Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

SideloadlySetup64.exe

windows10-2004-x64

7

an/gnsdk_manager.dll

windows10-2004-x64

1

an/gnsdk_musicid.dll

windows10-2004-x64

1

an/gnsdk_submit.dll

windows10-2004-x64

1

an/gwrks64.dll

windows10-2004-x64

1

an/iTunesCore.dll

windows10-2004-x64

1

an/icudt55.dll

windows10-2004-x64

1

an/libcache.dll

windows10-2004-x64

1

an/libdispatch.dll

windows10-2004-x64

1

an/libicuin.dll

windows10-2004-x64

1

an/libicuuc.dll

windows10-2004-x64

1

an/libtidy.dll

windows10-2004-x64

1

an/libxml2.dll

windows10-2004-x64

1

an/libxslt.dll

windows10-2004-x64

1

an/objc.dll

windows10-2004-x64

1

an/pthreadVC2.dll

windows10-2004-x64

1

an/zlib1.dll

windows10-2004-x64

1

cryptograp...sl.dll

windows10-2004-x64

1

libcrypto-1_1.dll

windows10-2004-x64

1

libffi-7.dll

windows10-2004-x64

1

libssl-1_1.dll

windows10-2004-x64

1

pyexpat.dll

windows10-2004-x64

1

python3.dll

windows10-2004-x64

1

python38.dll

windows10-2004-x64

1

select.dll

windows10-2004-x64

1

sideloadly.dll

windows10-2004-x64

1

sideloadly.exe

windows10-2004-x64

7

sideloadlydaemon.exe

windows10-2004-x64

1

sqlite3.dll

windows10-2004-x64

1

ucrtbase.dll

windows10-2004-x64

1

unicodedata.dll

windows10-2004-x64

1

vcruntime140.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SideloadlySetup64.exe

  • Size

    126.3MB

  • Sample

    241017-zsw97syhkn

  • MD5

    5fb52754697b1c7f56be096f8581dc5c

  • SHA1

    80e07fb5ad530b0159ffedd6a72fa23e89f4630a

  • SHA256

    d33bf91b11f6b1322724aaf76a5f0564285b990833a7d2877917446a9c8b30ae

  • SHA512

    41a8576492f5705ec7265d0b2fe8070c74e500efd44406d978e61a0fbfaf9a352296e4d36da9ac10a7e6cb9bbdd94faffa8b6ec175abdaeb46ac10d782b1e111

  • SSDEEP

    3145728:mIPLYzrmcXEisq3X1QBSLIpdfyFW/fISPI26hpMIaGABaaEK7gI2O:nYzrVEisqmELIppyFW/fISPj6DMNGu7B

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      SideloadlySetup64.exe

    • Size

      126.3MB

    • MD5

      5fb52754697b1c7f56be096f8581dc5c

    • SHA1

      80e07fb5ad530b0159ffedd6a72fa23e89f4630a

    • SHA256

      d33bf91b11f6b1322724aaf76a5f0564285b990833a7d2877917446a9c8b30ae

    • SHA512

      41a8576492f5705ec7265d0b2fe8070c74e500efd44406d978e61a0fbfaf9a352296e4d36da9ac10a7e6cb9bbdd94faffa8b6ec175abdaeb46ac10d782b1e111

    • SSDEEP

      3145728:mIPLYzrmcXEisq3X1QBSLIpdfyFW/fISPI26hpMIaGABaaEK7gI2O:nYzrVEisqmELIppyFW/fISPj6DMNGu7B

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

    • Target

      an/gnsdk_manager.dll

    • Size

      2.1MB

    • MD5

      cd9d2c78633d9354499b4ec015501638

    • SHA1

      5cae99a03d2d62afa0fd522d611fb8c387d343e7

    • SHA256

      c51ce56f5afe11ebc1cc7e4d5ab747ace35f3990056f44bec767686ca13cfef6

    • SHA512

      7aa4900cc459e03046ba2565ab4b5c679ce49d149fb67ebefaf64f3436e7e01fec7ceecfbfefd87945ed783e7f2a7862126fdbe3f09cb6d5e537e401e18c5083

    • SSDEEP

      49152:IEiejGyEicH0BBYDcvOQf23D4otTkrRPQ9:5yTeBBYDcvOQf1nu

    Score
    1/10
    behavioral2

    • Target

      an/gnsdk_musicid.dll

    • Size

      850KB

    • MD5

      18a54c94c3339168764d6f00901f02b5

    • SHA1

      6541f7a9ee7355c92ea5839976d3e76f625460b1

    • SHA256

      4d228c9af6b0f291b2d22c1f29b7b09ed3ca5cdd62d88e86b5a23b2ec80382b0

    • SHA512

      aae810531d465c4ebd9a4a0d21c5567e88ab5261574c32047aa03d7b5f405bf7a3e3c6a135d0fcc637d317586563ca8c0053409de52d2b74e75e46c1d5eb83f2

    • SSDEEP

      6144:Sc+j2YX/tRjkSbeOwyK4fST7AANuyRviTZUdYhii+8zZylrHbtrPh9jyrONEqcCn:FY1tkSbeOwyK4fergMqHzCn

    Score
    1/10
    behavioral3

    • Target

      an/gnsdk_submit.dll

    • Size

      318KB

    • MD5

      9c73b4a6206958b913062ed9867367dc

    • SHA1

      069eca780ed96a743c1c331ded32d02574524803

    • SHA256

      ee325849a5406c01578e01be0c99d7d2803bd14406fab5bc3b16a64228f69213

    • SHA512

      14e81d04ecc1f46f4169ec5e5f1e7e9859cd8b3bcadefde40889c32fb53ecb8822866f50a626071793e5df651191c6658e03f7e74ed620932f623205f96f82ac

    • SSDEEP

      6144:/n98UqTSszPzbLjQ1oyhV2eHzp4jTRYR+Q4NWhFf6SQm4Mk5jA2knmtzZfXhAFi9:/n99KSCPzbLjQ1oyhV2eHzp4e2644E

    Score
    1/10
    behavioral4

    • Target

      an/gwrks64.dll

    • Size

      17.3MB

    • MD5

      7885da48d243d5f6c89331f38b3328be

    • SHA1

      14d921a2c9214c9bb5d2e74e062d89d078747d59

    • SHA256

      6d34812f4350e8d6d8cd579ad10dadb61d550a2f5230bcf5d81cf1270954eed9

    • SHA512

      012af44a026fb0d78fe5c6fc32be17079c1c7c9ba4150190b9ca070f52f0fe119fd6ac146dcc778d75477631bdbb9f327621106a4eac59b4b10da1f1e924dfc3

    • SSDEEP

      98304:JpVTZsfO3Sz+n2n+IAO2JfCSpI3Mfq2dE3+PBUiAHL60GLoUzaHRi9bNJGTViybi:vCOhNJGTUybcVbKgCIvvvC9X6

    Score
    1/10
    behavioral5

    • Target

      an/iTunesCore.dll

    • Size

      34.8MB

    • MD5

      8de54805d69c4536d04b8f19fa59b3d3

    • SHA1

      cd4836b27d740992b53ae2e4b99f6510a4516edb

    • SHA256

      db0d68cba0097da1e4ef2294a55ca8d083a997c40f03a423785a2d8bdef6f630

    • SHA512

      805792fcfbf0f0e854b3e124d225553500221fc1434c6857221a168affb3f538945af9aa1832dc11fa258479426268d369a4e3f710c4605c0644cd671bec163f

    • SSDEEP

      393216:sFOSsfbgSTZdMVZvGMabNatYJTRMEZCiMwdpqn8ocZ9c7zZHikW3w4w8N2:x/oScHk3w4lQ

    Score
    1/10
    behavioral6

    • Target

      an/icudt55.dllx

    • Size

      25.1MB

    • MD5

      bb3165353d0214988d95a7ddc93706f4

    • SHA1

      fa0fae79eeff211e57097e201063a3f2a97a61b5

    • SHA256

      16de9a6c0b96c4bdde949b0bbe3ada948f4be1b67592f9c5b4b64b6f441d2960

    • SHA512

      b7b3565cc8e503ee17ec970d70a2adeb17c106f53cdbe72ee6ef1be7bc90d441e152f94a04122d803ac4ab335fb2dc6f1d94de6c834feed20a721b56d7d27a03

    • SSDEEP

      393216:VlPHUoGGwqlFFkUhpXAbdSVyIjAeUl2wVbxkvwgH9ve22TDsakzYu8qtnI+:jFG0

    Score
    1/10
    behavioral7

    • Target

      an/libcache.dll

    • Size

      40KB

    • MD5

      b1c6240d1c8be4d21879789b66d2ad63

    • SHA1

      93d7fe25401f77db9e415d63fcd3e7e8d3f591a8

    • SHA256

      d51b75eef0ddb8119826eb2ecd8f8b7f378b81029b2b5017080a6e55bd8ecf45

    • SHA512

      37c95397b2af6033331f71957a30f9541ffbb6d4d02f9283d55ac8e9400892a5e945d0aea4d060a1251d8b509b087822ea77d033b43304cba204530416976e55

    • SSDEEP

      768:jCLMD+Ido7N1uuBp9Bhywzwg5tpEQ9XAf/XFIl6XARXzfocAhB:PbaNJp9Bhv5tHQXXagXARXzf/AhB

    Score
    1/10
    behavioral8

    • Target

      an/libdispatch.dll

    • Size

      94KB

    • MD5

      c56b4d6e7f4d4087b1708bac1d787c43

    • SHA1

      9601aa3dfacda64ca36c78a308fc04b784edf203

    • SHA256

      182c39a44e0a067e81684cf50e61d49a0dc608c074b4ad95e70326585722c23a

    • SHA512

      d84ba582db740c55adbc1a55f3a4b8b049d38980ddc4ab53264a300de48255ae69fb4cd033f9259e0db68e83654c48ed20c3c6cd76b59a65677fe997d28d4065

    • SSDEEP

      1536:6qEPt4mahMWwZNb/l9/kPb0OFZSsvvqZ1BQMXcCAvbmjobIzFSWFxmQg9oO6ILgN:6qEPdahSfjX/kPbZFrvVMDcbk4LQIqvd

    Score
    1/10
    behavioral9

    • Target

      an/libicuin.dll

    • Size

      1.9MB

    • MD5

      2e861509e880de98932815903154bc53

    • SHA1

      3fcf30028c6cebd1c508c9ff835361e87a56d7a8

    • SHA256

      7a177071b33660b9c61682f20e818c4e773d83035a9248a420781354decca906

    • SHA512

      dd84b7751b7877b0d8135c0b6ed2cd7f74311598a3c4e5cc358a9db8073321109324f23bec735bf71f4ef3181dbe27e279e6b31a9661f82d6bf752bda285243c

    • SSDEEP

      49152:adTuz+bxa1K7FZxeW/Hwwg2uGudt9NIlNlqaNIeyK+Iflw:adqk11eW/Hwwg2uGudt9NIlNlqaNIeaP

    Score
    1/10
    behavioral10

    • Target

      an/libicuuc.dll

    • Size

      1.3MB

    • MD5

      65d85a7f81436f71ea7bdeb2fade8fbf

    • SHA1

      a4c1ae869231f93237a6f18d1933a689b4f0b6ef

    • SHA256

      95b7d258a84850bdfb73575e69ca1e82317b97e94fbbe822e6690c2d4dfd5e11

    • SHA512

      8458d8640681988a6f3801728f5f6bdd2cef476ef4415b27c650a1189042b1a8b608753bf09b34257b27c6c8f9bf52546bbadda2a6e509346fd1320410a0f995

    • SSDEEP

      24576:2Um/ajgRxueKHD2D1gdxKShrS+Ydubn/rQhLFgVl/Wnt:6/TKeZDWdkurS9uTSN

    Score
    1/10
    behavioral11

    • Target

      an/libtidy.dll

    • Size

      302KB

    • MD5

      0f1d3d3bb589e4cebb79a06ef241eecb

    • SHA1

      39aa8a96c858e66f7b2f7726b46b3fe9af26d494

    • SHA256

      c33e888903e58e3db8fdb586d0557ac3c932d7e69c0ef32294c08533236a87d6

    • SHA512

      b3f156a850ed7f03214b2d8c9b854d831720f72b275716903a5f453126a0d0cca5f58f938257559f5a5542689f32431ba9b896c3d75af6f292c530ee775ce26f

    • SSDEEP

      6144:wB1HUyejK+Y4JLIZh/XG08jiv8XE+L6xnkyYsv4BgzJ4:LKL4J8Z9Zj+Lf

    Score
    1/10
    behavioral12

    • Target

      an/libxml2.dll

    • Size

      1.3MB

    • MD5

      366b37574d65dd63a28513cdfaf175be

    • SHA1

      95c0d0e62750a8e406316348c501eed83be6e7d9

    • SHA256

      1852227f3f13009d56a346e616731e9f5b7ed5476a23f680f70629320f913257

    • SHA512

      7037e2ea21597a1aa326aa69899bea86a98fa635cef45581951692147f8e7b803e768659dee621ea962eea29112c8d1a1f6a8377176b023c4530a84fcdd40398

    • SSDEEP

      24576:6sh23eazXgFWTPVxo4dKdiyxgE27Cs8vuDR:vSeaTzTs4dKdpQ1

    Score
    1/10
    behavioral13

    • Target

      an/libxslt.dll

    • Size

      231KB

    • MD5

      25400163968a608253770711c9347e67

    • SHA1

      6884739ffb6fe77da9252897b4ec9ddd7f0f381b

    • SHA256

      d0211d228b587fb296c52022a6c3af7d98c59ea01b5f1b6fb6fc8a265b18bf5a

    • SHA512

      b20230bfba47c94acdb73ccdd8c8cfa2848af8b2e624fbc52e17826ca30661fa70359663c0fcd5ecde1a91b6ddcad93db702ae77cfbbe6cf2bb21ed21936f811

    • SSDEEP

      6144:DCiaVIheVDNOHuSA80GnHhH+now1iwJs4:DCYheVDNOHw8XnHp+nhUwp

    Score
    1/10
    behavioral14

    • Target

      an/objc.dll

    • Size

      211KB

    • MD5

      3f9ef54ab168eb5c1df7cc19a024a152

    • SHA1

      cee41a3d8f65be9c43a740dd8c6f12b4239f0370

    • SHA256

      e6555274706f3d1c8cc27f77949c8b2286cedb837804e67d728087f707b3ac6c

    • SHA512

      a9d471c890b2ec650caac81b5852aeec10426153dfafa4b11d0721adc2c635981fac43d23a6f5e7ed4bbb8f2a6c1f19f2b60033c96e02dc15a58c3feead4fc9f

    • SSDEEP

      3072:MXGyFT1JLB8s13GeQwiPUwnVdVh83opHMCLPXgs8+kOlPRCnCBZpPXTQXZn:MWEpesFnQw+VRpvPXgWkOlPRCCBZFkV

    Score
    1/10
    behavioral15

    • Target

      an/pthreadVC2.dll

    • Size

      80KB

    • MD5

      faec8d7e88eb21aacd01eb11f69c36d4

    • SHA1

      0d878f7b71b3f8d0beb770343eed116aa72748e0

    • SHA256

      5a0cae654f4e8839f87e613d5e465cba26037fac49fbfa4e06af99ddff454aa5

    • SHA512

      1e8682004f1bb565b49e7591e3fd51c1c1417e14a85b6e410df979a7dfabe43378b017f96d7cd71b68947ff8372a116e089c3ffce7188b7238e5f4dc3adee7b5

    • SSDEEP

      768:C4pNRcc2M4yM0M/btBRpt5iD6fm3DnJiH/ps8DAU6Xl5XSZocAhK:fPub5JbtttID7iH/pscADXl5XSZ/AhK

    Score
    1/10
    behavioral16

    • Target

      an/zlib1.dll

    • Size

      90KB

    • MD5

      62d6c213f934913dc3225aede151954b

    • SHA1

      ba6198fd8f2f8d98b5b316ba501a0d11c5d62559

    • SHA256

      a16b9e73ad1ec119bef35a64b5534690721e7bcb6bdc02e03d4f49ff51c52895

    • SHA512

      d273199244aa1918a3811ca6162d95c0a88e681564582311ba01d9a090c395b8fa866be8787b9a6f21741a98c1123ed1ad88e0f7d5ed60347e5f69e1dddc1aa4

    • SSDEEP

      1536:JlmWtqoX+CjFcwkuSgh1+yx6EnToIfcIO8IO4q3RlUXiWXU4/Ah3:GWtqoXtHk+j+WtTBfSy4q3HUXiWXUp

    Score
    1/10
    behavioral17

    • Target

      cryptography/hazmat/bindings/_openssl.pyd

    • Size

      3.0MB

    • MD5

      9e7702f80515810b13068cdd734a18f6

    • SHA1

      8faa219ef9a3ee094cb303c5b4e617bc4d8db6a0

    • SHA256

      51a1b0e4caff021db2c527140602a6b53046ecadac0b5afbc274117bc9927f31

    • SHA512

      e90a23a32df7b68a1b32ecf1c77516f0716b1c8cf1c88dd34a76a77b967ca232015e7bcaf80549b4b1d096962663b7b94194ece99e38b4e8e35a27a700285ffe

    • SSDEEP

      49152:KjVwASODGtlq+BIU6iT7hNPdZZgzh+oqKuvftRQk+s7XCoNPcEiQzn5y:r2+xNrfz0VoGEiQzn5y

    Score
    1/10
    behavioral18

    • Target

      libcrypto-1_1.dll

    • Size

      3.2MB

    • MD5

      cc4cbf715966cdcad95a1e6c95592b3d

    • SHA1

      d5873fea9c084bcc753d1c93b2d0716257bea7c3

    • SHA256

      594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1

    • SHA512

      3b5af9fbbc915d172648c2b0b513b5d2151f940ccf54c23148cd303e6660395f180981b148202bef76f5209acc53b8953b1cb067546f90389a6aa300c1fbe477

    • SSDEEP

      98304:R3+YyRoAK2rXHsoz5O8M1CPwDv3uFh+r:t9yWAK2zsozZM1CPwDv3uFh+r

    Score
    1/10
    behavioral19

    • Target

      libffi-7.dll

    • Size

      32KB

    • MD5

      eef7981412be8ea459064d3090f4b3aa

    • SHA1

      c60da4830ce27afc234b3c3014c583f7f0a5a925

    • SHA256

      f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081

    • SHA512

      dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016

    • SSDEEP

      384:2nypDwZH1XYEMXvdQOsNFYzsQDELCvURDa7qscTHstU0NsICwHLZxXYIoBneEAR8:2l0Vn5Q28J8qsqMttktDxOpWDG4yKRF

    Score
    1/10
    behavioral20

    • Target

      libssl-1_1.dll

    • Size

      673KB

    • MD5

      bc778f33480148efa5d62b2ec85aaa7d

    • SHA1

      b1ec87cbd8bc4398c6ebb26549961c8aab53d855

    • SHA256

      9d4cf1c03629f92662fc8d7e3f1094a7fc93cb41634994464b853df8036af843

    • SHA512

      80c1dd9d0179e6cc5f33eb62d05576a350af78b5170bfdf2ecda16f1d8c3c2d0e991a5534a113361ae62079fb165fff2344efd1b43031f1a7bfda696552ee173

    • SSDEEP

      12288:1SurcFFRd4l6NCNH98PikxqceDotbA/nJspatQM5eJpAJfeMw4o8s6U2lvz:1KWZH98PiRLsAtf8AmMHogU2lvz

    Score
    1/10
    behavioral21

    • Target

      pyexpat.pyd

    • Size

      178KB

    • MD5

      3d9e5288cc9d2df9edf6976611d08854

    • SHA1

      3603735945d096a5521097716784b2e341ea27f9

    • SHA256

      b82ee00a7521a65a645ff9a284679c47c26d59a899517f807a42434cf50818cc

    • SHA512

      9e26767338096480a37812adf1e1bbf70d0b5f727b4749a1723a28e6b0dede20dcb3eb9e08fc30a4840b984be9280a6ca6af87bef302f8b385e60084fff07991

    • SSDEEP

      3072:uN8CZhFUnx2yj/ea5UvUBbzs7NS2114zQcRML43FUaJfeIz1l2m0JOSrnV1UlYkO:qFUnxVj/fUvUNsNSqe0L4zfeQl+V1wFi

    Score
    1/10
    behavioral22

    • Target

      python3.dll

    • Size

      57KB

    • MD5

      6c3e8a99ec9f235075a349b6bae9f5c5

    • SHA1

      82233e99b5ace28889671b8ce0ab7e88ef1aee1f

    • SHA256

      5039f5b1e44f14a6f3939e17eeda56818ca0cecacfdf978f903a349abbcea23b

    • SHA512

      c37716f63f70e68ef875a6dbeb668d9289b921ed530aa59429e7e3321ac45a507ceec1f2ef5af7840052bec76dc1b638e277b04328b4aa51ac1fb4aaffee9554

    • SSDEEP

      768:1S99q+0o22ByfbEap+VCBQ53gUiT5pLFdBk4/yFi1nuVwWBjChtFyrUdmd9RSxDA:a9xiEAnUvdRlI8V01yF

    Score
    1/10
    behavioral23

    • Target

      python38.dll

    • Size

      4.0MB

    • MD5

      3cd1e87aeb3d0037d52c8e51030e1084

    • SHA1

      49ecd5f6a55f26b0fb3aeb4929868b93cc4ec8af

    • SHA256

      13f7c38dc27777a507d4b7f0bd95d9b359925f6f5bf8d0465fe91e0976b610c8

    • SHA512

      497e48a379885fdd69a770012e31cd2a62536953e317bb28e3a50fdb177e202f8869ea58fc11802909cabb0552d8c8850537e9fb4ead7dd14a99f67283182340

    • SSDEEP

      49152:5p0TOij0uH7nuWQBf325orYyc+i3kW+yEBBpNTVPq47yKim+RluUpxmPNjL0IIoS:SDw8Ihr8mjIiH9M5XK+

    Score
    1/10
    behavioral24

    • Target

      select.pyd

    • Size

      19KB

    • MD5

      71eee36c701f4487863924c1850870ae

    • SHA1

      a835da44fe73bd42881dcc02b2b3c3202a9dc08b

    • SHA256

      621758287bf0a0d39931260bc2f1bc914cb1ea4203eab8f781e0e1f63ec63e17

    • SHA512

      58079e6705caa587d8142f1df534e9465b499335743b6ec280e14c7058d78ce86ee01d6fa330de05cca317720725db313a739994f1e1df1f287707e64d21b9bb

    • SSDEEP

      384:Q2XLRtWVoK8pLxOZwhPIHqSOATqtPe0cEuNylI8qG:Q2KMlOZwhPIHqSOgqtmZNylI8qG

    Score
    1/10
    behavioral25

    • Target

      sideloadly.dll

    • Size

      26.4MB

    • MD5

      23b298f950db6a9788186bf8f3a22c22

    • SHA1

      03555157619f44ceb5af9d00726cab2ac04a3728

    • SHA256

      00469b2f383075a503bbed2e10bf1142e400213c99809e421a8d0cfebf9e5c37

    • SHA512

      bb3a5ddb3f521f57cfcfac99a15972b47075d7b8a85ce15a1073f483f013df3308531a958dbbef06ee2c959b541b2f2e68e65d9487b53e029d71a701a51ca7b5

    • SSDEEP

      98304:Ye7uzpPF2cQr+ZfVHYqZE6uVIi2VqjEB3WPGmT2VBOFlm1FZjR5rQ3WRAI9tX5+a:GbVRYsBdpeKi1bmB5

    Score
    1/10
    behavioral26

    • Target

      sideloadly.exe

    • Size

      49.0MB

    • MD5

      2c40a5ac088a61ff8305e9b323e34df4

    • SHA1

      e94105001afd10bc69fa048bcac23abef7b53f80

    • SHA256

      f2fbee8a1b0d85caab961a30e92ada1978604ac5564f2c2effe1555b3d9d653e

    • SHA512

      baf5ee0e4eebabf65010a3f8e83265df976184835ce06e4c3ff8fec23696c51d651ecfb00aa69073b55685008c36fad0eb414392c5639759e78e6a1b7b35a479

    • SSDEEP

      393216:yY3yF22S89lFDAmvdTTWld3b7U7FvV/V17P/u8lH6FJsv6tWKFdu9CJ:l3yI2S89lFDAiTald/U7FN/bs/

    Score
    7/10
    discoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral27

    • Target

      sideloadlydaemon.exe

    • Size

      42.5MB

    • MD5

      9dfb286c81be364e7df4f3508762ae9a

    • SHA1

      013f5bd6244f4b98d5223be49c882ae28539bf74

    • SHA256

      ad9eedd86a34c4496a8fe0568976adb241d5012cf72e773fd05cdd7850540956

    • SHA512

      07fe9a46aabf1b295541b72a2ba8fb5acfd744ac6afb9ab712916580d19c719701c72ae05e4492412ff87add5b006566e706086d86fb061f3e395e6142a7b412

    • SSDEEP

      393216:dY0jqIvwHDVT2NbhyJefqzUMx5X7XpLG4hv1C0cyA+AYJsv6tWKFdu9CQ1:dY0OIvwHDVaNFyJeCQMv7XpLG/X1

    Score
    1/10
    behavioral28

    • Target

      sqlite3.dll

    • Size

      1.4MB

    • MD5

      ce480e119718e4ece416c7216aef7620

    • SHA1

      f5ef2e1c2bc7f25221cc84461975b536b165fec2

    • SHA256

      9c903beee9b402a167a0e1e66fcd80790840efc4d55753dcf06f1e742777e374

    • SHA512

      2d57d162d8e9a0b35f21e06e0d62378c1c567540618c2635583d5f86cc99e1583924d0ee136c034631c3736e0fa3d8b7fcc3522757134758a3a647d36592d2e4

    • SSDEEP

      24576:eWYb0YUuLzFexUe7/he8azk5XmzrGHvNXpz3pdj2OmCCvACvW4Rj59lik1pI:eDwYtLzFexUe7dmk52XGH1x/j7vCLs

    Score
    1/10
    behavioral29

    • Target

      ucrtbase.dll

    • Size

      1002KB

    • MD5

      298e85be72551d0cdd9ed650587cfdc6

    • SHA1

      5a82bcc324fb28a5147b4e879b937fb8a56b760c

    • SHA256

      eb89af5911a60d892a685181c397d32b72c61dc2ad77dd45b8cac0fbb7602b84

    • SHA512

      3fafea5ff0d0b4e07f6354c37b367ada4da1b607186690c732364518a93c3fd2f5004014c9c3d23dde28db87d1cb9ae1259cda68b9ba757db59a59d387ac4e02

    • SSDEEP

      24576:PLyubutYBWSlhrANUDk8ExrmxvSZX0ypFiR+R:DyubJvlhrVETiR+R

    Score
    1/10
    behavioral30

    • Target

      unicodedata.pyd

    • Size

      1.0MB

    • MD5

      325e62dd06df9a6fbd175038572dd5c4

    • SHA1

      3b1301332fc537f5c274b26b94a48912d7d9e05b

    • SHA256

      71bc390082131b6fc0ff02df5cc63e26e52c154676ecb52e85b0420016087547

    • SHA512

      491ed5bd412bb9a89b65c125f9dd22623ba090563e4adefd2ab1ff26b28bc28bab1579617c29d52fc9f143b1b5ae86d8224a38ed8d644c54c519e8b77520718b

    • SSDEEP

      12288:KueQqQOZ60191SnFRFotduNIBjCmN/XlyCAx9++bBlhJk93cgewrxEeBsd:KueQGF4oVhCc/+9nbDhG2wrxsd

    Score
    1/10
    behavioral31

    • Target

      vcruntime140.dll

    • Size

      99KB

    • MD5

      8697c106593e93c11adc34faa483c4a0

    • SHA1

      cd080c51a97aa288ce6394d6c029c06ccb783790

    • SHA256

      ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833

    • SHA512

      724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987

    • SSDEEP

      1536:7y6+2mUD0uBFRXqYue/o+18iBH5T7heunxr98nZXR9xecbSQ2bIB0TO:7lXfRXqQw+PHLrCZh9xecbSt

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

discoverypersistence
Score
7/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10