c8cfee694e154f441f36aad9be36ae7b6b9310a913aec7f41214e59ac5d5fb83ef3a7a93fef52098b3649b2661a5c78124d8aac7

    • SSDEEP

      6144:8740IzS/Iw1/FFbMGIgn4MXNE3bj3cOS976UJbGUaJtPHI2t0EyL+3iaY:+h/z/9Hb4MdibI1976tJYRK3ZY

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral32

MITRE ATT&CK Enterprise v15

Tasks