742f073b91cd54709edacfbc17655c7605664d047ac7f412d7d01c5e62bbbc1c

Sharing

Copy URL Twitter E-mail

General

Target
FreesmLauncher-Windows-MSVC-Setup-2.2.1.exe
Size 27.5MB
Sample260624-kp7jfabs2m
SHA256 742f073b91cd54709edacfbc17655c7605664d047ac7f412d7d01c5e62bbbc1c
MD5 56cb5ff4c1968c94f8cf37de5032d9aa
SHA1 43230c92b9bafae3f963604e2fc98cce161f6633
SHA512 e1b37db3bc05665da91d40dfd7d584537b0b6c95a23c913980378d04e4b3b4afa288e1cb8ea59e38c368c7f0ee656687e0cf1d988a613a80131df104889fbc87
SSDEEP 786432:/5Ig7KyB9dhizk8D9CcsaH0hSxdLIwKpeR:/ig+KGzjgc4CKwR
TLSH
T1AA57330DDA95E391D50C4D700B775BCA339E90A565EB2777BB702A353282623C2B1BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  FreesmLauncher-Windows-MSVC-Setup-2.2.1.exe
- Size 27.5MB
- SHA256 742f073b91cd54709edacfbc17655c7605664d047ac7f412d7d01c5e62bbbc1c
- MD5 56cb5ff4c1968c94f8cf37de5032d9aa
- SHA1 43230c92b9bafae3f963604e2fc98cce161f6633
- SHA512 e1b37db3bc05665da91d40dfd7d584537b0b6c95a23c913980378d04e4b3b4afa288e1cb8ea59e38c368c7f0ee656687e0cf1d988a613a80131df104889fbc87
- SSDEEP 786432:/5Ig7KyB9dhizk8D9CcsaH0hSxdLIwKpeR:/ig+KGzjgc4CKwR
- TLSH
  T1AA57330DDA95E391D50C4D700B775BCA339E90A565EB2777BB702A353282623C2B1BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery ransomware
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  archive.dll
- Size 716KB
- SHA256 9880003b56ff676df4871f850c6677cfe6d31a06148a385f2d8ce61cf6289db8
- MD5 54fc47f7038c42082e0a8de0ab7bf9b3
- SHA1 98edc6e5d65f57c402e5ee6dfc81d2a220463236
- SHA512 4a49c74378371411ee78d79e5899919038e506f527ccd95fb38a19c74003f556e6e4b368620355e6b388650909d349c53d90bf7bd1c577f4f47a9673265b27ee
- SSDEEP 12288:bMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCc0zics:oSFVwT75qEtXm8KgQNjVTNjzxwjn6r
- TLSH
  T1F1F48D82BBF40668E977C1348546AA27E3F1F0551760DBDF06B487653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  bz2.dll
- Size 75KB
- SHA256 1dee82705d4a5e9de4613b71051b2266274fa21ef0452ca8bdfbaeee99ae743b
- MD5 39d43ca8f4cea9c233ac6ef34e0d087a
- SHA1 63a94b8ad92dae837a6a68a09b5f2c3971daa53b
- SHA512 9951514142d74d83985f486cf77f6726442267c5b45a0bc2552603a78c7b11e372a3a8a87cbabc1db1596559348621a58e8bb5597992d88b1a8150e2e07c21f3
- SSDEEP 1536:XBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLk+ti8y:1uxAUhbrYVLkGVy
- TLSH
  T141734B40B6A3FBBDCAABC0395623074BFF35BD680B1117BF3560D67A2B22A910D74516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  cmark.dll
- Size 140KB
- SHA256 f376018be8919898f9b61aaf313c7f8d7573799716b57521510faadba5fd8b05
- MD5 a5060ba89c90f576ee64ce2300024b58
- SHA1 c732d7502f9b411d5c6410ef3967ce429bdf2356
- SHA512 772d137fa46f210f3e5a4e4036bf786abc81fb2b934dfec9d8f4de8b03bb862f0a4696d2a63595cce9944d83075e4abc5bef2859147cad5cad1a5b4f7a3814b4
- SSDEEP 3072:K5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIi8+:iWcBSGsvVlFVtaOmROEi8+
- TLSH
  T1BCE34A96F5BC0066CC1BE07D4D2EE596E3BAB2173310C2E716400E65B9E7BE27636352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  freesmlauncher.exe
- Size 14.2MB
- SHA256 e08caadfbbfab4fdf64477d81f3f93edb0e6e2f19a9c1a471288e1029422bc6d
- MD5 36a5aea97ff6a58d9904994ebd9cf59d
- SHA1 e629ecf3ce9c44124954680c7cdce7281261d5fe
- SHA512 2849175e635f669ad5f82366608ddaa7f8dbd31b738f699ed53ac597340938d3ebd57aef42a4975939b5f389decb163d9f7cd1b0b20a89a0c037bbf56a0b4b15
- SSDEEP 196608:fgGOUhTIwBtW8aWLmp3b6a1cGz0WRSXbPv4JmkkUIq:SUxIwBY87mxp1pRNmkkUIq
- TLSH
  T1FBE6E05FA3A942E1D079C179CB5E4917D271302343209ADBB51DAE664F37AE36E3CA0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  freesmlauncher_filelink.exe
- Size 92KB
- SHA256 d3ce862c03340f58244d3e728a8a510c76613961d95b9cfffd9c1df2f2f014dc
- MD5 2784d50ebc5f683da4e0de9ec56d23a0
- SHA1 0c4626afcf0d8ce4791fbae50bcfa89140443f15
- SHA512 2045eb391d1a5ceca41d94c3a5d1b9e56786b145d45a639bd67b8926680002b725310d69aab64bebeb7143532d3bc7f2dda30294a989f71e844023bbadc9fec9
- SSDEEP 1536:dcyQlBj3iw/GYKznKcjRBeGMgrBaqJ0ZUAUAp:ElMw/GDznKc1sxg8qJY
- TLSH
  T1A0934A7F766900E5F175D27DCB9B4657E377B05807209BFF43504A6A0E226E8AE38E08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  freesmlauncher_updater.exe
- Size 405KB
- SHA256 07c8a794e9fd5e08a8537097de3dbf3062037f21b42086368fde81cc222f25d5
- MD5 e59a93f4cceb91185cd193499c9843a1
- SHA1 ff9d6ea6d16a4096876a1d527d2840fd547f8046
- SHA512 60ddb96dec4d2c55f3e8e923d4626285b94fc97c677eb4150c4b3c11fb50de50ed2c5ea00e9838a0c1e0190467f595cde68551cd7cfc337cb9af01ac4bf52484
- SSDEEP 6144:67C4ieFENXBHyohQU3fU4bodyhb+ktV7oZFRqqOw5ou+XaNNzMwjb8HkEGgiTCso:67C4+NXBpFhbN2oXckam
- TLSH
  T1E994392FFA5502E5F465D07CC76BC912D17770CD83A286EB02299D266E272E5BE3C708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  iconengines/qsvgicon.dll
- Size 69KB
- SHA256 6221fed44f0f560a864312553c6918a536b8e2f04c7cb4e8ee5ba9445338aa96
- MD5 977a909b6d3ea33173e67f363ab63f16
- SHA1 ed82a046b6a1f7154400efad44e99e06a434f657
- SHA512 de30d97acdd124a512f0db3331d5352fed13be2cb0d7ced89cba703e016754bc703b2185e6af06c54b385cff989bafd53dc7f39e7a567b2e0ebfe8532a06a080
- SSDEEP 1536:KAaLoiOBXBqhM+buOxhBBZgig+poUht5nu2o5bB+imfbg7u0O:Va6jmZh9poUhDu2o5bB+imfbgfO
- TLSH
  T125637C1367A81449DC2BC63DC367861BEE72B4146761EBDF13A1C8362F67BC11AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  icuuc.dll
- Size 36KB
- SHA256 6febd789ff616dd6398ae2453adc1e7ccd7bbb6aee8c623a2638c1c00d51e003
- MD5 e9f9397709df3528c75c1d19fd64767e
- SHA1 2d392c946c58203679cd33aa463041639e9fcf91
- SHA512 304a41711e6247f6dedf50697c8429a92732bd8104f94dbc5589eb60700d50a835643f16d391d11850d48bf3309ec8f4e170e2ddefe776b5459b2ba3682f8bd3
- SSDEEP 768:/CFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mr:K/prGPh7tm8T9Z
- TLSH
  T1D3F2D60DC8084F61D3A7DB3F697D392F1922099ABF69FBB8EEB4C99441D520D20B5742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  imageformats/qgif.dll
- Size 46KB
- SHA256 4fe24916a961587173c846055a34735b904900fb75716de4fa458c203da3e7ef
- MD5 c933629492717032aff2bc52c2829edf
- SHA1 3df3ba7f3bef412caf9dc309ab1634443922fc90
- SHA512 d763864e416bc5db12412b67534d07fb597145a5b479b3be527a17079fc1fd82acb4ca6eb77e8d0e764d17140581604076f9aa050b678d72cc4a8b3eb1ccf423
- SSDEEP 768:nGXTVMV6wdBj3lpVt/MSsk2OIEUcsohX7cocVW/5YiuiI5ALkZZ:QTVMkw3j3fDpP2pcsEX7cnWx7ulZ
- TLSH
  T157238C83ABA044D4D4638234D9964E2BEBB6B6244B92C7DF4221862D1F337C13E7D769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  imageformats/qicns.dll
- Size 54KB
- SHA256 fcf2c00c959cdc7af7f7ac51e2f1158f37a76c166367bf30c4edc4e0657a835c
- MD5 d3c5d0ef185418015689d97a2c888797
- SHA1 b5aee11416ba575427ecc61ce39b408c26217f1a
- SHA512 a825c7ba279bb390a3f055cb786d544993eb1e795cc084c58c1321cf6f3063b6b2a600bd3fc9db49aa20c5206ce63a0475ed1cdc4caf6c19c6c2ca289fcf27db
- SSDEEP 1536:EOy2+up1dsYzCqj7JkO4eX6sOSVBpTJt7uia:zN+uGYzn7JosOSVBLtpa
- TLSH
  T190437C07D3918285D417CAB8D54A8A3BD772B4011B928BDF0265C92D2F733E27EBE794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  imageformats/qico.dll
- Size 44KB
- SHA256 0d79934047e06591b74201d826af72f6ab595f5df4705ad7f0c234c0e2cf3a32
- MD5 7ad9178bbe3dc7276dc37682e012436f
- SHA1 db52b71eea1a577719e10365ad96b51fa6229010
- SHA512 e1fd52179926d7228fa465be42ec863cb026dbfac72a3341a1f026f178c70f2fcb04f8537231d88435becf29b83514d6cee35d0954d1180f21e2eea3f14e633e
- SSDEEP 768:LrYUBUjz9OXYC2x5XtuPvHeTLXwWs5Yiui7H5ALtl:JBUjz9OIP5duPvHeTLXwWW7u/l
- TLSH
  T101237B9396780489E927C678D8834E32EAB6F1605B92C7CF1265861E1F337C23E7C794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  imageformats/qjpeg.dll
- Size 564KB
- SHA256 004f456d513a6bfc58320652c326a023fa8fea905d26b642a561f7081442aff0
- MD5 20152eb4b41cf308240b1768bc49f337
- SHA1 c93e5807adc9c70b9604ae679547bf84874fb2cb
- SHA512 4956448be2b65c6d633403315559d9fd5f7a67090f36187c7b76957574d3c0c15ae26e941a9891e0762c81e7b28ba6079d9362a59232ff8ad7353a25658c2ffb
- SSDEEP 6144:Gg2jrDdfz1PqtHuNRR2qvOpZGd/uyqM2sb5crHABKrS9rCpBkTZjM1UKllZqZvbb:HfrS9ECMre3
- TLSH
  T1EAC42942F6B51841C7A68878DE1AC966DB91781D03F98AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  imageformats/qsvg.dll
- Size 38KB
- SHA256 b34f721be6e1a451a2eea3c146b0808091577143587d9e6bc689fe8214ff47d7
- MD5 7ee3b5552503b27a6ad2776a8fca2fcb
- SHA1 546a8bd11cd2f7aeaf37e3f971056247bfcbcc94
- SHA512 44e4b59ecb02a15e818fdc4fe2bfab26a7b70d88a724882bdba40d99ce41cf8352f93455432ede60142d57d1f5dcdcfed21beddccf5b02e51177b7677f8b2b24
- SSDEEP 768:8Si7nr/w0rAkuV2O4L5blG7uK5gSK5YiuiVi5AL9:8rr/w2AkuV2O4L5blG7uK5nI7uor
- TLSH
  T157036A47DB681846E427C2B4E84A4E2AE973F5514B62D7CF6262822D1F733C13D7C39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  imageformats/qtga.dll
- Size 37KB
- SHA256 c11ac719c2d7c50a4c2924ef4d439772176e00723e96f04d50d4a70163a9abda
- MD5 95291482f2dd14c88fa989dda454a90e
- SHA1 049589088f2194553e14ffd26b2f6546a5d4ba36
- SHA512 ff433baadda95c72dc1b8bf8575aa28e8a4a309195ccfe709b74cdc23d65140959c6718e982df674bcaf90acd970b246010ce93a6d8591debd4cb1054959b958
- SSDEEP 768:pkK60f5ksBejVX47kqfNZF5YiuiFPi5ALEA:C+usB8VX47kqfNZL7uIPiA
- TLSH
  T1D3038D53DE541C45D427C678A5829E1AEA72F1208B62D3CF6298835E0F773C13DBD3A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  imageformats/qtiff.dll
- Size 431KB
- SHA256 498e9259b9ec69a7f9a77e4ff796b9d2afcaa2e4c7c0a382b401f0b1c07718de
- MD5 217ec1613178742e4b8c285fd12617a1
- SHA1 224d488963d0c1686e1b2087327118b45a3ad2ca
- SHA512 f1c8673f8554cb4798c26136799af4d09a7455aa52716af28adbe66d0ebc87bf05d61a5142dc45aefe4b25a31729d550b74c184c58cb203df585e65df11c19d4
- SSDEEP 6144:q7b7GrJiM0yQB3WRL1yLBD3qmYxH3OvqEpTEEEEEE60HuoQ3DtRsz+dz4pluvbhV:069ZYmmGq/Q3DbnzGo
- TLSH
  T107949405DED049ABD872813955E7C612F2B3F4453B12CB8B9698B1353F127D029AB2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  imageformats/qwbmp.dll
- Size 35KB
- SHA256 e3a1be02183ebd3c136a4554b34689cbb9ee6699278efda6944e9faf9c02f4e3
- MD5 365b862dffd1449269ab11704c8e5206
- SHA1 d8c88f6d5071fdb142e9b23138e8ab968433ab33
- SHA512 c688d6f1d7b972b1eade0303e529aa6a94998b24e02ab01af80d392b372acd2de366d24fd230e2931594a1005fa1762a3a8b82ce12882ff864936ccb12954044
- SSDEEP 768:NaVooyFmtxWX2xyjnl2OYomf5YiuiM5ALn:MLyExWX2xyjnl2OYomR7uQ
- TLSH
  T1BAF26B63DBA44881E527CAB9E4868E27DA72F5610B42D3CF2266825E1F333C13D7C795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  imageformats/qwebp.dll
- Size 549KB
- SHA256 3fb2f8be5b82dada607ac9133a5139c770bd210145ea2ded90e69953b21a8d4d
- MD5 fbf2647d8dc1db68857d24d8924d8dab
- SHA1 8f7ac7d002113417eacb044d5de64b574dfeff8a
- SHA512 c289a111542d1313980f514bcf2f75af554a5cfc7d7d005227199eb3c96941bd34bab28651669454c83237e33c2079730b7ee5e0f32167dac2328b40cd3bcf39
- SSDEEP 12288:LWhkkMhPwLrLrLrLWCYNVh5+6Z9mxkn518sU:LWhBPLrLrLrLWCYNVhA6Z9mun518sU
- TLSH
  T1F9C46C8ED99623D8D49BC4B89AFD961BF6A53C1C434095EB17D0B9293B33BC05637B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  jars/JavaCheck.jar
- Size 1KB
- SHA256 2a350810bf6e32a733abed7df16a81fc43a5da50ea64f50e31c726eac67df461
- MD5 123b7219fbef52655c5abdd4665c968c
- SHA1 879073c97c99e2b03c5bfb1ef0cc3fdc30aa7c90
- SHA512 bc6e48236c2bb96a098dd29dee2e3ca8fc29618aa112cd93342ed9710821a7b9e32504b76da55f06516b1180ffc39827421f50e5623234f812a3996170e5f853
- TLSH
  T10D211F567FD4C0B6F71B18BBD600B253C52F0124A65D820307CC6B988D78B89AE23DCE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19
- Target
  jars/NewLaunch.jar
- Size 13KB
- SHA256 1fe37b3c3a3e88e876dd7f67b08bd987bf084dce21d427b851954c2b408f7a4b
- MD5 a57fc4a0ae53fd2023fef2cc4259cfdf
- SHA1 4c25232ae13a366795062df484f0672046b42212
- SHA512 2ca6a496ec52e3aeebeb6d60ed36948b9264642b44edffbae68d29e8b34a1f35748aaede2182c44e9f9a5e051678452491b99018eee98208dd707ef47cb17439
- SSDEEP 384:gUrhof8bfWL0nUaqbiW1C5Eq4nBMKYCm8S5:lrCfcWIH0sENBZ785
- TLSH
  T105527C15EB93C8E5F553837442C587ABBC956680F0F165331FBA569A482CEDC5E03F88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  jars/NewLaunchLegacy.jar
- Size 23KB
- SHA256 866ecaf3290acf94f86908acdaa55397223678d155491b6d09449921ec8dded7
- MD5 f0b59985e0f59087f9e85640449e6a45
- SHA1 9da97db7ec62a6a660ca9dc9c1b385907cabbf9c
- SHA512 224bce371c2f8c2117afc02eac09c9879ee98b80b07c7d60d778d29a65acd09829eae3622793bb5c7b4a91e468ea80c300a025f4d5d477a1ef4a6bf49d0621d0
- SSDEEP 384:kwI7iAuBLAkHvwnFdSoKSsaQ0J1Yp05SUO8mMM+KOy/sl2urPD:NI7LuBLAkPwFdS2sYKp05RmMFKOy/slF
- TLSH
  T184B28E27B796C892E517473AC94F871B5D81100CC17C68F7AC750BBA5C9CDAE2B036AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  liblzma.dll
- Size 184KB
- SHA256 b00f0d71a29f153356586312833e43a19e34bf69e589907a5c7d71928861a5e9
- MD5 6ee35b42e98150b08f78a924cebf305a
- SHA1 2da32a137e0b259f64ff7ce4d050527a392d071d
- SHA512 88ef690d2a5c889d2bc692f3ceee363bdaebfb74384df969e330f830d30710e985f4e1c8f2a4e4a2d1afe4484d1688b86a206dbb43561e470de3cd79593fac2e
- SSDEEP 3072:49w3e7cqOlgA0xUaotDWg+/rXaHaA1HRg7GWUs9mNoCsowfXi:49wuf45dsgka1HudYOC3wf
- TLSH
  T1F20418A572A5F0D5E2678C38C6678B27D3F678040310A6EB06DC937D262FBE4563A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  lz4.dll
- Size 123KB
- SHA256 e68f181c85d896b2fe51d0719b1da1a45b88f4f33edbbaabdcb953912d92b279
- MD5 845e513811cea9653790a8bc8c338a01
- SHA1 51a96d16386680e08908050013bc6abecc4ce84a
- SHA512 64f846ca2d93489c41c482b3dfaee993ad18c27681614e3140aea90cb73d7dad0db09565f14b169a257e6d0287ced9a9a44a7f0ad168623a8f43dfd5271da58c
- SSDEEP 3072:Gs8r+jQPM8eFnR6bWuzTy0A58yY1glRr:Gr+j78eFnUbnTy78w/
- TLSH
  T12BC36C47F7A114ACE163D0BA9ADB564BE274B8552305AFE743A8CE713E13D908E33352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  lzo2.dll
- Size 112KB
- SHA256 1395fef90c9d8f8252e169482e425c3befcb9f846fb75771d382b892120acfe2
- MD5 9720925b4f34f4ed24bf86add9dbdc32
- SHA1 a55dd1b3f82ab51e8a7406d67625e053ebf3195c
- SHA512 800b9ef5b506e235cdf292aa98550189a58797f02bb7b5504f103accc9da72fd1774596f628a78ddb4535e188f83ee3637948c5090e8c352967cb91e7466ba5d
- SSDEEP 3072:DsSxM+h7JWygE0lE6OEb/Ex0JgxiLxKkv8wrG:n7MdEiE/ELES2xiLxKkvFG
- TLSH
  T11FB35D19F2C65068D9EBC238895FD2C9E676B4480310ABEF16D1ED7A2F47ED58D36320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  platforms/qwindows.dll
- Size 974KB
- SHA256 540211565db496024246cb8a44437212e6b967f3ee7b899e888f41cc556bf041
- MD5 8a905bb23580027f31681253da1af590
- SHA1 25557385212adb726fff539b165aa54eb3875163
- SHA512 ebe78f485a73fe4b57c466fa58153903f261da315d470b50ae233543acd671dd0269ddca355e1a25928259e26301ea6d08fd1f132f595ba5b9985b7170dd5677
- SSDEEP 12288:3EhqYCXtrx8ASfukqEZ8l4382P3Q464RSQivRYtG:3Eh5aOXfukqNl43Nh64z8l
- TLSH
  T139256C1B63A80255E83AC17ECE5B8713D6B3746903A186DB0161CE197F337E32A3DB59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  qrencode.dll
- Size 47KB
- SHA256 2e84a69d8dcdff523fc89ab36c5d66edd9eaa8cb7537a8415ac1a4cdba7fdc1a
- MD5 ab0c37fd76e0195f8c24900d91a8be78
- SHA1 ea211c45bdb2d02a309daad5891d4b6dfd32980c
- SHA512 1118a4d87617754b938e8994e8cc7ddcdfaeedcafb2d3156b7208c85fbdb59436c81bdd01e9537e8f0780157ed87387389a9b2056b3dd2ba5d20b799dcb9edf2
- SSDEEP 768:9yXjbYUZqkAvg5Lv/xiHrWlvKUYX5VMdPTLSriqWsmeS:9WnJZv7gLP3yPTLSvnS
- TLSH
  T134236ECA7B9C01DDE5274138C197564BD2B174521B42ABCF0B90ABBA1B33FD2697B348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  styles/qmodernwindowsstyle.dll
- Size 215KB
- SHA256 f9ddcd6f6319be76ec8ea1b95e6829cdc0f9600242b6bdd07babb0185e9762ab
- MD5 e0298bcdb3d9c8df69fccf3772c568c7
- SHA1 c92fce591be5d1b3c86065b433bfe31d00a3fd23
- SHA512 d06d42d770f9470ec05f41f12c3af4292df5ec335da10c7d36defa7da1c5b791c49d644c49ca21e1ce09197d1a451aca215c11cf4c7fc4bd8b957257190a0f9e
- SSDEEP 6144:a4vKeYVVMifp1yq9uT/ocMIhw5oL5bQ/Z/P9tlJaH9TpII:a4vSVOih8
- TLSH
  T195243913729612C6C967C2B8C90B5627F6733068032696FF4167DEB42F633E2BD39661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  tls/qcertonlybackend.dll
- Size 100KB
- SHA256 584392e25d46b6edc255e4c5849920da3e52c01172199def876284525587bb05
- MD5 9a342822421c994f822e1fc1eb0bb89f
- SHA1 2a4a80606b64d038db3193dcfc4af5780c754c20
- SHA512 f65c51bbc95a6e466d6cd73a6da996231ef02da1de2c895d4e33b7ca7f447a7ef576e40cb92ce6309a025a7cf890ab60250c16c35a2df2e47328599b40fdbeaf
- SSDEEP 1536:S7V2ODzyJnNUC8Qh3ye7zjmydnrWK9uyR47sPZ3ZfAWt1cBF8j1J7uJ:S70q8V8Qh3y4zjbnrwsvSBg1JG
- TLSH
  T134A39D07629001D6ED2AD27DCB138C07D3B9B04947629BFF42A1DA661F67BF26E3C254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  tls/qschannelbackend.dll
- Size 256KB
- SHA256 4632404cb87f860e7bb811f525685509127da8d05f398aada5b2b88318e4a621
- MD5 57c91f12230e6d29a178a580584e5b75
- SHA1 cc535fee67b288cf40a5158c03036ac8ce8d27eb
- SHA512 b47ba666669f92b3223449511597049f26b56607ec435d791776d80b23578cae72d2c02e4689dcc86802b70f7bb4de4456ef1e475deaf7a7c9f9a4a96c194f11
- SSDEEP 6144:V+VXglMW11bIQIT1eov0AkuVeT9cF07Qnc74CpNZF:8VXCX19ov0GVVFcUun
- TLSH
  T1E744376722900E95FC6BC078CA4BC807E6B370955762DBEF5221C85A1F63BF2B97D250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  tomlplusplus-3.dll
- Size 376KB
- SHA256 5336329d48a4fa7932be676ddeb2c0144fe6752122637c774d6c8e3deba2e7ea
- MD5 1d6a3851d7f63af19038879913ed1730
- SHA1 2611f1044ffad79396f720695609a2d5a3c3ee45
- SHA512 68e822f52e6e1cdd1ffff9e8ec2bc8b9f45b8771cd9b43f0764d649f902972fc62bf09741a4942f7e5da83efb57cc0f057b4516cfd27871343005d89d717d200
- SSDEEP 6144:s80P99pO6Zds36KshHf2rHDf0oTph0lhSMXlBXBWfIfjd7J8:QPHdVQ9Tph0lhSMXl+I/
- TLSH
  T145848E17FB152075C1AAC2BCEAEE4601D7B2BC89834167CF17D999A25F13BC06D3BA04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  zlib1.dll
- Size 88KB
- SHA256 a0decaf65a07111008e61e81849e639d148ce278e89ea8389a744e0aafb15962
- MD5 56a17ada12a60f1710f12fe30f07d0c8
- SHA1 db903bb6b54a2b2ec88ad077a3f3b41c84c3e000
- SHA512 7af4a84558664aba9ef6a83c5e9ebd1b15e60a83e96a613096342891578d0187f0c4d4ab12bea1a85fe7794117e85552e1bec3759d87ff0aee6ff26c6643428c
- SSDEEP 1536:QvEyaXGzTqbvqRfSOzhppf/ISUaYuOlqjebaIOcIOZhdGUL:vdXozVhppnURkeboSZhdGUL
- TLSH
  T163936B4AAAB412A5D6F78174D8D3079EC335B01407A44BDF9248A76A1F23AE41F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  zstd.dll
- Size 642KB
- SHA256 d5b48c2cb3337cde8b7c93591bf98575683ac93b3dcbc00cdf3d0b2a0f2fc978
- MD5 687df7e7f77714c9070de3bd5030dfdf
- SHA1 283404afed2007b9ab3b5a4f3253316619ab5979
- SHA512 39121c7aac9402711d1f4a9c3b819f4eaf184fb9791bf444cea2b0419294b1f9ad0b3b979cc353edb2ce7d39e84bd1b79a3b1b1fe7a5aea1e7a087f045c8b6d4
- SSDEEP 12288:AkY/0hUaFMJEOQzB8JGKnBxc1+yOdu5Io6H0Lohb:Ab/0hlKnBxc1+yOdO7Loh
- TLSH
  T123E48D83F29992EDC13FD179C5564323EBB2380613046AEB83A4EF652F13AE55B35385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32