2804805e8b3b5f898ce43d071377da50af5879d8a7df771357d995aaf0c73f57

Sharing

Copy URL Twitter E-mail

General

Target
VLaunch.zip
Size 189KB
Sample260529-s5eglafv21
SHA256 2804805e8b3b5f898ce43d071377da50af5879d8a7df771357d995aaf0c73f57
MD5 be96cb7efca56b041c3b2a8d5820ee3a
SHA1 fa49a42ef4e596736e61d28c9e552faef9bc529a
SHA512 83725a385b789368bc6da39cddc20ea66ada057c86f981d4136caf2026c8c843b0302f7c9ac2e9fb460f5b871b657962d5f5d9046345617dffb218f2b34546dc
SSDEEP 3072:WZ2HsFow4Cf5eRaefSfho8i7ODYJd7E4wv02+lQcVDXnc3mXKQNd0bX/oWAgHC:WZsbFCcaeSpo8yyYb7EP+lQckm6QLC/O
TLSH
T1851423F2A14EC824EFE8F87C1A1DFB866705472E0D210F6417A702A74FDB254D25E6DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  VLaunch.zip
- Size 189KB
- SHA256 2804805e8b3b5f898ce43d071377da50af5879d8a7df771357d995aaf0c73f57
- MD5 be96cb7efca56b041c3b2a8d5820ee3a
- SHA1 fa49a42ef4e596736e61d28c9e552faef9bc529a
- SHA512 83725a385b789368bc6da39cddc20ea66ada057c86f981d4136caf2026c8c843b0302f7c9ac2e9fb460f5b871b657962d5f5d9046345617dffb218f2b34546dc
- SSDEEP 3072:WZ2HsFow4Cf5eRaefSfho8i7ODYJd7E4wv02+lQcVDXnc3mXKQNd0bX/oWAgHC:WZsbFCcaeSpo8yyYb7EP+lQckm6QLC/O
- TLSH
  T1851423F2A14EC824EFE8F87C1A1DFB866705472E0D210F6417A702A74FDB254D25E6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Hardcodet.NotifyIcon.Wpf.dll
- Size 121KB
- SHA256 402a8dcb6a9141cb4c73bfacf1c3cc222f96b8e803e50a816a2c56eb406874fb
- MD5 c6a38ea14934d7d123e08b8f3a05c606
- SHA1 1bbeb5ce5bbb93432299e393d99638d17bcac648
- SHA512 740240e975c45765711f9d2119a1b6d1e964ef1b69246c1dd7c0a160ce4a54cae7c038dc8867ca76fa50d9d4b62062d4ac399c480a72d9082d200328992e37f7
- SSDEEP 3072:AiRUD2Q968U1Tnc3mXKMNd0zX/oWAgk34:AqE968Uwm6MLk/Tk
- TLSH
  T157C3CE4133FC8B3AC6FF5B3968B526664338EB603562DB4D4898153899B33C42E617E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  VLaunch.deps.json
- Size 1KB
- SHA256 ff48c50235398f0cafd755cef2a61a28000b4604885f89ee9822c9147ebf2f74
- MD5 d2c319c30477e964f1a48a2133e5a75b
- SHA1 69e9779954f987109ada07f863383b7a47ba4d82
- SHA512 6c224f35b0e45e722904934062795de26f7df960ae544aabe58ea92b1b6e81c0460c308d7f5f9bc47e959afef44278378bb22228b6ad2c433152656e3794305a
- TLSH
  T1AB1123A8E4889D6346F5A7A5A87E0242F627037B6244180A3EBE774C4F37D2B9050F34
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  VLaunch.dll
- Size 41KB
- SHA256 4b1480acf86035195972a987635f189737227cac2774c7ed61bf6377719482c7
- MD5 909be453984ca3ad63d8fac8c4707aa9
- SHA1 40eadc02360e68b1a41122a83bf6012a70929d3f
- SHA512 351cef499bc8be3cdb26238de63e7ab62c5c91f72fe560bd0b73309bdbb7db632d995a21e744d8a850c122af86a390cd40871aa3f7d86cf0d62da0e14326ab81
- SSDEEP 768:319yAI9U8mDq0vdFYjPzzjVbT1Jn1kUy/6m94X8Byk7HH8V:l9FDXVF4rz1nKUy/6magP7HcV
- TLSH
  T167135C0533EC862ACAFD0B7474F65200037E761E6926D7AD2E95A4DDCCD3BA14921FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  VLaunch.exe
- Size 158KB
- SHA256 35eb450f9a5eb4dac2495360bc74d7c574f9e744d492564e26c1fb3ff1c5de1b
- MD5 9255449a9c5b2d17d5f7a68d4dc9e154
- SHA1 785920f3620702a7e02b2377b71172497ba71b89
- SHA512 d8214ad0578e0911fdd9e584fa60ddf6394a1d5fcc7a9c46bc81183c1dd6eb78793ee92e3b86fd219612d011436455cdee3809a1cdbb25a00816515a814d2039
- SSDEEP 3072:alDJk88wN1QA7sxrYL1peQ3lOg9SkHNwG3JzaAT5+z:eAAwxrI14Q38gB/ox
- TLSH
  T176F33B13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  VLaunch.pdb
- Size 21KB
- SHA256 28f814529266f92d57407b9310d5ecd1f460089ace442a9219d86e87bfeb6f40
- MD5 7897f5b44290d80d9e32df8d80a52ce8
- SHA1 fee3253643de10953a689ecf6750baf00edbd2d1
- SHA512 3b95073e008d8829b9dfdc2bcce4f0d65318235dadf16485d24231479d014f9d72ba66f3d77df1efb03ecaa19b7d133a81834b50e35f1c13f7f3723c87ee6ac7
- SSDEEP 384:Ju/eCfvgaTZI8LipVVlyPHO8aXwSk5rbu0b3ndzB77qh12TUimztxV3UU+HbfTMq:JHCHgaTTipVVZAnTkANqtHxBK4E0hhXA
- TLSH
  T1A0A29F778798D661C1910976687AC39C7B748320A709EF79F1D83A09DEFF34903B62A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  VLaunch.runtimeconfig.json
- Size 447B
- SHA256 039a0defb81019310fa2e8a17ef8d2ad086b1a37656149aa598f1f75893f2a22
- MD5 b451096fec6028f9acbd24badac69055
- SHA1 d7d2be96751913015927effb0d58b0ac1d3fd839
- SHA512 cb3e5230de93c3fed5cf8165107de145c613655fbda729e604419a80e3a51431ceaf4e30c92a71fb73a8ffe2c713bd95f8f34abad7e12d0f1bc692fc9886d490
- TLSH
  T141F0222ACA100DA308B973BAD62AC182FF30432B20141956B5FC081C2FB3A611100F99
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14