General
-
Target
Ultimate Tweaks.exe
-
Size
77.0MB
-
Sample
240825-xhs4pa1ark
-
MD5
6e09360cae4bf1089229e4ab31e33d8a
-
SHA1
51ee724a25a486c8a607403e2bcfb04649f762b7
-
SHA256
30091faafd62ea7ba9868db2ee575dab98fd126a78d39590f57ea7b38b20d966
-
SHA512
9e18d4dc6c65688a2bcba4319bac73fceeb3452ebcf507dc4fa9078ba7519fa91bcb696d7265baaa65739172ddc4970157540f379d28d805fe440c4dda1e038e
-
SSDEEP
1572864:VOe4hJceZcymVkfWx0/sX2ZNt/Ls7fWxZaG2A/oYqJ:VOe41t+xy82LtzVxSbF
Malware Config
Targets
-
-
Target
Ultimate Tweaks.exe
-
Size
77.0MB
-
MD5
6e09360cae4bf1089229e4ab31e33d8a
-
SHA1
51ee724a25a486c8a607403e2bcfb04649f762b7
-
SHA256
30091faafd62ea7ba9868db2ee575dab98fd126a78d39590f57ea7b38b20d966
-
SHA512
9e18d4dc6c65688a2bcba4319bac73fceeb3452ebcf507dc4fa9078ba7519fa91bcb696d7265baaa65739172ddc4970157540f379d28d805fe440c4dda1e038e
-
SSDEEP
1572864:VOe4hJceZcymVkfWx0/sX2ZNt/Ls7fWxZaG2A/oYqJ:VOe41t+xy82LtzVxSbF
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/StdUtils.dll
-
Size
100KB
-
MD5
c6a6e03f77c313b267498515488c5740
-
SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15
-
SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
-
SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
SSDEEP
3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
0d7ad4f45dc6f5aa87f606d0331c6901
-
SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457
-
SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
-
SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
SSDEEP
192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score3/10 -
-
-
Target
$PLUGINSDIR/UAC.dll
-
Size
14KB
-
MD5
adb29e6b186daa765dc750128649b63d
-
SHA1
160cbdc4cb0ac2c142d361df138c537aa7e708c9
-
SHA256
2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
-
SHA512
b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
-
SSDEEP
192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
Score3/10 -
-
-
Target
$PLUGINSDIR/WinShell.dll
-
Size
3KB
-
MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56
-
SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c
-
SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
-
SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score3/10 -
-
-
Target
$PLUGINSDIR/app-64.7z
-
Size
76.2MB
-
MD5
8dfb6836a04b97fad58393202c9587b6
-
SHA1
671282ad51b365930cfa4dae262b838669d29b3f
-
SHA256
9e0751d586fdd328522ad3f84873f8be946d966af52596384af4b4c90b7a0158
-
SHA512
103dd876fc27d2051dc6b59c364078197f52cfbba996a15b2bfbeddb511114f02a8062574e3a99018036a27ee83dea93ee1b172fa1d81a360096f98caeb7cea5
-
SSDEEP
1572864:Ee4hJceZcymVkfWx0/sX2ZNt/Ls7fWxZaG2A/oYqb:Ee41t+xy82LtzVxSbf
Score3/10 -
-
-
Target
LICENSE.electron.txt
-
Size
1KB
-
MD5
4d42118d35941e0f664dddbd83f633c5
-
SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c
-
SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
-
SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
Score1/10 -
-
-
Target
chrome_100_percent.pak
-
Size
150KB
-
MD5
b1bccf31fa5710207026d373edd96161
-
SHA1
ae7bb0c083aea838df1d78d61b54fb76c9a1182e
-
SHA256
49aff5690cb9b0f54f831351aa0f64416ba180a0c4891a859fa7294e81e9c8e3
-
SHA512
134a13ad86f8bd20a1d2350236269fd39c306389a600556a82025d5e0d5adaab0709d59e9b7ee96e8e2d25b6df49fefea27cdccefe5fba9687abf92a9a941d91
-
SSDEEP
3072:AzwJCGIekwENgMBsFAXg6VKdL2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Azw1IekmMBdQXK18Gb0OV8ld0GecQ3Ey
Score3/10 -
-
-
Target
chrome_200_percent.pak
-
Size
229KB
-
MD5
e02160c24b8077b36ff06dc05a9df057
-
SHA1
fc722e071ce9caf52ad9a463c90fc2319aa6c790
-
SHA256
4d5b51f720f7d3146e131c54a6f75e4e826c61b2ff15c8955f6d6dd15bedf106
-
SHA512
1bf873b89b571974537b685cdb739f8ed148f710f6f24f0f362f8b6bb605996fcfec1501411f2cb2df374d5fdaf6e2daaada8cea68051e3c10a67030ea25929e
-
SSDEEP
6144:gDQYaSN6svydrI8jDQUgx5GMRejnbdZnVE6YoppO4:NfSN6svydZ6edhVELoXO4
Score3/10 -
-
-
Target
icudtl.dat
-
Size
10.2MB
-
MD5
e0f1ad85c0933ecce2e003a2c59ae726
-
SHA1
a8539fc5a233558edfa264a34f7af6187c3f0d4f
-
SHA256
f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
-
SHA512
714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28
-
SSDEEP
196608:hpgPBhORiuQwCliXUxbblHa93Whli6Z86WOH:n8wkDliXUxbblHa93Whli6Z8I
Score3/10 -
-
-
Target
locales/af.pak
-
Size
478KB
-
MD5
9554e414159d76754147d7e185056094
-
SHA1
e0fb0c95cef8e8d1ebeb11a6e2ea03b9067d799e
-
SHA256
f402c0d8494c9a2fceedcd7845ddf43b62e7d01ddb1d9c8e132efea83b724824
-
SHA512
9e8b41f69605d7bd426243e49b0f22347b211f7d13038ee6350d86d06cc7274bb2ef1918e27548802a5437903a653d86fce85338fa97f8c9642c0e74ed59ae88
-
SSDEEP
12288:S/n+3zo5ExirXKhaG1B2+H2JynyaI4IVzZo0vgElgA2W0PSq+2ss30fzO75g6tlX:u+3zouxkXyd1B2+H2JynyaI4IVzZo0v2
Score3/10 -
-
-
Target
locales/am.pak
-
Size
776KB
-
MD5
92ffe73f193d41c5a90303955b2da67f
-
SHA1
1d4136d8bb752da2834ebf0f4f62de56efefd78f
-
SHA256
325dd137903fc0d9e5010a62a314d9c6984ff82afbdff2254f7c48bd03dda06a
-
SHA512
6c4f0aac10276ab84ec4e63ec9ad0e20a1b3ce9d2368ec966cc6471600c3d28df8f9e501b4843bafa5bcf2aab57242559ba430d58853180ea653afbc8f468e67
-
SSDEEP
24576:/Ky3ATZg8/xp1GCj+VRRz08519tcV03OzPkS:yy3J54
Score3/10 -
-
-
Target
locales/ar.pak
-
Size
851KB
-
MD5
7608398c66cd0b55396f7250b3c8747c
-
SHA1
7e8417dfc7055fb9ecbe7cfc97a8aba0bd5a0e13
-
SHA256
3bb407fa588fb801ab241e8dda018461b54010a38648c3acc1e3550c0dfbd75a
-
SHA512
5dd757e4f114782eab9ab8cadbfe3179ded594285b3d0f7f6fa5ca50d80d866e7c8ff6a1f44deba8bdf09c04106de635c1da22597c008023b1fdf1cc747b6f1c
-
SSDEEP
12288:8jL0NNXRB5/G/d/RXZwR14fvPU7zUUk/K5+N0j+OzIQ4pG:8jL0LFQA75/+o
Score3/10 -
-
-
Target
locales/bg.pak
-
Size
885KB
-
MD5
c80a2008d9f61c182430a728a6e059af
-
SHA1
2f2aa33573156d9939e3fc81f8d81de4aac21e61
-
SHA256
5947f567ce1f4ab945dc6dab1599422d412f4417b9097905150d669122e43f7d
-
SHA512
016ce835b6bac4d5b38d72c0b3adf4d6b4e0ac04677d70c53e5938acd28b12220d2878bca7875471d008b779ea6ab4972a9875b44304e867d0bb5e4318c0edc3
-
SSDEEP
24576:0mCDcquMMLYzzQkECPUwVbtcHp373ZA+3aAKHkVDYyKzumpod2nm5z0XuGox3QN3:JCDcquMMLYUKUwVbtcHp373Z93arkVDk
Score3/10 -
-
-
Target
locales/bn.pak
-
Size
1.1MB
-
MD5
d179d38e8b9f7e60a943e2fc9f9471ad
-
SHA1
8d109081959d194c82b89fb25a514a65233435a7
-
SHA256
a45279ccc13390e0d93cfe1e33a7f276a5d9e97f6aefa6b6e14ecc4289703bda
-
SHA512
fa6f3e45f40e1e48f191e4a65f5d15dabd7058af4537eea3e34998dc67dd250b00e52d1f07b10a73a67a15aada4523e50f40160d98a5f37ef4684a30ff338468
-
SSDEEP
3072:iOXg1lMf3u3jmZLJoYPYD1uQI2HSzhb0Ylf14/QISydDbsh8VBbFKQg5sNDl2Ob:Hw3MvJZLiYQDvLxSydHsh8VBbG5Sld
Score3/10 -
-
-
Target
locales/ca.pak
-
Size
538KB
-
MD5
bd846046383d64073da6eb192f5cddb1
-
SHA1
6dd4bfb982101ecafc14eb35834caa1fe5b1e3f5
-
SHA256
1dca9a7fcd850aecd48288999b436ff7e70cd4a96f47b40319759a800fb8eefa
-
SHA512
521ddf6e8fb444b911212501825392562af14cfb5b31a80707fdeffb13c8afb04852b0e3f7e3363a1c3a37c5c35bb1cbe84b458e14e30b5e8d8cb00a6a349ce0
-
SSDEEP
12288:WM49O9Y7BREeApk73K5PqF4N3Mw2juwHzejm0t3lvqbETX9/RSHhIsjcmlLEYuCy:+9aWVzaBRn1WDMN8UpOO5z/ras
Score3/10 -