Extracted

• • Target
    SQLite.Interop.dll
  • Size 1.5MB
  • SHA256 2635857df1a52f404bdfef0df36b7b60087d3cd2fba6517b856dbf7916a44fa7
  • MD5 895cde0ba3ec5d26e0a33a59f8f817f5
  • SHA1 4d7431dc44b1a4910789ebe00c086f3729570ec8
  • SHA512 b07bcce44018f3698673150318e9d37635fb23de86bd38ff39117d5e33fe58683461419edc04a72387e9dc0e37395b6b4f4b31f100787390d2d01f8160466068
  • SSDEEP 24576:VJSqdekusjxHx0ih/wt7pAzLFV4darSjzWLwXtxH6kmf1J8LV2J9KlZWB4KqsdT:VJS0ZR4pyLFV4darSjziitxHDbLG9+u
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral1behavioral2
• • Target
    Setup.exe
  • Size 10.9MB
  • SHA256 84cd6aeb169a487200f6cba68f2e1b495b82001b3c7eba5fe5e055809c2963e4
  • MD5 b18545d3943d8a24e5052cbef3b3508d
  • SHA1 44fab19f04fae1f3066c3aad6baa13eb2defd0b3
  • SHA512 bdcf9af047ebc07f92fe8461e742e56eb8f4a79c9a2f642d014152953cddfb233d9eeb9108e092bd97c6a643073a01e61f0ddfb98228ee92be8290cac4db5d3e
  • SSDEEP 196608:ZXNOwo8+xWPtvx/zlRLVb5M1d+7LWI9BeapUCohxXViEXUpk4Rlj6mTMmx:BP+xWLjJb5Gd+76I9BeapcAfm4Rlj6xu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  acrstealerstealer

  • ACR stealer,GrMsk

    ACR stealer (aka GrMsk stealer) is an infostealer written in C++.

    stealeracrstealer

  • Acrstealer family

    acrstealer

  • Detects unpacked ACRstealer payload

  • Suspicious use of SetThreadContext

  behavioral3behavioral4
• • Target
    VCRUNTIME140.dll
  • Size 99KB
  • SHA256 5e197a086b6a7711baa09afe4ea7c68f0e777b2ff33f1df25a21f375b7d9693a
  • MD5 971dbbe854fc6ab78c095607dfad7b5c
  • SHA1 1731fb947cd85f9017a95fda1dc5e3b0f6b42ca2
  • SHA512 b966aab9c0d9459fada3e5e96998292d6874a7078924ea2c171f0a1a50b0784c24cc408d00852bec48d6a01e67e41d017684631176d3e90151ec692161f1814d
  • SSDEEP 1536:RCKWZGuEK0mOLSTxoPl9GIcuZrxi4hXX9oix8H+NCIecbGShwZul:RFWY1WxgGStJ8H2CIecbG36
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral5behavioral6
• • Target
    python310.dll
  • Size 4.7MB
  • SHA256 ffd61c0ef55bb2d3dbbd8c91c20cf66fb658369d582e1d08faf57d3d8bb9ec51
  • MD5 d1132397298be735f152dab0c834c4f1
  • SHA1 3bc2e6c9f7dc5bd5cd0ac86271ea149a76fd8af0
  • SHA512 2ccd148d7efa1266710336eeac4167b21d89b6519c0ab9b0bfdda9b6a0c8d73fa2afff2cb89a6a33af21e8184ad0a2d568222d41c0137f839b87bff71d0a143a
  • SSDEEP 49152:kos2X+6vlCIrcZ/OJswC72N2w6XW1tQQVIMZeCC7uLiWpsuvmqoN5SY5wYKXAIGE:RdrcZ47BLtmWpsuO0Y6GiHRMmE04EE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral7behavioral8
• • Target
    updater/AISuite3.exe
  • Size 2.1MB
  • SHA256 9b878b7e8e9c6fcdcb0110bdb5f278787829f04a43ee5930d367cf86d571aa27
  • MD5 b92e37d8c2b527d60780421f25bbbd48
  • SHA1 38ef220c16313116027e03808200114ba6db109e
  • SHA512 6cb6687e3c9a8a0b3e4df969c58e1f24e4c72884cb122c9ef7a3f6b06268a1f58cd5ecf3106c6729865b985d9f1aab1b859222a2b01d5266b18f91dedd8c7254
  • SSDEEP 49152:Xt7GwJ8jh6iOZgWkHcFe4F9t/REHL7HeHrTHIHvH2H/HOHaTCo8h4NDGoG+Xo6jb:dUl6i6TJg10XxV+eLdSAPZ+UiS1FTz
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral10behavioral9
• • Target
    updater/AsRoutineController.exe
  • Size 2.8MB
  • SHA256 96790563caf394d18dbd583a7e27d6d85bf4caafd588045923339bdcfcae6b1e
  • MD5 8c9231025faf86b78906b6c847531ffb
  • SHA1 7133540d3c29e87d5aa8cfecaa7c2a50789d5844
  • SHA512 82d3ace8c26c92967b25554cd74c07f7db533a69e8a87942b958d30f1db162d9a6b0f8bf485fdd887e526c9d8ef972da39f52c767934acdeeab2a5afe588c172
  • SSDEEP 24576:tTr1nNLQSC8eafj4hw5liomr7x4wQOTwThu3DzRr9gYhJvJ3LAr2J:dr265KpO4Rxgig+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral11behavioral12
• • Target
    updater/MiscTool.exe
  • Size 997KB
  • SHA256 5e453043fd7e3d92e0af7bec7e9d304dfc8c501cc19ffd783bd6a2a4bdded1da
  • MD5 daf3108790446ea61533ed86e4c501bd
  • SHA1 54a5172a2a367986b20af937a02e37d4ea1e6fe3
  • SHA512 987029f4cc5f5691a8d2df925dbc3d79b7bcb02fe5df0c35993bfad98590e364d7278be9721f38240e447efe10bc8fd515b99b18aa9c3bfae945c6eabde89b83
  • SSDEEP 12288:2mwFZmbnMtWLiHb4lTVDqoTgZU6sfdBXeXFUC888888888888W88888888888Vs:2mwFYbMsL8b4vzgZ+wXC+s
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral13behavioral14
• • Target
    updater/NvStWiz.prx
  • Size 432KB
  • SHA256 c2ad5bd189df04b39be18dec5cd251cf79b066010706ad26d99df7e49fd07762
  • MD5 9e82e3b658393bed3f7e4f090df1fbe7
  • SHA1 bfff954b8ef192c01af9fb5d9141a21279cb9c31
  • SHA512 de6a1e62d4e33f807d9c04f355a762717eedbcf540e747a97ba824871d4a1f144f4929141df333711d42af01e441dbbcecbb25a6a4f8ec073a024d94197b776b
  • SSDEEP 6144:9S4bS5XFvti0A0YqsAtMZDeJmdzh8KL5g3AepeV2fbRahYzUM3:9SMCXFFe0YqsAtEeJKCqN2jRahYp
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral15behavioral16
• • Target
    updater/RegSchdTask.exe
  • Size 792KB
  • SHA256 0a9b90b106941b712d4a417ecb962c8ee0b2d91caa7b5e609ab95dace7f2127b
  • MD5 cf865d4cb24e6dd00ea8229607e755ba
  • SHA1 8d525c0273940b1c92e154616158fd9f2d8f5206
  • SHA512 54eb8186111e1bd6836e0bfc976def2facbb945176a2eb853c3e72544521fa6d6cf90431dc9c8cf8ffa200ee744a234dd9d55cfc3ffbcc8f97e8a53d3487d6d7
  • SSDEEP 6144:PrzI9rLEi2SGWthYHKvfQKKMQppcLqyI141pt0QgcA/QYf8P29N7A0A7WCVby45d:XaoZa6HOfmrc414HSQgT/iu+5pIvrjQ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral17behavioral18
• • Target
    updater/Splash.exe
  • Size 1.1MB
  • SHA256 cc5310ce45a6234c8e005a312977bc94c158e9bb8df99a9495db4220ca9bef61
  • MD5 6d96096aeb400c5585791dc1d31676d9
  • SHA1 ab725ed12988b8440efcb4520dbae9009c6ee8f4
  • SHA512 a1164ef480a5a7cba8c27058b9fc4934dfd6ba3273008e61c6f7f977cbf2ca86ca4e91f5d500e9ba90a25b1f1c7609beec276ce7a8f26e40603ecc5c00d2d0f0
  • SSDEEP 24576:sl0mNEC5I5mECyrGZkHn8LYkIiEk5pIvrVt9:slXNC5HKIiEap89
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral19behavioral20
• • Target
    x64/trading_api64.dll
  • Size 282KB
  • SHA256 f1eb582e607a1e43cdb1654bfb7cb29ad46f6728b3fb89a14f7727e0e8daab69
  • MD5 2bca4e2c047ec969cb3cff277e7fc184
  • SHA1 c4b5b00b605e59c6fdcb6731f2e53069506e287a
  • SHA512 3819178ec650298157b1d67317e0895cb92709b106d0d8525921e341eba5e960f42434e010066bb405f1ba1619adff1a645ede58e16c4b2d88df2c90611a6cb5
  • SSDEEP 6144:Aa0EKzmilQBrUssevOkHcAxilMrCynC0bcLd1x:B0EZbr3se1SynC9x
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral21behavioral22
• • Target
    x64/tradingnetworkingsockets.dll
  • Size 4.1MB
  • SHA256 fc4a65ff603bf1f4bfe323de1866145ae1e006aa656799fd134dfa63d92d47c1
  • MD5 3cf26ce759c5e261fe3ecc6451b8b08e
  • SHA1 b5da110034fe394a4020367404534903764473fe
  • SHA512 e7b543483f38bb6338490b5c8f5da6f95e0d78b45f2b26d898cc3b58cf7c359952bfe413414cb6cd1532c3c6fd7a860026b2bec7b6d0ddfbee9a1385a62e14f2
  • SSDEEP 49152:kGtlqhcIU6ilVwASObX9F+LWDumqrJjAZVT4kmrqEUAYVxkG3q+XRQsmqkALD4z4:M+dl7+8z1mqkA8lv0bH1bBGZZs
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral23behavioral24
• • Target
    x86/api-ms-win-core-processthreads-l1-1-1.dll
  • Size 17KB
  • SHA256 e5ea2c21fb225090f7d0db6c6990d67b1558d8e834e86513bc8ba7a43c4e7b36
  • MD5 29001f316ccfc800e2246743df9b15b3
  • SHA1 dc734266648d3463c1f8d88c1ce7d900a4e3b26c
  • SHA512 4cffc0c6f94fcd1155909993c622b9103abd7a7bce88742a10abd6a3496a334d667a39bb601f99eb174aa847d7dae056e0d9769754ca86320579b262a20a6599
  • SSDEEP 384:WRtwDfIe9jWfhWC+Y3DGk8ZpH3GCJErra8o7Q+Y3DGUKn8JN77hhET:ape9A5DGkiRBEXaR70DGa3hqT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral25
• • Target
    x86/api-ms-win-core-profile-l1-1-0.dll
  • Size 16KB
  • SHA256 d00a0edace14715bf79dbd17b715d8a74a2300f0adb1f3fc137edfb7074c9b0a
  • MD5 6ee66dca31c5cce57740d677c85b4ce7
  • SHA1 8969db03f98f9548caf8e2d8c7f2f5cd7071f333
  • SHA512 592e3b6c689a0d6c87079c54c3e13e6ee1fc0c5c770abc854040e85464687c46f0a558be22f8759dbc4a100810386ee379ffe4359cf9091d9afae548bc597be2
  • SSDEEP 384:WiIWfhWx+Y3DGk8ZpH3GCJErcx3l/r7+Y3DGU78JN77hhC6UHR:doDGkiRBEWV/rxDGT3h06UHR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral26
• • Target
    x86/api-ms-win-core-rtlsupport-l1-1-0.dll
  • Size 17KB
  • SHA256 d11093fdc1d5c9213b9b2886ce91db3ded17ef8dae1615a8c7ffbc55b8e3f79b
  • MD5 0069fd29263c0dd90314c48bbce852ef
  • SHA1 dfb99c850a69e67e85f0a0985659f325bd8f84fc
  • SHA512 71965e8dd2fd81d0c6dba4dbec8d2d1bfd4a644ef6bba4f6027de4bcdf9c07da16f27f2156c21b52e678c75f0a93a4bcbc3e1942f0a73f1eea5ff64b70662f70
  • SSDEEP 384:WCGeVxWfhWD+Y3DGk8ZpH3GCJErYtN+Y3DGUO8JN77hhTew:3GeVmyDGkiRBEojDGa3h9ew
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral27
• • Target
    x86/api-ms-win-core-string-l1-1-0.dll
  • Size 17KB
  • SHA256 3807db7acf1b40c797e4d4c14a12c3806346ae56b25e205e600be3e635c18d4f
  • MD5 2e5c29fc652f432b89a1afe187736c4d
  • SHA1 96f8480b9339411d5d8c94918e983523b1a55c56
  • SHA512 fe1135532e18127f2cfefaaa4a19020d6c790374f648dc93383d58ee52b147d1451af01b8624234bd5d77abe2451eb3e15cbe72a19d283f00cf78c05c43041df
  • SSDEEP 384:W4yMv9WfhWx+Y3DGk8ZpH3GCJEr4ey/+Y3DGU888JN77hhnY1:DyMvaIDGkiRBEsnDGX3hxY1
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral28
• • Target
    x86/api-ms-win-core-synch-l1-1-0.dll
  • Size 19KB
  • SHA256 8bb38a7a59fbaa792b3d5f34f94580429588c8c592929cbd307afd5579762abc
  • MD5 979c67ba244e5328a1a2e588ff748e86
  • SHA1 4c709ce527550eb7534cb6362afdb3623c98254e
  • SHA512 49f3c3319aa462b445c6a0b816e10034f6e5a9cf1250ea30b348cfa1ef71525e9f62e2f13253f61375f51fc574847de0d509cffa95103771be356327d5fef90d
  • SSDEEP 384:Wjdv3V0dfpkXc0vVaCWfhWt+Y3DGk8ZpH3GCJErHZpn+Y3DGUrUN8JN77hhYl:Wdv3VqpkXc0vVabkDGkiRBEtplDGEUq8
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral29
• • Target
    x86/api-ms-win-core-synch-l1-2-0.dll
  • Size 17KB
  • SHA256 9ac63682e03d55a5d18405d336634af080dd0003b565d12a39d6d71aaa989f48
  • MD5 659e4febc208545a2e23c0c8b881a30d
  • SHA1 11b890cc05c1e7c95f59eda4bb8ce8bc12b81591
  • SHA512 010ab6d3971fabd2a956f891b8d9d20ef487e722443b2882a1a329830dc5c80d262e03a844cd3f5c3e4efcfbad72b9e1fbbf7d9dc6cf85ed034d84726946ce07
  • SSDEEP 384:WHtZ36WfhW8+Y3DGk8ZpH3GCJEFxMDD+Y3DGEC8q8JN77hhFGT:EbDGkiRBEsJDGS13hj+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral30
• • Target
    x86/api-ms-win-core-sysinfo-l1-1-0.dll
  • Size 18KB
  • SHA256 1fe918979f1653d63bb713d4716910d192cd09f50017a6ecb4ce026ed6285df9
  • MD5 cef4b9f680faae322170b961a3421c5b
  • SHA1 dd89a2d355df989bbd8648789472bfe9c14afcd5
  • SHA512 f56617290d4ac25231631d708a6c8b003bdd358bae9672f7dee539a96b292c13e04c65ba5f05937c52f73288eb3dd7cba479ed030942a0d9d3a15512548fa4a9
  • SSDEEP 384:WBTnWfhWt+Y3DGk8ZpH3GCJEFxqIDh/h+Y3DGER6vJ8JN77hhHWT:0TsIDGkiRBE+IxfDGM6vW3h5WT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral31
• • Target
    x86/api-ms-win-core-timezone-l1-1-0.dll
  • Size 17KB
  • SHA256 a108a8f20ded00e742a1f818ef00eb425990b6b24a2bcd060dea4d7f06d3f165
  • MD5 69df2cce4528c9e38d04a461ba1f992b
  • SHA1 bb1d0da76cf696acf2e0f4e03e6d63fbad4325aa
  • SHA512 4d02eecdda0fffc10d5509830079984c7a887b4ca3a80359aa56117b302dcfa594b0710c9f415c823d1674b5c689d31aade44f21750ccd7d53010e67f0b6f0d2
  • SSDEEP 384:WGOWfhWc+Y3DGk8ZpH3GCJEFxi+3T7Tu+Y3DGEu8JN77hh2KI:5XDGkiRBEm+uDGQ3h7I
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral32