2609f9d126a574baf70e85b53c5d3042824e3728c906fca5528c1edd684181d8

Sharing

Copy URL Twitter E-mail

General

Target
musicpresence-2.3.5-windows-x64-installer.exe
Size 19.4MB
Sample260601-bgswmsc19k
SHA256 2609f9d126a574baf70e85b53c5d3042824e3728c906fca5528c1edd684181d8
MD5 59480b39e7678ed5095a7042e98a1f25
SHA1 2d6a660a909b8d34164b7d41007aa4bc8a0244eb
SHA512 e23b6882be997d942077e35d58d411388bd07b6bef8118a49b36af2bad58966a1f47ce54e2a2c805b69fd40a8f8fa0084d147e07b9b6c5f8ab3f593b8cbb9f16
SSDEEP 393216:yftw2PCg+Y75dsSLIwK4b2qzRw1vRK8VC0AWS/glFeGqM8:ysg+YF9VK4b2cRw10mzA1/glFDM
TLSH
T1AE27339B1240EDF3EC618AB1DFB2A1A53199F11537DAD2DB5412D60C821E98C7F423EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  musicpresence-2.3.5-windows-x64-installer.exe
- Size 19.4MB
- SHA256 2609f9d126a574baf70e85b53c5d3042824e3728c906fca5528c1edd684181d8
- MD5 59480b39e7678ed5095a7042e98a1f25
- SHA1 2d6a660a909b8d34164b7d41007aa4bc8a0244eb
- SHA512 e23b6882be997d942077e35d58d411388bd07b6bef8118a49b36af2bad58966a1f47ce54e2a2c805b69fd40a8f8fa0084d147e07b9b6c5f8ab3f593b8cbb9f16
- SSDEEP 393216:yftw2PCg+Y75dsSLIwK4b2qzRw1vRK8VC0AWS/glFeGqM8:ysg+YF9VK4b2cRw10mzA1/glFDM
- TLSH
  T1AE27339B1240EDF3EC618AB1DFB2A1A53199F11537DAD2DB5412D60C821E98C7F423EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 89dd7d646278d8bfc41d5446bdc348b9a9afaa832abf02c1396272bb7ac7262a
- MD5 d1eefb07abc2577dfb92eb2e95a975e4
- SHA1 0584c2b1807bc3bd10d4b60d2d23eeb0e6832ca2
- SHA512 eaffd9940b1df59e95e2adb79b3b6415fff5bf196ebea5fe625a6c52e552a00b44d985a36a8dd9eb33eba2425ffea4244ed07a75d87284ff51ec9f9a5e1ac65e
- SSDEEP 192:E6GQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT311929WtshLAzgSrX8:E6Nt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T186624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E4678565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 e74f442771f034a24b77d3a849b343551bdef69ef151c622cb9fd5f34dccda81
- MD5 dc91f181f9cb870fff0c58bc0ea63eda
- SHA1 cc37e24f6071dea801d0eb59bcc2a9221cf1c74b
- SHA512 714605cad60dca30da96172b5ca1a1d8838d27f0a9979aa0db125d373cd3e015ae6b39c7b7d2b3fc9a4b5433ff1d7d2427caf3a2b5d1ae321e218d3c8fe8f9a4
- SSDEEP 96:FxIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/t3lkCTcaqHCI:4hE+A0+sF6piUFkAxlncviI
- TLSH
  T186F1C876F3D20673F9AB437428632F231B2AF521576981A6490316CEBA61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 a921cc9cc4af332be96186d60d2539cb413dfa44cfd73e85687f9338505ff85e
- MD5 f8b6dd1f9620be4ef2ad1e81fb6b79fa
- SHA1 f06c8c8650335bace41c8dbe73307cbe4e61b3b1
- SHA512 f15811088ecde4cd0c038db2c278b7214e41728e382b25c65c2eb491bc0379c075841398e8c99e8cceba8be7e8342bc69d35836ebe9b12ebebff48d01d5fa61a
- TLSH
  T1A78173BB92E40CF3D0A44BB740A71CE362B5DD301762001F4A478AAA2590B67EE7E715
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  Music Presence.exe
- Size 12.2MB
- SHA256 bb48b85f17e70c6d3d988f8614bfba1899e56c7dbead447e58fb8429c7b8e39f
- MD5 9bafa6d01e970930f82fd23033d5919b
- SHA1 9de67ac3a64bad2f02501ee3eb25249bfd6facdf
- SHA512 eaffb0cb65123d01fed2d3f4296a5a73f78a4eedfde1cb61eedc42250e9545a8fa02b14022de83410e456a94a6161d27c4baa12b775b8b5353698d8d64ce0bf5
- SSDEEP 196608:35uCqF9thONy1KpCgOnNB6f2uo+rO3Vr3r8I9F8q+KA3seQOHt:pul/o41KYgONBIIdA3seQOHt
- TLSH
  T112D6D0E773A401E4F49781B5CE2B42D2F732B4EE6B60E64B2198D510AF139A15F3EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral6
- Target
  Qt6Core.dll
- Size 6.0MB
- SHA256 225bd38093416c825f2e3220213f64e1079e9ab20f4738decc0fc6eb992e8a9e
- MD5 46a0dbd38cb28d8e79c80c9a033f6ae9
- SHA1 1be5f3e78485f9b08e32346f13155a94001de50e
- SHA512 3fb62bce7b1d5129237914269aa3dd9a24f9e797927f2f4f937a0a291d357a40ec51b9c829094dc0bae1edcd6c580f1c9a03ca2c84d5526599c3608246f00bd0
- SSDEEP 49152:u2CQUPAGYdJn+5Im58kP6zNqVJLACl5D4CmV684bbTx5Hdr6Ek11RzVSGlgO2v8C:JJGA1rStYqo49KFdu9CwJsv6tjf/33VX
- TLSH
  T120568E1762FA0095D8BAC139CB579503EBB3B81603219BDF01A4A6196F77BF52A3F314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Qt6Gui.dll
- Size 8.5MB
- SHA256 fc2464f62d7915ddeaebb5490bee6d60e7b42ad5a223d5812f0993c27c35be19
- MD5 7875aad0d0d426e9d1b132a35266de32
- SHA1 8b7656e3412ae546153d2d3df91a6ff506d64749
- SHA512 9fa16c5c628f2e9b242323aed4c1aa70f093cee9f341ac61640287ff9be8663658f502769e037a8409943d3c9ab826bb1c6f88532f0fbacdaea28b2353cdfba9
- SSDEEP 98304:xNydcIXNBZBRhOWJDzxMv6n/aSu0shezBE4:xRIhBRxJDzY6n/nu0WeB
- TLSH
  T130968D57A2E501D8C93BD13C8B5B9607E7B6301503629BEB02A4CA552F33BF26A7F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Qt6Network.dll
- Size 1.4MB
- SHA256 1071f4f88c65317401bf93a2ffb55e661adcbb84f05911879ab21a6656521a68
- MD5 960f50470059381c65833145036fef29
- SHA1 270e230bfc9248e5ecff9ea8dfbc5f1066df02ee
- SHA512 cb0a0d63aaae1b9646dad722759b1c53b36ed13a4231a30b054f6124bcc69e7285c5777ab6bbbb8296756d6c31fc94e735db42c5155db35274e0ec25c1406582
- SSDEEP 12288:DVf2kuxdwo86ZrLlGZHLcCzIOLDjl4LgtMEmASO3xMBgt2qAa:DRDuxdwUZnlGOCzQkMp/Bgt27a
- TLSH
  T148656B53A3A40295D87BC179C70B8A07EA76700143629BDF456DCE552FB3BE22B7E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Qt6Svg.dll
- Size 377KB
- SHA256 22c48c35d9915bc89b13d2dca91c74b8531989a887faf642c795bf593e00306a
- MD5 67a888c61e6f1dceefbde7287e80e59d
- SHA1 4cbd1ea71ca25a6b87c64c163d1fb3e61cdacc2f
- SHA512 aab6f980e0b397fd7e8823370ac398d108f20a2f5c3ca052391a7c753ef77c82d94e0a37d64bc708aeb5c95d31e534faa1a6a7582d80fc285325acaec226f1e9
- SSDEEP 6144:NrCsrknzH2m/rXsu5ea8r/c55qah10+9F+Yw5UibIyj:Nr7r+TTD8r/oqaJoIy
- TLSH
  T1C1845C6BF7A50485E4ABD13CC66B8807E6B3708803D397DB026D8A552F23BD17ABD750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Qt6Widgets.dll
- Size 6.2MB
- SHA256 c71e65b882a84f47114590784a256f14ba19202ec30b218ce4841b2c7256060b
- MD5 34abb42b63e71b09b72b48cf5b1dba53
- SHA1 9f3111aab57a5f28a4ce9bf82ea208fa3eadb9a6
- SHA512 06acab5a04a5d3e6834ddc95229758d4adc7a7f0ef003c80e8d59a8241e295b196aceacce20c88879e1676405a2538d032ec6ac543258538e686878fb29f77f1
- SSDEEP 98304:RCOQZE8fxqbA2SwuevAGcYYaCsGf1e5A64N9m3JL:RCOQa8fxqsKuevAGcXacIW4
- TLSH
  T17C567C5763EA0189C46BD13DCB1B8A17EAB2704443229BDF1165CE592F737E22E7E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  concrt140.dll
- Size 316KB
- SHA256 2405355f0a58067b258f8df33c327e3a3d716eaac5a3a5aebb757842d85bd376
- MD5 5fe9a647921ded8a2fad92deb9ec4ab2
- SHA1 1ce87fac4c22aae82a81ddb26952c074b744e78d
- SHA512 11fe4c0519cb1df73695ce38b5fdea2a563de565116a47ff0032d5a68b8c51fe732ad66738a7167e56d79193c60af9204a7ee0beae8ff8bb75abd0b484c2d764
- SSDEEP 6144:jfjSd54rw5k9cZW1Cbfpri5/ww8VRj7nWzg/p8Wcz:DOP4rwK9c0ILqzocz
- TLSH
  T16C64398A76140CE6F96BE039C553851BE6F2BC416352D3CB0264839E6F637D1E93A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  generic/qtuiotouchplugin.dll
- Size 99KB
- SHA256 0eeeed6cb879f64880c804080f5bf72ab9021015b5861591820f7b115388ac66
- MD5 a34dc43e1981e2354fdf7b2802fa58a6
- SHA1 7c554b623fb080294d7b2cc190ba8b1e72f4829a
- SHA512 dce0c63bd3f07df57af50ec48fca37646ac2314da88745a543d092447033b1f347ae3bef9fd947b85017eac3bcf9b0a41a8c2ea12d806fd6a980216bbb499875
- SSDEEP 1536:iaNpg9DKI1TCnEDa5JrQ5SHKfNpxS10l4VG4GCCxS3KvfYMKLOBigKxngeZd:iaYWnEOfk5DN80lSGCCxBYMKLOBvKtd
- TLSH
  T1C9A35D6B229042A1D56AC13EC79B850BE772B02567329FDF02A0965B4F37BF12E7D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  iconengines/qsvgicon.dll
- Size 69KB
- SHA256 8ab3b526b35a0dec08b4042da70f942b3b5f4d413ad4035c691f972b2008778e
- MD5 b57d0218475b81560454e6c0a1a6d9c8
- SHA1 21206763e7121d4792bbf24075c6f6e27c2c11db
- SHA512 83464c21073edddcd77dc0978257bf13554ef01825672b60081d9d4ee5caefffe9ed6fbefda0bc7bdc413925b9265981a994195700190cd81cf6b1c93810e891
- SSDEEP 1536:UzibTbDQn6wcma+mHKT6IQubV5awlhBlfbnCMmbizDRT9WcwgKxngep6v:UObTzq6IQubV5awlhBlfbnCMLzDRHZKe
- TLSH
  T183635C4757A50148D8ABC63EC327C64BDA35B4547761A7EF0360C9323E77BD12AB8B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  imageformats/qgif.dll
- Size 47KB
- SHA256 6ff0b57822dae5132e1640afe4f8fd6b75e21cf3f1eae53d70373c25a5506581
- MD5 000b3771b3dcf0d7eb72750edd80a192
- SHA1 35506ee878b8ad21dbd35876baaf586c30152b71
- SHA512 4472089f5524172fcfd8d2f8acbf67a3f22b08f788b52d8f42d2736d050cecb87215a9b8d706baca12d5916d3ff79bf57420766746c2484981d679239b3f2924
- SSDEEP 768:/ONXrIbWKNNy/Qq0rvEx2eVG5bvUbBy+oBS/oxgKxnVbGYJlWLNBf:WJrIb9KQOVG5eBy+oBSQxgKxngekf
- TLSH
  T149237C86AFB50191E1AB8738C1978B1FEAF4B451B7539BCF012082791E377D13978729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  imageformats/qico.dll
- Size 46KB
- SHA256 bceee911a3ffc1ed7b09a9d79374053fa813a04a22c40b0a4984b845582e3e8f
- MD5 c64789dba4e2aa3bddf17bfa89e7ab59
- SHA1 d5914f9eede38dda3e16c4299fce8016799b28d3
- SHA512 31e5a009284867a591ac9dbce92bddbd8b914133bb03b327984edfc4c3f4329a08238b1a239e7408d8efc715ff23acfa91723720879ab8fd4a2619e948ab5683
- SSDEEP 768:f0hZMxD05ahDHpeNoU3LPepnzGn+J7wnZ2gKxnVbGYJloNb:cU052peN57PeRzGn+J7wZ2gKxngey
- TLSH
  T1A4237D97A3A942A1E5ABCA79D5438B23E9B5F0717703CBCF0162452A5E337E13E34714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  imageformats/qjpeg.dll
- Size 552KB
- SHA256 03ebe96116bf6e98fe967f046e62ab269ff863a3bf4dc9a817e0704b6199899a
- MD5 3aba46b716d9cb3b99efad42ed7970ee
- SHA1 aeabe030389dff2fec45797f3f726bc2bfbe4f8d
- SHA512 7e750950f4d9a31f56c3a54bb363711b6326ed42ac09a21da41fef5c78c18b4ab6fc21e340f7660c8a8b8444903dc52a258207abb6b40176b5142c7091a83e7f
- SSDEEP 6144:BIrdnEH48pRZgGBj+3H2WR8Po8M7Kbm7/1HLh6pkUj01SwbnyEPz/cN4XA11CUBN:eRGZhkUuSeFZ6464DJvAT
- TLSH
  T1F4C42A42F6B62945C7E68438DE6AC856EB90342D03F64BF7B1D1CAD53B17AB17A36300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  imageformats/qsvg.dll
- Size 39KB
- SHA256 8878473e57bdc0a754a6df4fcdc5c13ed5500adbb0a057f73b21674514adcfc6
- MD5 21d1279f76e64e42db06c9e27776d3cf
- SHA1 6f24d575f44d43abf8a2ee2d9a4b7dcee1537e9b
- SHA512 1beb7d24375fe6bc6dfccf564836a77bb68679d6f7b81364476ac346e6a0fa48d1b6782f101823c51550c600940c78fee79567eca248fb3b782d7bfead7d7141
- SSDEEP 768:WjnLIUmgd9o0+iWCKmrDqVZKgKxnVbGYJllsDNMb8:7Umgd9FLWCKmrDqVZKgKxngerb8
- TLSH
  T17E036B4AA7694592F5B7C77884868B13C876F661B3839BCF1162816A1D733D23D3C38B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  launcher.exe
- Size 220KB
- SHA256 8d69279e31bdd2dadeec55df03f31c702349eca0cbcb2043b3cb179766d631f3
- MD5 552e0656cc7312cb3a155265d4bd5070
- SHA1 961c6fcec4c54aa052cf5e2b9c44944c67d98f87
- SHA512 2199144e9a80b108041829f989959f91a33848eb83782b20ff3efd5b36ab10b1f7032cb7638dee8d6acc6901f0d12cc0ba3811d6c03dc30060231a2a2b77e294
- SSDEEP 3072:t7C5xHF+GS+UemR7fw65MX/jC7V/xQwB2SoXZ3AGkLnrIDAkFtNLfVcHDRFC2y4i:o5b+GS+JMI65AGBpheQ6coTV52y4OkQ
- TLSH
  T1D2245C1BA76558B5D5A7D2FAC9438902FBB37C858761D30B53D14AA36F23620BE2F301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral19
- Target
  libcrypto-3-x64.dll
- Size 5.1MB
- SHA256 f497b8a608b38c179923eb60d14e7323a5e0a1eee3901a9167f5cdb491802b38
- MD5 7d88c4d9d2bbfafbbd233a3280819a47
- SHA1 8a1d27a4410c2e128d838d5049fda00947c01485
- SHA512 c917d8e7cb692a01bbd45382e286fb5668dc2f92b185f7f166f706ad72e7a89cd64d426128831b6c5f34b69d9d57da510e0709f644a851e3df34dc5fd59f3d6b
- SSDEEP 98304:Lzq+wdwNYm2IcZH1KBb3aPI1CPwDvt3uFlDCF:aTdSYm2Ia1KBb3aA1CPwDvt3uFlDCF
- TLSH
  T1DA366B5AA7A80149E4BAC13CC5974623D2F1F81A5BB057CF19A196790F33FDA2B3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  libssl-3-x64.dll
- Size 762KB
- SHA256 a23febc363eb52fdccf2a8038aca9eb823fc7e83c7265a3e7b243bd89425d0c3
- MD5 b940afc40216b0eafc828782f1dafb53
- SHA1 e9818bb65912a8802098fb21c02a1e4ebe844f86
- SHA512 81a5b9115b547f71e8e87fe3cc7eadbbdc014da857ccb5ae64c98592f254d9b81172f90caa0277d45781a55efd81efa2f5c15512de27d856f29bcf720f6006d9
- SSDEEP 12288:SZ3Eh6taMCYUQ8LmW+jyPBshBajVuKD501sQi:wvtaMCYURLmW++pshBaj/01sQi
- TLSH
  T174F44BADB3BC05DDD8B6C17986934623E3B6F4152330EBEB065186791F277D42B3A248
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH
  T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  msvcp140_1.dll
- Size 35KB
- SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
- MD5 2a214cb2f0f9473e7765ee3b8db8651e
- SHA1 9ce5c3d6c7d94b175f136f552af8771dca6147b3
- SHA512 ea9a759babdec5818fa1e430d1cb453cac762cfaa8f934e01d7182100f66cae21527962696f5bd963fcb0fba2c0f38bf4028e75f89e9e599ddee008021646a33
- SSDEEP 384:3jJ2J9VQH+qNy09dmFWcS5gW7YZ1gr4iSt+e92xS+R9zWd/I1IHRN7SUl8BR9zTr:d8QH+qNy0PmgogU9v2ci9zeHSn9z3
- TLSH
  T1C3F25D86F7248442EC674970C699EE837C3DB3D25B50969B17A5F61C0DA33C1FA34A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  msvcp140_2.dll
- Size 273KB
- SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
- MD5 3151333808c2c2339d5f5466df70b7dc
- SHA1 e48159bb2127ec812ff679f6fabc41141009f26a
- SHA512 8f1daa078e124dc89b51b84baab8d6cc2d77497be23b2ba95ef3fee54d9034e17bf5cd15a4043d025699972cae20f9c46d2e7bef48e4283f3ad9ca6b84fc64d1
- SSDEEP 3072:1J51P7emwi1j+XZi7b1dbqtH0h6XV3Q0JPQo07ICl3Sg2xmygdCg2LMeDh5FD799:1JbjwvnQo/iy5L/XxTWrNM
- TLSH
  T1AD543912B51A2EBFC5D6E8B04939B416FC223A418775C48A57C31C8D9E2BB437FE3529
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  msvcp140_atomic_wait.dll
- Size 49KB
- SHA256 640b2aefced484d0368eea5bdd06addd0658a3a70a49256e560d6923b404a479
- MD5 44aec42494531580bca182b0e2fb19c2
- SHA1 a85a6a4de6656e5969fa4ab15f2230dfe2839e75
- SHA512 d8afb5bbb1394fd14c3ec8ecdd4c02e1c6f23031b15173b1448dfd4915c392bb8512cd41eccb449db19969397a09046d27d54db704c8122ff62c12ff5a89c9d6
- SSDEEP 768:ayMsqh8UGchsJr3KbYA5XeDmqw4DYPW9zr0JD0io9z7p1uF:W+UjCKb/5XeCqgazrURgz91G
- TLSH
  T19C337DDDA7684083E5678634C1A4E517FA7AB7E20710D6EF4352F0890FA37D1AE34B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  msvcp140_codecvt_ids.dll
- Size 31KB
- SHA256 f2069a52880ec885ee7f0511186100eb7fada0411a2b4948fafea7735b878a18
- MD5 3ece3fb90bfaea8e9a5fb7139ff9cbdc
- SHA1 91b19dd0db24a5cbd944eca9c67fad3b53f9c154
- SHA512 c059ffd80de25ad10d34064b1e9421666525da67710de0ac445cfc45b8139715dd946f7e90c1e0d719c60e3d5902e3229db4496c87d674c0012c9b4a8c2b2291
- SSDEEP 384:p7GVNpd36sRWioEWEw4himRSt+efdDtdQ5R9zpU8NSqHRN7w9ju0R9zlWdo:5GVsfaw4DYd7ds9zmMEu49z0G
- TLSH
  T19BE27C89DA3C4487EC9B5C7082ACDE477C3D77C60A10569B4392F5181DA33C6EB3866E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  networkinformation/qnetworklistmanager.dll
- Size 70KB
- SHA256 826e61c18b5ef4f63ed5fc2dde0eb1479b9c7032345b41d67e34c9e7a640ee53
- MD5 30370973211fc61df9f75e7d93f03803
- SHA1 35701b73bb8493d1213c1b940f571ea7879f48e5
- SHA512 b8bf76a4dfcdd42aa385e6d12f2e5ba9d38af83c77b731b45a9b6c994f845eca577dcc7bd3b3c93c002f675775734336c069c1a702cec5fde45c8d9731426f76
- SSDEEP 1536:18vtzIJGwDu0ZY6QtXz1IaomwJtLIlkcgKxngeC:qFaHuyY6cIaoqlkVKG
- TLSH
  T1FA635A9EA7A84280E469C63D85D74F46F572F060A3238BCF0714832E1E733D46E79B82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  platforms/qwindows.dll
- Size 869KB
- SHA256 2bdc29b85bd94170f97aadb1cd447eefe7a3ddf7950c535c81a9ef63e17d1ddc
- MD5 6031ccd3785bafba8556008cbc058dfd
- SHA1 885147d02060dab7b0a124865c8116a478297ce0
- SHA512 b35c58cddc461c0160ee223fddcc181d8e6c21b5713fd8d216334b69f6ab1e4c12f4da1d377fd5b718db2c723ab20b673ab89190a3acc88d3cab03ff23bfd23d
- SSDEEP 12288:a43KXCSGnR4CZN6RMCojCXX/4wVlfc6TjxWFsiHxmZ:a43KDGnR4CZN6RMCojCBXk6TjxoRmZ
- TLSH
  T14F155C17A7A80289D43FC13DC79BC913E6B3701603A29BDB0161CA597F377E22A79B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  styles/qwindowsvistastyle.dll
- Size 140KB
- SHA256 47a22e7958279e7668ace09849a669f7410bf8c7aed752bd6e60f23c9581cd50
- MD5 cc096aea386047b0131eea248122c0d2
- SHA1 6251253bbc6e4460884bfc22c1dd30cec32dbac4
- SHA512 4b097b86a21ac26e8849bf3908de97479b3484f28a68060c06f75515b07b8878466bce4241aae6b0c06a1b671b59b5dd115c760f08dc6d3287f1b875963d1cb1
- SSDEEP 3072:8zlYfzLG/ztKAYBxDwZ89kL7Cl4CpHl1uhfJWu5lzg0CJUXZmjOtkRKM:0lYf30gfDDsYUJWubzgfJUXZmjqM
- TLSH
  T14CE34913339602D2C557D6B8C65F0613DB7370A453239BAF01A6CDA12F633D2BE3A696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  tls/qcertonlybackend.dll
- Size 101KB
- SHA256 e56916ac77619f4fa291d2024a5ca9a782de3b9992f90de8dedbd821b5bcf394
- MD5 5e6c464bb065d5e974fea3557f0c4d7f
- SHA1 df57f86dec651bde0f7eedc83365797224b7025f
- SHA512 dea3894a58630c5e32777cbad2bd7fa5d40e439a92cae5f6d2b4d828826dbc85a284cf723ab44cf51a5d8c6e5314375e990c3fc296f4b29549c31d1255b96d04
- SSDEEP 3072:Nb7S0F62ob/hl4rFhnOOvdu0yIycze3BwlC3C6BoD+ZrxspAsydjvbR6RFBhOKf:1uqepmrFhnOOvdu0yIycze3BwlC3C6B0
- TLSH
  T193A37D5713A81292E96BC1BCCB178907D775B0097712ABFF02A1CA261E737F22E3D254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  vcruntime140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  vcruntime140_1.dll
- Size 48KB
- SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
- MD5 cd1b08f4930b276ad78853580b76b5c6
- SHA1 a0330279d3d0d47f19ed984726e25260b547a228
- SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
- SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
- TLSH
  T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks computer location settings

Adds Run key to start application

Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32