701c9a0330f3833e4a82712cf92dbe4e76a9a05e412dfdad25af2900150da518

Sharing

Copy URL Twitter E-mail

General

Target
GrammarlyOnlineSetup.c64pBR28dwkiaskf118b0982.exe
Size 95KB
Sample260701-a8d15abx5j
SHA256 701c9a0330f3833e4a82712cf92dbe4e76a9a05e412dfdad25af2900150da518
MD5 d147b251173d360e8885bc605e81f2ee
SHA1 6e91519bc115e0723de7c16d666a81e9f5fa78c5
SHA512 3ddb4ab02a0ec38a7c788efff0fcea0ed4ad138e35e2acd4a42717200b1e7e4cb3c11bb02020eac730768a59af2442a95e89713e94b8ff93d6fd1f9f64756042
SSDEEP 1536:crX4tpfcUjrwLxZYE8ksujvOG1vFRcLF4P5Y5rdHO44BF71M:mX47fcIrwR8ksu71vF2LF4RYd5O44/5M
TLSH
T124A3BF7157A08863D563CB306BBAD6221FE6AC22D5B4B78F130076587D332839A1F796
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  GrammarlyOnlineSetup.c64pBR28dwkiaskf118b0982.exe
- Size 95KB
- SHA256 701c9a0330f3833e4a82712cf92dbe4e76a9a05e412dfdad25af2900150da518
- MD5 d147b251173d360e8885bc605e81f2ee
- SHA1 6e91519bc115e0723de7c16d666a81e9f5fa78c5
- SHA512 3ddb4ab02a0ec38a7c788efff0fcea0ed4ad138e35e2acd4a42717200b1e7e4cb3c11bb02020eac730768a59af2442a95e89713e94b8ff93d6fd1f9f64756042
- SSDEEP 1536:crX4tpfcUjrwLxZYE8ksujvOG1vFRcLF4P5Y5rdHO44BF71M:mX47fcIrwR8ksu71vF2LF4RYd5O44/5M
- TLSH
  T124A3BF7157A08863D563CB306BBAD6221FE6AC22D5B4B78F130076587D332839A1F796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan
- Adds Run key to start application
  persistence
- Downloads MZ/PE file
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/Banner.dll
- Size 4KB
- SHA256 42c9387cb1749bf8338d5a6e6e8f598a22997e4cb9472da8dccc75c44b48f59c
- MD5 2dffef22d117e60be69ad89cdd01dc19
- SHA1 d39efb73bdc7a5c8f89c1427f0d9d284c501bf13
- SHA512 9705ce9b0c2cd1eeeebcb9a951b029ca7b990cf4c4bddac2dbe1c57a6f5dca3f8b47d96a29d3cfa070c317837f9c219646489ef6435ef5014f1b143041770ac2
- TLSH
  T1F281633BB2F04EF7E563023300830BD3259BA9546728471A4D6791ED7A4A9D7D53DB02
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
- MD5 8fe362ffdfa66269b8a64e3a87f68e52
- SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
- SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
- SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
- TLSH
  T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8