50dd582b1875307444917f308346ed25d4e9c9acc0b2fe2384a8045546ea80f1

Sharing

Copy URL Twitter E-mail

General

Target
SmartDevice.Configurator_v3.1.0.zip
Size 2.7MB
Sample260625-pgcfjsbx7q
SHA256 50dd582b1875307444917f308346ed25d4e9c9acc0b2fe2384a8045546ea80f1
MD5 66731c50da68cf85abd23d039946627b
SHA1 83e9d1356d948518e462c6f2448305f4d16889df
SHA512 e0a075a7f1f4519c7ffd84b32051be100d07c3b1a6484f00c78786e1c121b72b6eec1f2d9c1e3c5343f4f643840099c727f3fdd2ee13f4914fcbee07ccc6774b
SSDEEP 49152:MujtpMGM2IIKwOf+apMUDqJVzyptiNyEryH+9WVJv66LY/JsEhza2u8JaP:Mujtp7M2IIKwOf92OguHbkc2bz/JBayK
TLSH
T12FD5331476391807DF337AA8B04FB7D4487B59DA082B8DDE5AD7A1087ACFF1049A7E24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  AuditEventsManifest.dll
- Size 14KB
- SHA256 7a1db84ff1e488c7192d3ec334cda051870d60832afc5571f88d22139c717785
- MD5 bf8d78b819de5004ba03b7e21006b831
- SHA1 21fb7d2c52fe7e8b46b9c2d3d3d324b3ccd136a4
- SHA512 dd815b1982c12c0291f538a7d0059af750441889c75217580acb291b249ebe6a76c302942dd0e3ac054d44ee7fd1d1755d4f02dbdda69acd23a183e6887d632f
- SSDEEP 192:nnDs52dcC4jXW+WZq5IPB2k3AbyyNj+ocY3jozUxnQ+JX:nLYNUq5IPBgoz4nn
- TLSH
  T13E62B7115FDCD114F8BF4A32193785502331F86E5B26CF2F3E98A62CBCA2A449EE2754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  DdlTransactionGenerator.dll
- Size 47KB
- SHA256 ecdb31201fe9ae047ca9f750d658dd652fa02466e1f55d5257d76cb298ec6b42
- MD5 99d15d4c60e8d65b8a86d9153a62c93b
- SHA1 a628d3c848ddf62c75740fe48305d828b27137f5
- SHA512 71a1c80737dacf1b40456662b5b5a6bb567e29d5f2f8091ab20e0e8f01b338c9bdd9d75148cc4d70b95f4b10e4f6e60ddf0643e35f7e4ffa655ba8ddf38f7f2a
- SSDEEP 768:cSj7BEWcnJm+tgjkSB8rnbwwwmqGJADxBG/:nBoCjDQlwmq8QxQ/
- TLSH
  T12B23181573F89279E6BF6734B3B106211673F8097425E6AEAE04408F5E27FC586A1373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Hardcodet.NotifyIcon.Wpf.dll
- Size 115KB
- SHA256 c6f5a071a273706a834bfb0f499b4a76e5247297e94c0df6ce8217bb074f3329
- MD5 4428d7f25ec3b9ea766be31d634b92f0
- SHA1 592c647b0c358bd8b3e653259c0031a8b9754370
- SHA512 c4a31cb6084cfe07283a758fce359ed0eaceef7388eb3b63338f8c8829fe53d263fc7ae3d84c9ff31eaccde51e5897fae17811f3e0af1a86f51b48833aca4ee4
- SSDEEP 3072:DGTK3VDRRUU89l5AAoDnCDwBt2tJUGGUJqOoh8O2934:PMX97AAf0b2tU9729
- TLSH
  T15EB3BF4233BC8B37D2FF563975F021554738EA923A72DF4C598466288DA33942AB13DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  HidSharp.dll
- Size 256KB
- SHA256 d86690efde30ea9179f669320f39148853793b743a98b531afeaf30598e22f54
- MD5 3876a747858ca11995f25a8a4a8db104
- SHA1 4094d7e274f9d87d8c93f3a8aa14606dbf3994d8
- SHA512 c67545f6ca74dc59690e12b00a8c0ddb848926c414f8d8af14a2290f5ed647a481542f90c7b47522c1ba32116ebd3f16a49315a86c8a8d7508759ab7335add78
- SSDEEP 3072:E1lZKoJKw/ATXA2okJSY4tvmWB7pbDXQrKsbiffsv0JKdyxCCqIZ2nyreCoe+:ERJ+TXA2okMjv3BlYKYAs8iyXWyCCoe+
- TLSH
  T13C448D0D5BEC862FDDEF4735B43298148BF1E495A212E7AE15ACD4EA1C937C089413E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Microsoft.Bcl.AsyncInterfaces.dll
- Size 27KB
- SHA256 9d605e925b4885eca8b0abd3203e8d7b70ab077baecff496fea13cf531abf66d
- MD5 27fb43d5175e232c0250782617662995
- SHA1 c20a1e0cdacf672d4198e720ee8c384c0920d5e3
- SHA512 0c7d8244b0fede4b8ff966a165ec62c1d30e161ed3e3429f8b5c511fb23d8c10aaf92fd66edb15083a471924fd2fbf00e8eb3ba061ef156425e4bb4066e584ee
- SSDEEP 384:LnuDmDZGXT6NYkxel0ZrS2Yh0WXIdGl+IWg6FU1sGWepc/WllN583oR9z5r7qE0f:LuwIOTxxZ22LwJ0FU1sxA8309z14
- TLSH
  T18AC24B11D36C8323CFAE2FB5D964D5822E78E38A2C33DB3D114CE1554C9BB889631279
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Microsoft.Bcl.HashCode.dll
- Size 26KB
- SHA256 3a4e851ee5fc0f6182aa5a3d65dc56fcd6979b65334b5c3b92fbdc791457c0ab
- MD5 64f530f8ddbc93262732071b4db864c5
- SHA1 7c2f349da43199522756e3c8a1d9ec94780888ca
- SHA512 f7f3375ed6325bfaad82ff1817ad434c0ffd113b1175fbc4bdb1507e745f3a9fdec12cff9b2100c7ae96350c91e6e0b0ec24a1c569eb9bfc6b6774d7460fa223
- SSDEEP 384:B0/kajL92ajiAOeRqwDpPIwcAakgj22WVr4WNYA6VFHRN7WszxIPaR9zeN:B0792ajnFRqwpPI4DFClWszxOW9zO
- TLSH
  T192C24A1E829886C3EFAB0D7025F5EB5B3D3853B59C1293B612CAE9181C437C5D621F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 62KB
- SHA256 19edd4f5e69a4589dc314909b5854a22f89c4b9ab040591771397b2cb1a17ba6
- MD5 a4e538008c7b51a399e093d06fb2221d
- SHA1 be912df83f49eadd957ea17a0e72467a941c5bc2
- SHA512 132f8848b9d6d5bea0bb7a186911b6ae1a1f34e26ec2dac291252bf6bb43bb39d952f1f5f4ded9180937837193b0d90d1ed919a63e25544891c3fac1876a9a65
- SSDEEP 768:Ar85NhSBuU1jGHAOeQVGVfueReYmXzXtqjKwRKPfnlHrMrDFIwFClNf9zo7H:ii1aVPu3w0PfnlLMrZIsivz6
- TLSH
  T10D534A1473FC8767CBEE467564B28300DB34698B2222E72F259EB08518C7BCA57917F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  Microsoft.Extensions.Logging.Abstractions.dll
- Size 66KB
- SHA256 b4e0e778afdc76403792390b056f68de0ced742d16c5b0347d9cca6930f4761b
- MD5 246de220f328c324349fe94583dba908
- SHA1 e938dca7f045dc35b394df2bcb020323a7f0837d
- SHA512 b8d285de938ed5c5ff334eced8033a83eb36ca22a273db0a7bb985c7d8cca2fdced73c019e29816a0f20dcb184371009fd6dc952371f44f68a8448118064269a
- SSDEEP 768:+eYEQCkKeLcxfJfEZm/xiOyoOv7vyBn9dmIkm9Ts0mPAiR6bATJRmMFYvtlysqjm:/e6kpyJKHbPAiR8nMFEissQc6IIzV
- TLSH
  T19A637D0197EC0323CFBD8D76A8AA96519F31C2267417D71B7ECCB1292C6B7884B513B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  MigraDoc.DocumentObjectModel.dll
- Size 326KB
- SHA256 5d166b173f7c1bca92d31b2005a711b3d51536c9c456f5d85eccd0777de31944
- MD5 60cc1193a878414a9bbeceba26155f9f
- SHA1 e4bd53d2c0fb76ec6bece0ecac3f6e9b3108a131
- SHA512 2854b3d121345768de588988aeca1ad6048a6d08ad10eafeeca2a26acbd34df4a7626ed0cb8a9db2c29b4416cb80ca0eaa4149908fa1719ac37eef1ad55e2b4b
- SSDEEP 6144:/WBRZmDw+mBKBiwCBb+E/6wnRBfhEikJeKpaWjw1a:+LC5Mb+i7Erpxw1a
- TLSH
  T1C1641A7017EC5E5AF69EA731E4B5843CA2F2F41D3662EF6F8D80B1A46D52B41D843232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  MigraDoc.Rendering-wpf.dll
- Size 135KB
- SHA256 e0ae7b59d1acb54dec57821fe73120602d7cd532bce595621d76cb5ea6cd3d53
- MD5 ba158439bba9554b500a54456dc459e8
- SHA1 495aa259c4779a86850a4567e77aea1168a5655f
- SHA512 a3de55fd4623288882711ec959ba3a3d057097fb6f569a6b4a0ccf831e63ae7a9d0de7bb6f81ec9a81d2d0f207c6044c404107c07b8e3f9428692069c6d5c7c0
- SSDEEP 3072:pS7QsTMBhMQotmUKAAdbwyTIjOHRj77l6NTSWAJ7T1EE/IWn:pU/MNbdbmaF7hgTSLVTB
- TLSH
  T17CD3392823A89EA6C2BF4A7ED474110887F18217D19FEFCD8DC4B5FA199379251063E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  MigraDoc.RtfRendering-wpf.dll
- Size 73KB
- SHA256 187aa30a4c1e69258b831f96fab350e62e8e60cbddadf6c328582d2cd2714483
- MD5 46de03a1f711973304fde5aeabf77370
- SHA1 ef9db3ed57dfd1183f864707985874b09a5a8d0d
- SHA512 a42d546d756107e054b3ee3f33c0fd23c271129908f52944b42d411c0c01f6b41167c07dcf210ae57d7c03cf6cc4da57755dff3ee482b9245f441e921dbb7b05
- SSDEEP 1536:S8GvLH17KHvIFOKQIzndemx+6yW/yO6KxWIhAP4+ytHGzuxywlj4oIpr/r/OL:S8GvLH1+PIQKQIzndemsVCyhKfiPTytH
- TLSH
  T14E73084533FA5A07EAAEC7B5A431450447F1A9267E43EB8D4DD460EF2876BC88A40F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  PdfSharp-wpf.dll
- Size 773KB
- SHA256 a954c96abc524fc796da241c30f0e0e674602d2d2ed9bda3c3149e6ef7d95ba4
- MD5 ca763abc59edbf1d5ef4027526fcd4ce
- SHA1 71775b0a6231cecee833fc58c090af62fbedacae
- SHA512 94cb964be59f27b368866dfd6ca1daaae4196aafd5eefad200e5f88f9a3cd57fcc57aa1f9e16fd941ebc052cf4a0bf805edda7fb37b2df3ff5f3b5f7836e7b84
- SSDEEP 12288:MCH4Oj4qbEHnH2QOsGi0kZUZKSCk0IUJAUggUUUA4U9cu7MlKhdcFZr/zKo+CRxO:MCH4C4qolNokCZd3lpjmoCab2
- TLSH
  T195F44A1437FCAA1BD8BF5B75A57004204AF6F952B3B6E75F0901A9AD5CA3B458C203B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  PdfSharp.BarCodes-wpf.dll
- Size 31KB
- SHA256 acdb2fd79fe4f0f0fc5c826a05659dea6835fbceada2ed3739891e8827c8d07e
- MD5 07ba82556224621799a6391ac56ec213
- SHA1 bcb0ebf80db1cf0e23c7a9f7d1d70441e51e77e8
- SHA512 28f6a92002c293da8f23a5ebb2bfe9050ca5025c6adde2b60b3768ba763f2d364d214206cf3fa8f8f2dfc4fc7ed9c41c941333714eb2d53cc17dc1f32d179d4d
- SSDEEP 768:BQwpNeb6yEfc8T6q8J69D5m+ljKnshv48:x4b6dD5Rlj7x48
- TLSH
  T114E2090C67ECE137EEEF4BB464F5126295729586B633E7993D004067BA1BBD064023EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  PdfSharp.Charting-wpf.dll
- Size 86KB
- SHA256 a2a4930f5b6aac3f39d900351498c9bbead1836e30314dfe052a24c45c6b7866
- MD5 75eccbfb31ad81e23dc1ea1c318c8230
- SHA1 9e54eb3a732e4baf67e0cc882cfd452b7564758a
- SHA512 18ce683ae31c93bde4196eee62ab5c6535bb1f9a7ee7761699f3ed0cf5f65c2cdef4d8be8830b8e8af3fedbf75806524930acdfdde8f2400137e405691ec1455
- SSDEEP 1536:aSDofZgZS1ssRAx2ryVPxbyXIqNLAPV02v+4wo6zUFWlPwr08bLFjljX8MFV:aSDjS1ssRAx2mVJbyXXAPVxv+ib9FJXl
- TLSH
  T15883F77D4238CFB6FD9C03BEA0A0465257F0DB16B152FBAA8D50B4F12F12742A836597
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  PdfSharp.Cryptography.dll
- Size 13KB
- SHA256 1a69f4067bb551a38b8b03821c8d79625dc72aedb9106ecd368f18b87486143a
- MD5 1538fbdfa7eb449eb829e4c38036f52d
- SHA1 b1f9ef21026501b675ee8e3fd0020f72cb43e979
- SHA512 1e3143ae5050ac111d7ac72c691b945cd0800176c62e12b74c0bd2b7112e1c51cac1dbc8ebdc54a7541a47cdc69c47722750208bb82c1f3bd22b77909da0e1ad
- SSDEEP 192:apRdiHzE2isltrAKJafy4WWymWFklTMtkMotTljq5lMAFbCMZtb:NHRPr9Jag/FQEotTljqc8fb
- TLSH
  T14452F819A7D8D323DAEE4FBD40B291160AF9B7087402EF2E59CD854D1D1B355A210F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  PdfSharp.Quality-wpf.dll
- Size 39KB
- SHA256 264aa2dc832014261450490fdc4f6166d20afb4267aef0e20aa8e1ae2ef3af7f
- MD5 e088e9fda0b0356a818b8a2f016509b3
- SHA1 f462345ab57fc16314b3620fa66b99f982a552cc
- SHA512 cceed91fecea0b23aa7b680e7a81cbc58885079a3df327e4a7fd83849c9eb7e0c264c321a6a085475cf41588c503577640c41cd568ea7d456a78e51f18fd2b43
- SSDEEP 768:NUDi/2fMZRhkkGA1Bmc2RgddtVuLR0oGBZhoPkLlj8i0c4NvDCS1i:NUDBfVAXmEdkqHBPosLlj84uDCS1i
- TLSH
  T14C03090873F98316EAFF1F34E87521440676BA56BC76DB6C198150AD0963B90D870FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32