f58c14370ca887ef557112732534fa842b8e443719285a962f1a4d66400a7123

General

Target
rFactura-11-03-25-00000118.exe
Size 647KB
Sample251203-cfajcatlcj
SHA256 f58c14370ca887ef557112732534fa842b8e443719285a962f1a4d66400a7123
MD5 fe5569462d9ca145f78bc520e1e9a53e
SHA1 20a1b6463a9f57b58a89995c193c391dcb1faef9
SHA512 bbf8c6d08bbedbb0ef24659bd950a7c65c2e4dc1999d64b5e1f4b2941bb34e49af7dbbaa8207e77972cf2cbf47aaaed0decd4fbe8050a1284ef70a044d2ca82a
SSDEEP 12288:9kTBokdIW//D6gMx1ySwExWKVMPI+SOUe9c+mCJD9EHezRH++Sq9:+tNdIW/r6gMxzwExWWk59c+rJREHep7B
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  rFactura-11-03-25-00000118.exe
- Size 647KB
- SHA256 f58c14370ca887ef557112732534fa842b8e443719285a962f1a4d66400a7123
- MD5 fe5569462d9ca145f78bc520e1e9a53e
- SHA1 20a1b6463a9f57b58a89995c193c391dcb1faef9
- SHA512 bbf8c6d08bbedbb0ef24659bd950a7c65c2e4dc1999d64b5e1f4b2941bb34e49af7dbbaa8207e77972cf2cbf47aaaed0decd4fbe8050a1284ef70a044d2ca82a
- SSDEEP 12288:9kTBokdIW//D6gMx1ySwExWKVMPI+SOUe9c+mCJD9EHezRH++Sq9:+tNdIW/r6gMxzwExWWk59c+rJREHep7B
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 681382f3134de5c6272a49dd13651c8c201b89c247b471191496e7335702fa59
- MD5 2ae993a2ffec0c137eb51c8832691bcb
- SHA1 98e0b37b7c14890f8a599f35678af5e9435906e1
- SHA512 2501371eb09c01746119305ba080f3b8c41e64535ff09cee4f51322530366d0bd5322ea5290a466356598027e6cda8ab360caef62dcaf560d630742e2dd9bcd9
- SSDEEP 192:vPtkumJX7zB22kGwfy0mtVgkCPOsE1un:k702k5qpdsEQn
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 cb958e21c3935ef7697a2f14d64cae0f9264c91a92d2deeb821ba58852dac911
- MD5 13b6a88cf284d0f45619e76191e2b995
- SHA1 09ebb0eb4b1dca73d354368414906fc5ad667e06
- SHA512 2aeeae709d759e34592d8a06c90e58aa747e14d54be95fb133994fdcebb1bdc8bc5d82782d0c8c3cdfd35c7bea5d7105379d3c3a25377a8c958c7b2555b1209e
- SSDEEP 96:oyqZ4zC5RH3cXX1LlYlRowycxM2DjDf3GEst+Nt+jvDYx4yqndYHnxss:oyq+CP3uKrpyREs06YxKdGn
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6