3c383ffe5da1fd428d3c5ce655972ba1e4d0999461d081e7faafb236dd1c7157

Sharing

Copy URL Twitter E-mail

General

Target
FloatV2 (Pushed Version)..zip
Size 25.9MB
Sample260418-txd2jacz7k
SHA256 3c383ffe5da1fd428d3c5ce655972ba1e4d0999461d081e7faafb236dd1c7157
MD5 facd7ee0618b93b57f4cc5d3ba5bcb93
SHA1 6891eb26090e68056b3a9b3fc96c0591e8d23f13
SHA512 890f51b46bdf0eb4be9065a1abb460ae0adc60583f028a84b45eefee13a758745a3c6f84c8f239b2ead79215ba6cabf9b4aefc1b10257f3042eb39618f191411
SSDEEP 786432:r4yqrvjk1PcpWa68AOLoAAZwGj5XtVkdLcLs8Kx3bSZy2BF:0NrjIdfAAZP5qchkLSZy6
TLSH
T1F7573320D20D1096CDEB6AFE4CE653C573BAB1476DC3D1D61A6107027A0E5EAB3A1F4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Pushed version/FloatApi.dll
- Size 19KB
- SHA256 0a92702c4139b7de2a1d8692df4a48f8aa672dcdaf23fbd0d9771ca71ac1beab
- MD5 018170be3d5b71e9278e9b98071764d4
- SHA1 061115678294d9f9a74720086d3de19c4b2d7676
- SHA512 5c99834d6cb8518aadd58a6e5e1477e530c227404543a5ebc439c432168351de35ffe9d37987ff58c3d3609b5dffe2b6c5fb7d0b3794409ac64cf2c235d7b636
- SSDEEP 384:HuJ2fSPAqu7H8y2syvVrdLRxvoJ1edtEd9rrV6:t8NsyvVrdLRwedy9rrE
- TLSH
  T17A92710167E98A16FAFB4F79AC7B11510B37FE8A5935D70D129CA00D0BB33484961BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Pushed version/FloatApiDp.dll
- Size 145KB
- SHA256 483ccf387cc140c08078904d138d59d9e1bf0cf4642897c22a14f20dee58f135
- MD5 f1a018b3f44245a316f6eb992603f274
- SHA1 9fab14f58064447659b62fda36875a44318333c2
- SHA512 079c49d2570b036e937d3780d979696f9acb4a9abf4546661960694c8ca3ac23b4d86bc3d5887c22baf7587a901f153f62084d4c622e35a289c5f12dc7dedd12
- SSDEEP 3072:tg9fjI1yw32TbyGBAOZr7Pby6SgV9Sj0LC55dVPOdXmiU6VW:Wfe32HyGRXby6p9Sj0Uh2dW8VW
- TLSH
  T158E3AF40376CCA12CABF0FBD64B152955A72BF16A5B3E70E15CC349C5CF638286523AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Pushed version/Floatv2.dll
- Size 2.1MB
- SHA256 76717bae1b0eb9c1722a3eeae61195edaa827d619efd0788438a831a9369bc41
- MD5 35e60c9e5a185920c285d9829199b292
- SHA1 3f21b3528e977427f4acf5518bef34f0559ef386
- SHA512 0432e7bfc14fd6fe610d768e6b7a8a430fcd351a783552d34dabd2ed444d16803e95579c81edc2324530eb60090c8949a509e7278f3873469600076cf66b162f
- SSDEEP 49152:24303kli5j76aKsnOZ8RNcdOgjL8MBfVgHFuC3N:2vd+BCQC9
- TLSH
  T1A9A59F13A19900ECD077D1F8CA5B5A13E7727C490325B6EB12F0BA652F27AE58E3E705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Pushed version/Guna.UI2.dll
- Size 2.1MB
- SHA256 2130c7489f5a5e21812c1eab37dc4903b901861a2d545aa607555be269091afd
- MD5 b464fc896b14bfa34f608da53856e999
- SHA1 55568eecc97895cad49a42bffe757e3588c5313c
- SHA512 1b310b16b0973c9100c9d220338ffc9340b4085d7a095cc601998b5cbcb67b927d8665070bd8b6e2af2a29d13762f404a794b79dbe223b48751894a4bf47c5ca
- SSDEEP 24576:ITL3GQ2wuP82+lTVG+3VvkPMb4yk8z1xcfeGwrSe+a/gZmxVsFdHQ/jzaM5PT:U5+dSRzIZ8VsFWN
- TLSH
  T124A5FA147ED4EB27D16BCE33D6E25011E2F1E5A32AB1EB0E72D35768184234578863BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Pushed version/Microsoft.Bcl.AsyncInterfaces.dll
- Size 27KB
- SHA256 20b2f0904cd3e200e95c5f9a55f17ff55d45111114d2fa80ab8d8eb617272009
- MD5 f7db193664b5275c516ace1f642d3da8
- SHA1 d22fded4d3db245289900b05f5e80fbf587d4487
- SHA512 dab6d8f760cc20e4745e58d6823f86657ee1606efd04fa991837e32c09b8715d1b7375576810f09eb32034ad3931aac3772d5a012fa4bcdfeffa6d79e3846c8c
- SSDEEP 768:XuwIOTxyZ22LwJQFUKc7i9DjYTkC9zyGMO0:XlL9ylw6Fa7ixY4ezyy0
- TLSH
  T11CD26D62D32C8323CEAF2FB1DA65D9411E79E3862C32DA3E154CE6555C97784A63133C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Pushed version/Microsoft.Web.WebView2.Core.dll
- Size 533KB
- SHA256 c886c3003f208d64839ec3c77c3889ef98a0344439e18aa613e7b199bd04bb2d
- MD5 36a26a59c3b124c90af32bd87fdc003a
- SHA1 abea61150aa1aad467c95528ba9fadaf724189e1
- SHA512 45cea404b0833ddc98077ae859142aa96cefbbddac611511193c637139eec935fa6d50969889a74226ef98afc5da63df4a45ff70fa7cba276b2717503557fba0
- SSDEEP 12288:r0vEInrpQ322zy+uFKcDzRFNXeA+imQ269pRFZNIEJdIEY0lxPrEIgcvLcglxMwu:YMvH
- TLSH
  T1B3C4841223FD865AF6F33FB5653412608BF6BDA6B939D74E0698509D0C32B809DA1733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Pushed version/Microsoft.Web.WebView2.WinForms.dll
- Size 39KB
- SHA256 ccaf1f9ed1313a7218dd456114a2914f5b0b514b8c00ba90f14e6a7927930c35
- MD5 823d314a7a7b7433d372d5e0fc9abb76
- SHA1 125ab38d78a5d3b1f2f315a500908d132a44b1a8
- SHA512 040db73d0ee1873712cdb93bacadcc0f97f9b2908585e35e96b538ac44a24556498ef7d38263ab6806c3ea8babf7613505d80646933c23a01b63266fac799550
- SSDEEP 768:rFCniwqfU2Gm0bOVmW0etG7yf8ZDgcEST3p4Jjrjh2jJGSUyauTv1JKia5/Zi/Wk:rI7yf8ZDgcEST3p4JjrjaJGSUyau71Jh
- TLSH
  T140034A4143AC853BE6EF5FFC95B085621B7ABFC3BA61D7882991B0E91D73390490076B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Pushed version/Microsoft.Web.WebView2.Wpf.dll
- Size 46KB
- SHA256 5eaaded54cd8f8f08f8f9aa09f6dbb2cd8f76753abbd6524b23aa1d0f52f7d16
- MD5 d8a961a75b1949ccc43f567ca98a49ed
- SHA1 1a1237ddb927640fbe58708d61ed8c37e3f9b532
- SHA512 2923160c82e52a25c03ef931b2dc510fe8e29c37f38e08e87b6159364c18699d31f549077abc02f0135bfa02fc0fd5bdafaecbc8b9b1970a4aa940a6c0a4cb0a
- SSDEEP 768:UV08pvSZjQIf1jlCPcePUOVw8aDP/ryEH0tBy4JjrD1h2j5hUURGvkq7FKKa5/Bt:z84jQW1jlOzPjw8aDP/ryEH0tBy4Jjra
- TLSH
  T1392329C047EE8526F5EE1FB470B091191B79BF43BA21F75917C4B0A80A3B3A189543EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Pushed version/MySqlConnector.dll
- Size 622KB
- SHA256 209cfad06a902407654aec17925e40502b5e790547758343963d1a8dce469f84
- MD5 29a900a5a22e0a9fb5e40c609d672cb7
- SHA1 8e7581fa6ff61e2165f81a14c54a094b327a99fa
- SHA512 48ba9def1e39df9515ddcc7c0c57e78c524e92c9818cbc69b293348ba2b010b5088df468f250aa9a540d3369587a61f3f8192049f9b8a0f168fac283a1f34bb8
- SSDEEP 6144:CV6Jbx4jeiz/8uOkgKkEbvJjb/82Kn97YvXf2sCtrRBdRsHteWkF+xMtoqfgQ4g9:rdM8/kgKkab6FYvXf2sCtrUteWkCAfF
- TLSH
  T183D47D063BFC951BE5AF2670A5B5A19987F3FC4666B5E70F0148D0B92D52FA09E003B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Pushed version/Sylt.exe
- Size 240KB
- SHA256 fbeca8aa7623967e86fefc1d048e38ab5270605c5884ce15e37dfa5102cc9b38
- MD5 7dc8bafe672f0b763f5d2182674b3d3f
- SHA1 406475f69a3870714c3887904b6185c1e6519832
- SHA512 78e886594ab530f63091cafc2f37156e2ea95337b3a49b7eebd6a1d3b96f9f9bfb24ed81368d6fee5a71df902e403d4182bc7a522c5fce3630c90c5e7370c358
- SSDEEP 6144:1r6HlISSZPXhefAdb8hB4W5/bqi/Ennr5rpHQhdkx603QtMOrBRovR2Vu/r:IHlM5xtdb8hB4W5/bqZw0o03QtDovR2Q
- TLSH
  T140345D7126E9052AF47BC6BF6567415917737203B839D14879CCB8AC0FCBB824862BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral19 behavioral20
- Target
  Pushed version/Sylt.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
- Size 2.6MB
- SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
- MD5 0ee2b50c85a110689352fccfa77b5b18
- SHA1 d9ecc4b12d2d50e3cbce40e75edad804c9988b25
- SHA512 a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
- SSDEEP 49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
- TLSH
  T188C54C1FA64951E6C07AD138C543550BE2B27C60CB7263CB1BA7038A1FA37E2557FB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Pushed version/Sylt.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.84/adblock_snippet.js
- Size 2KB
- SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
- MD5 f5c93c471485f4b9ab45260518c30267
- SHA1 ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
- SHA512 e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
- TLSH
  T1C541F146AB3477B703EC24D158271C03B3684494562CE519FB51EBAEAE1C46B4EEED23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Pushed version/System.Buffers.dll
- Size 20KB
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH
  T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Pushed version/System.Diagnostics.DiagnosticSource.dll
- Size 162KB
- SHA256 81e664880042e451495a1be22624ab4ab5e8a06803eeda5bdda7c69df2439815
- MD5 5feb12f4d71c2edeedc693e876fef299
- SHA1 adedf5042aeae3a0482125c01ee4334b04c5e585
- SHA512 06dbd0a560739f6b445b97ff2db77e12864709a025c556f07e762b1c4ea34554f09daf1caadd3bdf1b76ac30a44e532ca3bbbcad234eecec50a598d0803b6ed7
- SSDEEP 3072:OkvQK1h3HKCY+oTOrBW8cpm7L6kzpF1V8K++7MhVf:O01h3kQlx7LtpAuy
- TLSH
  T152F36C1063DC176BCFEF5674F2A448864B76E95BF113D78E1948BAFD28A3780CA11263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Pushed version/System.IO.Pipelines.dll
- Size 83KB
- SHA256 24a567b1873bafdd4c316c4ec4eaca07f0142b67d36365d48e70b2c845621c07
- MD5 4772e9b659d9270c1cc251e65309b39a
- SHA1 5e9c69293441f61f0c5bdf517831b2b2f5512409
- SHA512 17fc03fa85140a978b15c63474a4aef29fa8de2c7a12a3ce23585c7acd166f90b16d02c27bb9bbc3862d32cbad628a3ec964dc667d9a6872b3efec390cdb3ad8
- SSDEEP 1536:ZEqfoDX1DK6+ZXWKJF4uONjTQ4RnY/4bgN0xIRgevBjM8C2WpmXYksqHzUc:tglUZGQFENTP5Y/4bgN0xIRgevBjM86m
- TLSH
  T193835B6893BC0B1BEF8E19BEA17456521BB2DB257907E75A958CF8D908837C046243F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Pushed version/System.Management.dll
- Size 72KB
- SHA256 f515ca5c944c332ab706ff0a7c2e53e66d0d9d8a663e9b2691b35129ee22559b
- MD5 1c71e5310151ce1e9a3a92797776bdad
- SHA1 fd452b874fec4a9dae61a3710fb32749dc7d701e
- SHA512 2a4f18c77449c2d06a3ab6807338f73b03b1faa332e78319829ba3a2b6fd98bb9a83c5e29b47d55e4ce7f0dfdcd8524fa592a0f3ca8ee09daae2894b681265a8
- SSDEEP 768:BrEP45HksbMU3se5c/0b/9nLZV1BCUkVoV0lP7H0CkkiSLJKdbY8Mtuo0eDQP9zu:bbz5wulNV1zkSQzHxkxS9yc8no0nzu
- TLSH
  T12773C410E7E88378C8E707B6B5B3A3214F74B5C52F22D61D292A611D08EAFC15765E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32