ef71f59d26c78e7d9a39e2554de20086f844132b23e21891e81c47c55dbd0d3f

Sharing

Copy URL Twitter E-mail

General

Target
avast_secure_browser_setup.exe
Size 6.8MB
Sample260606-wtk2sabv2s
SHA256 ef71f59d26c78e7d9a39e2554de20086f844132b23e21891e81c47c55dbd0d3f
MD5 580087d678fabd1e48805d22bc704d5e
SHA1 b15a2b5d2cef1c06e32d058b3431da10ca448b6a
SHA512 f2c405c845895d0952c09e278e01529279735fe53c1c616f51c5fa8e51f1f3fce7a0f9f392a68e68291246177bf41d4ea680b211242f41058d8263ce267380dc
SSDEEP 196608:Jure141lwtUuF7M7ymd6xX4ocekTkXkhxmp/GHN/MnPQtFRkC:J/owK+7A6xX4vlT+kLsGHNuazkC
TLSH
T14F7633DBBE95719AD29C5C30B63473F318A12F610D3C297227A5381E26F7CE8509E19E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  avast_secure_browser_setup.exe
- Size 6.8MB
- SHA256 ef71f59d26c78e7d9a39e2554de20086f844132b23e21891e81c47c55dbd0d3f
- MD5 580087d678fabd1e48805d22bc704d5e
- SHA1 b15a2b5d2cef1c06e32d058b3431da10ca448b6a
- SHA512 f2c405c845895d0952c09e278e01529279735fe53c1c616f51c5fa8e51f1f3fce7a0f9f392a68e68291246177bf41d4ea680b211242f41058d8263ce267380dc
- SSDEEP 196608:Jure141lwtUuF7M7ymd6xX4ocekTkXkhxmp/GHN/MnPQtFRkC:J/owK+7A6xX4vlT+kLsGHNuazkC
- TLSH
  T14F7633DBBE95719AD29C5C30B63473F318A12F610D3C297227A5381E26F7CE8509E19E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

bootkit discovery persistence spyware stealer
- Checks for any installed AV software in registry
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AvastBrowserInstaller.exe
- Size 11.1MB
- SHA256 65a1bf6f3657c05c6eaf4a3031038b61d58b4ba1007c46fa815585ff6b2f58c8
- MD5 6c0a391f7d0d91e4279404200985fb2e
- SHA1 77ffa5a140f0d4d37093c7f712d4b1b98604e1ed
- SHA512 1fc9f1144c792179a8322a4d024593d0b2f03400b4735382f85747663fd4275cebe483998ed5ca35977a9f3580c4b4b3fc788110e93f63135135ba1452e363dd
- SSDEEP 196608:d07mA7UN+uifSJiF7rojV9N7S0YBLAgq7Q83qmHt8Bns33HkMRKgW7j/PzRMfoFI:+7Upe+9/3HagmRMQOrqN4
- TLSH
  T12DC6AE337A81C0B9C65203B0564CE39987FEFAB02B7251D7A7982B5C1F784D1BB25A53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/AvastBrowserUpdateSetup.exe
- Size 1.6MB
- SHA256 2425183fa25e5a6e99d38a3a2f98ad74a51da09e3f33105bf88a1f363dfe9666
- MD5 518936ad220f261fb1c4be46c9e8f5bb
- SHA1 e9d16718e8a6f9c19a461b0079dcb92cd9e6374d
- SHA512 b05df7f397baa7e1fce6deec4c4eabd0cb59382a497ca6ac2dcfe89c6dce26ecca61ae3a0b6e14af1f4e3624f14a85febbcf66c9efdd7aad565023d75bca7e90
- SSDEEP 49152:kbGrGVjIj59OfWx2YtJ+qlnZfS9u4i8Jr6:OGrGVjW2/KBn5uu4X0
- TLSH
  T1917523027AE18171F6BB1D35667453F31A7AFD708D30996B2394382C2AB5CD19A34B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/sciterui.dll
- Size 147KB
- SHA256 923f9bca72d8b13beabea40b4d733088d5cad1047b4ac4b2699fa1e8b1379e41
- MD5 ce343f3452cc463ecac9d4b86416b2c7
- SHA1 824c5d5fbeeb0cc71d3caedfa2d5f23922c9093f
- SHA512 79a52b18ef92fa94f2305b02049abda91ba86fd5ab8eb817041075fdc7c95a0fde79d69831201b326a76e09f33b5c4dfff089cc75e53daae2ad620eedd60eeab
- SSDEEP 3072:4DKviR92IK3cV8z51WCqMzqGpksYaxNKvR0QzYFRGQ1yS21ZCVV:4GviRK37z51jLzqYBYDvZYFRGQ0XoVV
- TLSH
  T16DE312CF7E1473A6FD9A4E711090477168C7F3F8BBB695A218948264A66234CE90D0FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8