5622436e39f907e05b63b797706b11fcde52d1a024172b88948e0575a7d2ef4f

Sharing

Copy URL Twitter E-mail

General

Target
UD Proccess Hacker.rar
Size 2.7MB
Sample260628-c1vd9aey91
SHA256 5622436e39f907e05b63b797706b11fcde52d1a024172b88948e0575a7d2ef4f
MD5 5daa43d7ee7a0201535f6d8b60f8963d
SHA1 8b32933b1d4eead9311d45311f810324a73680de
SHA512 bb2eb32636d88a17fca54bab2e62d75ed40009b9169f62b1b3d311060bb9de2a94eb8340c1707beab4914f40622f112977fae7d9e8c280e81b9405fba4b1a69a
SSDEEP 49152:a22RLAvOn6d7KxUXRxHkX722RE38411QOE60cu/D1xDUcpeyh+SbxywCgiE:eVAvtdGGXRS+8kMFcuscpeQvMwfB
TLSH
T1AED5330F4E7544087A3480DBCD2A979D55506BDBE6A3624AB62F9343CB0FF039AD10EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  UD Proccess Hacker/Process Hacker/DUP - Acceso directo.lnk
- Size 2KB
- SHA256 289c774a3ac0422027ce876c3d6a9089a26de5b27757bcfc14d0396d4ba70e70
- MD5 a2748e98c6ab6627c789f69331ce0eef
- SHA1 2210abac3c6659381e9b704185904d0067784711
- SHA512 8c6457dac6d530e335880ee892d8e200eacb48817a06c0d8976361d760518964ac435a1cd2390c0fb2a37ce7bbfd2c0d184aba950cd3228a76e34a3d2adf901d
- TLSH
  T15A4166558BE42524F3B78AF829F9A4018F76B9438F65850D409881431AB4E83EFF8F27
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1
- Target
  UD Proccess Hacker/Process Hacker/DUP.exe
- Size 2.3MB
- SHA256 a956b4c5f7add385e7b68752185746d5ecbe933fde77eae2eb44432685296a06
- MD5 04522c0d75b3a49d1a1f2295d7baa498
- SHA1 f04f4908b3c7fa9af0f01177564cbf6070f031e4
- SHA512 3b0bfe0a9f48f7a8d98c8569119148936b46e3253f549cf5d4565bec792123ae7de85be925de8501a9e3b3840c1bce4f198e9a0d38209ed57a32192c9f68f7b0
- SSDEEP 49152:st7Gk7NEMKGnCmX3dF7PAwcFZfhFCZ1l2tQZkRV1QeKOOEL:stpN1OZUF2tQZG3QjOO
- TLSH
  T101B57D0266E700C8D1B7867CC677451AEB393D161B309AFF02A0D96B2FB7AD15939B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  UD Proccess Hacker/Process Hacker/plugins/DUP.exe
- Size 2.3MB
- SHA256 a956b4c5f7add385e7b68752185746d5ecbe933fde77eae2eb44432685296a06
- MD5 04522c0d75b3a49d1a1f2295d7baa498
- SHA1 f04f4908b3c7fa9af0f01177564cbf6070f031e4
- SHA512 3b0bfe0a9f48f7a8d98c8569119148936b46e3253f549cf5d4565bec792123ae7de85be925de8501a9e3b3840c1bce4f198e9a0d38209ed57a32192c9f68f7b0
- SSDEEP 49152:st7Gk7NEMKGnCmX3dF7PAwcFZfhFCZ1l2tQZkRV1QeKOOEL:stpN1OZUF2tQZG3QjOO
- TLSH
  T101B57D0266E700C8D1B7867CC677451AEB393D161B309AFF02A0D96B2FB7AD15939B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  UD Proccess Hacker/Process Hacker/plugins/DotNetTools.dll
- Size 133KB
- SHA256 276a8a5177ed781596ab53d0e8d1499b806b131555e64ca8298d46a6236d3d98
- MD5 115f43352bfae196d0573acac10c2791
- SHA1 15e98bad08828bfeb35ba2040f46682d7393c8df
- SHA512 1b69da3fc7d120ab5b572516690642cfd46365013ef1d5842c325e151401280938e5b0084f0135f240106e69d57e7fa388ac72ec0121bd5483d7e9d5e239922e
- SSDEEP 3072:ARQy//HmA/RTnt1Po5Pt6GperMTE91fv+S10a/X:WQe/rZrPo5PMDfT5
- TLSH
  T181D3385772E400ABE5778A3485A30A16EBB67C161B71CB9F0350415E1F37BD0AE3AB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  UD Proccess Hacker/Process Hacker/plugins/ExtendedNotifications.dll
- Size 142KB
- SHA256 0c59e992760bb02ecfea0236f9c0b39fc05379b1c4c7e58f9f4b247ca0ea57c6
- MD5 c959ddb1cd44960b07a79ffc30177fd7
- SHA1 a41437a30ff87f2770f446b17ba34db73effe304
- SHA512 c1b09812bec3f081556b445b62fc13ae5b7cb95deb4b6d0ec3d612240a37dbf70bd349b4f89a6ac30c854881ecc000b79f7edcedd4fae9bf649d4ea5e6a50126
- SSDEEP 3072:DP4ObSmK3a/faUeLdJXzBQVKH5VAnryXXYrOo:/u2HMJl2
- TLSH
  T117E37E1773E504BBE5768638C9634A01E372B8661B319B9F0364836A1F277D1AD3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  UD Proccess Hacker/Process Hacker/plugins/ExtendedServices.dll
- Size 138KB
- SHA256 3efe76bf2c4b1e3bc04ac83b1c7496f5a58a0e800a632e1575c327ddc655c159
- MD5 5739008ec04879dbd350af56d159ed8c
- SHA1 b9620aabb60a098369c79b85c44c176fbb7adeb5
- SHA512 f988e2010c2357705825c4b9b22eac9a10565c7324ad605ef78f040a0d5367e7189e92770c0f68669d70e08faaa35f76217dcc597779593845931b3c07e82f3f
- SSDEEP 1536:bjiP53wbvVy2ayu5zE6iHbNkS8CtewH04rR+YJtNsWwtBd09dlTjbPXoHJXP:GOBtayqE6uNktPwH04l+YjAt7MtbfS
- TLSH
  T1B6D3284772E800ABE5B2563488738A02D7737C111B74DB9F0364869D5F37BD1AE3AB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  UD Proccess Hacker/Process Hacker/plugins/ExtendedTools.dll
- Size 231KB
- SHA256 cf37af2a4be6ed0caa552c0e948342034cb5f8435a49a180cc393d72f78181a7
- MD5 4e4423983894c1a0536419f548e916f8
- SHA1 ff056dd724fce52405b0e04dee811f60db7c42dc
- SHA512 0504063e6bbd7e5f55a3890a5e7da1df2ff95977eb31ef911bcf1b5668ede52a6d15c573dadfcfb325cb9302348bb2403291c2a11cc1c5cd439358f68cc5e980
- SSDEEP 3072:iPhJJPkiwsnyZacUbnL2qcF8WiecIWYuC1NkZha1kMIoilmBJE1ExCOdODP:GwKxcrVc2TN+68M1dk
- TLSH
  T13234390673E50DA9EC37857589B38642E6733C101B31DADF0360C5599F3BBE1AA39B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  UD Proccess Hacker/Process Hacker/plugins/HardwareDevices.dll
- Size 166KB
- SHA256 e5175ebdd88c18068475bb61a13f9257eb6d539c37eed891d574b142456bc0d1
- MD5 90e5afeb5a4ca998b52307f7633cfdd5
- SHA1 6df0377626fb706fa46c927b161270f619061292
- SHA512 a3feb1d60f8eba8bf723c5b0d1eb08bc55ec5ebb57795ea06f6e84a7676dfa4ceb85bdd31a306d07af08abca4a5d5d133c1ef906efccd537349213d78c90f0a1
- SSDEEP 3072:hIQfto7uk/sawHkGB+bw0xC6wUj/KgqecM9CecH94HS:OQfSuAs9zpChwUj3H
- TLSH
  T197F3081773E900ABE57785748AA34A02E77378615730DAEF066082695F33BD1FE39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  UD Proccess Hacker/Process Hacker/plugins/NetworkTools.dll
- Size 668KB
- SHA256 291a5e94a47155fbb82753bfae9ecffecc56a8be75ef4e38aa22b682d1e43232
- MD5 3847a89f522fd0f59010d07db28f52bd
- SHA1 4c4bafc275523e5aa1b45a07b003dced75df9483
- SHA512 9495db282f9440fd32215a7e8d15375966ea8b20ea2c8d19221c2ff29a82d4c2c5b397a6a909e6f51a5aff4562c9bb1bf2da121605c5e84997f5250805929689
- SSDEEP 12288:GfvfO5LAIFYyIxuZFywTuYO0E7TO8peJqwWd:GWQyIxvwTM37leqwWd
- TLSH
  T1D2E42891BBF94129F5B78E3458B744519EBA7D921E51CE8E6240912E0E33F84DEB0F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  UD Proccess Hacker/Process Hacker/plugins/OnlineChecks.dll
- Size 187KB
- SHA256 9ddca89acc5f91565e4500eb38a23080c7a7ea8d307e5777200865c4f6741200
- MD5 9f5b91ac9e50331a3382bf2b5dad55f4
- SHA1 91a975a72f13242aa4fcb2b56f6fb852ac083c21
- SHA512 54df30f7764a87836168be92e6433ec4392b3242e07ecfdb57a8553b03e9cc507037660ad66d37e84a74d5115f76be0ce7fa1eb626f54a9ef755cecfe84b63f6
- SSDEEP 3072:OZ736Ytbzh4gGsmhEM6kE/TBFDmvOKSs+4NQ+Zjq:E7Ttbzh4gOzKT
- TLSH
  T12B146B4673E40069E9B7963889678A05F77378114B34DBDF0360437A9F2B7D0AA39F62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  UD Proccess Hacker/Process Hacker/plugins/ToolStatus.dll
- Size 247KB
- SHA256 3ca2c64a54e345e3990f49222ef78d5868c3b9795d6065c01a6f44b5e557f54d
- MD5 93bfc79584e058a5787a4a02c9986341
- SHA1 4ed58a754e6b88ca6300d49e117dd361850151b8
- SHA512 aac33abfa708e4517e5f1e1c173a5192cb1f7568465bb0cfe68774037214f4ecea4a7601fc13dd24cb1d3fbed5cc7eebdff92cde2496a5b704bfc9566e288c24
- SSDEEP 3072:0a/7sDMuWDJ8uzyEPFkRDYnP/qWfQoXMaI+bESrWeOeb299zBw:0ueM/l8pE8YnnqW1IeOeb21w
- TLSH
  T178345B53B29108ABE1628A35C5B34D12A7377C610B248BCF0698B53E3F77781AE3DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  UD Proccess Hacker/Process Hacker/plugins/Updater.dll
- Size 154KB
- SHA256 85951e7263a3eafda553e282b978e3fc9571320c23920347d9361b6cf5e08a65
- MD5 dcdc16295ecad20e4e40cc2033c7ad02
- SHA1 139731cbb26b097c8b9eef0ad7753c992674a86b
- SHA512 dfeb30ed988675acd5b09cd869ca6fdf95b9a4660f23056a00fe925e7a1113456be2aba9482f200b4091ec010985de44c5cd51ba2f0f9e0b8cb2a4222ff9636b
- SSDEEP 3072:esQ24k7lj8nnKjjXB3OKwvGBci5nEMjsWbuh3v4n77aHurdLttLA70:ik7lj8nKj52G5m
- TLSH
  T129F36B5777E500BBF1769639CC638A14F773B8121B209A9F0260427A1F637D1AE39B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  UD Proccess Hacker/Process Hacker/plugins/UserNotes.dll
- Size 120KB
- SHA256 386912ff68d2b110b769bb2e0a1e0022c6da8687a7e8cc617a19319067c2b569
- MD5 5f1ac83d26195f1bdbcda8a83b25be80
- SHA1 9e4efbeff4bd7777101004e82a929603fd503524
- SHA512 e7fcec9726994239b8d74ff98a4850971c241f4991260c0b77329184c38c087104ef4050268a69cf577266dbb232be1ba051ba12ac4bf174583637aa7981fdaa
- SSDEEP 1536:3jNxqPqMY/CHlehDwaUJ2kWHXdAwvoS+SiveP33VMVe3JMsWfCEd09dlpwp0CFb:T5cHmDwp63dvoj3833VWe3oXMTwp0C
- TLSH
  T190C34B1BB2E500BFD437867984A34A05E77278111B25DBDF0364825A1F737E5AE3AFA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  UD Proccess Hacker/Process Hacker/plugins/WindowExplorer.dll
- Size 149KB
- SHA256 40a76bd585dabe681ba306e4864c245acab26f94c0dbf3b6ef5e02d111672332
- MD5 f3da84d6cd34e89f4fef76701b5810e5
- SHA1 21f0167a256aefe83c31fae4c17e552fdb036c59
- SHA512 2caa6243a6ca1fc053d32f9bc4589a561f8ad0f2c2867a7a4d33d27b7891906a7773cbd06e572c46d79cbb0e8f2f9992ad3730bd8938980125c3c6f4814feb1a
- SSDEEP 3072:qd2ZIrOjsoz9dXFa2+l8QLDMw/MStX2PuJLA2/81:qd2SO95xYtl8Q/2t2/81
- TLSH
  T162E3281772E500ABF4768A7489A3CE05E776B8511720CB9F0368C26E1F277D19D3AB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14