6e81c7def3848654fe921c63db8f2f71ebc06310da3171eb38ca8e70ac9417b3

Sharing

Copy URL Twitter E-mail

General

Target
XWormV3.0 Uploder.rar
Size 24.6MB
Sample260522-nslypact6y
SHA256 6e81c7def3848654fe921c63db8f2f71ebc06310da3171eb38ca8e70ac9417b3
MD5 439e2bee014c2c7f0e12b6acaaece58e
SHA1 f2fefb7a5806a1e874b34b09d6455784ed7817b7
SHA512 245a6046b6ac490e77aafb75d12626aa1babfa822baf65df9c494e5cb427ede5808108a79d2cec294fcf2a88ceec615537d5ed5ef2a2de2bf9b3a593139ad315
SSDEEP 786432:+OamVV8f9EIKKBfUTbBB5W4b4sJ3Fprc+TPByfVkOQU:+OamViExEUTbf5LRJ3vg+D7OQU
TLSH
T1784733C5B469939D0C90BD8CF983DACADE047FC10998B739AA22D441BD6DF80E7D4A17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 4263c50674c6ab64a9b5a1ad5e301628baa975e4c919d0c7767ec39adf4cbfe0
- MD5 d45c2a95c5670074713be9e669e4d610
- SHA1 96d26829b4ef8156eb5906f84535866f7f859203
- SHA512 e15a8fc7fa81ad1a6446db7c18494b2e4c15ab28844dbb77deadcae72064ed6bd6e08fe59604c27bd4e44ed059c1a424f322a753293d76bd574262aa31b9e3ea
- SSDEEP 384:7qIGejCUccJeGCJWM2YFegdT8Ft0Y7XZ3W6DMz:7qIGeXcWrCJ+EtYZ3W6Du
- TLSH
  T15B620715E3E54331C6FE1AB34C7363401B70C2099C53FB1E4EDC6096AF63A9986957AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Plugins/All-In-One.dll
- Size 4.8MB
- SHA256 2987ef4a83e2c44a9abe57cdd9a4bc2b8cbaa01f6835c45cfce180b4d978982c
- MD5 f21e73b79f9aec821c976b4fbae7225c
- SHA1 7be974156ad16f23f4b91b47c380f8c3422a9863
- SHA512 476bdb0c6ac8703e467c51b90b23e45ab72a2e81652e3106732b69d9d299c277c0f9d308117cd338089d3578ebe73d12559b4300fda24d32ca7f1991827aa8df
- SSDEEP 98304:pl19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:J9FPRkC8C9OH7c2ilInz0kfVo26Wsd
- TLSH
  T10F3623187FE18717F9EF97F1D5A2420A9BF4E053B356E79F5E9484E9388230089222D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Plugins/Chat.dll
- Size 18KB
- SHA256 eef8fb30e32b48e1480a6131de34436c0a8efafcf807856fcebd618661b7a6c6
- MD5 c1a27e18603cdd587ae47e0e4b71c5f1
- SHA1 9a8a3b938c0e4c79687750dbbd459ff3879c4c2f
- SHA512 53467107f6f0443854879d61135d73e04e387f9cc5e6ccd277732d582095eea9268d5ad6be1a8502421109ba77d86bb20d42efbe67b97d309b4c6c215b6575b9
- SSDEEP 384:KeUeLD8aDbXCtSeEd3uq7uQZRHUrwTKvt0GIKoIkfiUWGfZ:MkbCtSeE5uq7uQYr0HIkfiX6
- TLSH
  T173823A2DA391C3F2C6FD2BF64C72928107B1D221DE03FF2A9ECC946A9DA37854644785
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Plugins/Clipboard.dll
- Size 14KB
- SHA256 5a70530748decb0c81fb9c912fd3d75d7d493fd67675bb7dbfe141c3fda15587
- MD5 b23bb3be1718e1aeefc3e822119692f9
- SHA1 d4dabddf9b9d3f0b2adb86a3799f1cf9ec614d48
- SHA512 d66697d97146148978aa5f46cc14232230e553842601cc0e3b0eaaf86f21e91f907153dc710405df7d1dc32d8120134886b29ec164738cef0fa7a827a2ae90a1
- SSDEEP 192:KkAXyVpJlyIxlioHESRJ29u+6ZWSYASO3tOXXgNTen1i9iY6IW1mX/60/qAqEM7R:KkXVpuoHpMDfAR98STe1oi2X/6kMrwU
- TLSH
  T16A524B59B3D44339C6EE1AB21C3392800774D715AC13FF2E2CD8A0B15DA76D58762BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Plugins/FileManager.dll
- Size 27KB
- SHA256 f13aa0515a65a4701269a57183884846417688d1476c7252291ac5bf7149746b
- MD5 d2c7a574a9b9df92366a981761d494ba
- SHA1 d7d6c4674eac54102e61331fc116ac5abebf42ee
- SHA512 a876da49f048fffb0dc522d4f7471b1c1076fda327d7ad0282162b749375dc13797300f51ccb0b5d2327d6b6f6e0f75f3204a83a4a384108f1e34b7a179b0ce0
- SSDEEP 384:tp4K215dISbc/TY0mN1PGDQXSBJVYol/tF37enOAkxqb8cq/hsutzgk/b7oBxkSE:h21vWk0yPGsXAr7dtRKPb8V3emjC0b
- TLSH
  T1A9C22BAE3BD08211C5FE89B2597294080730EA039823FF5E7DC4359E9E33AD64E107E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Plugins/FileSeacher.dll
- Size 478KB
- SHA256 557a215cec1a3df37da8a6798354e79a3a70f548f7955cfa43a2d75e1d037053
- MD5 21e5acae055bddd2ad584271d77f881e
- SHA1 df3b8db334e5bce0597cea77a4770fad8d7db6fb
- SHA512 52896aabc03595320370a1318749e899b451020f74cedc511b6daa618908bcaa4aee7d0b808a4df6721e2c1a4f93e2f84cea00179f0c7149dccbe6f155eb3dab
- SSDEEP 6144:OPv5T5fIIC8W8XqeGtSV41QJDsTDDh0Yhe6dwxLV/vuhgS0mOdwcG:0nfIICLlS4Ys50ie6CfigSji
- TLSH
  T146A48D406BE8C657F1BF27B6C4F262A0C7B0E465A52EDB8F5D4024EE2D17340E9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Plugins/HVNC.dll
- Size 57KB
- SHA256 3a17d1922ada241def8a14f9ac7a7789bf2b5dd4cc9045ed08f28546982c233d
- MD5 cb5c8cd73ed161125e46bb455fe468b5
- SHA1 2f5852f549262e0a5ee8e385c336e3d9860e3441
- SHA512 e6f26e61e8c75fa18d7b6e8800b07104f1314cd312d85b3d3d0db7f8d482bc4582a7237643d24308e0b7ccb5d779b666be6216b3364e6d0d7ee9aeeaa40394bd
- SSDEEP 1536:uth/ecTkz12BWR7mmt+0d7tzGxh23tnc2/:2h/ejz12BWR78M7tCxh2hz/
- TLSH
  T124434B9577E98A31E2FE0F7A8873971083B1E1575913EB0E17C5A0656FA33868510FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Plugins/Informations.dll
- Size 22KB
- SHA256 0452d60d658a43929bf2d5bc049e2c57c2d61f58b6444bab88834c870305dfdf
- MD5 92ba1499b2547f0e38e26360f94101af
- SHA1 71b9ac23eca1c0f50517631cffe59ec1950147b3
- SHA512 1106d4386cda5fe98736138e0e6a01fb2e234700a9e5ed61e2b6a59cdfc82cf82dc2486488944ad009ad34fb3a04b9894bd52fea52968741350b09c7975d4d9c
- SSDEEP 384:4nQf5APE80e6vkD7RQQpOJXWn3TmoNhxJNSOFD4rfZ41:4nQfGPEOD7vcJKj3NSDZQ
- TLSH
  T19FA21A98B7E44265D1FE2AB30872904513B6F70B9D13FA2D1EC8929E4D737C4CA54BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Plugins/Keylogger.dll
- Size 17KB
- SHA256 c2dc7f27304ad0b1a726b5784b030207b93765a8986c4a4f3999733097a4d43e
- MD5 666290af0aade9cf9f377c5fdce9cba3
- SHA1 d981466e4838b2bac54edf53548169124bdea145
- SHA512 23ccd8c1ea776a70637dad70ccea3f435d99c7465fe99a6d4f8f726f6c320081f5d7327f654bc0f7abf0389b6b95c55809f474c52ca2e3898e99efbe454e77d9
- SSDEEP 192:tLCuLDdyxqvzfZ3ium13gyWacxv8ilNwOHLnq4UP1XPeDN6IW1Y6Up90KWi8Jlb0:EuDdYe0umJ6xfwEO4UNWD8Upt+5h6V
- TLSH
  T11F825D0D77D88375C5FE9AB20C3363501BB1C209A803FB6E2DDC716A5E93B854B54AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Plugins/Maps.dll
- Size 15KB
- SHA256 b1699235a5ea07dd6516230309f6d94c697d6f9db96ac664dd269aa471a56dcc
- MD5 fef310962c772bbce74c9d9dd3516803
- SHA1 bc3923626417961059688730b464a10fe4eb6115
- SHA512 389ed724fbcb298e5e302166725ceef7067d85e5d71c0a11267717584906c328686110c19ab5b275ee075e1b88b294c9a072c9d3ddef76e0759c584862622bef
- SSDEEP 192:5zW/qqmhqfohvEajSJz+5q6gn+jNq7gGte31HC9T6IW14X/bQeIY3t2vLOo2:KqqmhxvEajr53xgjteFi9BX/b3t1o2
- TLSH
  T160622917A7E48271DBFE0FB24C72620017B6D609CD07FB2E25DC606A5E27696CE21772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Plugins/Microphone.dll
- Size 540KB
- SHA256 b04ce7ba6ce58408b53ef7d4ef84866539727a76871cb09fef99314711aabb57
- MD5 563090381b43ef273e0dae20ada50d0d
- SHA1 acd5271cf0f959c09d940733a92fc8ee0ed434a6
- SHA512 f0f172b6591766f4e13b7df29c51674f84e80cd7c8317b305519b54f635605b96402764a04cc600024d3cca11c46b5e041692eba3ac919f8f63dd73e08ba37ec
- SSDEEP 6144:1iwpFWBbjRTvqihWI1ElZT2J2CDt4azYPfb78+OmmN8fCgN8OQ9oYCY8gQNUyFJU:QkFWBxTvTWzlZSYXbg6TS4UYTPzeVzn
- TLSH
  T11AC45C11BBD49627D16F33B2E0E20F2A57B1E4467326EB4F169097E89ED77424C01BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Plugins/Ngrok-Disk.dll
- Size 7.0MB
- SHA256 390f542854416819047e474e5c34ec39e80360cc8c69728d19e8d12732e932fc
- MD5 e11f0adf9a1374112ee0b52ca41a2a9b
- SHA1 23c742a1839800b4606fdb42f2baa9151876d894
- SHA512 6acf4f3f888230aed388d31c0b2c52f6da0c1c31f4184e065511f07aee87757c6f101bbddb8d20d651b7e65d8c329fe871ffb5a4ceebb3ace928fd042a97307c
- SSDEEP 196608:NCsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:NTED7/VEqt/A3TryARj1BpwLktl
- TLSH
  T1277633287BD48167FBEF67F1CD92414A0BF46017B2DAE7CE19DA48FE1D81300992169B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Plugins/Options.dll
- Size 29KB
- SHA256 035f48b413cf328ddf2bada1b6afd5698f9b8cddf2bcc0187a97629f1063c042
- MD5 90a1c5c0d1cd88b6fe390278c93c4530
- SHA1 b4bec20a1c53e8255518505709a8947dcf7e13aa
- SHA512 ade19d4160bee947a0df9b5bc0ecb4976c1e4ba848e9360b978429fd94aa39a00016107d3daefdc795e45bcb3717c9673fdc543ef544b3e11d92ecfc473c71e8
- SSDEEP 768:01fYFYWjF84UGEm3uGIKxbF/OfUs5Rd794kv:YfYFYWjUm3uabF/1s5Rd79R
- TLSH
  T106D20B45BBF04754F2FE0F75AEB522148A36FD06AD22EA2E09D0601D5C73AC5CA60B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Plugins/Pastime.dll
- Size 17KB
- SHA256 87baedbd864856f6fdd2ee4fb256842de326b1eea2f71a4fc1914402cdda1f07
- MD5 787f48174c04f87346bdb09f5aff1d95
- SHA1 18278dbb1102a3e0772c5661a51bef6f4965f688
- SHA512 af26853c8372529f109220722045e2a920c5cb9dea5310e1f6fe7d30a8189c54725db743e228709bcef3e20b50325fed57089b044eb18164b4affdbc388fbe12
- SSDEEP 384:KhzO/ClGe/9GGzHQl3HREpi5/mY7//AlxsA8/rHbx:kzO/CEe/9GGzHQxH+wH/xA8/rHt
- TLSH
  T14C822A255BE58271C2BE1EF148B3B3000379E342DE03EF1E99D87556AD73986C620BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Plugins/Performance.dll
- Size 15KB
- SHA256 1f6fd6b09773fbd53c4eac5d0e77ef4e1be43872ee226983414e65141921d634
- MD5 7ed248558ba25c9fb1eb55e2f1e1dd2e
- SHA1 3f2f71f24f94861922b54f147992d6b94b85acac
- SHA512 2ffe3b5220cf6b92e1f3d2065ba96c685c1ef9ff28470afb5ad8e38b6f821514f4e69ba23caae2f46fa64d94fb8b8de061ca2c979e8c5ae32a5a2dfd046db427
- SSDEEP 384:AmdLFVZ8ERBT32czPbHmTgK62QxHS7OVpPH7EqV:rdLDbRBT32czDuCHPEu
- TLSH
  T17B621959E3E58239C5ED4EF20C73A2011771EB039D13FB2F49D860965F736898E64BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Plugins/ProcessManager.dll
- Size 17KB
- SHA256 dc12cb5a2c0be8d6e7dd02c761022bc6b12cc6777d38eb7d529178c3d6adaecf
- MD5 96f281e2deb206e3561f0a2dc881b44c
- SHA1 a41ac27787d3e61302d8139874ef68aff89d3f97
- SHA512 9f8336ccd0ed5f6936c9f68527056da7a88e986d24ffcf19e3aca2537307b9cd9e315b55f56e7712b4e49f4442244280073eac4c7d7da7e8a10b4c8200f4ac48
- SSDEEP 384:OdftFqxTfNDgiIsCH9q/Y1aLCEYpt1pnrDhI5XkAvfw5bZLnVb:OdftIwn8TY4XkAv4L
- TLSH
  T176723A1EABE493B4C1EC1EB218B396400770E60A9D23FB2E1DD860276E737958B31795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Plugins/Programs.dll
- Size 13KB
- SHA256 221e1461a2c950336c0a25cb147d996578c1e9461824b750ca9a4f9d3be93cb5
- MD5 b7ae0664d55bd6b3800871baf6139aed
- SHA1 eccee8e082d9002e551efb8791d323c07ac8abaa
- SHA512 84b8d2f80ea9b1b6b4c4b952f18f9f226473a7e98205c2ca6d5bc6b5cf97ec58f0393f39fbb43bf1f1118da8c369c88b9ee6e228b7012d8953c0607e7dbadf4d
- SSDEEP 384:GjnqNd9cZMvidxD/nTu1NYTX/1bxbBvFxb:GjnqNyBFTN/1/vz
- TLSH
  T16C52085973E5C27AC6FE0AB21C7362401B31EB058D03FF2E16E871865DA79958760BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Plugins/Ransomware.dll
- Size 20KB
- SHA256 1727ba841000a1c6176bc285853b54904ea69944fa2d59e8daf66872dd4c1d92
- MD5 9f2c86036e8454b2322fb37297e2b119
- SHA1 f54ff6b78099548592db00d8667ece62312e1bb0
- SHA512 a3201c1378b5c6bc1e427f6aaa1637a197ad18a5b38f705d8dc09c73d19e568c5ee8534e844eaed35e5c83da6d1b7db93c9ccbb789845a60943bb8c790a7edbd
- SSDEEP 384:AVSO27QJHvpebFn0LC9Tk7ff2ji+ZMuqI+sHY4k7E3eEHtHxh:AVm7Q1vpebF0LC9TqH2Mj7KtR
- TLSH
  T15392F62D67E0E171DCBF1AF354B3D2510371DD35A821F62C3ACEB0AA1FB21498295E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Plugins/Recovery.dll
- Size 496KB
- SHA256 179dcd0bad17db8e467a40d7b57437461cdc3263090966a687bdd40b279e4df2
- MD5 3830944fe780e36b1a3c67dabae5c29e
- SHA1 afd2b6852330f86ad16103ac17a471602dc2a8e2
- SHA512 615bbb13305029ee2aa131ecb8bc397c2a3217fcc7d9a49469f90f1104726ac2c00cc534d72c90cf1cb4f2c2b720e5740089179e23d3394a519236c79cc6cd4b
- SSDEEP 12288:cMEW+SHIWnFEn6YwriYW+aiJdIyl1HXuKtMCiK:+W+iIWqnwiYWefrXuj
- TLSH
  T1B9B4F15827B88A64E5FF4E7EB0B0002543B1B1476A53F79E0FE488E92E71784CD15BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Plugins/Regedit.dll
- Size 15KB
- SHA256 9e8b3185dfb4605cf9e1df4403fafa36f12f484f4d9604541da0121403dc39b1
- MD5 68d1cd646b429ee4845934cadd05695b
- SHA1 c971c853ff3b53e336ebd150562d5f696f092409
- SHA512 348988df175382247348e6d1329c61e4dd54f724cb2a3c624df1d74827058e4c00aa5f5acc1430d0ed3d63148c603bb75b60487e97e22699986c1e630dce5e88
- SSDEEP 384:+jKSC4zdLNUpTmeyAYvpYrQcfw9A8/QYbleZ:+jK1wrUs5Y0DA8/QYs
- TLSH
  T1B662096AB7D54331C7EE0AB31CB392004371E70A9803EF5F5FD821969E6719C87907A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Plugins/RemoteDesktop.dll
- Size 17KB
- SHA256 8be2fb14b479ccdd9bc15beaf091a52df492882cb14b74f194a69e01eef8e94c
- MD5 971ef565c65f696214cb77b06e46c5e5
- SHA1 7d72c0b772a9b681ae463c3999998d7db6604785
- SHA512 de4326f2575c7dfbd57ca51947d6698d21a384a4e6a393c9765d5fb6874820e3512fa338cedf94aa199514b8de363a393eb6beacc0a54da9d25c29394b8f72fe
- SSDEEP 384:pZi1wjbuu8stkZYbbV9q/q6t5Nxt2d6QH9G/jrH:WKiu5tkCb2dtWs/j7
- TLSH
  T1F7822C5A73E58371D6FC0AB64C33E7400774D246C903F73B2ADCA16A9DA3AD18760BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Plugins/ReverseProxy.dll
- Size 16KB
- SHA256 922563d6198f0ea597a0c862f18d6ff9c2c2201608cef962b8cc064c46c796d9
- MD5 c929f13e3096b725eb1475b3aed0bf8b
- SHA1 ba7b4f294f0b198399bccb926afbad2cde38a822
- SHA512 238bb09f7b51027de7622ba0450f648d9ab52d0e5a3497192584bc1320f54737bba473aef3844533a22dd4ce2699c01881b2d3920a520e6143b2ce6d11290969
- SSDEEP 384:F45RejLUCUPxVPdN7FAv8zTNrxYFXoaFlS9icPCv:F4HGUCUZV1N7FLfaoaFQ9icPY
- TLSH
  T1F472071D6BF68372C9EE1BB205B2A2005770D605D813FB2E5DDC30970E776968798FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Plugins/RunPE.dll
- Size 11KB
- SHA256 8f73c87a4a95feed70ecc082bd97a4e05ba85d0ad7bf66a5e39991e108028aae
- MD5 75a1fc9ee199e9072f6088f8c1312e0f
- SHA1 38b80990ad84419310cbb578de135b21b80c048a
- SHA512 b4c12ad9806c2eda8135ffa196b84f898147f536067196781a19bd68756c015e9a0fb48571c9412b01e390264e12dee17d40bb8fbe24f061d2eb3140d61c0432
- SSDEEP 192:Vbfqh94qP9XFw3l+JNGGOueq1JtSnIW1fUseQpo7SLOYN:VbChWqPj5jJtGUseQpoHYN
- TLSH
  T15E320A1D93D4D679C9EE0AF24CB222811B72DA448E57FB3F55E4A4261CE33864AA1731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Plugins/Shell.dll
- Size 15KB
- SHA256 e9beffde0866bf4bc9e53cf4a748a96525a459c7c49d0ce6d2b542609563491d
- MD5 940ddf611e72e90cc2ba9f50cf5b38ad
- SHA1 15be3b300a07a2f883201e5d45a1c89d8ecdb707
- SHA512 6c6c1fbde1ffda75671a90295bbe9f8c8f654b089696df894debdd4c372fe5f281e49a076fe3c780f0b10200b0481cc618c99570eaed96adc6a1fe223c4c7d88
- SSDEEP 384:Xw3mb1rUAz2nvV/Vd1vRHfF88XT0L6YpU1b0YNpQ:Xw3mJrUao/d15/vDt1bdNu
- TLSH
  T158623915A7D48276C6FC89B61C73674117B1D306DE03FF2E6ED861AA5D632C18A307B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Plugins/StartupManager.dll
- Size 189KB
- SHA256 c8fe07db19e5103384495a8d9636927cf8203e21e21cdbc61884829349a43f00
- MD5 83572e22aabf502e47478cbadc9f625a
- SHA1 537696a5a47719e58be7fe65367294eae996b1fa
- SHA512 3b41041df3edeaddfbc09484499fcb3df809c607a3e526422e3dbf8ab65f8f72c40fd652d7e39afca65c45ab29667c16403e15083b0ba218c2c10dc87f09c121
- SSDEEP 3072:UtkjKRhBK2A4kjTUsq7EHBAnpK37nXF83+4QvC74Syoh+0KryiT6RXHLzgaUcndn:U6jKRhBKvjTCo8FI6dfCcn
- TLSH
  T148142A4127A8C92BEBBF17F9E0B1160467B4F10B9561EB8A788C15F95B533409A133BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Plugins/TCPConnections.dll
- Size 16KB
- SHA256 2193a674c4816fef54b2fabb6ab321265edfc4ae932769ae017c658afbb84790
- MD5 d41b8051db33f2915a7fcadc3f23f194
- SHA1 05367451b5ff4fa3ed68c5fba553e435bbd31f3b
- SHA512 30010fa9cb101a26da0f4f1422e5489c36633c103da67c11509186d3a18780ecb6b26ee84f7dd7679f36734da1f6d62d49560071abeeeafdc43bd08b6f5ab0a5
- SSDEEP 192:3jg7Ks3wBH3Ud9eGLVOpkidXiS+O6FtQi11OtCEox0GTeE1tZ/J6IW1Gz/t/hYrb:s7Ks3wcxIdo3wCzTeST/Zz/uF/v
- TLSH
  T1D3722A5C63B5837ECBED0AB208B3A14113B5DB0D8D53FF6E18D8B1655D53A888721BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Plugins/UACBypass.dll
- Size 12KB
- SHA256 2151d5f96bde452c96d280b00b3a99629b3d74b3c7526e988ab179c57f7b3335
- MD5 682099d00c1da6604a2e26103915f0e8
- SHA1 29b22d96a514a8ee69cb2a33b691a076eb598df4
- SHA512 8f14c821906bfdf7b70233fb5d7a4b101e831bf59af0f7b48f79e1c6edf3cfb5cc588defd92b40a77712e083a8bf7865e1f5408f041b97802036edcb81e51075
- SSDEEP 384:rNKWZxTvVue3L70mWbqpynY9r/zFlhFs5rUOV:LhvVuOkXb+/TPs5rb
- TLSH
  T1F142C61577E44274EB7E4E729FB292010B72FE088D77EA2E15C4904A0C7F745CBA1B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Plugins/VB.NET Compiler.dll
- Size 15KB
- SHA256 69f3273c8a43cfdb2e282f02da2ed084e154e33497f788f65f58bfdae3d9aa94
- MD5 f5797fdad244c71defa5095dea05d66e
- SHA1 72a7a6385f754af0650eda0fa809df7eb302d6f7
- SHA512 be569ac5c01a72568d46ee956c85202a8f033de2159f7466f5f724e2b325b7494af2462e33e184be46170067613e8be3db0c03575ff7e841dfd99dd434b0316b
- SSDEEP 192:hWgDO0lNTlnqybcTwBJA+wGnzOSeJyxlTen1W9gotlF6IW1oXxvKWkWQEcGSL25L:DO0lZ8GcQA+ZeyTe1sgIXxvZQEcoh
- TLSH
  T174621B69A3D88371C6EF0F721DB2A20053B0E705DC53FF1E5ECC619689636988365FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Plugins/WSound.dll
- Size 539KB
- SHA256 3419a06ffd8bf5fce906ea553d0d6591d7a90ba7301541331c0d380e072bc7e4
- MD5 bfccd9383a458f978090f4f8dd54f6ef
- SHA1 cee9b3893a93446e5d4f9466408c472e14aa9438
- SHA512 ab68298664b2f5fe7f7a5b2c33452dcd170603d8ae74648dc390cf21dd12ae2c927140df635af301388474a4d1f4040f3f475db1d5ec1b601e73e420405a7643
- SSDEEP 12288:EyGwLs78GJUndM5/zobglKwM/W5pKg/+VnSXhu5:9GwO8GJUndM50bglZM/W5pqSxu
- TLSH
  T178C45C11BFE49567C16F33B2E0E20B6B57F1E48A7226EF4F059086A95EC37424C41BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Plugins/WebCam.dll
- Size 209KB
- SHA256 cf4cc0a8559162b17fd3c2f99b272da6145c9a5afed527547e682e5fb33dabc2
- MD5 e35f3b277027fc5f1206f45d49bd8690
- SHA1 84ff7a255a6125e5db26ee30224355c9f78a1132
- SHA512 5cb7b61450250b5d1022eafbe64c98d9e7e40744b577e8ba1f2a6b814df09fa56f4ccc542cb2dadaa51f9942b15a5485a0f30033ed73628796331f0e2e5474b1
- SSDEEP 3072:ar2hWR/jKGR5BfF/g50PBgakLA3LC2FY+EdzYZHAx+dqRN51hdJFxtZV9l5hhJxL:aE+22fFcgBgakL320zYZHpMXM/fWzx
- TLSH
  T13E247D06B3E5807AD5BE4A3588735A189779F8118B71DFAF1B94025E0F633D18E39F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  SimpleObfuscator.dll
- Size 1.4MB
- SHA256 b7a6eea19188b987dad97b32d774107e9a1beb4f461a654a00197d73f7fad54c
- MD5 9043d712208178c33ba8e942834ce457
- SHA1 e0fa5c730bf127a33348f5d2a5673260ae3719d1
- SHA512 dd6fa02ab70c58cde75fd4d4714e0ed0df5d3b18f737c68c93dba40c30376cc93957f8eef69fea86041489546ce4239b35a3b5d639472fd54b80f2f7260c8f65
- SSDEEP 24576:FDy7cKOfkiRrXP5WtJvW1mpjSWr7uoZme1V86:+8/AtJes1LJ
- TLSH
  T149654A01AFE6C72BD69F97F6D87206142BF4D049B3ABF79F161863A91C837425C06227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32