c38ca1caa68cd730712f5c0911e4240711bf9e7684988ae64ed04ec693cce899

General

Target
ProxiFyre-v2.2.1-x64-signed.zip
Size 1.3MB
Sample260629-pxf4nsdx2v
SHA256 c38ca1caa68cd730712f5c0911e4240711bf9e7684988ae64ed04ec693cce899
MD5 cb86fadc7a54e5183c8e85615edcb1dc
SHA1 3de4d9f6c9a7fa8498445617731d7c5f29d5e7bf
SHA512 c7d8854c1d435c915c0877034cb90e21167c1dc1f2f3ccbdd2a8aa6ede03cf01f46f991b5d85fa79f24e08ed8b60999a1b20d55b60a1e58d4b431222e1b665eb
SSDEEP 24576:XPjefN9cWvcFRa8oUkKf4TplBFjMA8/u4o6wrb27E9DI/jqawcs9ORewHNrGs5d8:7mNOWvqaOs3XMAwkykIrqawctReUZG31
TLSH
T1A75533C8CEB03D5BB26803EACBDC5AD44515D1CC98E5F74E2FED7AA72E981487409A31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Targets

- Target
  NLog.dll
- Size 918KB
- SHA256 4b1d3cf9f1f3c4a6ead141243069162172e9ef48ba1a9bf4f7ccd618b8194b5c
- MD5 60503a25ef7f45bc5dddcc3ef8f02b0b
- SHA1 0e577eab7e9d7233b8be26431256f45200e233bf
- SHA512 6c8f7c45606a297afd2f5523fa8340d7c72267bbcbe3f518f0fda193945d40f35f99519275fca5c44a641ed5593dcef99abf664fe713b613e58dc4f27d6125ba
- SSDEEP 24576:GdcVUFANIFkdt4Yf36Ovlgntbbmc8lZgPdZ:GdcVUFANIFkdt47dPd
- TLSH
  T1E3154A0233F8AA6BFAAF173BE438161D47F0ED996266D78F5904A66A1D937504D003F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  ProxiFyre.exe
- Size 35KB
- SHA256 2a60a76480715fca52185163d7ac6d850d4b0abe4079b7d461d7d0fcb3f02d93
- MD5 5e4485fc36d5b347af7c5e2563e82b85
- SHA1 67a07ecd71251e38fb8b30a0418d5456bf518a13
- SHA512 5bba70d6046533a1386880e1bd4fb5051bad4848dcbe64f4e7f8d4a5f66df879505e1171c884ec7d5e0ea7301297c17db4f74f360f96ffbe116251ae9900610c
- SSDEEP 384:nfzNvwpl9wGpQsJhlg9pwKANy5hmL4/y8RDiawY1pwK3xiICVJDy8RbmL4nNySj:fc9npdJhlg+Lk5Vi+iVD5ALc
- TLSH
  T199F27E439EF05902DE5B9EB0F4E0D9230E7276A56E61C5C7217C814A8F633812BA57BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3
- Target
  Topshelf.dll
- Size 186KB
- SHA256 bd70a5832124e36840452ff46e442efa0a09a4ceba842aea72c79b2d322d7fe8
- MD5 454e79a0ccd847306c0649d7af3b0142
- SHA1 c0e7c895ddd009d1ebe52cbc2401f3439e9e7e0e
- SHA512 056d222535691f10e03ed9bf5473e8c4ab30c44adcd8ca823540559453ae70221edfc0f0d491a42508949d86bc0a4dd17d4b149a78bc1a8b4431412a124386d2
- SSDEEP 3072:CA77sCyRSB9lN2FAeqDEGEdznasf3oJunPlHe72BbLJ:CeDEznasvoJunPlH22Bb
- TLSH
  T14F143B0033EC0726E5BF1BF5B47425018FB4E91BF8A6E79E1A48B4E50A57785CA613B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  socksify.dll
- Size 1.2MB
- SHA256 940b22ae8e97ff575317cc4a6c20467ed2ff760d01c7b056d13fcb20e7043cbd
- MD5 6b63b532679aa39f30eeb94ce6ef715b
- SHA1 d62c146830a317801ea7d0bf088b0d3d6462d952
- SHA512 1f663edd9dec7b76f1c3259827aeb4cd929e81b3125ac2f44914cc5c8afa398c5c6a37213916d56e7001a464f6171c145d297f36747949155389a34611951191
- SSDEEP 24576:FY+E+qQv9x0xZJNh/5XbROnffV2sTh0lhSMXlupT9SgMDFZ4+znr:FNE+Dv9xmZJNhxtOnf9WmT9SgMDFZV
- TLSH
  T104557D2362AE28D5E0B6C27DD7F74B92FB327C04031596CB01D995690A3FFCA6639B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5