d2287a2a91829204f496a962f03511531dda8291c5bfd6dd692af2919a881a75

Sharing

Copy URL Twitter E-mail

General

Target
sw_videobar_configuration_1-5-0_windows.zip
Size 79.3MB
Sample260626-sbgpvsc12j
SHA256 d2287a2a91829204f496a962f03511531dda8291c5bfd6dd692af2919a881a75
MD5 4992bbbc6404c744dfbda54af4b9ef54
SHA1 8595e06864fbfa432310020111ab9eae4f3aab33
SHA512 5730cfb099a892b29ed15d5ef5dcc9600062c40f67c71d47f51cb1810e21e44bd58897e541bef37bba5635af27883f99e58121d0426b0b38b3b1f1c910fb416d
SSDEEP 1572864:XTlTYfu/NOScv7ZPYci1oJ2zUSsiwuXWW1fDT+RXg4k1Weczg+nSJweuMu6LYQNW:XBYfu/N8iZdzUQ5CX7kVczg+nSJw7MvW
TLSH
T165083368EC63258F51227B03E73897AD9DB1F2A3323453A354B42382C8E73D9D25DB59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Videobar Configuration v1.5.0 (Windows).exe
- Size 79.5MB
- SHA256 dfd87832ca8e28f6c1ed71549fe9279f97f9315e7b9e7d62fc228e861b200dae
- MD5 b21e1ff8091f62ff263c147219277d9e
- SHA1 38ee4c7b3eb81a31a40df116ece571b5c77f0329
- SHA512 3cbb74d58061678be3c0db18044b985270fc3020a56450c1bde6a10a779f1b56e4769b58296e5f6069eae137b644523b6fdf87ad4437cb81a36e7d264523a7ae
- SSDEEP 1572864:aor93N+NG0uXsgno06gHyHA7AIGCc48J47zB90N72Iw9IsAvSUBkdOwMIwuNDIvd:a+9+NGrDhr7AKH+7bw/AvSUBkdOrI9Dq
- TLSH
  T1A9083354FD62518FD12D6B32D73893AEAEB1F2623134135364B42382CBA739BD21DB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1
- Target
  $PLUGINSDIR/EmbedHTML.dll
- Size 99KB
- SHA256 ee95b019b9c8681be56038bf4a4455f74c4f83c287fbaded6b5aa7b5dcf4a38e
- MD5 c08431578109da597240a3cbaf65fd63
- SHA1 687ef12f3db594332a3c9e679b8822eb9bed89e1
- SHA512 8c8814a4c11ebe48be075e228477f394077efac04f2b7ffbc39339270d9a0b699f8398a17aa4cd4a0570c8f8c9e7de757facd30c326f1dde480a799542b07e8f
- SSDEEP 1536:nbrMlUndmhyVFzIgJYGjUJjwWcgBAJs8jcdc6I++aSEgKP6Zn3WD:nbrMlUndHuJ3Dc6I++aSEgKP6Zm
- TLSH
  T118A35A1136E09079E0EF463548B49A120B7EBD62DFB09DDB7B951A4E5EB02C06F35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral6
- Target
  LICENSES.chromium.html
- Size 5.2MB
- SHA256 fcbf6d29363d798b931f4fb0dc95b09c1a44c3ccaf79a9651ab280a8562e82b6
- MD5 02ca1f89c7e4815b82bc8974bffcd183
- SHA1 45bf8a20bad7953b7e16a74348fa034ff5844475
- SHA512 024794b3303ff4ea5f3852c505e39e140113264d24e5dc14a365e8a1fb6f9a0683e72098f1923cca187c666b39a904fc18ac53645b8a25bd8a235cf01b661a60
- SSDEEP 12288:/7etnqnVnMnBnunQ9RBvjYJEi400/Q599b769B9UOE6MwMGucMEbHDuX0YnpWQZs:sFEc5FeWSPPza8yUAmfQRkHmBa7pO
- TLSH
  T18A46B62F7B48037306C242627B8BA5CAF21E903F3B565654345CD1681B6BE2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7
- Target
  Videobar Configuration.exe
- Size 130.7MB
- SHA256 6d730b111f8216c2151f3ee351df88670f66820e289cca5d0bd5516d9016ebff
- MD5 99d78d940dbf93f9b79e6bb53943fe8c
- SHA1 807ba2545a53142e1dc3dcf32535a6363e15b1c9
- SHA512 21a6156d03bfcb23c2861b0da80a60f960e18740f6799652e874a10b5de1eddfc31b744d72ce99d56e812a79afaec5c17c13abd85c92a6a80e42be18a620dae5
- SSDEEP 1572864:UfWtX8QRnUEFVfhRhVEJFXcvffS7oYCRkJw:p8kUGsJdCRsw
- TLSH
  T167689D03E29610E9E05DD1B59B4B8632DEB1BC450739A6DF269427162F7BFE02B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10
behavioral8
- Target
  d3dcompiler_47.dll
- Size 4.3MB
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH
  T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  ffmpeg.dll
- Size 2.6MB
- SHA256 989ae5c620e55530ef6801d75c4df23f73603ea51b0161855c9854363d0eae98
- MD5 04ae729cbf268ad3f1227975e52ea2dc
- SHA1 36de92df15ea47a545b8e54dc71b75d1345ef2dd
- SHA512 7933469ff8a379c77d94e9f7604b6d2f8069ab19f7f218faa2073f6161099b0b0084f25ed8b903e7b14be8922deb880cbf86778ccfa149d27086c6ddab6b204b
- SSDEEP 49152:Sr95TElsdFD2CD+KQQptuogdTSR/T/yN8vKU8vECJNkuz5ytlHajmjuSesJKqnU7:p4JptuhTSAuvv65sJF
- TLSH
  T118C59D17F2A644DDD01DC17487AF9233F93138494724A6EF2A909A252F3BFD06A7E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  libEGL.dll
- Size 432KB
- SHA256 65d9519e37748191085d120bb7b9ce66be88553f1d23a772dd1ff3bcfd322b84
- MD5 ba368bdfe0b3912ea1bb6ce16e98e70f
- SHA1 c6fc0a19ea2d98db5a3e5980fc6e98fa98d4cd28
- SHA512 4b26d713b7f471296e393aaa5a5870aa6f2b2d02ea0aa9706fc5edae1850e7305622ac04769e60285248a5565c2dd04c4fd43b1d27919fd8cfe1687246ef5d98
- SSDEEP 6144:i+ZHHuv6GHjXvL2WJp+itnoxPicEpzswwSUF4ZTsRDh5O:ldHuSGHbvL9H+AntzpZTKh5
- TLSH
  T1CF947D16F79448B9D066C034CA634643DE71B8DA0B74EAEF139492692F7BBF45B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  libGLESv2.dll
- Size 7.8MB
- SHA256 f0317af44d440ebf5e7f716256d818dd0d8053cb081737084a0bdc570db6316b
- MD5 7c89c2d089ee16cbe95c51fa8fa1a765
- SHA1 8a4d6c60560bc729010b5012106e7f4b18ca6411
- SHA512 e5d27960b08f5e39b299b9f112f80014c238742ba992f943a2866bb5e39b52848ed200dd75031ae97d188a732f2cf30ababf2c3d591ad44345876ff208ae3459
- SSDEEP 98304:Bf03GinJHvjH2qSHaiefXfe/HQQqNuBm:BfSXJyk//uQfNuo
- TLSH
  T1A5866B07E26040DDD00DC2B98B5BA122EA31BC451B64F6DF26D477052FB6FE06B7AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  resources/elevate.exe
- Size 124KB
- SHA256 86f1081c51e2fbef9730207f282bf875b486cb45d2fc9e3e9a84a0bd4a4deae2
- MD5 38257bae1523f369995affd2510c9904
- SHA1 16f276b110e0d1bc777fd9a8280dc5f0bac711a6
- SHA512 43574b898eac5fc7fa70a5a3f70399baa726f528c3329320d28c6cfdd26796c2c867598ef3186a0f2bb25c58196e61c74e2ee7b8a0886d72c51d0d1e6d6fd1bb
- SSDEEP 3072:hjbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlofxtjnMdxj:dPrwRhte1XsE1lMAT
- TLSH
  T1E9C37C1278C08471E9731A3529A4C9714E7DFD710E719EEB6398427A4FA02C0AB79FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  swiftshader/libEGL.dll
- Size 446KB
- SHA256 1046edfa9b2eed32f420739311f766bea3a5bb2d108f588356e50a62177f9a6d
- MD5 546615a70f7f0db41ebecd618aa1ae48
- SHA1 fa95a22f1054ade5c224654e7661d0ea180c3e99
- SHA512 bb1fd6aa9dff41c9b16239a2e966f420e06e9aa39b3af8c78014fee5e710d9013a8449d39b47524b783e29eef8c38d0a9a92496619fbe5b7c1a50283add25ba8
- SSDEEP 6144:B9qZDByJJFDimmPTrshO45cAveKpcY8hli04EDouYNW5sRdyqx:YNyJnilPTIFcY8thWqhq
- TLSH
  T194A46B16B7A404B9D066C034CA574613DE72B8D60F25EADF139492692F7BBF06F3A324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  swiftshader/libGLESv2.dll
- Size 3.0MB
- SHA256 f5e6f8fd8777ab4122ba4171f6c0c5724476d03e307e163bd954dc7068e93961
- MD5 89d0cfa73ac84af77d3cd2bc95ec5512
- SHA1 62087c56483422b1362ef9199303e1462bc5d19a
- SHA512 a020ac88d19d3e9dd065fabac3f73cd7be864bcb3fd9cf8d5154b4c4c1caa47b9e360893ba91067d4b7b3a8b7938f20d27dfecaf45efec3ac2197db836e26704
- SSDEEP 49152:nPcKU8OAmzRaIj1D/NDNX9YJsq6+CkIXxfl9J9BtCCp5kVt/6vrjl4qMTF+ZBFey:nevbwolzX0mmCZ8
- TLSH
  T168E55B43E54980D9E06DD6BC874BA62EE632BCC06B7272DF52A06B121E37BF01739754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  vk_swiftshader.dll
- Size 4.4MB
- SHA256 f8b5eda1708dcd0ed188f0d44edefeb899fbc14e0295c69330547639586dc632
- MD5 dc4889e01862c18b50fdf02f300a3f40
- SHA1 0e86c545e11cd0da71023b5fbf15720e578555bd
- SHA512 2829cc9cd3b6cdbf1bd498f0be17f0822b3ecb4786f9fb85353bb1f3107f650b6bac622de674be3a1a43bc7000183163abd2472ba52e8e7806061291633c7a9e
- SSDEEP 49152:AqD4AveFnO81Gn2TTmlbX19FuHg3Rm4eZN8Tw81AZFnTYj+ZxNDNrbFG8f3utMZS:rcC8YMb/jFeK
- TLSH
  T10F264A03F6558099F05DC27E874BB622E631BC811B72B9EF52A02E052E77FE06B39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  vulkan-1.dll
- Size 711KB
- SHA256 b37cad02e4e69c9d8029cb907769e26b668fbd0b19964b2ebf10ee2a95aa86be
- MD5 abdfec3489d4dbdc15f449d1171b347f
- SHA1 7b7bff771db2336d894ab704340dc47c24e11ffe
- SHA512 d3b40cd1bcf6e4aafaf9f5af204656aed58c219c1e081b2594245ba162be64b644ff14946bc80f4fefa66f7945762c38e13730f1b1faf15414be903aaa695c3b
- SSDEEP 12288:/VeF7rcEgYeWQ3QLQCa+x6yPM+RIo1ce:cF7rcEm9QLZJ6yVRI3
- TLSH
  T177F47C3A7AA4015DF576C038DA034522DA71BC624B64B5DF13A0131E6FBFBE42B7A718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  $PLUGINSDIR/license.html
- Size 187KB
- SHA256 eb09d3a6ff33fa9fa87f48b9cd7921655b64848600200a76ccf4b2b77883a991
- MD5 b83eca7e7c4df3cbdffb3097f1f1131c
- SHA1 9db0dc43e774f9b269966fb18b8842631fdc78a6
- SHA512 f433df2c0acb21f8d61403056f33907c5f2bc10322253fbc9aba4e81dbf61ef8cd25ed6385a8bd732e825c349a2b09fff23739dbbcb253da3662a7ed94f7a342
- SSDEEP 3072:a8fyQVJH40R0SledpsM2AkhuzO1c661A8OwL:ayyQ/EdpsM2A8uzpA8Ok
- TLSH
  T1A114B72ABFD523B305C242616A0BADCFE71A903B36670952345DC16C2F66D3483BF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral18
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH
  T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  Uninstall Videobar Configuration.exe
- Size 281KB
- SHA256 87a6ba07c8cec52a4422e5b998916ce26b61ccdf634f9654b9ddd304e3c22ef5
- MD5 aa9a657cbddb49de189412202b6cac98
- SHA1 e7be2b961ad8b3b397fb9304f85579c966d1c744
- SHA512 763c291252fcbf1eb6633ca095934f6e5a7291b58ed4f41451f686b826acb409a84b026292e1a9e7a35e463d9f8b3268f895b7342557f21b6b650f4f894b5f06
- SSDEEP 3072:Zn77v00hEoDEtau7g3wxWO+IVz/ns6bE0jGa2MNUa8b32tvhOEA1RJCir86SrSr4:Z740ILaMn9bDK2Ua8T2t0EyL+taY
- TLSH
  T16854CE52EA40C82BF96D8E7082B64B579BB1F00069E487833764731DEBB23837E5D356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral23
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH
  T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30