Overview

overview

10

Static

static

10

freetube-0...64.exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

$PLUGINSDIR/app-64.7z

windows11-21h2-x64

3

locales/uk.pak

windows11-21h2-x64

3

locales/ur.pak

windows11-21h2-x64

3

locales/vi.pak

windows11-21h2-x64

3

locales/zh-CN.pak

windows11-21h2-x64

3

locales/zh-TW.pak

windows11-21h2-x64

3

resources.pak

windows11-21h2-x64

3

resources/...te.yml

windows11-21h2-x64

3

resources/app.js

windows11-21h2-x64

3

resources/elevate.exe

windows11-21h2-x64

3

snapshot_blob.bin

windows11-21h2-x64

3

v8_context...ot.bin

windows11-21h2-x64

3

vk_swiftshader.dll

windows11-21h2-x64

1

vk_swiftsh...d.json

windows11-21h2-x64

3

vulkan-1.dll

windows11-21h2-x64

1

$PLUGINSDI...rd.bmp

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

$R0/Uninst...be.exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

$PLUGINSDI...rd.bmp

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    freetube-0.21.3-setup-x64.exe

  • Size

    76.4MB

  • Sample

    241001-hh76aawckk

  • MD5

    40ae42f6bee1011c6878500a411ade6f

  • SHA1

    e26f7cb399b886e9e6958eff50c65b418877c06c

  • SHA256

    79ce85eef02c8514b05bdc692a89d4606cfd2f36554d4919a8666f4dac07d82c

  • SHA512

    acdda63c917d467587c30305feb35e688ef31a7a4a7d173312114fab961062124e360f34b3694a5353126d7f7ecfe07c4c1ddb43249b6a72024851614aabafa9

  • SSDEEP

    1572864:Ywu/mfe954TXwt7sW7NwwZ1qW4EqD208g1N3fVjgyElLzsU8o:Yw9rs/lZ1x4RD20t0yAvsU8o

Score
10/10
bazarloaderdiscoveryexecution

Malware Config

Targets

    • Target

      freetube-0.21.3-setup-x64.exe

    • Size

      76.4MB

    • MD5

      40ae42f6bee1011c6878500a411ade6f

    • SHA1

      e26f7cb399b886e9e6958eff50c65b418877c06c

    • SHA256

      79ce85eef02c8514b05bdc692a89d4606cfd2f36554d4919a8666f4dac07d82c

    • SHA512

      acdda63c917d467587c30305feb35e688ef31a7a4a7d173312114fab961062124e360f34b3694a5353126d7f7ecfe07c4c1ddb43249b6a72024851614aabafa9

    • SSDEEP

      1572864:Ywu/mfe954TXwt7sW7NwwZ1qW4EqD208g1N3fVjgyElLzsU8o:Yw9rs/lZ1x4RD20t0yAvsU8o

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    discovery
    behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    discovery
    behavioral3

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      14KB

    • MD5

      adb29e6b186daa765dc750128649b63d

    • SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

    • SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    • SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

    • SSDEEP

      192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs

    Score
    3/10
    discovery
    behavioral4

    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    discovery
    behavioral5

    • Target

      $PLUGINSDIR/app-64.7z

    • Size

      75.4MB

    • MD5

      d22cc8468b36f46981faf11561960fd7

    • SHA1

      b62d099022d5d88231d37131fa06c529bf7b825d

    • SHA256

      a84effcb8a8e18aabdd0b98d30ff1016dc6692b549c49b8a922947d89a634e6d

    • SHA512

      45f8ab96aaae5bc1624768aefac041144ceecc94b31b2ff05172563707269b3131a6fe5c8efb2dc5a929b9e4691f312f314a3b5961a01392d178ac8163e6623e

    • SSDEEP

      1572864:3u/mfe954TXwt7sW7NwwZ1qW4EqD208g1N3fVjgyElLzsUu:39rs/lZ1x4RD20t0yAvsUu

    Score
    3/10
    behavioral6

    • Target

      locales/uk.pak

    • Size

      923KB

    • MD5

      779089a85efda6d21a62b152ff521d53

    • SHA1

      a35a8e0774546ed50ac002d57121f8d7ff29b721

    • SHA256

      fe35828cba11f536859e7693821d1e43ab1d89c385cfc49616859684d663d470

    • SHA512

      e02d370fdbcde1da0a6eef8f0c2d63cf4da2239f66494da06c49b401450bbbaba93cc0b3b1b11fad3de71144df99a2d8f158015b87d9087a85a4e09691c944b9

    • SSDEEP

      12288:bjdDJ5IMlw3fmIsSr+Oh7+4w0ZZDSIHmBm5eB3IjCHA3rrUkcuhLNiXEvqbz1TX:fHXK15Prw

    Score
    3/10
    behavioral7

    • Target

      locales/ur.pak

    • Size

      808KB

    • MD5

      fb978b7d211112a0774ce09ca54ca96f

    • SHA1

      fb0c69801230437dcd20e3803db81ee60fc042b0

    • SHA256

      60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a

    • SHA512

      abde8d79f46b27e0e315034025837a3126d6e5d2bc52504d49c946fe96828bd9b20cc4a5c05283fb9f8813e6820a28249cfd68b30cb27fba216970c16ecc8d44

    • SSDEEP

      12288:VXiP4WLa3w8PYsR5Nimy0ciU55eOmEhuCEO5xlKQYrbYOwadcJKwUSu9co/9Njjw:VX8wI50Cs4

    Score
    3/10
    behavioral8

    • Target

      locales/vi.pak

    • Size

      639KB

    • MD5

      9da50df23181f5c2036dd20e2490111c

    • SHA1

      06a9c9f4c7e820df7743a4b0b6326ce538140cb7

    • SHA256

      6e771fe02ec40375844c17c5b60389ebd46089864c24df7fe9755ea916de9469

    • SHA512

      16d2aaf019810e3bfe000b73f5cad3c52c225d9debb43aed15df60f3995cbba66eee44de675d642e8bbaaf51bd1c2925078191d2954a0cd4a3de4cfc1151e05f

    • SSDEEP

      12288:ewR274E36+cywJ2roEsGV63wueX0bxzn4xs/FgGhx5a8hI+8qiOcLziKHhv0Zit7:ewRn+cywJ2pVPuS0bxwvo5a8u+OOcfii

    Score
    3/10
    behavioral9

    • Target

      locales/zh-CN.pak

    • Size

      460KB

    • MD5

      271d3a6dace38055212286d872596283

    • SHA1

      a660d98324966a9f76dabf8e3bf565363323d4cc

    • SHA256

      ea08c31a5d4e6aafbc5b657c5960135e64506593729fdb759874e55876580666

    • SHA512

      d7bbb76a2b601b925d3bfc2d91534b0876459cec6c8be859adf4890d68c2ff7dc882b0670976aa0fb2b1fc83c026eb8446476e8afe443b2788928944a2ce1fb7

    • SSDEEP

      6144:U6mVxHvFKkoEtB2HwWzv9O7F56SbRfI1DZ59x6m4kIk1Nd9Mlz:U3fLoEtBUfzlc56SbRfKZ53b4kIkz4

    Score
    3/10
    behavioral10

    • Target

      locales/zh-TW.pak

    • Size

      455KB

    • MD5

      e302e1102f3f5a21860f38f41b3c30f8

    • SHA1

      78b5d1c451cf674a7641dfcc815f966fc920cf57

    • SHA256

      d4033cb3264c7c4cd2636ea2a202421650c449e5bfb10f29949e4c44e91ca93b

    • SHA512

      1f96b197eb7ae6b7983ed38d4ce33ea0c845ffe527fedfbc9e53a6009871dd3c39084a04cd1d43fd6dd24e7f26e3ec4845d4225df828de0b9ba346cbc98efea4

    • SSDEEP

      6144:zKOBV6L33vWecZM1uJJVI23uNw+H05exvnknN+nHE/ehTq:dV31ZM8Qw+H05exvn2Ok

    Score
    3/10
    behavioral11

    • Target

      resources.pak

    • Size

      5.3MB

    • MD5

      faaae22be956a82b46d9c6015a115d4c

    • SHA1

      f63bc8823e446aaf10a5b9076f78c9aead4eec70

    • SHA256

      7edd5ba39f47cf404a9f935340cd9b8dbb2525f46cf342e0f4bdd2b4a0d492ef

    • SHA512

      30a07986042a7a8484bc545f2f328d090909ca860f85772a9242cc91ae0395475a571c7f215234b3e24257c628bc3e086649c07429c9e7bbba5039b0480457fd

    • SSDEEP

      98304:sw9bNj3g7RkPe04srtXK5EmiJQCM8TVK5M/AyrwreSjujBrTAVD:bbNTgtk1rlKaVKckreSjuxTK

    Score
    3/10
    behavioral12

    • Target

      resources/app-update.yml

    • Size

      89B

    • MD5

      8ca148b439ae09ae3f1663e7234ee210

    • SHA1

      72141d5df84ff5c758136042ed39011666d2bdba

    • SHA256

      5efdfe9d44398bcf110cc6745e9c4b4c82d1d7bbbd502e2a36cd3d5e36f92dd2

    • SHA512

      c355aa8be95f285e00e3b5aacc8508a67d9aedd3ebaa175a6f5906cfca6e5041be71e512bf6317393c845abcc7be183ff1df8f7c19be00ef278f65293cac71f4

    Score
    3/10
    behavioral13

    • Target

      resources/app.asar

    • Size

      3.7MB

    • MD5

      4739101730db764a6ba95894f83e5322

    • SHA1

      4953148d5376821e09b0c798ce5e8994322aed63

    • SHA256

      e4d707ee0826af713385e8da9d1b1a5c9165253c66bce8aaa1cfae12aae80381

    • SHA512

      e0e5015245d97b7e64e2822c45eec596df4b470306b61543641651782b0f86b96c173688edf931e91d5b03663101db6068e9c82af18d7febd49ae1833e3625f8

    • SSDEEP

      49152:JBbHYjDYyf39FFKnLAy/7B//gWDAmnC6rCOutWds/IDnimFpk0ZTKRKW3iSMm0ek:3xFWxrhKRM2OrGxaDG3Xd2FPGrk5AjVn

    Score
    3/10
    execution
    behavioral14

    • Target

      resources/elevate.exe

    • Size

      105KB

    • MD5

      792b92c8ad13c46f27c7ced0810694df

    • SHA1

      d8d449b92de20a57df722df46435ba4553ecc802

    • SHA256

      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    • SHA512

      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

    • SSDEEP

      3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l

    Score
    3/10
    discovery
    behavioral15

    • Target

      snapshot_blob.bin

    • Size

      302KB

    • MD5

      992e259022188e100aa66762225a4aa0

    • SHA1

      6fbb690e50d308a7098e3625916821fae4b278d0

    • SHA256

      6378ee7a9940a671487d071935689ca451abd87d75faff99568653eb9492a7d9

    • SHA512

      44947b5a37d04c06d52e47285a2ab8c68227f30a516be3d6eb45e733e516450914f97095125843adfa65a16612d4b7d6bfd80d1cdf148d170015e2572624a54a

    • SSDEEP

      3072:9639kvvDaxLwqU1pedJ/sK6VrKe5VtZW1P3BU5qt5IiVboVKdc4:962vvKwqIu+KgV0PRU5qticrdc4

    Score
    3/10
    behavioral16

    • Target

      v8_context_snapshot.bin

    • Size

      646KB

    • MD5

      6a4c22553f2cac926f3c3265f7177405

    • SHA1

      f64c571c2e30772bcade211acd8170ab587613c0

    • SHA256

      893c922c9a3173b045e5d0a25397f0db84b42ddc636c76479033642355b275d3

    • SHA512

      3b89bb991843cf21da00ce47fc00a696b36b102e8253836e576ee96e2ac6c2ca40d95efbf1badc35019532476354780f576b4e95c60e7250e9ded8729e683ea1

    • SSDEEP

      12288:a97k1vtORkeGWFDjefZeLEYjQAH7mRpA8S:a97k1v42eGWFDjm45LSRpAt

    Score
    3/10
    behavioral17

    • Target

      vk_swiftshader.dll

    • Size

      5.2MB

    • MD5

      f431481707e31bac8e3f79f87a5d7d32

    • SHA1

      21b4fbdc307e5ee3ae889605bd81e42af3e92ee0

    • SHA256

      247e5f67ec12accb5ff81378ffbc827f8748125c48094a981773501667d565da

    • SHA512

      be1c433c19194020094cd6cc0705946c255f98173b64e0caa40212312346f6b0613b2fbf2d04ee699af6410ff551a3f2e83be4e09f7b814ad17620e597ca5c0c

    • SSDEEP

      49152:EgQpJ5yZBtfCp00oSO8hCsDsbJQk/tJ4q0nLhII1ytiT45z+WEjNHsRLf7OFJOMM:Un5yZBXLxkf5FJIayx

    Score
    1/10
    behavioral18

    • Target

      vk_swiftshader_icd.json

    • Size

      106B

    • MD5

      8642dd3a87e2de6e991fae08458e302b

    • SHA1

      9c06735c31cec00600fd763a92f8112d085bd12a

    • SHA256

      32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

    • SHA512

      f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

    Score
    3/10
    behavioral19

    • Target

      vulkan-1.dll

    • Size

      938KB

    • MD5

      06fc27ff4b7c824a1e7066c340104c7c

    • SHA1

      17460a267187449ae356cd5b6e4bf98711f84704

    • SHA256

      73bd51404740f2a7e9a4827fa287c231750ef7e9fae39736ac4f3c977d1c2e86

    • SHA512

      7f47c743536d6f68c5a7f74a674554eaada6a2d422bf3193b6b26b1e724659ad5c9437a01f6f858fb44ed4558f92d75953e385e7e92ccb394f388ba926ddbd35

    • SSDEEP

      24576:kawxZ1onv5Sp+D9R6StDWb36Z5W1DYsHq6g3P0zAk7Mh:BSSApY90IDWb36Z5W1DYsHq6g3P0zAkw

    Score
    1/10
    behavioral20

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      150KB

    • MD5

      52ff52eee3b944b862c11c268a02c196

    • SHA1

      8d041966e6fba10aa5e10ce5dc1dc5175f11b2fe

    • SHA256

      2079f7a3eba60e0d9ee827a7208aa052a71b384873b641de5e299aeb8e733109

    • SHA512

      2861ae5a06f8413810947c08994f4c0da54a1acee8c4df72cd8b03a9503b26e5512809f8d70fd584239b04a651e7329a701bf7ddcee2dec2c2e14d05ae74f220

    • SSDEEP

      48:EWQsvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvW:ER4N4S/992/zDmrkVIe1ULo2K

    Score
    3/10
    behavioral21

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      466179e1c8ee8a1ff5e4427dbb6c4a01

    • SHA1

      eb607467009074278e4bd50c7eab400e95ae48f7

    • SHA256

      1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

    • SHA512

      7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

    • SSDEEP

      192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc

    Score
    3/10
    discovery
    behavioral22

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10
    discovery
    behavioral23

    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      424KB

    • MD5

      80e44ce4895304c6a3a831310fbf8cd0

    • SHA1

      36bd49ae21c460be5753a904b4501f1abca53508

    • SHA256

      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    • SHA512

      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

    • SSDEEP

      6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck

    Score
    3/10
    discovery
    behavioral24

    • Target

      $R0/Uninstall FreeTube.exe

    • Size

      633KB

    • MD5

      bd327b8b42d236fb8e8441cf782bc417

    • SHA1

      b28e41ed3dbb78d67a60f80c249f832c27a0307d

    • SHA256

      e343ba723074ce734a41b1678be875db7b686589d588f19cb450cdb03d38841c

    • SHA512

      2e89f4d4659eccd12d5c034d149fa1660f1afa279f70d01f2ce8b2397fb11efb987922f0030f8ad0e697b4e1296065734c2c5054e00c020d5943163c25b47ce2

    • SSDEEP

      6144:u740IJCPe9E2VCMzx7KRcjDJ+UC1Ox8TUWJ2Ua8T2t0EyL+yat:UFPD2VfyAbaTqCLRKJt

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral25

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    discovery
    behavioral26

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    discovery
    behavioral27

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      14KB

    • MD5

      adb29e6b186daa765dc750128649b63d

    • SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

    • SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    • SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

    • SSDEEP

      192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs

    Score
    3/10
    discovery
    behavioral28

    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    discovery
    behavioral29

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      150KB

    • MD5

      52ff52eee3b944b862c11c268a02c196

    • SHA1

      8d041966e6fba10aa5e10ce5dc1dc5175f11b2fe

    • SHA256

      2079f7a3eba60e0d9ee827a7208aa052a71b384873b641de5e299aeb8e733109

    • SHA512

      2861ae5a06f8413810947c08994f4c0da54a1acee8c4df72cd8b03a9503b26e5512809f8d70fd584239b04a651e7329a701bf7ddcee2dec2c2e14d05ae74f220

    • SSDEEP

      48:EWQsvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvW:ER4N4S/992/zDmrkVIe1ULo2K

    Score
    3/10
    behavioral30

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      466179e1c8ee8a1ff5e4427dbb6c4a01

    • SHA1

      eb607467009074278e4bd50c7eab400e95ae48f7

    • SHA256

      1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

    • SHA512

      7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

    • SSDEEP

      192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc

    Score
    3/10
    discovery
    behavioral31

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10
    discovery
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

bazarloader
Score
10/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

execution
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
1/10

behavioral19

Score
3/10

behavioral20

Score
1/10

behavioral21

Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
7/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10