567a78ce60f72e7f91c5467287a3c31ac0865384b2b8ea69db3c3e26cf3f9e9d

Sharing

Copy URL Twitter E-mail

General

Target
WindowsApp_x64_Release_2.0.1071.0.msix
Size 187.2MB
Sample260504-q46hksc19w
SHA256 567a78ce60f72e7f91c5467287a3c31ac0865384b2b8ea69db3c3e26cf3f9e9d
MD5 b254650e7445f2227966ec80ffb5a8b7
SHA1 d154a9bcbdcd312cab5078b9008624708464cf8f
SHA512 b9c4bab95be74c595f81007c9d289e883c4b94679e26931185d96770b3b6f3d215944f73e3e77fe2fdb85e8a7c3cec5e246116ad392535f2c051c6eda94d5d37
SSDEEP 3145728:alxHDmxBKH5xBuApaIf5d4G0kjVse/isWCl4P0f/APmTdvsVzlnMkc3QE8USb8A4:alxyHo5yApaS5QGa0is3KP8AkdvsVzj6
TLSH
T1C5983389FADBCFA3E2065639A23FEDFB2324D1C050D4514A837B2E5C9ED171102A759E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  WindowsApp_x64_Release_2.0.1071.0.msix
- Size 187.2MB
- SHA256 567a78ce60f72e7f91c5467287a3c31ac0865384b2b8ea69db3c3e26cf3f9e9d
- MD5 b254650e7445f2227966ec80ffb5a8b7
- SHA1 d154a9bcbdcd312cab5078b9008624708464cf8f
- SHA512 b9c4bab95be74c595f81007c9d289e883c4b94679e26931185d96770b3b6f3d215944f73e3e77fe2fdb85e8a7c3cec5e246116ad392535f2c051c6eda94d5d37
- SSDEEP 3145728:alxHDmxBKH5xBuApaIf5d4G0kjVse/isWCl4P0f/APmTdvsVzlnMkc3QE8USb8A4:alxyHo5yApaS5QGa0is3KP8AkdvsVzj6
- TLSH
  T1C5983389FADBCFA3E2065639A23FEDFB2324D1C050D4514A837B2E5C9ED171102A759E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  wnc/cs/System.CommandLine.resources.dll
- Size 18KB
- SHA256 46b06ce11c006842c6448670db14239b1a3f1198a6f1a6e85d3570ae15fa3083
- MD5 3e34ebca0f8c970ab30194a7f9579110
- SHA1 8cbfa709ec62f365f43908ac872fd9b09ac7f0b2
- SHA512 9f3e7ccdb4ac409967a843c8bdcd0ea5aea71a38901bc31924c47e80762fb1723446b1e5f1e7ebb8b9b85f2749198fac16f6691d0d7981a2d3723dd62fca1c97
- SSDEEP 384:lVZiNSNAFfNmL5otfWSg4R9gclNXKjR9zMYiJD:ltAFfNrsU91E9zCD
- TLSH
  T13D82F782A7FC4106F9F76E706679D9026D3EBF972D20D51E1695A10C0DB3B80DA3273A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  wnc/de/System.CommandLine.resources.dll
- Size 18KB
- SHA256 cb05a4339bf880bfdea2009e9c706087d9b1ab789480daec162e99377adb6be3
- MD5 f99d4d4b16aae3e62f0d51393323c728
- SHA1 be8840df8e5f3af65ac951e2bf8a7b4d31a807a4
- SHA512 942b3b31aa97555f61a7eaef0fd1a9a8b5e5d7f748ac4c5c815a2ce44c5d93e067ca2b5fdd0a5cd8095ef5cdf3646aa45060622bd9f50d853e273d81554e358b
- SSDEEP 384:YZvjSNAFfNmL5oWfWSg4dlN8tAUyR9zVqws:XAFfNosdAU+9zVa
- TLSH
  T10982F852A7FC4102F8F75E706BB5D9426D3EBF971D209A2E1598A10D0D63B80DB32B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  wnc/e_sqlite3.dll
- Size 1.6MB
- SHA256 63148355a1836f29ae8031b1528c9f8d03a3e5696796d7a0f6a0dfc388d02219
- MD5 7bda3ab84c2a48df34f4bcf1e230fcd2
- SHA1 6b5bdeff24f8e905451ec05ce6d03ea60dd2284a
- SHA512 b073766797b71f5949db15573e535a6073cedf8d5f724c45921e73771ed786d0efd4b200cbfaf56777d83dc46f63b998a3987d11d289330e2ffeca29d8e19efd
- SSDEEP 49152:GFpe/1CmBo+xp1cXQDd7H7GZjAkjDOnDuQ+7XI:PJhcXQD1GZjAkjixi4
- TLSH
  T168758D47A7B900ACD8A7C27885179707D7F170051764ABEB55A08AA92F23FF61F7A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  wnc/es/System.CommandLine.resources.dll
- Size 18KB
- SHA256 98785bf5c318c461d2d77fa6a8a11556f38c2daea1ad9d9be353a66a787660fe
- MD5 a72b67e70b76935a4da965e14226e15e
- SHA1 764b01929a1753d7433d679f43d88a66074760dc
- SHA512 7e570d4ac652ec2afa1535ffe21e7589ea6538f5a2bc190bba84283fa0a7a406e1b1191783a6a1b04ce4bc53b4f66f308a5d6d6e54591c7c775f0ada4418a890
- SSDEEP 384:lEZiASNAFfNmL5oifWSg4l9gclN3FR9zf2pmn/u:lzAFfNwsM9hX9z5G
- TLSH
  T18682F956A3FC0205F9F75EB066B9C5026D3ABF936D20D51E1295A10C0DB3B80DA32B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  wnc/fr/System.CommandLine.resources.dll
- Size 18KB
- SHA256 c1332ef4a495af718384b72b4bff5423a97d49562ac2a48019e63335d147a80b
- MD5 3e49e6ca7753704d907ca85500bcfb80
- SHA1 410fc490496cea7b51cc77493ad1bc724fe365c3
- SHA512 dc5d76f5e122cf05456cc0116051283c67b3278c2216ad0ac6e6f87cb4a304976be85f7f0164494e6fdb3dfcb40d0a0d152045e581843dc3a482891f72f9076a
- SSDEEP 384:ytiESNAFfNmL5olfWSg4mlNNU9xDE3R9z668:fAFfNDsLULi9z6
- TLSH
  T15582F852A7FC4106F8F75E702AB5D9426D3EBE971D20D92F1698A11C0D63B80CE32B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  wnc/hostfxr.dll
- Size 357KB
- SHA256 d80dba73a37852580928f0311b633affd6f6b271c4e22f0ad2e8fa5cac813fb0
- MD5 326a8bab7e1572c514f2b100208660c7
- SHA1 35641d5ff7989b5c4d073dc2e60a77ee431c3f0c
- SHA512 f991aaae7857c7ff08fe66bf6974d612d9615f870ec8c227393152bd9cd399daa397e63d11548f8e0935ec9ec27f317eba500be310c41cc6dc13bad4a2609691
- SSDEEP 6144:Uk7UEgQZhFfr82ZTOgQJdNTfDIg6zjNzLU28tdnpbyAbmO2EhFPVyMswcSxLX74S:ol2ZCHuRPYR53V1sa14IXZKR+
- TLSH
  T1D9741916D6E8017CF0B7D679CAB28901EB727C494BB196CF139099661E73BD09E39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  wnc/hostpolicy.dll
- Size 397KB
- SHA256 7fe88a38843d6e9166951889e82ff7a505cb4ad5fe4579282e8c797cd5f9fc8b
- MD5 95d42e628cb476ae3e678d7374232bbf
- SHA1 bee1d0713f3ec3abf374b54d0bb34fd406e55b9a
- SHA512 bbbccd338b5f1a9313ce263d2940e0611f040e96a01c05a2c4a82fceb8faa177374e4ce4e60c73980fca0ef52bd8a97f849aa0fa1b08b812d3acc29707ca936f
- SSDEEP 6144:xvv154WmShbYPfR/Ij8O/lFBfOt/oWTWQc8V22FvC78gN5CsQQzZqQJ6JlSmnW5M:xpmpq/fFOtOIwJ5aIXVT6T7PIT2R
- TLSH
  T1BF842816D6EC0078F0B7E6798AB28941EB727C4E477196DF1390896A1F73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  wnc/it/System.CommandLine.resources.dll
- Size 18KB
- SHA256 95fba7578646c91daffbfe1fa8bc502d32c3ad25321e2427cb5f84cec86743b5
- MD5 6874ac3e5e322068af95f5e32b543d8e
- SHA1 545d1f2c254a099f66288bcf1fc13a74a04e63f6
- SHA512 7b736d24dbbf31c069f9ccd977db156d32eafa16d105405ecbe155cdba2713cda9d4741d8f746314bc3cb93e25e26904678f0f3dd262230f45871b2f61188204
- SSDEEP 384:4ZilSNAFfNmL5oytfWSg4z9gclNnoR9znJd:UAFfN2si9q9zJd
- TLSH
  T162820542A3FC1106F9F75E706AB9D6026D3EBF976D30851E1694A10D0DB3B80DA3273A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  wnc/ja/System.CommandLine.resources.dll
- Size 18KB
- SHA256 3e726feaa0e4dac2dd6f0ac9dea841af46fbcb5352ef625d59d74b2d9dd9907b
- MD5 2c7cbbdbfc0149a10940c37f2778f06a
- SHA1 1f4dc6d3fa0a7eac8bdeb92483f61026e3af1d4b
- SHA512 3632a51dd39e10f852e09beace7119f6a67043d2edf72be60fd53478c3f8487b4ec99f771f5f1dd5e5a1e9d04c1a4a1a5ef3f78c47e9ecd6d3f4116dea64293f
- SSDEEP 384:2ZdwSNAFfNmL5oYfWSg4XlNuArj/R9zCPfFaC:yAFfN2sbArjZ9zCz
- TLSH
  T1B282F842A7FC1106F9F75FB07AB4D5426D3EBF961D209A2E1594A10D0D72B80DA32B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  wnc/ko/System.CommandLine.resources.dll
- Size 18KB
- SHA256 03a3e10932dfd5bba0a490bdfea4a4a2534f750d242153de99cf55deb4815cdc
- MD5 ba54010c57dfe04967b39e6983626f45
- SHA1 d4dc4eae369bae638f828cb8a3f0f575fc6c6694
- SHA512 30c2112160cbfc4979f47e18e9136f7c69a01586d41d475468b0f0f36e0b698b2a6bbb3f4539e52da7dc40d29050e9ec42767ed202bdfb61a59fe853e6d00799
- SSDEEP 384:3nisSNAFfNmL5oxfWSg4vlNHDrj/R9zCPfyC:sAFfN/s2DrjZ9zCiC
- TLSH
  T12D82E842A7FC1106F9F75FB07AB4D5425D3ABF971D209A2E1694A10D0E73B80DA32B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  wnc/localsettingsproxyplugin.dll
- Size 674KB
- SHA256 b0a66b98ef6fc32753af9372de6a6217b3529641824d411005520509da24ba32
- MD5 913b5570e1d45eff1a3a77db8b8c9543
- SHA1 ca6876e390d0f33ae39594a64fc466a7f7ab72f6
- SHA512 d77af4a03be41626c04b066f9e870a1e28171507bad57890ffece82b008e2b77ddc14671a69df5e10732fb32c1283c6c54dc20d68f7d87f24a1aaf3b8350cc90
- SSDEEP 12288:MfAvOUGd1jgsPuNXz55JqA51CeZmOh4bOjaRlYpS13:MfAvOf7uNXz55JqAzCeZm3bOjaLYE13
- TLSH
  T1D9E47E2A7388125DE07BC17EC9D74952F7727C0903619ECB13A086A91F6FBE85B7A701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  wnc/msalruntime.dll
- Size 2.8MB
- SHA256 67a470814bd3d912c3138231141c1db62cad02e9c6e5df1169fc00747af9d40a
- MD5 0108d3234c134cd2201f9c1fd9e8ea41
- SHA1 1bfab3a8eeb0557b17d53bcb8c9bf559b7813766
- SHA512 bf1f8d9e1c884805dace5069ecf485ee70c42f316700927a60712743ee6726aff610318810153113c795ca5f75afc8a5483ba61bf061c463f4a88789cc10d49c
- SSDEEP 49152:d+abSuZwzSOT3F8ZAZ/i8S+mazZzDPL959+uyEcFFTtMzg3cfYbZgrpzJ67mI:duftZ/m+Hlz9XrcPtMzEZ2I
- TLSH
  T19AD5295AF35427A2C0F6D27D4A078183D2F1B4970372B2D70AA65765CFE7AD0873BA42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  wnc/mscordaccore.dll
- Size 1.3MB
- SHA256 286009f347057e2feec13a28297795b8ff954211aba0d5cfdbfb3b9b54fac3fd
- MD5 f7137841cdcf1579eca536a1b5f75f60
- SHA1 3c83966328fcd13f44de1768ecc79705f329a06e
- SHA512 117d33ff7a04d256f80716f1f2a0228a2c80bfcaa83215dc917ca43b742b1a2b81703a95e15a482df5e67eaa841b41b1f104548a08d6dfcde16b543089242917
- SSDEEP 12288:6AeUnSAE1k5aU8BEzxK6YYX22lh3pNvuYwXZTf0yUAoyC3+xkeuaSqQPE/l735Ri:6jzA/azCvV28bgZTfhUx55U35R1po9
- TLSH
  T1B4555A5AD6BC4488CEA9D0F8C547491FE7B23814077466FF46A48B192F3BBE66B78310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  wnc/mscordaccore_amd64_amd64_8.0.2526.11203.dll
- Size 1.3MB
- SHA256 286009f347057e2feec13a28297795b8ff954211aba0d5cfdbfb3b9b54fac3fd
- MD5 f7137841cdcf1579eca536a1b5f75f60
- SHA1 3c83966328fcd13f44de1768ecc79705f329a06e
- SHA512 117d33ff7a04d256f80716f1f2a0228a2c80bfcaa83215dc917ca43b742b1a2b81703a95e15a482df5e67eaa841b41b1f104548a08d6dfcde16b543089242917
- SSDEEP 12288:6AeUnSAE1k5aU8BEzxK6YYX22lh3pNvuYwXZTf0yUAoyC3+xkeuaSqQPE/l735Ri:6jzA/azCvV28bgZTfhUx55U35R1po9
- TLSH
  T1B4555A5AD6BC4488CEA9D0F8C547491FE7B23814077466FF46A48B192F3BBE66B78310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  wnc/mscordbi.dll
- Size 1.2MB
- SHA256 df79db0201268aea34dba7995bfff7dba07e9ddb37f61149d9901bd30687c248
- MD5 1c5033ad1ac069cbf1c7042cb6341415
- SHA1 15fe40c1c27d81a8d82f27f19884cd35e216eb6c
- SHA512 7a739cd22e98acb9c53ddba5669badad84728a9a64a6571a885a25826007c860687094334134255078379cf12d00aafb4b53233e8558ee8091d6a69bada70de0
- SSDEEP 12288:RvGsOCGcJl9+VCjNksJZaZz/IHscpwfgIHJRAk7dulkVjFPU2o1OrYYEkyxdl06t:nl9+QjNksJEZTngIArmVjGMT2dl9t
- TLSH
  T114456C56ABFD5199D9A6C0BEC19B421BFA70384523246BDB0790C61D2F3BBE46E7C310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  wnc/mscorlib.dll
- Size 57KB
- SHA256 a7e05974c4d370834a2174b0aa1da359fab610a354b86aca13b7c222d0c24625
- MD5 359fcf6233c363f923b0be51e784991c
- SHA1 b6262875502358c7ddb97d6c8de32620b3410306
- SHA512 288493fd53cd2abcdefb308a1b11e6f8ec59a332b5e9313b56bbc331d95e0b6e33fc4fbed50a8d7315c93f18fee761eef4d85b58c5bafd6e1374dd5eeb2b7e10
- SSDEEP 768:9t51EDMpCUoqFY66Gw17oqZn/TEHmyrchswz6EEZcYf5o4ba2yGlG1QeY48lCiqe:9tFcC3ZcYf5o4bZyGc1A4cDGzEmU
- TLSH
  T1D0430871ED0C9733CC8BAB79DC77A48905F273C634761AA5A849D51704CE7A0A2337AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  wnc/mscorrc.dll
- Size 133KB
- SHA256 a7d1e6c4ee462737d2d938425ce1e8617e61eb7a3f9a604d52c128e0533012f3
- MD5 5f32b083610dbe4de4ccd0e3ae70afb1
- SHA1 f710d7c2ccb88462d6d21246395dbdeecc154060
- SHA512 70ef989d158ecda055453a5b373f3cba085ad19a7cb7b99d8823b2bbb4ee5687c983fefc6108d32f4ab54887720a6a23c43ffd7ed01faa7e8944e15ce2858985
- SSDEEP 1536:nxQ+91YWvh7xR+l5dZU49N9SqignwJ5cvBMgSIctpoECyjzz:nxQmal5dZU4dSqHns2SpSkjn
- TLSH
  T121D37751A7F95218FAF73B74ADB95AA00E7ABC96FDB9C21D0240805E5D71A40CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  wnc/msquic.dll
- Size 511KB
- SHA256 43c04cdadede4649fc0f89d36120fd2cb1b8e3dbd5ae0eb99b34801dd0de0945
- MD5 70d5aaa911c6f60f11c90d1086f296db
- SHA1 e3e7ea803fab0454c61392f88e22535260bedc8f
- SHA512 94b81862ca6d82989131519eada9c97a8f2dcdc9de4ca3d3c47c679c1e9989a9d664f9de88ddf9bfba404013d34464cdb90643c6466ce647d2b0e50ab6b52f94
- SSDEEP 6144:XKQizqeRb4AzDBBUE2SHxkKl6a1TOAwTrySuOCF83IHL54WstAVic7wIHlt6L6/v:6Qk5Rb4AzgUHxr23UF8Wl4ht+V
- TLSH
  T168B47D1267FC14A8E0B7C378C9278527FAB27C244725C65F6391922E1F63B50AF36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  wnc/netstandard.dll
- Size 98KB
- SHA256 de4b31e7dd0b0bf5e068ed955a363cb5c1fb45fd45b6786d9d15e9154c712384
- MD5 5372f644c85568a8d4b17a16cbd8020c
- SHA1 aa9e1433ef354385e80c2e80a8fbf5a605958f33
- SHA512 e62fe2fece4d6ca916e7f17ccd9c7b52811eec468a97c55aea97fdda58abcfaebc87babcd0973507419cf61969b85a83f40d98e1890ac9bac6745218608632b9
- SSDEEP 1536:nYsYXj0p2NYq5V4bgDHsPdIpuSE5L3Ukcz9wuoTzc:YMkYe4bgDUAxCuwg
- TLSH
  T137A31660BE14D773CDDF97B6CDB7A85117F232CA11720FB5A15A800B45C7A94A33A38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  wnc/nxtwebapps/boot-to-cloud-connect-latest.html
- Size 3KB
- SHA256 3f21f6a3e593c17a4e01018bec7eb6c85208964c7480afc252ed48b6eb973acf
- MD5 3591d0f790226591334774e53f231771
- SHA1 1095f2ca77405ad19de9b445a27f1a141bd272ac
- SHA512 5769aba527b280b7558dceb087350d4d0b24017c0d4012ad7b0f1c6b9de21657bfbd4aad784f9c1966d95851525d2d6903e8fbb3e6f7319e9d8e6d8218d6fe81
- TLSH
  T1D361690D906ABB27F091C62F31D5A94338113D418662F57E06A07F1E0C9BCB754A9DB7
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral21
- Target
  wnc/nxtwebapps/boot-to-cloud-connect-latest.js
- Size 1.7MB
- SHA256 c7d47fa3bb4bbd645aa05788224279e464d10a207dabec55b312dc87e483be39
- MD5 9d5d6a170572d1c60ea215acf7803ddc
- SHA1 0e71f9fb4b7ae4db2e98b8b99c59483329f08e50
- SHA512 e412892f797e29c765c9072842237564b52eab7539ffc2efd867f69feaedf267f00f7c72e2f1dab9563f6018aee77448d3d7590607840b580554939307ef735c
- SSDEEP 49152:oLQcSm5pkJTOjucy2j8fQHe3JuGvszDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMOJ:T
- TLSH
  T1A9858E057165A43A17C361F48A671103D230443E645984BCBBFCF9EA4FD9AC472BAFBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral22
- Target
  wnc/nxtwebapps/boot-to-cloud-connect.html
- Size 3KB
- SHA256 165ec6b7a71e4297408977359e2970687d117cf01fe21208cc8da30a6b775863
- MD5 b3cb8e097259dc65a6514be43f4c08c7
- SHA1 cf399a184725d28d86caa11b3720ed46e15144e9
- SHA512 1b1c761d2acf83f38ffb1c963237d3322d3a2f638921aec6a54450bf46c1b83bcd51e9883a78a6a7a875e3f469d768019024166846ad6d64e2219ef4a0effd07
- TLSH
  T1DE61790D906ABB67F091C62F31D5A94338113D418662F57E06A07F1E0C9BCB754A9DBB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral23
- Target
  wnc/nxtwebapps/boot-to-cloud-connect.js
- Size 1.6MB
- SHA256 ae4ea3d408123d4a5fcf4ed712c0ffe1f0b070f4002500383d787c853ff12cd2
- MD5 1ac6908def27192ddfc631276e38d157
- SHA1 3850d26bb8d4d2e80b0e648abdb471592d4067f1
- SHA512 c8bb90d7d0bfc992435fbd6d77d560b3951486cf7589924d9242a9c7168bd95640cbb44b806a655dd5ded46a28ed9e32b1548636d02a876a12a9dd3b2f755fe1
- SSDEEP 12288:yicKcniNcfZTOb08WvjeuKbhIjAM5i8fWh5so8mnuMzKhZzZ1UHrZK9P:+fJuhIjAM57k5so/uMza5Z16K
- TLSH
  T1DB755D097165A53617D360F086571203E230442E545984BCBBFCF9EA4FDEAC472BAFBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral24
- Target
  wnc/pl/System.CommandLine.resources.dll
- Size 18KB
- SHA256 48bca3fd6c543ec352f4e779bd91c8434f12f1525f8a21021346d1bf81f7b4f8
- MD5 c0b4b8ccb79f909db3b4f46b3c37222c
- SHA1 90243adcd31b867673334f67dd8a142cc4ca940c
- SHA512 5a2ea0d67caba8b9b08d89f752db38d509ae531c56746fff7fb7637ec993bf5b637bd89859f2ff788c42a71550f51cb171bfe14c840bf561b85dd13a4dd9ce8c
- SSDEEP 384:vRi0SNAFfNmL5otwfWSg4r9lNSNJU9xDE3R9z6Odk:aAFfN0sHvULi9z1k
- TLSH
  T12282E742A7FC0146F9F75E706AB5D9426D3EBF975D20D92E1698A10C0963B80CF32B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  wnc/powerrequestredirectionplugin.dll
- Size 673KB
- SHA256 2a35a2e4ed60efd0c184c2fb773c5212e8a9ed7941718cc6c69f567e8904b1a1
- MD5 5ac5539dc313d2eaa010da4411b5f6c7
- SHA1 5059bfbbad401c149110198353a4688971ef0891
- SHA512 9eb660c32b0f2c8000479544f56de56f1001422aeaa5de9d89164964dc1bd239f123c3c648f8f628ec28bad12f73a4ebd25beca2eee60095b76cf1b3019b79aa
- SSDEEP 12288:BSaGIJyg+8lvLi1kOT3lLUkc/nmV3J9VOqqv:BSa7blvLi1kOrlLUR/nmVn7W
- TLSH
  T1B2E47E2A63881298E17BC17ECA978952F7727C0503519FCB13A087A91F5FBE85B7B701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  wnc/pt-BR/System.CommandLine.resources.dll
- Size 18KB
- SHA256 58031e20f665a9a5965dcab4dcb545a117cfb01bf8bd47bbca7f9feb5191e595
- MD5 8adcdf2511ba7f13f16e316db142373c
- SHA1 a62172fa8a8bdbc131176a76b71d7b093777a85a
- SHA512 4ad1768d40a5c2aa6d8247d1dd7d7dd39405dfc68bc5389d1c5c5af58fa3460c57a6721f6c2bb48a3d5e645cae40a57826df4f28fee2e0e188b3c563193327b4
- SSDEEP 384:RAZhESNAFfNmL5oZfWSg45lNNkUwleR9zzw:RCAFfNbs+Fz9zE
- TLSH
  T13482E692A7FC4106F9F75EB06AB4DA426D3EBF971D20951E1594A10C0973B80DE32B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  wnc/ru/System.CommandLine.resources.dll
- Size 18KB
- SHA256 f99793da7d9e0700c1086c907e3806e8b8b582355b9b4a4aacf7aa694bf0dc0e
- MD5 62ebbf6ce090a418cf0f80b5876c8fc8
- SHA1 0c6d7656062fd456a6edad2cfa7646315b8e5cde
- SHA512 1b6a1b7826dbbf78fe973418f61ce6ff7548c08b0ea0717dd0de092c214d71d6376789bec696b34c800d3e382610c135e1eb2e1767fa7dd5ce5e7581ee64027b
- SSDEEP 384:KZirSNAFfNmL5ojfWSg4l9gclNuki+R9zQQg:EAFfNZs89L9zU
- TLSH
  T158821946A3FC5206F9F36F706AB5C5026D3ABF975C20C51E1281A10C0E73B84DA3277A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  wnc/runtimes/win-x64/native/WebView2Loader.dll
- Size 156KB
- SHA256 61182b3dea1578b5ee55a42ac047418e91b7bb8c407dc3aadc888541ac0e2741
- MD5 a75ed8ff8cf0a4c114f094c91190eb69
- SHA1 d8de3f711987fdb6743ad2e58032c73e9f3fa1b8
- SHA512 89272f88f8a8538c784d337330a6e0cad3aa4ebec7675d4b135ea8f23816b23df8b64daae1802ccb32cf0ddb595265bdf6071a93be8389a2c2ae7a0321402a08
- SSDEEP 3072:GKpb6T599mlMpgeMiqa5agdTl0RflJGhaTcZYEtJomT+JJg7E8:1Gf9m9XkagdTlMvEtJKJgP
- TLSH
  T132F35C57B3E510B7E17BC23885634A42E772B81157609BEF0364467A1F23BD0AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  wnc/tr/System.CommandLine.resources.dll
- Size 18KB
- SHA256 410217c9b74236e68b23ac625e35a4e1d0181794a11f67e6e82c4cbeb6027d22
- MD5 2a5112ad867847970085bde66ee53003
- SHA1 896165bef76c3e42b6593a5144682158e3ca8c2e
- SHA512 4aa23a76afc10d97dfc2487d21478d838ec18753efc5a868f56c8ca88b2e35394d89be4df0706ef3bb8944c654b57a02b63ebc6f6462d284247ede7c6ff6cd24
- SSDEEP 384:qLi5SNAFfNmL5oUfWSg4BlNwrj/R9zCPfvjy:yAFfN6s3rjZ9zCfu
- TLSH
  T11682F842A7FC1146F9F72F707AB5D5426D3EBF961C20992E1694A10D0D63B80DA32B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  wnc/zh-Hans/System.CommandLine.resources.dll
- Size 18KB
- SHA256 c46c6e405eb003048a294a4ea638e24a1466644861358302e0e2ea1e50ab8c2f
- MD5 fdb6c577e01cb1bcb2a4f3cea37955f5
- SHA1 9a68549c5f081cea4bd15588e5a458ee05a56bcb
- SHA512 32c49420a3866f669bcf748b4792837f4224c8253b73b09a1219b6c056602b29cce3c874291dbb96391d63a4dca2b8eb95b95510c377cece240a2460f4c9b714
- SSDEEP 384:lZi8SNAFfNmL5oGfWSg4k9gclN6WhjR9zMYiJa:CAFfNgsh94W/9zCa
- TLSH
  T10E82F786A3FC4105F9F76EB066B9C5426D3ABF931D30991E1685A00D1DB3B80DB32776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  wnc/zh-Hant/System.CommandLine.resources.dll
- Size 18KB
- SHA256 6a3f77f932a182b74de8c75365fa124ad5c75dacece30f9042e82c93a0a9a8e8
- MD5 91b6a5309939784b551213d36b1486fd
- SHA1 ab3b5c9eeb314154c34b452eb225719c4ca8b863
- SHA512 398b8d26a66812931f0d18e7aebdb0a6f7decac9bf9f24a2453a9b8e19cb22021b77b0a29232ba871f67c7c1c5c6c40b4e4213b80edfac2987356e1ced33b945
- SSDEEP 384:SZi6SNAFfNmL5oVfWSg4VlNvrW9R9zrvK:HAFfNrsr/9ze
- TLSH
  T161820852A7FC4106F9F75EB06AB5EA426D3EBFD61C20D52E0595A10C0D73B80DA32B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Badlisted process makes network request

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32