8d0c5274aa4fc0029ee63911464fcd553cbb8f898214b08705f192b9558288b7

General

Target
TGMacro.exe
Size 947KB
Sample260627-drfeeagw2v
SHA256 8d0c5274aa4fc0029ee63911464fcd553cbb8f898214b08705f192b9558288b7
MD5 5c3c2231b01a9b769b94962b73d0286d
SHA1 a1025fdc8676ee922f464f67b87c33f1b2cbeb55
SHA512 f1fa002ac370a5012df15231a8725efa5255b760722a2e39950d40f52a6e98cd3a221d017dcaa0041a1432f12d7350e267636c62614ff39e786cc24fce72e80e
SSDEEP 12288:rQh0HIc4o0Y3C5tfCsn9N9+I6gPIOVycGmIyrX:a0ocMY3C5tfCsT/G5yrX
TLSH
T15D258D8277A4C904D5BB0FB844718B5093367D19BF67CB0A748D799D6EBA3C18A23393
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  TGMacro.exe
- Size 947KB
- SHA256 8d0c5274aa4fc0029ee63911464fcd553cbb8f898214b08705f192b9558288b7
- MD5 5c3c2231b01a9b769b94962b73d0286d
- SHA1 a1025fdc8676ee922f464f67b87c33f1b2cbeb55
- SHA512 f1fa002ac370a5012df15231a8725efa5255b760722a2e39950d40f52a6e98cd3a221d017dcaa0041a1432f12d7350e267636c62614ff39e786cc24fce72e80e
- SSDEEP 12288:rQh0HIc4o0Y3C5tfCsn9N9+I6gPIOVycGmIyrX:a0ocMY3C5tfCsT/G5yrX
- TLSH
  T15D258D8277A4C904D5BB0FB844718B5093367D19BF67CB0A748D799D6EBA3C18A23393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  tgmacro.core.dll
- Size 162KB
- SHA256 1b1529261af4bbd3abbab77dac277ab09c43e2170c26b67cd9b73c23f59253e3
- MD5 29dde59d98ab4a1d560ca8eddcaf9021
- SHA1 416d74ae7965814eb9ada26519db3c93e51d79a9
- SHA512 59bdff074b01d284f95885ca51eb16b0880baf6964c2f94b44c6e90cae889ff434c74e2befec0b5a36f344948ebfb20ea6dbe5159713c58d51674b209756c685
- SSDEEP 3072:69lX7G3xkpWhVHClJiTQsYMuLnmKoTWF5dV2j4IrPR4C2JTIG:gX7GQDiTsvAWF5dVo4GX2J
- TLSH
  T1F3F35AB0536B568DD6AC0F3DE3A31B1543F2B1C82626C7A65BE9A8E77E23351001D6D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  tgmacro.csinputs.dll
- Size 20KB
- SHA256 2a57114bd4989b9cecf5e6894ed61b4597208508b2075642ba9285bdd67b72b8
- MD5 91a61908df5d8a84b679a4f3abdc527e
- SHA1 501d41f65c67914288bbcbbe765c5a3f5600f62d
- SHA512 715c4519f36c7bb53b3ca9a561e48ebb3fdaa282714d835c5ef96364a3d2223356f00fb4c683e576f640177742b088b8184d3140e12d3fcae2116be735e116a6
- SSDEEP 384:MBfm2q2nVIrAW+p3PNjue3ImrluM1SR2o7zxYLoe3w5yhJ8+:MO2q2V/WcCeY+MqmyhJX
- TLSH
  T1E6923A66A7488336C8EC0F3E98C3036D0375E0551852FF579AE852D9EA16FA94650BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6