91412b3c71fdc5bde523e3d568700cdc6705dbe107a2f49830966707fabf5061

Resubmissions

15/04/2026, 20:17

260415-y2wjlahx4p

15/04/2026, 19:56

260415-ynyf2aby6x7

Sharing

Copy URL Twitter E-mail

General

Target
Hydra_1.0.2_x64-setup.exe
Size 349.5MB
Sample260415-ynyf2aby6x
SHA256 91412b3c71fdc5bde523e3d568700cdc6705dbe107a2f49830966707fabf5061
MD5 7daf02eab3c75bee02d1b92706137d51
SHA1 bc39cc36b3e86acd46cb17a3625e1c8c2ca378d3
SHA512 6fce552c94ad03ee3d7b103865c2defd0cba9039fa05627f74b62882acc7f491e9d073ad488ad2dc6414548fd0178dcbf1ca04df8ea7b0ea0fb41b1832aea9ba
SSDEEP 6291456:oGueUU+OD9KW58gtycKipvPrQzgeeWXhHu19QBmC4vqCrXmBPTX4cAS3mR/T04T2:tRA9gQZgvWXhuKBwV2tz4jKmNTo
TLSH
T10009333180D2CDD38CE481F0D858A7D96589FA546D40CE3FB19BD0BE6EDB3678AA4316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Hydra_1.0.2_x64-setup.exe
- Size 349.5MB
- SHA256 91412b3c71fdc5bde523e3d568700cdc6705dbe107a2f49830966707fabf5061
- MD5 7daf02eab3c75bee02d1b92706137d51
- SHA1 bc39cc36b3e86acd46cb17a3625e1c8c2ca378d3
- SHA512 6fce552c94ad03ee3d7b103865c2defd0cba9039fa05627f74b62882acc7f491e9d073ad488ad2dc6414548fd0178dcbf1ca04df8ea7b0ea0fb41b1832aea9ba
- SSDEEP 6291456:oGueUU+OD9KW58gtycKipvPrQzgeeWXhHu19QBmC4vqCrXmBPTX4cAS3mR/T04T2:tRA9gQZgvWXhuKBwV2tz4jKmNTo
- TLSH
  T10009333180D2CDD38CE481F0D858A7D96589FA546D40CE3FB19BD0BE6EDB3678AA4316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
behavioral1
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH
  T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH
  T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH
  T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  Appraiser X/AppraiserXBackend.exe
- Size 30.8MB
- SHA256 e316078974031d84b515ddfc221f765519f014ac97e2cc2e6a007f207bf9f2cc
- MD5 a7be7fa8dc7b94e067583055eb56a1b0
- SHA1 b45545bf7992c299d3a5185efa324f3a07811b27
- SHA512 12aedec757d53a11910bc2e21e48b49da021b388773115c7049f1bd5bb68288e8a26b82affd2101ff33874eaa3823da270f7e2108b59a4b263ff99199735e71d
- SSDEEP 786432:uB0wg2fGs198kOZY7y1UerLXHaZzvVppUdxbbkF:Vs19V7UUGHEPpUfbbkF
- TLSH
  T13267339D2BF00556D82F2439B8E59263D3F0BC35162189EB1FC06AB51D772EAED39360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral7
- Target
  Appraiser X/Tesseract-OCR/ambiguous_words.1.html
- Size 17KB
- SHA256 7361d4c477bd35d5fc66ce8a9bfb5c2b4ae9eab91e42148bed6873067d98997f
- MD5 b79f037021f0dad0bfae194a39a29c35
- SHA1 5a09ec2a451b0c1f9b3c723f005de1d036592571
- SHA512 9fe7398e81b3212ed4738edab960b0a5c51b7a5ab0384ce2aedb395db2e3db292ef8194ec09659eed19812813c1aa94c1aff0abf063cde223828f4ed88799e83
- SSDEEP 384:mic/7NlHRV3nP73SXoFn1EppMkm9mSj8a:tc/7/HRRD3nippMmG8a
- TLSH
  T10882D96D9D52651517B3CB71FF53E100FBA501304E4BA2A5BABDF101AB44A7016E3EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral8
- Target
  Appraiser X/Tesseract-OCR/ambiguous_words.exe
- Size 58KB
- SHA256 ebc5ba80794c8f706b0cb9c42c000320f4c92ef36544392b62f9284f760e155f
- MD5 bfa29463ca6a72ee2ae387502a499795
- SHA1 667970a832e69123ee6f5d37246e52d385a753ff
- SHA512 9ab62cfe0af54b8e1019e1e8a7deb6d4ff081617a3c80dff8a5558ff5cee3dab1dd69b2fb1b9981bb29ab99c18ede0400a5955cd65b6e6a31702f241903ebc10
- SSDEEP 768:TsCAyCmQaktKHVVNmF2G0W21/xCGrjS9IpmwQ4iBRQN/Ylc43lU3iPmbLY9:uyCmQakAHV6YG091/AGrjeIUBC43U7A9
- TLSH
  T187436A0B779324FDD547C5B481DE8372EC31FC210936AAAF5AA0D6711E20EA0A72D53E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Appraiser X/Tesseract-OCR/classifier_tester.1.html
- Size 19KB
- SHA256 5454792d8f7813aad67795ffb48b6ba3742fbcad5ad7e95b3aa4e73accc032c6
- MD5 592a41340cd07568fe900b4e67d9a76a
- SHA1 5f195dfc5994dbc96b72bc65c3d417df517363cf
- SHA512 2ca00cc8ec350989dee19fd54d02816299c63eb986639ab5458bca5f2dc57510e045b8498f5a05457f0f1503594143191b0474d118c61b0d3bb121bd788c8381
- SSDEEP 384:Jic/7NlHRV3nP73SXoFn1EppMkm9HOKTUn2Q8a:Qc/7/HRRD3nippMH+n2Q8a
- TLSH
  T14A92E86A9D526C2616B3CB71EF53E200FF9541308E4B6265BABDF142AB40D7015E3EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10
- Target
  Appraiser X/Tesseract-OCR/set_unicharset_properties.1.html
- Size 18KB
- SHA256 e5848c9eb844d9f4002b1bde9da6a373320e6ef31757e486103aeca64c26c5c1
- MD5 740f854f25912f1da00d2519ae41adf4
- SHA1 97e4f4e766d329a8c51658f73015e65e30b88b26
- SHA512 7a2a11c04491ac8c043191b97b01286c18ec8e77da0a1805a9e14ae356075a56166f9ef6174acbe1368ef6d961022064380a64793a0f4de8f0d9b54e7fa5f6fc
- SSDEEP 192:I25icth7o14c2mgjzapG9hAKFg7Ce+xgrXQto8npJ+u3S1VwMKhMsY01EppM9a7U:Zic/7NlHRV3nP73SXoFn1EppMkm9es8a
- TLSH
  T19282DA6D9D52682616B3CB71FF13E200FBA501318E4BA265BAFDB242EB4097015E3DDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral11
- Target
  Appraiser X/Tesseract-OCR/set_unicharset_properties.exe
- Size 247KB
- SHA256 1f66b2addefcc929531a0ce101505e2bc884e375fc9189c6698f075220656ca2
- MD5 5201ff1af146c5747fcc0eb0d16ccc3d
- SHA1 193bd95c221cd5ce8826e6af06ad6f51e62a8ab0
- SHA512 b44637fd775b5a5bd853801de6b54353a3d5a7586d0bfd99874a552786032296636e4ab19ae3de1fe40d7cb235f56aafb73f225184c61b62524755bebeab2d1e
- SSDEEP 6144:h7ENdoZ+6m0F0SoS2QAelZlroHJs7Pl05gl0ZmmiLCtHPxWDq1rxjCenYj7:h7ENyZ7m0FdVjlZlroHJs7PlV0c+tHPq
- TLSH
  T1D3344C5BD3931CECC91BD17443AA9232B9317C650234F96B5790EB322F73D509BAA728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Appraiser X/Tesseract-OCR/shapeclustering.1.html
- Size 18KB
- SHA256 95391fb8bac0f788eeab08038c3cefd17a591c43555356a16a6350add59f48b2
- MD5 351555f81844b4f43729b9ba2234c0bf
- SHA1 a8b9cbcbca1fdf62a651de44f8409e5cca949bf3
- SHA512 d2ba177d5dc5aaf831e78d778ec402e79e23973056a8d1ebf79f79afad72ec6114a1c15fdb7cf64a7c00c0182fb20d70f7bf5c89be414fb172f69511e503f212
- SSDEEP 384:Dic/7NlHRV3nP73SXoFn1EppMkm9OE38a:Wc/7/HRRD3nippMOE38a
- TLSH
  T1A492FA6E9D92681A16B3CB71FF13D200FB9501318F4B6265BABDB142EB4097015E3EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13
- Target
  Appraiser X/Tesseract-OCR/shapeclustering.exe
- Size 201KB
- SHA256 56a00a4df10d6e9921938b474e2148ac0caa1b97362644a6301f18b128d9f1a7
- MD5 fcc4b8638c0ad9e2c22f8fe1057ae0f2
- SHA1 6afbdb67e453054a2cfde49dc72656dd7bad2581
- SHA512 6f77dde0384aa70e1046a144e9332b898a8f2681c3ab713f0eb4c735bbee62792d55bd9d82fd7b5af270a95062006c026580c46c0a64e671953815c9ab750452
- SSDEEP 6144:+w7cdYjh/sfsm3A05kIRbhimf52yp7Sks7i:+wIdYlEfs25kSPfnSR7i
- TLSH
  T12A145C5BE29358FCC91BD174469A9273E8317C150338F97B4BA0DB311F23E61A769728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Appraiser X/Tesseract-OCR/tessdata/ScrollView.jar
- Size 25KB
- SHA256 96138e6b05aedb627a30ca285aee712d14d9441c57f00e60fb0a957617854921
- MD5 507521a3de602a78838045cc658d1822
- SHA1 62a2d9a1929ef316b49ebea0aa0e5dd83a3850a9
- SHA512 a338e146f6bd45419897cc2d129b847c644f7ffac4ad7d12ae4f6f8b042084f9a2a33c16d0d2afefa41e40284f32911367458126e007c10b5544095fe79aa9a9
- SSDEEP 768:CNNrCjO4KeUwixoQwDKnKGovsIPCMe7IyJXsZt:KNslKTx8D0KG7IPsIwXI
- TLSH
  T14EC2BF97BF9EC048FB2794B151E483B62B05D1FBD302B206089A6D951C10E6F5B1E7DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Appraiser X/Tesseract-OCR/tessdata/jaxb-api-2.3.1.jar
- Size 125KB
- SHA256 88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06
- MD5 bcf270d320f645ad19f5edb60091e87f
- SHA1 8531ad5ac454cc2deb9d4d32c40c4d7451939b5d
- SHA512 93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790
- SSDEEP 3072:2GUd2W6Qtc6cpYWkQHTT3OHPrG0Tx+vkJV0/uV3jtqcCCiFv5Z:xQtcJ1kjlTI4K/YcrFb
- TLSH
  T10CC3BE293F808467DD1B887B9134993376BC10EB9B072A5B2671C48399F1BB64B46FC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Appraiser X/Tesseract-OCR/tessdata/piccolo2d-core-3.0.1.jar
- Size 122KB
- SHA256 9acad723136ddb996e96f5d488b9b046753a1d4c60ea639d5e3f9701deaf60ad
- MD5 497d6dea9b94ee99d5d680b9280334f1
- SHA1 aef6a9c6c85f2e2d06a00f05cdb1a9fc91c0b257
- SHA512 3bdfa3e9bac94ef28fb7910030fdd99b25bc91a03f23e743e6ff1a35570df2573eb1fc290fc0b1e8ddf979a9b7a9f99e371c7f30408470c30497124c5beb6787
- SSDEEP 3072:nKXSw+uLxnoURaeQ16+b7CbBQlXc65uJouIVr7hC:KXSjUxoeQ16L2OalhC
- TLSH
  T120C3D01CED94D51BF337E33D118EC79FA804D688B8D5B05625A216CB8AB0A925B437CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Appraiser X/Tesseract-OCR/tessdata/piccolo2d-extras-3.0.1.jar
- Size 146KB
- SHA256 ba45f343e9ebc06c9b4ce165c8bb539b11cbf59e93d1df48489ab173f74375a8
- MD5 1dedd993858efcb700fab678698ad224
- SHA1 1042bdb624418df70052db30d63cdeb7fa0e3a42
- SHA512 cfe35ae4bfe2c4fd69ed1fb2a8d4b725c2996f1bc76eb8cd620dba5c1d5b90904e39c0f28c95b5aa27dd78c3e758426dadf3c5883f007ce191bdc24eef3974e9
- SSDEEP 3072:nTkOgbGoosv0Cg3ALIrP0hWW+g7OArzbe+hMkJUOsoFUbMAjqV6jbiig1Q/KAgrf:nTkOEGoBv0Cg3ALIL0hWW+WOArzbjhMk
- TLSH
  T183E3B01DE9CDFC56F3B3B13D90974A1EB62F84C47815A0566A320E8A6F70B511B03ADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Appraiser X/Tesseract-OCR/tesseract-uninstall.exe
- Size 151KB
- SHA256 6b5e5e24eda6092f530692875302e03ef8c34808b624b9f927dc551b22721ada
- MD5 140682cf619cbbab7c7b25dc49ebcc85
- SHA1 1be14dd7701306fac3ee56d7aae4d6a8db6b90a6
- SHA512 f320a42ed05382c72c76a5d021fe310102fb0089a3f7b300b72a53c072de8222c0fbe4e70bdfb4f1c08173749675fa9a7630b8ec8a22412e5efea955be4d02a6
- SSDEEP 3072:/+cleCRuAXrLNxF3TIi4df+5UN3vOqoqor87:mclpzFEhQwxhoo7
- TLSH
  T179E37D18BB16DCFBF8274530548BE67B09307D7189998A5BE7812B6FDC727A1960B303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral19
- Target
  Appraiser X/Tesseract-OCR/tesseract.1.html
- Size 41KB
- SHA256 bf41994d01d89e7082bb35c7b0fa4f5d6dcbf368ab35829b4d0098421f19dc01
- MD5 2f3e9258df15e5c341a9dea90c80d269
- SHA1 ad46cc5002d4aeb8873d44df04452194f36f4f99
- SHA512 95aa44e8821720238fdc1e83af24a5c1b506ff3d6673b8043f3849f6e090173eb0c816332adeb5137deddd4cd6334b929d4fe76d8d24007e320bc8b73ee03676
- SSDEEP 768:hc/7/HRRD3nippMCfPFtUcbUZ08kD3wsajK:u/HRVXiICfPzb2hoAfjK
- TLSH
  T19213C6669541AD1E0D7382B29A15931FF69D91ACFE0B81C035EEF2B39B44C6016B3F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral20
- Target
  Appraiser X/Tesseract-OCR/tesseract.exe
- Size 84KB
- SHA256 ccd044d6cf16eaaad151260e1fcc5e3e1504cd1b8644e940b4f7ae3e315dd0d3
- MD5 909620ccbeb6e71ade7ca94212da8a77
- SHA1 e8dc2bcd65217d10ecbb28a10d12c4e86f2dc7af
- SHA512 16aeeec0ee04c8cf6e563720265dd7f1fa306ce49c8db98ba13c77a4d32e9f6adc2ddab9cb1003c964bc53dd955c60daa6aee117a666a8e023eac57cf0c94c1c
- SSDEEP 1536:nPx4lPgEk/vfVaYGEltgu2rTEEqojSuOGVdcgCP4Xw8VfYG3473:XxnMYGEYYEqn2dEcYP73
- TLSH
  T12E835A47F74360FDC407C57856D69272DA31FC160838ABAF3658CB361F22E906F69929
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Appraiser X/Tesseract-OCR/text2image.1.html
- Size 25KB
- SHA256 65dd8b72ee345e7ea95aa24c932fd1534d83e764b74f1ab459475f5898876c1a
- MD5 20d6fb679e0ef7d899a31f6ce677ceae
- SHA1 c5df16884f7812fde766f2a2f49e4d1dd3370ae0
- SHA512 a5209f36029250056a33d2de4362390065990a8f0ad41dbc1d981da697445670318bec26261e21410b38f846bca9a77b3393aa9d09b939d0b2fbebc4f9dd91c7
- SSDEEP 384:mic/7NlHRV3nP73SXoFn1EppMkm9mSVyfZU89QJqE4zVNVJb7a8a:tc/7/HRRD3nippMm2WQJqE4z/VJb7a8a
- TLSH
  T1A3B2937EA9427E1E05B3C7B2FB669200FB9241345E0A7365B6FFB1539B44D6001E3E89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral22
- Target
  Appraiser X/Tesseract-OCR/text2image.exe
- Size 359KB
- SHA256 45981c5d8b88027900b2629d8c1dc5362d9f440db8afa01892b285407a9995fd
- MD5 06b98d07319025f90726c3bc1515b9e5
- SHA1 1822339ec01fc3de46f13184beb55112b6d7fc90
- SHA512 8c9fed227901e9a3b1879372d7cd3d5020e236ff4723b979c05b1fa48169c70983cc448e706a55fb11347fbc080b7fdb0fbac44bed09e5293590441cb7d9550e
- SSDEEP 6144:8K6GTFFZYjVS0aRi2vc6Aot35qNgaiErAUqmkRug71KDfO+zoB0s+K+vDecWDq1W:8KZFFZ4Zapc6AotJqNgjUqmk51AhTXve
- TLSH
  T16A744C2BD69310ECC52BD13443BA9373B9317C990334BD6A57A8DB311F72E6057AA728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23
- Target
  Appraiser X/Tesseract-OCR/unicharambigs.5.html
- Size 20KB
- SHA256 0353dbd91477b479dbe4a38994c0c488d48b86a581dd64cb7804fe131565446d
- MD5 4c77efa9d9157125f4ca8a47b1e2fab1
- SHA1 04bc46f1dfeb16ede6e5e8660ead392321626a44
- SHA512 9bcb44ad7a0234fad1a847c869a0164dd07281ab9251dae5034735909378e341d010a241c4d0b05d2ca51131981ef124b572428d30ed55b4eae02ab022225991
- SSDEEP 384:zic/7NlHRV3nP73SXoFn1EppMkm9PHQWu8+pPr60a:Gc/7/HRRD3nippMPHQ38+Fr60a
- TLSH
  T18B92FA698982682616B3C771EF17E640FB9501348E0B61A1FAFDB242EB45DB015E3DDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral24
- Target
  Appraiser X/Tesseract-OCR/unicharset.5.html
- Size 23KB
- SHA256 b2df74b3abfad11c529ba7e167cc573ec345c66b285f1a688739df95cb2bfbff
- MD5 add858b22059097884e051b23d6804c8
- SHA1 77be9aaeacc25b7d0d326cc4033f7f7453c024a3
- SHA512 1de78227236cc58e2f7809199827179e52855428f376b291ed9340a538c3952d6d6f2eae94187a012f65d327c40430e1c91e6e6db6802b8893c81a8f1c0f2248
- SSDEEP 384:8ic/7NlHRV3nP73SXoFn1EppMkm992tLf+oB5a:3c/7/HRRD3nippM90f+ona
- TLSH
  T198B2FA6A99826D3A16B3C771EF27E200FB8541349E0B9251B9FDB243AB45CB015E3DDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral25
- Target
  Appraiser X/Tesseract-OCR/unicharset_extractor.1.html
- Size 18KB
- SHA256 ad8140c54167f8d46ddc7b42f47963a3a46869ffda3c43fbec2f88124e92ef00
- MD5 80d8793c79fad44eabdce71c6d2909e2
- SHA1 2e88d18511a62232f58381649e164c2856e425aa
- SHA512 a7d52eb13c610488f9711adc956acd75db582e26c8c9ff782dbc218118cb021d1f022674df45f5e794a450539561ef687ab55e6bd9488068e5d8b8e5264b801b
- SSDEEP 192:ZU25icth7o14c2mgjzapG9hAKFg7Ce+xgrXQto8npJ+u3S1VwMKhMsY01EppM9ab:zic/7NlHRV3nP73SXoFn1EppMkm94b8a
- TLSH
  T18982E96E9D52652516B3CB71FF13E600FB9501348E4FA261BABDB241EB409B015E3EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral26
- Target
  Appraiser X/Tesseract-OCR/unicharset_extractor.exe
- Size 142KB
- SHA256 d163ef2cddfe92390e58ab5b5269cf0d259895b6f476339e45da6574d589f944
- MD5 3b08a66aa7442fb5512ac3db9b4afdd4
- SHA1 3d31da7fdb3d514b76df26fc7a3f180d70fbeb47
- SHA512 8652c892a94d435cab46c42d86c9ae7b9d5d94060730da0ec0339f75cf3f90a655cfa0c06cc9cc1b049d2bfbc3938bb6297ac6544cd319d298522986ef8a5f93
- SSDEEP 3072:tnQ7DfmS3JTDNZl5uKUCV/IzNLkvGzenAYVXtaJltqxWDq1rxjCTYSW71:tncDmS59ZH9UCVwwaeRwlkxWDq1rxjCw
- TLSH
  T15CE34B1BE29320EDC11BD17442DB9273FA31BC651735BA6E0790EB311F32E905B6A729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Appraiser X/Tesseract-OCR/winpath.exe
- Size 17KB
- SHA256 897f439fa74daaa3ec16c8e18fdb743a3315ef02bb9684af7f8c004eb96d8f2f
- MD5 b40ba57cfcb56d74e00c30ba03a959d1
- SHA1 d7cbb872197aee5e9e92e18fba40d0ce3df9d077
- SHA512 a9c0f6445c823c0686ecba779da24e5f370c4f883be7bb5fc52f58e73f8b61a70dbd9c3b757f48751dbcfac96852fd49f203ce262fb61ce8d02b36775ea2f2d9
- SSDEEP 192:XduoMBCihwSFhKcgO17dgv1PgsB7LIHK0IPhJyK1wRlzOKQEwN+u4TbfbNm22qP:Xd61jhKW17dgv1YS6nkZwRKxNF0jxA6
- TLSH
  T1E682B62A260298EFD18BD2BC94E747756674BD02CF67431B4620F2742F703A65B3763A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Appraiser X/Tesseract-OCR/wordlist2dawg.1.html
- Size 19KB
- SHA256 1b9931074dd228953f385a6b703f334fe9ecf8fdbbca8b2f7f957f882c28529d
- MD5 531355ca6b05220053715e73f94b8cb1
- SHA1 b23f0872a1380a280799cb3cb5d8890773e8d492
- SHA512 6848340428db260eaa7721397d834d93ed7ce7443047bd21d40b0843d1ee637570ca0cfa7ec3c47383a09e515332d35d7ffd62a40830e2800ea3cea2c8c9a8eb
- SSDEEP 192:O25icth7o14c2mgjzapG9hAKFg7Ce+xgrXQto8npJ+u3S1VwMKhMsY01EppM9a7Z:Tic/7NlHRV3nP73SXoFn1EppMkm9S8a
- TLSH
  T19192F96A9D52691616B3CB71EF13E700FB9601348E0BA161BABDB241EF40DB015F3DAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral29
- Target
  Appraiser X/Tesseract-OCR/wordlist2dawg.exe
- Size 90KB
- SHA256 65871118cf273478c101efca123587e4b5e6e58a418e53f67449134dd8260ca6
- MD5 4bb7ec55817dff0ac9e5470736ac521a
- SHA1 7a00c4df59a8c61245f1c30d73ca459de1f1bf5d
- SHA512 545596398769c507548c94505acea1643fd462252d838c4769eaca74870d62aacc9393face10e76f5c1399cfc07f1b4fa09b95d28cd8c059fdb18048bf879b62
- SSDEEP 1536:Nilkk3d0jXUwwZ6vieU59frLmTRYkG8KJQOmrDaRaofmPpST8xQOj9GzS3fr7u:YlRCjXUwwZ6vieo9f+OkG8NucofmPpSb
- TLSH
  T136934B57F39324F8C257C07485DA9372AA31BC610434BB6ED790E6712E22FA0FF69625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Appraiser X/Tesseract-OCR/zlib1.dll
- Size 117KB
- SHA256 cb7ab3788d10940df874acd97b1821bbb5ee4a91f3eec11982bb5bf7a3c96443
- MD5 66a3477a51e8b7d4586edf4659cde8d5
- SHA1 3306c6aca3937d8bca11dd076effb03746367b9f
- SHA512 948ba42499bba17b552723c3189289e9f07879c9303ec6f27b4d631b7d701c16fe66fc8c6a681236cef778b0cb0a14420493e048aa90bba682606ce2990c64ab
- SSDEEP 3072:djf8ECbYiB317HVhVpaKdAAcsrK2M2nuh2UI6vTH2F3I:xLCbYiBp1LghAxG9BI6LH2F3I
- TLSH
  T116C37B9BB8A265E9C6B3C170C5D78B75F930F8210675AEAB4258E3742F21F405B1C2ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  HydraBackend.exe
- Size 282.8MB
- SHA256 7d22380f83f38b0e3d58dca22785b1986b7c93bd9f1300676af5a05fb50dc9c8
- MD5 9b8ef0e240361c8ba8b6be675645116c
- SHA1 ec00ae1addac2969a1fb79dfbec76d85c1629c9d
- SHA512 d850a67582fecde592bd163c4989ec9d57da827f1dd8288671883efe5162769f44c5ebf1d6afd93e9d7cafd29324290906f298230c49c9dac3dddcbc961ba542
- SSDEEP 6291456:G77miPz270EIKTkNUfy+wMrvRynW3IQkufbhQqZ6MbUoD9+mB0:e7miPz270EIKj6+wbnUpkuTDQ49+mB0
- TLSH
  T11DE8334245B05A1EED7DA0367AE2EF704475DC2C1383CA691BB813711E0BDC66EBEA71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Network Share Discovery

Drops file in System32 directory

Loads dropped DLL

Deletes itself

Executes dropped EXE

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32