18e3dd8c5bd2a0dbca39f0534bcb5b91237fb4ba5c6fa9351248eb3100c33a3a

Sharing

Copy URL Twitter E-mail

General

Target
PineconeMC-Windows-MSVC-Setup-11.0.2.exe
Size 22.7MB
Sample260601-wber2sdv5l
SHA256 18e3dd8c5bd2a0dbca39f0534bcb5b91237fb4ba5c6fa9351248eb3100c33a3a
MD5 5017232620240216cb4452966c7983f2
SHA1 052ed3f2dda6ee60e5ba0ad91a5f68d757eb30f6
SHA512 4885eab631c8d8a36b905b987676e542bf53f8517ff6eefe6eba91b3dac9ed72fc54dec06f30a03e4c5484aa6ec51c3b410f8ada791cd8f00fb4dc36acdd0048
SSDEEP 393216:t/BFI34CzI869BCBglg21N3RYJzk8D2RAIACcspokbGH7tjxI5EvfYwxsGd0GoPK:tkTzIr9B9dhizk8D9CcsaH7he2vfjxdR
TLSH
T19C37237694BF954DE0ACEA3D057A2A0D317EAF0227B03309FEB1BDC711B8311B955A58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  PineconeMC-Windows-MSVC-Setup-11.0.2.exe
- Size 22.7MB
- SHA256 18e3dd8c5bd2a0dbca39f0534bcb5b91237fb4ba5c6fa9351248eb3100c33a3a
- MD5 5017232620240216cb4452966c7983f2
- SHA1 052ed3f2dda6ee60e5ba0ad91a5f68d757eb30f6
- SHA512 4885eab631c8d8a36b905b987676e542bf53f8517ff6eefe6eba91b3dac9ed72fc54dec06f30a03e4c5484aa6ec51c3b410f8ada791cd8f00fb4dc36acdd0048
- SSDEEP 393216:t/BFI34CzI869BCBglg21N3RYJzk8D2RAIACcspokbGH7tjxI5EvfYwxsGd0GoPK:tkTzIr9B9dhizk8D9CcsaH7he2vfjxdR
- TLSH
  T19C37237694BF954DE0ACEA3D057A2A0D317EAF0227B03309FEB1BDC711B8311B955A58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery ransomware
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/NScurl.dll
- Size 6.0MB
- SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
- MD5 bf43de0fb8a2c38abcf7b1cf6be7e7ce
- SHA1 5c14855ddbf563da3bc14af40ea5650d627ab81d
- SHA512 145388afde1367253d723ea78501dfd61ebcfb17d440d324dbceb5d9b1c50dbd5a69946209722396f1d0f3699dc967bedab690dd670eedc9910b75a4e7d13830
- SSDEEP 196608:ohFz25oFKhmagHDetua42OOMoMy+Tgt/VqiWWO+ac88vdPkR:oXmSLTgtDqU
- TLSH
  T1DA563994FECB44F1E91384B0D8DBA37F9B349B118021D6BAFE4C5E56F933701252A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Qt6Core.dll
- Size 9.8MB
- SHA256 b98eea394a95563879b614dbd4432ce074b0fceeb154c3bae252f4e7a9376a40
- MD5 8119eae4c693c51b6760094df8515a9c
- SHA1 f7195e76416b8242c8d087a60f4ec9f9290672d6
- SHA512 0a7a795ea6d781ed53609b696ab98f7789b993052697f991eef1c9d756d924a1b8a829d7fe9c0dd9e8f3ff6858cdfd3ed15d872c1c1e885b1cd270b031b2882b
- SSDEEP 98304:4VLKyLebAofeVMKFdu9CwJsv6t6mJMSKgVcC/3c/:WWPBSMKFdu9CwJsv6t6mSStZ/3u
- TLSH
  T1E4A6390766FA0011FAFBDA34DAB75112DBB27C466B3496DF025861185E337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Qt6Gui.dll
- Size 9.1MB
- SHA256 28ca8b9e7d3d1c4e3cfafd6fe63877a05cf10202a240134a11f98384f01c9e37
- MD5 bf3ef92f9e109770a7effc3f623caa17
- SHA1 3dca2e5b640731c88921b26380c3af740b9a9b44
- SHA512 20ed40767f103a393e6ec7777d20bf484ccff1f08fbb698dc8d9b856e169d6cc31c2fe69893529d75feed6da5b6f82bc21a1a6b69a53096d0efd386daf1b29a2
- SSDEEP 98304:n17B8zKQ16be6OAZl5XWv7StQiYBNXcqQYOPTmeL:36ie6ZZTdtQiYBNMVPTmE
- TLSH
  T192A68D57A2A911D8D57BD13CCB9B9517EBB2701503629BDB02A0CA152F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 905e1ce3947fadaad566b6deffe345daf7f6efbc57207ea7fcdbfa77669e3de6
- MD5 db8f3337ef680c805b0c49504cea7ab2
- SHA1 9348cfb2f237047c638b231faf7714ac97e919e3
- SHA512 aaa0cda6c228b54a96c9c6d5b24f1345609f61627788f0e67329d68d515cb38393691aa78e140d1da34dcea1ee4a4ddf6074c31a199d6239ea2b34898ddc0f24
- SSDEEP 12288:D9onO5TLgx8PlBYyrw3hutJJ5za2rJq9OeBEd4yhexi9TQ75L3EXpX1mil:+83gxGmFRiJJ51rJq9OvdDhOi+75mXIM
- TLSH
  T135856B57A3A441D6D46ED13DCB4B8A0BF772700483669BDF02658A152F73BE22B7E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Qt6NetworkAuth.dll
- Size 285KB
- SHA256 2b2cee4bf6cd28c7c65cadc21089902062ac8c76b74340c7c205e2b5db79a4cd
- MD5 489b1972f4c7b330515b4739de58ad95
- SHA1 077934747efdf78732e1ac4a900ac1d03a091f0e
- SHA512 1f2dc46edea7651a23493bed86154b0f8f87c51a36778fbd3862c87a8e3f2b3add3ec4e779a0b6a346b6da66587f49b98fae7342854ea0381ea28c21150b386b
- SSDEEP 3072:nPntlHGgash+B1RBKQ5NSuxBqcKu215Pdp8CqhwoLW1kJERAXWBJnuo1kIuxmwBe:v/+B5N5Bqcf215PdpToyyiuGux9Bfm
- TLSH
  T1A1542917A3A20DC2DC2BC179CA5B8613E6B374004752DBEF46658B4A1F677E2BE3D244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Qt6OpenGL.dll
- Size 1.9MB
- SHA256 a41b71127d07924ddda67e787e8765ebf60f217817199f1becdd63f3db88847e
- MD5 a29a79ca0a5bd2a88c09b43c9a7f95d3
- SHA1 98ba5b9b7a4493085603c5416419c6f3f397a3c6
- SHA512 35868eca9195b3d8738a8e84e1263d067141ef3823499cda32e8a33902bd7f229bd06d0a57080e8bc1c8138f37d77f1432eb2f455b36927aa6437c28301f1a0a
- SSDEEP 12288:XyA2ngdKBJuEum86y+TjfI1CkX9RDYXKI297FcVlE/LY9QS:QaYum9V/feRzDYucGLY93
- TLSH
  T19995FFD5624AB622C976E2BE930F057E60F3AD57C3424BC388155B490AB57EE0B7FC06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Qt6Svg.dll
- Size 617KB
- SHA256 982a589e52680d7b525da0031eba783d3bbd77e6611cdea5cd276a2b9213f4c9
- MD5 07f4bfaabb00650a39f46072d517554c
- SHA1 75269c10d4eff23559355a0e00b4543d9b9a6328
- SHA512 e01335f2d79fc7b1222645ccf196bc6c138a2e0cd72056455de9a65a62f3b39c89ce43c0cfd3b4b566960c46acc0c2996f360e35c62824bf87ee7137e5fca467
- SSDEEP 6144:Z10fGG/FNHToqobivsTRkcjIfIl3mIRuo2zibhHmCBGyOkOc0CH4x5Yj7Fm3yWZ+:Z10e+NH0xb7rZmIRWWZmCRmc0mx51Gs
- TLSH
  T173D45C67B3A60785D4AAD13CCB5B8422EBB370440362D7EF41B58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 f383fb6b3f6996efe23327ff607e7298fc47ee76e8b8ef8a65f8d2e0a91707e4
- MD5 10cae5e4a928d4f4c027a2a689916144
- SHA1 b48b2719f4fefdbfece73addc2e3efb5f32bd3da
- SHA512 5e4adcb58564346b38fccc96fb992d9069a9cbc2c5b47c6cd5781abbc718634e14237e219a58210e7e9bfc21a02bd1e35efa8321b5bfc0bdec0322cc8c560e8b
- SSDEEP 98304:JLNqD/uTGvqxgiJaj4mxHJpd9tozE2XJHTY8:5NqDaGvqxgiJajFxHJpd9tozE2XJzr
- TLSH
  T1C3666B5763EA0185C5AFD13DCB0B8A17E6B2700443229BCB1169CE592F73BE16E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Qt6Xml.dll
- Size 156KB
- SHA256 c9d4c5c5dbf8d9ef3264f27c67bbaa0cd1aac98bee2f258b4a0a19664e9f18e5
- MD5 6bb91e7ecb5b3cd133e6e91b9b6ccfaf
- SHA1 b60655124cb6e94bc4fe2a856368d25bc4cd8c46
- SHA512 473ddf110e42c592864777d9fc3344580a349336c820e4895fa42e90ef576f274e160946fe0019790d8835cf20f89736a77483ccb88015636da83888b62a88a4
- SSDEEP 1536:Z7LLdm+5hICv8Q0wCslIfO80V+NFu4jRcDXIDlvxe2obYTQj9sYpxABNqN7ug:ZrfA7QIm/VWRcDXIDa29YjAPqNP
- TLSH
  T157F34B877368428AD46AC278C91B091EFB73705057629BEF82648A392F67FC27D7D350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  archive.dll
- Size 716KB
- SHA256 6331e61606488b47e9884a48af1bd1fbb5c3e7ba88141a71b8d1f3fb0fd76baf
- MD5 5b402c84acf92e484a28a94abdf65633
- SHA1 8133049ea88339ec41d6e8270bea936356eb9e72
- SHA512 9f29520b1b986bd8a9ffe9acfa173574ac0a62ab1314f60322d0db8c90f6dd633a5698e0ca061a2eaeeae636630ded41c5db6c858efa07b4418f2aa843b1bc97
- SSDEEP 12288:kMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCc8zics:9SFVwT75qEtXm8KgQNjVTNjzxwjnCr
- TLSH
  T1DAF48D82BBF40668E977C1348546AA27F3F1F0551760DBDF06A487653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  bz2.dll
- Size 75KB
- SHA256 1121fbbe3909400ac26daa3b40ec9f7e94c6a1d5b689b4e0234bf81b5da399b3
- MD5 dad273851a410d1ea3092a96127b8b41
- SHA1 5ca4c2c13ba1711777082e901798db435c8519bf
- SHA512 c846eaef3fde9493198c4a7148b83db6c6541386b84875239c781865c69b3a19421aec923e191959260a5953181080505c5bf819eadae59196c48ea097b5ecfe
- SSDEEP 1536:KBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTL9+ti8y:CuxAUhbrYVL9GVy
- TLSH
  T1C1734B40B6E3FBBDCAABC0395623074BFF35BD680B1117BF3560967A2B22A910D74516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  cmark.dll
- Size 140KB
- SHA256 5dcb85ba423e4fc7fa79912356f194c17e3736b2d8bbf094cf3ead88081774da
- MD5 f742d5350889fb79c76f24e2d8ecac9f
- SHA1 e41fb0cbb954b6cf830beac5838f27634d6c98a7
- SHA512 26f393e16772b8ee28909ad1f4acb687e600b5a9efe5ffa12d2a11986649a0b66c6a9139f800713b938bbd57e17cd998949caea6ab91155a002a9ef4ae2c5441
- SSDEEP 3072:V5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIiG+:BWcBSGsvVlFVtaOmROEiG+
- TLSH
  T1E5E34995F5BC0066CC1BE07D4D2EE596E3BAB2173310C2E716400E65B9E7BE27636352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  elyprismlauncher.exe
- Size 9.2MB
- SHA256 177d2ea73683563ca7d63e44154c2c9fe030582ddca488ce842ed5888d11164b
- MD5 892f6434642886689b8ed658be2e2fad
- SHA1 711baf4680d4b2e0ed2fb18e891f51d4b6569a64
- SHA512 5e3a9f21c1d50ddedb42eca247a292c5d13dbe3b4b0e852322028e1880de4c5f5b45987b8c2b76fd4dd761bf3493c67894d7a6213b8cc64133c54576f3e94033
- SSDEEP 49152:jn2xhvsVCdSJFxH2WRZcOhZqTzwrknr+RP0YrqA764xLpx/b9ThTGRCGlNcS1qlj:Knc+da5I56cn+HPilklsdIxRK
- TLSH
  T157A69D2F93AA03E5E139C179CADA594AE1323403532056DB752DEE674F372E26E3DB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  elyprismlauncher_filelink.exe
- Size 92KB
- SHA256 1ebcc3821d816e0603343680cb86b0aa99b28f18de7242e0bd0d09000c9a35d9
- MD5 5629e1c0cabf7f1f900689985b9ed227
- SHA1 2e088750a65250e842a99dd8dcd17e8afd6c3135
- SHA512 daba3568a7a7f8d48f804e7151cfa6fefeeffd8fc5bfb6c4aa3e289f40ad637e00022e118133115cf1c2a1555f05b8590e833f0c434767ac48a9a45513a92066
- SSDEEP 1536:+5yT/Hnj6kmyLGIUMowxvxxTM9DMz9z6+:3/vmyLGIUvwdxxWwzk+
- TLSH
  T184934A7F766901E8F175C1BDCB8B5656E377B05C07209BEF03514AAA0F236E89E38A05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  elyprismlauncher_updater.exe
- Size 398KB
- SHA256 b29ad96c84a7988445555d221f060a61ba9f20a3c005a2d67bbbd5813198c077
- MD5 7c8263a49a500dfb85a3c0e530f570fa
- SHA1 5d30bc44912732545ce5af06364295275dfa200b
- SHA512 207e6d32e97ea01bc7108e61c3f03b8c2cc4ddcbe427e2cddea330bba88caa6e8cb96fc8c6069aef74616d367af95b14ae1f58e4494135995682fa71225a0414
- SSDEEP 6144:Dak1DlhemrjOtFpuMOXvMXZDczZvx1hi5NQ5rPazAp94LLXV9k/Qu6XaVxKKjD/T:DakgmrjObE5/WNQnMXGhrj
- TLSH
  T19094392FEE4502E5F465D17DC7ABC612D1B370DE47A286FB022D8A261E276E4BC3D604
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  iconengines/qsvgicon.dll
- Size 69KB
- SHA256 6221fed44f0f560a864312553c6918a536b8e2f04c7cb4e8ee5ba9445338aa96
- MD5 977a909b6d3ea33173e67f363ab63f16
- SHA1 ed82a046b6a1f7154400efad44e99e06a434f657
- SHA512 de30d97acdd124a512f0db3331d5352fed13be2cb0d7ced89cba703e016754bc703b2185e6af06c54b385cff989bafd53dc7f39e7a567b2e0ebfe8532a06a080
- SSDEEP 1536:KAaLoiOBXBqhM+buOxhBBZgig+poUht5nu2o5bB+imfbg7u0O:Va6jmZh9poUhDu2o5bB+imfbgfO
- TLSH
  T125637C1367A81449DC2BC63DC367861BEE72B4146761EBDF13A1C8362F67BC11AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  icuuc.dll
- Size 36KB
- SHA256 6febd789ff616dd6398ae2453adc1e7ccd7bbb6aee8c623a2638c1c00d51e003
- MD5 e9f9397709df3528c75c1d19fd64767e
- SHA1 2d392c946c58203679cd33aa463041639e9fcf91
- SHA512 304a41711e6247f6dedf50697c8429a92732bd8104f94dbc5589eb60700d50a835643f16d391d11850d48bf3309ec8f4e170e2ddefe776b5459b2ba3682f8bd3
- SSDEEP 768:/CFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mr:K/prGPh7tm8T9Z
- TLSH
  T1D3F2D60DC8084F61D3A7DB3F697D392F1922099ABF69FBB8EEB4C99441D520D20B5742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  imageformats/qgif.dll
- Size 46KB
- SHA256 4fe24916a961587173c846055a34735b904900fb75716de4fa458c203da3e7ef
- MD5 c933629492717032aff2bc52c2829edf
- SHA1 3df3ba7f3bef412caf9dc309ab1634443922fc90
- SHA512 d763864e416bc5db12412b67534d07fb597145a5b479b3be527a17079fc1fd82acb4ca6eb77e8d0e764d17140581604076f9aa050b678d72cc4a8b3eb1ccf423
- SSDEEP 768:nGXTVMV6wdBj3lpVt/MSsk2OIEUcsohX7cocVW/5YiuiI5ALkZZ:QTVMkw3j3fDpP2pcsEX7cnWx7ulZ
- TLSH
  T157238C83ABA044D4D4638234D9964E2BEBB6B6244B92C7DF4221862D1F337C13E7D769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  imageformats/qicns.dll
- Size 54KB
- SHA256 fcf2c00c959cdc7af7f7ac51e2f1158f37a76c166367bf30c4edc4e0657a835c
- MD5 d3c5d0ef185418015689d97a2c888797
- SHA1 b5aee11416ba575427ecc61ce39b408c26217f1a
- SHA512 a825c7ba279bb390a3f055cb786d544993eb1e795cc084c58c1321cf6f3063b6b2a600bd3fc9db49aa20c5206ce63a0475ed1cdc4caf6c19c6c2ca289fcf27db
- SSDEEP 1536:EOy2+up1dsYzCqj7JkO4eX6sOSVBpTJt7uia:zN+uGYzn7JosOSVBLtpa
- TLSH
  T190437C07D3918285D417CAB8D54A8A3BD772B4011B928BDF0265C92D2F733E27EBE794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  imageformats/qico.dll
- Size 44KB
- SHA256 0d79934047e06591b74201d826af72f6ab595f5df4705ad7f0c234c0e2cf3a32
- MD5 7ad9178bbe3dc7276dc37682e012436f
- SHA1 db52b71eea1a577719e10365ad96b51fa6229010
- SHA512 e1fd52179926d7228fa465be42ec863cb026dbfac72a3341a1f026f178c70f2fcb04f8537231d88435becf29b83514d6cee35d0954d1180f21e2eea3f14e633e
- SSDEEP 768:LrYUBUjz9OXYC2x5XtuPvHeTLXwWs5Yiui7H5ALtl:JBUjz9OIP5duPvHeTLXwWW7u/l
- TLSH
  T101237B9396780489E927C678D8834E32EAB6F1605B92C7CF1265861E1F337C23E7C794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  imageformats/qjpeg.dll
- Size 564KB
- SHA256 004f456d513a6bfc58320652c326a023fa8fea905d26b642a561f7081442aff0
- MD5 20152eb4b41cf308240b1768bc49f337
- SHA1 c93e5807adc9c70b9604ae679547bf84874fb2cb
- SHA512 4956448be2b65c6d633403315559d9fd5f7a67090f36187c7b76957574d3c0c15ae26e941a9891e0762c81e7b28ba6079d9362a59232ff8ad7353a25658c2ffb
- SSDEEP 6144:Gg2jrDdfz1PqtHuNRR2qvOpZGd/uyqM2sb5crHABKrS9rCpBkTZjM1UKllZqZvbb:HfrS9ECMre3
- TLSH
  T1EAC42942F6B51841C7A68878DE1AC966DB91781D03F98AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  imageformats/qsvg.dll
- Size 38KB
- SHA256 b34f721be6e1a451a2eea3c146b0808091577143587d9e6bc689fe8214ff47d7
- MD5 7ee3b5552503b27a6ad2776a8fca2fcb
- SHA1 546a8bd11cd2f7aeaf37e3f971056247bfcbcc94
- SHA512 44e4b59ecb02a15e818fdc4fe2bfab26a7b70d88a724882bdba40d99ce41cf8352f93455432ede60142d57d1f5dcdcfed21beddccf5b02e51177b7677f8b2b24
- SSDEEP 768:8Si7nr/w0rAkuV2O4L5blG7uK5gSK5YiuiVi5AL9:8rr/w2AkuV2O4L5blG7uK5nI7uor
- TLSH
  T157036A47DB681846E427C2B4E84A4E2AE973F5514B62D7CF6262822D1F733C13D7C39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  imageformats/qtga.dll
- Size 37KB
- SHA256 c11ac719c2d7c50a4c2924ef4d439772176e00723e96f04d50d4a70163a9abda
- MD5 95291482f2dd14c88fa989dda454a90e
- SHA1 049589088f2194553e14ffd26b2f6546a5d4ba36
- SHA512 ff433baadda95c72dc1b8bf8575aa28e8a4a309195ccfe709b74cdc23d65140959c6718e982df674bcaf90acd970b246010ce93a6d8591debd4cb1054959b958
- SSDEEP 768:pkK60f5ksBejVX47kqfNZF5YiuiFPi5ALEA:C+usB8VX47kqfNZL7uIPiA
- TLSH
  T1D3038D53DE541C45D427C678A5829E1AEA72F1208B62D3CF6298835E0F773C13DBD3A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  imageformats/qtiff.dll
- Size 431KB
- SHA256 498e9259b9ec69a7f9a77e4ff796b9d2afcaa2e4c7c0a382b401f0b1c07718de
- MD5 217ec1613178742e4b8c285fd12617a1
- SHA1 224d488963d0c1686e1b2087327118b45a3ad2ca
- SHA512 f1c8673f8554cb4798c26136799af4d09a7455aa52716af28adbe66d0ebc87bf05d61a5142dc45aefe4b25a31729d550b74c184c58cb203df585e65df11c19d4
- SSDEEP 6144:q7b7GrJiM0yQB3WRL1yLBD3qmYxH3OvqEpTEEEEEE60HuoQ3DtRsz+dz4pluvbhV:069ZYmmGq/Q3DbnzGo
- TLSH
  T107949405DED049ABD872813955E7C612F2B3F4453B12CB8B9698B1353F127D029AB2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  imageformats/qwbmp.dll
- Size 35KB
- SHA256 e3a1be02183ebd3c136a4554b34689cbb9ee6699278efda6944e9faf9c02f4e3
- MD5 365b862dffd1449269ab11704c8e5206
- SHA1 d8c88f6d5071fdb142e9b23138e8ab968433ab33
- SHA512 c688d6f1d7b972b1eade0303e529aa6a94998b24e02ab01af80d392b372acd2de366d24fd230e2931594a1005fa1762a3a8b82ce12882ff864936ccb12954044
- SSDEEP 768:NaVooyFmtxWX2xyjnl2OYomf5YiuiM5ALn:MLyExWX2xyjnl2OYomR7uQ
- TLSH
  T1BAF26B63DBA44881E527CAB9E4868E27DA72F5610B42D3CF2266825E1F333C13D7C795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  imageformats/qwebp.dll
- Size 549KB
- SHA256 3fb2f8be5b82dada607ac9133a5139c770bd210145ea2ded90e69953b21a8d4d
- MD5 fbf2647d8dc1db68857d24d8924d8dab
- SHA1 8f7ac7d002113417eacb044d5de64b574dfeff8a
- SHA512 c289a111542d1313980f514bcf2f75af554a5cfc7d7d005227199eb3c96941bd34bab28651669454c83237e33c2079730b7ee5e0f32167dac2328b40cd3bcf39
- SSDEEP 12288:LWhkkMhPwLrLrLrLWCYNVh5+6Z9mxkn518sU:LWhBPLrLrLrLWCYNVhA6Z9mun518sU
- TLSH
  T1F9C46C8ED99623D8D49BC4B89AFD961BF6A53C1C434095EB17D0B9293B33BC05637B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  jars/JavaCheck.jar
- Size 1KB
- SHA256 30acddbd0d157ddea0b18ed5609304395b01f3e9ce2a7733d1b498e4819cd370
- MD5 14ed44148ea482d96e42a48b7951c460
- SHA1 b51c96b08748d9294eb4be5d8d868a57034416be
- SHA512 83acee6f864f527ac513dbdea711c0f5fea3573f30f59e3c3eefe3c78c0e2fd0b6628346246ba245f8fa2466e5379a02c635604fe7a01b6fb773e46d2a39b905
- TLSH
  T1B5211F567FE5C077F79F54BBD680B353862B0124A65DD20303D86B948D78B896E238CE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31
- Target
  jars/NewLaunch.jar
- Size 13KB
- SHA256 b1dd4028078302aca65ae52ce71576b519ce642a3ea9a4b4825abfe142df42b9
- MD5 80c22d1be990cb9c81a8d756ba4911e0
- SHA1 d1b0b3ca2ac37f7fad5b1220ff3c0a3a2ca462c2
- SHA512 d92d921c7e53640bfb0e4ff3e19beccd23117dc78a0ae651b73c186ff78f75cf288616014e6b38e26af36e881bba552be95958bab2e4442e6201a68c31fa1873
- SSDEEP 384:bU/9of8bfWH0vUaq3iW1C5Eq4LBMuYCmAeF:I/OfcWUfosENlN7oF
- TLSH
  T11A526C15AED3C8A5F593837442C587AB7C116680B0F5B1329FB69796482CEDC5E03F88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32