b1d077d2a373db9dbbac28fcdb4286fb992bd40d1c875179f5c778f89df52c35

Sharing

Copy URL Twitter E-mail

General

Target
gtkhash-w32-1.4-1-installer.exe
Size 22.2MB
Sample260429-nplhrafs2p
SHA256 b1d077d2a373db9dbbac28fcdb4286fb992bd40d1c875179f5c778f89df52c35
MD5 c3876d24abac903dd18a209b13b28b7c
SHA1 148e7bc1fac648774ba65c9d9f02d0995659de43
SHA512 00bd698941e377ea18eb3df5e5c3cb46285ab517ecebf0aaa84a13b0a109812163884558c5e1ccffbe0669ca626490f5178b46d447d117ea72b4c167c6e7c1a2
SSDEEP 393216:m0CDU10mkOM69MJdeQkG7B+oyIqONd9jezhops2uWsIHousA3Dn1dvSXU71ttEhw:e41DkOokwEoK++hopYezBssZELu
TLSH
T1233733D3B361ACB9DAAE533300430539EC320D78159BBA4D9117F97626B3B9941E8BC7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  gtkhash-w32-1.4-1-installer.exe
- Size 22.2MB
- SHA256 b1d077d2a373db9dbbac28fcdb4286fb992bd40d1c875179f5c778f89df52c35
- MD5 c3876d24abac903dd18a209b13b28b7c
- SHA1 148e7bc1fac648774ba65c9d9f02d0995659de43
- SHA512 00bd698941e377ea18eb3df5e5c3cb46285ab517ecebf0aaa84a13b0a109812163884558c5e1ccffbe0669ca626490f5178b46d447d117ea72b4c167c6e7c1a2
- SSDEEP 393216:m0CDU10mkOM69MJdeQkG7B+oyIqONd9jezhops2uWsIHousA3Dn1dvSXU71ttEhw:e41DkOokwEoK++hopYezBssZELu
- TLSH
  T1233733D3B361ACB9DAAE533300430539EC320D78159BBA4D9117F97626B3B9941E8BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  _icons/org.gtkhash.gtkhash.ico
- Size 36KB
- SHA256 3f0c01cb7011041928ba2732715e84334f5b9963561ed7a75f9e66ce2d8aae1c
- MD5 dc810716d97720fca277b4e62d277cb2
- SHA1 ec9b9f783388b27ffcdcab4f07883db4ffaaff67
- SHA512 d8ba4d594211884888bfe1ce17ff9d0a5a494c7d85c0756e3d7a5a6c7539584da1a6993fd2bf9b0807fd683a1b904938bad40295828b4d1f53fefc58e0b7a860
- SSDEEP 768:zwYx1+2w8ISmNgbmV44T1RlY4WdUyf9o87kidrj1TcNDdUNjQ:zwYr6jSa3PP4UyfO8AQrpINDuNjQ
- TLSH
  T1740301C327E5B5080D9EA8E8ADF50DD106D75D08E89FB1E12B1A60F5B0E0FD098201EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral2
- Target
  _scripts/postinst.cmd
- Size 509B
- SHA256 0d8f8b1b03a3f76bfbab7861bde74f83f87b0722922135ef89db8975acc8c736
- MD5 a42a22a7caa88992378ba9b395ffda82
- SHA1 a98179b4db72b9d583cbb83c3a9637e49d1d4eb6
- SHA512 840ce2de457ec509d884b0624992efe2bbedbfef6fe08921d8298b82f5ae993f2f9329a41e948f105a659033d7915ea3eaa7a43f5a2c76dfe16f4dc503ccb837
- TLSH
  T1CCF00E095BC282FC1F4242E8336BE2DB422BF4080320993A58EA04FC918E6AC0D3291A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3
- Target
  _scripts/postinst.sh
- Size 2KB
- SHA256 58aabb206ea587c23a89e4ec18dc0865033be9e3de8cea1b54fb3b3fa12e523f
- MD5 55cea0509bc67e358dbfaf13774ef744
- SHA1 18390cd38e84f09fca883d2a6df1e98591d46ed0
- SHA512 b565316e7b2771d4266cd246feee6e40bbd1f03c96787eb6d9f3985f57a88b5dcf16d13fbd8ffb6570f4aedcab77459ef5ce334b75a838bb00a72f4c9be0d087
- TLSH
  T1985196093A0242742D7303F9616EE0F6DB13A04F6224143870EF955C1B673AE96FABE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral4
- Target
  mingw32/bin/edit.dll
- Size 55KB
- SHA256 61d56ca9b46efaed83d2bdbd108234ad0eed15c91302206a8b79e60933be1ff5
- MD5 544430c0940babff9b2255f75d3c557b
- SHA1 8400a0bec4d2adb57903b62e7b70f895463f55e7
- SHA512 37dda8bb4f87acf746b849429ddc0f4a92d1b4b919e350ce0dab6b2dc9678ebfb3d28b47542acba7d8cf3845a1a5fdfdc655c514e9fcd5e69aad7c3c167241d9
- SSDEEP 768:UQ932aDgHDVZZk6ejhHlS1kwnozLlzGqfOt1piS8shZViSJ:Ua32asjVpedFS1DoXl1UD8shf9J
- TLSH
  T15A43F759FA07D5F5E6A3A1F1CA4BD73B813192160026EFB2FF042E4EF8336465217A42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  mingw32/bin/fc-cache.exe
- Size 30KB
- SHA256 87678cfd8be84077b832a4c2c986286c857097c7049cb8c5c368ce48a239cc74
- MD5 8140be82ee9d22eac1b28daaa5cd4295
- SHA1 dfd2f578a8c234afbbb493999605c9b88bbeb617
- SHA512 8dab411286dd59f74f660bde21a4826c7ac8697bd8c5a239ac339fa06fe7b756500c120faa2396718caedcb711eea33616491cc47b6eff622d6be4325a463d7c
- SSDEEP 384:4JfWLaOWglVptVf3rv1a+odaBHmuP7ryYc+ukdie2+vTx/CWCTQgpc1G:4cLaUl31a+o0nP7ryYc8V2+t6WCkX1G
- TLSH
  T1F6D23A26F106D9B7E4C2A2BCD6DB8BBBD3B5D61246167623FF18B12CE7B33954805240
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  mingw32/bin/gdk-pixbuf-query-loaders.exe
- Size 25KB
- SHA256 84dcc4469a330b4d6fc3dd002fac229b0f792252eed4beebb494697210a4fc2d
- MD5 075bb8b38049f24eeca472b128e11df5
- SHA1 b8195c7a14f31be2f066153993cd4afc8f9d0e4c
- SHA512 349a2aeee4dbd62e23015c6aed07ca254cc1d55a535da386244b111cf0513bb01f8771fc347b2244f99ffe6619fd1d93121203054d821a6fee566fb9a858a6c7
- SSDEEP 384:8UnbcTjrlPv2NP6lHyH9xAaiLGaSxNEteFXg+Q7FCWdn9RW/aj2/al:DczVG6l+xgKaSxitU08Wxq/Jal
- TLSH
  T109C2E825E122D8E7D5E092BCC5EBC77AE635A5620F72D637EB84F13C6AB2B018457043
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  mingw32/bin/glib-compile-schemas.exe
- Size 48KB
- SHA256 521c4c8d22ac7992855a8763fc1f287f1cb8e8b7f67cbfd1a0e0650d5a31380c
- MD5 2dca78d7a27a545e2fbf3d605263aeda
- SHA1 306fc9a7d00eb1172b2eeec6dad994729b8c33df
- SHA512 3aba13f83c9bc6220eb2b8aee61c1ac5f4d25f7b84d00501d5802d03da6fa2f544f63230d6e372f66625a590ab9a57265a65154178fec614b43645092dd9690c
- SSDEEP 768:9QpR4Qj7gpNAehsRB1FsrBYH4ss6/Ooqt2WO:9xQPgp65ylmlqUWO
- TLSH
  T1CD23D628E78794F1FA5358B5C5DAE3BF8375E9128532EFF6FF0DA259B422D01042A184
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  mingw32/bin/gspawn-win32-helper-console.exe
- Size 18KB
- SHA256 37cf8e5d91b33c27e93af8b8b527c0b545523e77ca3197d01c2046308e8f07bb
- MD5 99212f66d42f93eed307a294bb2d5781
- SHA1 13f64a3b501efbf58f2275c2edf7a4091e0b2779
- SHA512 e75485bd5a02e8924d5573de7d0dd604fa84a1d99305041b7b65704cc913fc6e88e42416089f50756721b7e914713b224aac4fe38c67d788643fa631bcb23f32
- SSDEEP 192:5nrTf2+0gnd5DC9iQPio5q7ZX6NOufVUfrYAJDisCAbek30GvY/CszO:d72vgnHO9y74fecAbeNGA/CWO
- TLSH
  T1A282D846F506A5F1E750F2B5C89ACBB2C33ABD220932DB3AFF55F2583523985990B047
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  mingw32/bin/gspawn-win32-helper.exe
- Size 18KB
- SHA256 489f6c28dae3a83489ee1da2a54e8ebba421e84725e8548863790a22a0bab3dd
- MD5 3fc8e6cc38ae42396b50cd2a710eae9a
- SHA1 402c7583e0108ee2f0e90088ef61a135cda7fdbf
- SHA512 d5a6bc22d0bd1137ad2d244f23006faa4f6d6adc4034d1b65e89c518012c84c4064bab331b8d7d5df52572e0a6af847cac2595efee747dc6e602842d2ef11f92
- SSDEEP 192:qnnoh/Nb2JSAi0gnd5DChyQPio5q7ZX6NO/Yl3VKAbek30GvYBCszO:QClbgSUgnHSNy7AoAbeNGABCWO
- TLSH
  T1E482B686F50AA4F1F750F2B4C899CB77D33ABD220972DB3AFF04F2587523985990A106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10
- Target
  mingw32/bin/gtk-launch.exe
- Size 19KB
- SHA256 107e61a40e807b219d79c8578e3844eef304707ac4357298b203b7e6e0fcbd75
- MD5 c0529f9f74510b8cf87fca4deb795082
- SHA1 e85c1a1952c285784b841fc88fdb035b7280a0ab
- SHA512 95da6a98c3ec498721800dd84adb946c18280ebbfe5f75fbf4fbd78d8b8bdec0247d6c5d9fd632fe1e4470bd0dd87407214902a6cccdb048726260432a515230
- SSDEEP 192:Lnao9RYdOZ1j/iH3eTba3blGiYe+NnO53f68c3FueJKjTbwsmpCszD0fuHWYPZt3:u6Y4PzTurl1ose6bwJpCWDMmuw
- TLSH
  T147920972F521A8B7E2C1A3BCD8DBCB71D73EB5110F5292276B50B278A1B37988C02106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  mingw32/bin/gtk-update-icon-cache-3.0.exe
- Size 45KB
- SHA256 738bbfb7429fdd7e4726660ff9a45a1077f57ef15aab7a7b567ae7866e938fe6
- MD5 1e90250a805ab7664b42d483efd85ad1
- SHA1 da4cf58ab24629bb1ab447c5c9f794523ab482ed
- SHA512 f3d420c562a549976f73efd6c26d55cd266aecd6f2ed22bb612b6c91b9eeef6a93474b0702a7f6fe4eae2df37861ac51ae8754f3d3d0ce08a4d9ec85ff539f5f
- SSDEEP 768:j/uCKn3PZnw0/9ixRQAavaw/56Q9xTWn6KzBoQ:69nR/8bJm/T7TWn/H
- TLSH
  T1B8230834F553DCF6EA9192BCD8CBDA7FD776A0024A21DE67EF446028F173B00986A251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  mingw32/bin/gtkhash.exe
- Size 124KB
- SHA256 8f612610f533dd6feb59394a4fb0a646a7797bfd4f52a4ac7e5847c0278b93a1
- MD5 9bddbb5d7afde0480f68b7903e8f0e02
- SHA1 66910f778e268d68308e0d115a6069bea36effda
- SHA512 7f9c4b77f9c8ca3b52a79172bc149ce793aaa2586034dcd98b89a985ed807b807e2068ef6b427e65b488bc80fcdc50b9a09bc828dc93b237556058e70bdb1483
- SSDEEP 1536:72p9uZWwPNJdZSg5GNNKY4QRsaA6vqAWixVH75N6DEvcaUWedhyNxgLcITx:elwPNJdqNwYVmaPvqAWixV90Oedhyqf
- TLSH
  T1D1C31962F90398FAEA8656FDC8CBF7BFC13065114622AF32EF0EA456E573B231412505
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  mingw32/bin/libasprintf-0.dll
- Size 59KB
- SHA256 62f9c709be2c3626e13ec11cf2045b37dc3f5a026f5a17c81afad1d533bb7407
- MD5 3e173c8f3250eb21957b8c152bbcdb91
- SHA1 f222afe72753105dac3d4c4016226197d5949bb7
- SHA512 47eba0f1c912c20a578e3aa0665debe02b5fea1c50d2972e87191b33e867e5f8fba63e675c5dd5cce72f7c68a50299973bf92bf7793b66b3fa01da783087096b
- SSDEEP 768:V3Hp2lh1kA8apSS1DixyhBZT08GBhk752yJ+wO3nUxnIZp2:V3p2lH9XpSS1DysTnAkgBw9xIv2
- TLSH
  T15C534C55F70394F2F362A0B4E58AFBBBC521B632D062E977FB4A2516F033A055B0E506
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  mingw32/bin/libatk-1.0-0.dll
- Size 140KB
- SHA256 de3df4b88239b7c953c13d2c4019113306fcb9a7fde2cb741e25bc293d8fa7b8
- MD5 9e623b7c3c5828bc40371a1076297a42
- SHA1 e7338f44c6dfe3b14b5af69e8248e43fb805c81b
- SHA512 645cd5b5b55332515671e1fdf383dcf46ef00cc75b6db029f77e4f4c6fc54ab341cdbfa967fef5eb3afe5c58fe237b989be215d8569f05abfa1ad07b9083c094
- SSDEEP 1536:6z5Wr8AqgCL+Y6qYlcZSyTcTx34anTjjDS8jLBOq7Yrb+RIKJROlYFvraHwiBs/f:wWr8AhCL+YtYlSSk6x3xTbPkrb7bwbz7
- TLSH
  T197E3B786FB1264F5EFA365B3C66FE37B877162058722EE73DF09419CA433661280E605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  mingw32/bin/libatomic-1.dll
- Size 34KB
- SHA256 9715611bde7df3d45462b5c8cee961c06c1a73da47ab566964948d79f3572134
- MD5 e7b1e8d5bb1784a85f46b3f33ae60dc7
- SHA1 1671587521b30c456435ea5553473ba3728cda44
- SHA512 64f1fabc159d5c8262a33126e62172a2dbdd703ef70852ab148bf75acd06a533f9a7e3802f001972577f94ed56b86c8aee23a697f41cd88ac58ea9e1201c527e
- SSDEEP 384:Vh8PlroqXxCfRwcsxFHaPTxEZOe501CIcheX5a0:c0yNFHamOe501CfoJL
- TLSH
  T1FDF24122FA06C4E6D6D5E2F1CD5EDBB6D2083D6A4170B137BB4DE3CDA43625A9C09902
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  mingw32/bin/libbrotlicommon.dll
- Size 136KB
- SHA256 971ad8d8859b4a401f935bc806ae101f152657583405faae03d7612136b4d588
- MD5 eb52843bf395f35f9ae4dd599e2d0b6b
- SHA1 adc633ee46a3e8845419bad17ebee26a3a53735e
- SHA512 3b50883a8238b88e8984f370ae4d7b1695c61405178be903dac977bbeb03d5c69036b9d6ee0dd0827d37c476c8cec599b635888cc55c577d26ec09c079937742
- SSDEEP 3072:sjx4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxB7:sjx4AhdNorGvHdbi09GJx
- TLSH
  T168D38DA1F3050736C21B627AE45A6BB9F33581B593670521B8A9426D20C3DA4873F7FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  mingw32/bin/libbrotlidec.dll
- Size 53KB
- SHA256 cb3e712b6204adce2fea1782e95e6c000bc457017b2588215cde2b8daa9c1cee
- MD5 44dd97690095893c4293de78569fefec
- SHA1 287bf3a2e7c710c7a8a76b3ac1fc87c4ca5597e6
- SHA512 d614f6312e3c775c2f4bcbe87e4b7a84c577e362912c3d541ed3f288ffd7853bc7e0dbdf2ff1f4d715314df4ccc334e1cfdf9897d42edc6d157bb00fde33ec3d
- SSDEEP 768:cRo2tHhMmy9KDvCse17ppwfPrHwhdeXyfcaFiBmdBcse7qazQxARbYs3SVmPVlI:MoeHhxUIvCse17HwfPrIjEaZf/e9SYXI
- TLSH
  T145335C46FB436CE6EF6352B49547AB7285FC5B081132D2B7FB2976AA7C333122784142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  mingw32/bin/libbrotlienc.dll
- Size 572KB
- SHA256 f3f034d8ae1b77a26c0c45f881133c493e31130bed8c9a8fb9566d9159263551
- MD5 2b9a4bef4ebaf87d0fcc6ab15e79ca1e
- SHA1 b81870fd210590f13febb249b0ffd00429ff88fc
- SHA512 f5ccbcdb54d124b261489bfd2a0d10737f529d59cdc75b7a5be589eb2d4fb334acaae35657cbc466c27b547b34fcac5ba2dae03de35d300bc94f0d45b281a05c
- SSDEEP 12288:yJVXeNu97IL6FlPQNBeE9d7qMYXTw05nmZfRR89X:yLeNu97w6FlPQNBeE9d+OAmZfR2x
- TLSH
  T14DC48D46EDD392F2E85798744DA7B23F8A246711C020E97BFB4C6A51F6E3B03109978D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  mingw32/bin/libbz2-1.dll
- Size 72KB
- SHA256 d86c51f963fb09c7739228814fc744191a1c8d59470187c40619dbe7797e01a3
- MD5 c999a0d9404212cbb207413a8b2190f8
- SHA1 feb3b0c4da87048ff299517281e9c114bc037dca
- SHA512 3fb771eab1271c26481bd30d7b8d7cc94cefe1761dd0432a6643ea93828c79289be2019bd8fa058f42487956b453d015e50b4784c25f3a3d368891c0258025ed
- SSDEEP 768:kGLACNNHMQrTo51a9xJ/zv/MOA3E9MG9QaUuDQye44T88DLjQQpgPOFN23AltmOR:CKM51otA3wMGahjDLrpgmX8WDzD2hfg
- TLSH
  T1D2734B01F6871D92E75F1230858FA33AD6ACCB884631FCF7EB496D8FB667B126815109
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  mingw32/bin/libcairo-2.dll
- Size 1.1MB
- SHA256 b4cddb178cfca4b42172cbc22273d086304ee74042a7e27baefe84f97699ebe0
- MD5 e85a5bd84392a69b62289798933ec496
- SHA1 81fa9b1b77ac1a0b51bc1bbe4cc9c063a70e2a38
- SHA512 ec3e9dd891faf3216f6dc70afb4bdbc5dfc8a9cbeacfe303a46f02ffbc7a8b3a9c10a29caa394e9b8ee74252deb3716b1b6f1cc3ec6fd6e79251219e5293c251
- SSDEEP 24576:VMB4SHzFUkkN82ciK0rB98KqI4zg50kOkP/wRv8W/sZDK8D8NQ7j9V+:WG6U0FV8s1Qvy
- TLSH
  T15A352A98EE8790F1FA6350B4D24BF77F4631A7068064EEB6FF0E1A46F933B126515206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  mingw32/bin/libcairo-script-interpreter-2.dll
- Size 171KB
- SHA256 949fc361c2d5c0ccd95ad4bcdd23e74e58cd97f6f58b603cccafc7c363e88ff0
- MD5 7a2fd53ef5ea9837a886d716d3392396
- SHA1 fc2d0cda91e62e56f22f1d8da52dc2d3c851c44c
- SHA512 9541fca0be5a39582e22b4376fdacd0ab16d0c0bfa8efd05e901f29487a2431f97448150e18b13d040fb8da44b874c758a5956d475d10d62a663f4d57b217fc9
- SSDEEP 3072:E/L99lPKJqB+SJwUuhUnqF6+TG5D6F+Tia:8HVKkB+SJw7anqFdG5W4
- TLSH
  T157042A68EA0798F6F2A370B6D59B977F8675A2014732E776EF0D25A1F833B11140B10E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  mingw32/bin/libdatrie-1.dll
- Size 37KB
- SHA256 5914f2c4398ef607aefd76c0d7603e811e472446294c0a87943e9a5025add1aa
- MD5 4f1a42be78ee67d805962b7a3cae023c
- SHA1 33e332b54e4f6893d21484e04fdf452cb126445a
- SHA512 e17f89130364146512ae1facb5c4d270f621e9a09563bf46f4b0c89117bea5ff3f3a5ea34c2c4eff3de0b4a1b5ccf922f5c2fae29217a6fcc69f284d442f23d1
- SSDEEP 768:4KJEt2//6KtjUNlSjUTLhJizUVG36BLRm2wDRqtE4Q:4KJEt2/LBjULhJizUWNqtE7
- TLSH
  T1AF030918F60398F6E3A161FAC986D3B79375B9154022E373FB0DA72DBCB321A580D116
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  mingw32/bin/libexpat-1.dll
- Size 194KB
- SHA256 018dc2d17971bf1371d7f396a64a4e429590ce1165e24acadad90618c9163954
- MD5 7f373bd4d9396e5826235f4b932fac00
- SHA1 50ec50618378b7d6e86f5889e7f7ca55a69e5ccb
- SHA512 88a90666eb64a013fc2d3d3691b5f740ab1aabbc1ac3ff8458f6f9a301e90835214923eac0e4a2f6a067bb0cb12fdaa7a0c52c117ebed116d1bd67881ea92c43
- SSDEEP 3072:LOPKVwT19oynwHQFQXB+Hg2p3l6e4wk6FkkkkkkkkkkkkkUMkkkkkkkkHHf8OfAK:LOiGTRnwL+Hg2p3lT4IIkcJb
- TLSH
  T1E2146BE9EA87C4F2F6A36C76667AD7674530A6124034F6B2FB49712DB4F3361250830B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  mingw32/bin/libfontconfig-1.dll
- Size 316KB
- SHA256 c0c58ed0634f92fd5001eb42d4b9b1b96f5462f4a5fa4f600dc926ae06463004
- MD5 32ba2737fddee1cfdec55b00d3d880b9
- SHA1 951de9dd69a4fc3374810405878a323393990b27
- SHA512 cb9e210e0068e7b352bce97d45249ec36a7f5b67f813ccc196f25b571349b3d4904c8291840b6ee75b839861dd906cdc10130a39cd9ba97d84175d2efa5be48e
- SSDEEP 3072:SP8inT/bqE5GM3Cq+MFBKNtDQosYHnP0YmnfchxWcJXMCN8sHEObzlG3jVi5m3F:SjnDbdyq+ACDyYcYGfchjJUsHEDY8F
- TLSH
  T11F643A58FA8754F1FA6351B5968BE7BF5634A9024821EFB3FF0C3249F8737425A09206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  mingw32/bin/libfribidi-0.dll
- Size 145KB
- SHA256 017729d71777e761c87be454fa7b5b67cd67641cb62d1d93bbe0b1c897fb345a
- MD5 b0c2da5ace80ee71301900c4f30e5de1
- SHA1 10bbd5a732743aa15f40fc4109201655368b9e89
- SHA512 eb39f3aaf4502729442ccf71a3881c28ae4bd3a65239076e8241a6fbdb99f0034cc985789d849b7df63d69e51ed41b781d7c2f397f95277eb475c123a677398d
- SSDEEP 768:s/9GHDDGjF56wQfXudnyTp4wscx21ad7qjXqO000yuhW5EdmoWVk0Ys4+42DmZbs:DHvG3sf+dn4UQ1eXqO000rkcuoMh
- TLSH
  T16DE3D507B1438EA5E7E2A1758896DFB54C207DBE4B13A636AB79D23CFC766E304009D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  mingw32/bin/libgcc_s_dw2-1.dll
- Size 121KB
- SHA256 851e72093c615942f18c31c706c8024735a256f2a9ef2004463cd69801ed55cd
- MD5 ef342e4dd8fcd354a68eaacf9c527bbb
- SHA1 bfcb1d84db041dcc35553ce703afdaec5232f441
- SHA512 95d18e89b8cb9392829de65e7ee8ec7af8b9f22c7398928b7f51358d58b070ae0159ab655329ebd3a81a54a4aa0d5aaa74b7e4900c3236f25e50ad1e2ca34751
- SSDEEP 3072:oRvT0WUWJFNEn9bufmWAHE9pQIAOBzuE36:ET0WUQE9Kfms9p5JuEq
- TLSH
  T103C30A23FE4710F5EA9399B4810BAB7BD9246D064130F976FF48A74EF436B43E41A50A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  mingw32/bin/libgdk-3-0.dll
- Size 1.3MB
- SHA256 83ea7b867191ec28f8f33bdfd3264367ecaab41b144a8b8d8dfb9e4c4e7b410d
- MD5 faf0840806944d833ee6d462f2bf0519
- SHA1 85cc0521f990916264efe4a9bf8b7f6440777be6
- SHA512 46b8a09fb00e541c9d5ba8c210b1ee0889ceaf800908c824dbd84448d5748418a2d24a27cc3ee58aaaaf672fbdb4d5bcfcaf40af6b2ed27a929512ba42a0cfdd
- SSDEEP 24576:mRp9JKokIrOkOfWMXeZT+pl15/QFBJZAprfQGMT:ap9DnT+pl15/QPTAp8GM
- TLSH
  T15355B578A6C3D4ABEB63D475454AD37A02296D01F5319A72DECCBE4BB8726B33007346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  var/lib/pacman/local/mingw-w64-i686-adwaita-icon-theme-3.36.0-1/install
- Size 483B
- SHA256 60788a7f2fdc26a7cd1c962093991171b4236c2ff74dcb4a23aba8da74a41ff2
- MD5 234d33ebc48944f608685a180d9583c5
- SHA1 8f4f6ab926585106a94c1ac673cfbb3ee50c5469
- SHA512 4edc04738ac4d99a09865c014db6477efbae3a7bc709094ef45d9be10fa7fb1839416d4e2dc74bf8323e1dd6d608d9a9da019611eb304d86f13e37e57730fd90
- TLSH
  T1B2F02E433067C6F9DD7749BC74E507031241C0EDFC4208C0B8D9C47847A213527AB438
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29
- Target
  var/lib/pacman/local/mingw-w64-i686-fontconfig-2.13.92-1/install
- Size 744B
- SHA256 5c4882f0953f227175d8af223dc209e495bc820fde8a748eca27acc1d6fc4abf
- MD5 d29535d2de37bb26bc286b83034f797c
- SHA1 e65003ff584aef18e05c8aa567e7ed8c52913b18
- SHA512 6b19aa1e63ea2bf883107e21693cf074342704a112ec988989b2ba7e2f832283e728efb250286d9da0d0ccad6a75aa71167fc8d2556bad13bf2f8c4e6a8de61c
- TLSH
  T14001284379B54B741058C9B1B2A261183A09217EAA052DAC78A3E18C17E170426FD3BA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  var/lib/pacman/local/mingw-w64-i686-gtkhash-1.4-1/install
- Size 222B
- SHA256 b305344e9f5c2753ad6a5feb84f6a85b8a6836c7459939128cdd3cb7429fe496
- MD5 71d7bc3345776f8b0158b93000999beb
- SHA1 f0b32902d79f0ad95ae0c0e6df2cfbef939b8f25
- SHA512 460f93fe546d61d91b67d538dd9678c4fe71dc663d8ec6e0233d421942e544cde58e874d82c04edb6f2c28609dea871c9da479d454f518988a5398e929af5aeb
- TLSH
  T1FCD0C7C2759AEDBF7EA717E838E242170B0184EB5C5351D065E188C427961774017135
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31
- Target
  var/lib/pacman/local/mingw-w64-i686-hicolor-icon-theme-0.17-1/install
- Size 497B
- SHA256 0911da39b5cb330d72fee4f4aa494dc2b678acd418af214e40869571831e71a0
- MD5 7aea515d10ff8ff22c627d2625c9daab
- SHA1 670b96b044365052bd3e0eda8963dbf673a099ad
- SHA512 c4217608470c3ac8543810fa657cb1572e820e0ac16c452fb74aeb54d1bef27c1851379e3fb8685587c45829430de47a59675f32ac1faa614a88280f9ce08db6
- TLSH
  T186F02E4370A7D5FACE774ABC74E54703134144E5FC460DD0B8D9C46847A12356BEB438
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32