d71bde4d5c3e93407c192232e7da5be5cbb67f8ea801f085701aebefcc5cf10b

Sharing

Copy URL

Twitter E-mail

General

Target

birdfont-6.12.0-free.exe
Size

45.4MB
Sample

241202-ta2jbawnfm
MD5

da825673dba9dec4c580b270c9e6d13b
SHA1

ff4bd79faaaaa435e8532aa5c16bb9a205e5092d
SHA256

d71bde4d5c3e93407c192232e7da5be5cbb67f8ea801f085701aebefcc5cf10b
SHA512

a6b68700979a41eb94bd8e8b0a7360b12b1044e2129194cd315e47f7277cd21435f7b106c6260b0ae8fedef6599a52dbd1112eeb625ae28f4e00536c1dba7879
SSDEEP

786432:dY34TUW75qmhvNQMdtmUsbwWxM4LbOeJ3XP9J2RLsxTtcol6LINPJqmLFiO:dYJW71hVQMdeOMbOeJnHi2Ttc66/aiO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  birdfont-6.12.0-free.exe
- Size
  
  45.4MB
- MD5
  
  da825673dba9dec4c580b270c9e6d13b
- SHA1
  
  ff4bd79faaaaa435e8532aa5c16bb9a205e5092d
- SHA256
  
  d71bde4d5c3e93407c192232e7da5be5cbb67f8ea801f085701aebefcc5cf10b
- SHA512
  
  a6b68700979a41eb94bd8e8b0a7360b12b1044e2129194cd315e47f7277cd21435f7b106c6260b0ae8fedef6599a52dbd1112eeb625ae28f4e00536c1dba7879
- SSDEEP
  
  786432:dY34TUW75qmhvNQMdtmUsbwWxM4LbOeJ3XP9J2RLsxTtcol6LINPJqmLFiO:dYJW71hVQMdeOMbOeJnHi2Ttc66/aiO
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  
  libbirdfont.dll
- Size
  
  3.5MB
- MD5
  
  e96c933e57c28a008b29bc73d43ed30a
- SHA1
  
  a3533360aef123d6d3a0beeab1328880cf2079bd
- SHA256
  
  5a551a29c199c474eb67722cb21d13adfc71f0e51b2dd90df57046ae9e60dc64
- SHA512
  
  c17ac32cd4c6aa5a2eb687dc6b5f4471d088cd305f5e0b890cb226417b6a72dfd3690c1759e499b8587ce06025cec576b1562044d2f3e78773490d7267d4ed39
- SSDEEP
  
  98304:fo/50HiH1UWofMTmpWyXR6Jj7P3mi2NxZmA8lS:g/XmpWygP3mi2Nx8A8lS
Score

1^/10
behavioral2
- Target
  
  libbirdgems.dll
- Size
  
  64KB
- MD5
  
  e18980cc1772bf01eb6f267e5cbb213e
- SHA1
  
  d2d34dbb9a7dea297dd1dbdcebadf1c6a2de322e
- SHA256
  
  1ec70d56a25743f2ffa7f067f37a81e9004f26791063b301b3d5d49e7f832a58
- SHA512
  
  ea7f29f7852b40e10920e4c21a2b39681c804d854123c61027bad8c17b1533cd3794db51ad68f087381b6d410cb46546ae7022ae41dc782657375f39fa2331c4
- SSDEEP
  
  1536:QEgfIP2QJZdJwIANmqHwslge368nN+Zzz:qwfwuxPyN+Zn
Score

1^/10
behavioral3
- Target
  
  libbz2-1.dll
- Size
  
  73KB
- MD5
  
  9b00e80f8a3a60465ca080759fd75bee
- SHA1
  
  e153fe5a6e39e1cc479fc6cc62da9e6470f9051a
- SHA256
  
  cc305887c03f1f81f1c521eeaf4cc839c691ccfc81b6f6eb820d3dbd8b6fd933
- SHA512
  
  d217edfe623b4b5ee67946045f28e946b693b6c18d5f97545869ff591a9620751430301b1b6fe287f6c441b498d0b3ba01e78d94815fa63352c5db79f95b1298
- SSDEEP
  
  768:oxFBplHJfeJuf0hk9b8B6rei9+ko5mLV2LOGN23Ag3Qb/A023hmQ0:8jlNe8f0G9ogrei1M18DwMhmQ0
Score

1^/10
behavioral4
- Target
  
  libcairo-2.dll
- Size
  
  940KB
- MD5
  
  28d8c59aee9b9ebcd1c7b47c04bb24ce
- SHA1
  
  a30a34ab94562da1e63329416db6892c4535a33f
- SHA256
  
  7fd06899bfd282b6fc03f102cb131fbf014dee3c477ef48c6ec11b26ba9e2899
- SHA512
  
  eea926a208d87a0ffd6d61d466f877fe2bba061d685cb4d36977ab30de44c023254c0843bf63ca85d470914778ba6b21bdfca7ab3fc0976a50a89850b8cb611b
- SSDEEP
  
  24576:R9uckDlEaUAirwbeMG1fmfbxskS21rJhVKpaDnANqz4cKfzao:f+yXwCMG1fmftsmKiUVfzao
Score

1^/10
behavioral5
- Target
  
  libcef.dll
- Size
  
  51.8MB
- MD5
  
  4ed88e42e03a2111fd6e860146248127
- SHA1
  
  623ab0609ef6502256cdf8516877c6679555f9c2
- SHA256
  
  920404420871fbf59022347deee50bf5e2d16cbb09dea56b68248be39f372d78
- SHA512
  
  73f83feba7515eebadc6cf627b1230a84a0c18bcdcd565f503c629ab2c958cc8d1ce884d2808bf20992960fe9d2cf3ed07da1734cd6ffce9daf8e2d202164168
- SSDEEP
  
  393216:eTFnUXVXIwbXNvhFyLC1+7vLuk6tx5kWlcwu279jsFMC8ytoks8Zh6HmKZd44VQV:eYL70rUymBf0gdmVW7mJEo
Score

1^/10
behavioral6
- Target
  
  libexpat-1.dll
- Size
  
  159KB
- MD5
  
  09effa9ced3ab4477c46dfe21f494253
- SHA1
  
  c4cb2328b4b297dccdb9e6ffc24128100613e476
- SHA256
  
  82716107d1998136e13f18ad8eedaaebff40ef81bf3a934886a4a9ffc5d8e5df
- SHA512
  
  7c2e8b626ae32450d0120b55ccf84d1d1fc7c731deac1b1475ce9e0aed025f10c4899a7c3c2d26dd2a47cd2f48fdb2db3f70785c6682c19fe252a690031912c4
- SSDEEP
  
  3072:y9kyra3yXVTa5A4WyfTbxw7G9rEbxjOToF3Ys:qZ5V4A4WfG9r6OToF3Ys
Score

1^/10
behavioral7
- Target
  
  libffi-6.dll
- Size
  
  34KB
- MD5
  
  a31b49431416949a1943bf92b8e970fe
- SHA1
  
  f76358526a4df3ea003d37326f74513bb23a1d92
- SHA256
  
  863ed3e619cc97a7b703bf5a8099d4e2a087377c37a1c5efbafe4e5decf81596
- SHA512
  
  f7a5707bd6cf12d932ed9a6be49204999d6a84b10f662197c69e4dac5d0f57d55f4d3fced6d19e48c8f96a225f8339f233cdca47acb2477b5e19003964780f40
- SSDEEP
  
  768:0DkNG8FQBQVlnfilN1SBmnKAl4444444444444N44d5DFgEQwgJ:mkNG8FQctf9fbFgEQwgJ
Score

1^/10
behavioral8
- Target
  
  libfontconfig-1.dll
- Size
  
  310KB
- MD5
  
  2c470ae4b9c6c3ae5ebfdcedb83b20ea
- SHA1
  
  dc62ecf9ae11898b880a5ecc8804f557a8de7b9b
- SHA256
  
  109a6f2d9b4e024978cbf8754c5c37dd8458f7da6dfb49657776a3e84c2e1f3c
- SHA512
  
  3676c3fdb10b734eecae98a19d7fadbcd9c7fb3bb878d0a926b7de75adb988891db0efbab2f5d63a43fad85eac90ccafb7ea80c4c4aaf9d72ab6171d162d1ffd
- SSDEEP
  
  6144:NXrigbqGF4L6TBZml7mmvXJlJktoKyiQGcVlwxsV1FLG9DlHnX8JV:cg7F4L6TBZml7mmv5lMgdlw2RelHnX8T
Score

1^/10
behavioral9
- Target
  
  libfreetype-6.dll
- Size
  
  626KB
- MD5
  
  56dd717dc7e3f73e4d9de5ac3ac85a0c
- SHA1
  
  7c64c4a13b2aa1b8291bb286684e90819928f201
- SHA256
  
  20acfed1594417df15a67ab3059518b58adcfddfc45f066ed9e7f2007412b3ab
- SHA512
  
  800706636cadeca4cd73179525ca793770906082d940e9f5f63868fdce3af3f6df4468af727ac32e923e7e005d6e7feb6a5ba6d9e4f63eb65c2ce584d2696aa0
- SSDEEP
  
  12288:7WzwIqT+zqlD4hiHOKrpiP1rg6CW8AfEWmUk30t3Ii:KrqqzqZOK21rgSoZUG0t3Ii
Score

1^/10
behavioral10
- Target
  
  libgcc_s_seh-1.dll
- Size
  
  83KB
- MD5
  
  5cdfad917e6f1dd7b4f16c1b1dcf3d8d
- SHA1
  
  e4838391992349f389fafdbeb3c602466fcef6f7
- SHA256
  
  eb2ad32024a3cf71042a8454f2d06ffae9cc0e1b97b8ab41b0ee760d27cf4b41
- SHA512
  
  6d7249937e19ac926f21f0993d7fdbdac695a1f705f9388a7403dc2a0516052a60ff0f3f83bbfa22958833d32a335042134bcd625484344d01e9d858e69349aa
- SSDEEP
  
  1536:0Es0G1e74BW7S09UpKUIGKg/VPCB/904xqFXj:fd74M7S01U22pKF0QqFz
Score

1^/10
behavioral11
- Target
  
  libgee-0.8-2.dll
- Size
  
  714KB
- MD5
  
  73c4d268a10bfb6fbd6c40bc37f3788c
- SHA1
  
  5c72856e2f1379fc90b2fafe422833495674ea05
- SHA256
  
  c6c15f0c22d36741c6968052a6fa0ace4bc202e065b0c4bf0f2fd252ed41de2b
- SHA512
  
  92850eba9ed1efcc444d6f6cda0cf75af0caf329481fe4c2202f42b319dd148a7e43eabffcf7b778d87dee9e4555e0c51e44a45f6476deb36182c5a0299f8840
- SSDEEP
  
  6144:soIe/AC+wBxzjVPukoWoR6uEU6uMCtmETd9iVJeHLHwj2E98vV/EhZ9YalKL:Pvxzjc6vU9LtlTdGs8j29/EDGalKL
Score

1^/10
behavioral12
- Target
  
  libgio-2.0-0.dll
- Size
  
  1.4MB
- MD5
  
  3de57f1cd66947602d18c04801227dae
- SHA1
  
  fc2f704ef72333516309335d83999909632044a1
- SHA256
  
  ff77bbff68e1260f96a9ac306e3266954443ccf10dc4fa1c878885ffb72e7890
- SHA512
  
  8cc2fa1be606192e0fcbae8e8adcd5d77a184b6a63aaf30e9e329b204e66edd3d5825a70be13a1bdc40471a3cb9418bb0fcc1f708cf9558aeca0d348202b52b9
- SSDEEP
  
  24576:rFnF2gQwiXOHP6fZqaNRwEoaUtnOWqwB5n8L8GdSbUishsR3DC1EL:rFnF2gQwFHP6fYaNKETUYLwH8L8GdipT
Score

1^/10
behavioral13
- Target
  
  libglib-2.0-0.dll
- Size
  
  1.3MB
- MD5
  
  d654a853a0eebf592dbf2227a27002fa
- SHA1
  
  4704b73aaf37e6c5db504b0d9aec1ce328699980
- SHA256
  
  3ddd0dfafa2dbad5d6c504daf57ef7d3cda9fe6492db37e95c1ef02882bf14f0
- SHA512
  
  6b28fa75b094d53e60a00f2a5bcc9350be4871f866eeb09ef5a3ba19050bbad5da21300cab7772369c490dc395ffa54fdbe98afc352d7a31561930e3c32107ab
- SSDEEP
  
  24576:QwkH3QY3UZp/g+/GomPS0KuYOW+EzI7L1CtvXbe89AJh23NFEiC:Q5AMUHsJKuYOWnzGwtva89AJh2dFEiC
Score

1^/10
behavioral14
- Target
  
  libgmodule-2.0-0.dll
- Size
  
  28KB
- MD5
  
  e698a4e49ea33d67bdbbe60604e601e6
- SHA1
  
  fdec483aec0780ec76549b19c744ad833d6b7fa4
- SHA256
  
  820dddadb84f1e6c11fb502e1cf4bbf4bc2f2f5c0807a81feb7c7212a357e05f
- SHA512
  
  2b96084c0c44d38c352b523e704496ae9e01658b6d73b76bfa7f46d3abd8ccedcf9cf4acdc922002dc1bdf3a6792f50e17a5859a7aa9a40b987f7fd3ca443035
- SSDEEP
  
  384:x4Dm1mmSo/pUMrDI+VbVcGQkAbG51+OuyU/ckc4b/cqrBfOg5YG8bp:uommScJ7V66KckcmnFb5YG8bp
Score

1^/10
behavioral15
- Target
  
  libgobject-2.0-0.dll
- Size
  
  298KB
- MD5
  
  0c44b7ba5dc95a1f1511724fe2bb138b
- SHA1
  
  909b757d358e23651c7821b69ca16992d44ad441
- SHA256
  
  8d7631324ab053df9cb4dc163e8b8af2efd912479c5bfcb5bcda68d8bd7ebc19
- SHA512
  
  53b697c846bb4a45a7e211fc74c699a88e6bd05b275cdc5f84ce2f2d6d81969bb1008843d387771f26d45353e33e4c721c166ac6005cf2bc27727d1608ef40eb
- SSDEEP
  
  6144:1nU10fvBLtoVsFVD9QxNx/QKLKW5FfR+UzzgGmKH1hfSN:1nrfhMDxdwUzz4KVhfSN
Score

1^/10
behavioral16
- Target
  
  libgraphite2.dll
- Size
  
  222KB
- MD5
  
  c3abb19e03e78629ccd7cfcebb5b4509
- SHA1
  
  b0dc081c32403e40458976cce18cab0b6274571f
- SHA256
  
  1c53fc8ebde60143f1b51e2bac41baa178998aa8d68adbaea6d405f55609e49a
- SHA512
  
  1cff50157b475f3159ffcea905cebe41e187a4b730482a0e485da2f8d102a6446ca873e9931003d1b8ea09c0152311d305b30feb815f4acd9c548c22b47c9a8d
- SSDEEP
  
  6144:zSNQ2VGfYYU+BbAeyHe0KHlhpdB9GEy/F3QRZ77:gufYYUobAZHe0uXp+F3o
Score

1^/10
behavioral17
- Target
  
  libgthread-2.0-0.dll
- Size
  
  20KB
- MD5
  
  be062a3461d6dacd70886d8f3f9f4430
- SHA1
  
  e866885fdf768d188521984208fc8f1e8c5fb808
- SHA256
  
  8c301505550dfcbd446dc30293daec8b7c68ba3d4cf22592b60e1c81d61a2c06
- SHA512
  
  4e62b83458283e749fc3279c3bab50a062f153c395736ef4b9cdd049d565b1760429699eb7a65b32084e7c35d83b4e067954854ccb59641b902e12f7a86e1196
- SSDEEP
  
  384:CZ1ZL08uQGhBRmqIr1oDVc7EwEZf+YnuP6OA8x:SApRnI2hcyuJAw
Score

1^/10
behavioral18
- Target
  
  libharfbuzz-0.dll
- Size
  
  387KB
- MD5
  
  bb4f77ff50b4b374890273d6a0c9ca33
- SHA1
  
  6137f6eb6bf1255675d98345c06b8253ac78a21e
- SHA256
  
  f920a8f1d7c6374114522ad5f54acdb4e9d49522004c5515a1da9daa901536c7
- SHA512
  
  f605ede6f7dc5fbd4cab30423b39222234d585ff70017b4f1429b3f889b21ef1a4b6c05a5828f5486d3538d319ee56ee4ad03abddfa4d4e471a5b1fb9f67aa22
- SSDEEP
  
  6144:8s9WFFoFHIt3UFgjB0+IxiyKpd5mAmZlO06wKyzo86a:anoFot/S+IxiyKZmAmW063yU86a
Score

1^/10
behavioral19
- Target
  
  libiconv-2.dll
- Size
  
  1.0MB
- MD5
  
  6c9f8150fc4cd26fef257da2e17b4d38
- SHA1
  
  dfae5a2f6fadca8d35939d04df38f6929d23bdad
- SHA256
  
  d459f5af82080b6df9b082a00d0edcb704cf6788eeb8894d94dc9c12368f7b58
- SHA512
  
  92b002ac2b955d4e397bd31e780a1804d15f793259409eb56b5e7b828e78293af1a452ab305730d429c5358b4dd6e0cd4ebdcf4e821be7d5e46fb35be2e3667c
- SSDEEP
  
  24576:QK6GjsjBAUZLYhwPKjOVbbTEZGavkg3NyeuQ6l9fH+fx35m:z6IsjBAUZLYGijOSZGaXBuQQ9el5m
Score

1^/10
behavioral20
- Target
  
  libintl-8.dll
- Size
  
  134KB
- MD5
  
  5c5123fbc985f9d4929ae99f6e29fde3
- SHA1
  
  c139353b3c26f57da2710db5b8831e00a276d55b
- SHA256
  
  906b460eee8f3448810f0cdedad1da2865ac04cb10944ddc0fac0dec0e5fdb76
- SHA512
  
  84ac1979a515275b15ad3e33feed6cab32b58d690a384cb07ba5db4377974b96c60f15b88ca2c6e54cefa517f7ea868bc0474a324c95f6320d9a252b29b67cde
- SSDEEP
  
  3072:KyrRu01KtyCv7k44Z5ipH0lxbo92mF5A3dH486:6IKtpvcopUlBpmFWh486
Score

1^/10
behavioral21
- Target
  
  libpcre-1.dll
- Size
  
  273KB
- MD5
  
  f3d4658a3d7523366c470bdb6778e937
- SHA1
  
  6229a296785b71dd1eac18f7b49462896a0c3b0f
- SHA256
  
  e5b759e5d54981d88c46f6bcb6798fe8ccbf358f07571131fc7fa19c55eb1667
- SHA512
  
  f553ff2f389793baafe61fcc92202720bbda4c62240825a73ffe4e6a76eec2474f0553f5785d968d521201807a060842292fcdf3114d8b7ae42ab3a91e66c73b
- SSDEEP
  
  3072:e5UWTm4j3J/+39XKpVvn/vtUAE8euwKNKrKIQVIfFSMrdyqDnVLORZ7E+ZvXanlc:3YmeWryCzTZ9ieP6+ad0UIUu0
Score

1^/10
behavioral22
- Target
  
  libpixman-1-0.dll
- Size
  
  668KB
- MD5
  
  e87ec4a739014fe35b2eaa175ccd26fe
- SHA1
  
  009f73e195b766cf9934bcd2faa6c2ebe4ee5a2a
- SHA256
  
  7fa19498c664e1845c495128a2932082ee1a2eb0a42c952ff8752e9c86b29274
- SHA512
  
  3f1f4fa2c749feba7801758685c7d6e989d6e34c3b9b88ca9d6c89209f6d6b4f11a2fd8e8fd6cece936c021db6cbb97b5a5e3e6d5f29f90ae3b13c00037e9699
- SSDEEP
  
  12288:up8LSXA2KCiRGdCXu0893gAem+uKkL+2WATZFUFa/s6XCydwTBspF39P:AXA2KCiRGdCXu0893gAem+uKkC2WArk6
Score

1^/10
behavioral23
- Target
  
  libpng16-16.dll
- Size
  
  227KB
- MD5
  
  d67a0108e0ed176132cf61cf778f189b
- SHA1
  
  e35f2be8b9b651b9dcd8fa8d70c3aabb7f5f6ac3
- SHA256
  
  33a312f875ed613320d48716ff790661d8fe952f4db2f8b63d2afdcd04e45f5b
- SHA512
  
  2dedcd6b8d63b78613bc918ca81426c440708b5606a55cedf608054323f2dc33063312797d6015f69228fb104c8cca860d0a728825b9253e30c98a17064999dc
- SSDEEP
  
  3072:A9dBhXkTzQDX46kB38HU785g714RPyks6k7z2+r/d9xiR1HU8Y24k9Cup:ABhMwsB3OW4+14RPykBk7y+zLiok9Cup
Score

1^/10
behavioral24
- Target
  
  libsqlite3-0.dll
- Size
  
  940KB
- MD5
  
  f09e850b276ffcc751f25e0817667390
- SHA1
  
  b6c9f1ae613d137a96ef78f6ebfe27a5a68e4a61
- SHA256
  
  56fa44d40352e5cdef2757ef7addbbee64109b68b719020b69c5bcecde3f7e1e
- SHA512
  
  449935bd53cfdae835cdf1602db475cc7c9de56a875863b755b9c5d9c6ad95991d99ac0173541dd5c2e9e3155808ae8a78528ed3851857c2cfcb521147a21fb1
- SSDEEP
  
  24576:vcfNc07ZwocSaHea7y9MElnaoY6uwl3DUmMp5S/G0huCxH:k/NGeau9MElna9wl3DUmMp5STH
Score

1^/10
behavioral25
- Target
  
  libstdc++-6.dll
- Size
  
  1.4MB
- MD5
  
  68ce17dc87778377ae04cd3875de6c34
- SHA1
  
  40271f33545478caa0e6c1497ae45f497da3ec6f
- SHA256
  
  9784b416ccb18c51cd00ef7fa43d29deca63b02a109468c4c0d62746a06c791c
- SHA512
  
  cc5302ea50b8ad59a1be991d4baed6a4055b5e64399cab313f1de1f000084d1c2080dabac918ffef1ab22081481abe4c5a29346d3065656dedef6b1e5a668a5f
- SSDEEP
  
  24576:uBC7KR+/52knJyA2hD6BtS1k1ofusCfffjfff0fffpfffXA0v45oV+u4:wC7KR+5lnJEhD6SkoV+u4
Score

1^/10
behavioral26
- Target
  
  libsvgbird.dll
- Size
  
  331KB
- MD5
  
  0715bca9e116cf7e2279eba8130a8c01
- SHA1
  
  8b0a057570f2818c5e990422c056ae5eb8b2327a
- SHA256
  
  afe3236ffe13bb4d04753f2b6c788f9917f9ae943b8e95d7602f020343842f6c
- SHA512
  
  872d9e12e6d6e745f6c20ce79d125a9dbab4fd8a60e4e831d176b30419dea1ac423743ebcb7fb9d4533fe5f806958c1fc9c1191d58872ea70fe0f57c83f229b4
- SSDEEP
  
  6144:WfM0eTQd8ctrPeKjO9Ndjqxv1hqrTVs8Yb0F3X:Z0eTQ/trmKjwN54UC873X
Score

1^/10
behavioral27
- Target
  
  libwinpthread-1.dll
- Size
  
  57KB
- MD5
  
  ac3a8fc7f0074a1b4aa2bfb28245f3df
- SHA1
  
  935d591fbabe7b411c9a7dc2fb5c5059755e943b
- SHA256
  
  8df4e35d3507fcf27c305a4433c1b5a205e312788e6eb386f8345bf9e9689e36
- SHA512
  
  59bb4223536db129ad4c23f1621b97b87c522ed1ebc4641731cfc6b7b0cb0aab5498db859e96b031f9b0e9926b1c46e67474c40bf3d6912ff782cdbcad89ec3f
- SSDEEP
  
  768:TMH9lSFd3D7FdsBkAxxBwm7TR7/dOvhd0xQGFicim3Yu/g/fd8rzZ37m:oWFhaNZwiVsvhd0tdim3Yuod8vZ37m
Score

1^/10
behavioral28
- Target
  
  libxmlbird.dll
- Size
  
  63KB
- MD5
  
  aa96b38f502a0a77e8f8c66b51e4fcab
- SHA1
  
  8230d1d80defcf2fe6f13b4f1d35874835121881
- SHA256
  
  e25d658ec2113f029c90ef10774b916371a503150a5a0be87e6cbf3c38915790
- SHA512
  
  9569d2607a4f2b7ae1b33c4ed838d031153eccb778138bb6dfd9b4646d041596e363a64c7ad80fc804462542e1ae76610ee322e8f7ef9cdfb09743374bdb702f
- SSDEEP
  
  1536:HJWDe8OYrpcBSSH1AP8+wCU+8fjSFvYfo2rrFvVIkfs61:Yi8OYr/SH1Ak+M1
Score

1^/10
behavioral29
- Target
  
  msvcp140.dll
- Size
  
  588KB
- MD5
  
  3388ba4d765db81aaafae89c8c13b66d
- SHA1
  
  a5f69e4da979177d1574221cd24a0b4bae76e5cd
- SHA256
  
  6f9e163b8da0b03a35ac72e5b289c5379853a074965d1eeb4258291321a8b71d
- SHA512
  
  983ec4612c6132d7efbc630639faf72c82c02eb0894d7ed7f87bccfc133851cd70852ae1d4aee26bc5fd5cf677bbad3652b3e6c8a49d305bdad5e1bc74330df7
- SSDEEP
  
  12288:q0/9lSfcDKUvdHQEZmIJGQEKZm+jWodEEVLJ3OGF:oEvdwEGQEKZm+jWodEEVJ3Z
Score

1^/10
behavioral30
- Target
  
  vcruntime140_1.dll
- Size
  
  28KB
- MD5
  
  b8cc7a732a6502f4e8a83144bbb09079
- SHA1
  
  90392dec839ee197111d8f41e4325a380c685bc1
- SHA256
  
  19c7ba2cc290b994bc4e446c4bc8885cda266e022d654cdd7ee1e24be8d75383
- SHA512
  
  68d0a59ad40e5772d618c5734f3ca6de07adb46eeef39ac838d1856a7d0438bdaff51849a9ed463621bbe1e7c091321e72c3565823a11c0dc6a0101181b18261
- SSDEEP
  
  384:qsFi8rEW2UUtAAd928q4qXnU5fBLn8umItRWqoVJtYff5Bz/U3ZNv5Wr+KWd6:U8gW2UUt/yXgBLn85aRZoZSf5sZVZ6
Score

1^/10
behavioral31
- Target
  
  zlib1.dll
- Size
  
  89KB
- MD5
  
  ed334ca4aabfb609098a30f5052d67fe
- SHA1
  
  4f092532810c0779852773f74174daccc7711893
- SHA256
  
  730b19520c9e73c281c54fd1a05279bc55d936eb8545c2f8511961520a25bdfc
- SHA512
  
  c880b49d9b93a4eaf912d75e29fbe5a77adafc47520e4ed48c2bf36e6a9a631593db352b3c5b333092a6afb73d05fd815d411aec6fa4345fa234593240af8db2
- SSDEEP
  
  1536:qaL65D3KjLTpgF/jXUjBsZKyy7l+pqnToIf/IOlIOqN6ewUtCGF4e:L65MTu/4j2ZKy+9TBfxvqN6ewUsGFL
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32