e4f35709259231709fda316c681de850949f2b729a4c9e8b8570059ae7cf5e13

Sharing

Copy URL Twitter E-mail

General

Target
OpenProxy-Windows-portable.zip
Size 11.7MB
Sample260620-wtlnbahx3s
SHA256 e4f35709259231709fda316c681de850949f2b729a4c9e8b8570059ae7cf5e13
MD5 e1ed77111e0c232a03a33417371aa552
SHA1 b9a6e2a20b8112be1cccf98553911efdb5e6032d
SHA512 eaf9fc067c690c33a43bce3ceefbb0d97a249dd784812b69917d43fbad186a35baa49c3ef80fba6914bcc8729015c0efe9101d52a03ada713c4623bb2a8600b3
SSDEEP 196608:8/yxCu1b5IwCuDlbWU6sHC5jdRwEnU7IA2WMG9koKS6oh9orz1/z5mnZIZfh1ds:gyxCu5uuDAU6H5LVU7IA2WM/7mvorpdO
TLSH
T1D8C633D521BF804BCF8971B032C0489816DE2CBE6ED2D1384D573679CED697986E6E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  OpenProxy/Install OpenProxy.cmd
- Size 1KB
- SHA256 c090cda496d84179dddda1bdcd1e660c7e496d65428756ee2f7d7c4c5553ebc6
- MD5 82c640eb59e2d3ce857adccebd10a044
- SHA1 702d82817495353048a0156294588a5fe193de8d
- SHA512 b1a0793104bfc7111114542a297b634f925f22634d4c905db1d29cb13e45aa0c3f3bc64ea7bf1d99862f9ab9828dcbfa5fa8bfaabd01ab18059f411560b20aae
- TLSH
  T16D210E0FB105408890BB8A9CEF720C76D7598CC70A229D52B06720BD1907B820BBE315
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  OpenProxy/Uninstall OpenProxy.cmd
- Size 426B
- SHA256 d99ef30ae11c7019be4b25065eb66273c4a7a1450f46b71e68ca2d5e86f61817
- MD5 913cb799d7b91e023d68e427e1b853f6
- SHA1 a03813c1843164f2738f78017deed70bcf382183
- SHA512 5945b2a14d5a2aedcdd1a672ab28eb0524e260a7586e608a5a974201d0217e7655abec69a1504b8f1099d00d835ef7b4d1d83ab09be98c165e619d25690c4333
- TLSH
  T158E02B4790D94094E57C8299BB1E4D7472954DC76A21FDB711C300FE9C437B59BDE501
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  OpenProxy/openproxy-app.exe
- Size 2.4MB
- SHA256 5244c2fb165d012c7373b44e199da78d2f85a407e9161350596e775db59ad113
- MD5 627294bf232634bcca44ebfde640e7c9
- SHA1 e87555b8c3aa90ace10c14c072e148972bc43d3f
- SHA512 88a7a798962a85dbe8a9faeef987357c69f17f519b2ee4b9f8fe2f3bb5de69eddb00b6f31870a03a7e7e2210d1eee70fcc4b1dd8c9b4a17983c702f77a8074f6
- SSDEEP 24576:xkxzqZdw4tAa7pHDQS/MGQeTEZIuoezluXRsyNivuhdPMKKHW3f23:xkxWZdw4tAIQSwZBoezl46up3
- TLSH
  T109C53A17BCA014E5C0AE9232897295967B75BC480F3263DF2E50BA782FB7BD05DB9704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  OpenProxy/openproxy.exe
- Size 28.7MB
- SHA256 bb3d526967a452c779af75d0608a2def1030f31ea36ccc71805d7799fa98a814
- MD5 bcb23b32a4a04b58e31c4f73a3cacea6
- SHA1 43f356edac1fa8e70a4cbecb6fec3ebbefa159c8
- SHA512 1d0a5559b26de3250cb1e37d4e1cfb06ab0213376a47bfaac23c86b7429517c43fcb50387b41954972a808267e3373015f81814679c39d2d93d24fa6bcdbbc6a
- SSDEEP 196608:acoaNdlb3aCoWRsNnJxelEtJ6xkL5/SQEg6vcA4qR:aNy+zExkL56QlTo
- TLSH
  T1CE675B47F96508E9C8ADD530C56296237BB17C4A8B3127DB2B50F6342F76BE09EB9310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8