b5a8254afc8edf9226db34f85872ad909d2fe3a68910fa5097909c5bdd6c4962

General

Target
GM-512 Gaming Mouse Setup (1).exe
Size 3.0MB
Sample260620-n47drsew8j
SHA256 b5a8254afc8edf9226db34f85872ad909d2fe3a68910fa5097909c5bdd6c4962
MD5 6ad14d8f7dcb4745d75a4ae5d94250c0
SHA1 140ab5fb974b8bc29abb923ba2f1e76b97035aaa
SHA512 463b61245c215ed64e101bec8f56c837c206875d1aa69da22e3ad5af57d478a4260e4a14520d11d2bd1a0b88fc51b52931ab73c46aa7aa646b9626f57cfce6a1
SSDEEP 98304:4dBBduzdZe4X0ra2UaFfE06oMCfLi1KQXW1j:GBBd0dD0rKypgKv1j
TLSH
T1CEE53347AFB29691E0EA02F107B4996AC97B792362FD24D31B5DBD28DC3B3102B53C15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  GM-512 Gaming Mouse Setup (1).exe
- Size 3.0MB
- SHA256 b5a8254afc8edf9226db34f85872ad909d2fe3a68910fa5097909c5bdd6c4962
- MD5 6ad14d8f7dcb4745d75a4ae5d94250c0
- SHA1 140ab5fb974b8bc29abb923ba2f1e76b97035aaa
- SHA512 463b61245c215ed64e101bec8f56c837c206875d1aa69da22e3ad5af57d478a4260e4a14520d11d2bd1a0b88fc51b52931ab73c46aa7aa646b9626f57cfce6a1
- SSDEEP 98304:4dBBduzdZe4X0ra2UaFfE06oMCfLi1KQXW1j:GBBd0dD0rKypgKv1j
- TLSH
  T1CEE53347AFB29691E0EA02F107B4996AC97B792362FD24D31B5DBD28DC3B3102B53C15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $FONTS/uninstall.exe
- Size 73KB
- SHA256 509dce23584817d84e556a7ad68eea81f6142b18fc3e2a5f4c53c086de74b3cd
- MD5 1678142384c60b2e57f2170dcd5dd8c4
- SHA1 dbb8866b66ad895fd2aebda1ed1622dfba0bbe82
- SHA512 d695a96bcf0ba9c5968a144f007eb6109f4dc55f8b314570a81afab3fa6aaa374cff33bf20748daaf10b025ca33a121c7a6a741a2235f64acbe517c3421a89a2
- SSDEEP 1536:trWaA5orTBs0IRwiJO0Djt+udYRNiQcI9jjVE:1WJ4TJIR1Djt+udqlZE
- TLSH
  T16373AD01B3A0C99BEAB90631187B56760BB5FC2925521B570344BF2FFCB23919E2F746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 6f14c8f01f50a30743dac68c5ac813451463dfb427eb4e35fcdfe2410e1a913b
- MD5 ab1db56369412fe8476fefffd11e4cc0
- SHA1 daad036a83b2ee2fa86d840a34a341100552e723
- SHA512 8d886643b4fc24adf78f76b663227d6e61863f89e0cbd49548f40dd040666ca94ea46bec9e336850e4f300995d56e6dc85b689c8e09ff46758822d280f06b03d
- SSDEEP 48:S46+/zTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mxofjLl:z5uPbOBtWZBV8jAWiAJCdv2CmAL
- TLSH
  T123C19474B3C248B9C491413368AB33D36612EE746784500F9B6315AA38209E7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  GM-512 Gaming Mouse.exe
- Size 4.8MB
- SHA256 296da39dacc4e828073a30dac84e1be9994d7517d588e92a667f5d16f2eded41
- MD5 755a30c782b024897ff4eb5d3d1d752c
- SHA1 68f37991acc693ce070df329ddd49819f1f15692
- SHA512 41f6f9db066bb7fe3ada477d37af31cd02c66d99d3a17ab830cf395e8801b30d3fdaf11aac8d1282cceda08441ccaf09a0c9b1ff9fb4b44ad1919df594671844
- SSDEEP 98304:aXribVVu2YEvlad/DqEad/DqdI0je9QRbBM1Rm:aXWfvlad/vad//0je9QRbBM1Rm
- TLSH
  T17D36C022B7918866C0634A344C5BC7DC5535FE016E38686A37EE7E0D5FBE642B8393C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6