564d89328353b4cd149c282f0b6dbb00fa06fb7cf268ec4e09b5896533555c87

Sharing

Copy URL Twitter E-mail

General

Target
MultiCommander_x64_(15.8.0.3135).exe
Size 10.2MB
Sample260625-prk6faby9v
SHA256 564d89328353b4cd149c282f0b6dbb00fa06fb7cf268ec4e09b5896533555c87
MD5 6d0ee26c53e80397a0559254b26917fb
SHA1 047b5005ffa492b5733464250af63b43f2329d19
SHA512 d62862f11d45dbabae321d2c908c13d55d155e18cbf951c1d208bfa24ed60696fc2d633ac61a1ffa82c2d161f41ed8bd9350070a6ecd0b48f3a50b3fb05a7512
SSDEEP 196608:xdPQTMAzQ+TxQmOkq/ZP0Q3JUkbYZgWYEwyV1VuE4CFl1UrJL/ZUN8xg5ydqA/j5:zITnznPNqxPrybVuE4CFlaogggIA31
TLSH
T117B63399BE66E092EC62047225F9F270F1391A374B5AC965337BBE7614206C7086B1CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  MultiCommander_x64_(15.8.0.3135).exe
- Size 10.2MB
- SHA256 564d89328353b4cd149c282f0b6dbb00fa06fb7cf268ec4e09b5896533555c87
- MD5 6d0ee26c53e80397a0559254b26917fb
- SHA1 047b5005ffa492b5733464250af63b43f2329d19
- SHA512 d62862f11d45dbabae321d2c908c13d55d155e18cbf951c1d208bfa24ed60696fc2d633ac61a1ffa82c2d161f41ed8bd9350070a6ecd0b48f3a50b3fb05a7512
- SSDEEP 196608:xdPQTMAzQ+TxQmOkq/ZP0Q3JUkbYZgWYEwyV1VuE4CFl1UrJL/ZUN8xg5ydqA/j5:zITnznPNqxPrybVuE4CFlaogggIA31
- TLSH
  T117B63399BE66E092EC62047225F9F270F1391A374B5AC965337BBE7614206C7086B1CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
- MD5 d753362649aecd60ff434adf171a4e7f
- SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
- SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
- SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
- TLSH
  T1F0623B51638888F3DBD6013EB4523707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/UAC.dll
- Size 17KB
- SHA256 e58884695378cf02715373928bb8ade270baf03144369463f505c3b3808cbc42
- MD5 88ad3fd90fc52ac3ee0441a38400a384
- SHA1 08bc9e1f5951b54126b5c3c769e3eaed42f3d10b
- SHA512 359496f571e6fa2ec4c5ab5bd1d35d1330586f624228713ae55c65a69e07d8623022ef54337c22c3aab558a9b74d9977c8436f5fea4194899d9ef3ffd74e7dbb
- SSDEEP 384:59TzaeW+WyB8c7LX+OGkrwWvVrkUiEMAWm5nskAvXkq:5ZaB+W62Mr5vGUiEum5sk
- TLSH
  T16F724B25ABA083FFC5500571A6E1672217FA98301979586F8E73EEC62FB59436C3E703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
- MD5 f832e4279c8ff9029b94027803e10e1b
- SHA1 134ff09f9c70999da35e73f57b70522dc817e681
- SHA512 bf92b61aa267e3935f0ea7f47d8d96f09f016e648c2a7e7dcd5ecc47da864e824c592098c1e39526b643bd126c5c99d68a7040411a4cf68857df629f24d4107d
- SSDEEP 96:ytJ6tC4jcY5rKhkfL9SYdKkcxM2DjDf3GEfKvBKav+Yx4yndY7ndS27gA:yyj6QS8HREf+BYYxbdqn420
- TLSH
  T19212F9675A0011B3E9A3223D306A2E3F977C9325D0527C03C677AE562BF031A7D3A355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
- MD5 05450face243b3a7472407b999b03a72
- SHA1 ffd88af2e338ae606c444390f7eaaf5f4aef2cd9
- SHA512 f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b
- TLSH
  T12881947683E424F1C08F0D33B02A04DB6B76C9321326850D9B536F82A9A5AFBE03C311
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral6
- Target
  $PLUGINSDIR/nsisunz.dll
- Size 40KB
- SHA256 6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
- MD5 5f13dbc378792f23e598079fc1e4422b
- SHA1 5813c05802f15930aa860b8363af2b58426c8adf
- SHA512 9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5
- SSDEEP 384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4
- TLSH
  T188038EA392C146FBC5F8843931DA6E1D6A9EFC301BC16103CB2DBDA52D153967A642CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  $PLUGINSDIR/registry.dll
- Size 24KB
- SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
- MD5 2b7007ed0262ca02ef69d8990815cbeb
- SHA1 2eabe4f755213666dbbbde024a5235ddde02b47f
- SHA512 aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca
- SSDEEP 384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA
- TLSH
  T1FCB26B82B1D1E973D09F0479AB993F15E3EFAD507670EC5300667AC732A0AA2C769713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  Extensions/FS7Zip/7za_x64.dll
- Size 427KB
- SHA256 4086f0374d79ebbff0e499048c2df8dbfdff4cf7cdab50fa8f26c7862d31e604
- MD5 5b6f5e165855aa064143ba7b5b6da9ad
- SHA1 502223ae766fbcdf8bf1a07a76d4906672be9f2a
- SHA512 fcbaf0f1e2ddb92ddff525fa14cbbff97efe5feea63ea60d3967d3bedd631b5502ca4cf439f46c0d1dc9d94a7f803bb5c8bc92c438f3e3d18be9177e862be047
- SSDEEP 12288:a2UvKkUHaLqVztxpOd3VHcSJcczi7SHKjFQe:a2UyktqVtxpO9VHxJLziO
- TLSH
  T1A0945C6AF3780079E1A79178C6675B07E77578860360EBDF02A4876A6F17BE0593E330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Extensions/FS7Zip/FS7Zip.dll
- Size 248KB
- SHA256 584cc3d1a9a080c2b6998e7b301f46b6c15f6208484d7dde70adc882e5671c40
- MD5 07a54035b9691409862c7374cd4b19ad
- SHA1 753ec16b636a8ca2c8de5c614581132a4b0d8aa4
- SHA512 bdb19b5463ef2ccc8321242164767fbf4c2985854e016e897034e877ec562dbbc8240c527b7e4facb8c7bff3e8e3212f468f1fbc4d6cecf75f421c1f477ca3bb
- SSDEEP 3072:VdDsAob3TB1qQ5iSQ5Pq2LFzDd/zuCF3vdN6f0WoS1REBFlgCBwV:VdDCTBR5iSKqaFP591NFpy
- TLSH
  T1AF446C55B6B40CB9E9778179CA934A05E7B3BC910760D7CF03904A9B8F2BBD05A3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Extensions/FSFTP/FSFTP.dll
- Size 442KB
- SHA256 abf20cf57333d6c3d3cade2134540ad9dd57724fa7a5afcc3df73780a6f2372a
- MD5 64a864f74d22ac7c41631d5f5f3aea3e
- SHA1 d0060b836653a21f9a6293c8990bffd59264cdf8
- SHA512 74e289c0f7de6e33757069f564b35aa2de410363309a7396bb9423000ee578ca81e09567a05b838ea370b53e47cc21b84c01236b87a5303891aac146cb3c13b6
- SSDEEP 12288:X/MnSo9mL7nOXuZAq9YEFYluxx25rvpng:X57nOXEx9yMcrW
- TLSH
  T1D5A46C16A7E404B9E0A7D17CCAA38D42EB7238490770EBDF4390D9B65F67BD05A39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Extensions/FSPortable/FSPortable.dll
- Size 345KB
- SHA256 b60d66a426216b09fc1f43db09a62c8434e1c3dce3f5e6be55b20a67149fa15e
- MD5 4710c936ec6f5cd7d6e88e067efb6e5c
- SHA1 46961497bc970bed8a2503ad14ad5e0845b157e9
- SHA512 a818c904eeb1c08eeb0ac2f507959524fb42e0e705d8023bce80d7a1cb6f2b99c5a04e91801440edb258d8ccdf43470899e88afbd2f3b2ff4c07475b9cacc752
- SSDEEP 6144:Fo+3bJkyeFWL5teGQzOgbAmOYWFcNN7JAVTQMF6bO:HUOlWN94QMs
- TLSH
  T1CA745D56A7F80079E1B3D57CCDA38801DBB27C5607B0D6DF135089A66F63BE09A39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Extensions/FSRAR/FSRAR.dll
- Size 2.7MB
- SHA256 4ab42c9fe08b7f86e7eed4f80b08d46b41d22b8cc09dbe0136c02860806defde
- MD5 d53523701550b619da97df6b02d5ecc6
- SHA1 2394dde647d19c51dae3183c3183c6ffe60ea093
- SHA512 51b1f3c69dbdccbdb66047c730488b5b1cc63894b02ed552683be3d8794efc74fbe77b5710722b7001c5526d0c6ed648141764081d1b8ff72665c5b1e61f2787
- SSDEEP 49152:ImueUqmqukmrKwvNMgCGzPyDKOztarPgqeorylg:DzOyDtKPgqolg
- TLSH
  T191D58D4566FD40A4D9AAE078C93B8D0FD3B1BC060338D79F11A48B9E5F77BA10A3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Extensions/FSRegistry/FSRegistry.dll
- Size 273KB
- SHA256 cf39f8026de7384f7ecd63fb2ef4182f797fca4aa7d1ad70d81c967591f41f2c
- MD5 4363bd392e72000310a2230ecdd29ea4
- SHA1 8ef16e3f8e21e747f1da74567a1eb620d680658b
- SHA512 a6f8b410f9e15a28c539de97541cf32677e6a941a6b9e79382af4b2c63d4a1021d43a7dd567c74462f00a62d97d45071ca69ee905d2f90c2ebf36bd0bd05ee06
- SSDEEP 6144:RfXDfkvj7ZP/6gFzsj7d2T++j8hI2uXFuy:RfXDcsOzsXd2TvohUky
- TLSH
  T1AD546B15B6A80CBAE17BC43DC9878905E7F27C4247A0DADF17A04AAB1F27BD05A3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Extensions/FSSFTP/FSSFTP.dll
- Size 648KB
- SHA256 d37c593dacc90c5c1832b3a40fd9ccc86d47654ca62e8719b33f595f16c0cc08
- MD5 994bafe233dd272db74bd5422d730494
- SHA1 355a0667fadb24b4a2623d6a57ccb88b3704006d
- SHA512 15887510c068f38481a28ba4a58ad0ad81b5bfb81683a34bdb79cdc097f4280aaabb539dcfeb7319984b1c98880b595f385136669935b69a60d8b06f33dca357
- SSDEEP 12288:2iAbYRS5fnl0qfl7YxneLb66gFK1AT0YCbO7/:SbYRON0el7Yxn4bF1ATCC
- TLSH
  T1CCE47D12A3E411B9E4B7C139CEA38912DB727C060764DEDF4390A99A1F63BE44B3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Extensions/MCAudioTools/MCAudioTools.dll
- Size 1.1MB
- SHA256 58840c69fa3e07f47e2372b8ef0551df47f4ee3041f660749e8a20e05bcc47bc
- MD5 28682447c207f0a302342d557db2687e
- SHA1 3a2dc2390cc4ae48e3276b7e546dd511f51eb424
- SHA512 cf6c5f73c1ff1ff1b8a09e042955be29add9b4cb82ccc149da37a97deaa47372649e7370a1bdce6a0e06091b23fe998ab191cfe7b4385a7d5cb36a285f8ecb13
- SSDEEP 12288:2rtR9hIZIx5XfygAZHOJt+cMgDpfKFTuqEBogFYtHsonHi:StrhICx5XfyVhUtFMgQTGB5YhFn
- TLSH
  T176355B2E7A684279C0B6C1788D97C543FAB278F54B348EDB06D1626E6F33AE1853D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Extensions/MCLanEditor/MCLanEditor.dll
- Size 328KB
- SHA256 cb2b03700025141c9698a8ded20316c61d7ce7408c906dfc6d450dd409a0fcb7
- MD5 47cbcd3fa20c2debe79f1a9b0476bc71
- SHA1 2a4cfc947c4e650291a3684ba3a58c8ab4eec1ef
- SHA512 0631724103bbb1ada88121498b36cf46f447d218fbc9b641171aaf7f4a2fef3f19a293fbad8c6dfe87d27338ad424af00dee41e0645f05b0199cf252d9274091
- SSDEEP 6144:+54LMEO+S8pf2KGLrZJBBeC0cC6YN5/m/7Ok:8ExYLrZZe+Cc/q
- TLSH
  T1BF643B16A6A400BDE1B7D17CCD578905E7B3BC455BB0D7DF03904AAA2F23BE09A39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Extensions/MCPictureTools/ExifWin.dll
- Size 391KB
- SHA256 f376c28051aed6ee9f61d82cb11d8040beb0b466fc810cb18d37b18446ff236b
- MD5 3eee7374f43f7179acdfa0063b7bbb4e
- SHA1 d966fb6be388061711cf2d37333b86a948434ef4
- SHA512 9d7c30f2ff184ecdf2d89d5341237d7279082ca05b85e09778f8c3a49b3aa56b5ae17842c57dabe0fde2b13c0892d246209e565a01ade2dde262583fa4cfa087
- SSDEEP 6144:nAITar6tCSdry3DbeMA7KTQ9PPURy0zSlIyLmXkohSUiw:nAeij3Q7jPuSl+Uo
- TLSH
  T1F1844946F7C104B6D562823885B75302E7F1FC680361CBAB63984269AE33FE1573A7D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Extensions/MCPictureTools/MCPictureTools.dll
- Size 860KB
- SHA256 f67ac47058fed5dc55ee940b3c872dd65d6543bc270dde69d1ec9c2c5e5671cc
- MD5 79410e2a9e2ced2c30bfdbcbb37969d9
- SHA1 48ff0c4814c2aac6c38baacd590b3ff1a9b561b9
- SHA512 8f6963b445bf25db1524401262da71321912a29c753d077e4967bd4d5adc35ba53c13934e942c1fc8560fafba9b6efac1f9478496c69cb49cc9066e89edeae0b
- SSDEEP 12288:gWxfIJk3pO8HzAP+y5bifnnYsVLZLWjhrQjT61Mtk80581fMxcHyLe4zTbGqXzIf:gsfIJk3ppz0xrQ2MtkJG1kxcMnTlDzw
- TLSH
  T1B1156E17B6A801F9E0BBD179CAD38917E772B446177097DB079046AA7F23BE04A3D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Extensions/MCSpecial/MCSpecial.dll
- Size 156KB
- SHA256 5cda71144787b1354d89c4711b8690871add253e57f63a7738b2619b1b7412f1
- MD5 47316c8f0cd078afe462702035f0377c
- SHA1 4bef6090d272487802a75794ecf397c06a63d480
- SHA512 b1e8e944f65cde28345abb86b7147e9e4abf7a727d1a2e265a7fa919091a060d409d37f30e397b3f44a16f27fd3b7c645c6c28926ea1a46d91150b5e4d01bfab
- SSDEEP 3072:wkn2eZLdiVLigVqzizsXb2g6GiSeKkUO6ZK2R:ldYhpAqg2cKG
- TLSH
  T13BF34C17B6A6507BE2778935C9430901EB73BC564BA0AEDF07900AB61F277D0AE3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Extensions/MCUtils/MCUtils.dll
- Size 1009KB
- SHA256 ed2b8713441b302cba5a8183605cbb6dd174c06c239cf4a9060b11ec0cf636e0
- MD5 cd8a22210711b33a48f4e71561c9eb9d
- SHA1 4d1748ce66edc8edd4bdaab21e9d1c644faa63c4
- SHA512 4c1684a8d95512f9fc324b67375c0423c0967e127715e21d8c2b0364821d7f298bdcc90382674967c226f4fea1a0a6dd6aeacb4bd6042fb965c7aa78edac28d3
- SSDEEP 12288:Bphqv4eth/fOozi7PjU3bD4koH8eUfg7/23aE9XA+fR9MAKvYuRj:BUNbOozi7PA3gkocBfm/2qFmgAKwu
- TLSH
  T13A256D1763A402BCE4B7C1BDCE978D06E7B2744A07719ADF07909AA65F637E04A3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Extensions/MCVideoTools/MCVideoTools.dll
- Size 428KB
- SHA256 2f8caba18fd82cd6204a6b2d89c61d56bb3f841bbce5372a2d4313086c4ce207
- MD5 9c8a0fb0d9dc801bd46c72ca3b6ae69a
- SHA1 69b6611c28216307f1308f758f9217aa749f8890
- SHA512 c96e35a4a1ff38c26bb509d3cbe731a0d6b7dcde8f0bdca750a06732512afa243c5fe57b6d356631192d729cf80b40b1516ecdb6afb77bee413d57055f6a27e8
- SSDEEP 6144:us8NOLHKEAfX62gU/dVwK9KUpPImepHhs7qw1555555BE:XbLqEAJ5lYJhiJ
- TLSH
  T124946D15E7A801B9F0A7C279CD938906EB72B84A47B1E6DF03E096B61F237505A3D713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Extensions/MFTools/MFTools.dll
- Size 415KB
- SHA256 35bca989db6cbd96d265f32dd0bef0dd334984eab6ec5a9fe2ea48f90f19e820
- MD5 57c2a79209fe00d5578c469a550f79f7
- SHA1 7f88e455edd51b4d06cd2a85d970a1ae1778a6ba
- SHA512 c675c422cca047bc2785099bcc67ec701a76d773994d0f0e6cf01d7a720110a317bbf9f0b48be0699c66df0fc5ad27ecdc03b21b9073b7155dadafdcd4a38470
- SSDEEP 6144:j7ZcJgxB0ZY2e8dY2DR/z0SokW9bi7xf1X9YOBYOJYOeYO/0jct/ps9O57:jqJY0ZY2ea9ZokWNAxf1X9tBtJtetM
- TLSH
  T1B3948D1AFBA004B9E1B7C578CDB38911E772BC8E47A19ADB27584AA61F33BD0453D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Extensions/MultiFileViewer/MultiFileViewer.dll
- Size 1.2MB
- SHA256 df187182da5803d1fc9114029ac709dc9689a60c2d32637461fd93cffcd550a0
- MD5 5f7a34bd00e1a478321bef7d1ae521d7
- SHA1 98faa885327eaf68553ad7578f2175642c9679b7
- SHA512 930cffd6916ad05209ab6bbefa1104bb4c8ef4b24aba37c9556382c483640c15866db5a7347f39160c8ab8a9392b156ab681e26a69319f573bf42fd1dca49893
- SSDEEP 12288:OUg/7ljJ5d1Qy4nAPAYk6fIQD3L2gt7p30kQTZB1wZay29sGsD5RLepdK1FK0tHC:OJQik6z3Lnt7V0kqB2EyosGsDXTFz0
- TLSH
  T1FA456D06B3A840A4D1AAC135C9678916D672BC4607759FDF02D0BBAF6F33BD15A3D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  MCAdmin.exe
- Size 341KB
- SHA256 39db9556e85bab988b1f1e16a83592bf6ee328aec9c62cb143eee3f3b6e98285
- MD5 f478976477bc7b9bb629ce31d97d597e
- SHA1 e8b7bc89472196069e035787f8d5b886d19882ed
- SHA512 d9ae0f5f4f37cd3f4e2455b5301fe9cee02e3018ab30d495dc4d2082bc55c81dd4baebae2aaa51d04bfa57b4d5bb1148ba5a7ec7690baf3084f2ac8269497b92
- SSDEEP 6144:mEfGlMeGSceIPxdKBMwoiA4oRGOlg810Th0wrG:mEfGueGvnKJAxj4h0w
- TLSH
  T15E745A02A79404EAFA26C3399983D511D6727C254760D6DF92B0B67A3F33AD34E3B319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  MCIcons.dll
- Size 1.9MB
- SHA256 106f7546f563f2b39ddcbfd128792e888a03ccf9a1bcedd5197ca7e61208defc
- MD5 28a998394223c8f5918529618800b9f9
- SHA1 ab4e3275a492074e27b2a5bb2cfe532249657e39
- SHA512 c4d39e25fff8db184b9c0b30997ff910c085e3c908bfee573c506ce28d74b9203c022698293b6459c20b3d70b43e72c08c1a7e1b01eca22e62ae3b31d5bfeb6a
- SSDEEP 49152:Qm9zL3lwg666b666oz67A+j1v2eZr2Z2AMgV:Qm5L3lwg666b666oz67vj1vrZr2Z2AM
- TLSH
  T175959E82BB04EA99C4514D70CC57D6B1077EBC7A8D583A5725E8BF2F3CF2181902B96E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  MultiCommander.exe
- Size 9.1MB
- SHA256 cc0b66307e2bcd3c1917fb3fc6b252e0f2ed64dbb8fb18123e852d6dbd4c5e4a
- MD5 207078e7ff01d706d3bc6ccc70d8d608
- SHA1 eaf3127bc2bf62666ba401a4f47aadf1b2dbb40b
- SHA512 c02fc789431fd93d8414c623e03acc483e9af30c02577f738ce068d6a6cac112c54efd10a04711f736c0484c999c081f3cada7c31ad9c87d705d724b91c6d66b
- SSDEEP 98304:ERpmqHZ0Ij9+jwqQN04I+ojgtCzi9vUTfwo1FSSJmci/sps:ERAqHZ9+jwqQN0QCzi9v+fwo1QSn
- TLSH
  T12AA66C5A66AC01EDE0F7C17DCE92D907D7B278490770D6CF02919A9B2F23AE14D39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27
- Target
  MultiCrashReport.exe
- Size 468KB
- SHA256 9e47da7fbdbf4f8517db81d4dd37da57c9adb85b6d83ca7ce34ef9430a164ad1
- MD5 a2f092faa71964515781b902b68fd461
- SHA1 a7beb3f88e237ea5154f93021f4d551645da7eac
- SHA512 4ff022613d0f280d87e9a5f3fc3fdb323906db2573a0f1f467f3bd4a05e778e842bc90d8ea02649a05819a5dcd49fb8a09d0a6315dfa83a16c96a34ed8860ff3
- SSDEEP 6144:jPTHTSCnw1QwYlK0pJNvtj0dlNEZ4oII4hvGl0OTk88Pz5V/XYDqnskndHvy2JBJ:jPXSEyJyGM4oISrTk88PHYihvyeBt4c
- TLSH
  T1ABA46C11BAD1C035D66206749E38DA399AAEBC208B7195CB73C43E6B7D306C1BB39717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  MultiUpdate.exe
- Size 858KB
- SHA256 3fb2a16d6c85e0fee53983be1ba70f83800ece187f24a04bc3aa18b1d3615016
- MD5 2b3e6848fa343969b38c885e5c87a985
- SHA1 09374824545669d86d6d0e849267d426b3ca411e
- SHA512 ba4e10c27dd3817f4ded5f0d43d80d726b51a105a16f5c558ec29ca280826d5725b4d15e60ec19a9d63fc91e603e737cebf396e1422fb68ead382849ef624a62
- SSDEEP 12288:HGJ8ihgHOo6w8xyiydsaFDXWkAh7UZza/oX1W8NhCgyz/AyUXnmmNspJaetRgB:HSYOEDiyphXjAhhoX5hDyz/AZCaete
- TLSH
  T1E215AE21B9E18036E2B212308A78B735857EB9310B74B3DB93D42A5D6E345C19F3976B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  Uninstall MultiCommander.exe
- Size 83KB
- SHA256 b06cf5e384a3a5e8e966d8ee77c70b023efe5185d14617072351dc8f1e53bedc
- MD5 8b1f2c10cb90e1584b80192c6f8c99ac
- SHA1 bea5b7d61dd4c479124848dcd0959001f67f086c
- SHA512 5f6d9710134391b736e94714863294dbff1bc5f3989ce69aef79c6343202072a85abc165b3766d61aa362c41482681c5440710f4494a06a44959f537a4e7f578
- SSDEEP 1536:mBWx2gmwLOuYL12EawcKocqgdLeAyN4omfi25KLzD4NtfgkejoHMB:mBynOpL12riocqceA0mfiWEIuoI
- TLSH
  T16183C01633C198F7DA5B06B01AFBA375E3B5E7B8012196A753604F7F98702C78E0A54B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30