7c243203265ce8fdac76c839bf744ae35dcf620760eb97c2ea279af498560e45

General

Target
npp.8.9.6.2.Installer.x64.exe
Size 6.6MB
Sample260701-yzmtnses2q
SHA256 7c243203265ce8fdac76c839bf744ae35dcf620760eb97c2ea279af498560e45
MD5 c84f188a37397bf5b607eb02a4bfde05
SHA1 1a184bd17637e156a51fbd870e1215877b097a5b
SHA512 935003287d3454b28ee422a70761719bf2ce2d915017c024b0f26d6d23a0392005f4fd6e4a40fe40a0fdc53098f024ae618e349d1895f05ff902d2a8f807937a
SSDEEP 196608:/QFGT8BIU4l4P1/70rmTLVHFaFZ0lgqc1:/Qs8CmR7dTJQFZXz1
TLSH
T17266334F1A4BDA12C1415BF00EF7D38EEB113BAB35BB530B6312E7891CB6315976A981
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  npp.8.9.6.2.Installer.x64.exe
- Size 6.6MB
- SHA256 7c243203265ce8fdac76c839bf744ae35dcf620760eb97c2ea279af498560e45
- MD5 c84f188a37397bf5b607eb02a4bfde05
- SHA1 1a184bd17637e156a51fbd870e1215877b097a5b
- SHA512 935003287d3454b28ee422a70761719bf2ce2d915017c024b0f26d6d23a0392005f4fd6e4a40fe40a0fdc53098f024ae618e349d1895f05ff902d2a8f807937a
- SSDEEP 196608:/QFGT8BIU4l4P1/70rmTLVHFaFZ0lgqc1:/Qs8CmR7dTJQFZXz1
- TLSH
  T17266334F1A4BDA12C1415BF00EF7D38EEB113BAB35BB530B6312E7891CB6315976A981
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion discovery execution persistence privilege_escalation spyware trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 44b1d70219f88564d94da9fc8a7ca4d25d103575519c84a44df3057b8af98f71
- MD5 cfc7c53e282b0a7c527e4ed091f17fcd
- SHA1 3f3fb2dfaa9a0576803c5fd693f5c4c288ae4f1e
- SHA512 367fc4024397381cfc5fa83b303d5eb78e97904821260589ce81a51c3cbe5d7f5dd0bf7fa07142bcb13a91bce2b523de21cbb1d940cb7fdfeca35c54c67694f6
- SSDEEP 192:EhGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoTmT11929WtshLAzgSrX8:EhNt+4t7uJalUnGesY7Lt8nCy/Yosa
- TLSH
  T162624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E0638565806D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/ioSpecial.ini
- Size 211B
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- TLSH
  T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral4
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 25KB
- SHA256 e6c5be8aba1f657fe77e8c9bbfac3536a69530aa5c1411cc3d6c235373203a46
- MD5 a70c3979ab1716c84969eb73618ca7d7
- SHA1 f0b4c8c1b8c59aa0382ae4f65263a389a3cc3996
- SHA512 3d0eba870b91f08a6e7b380d0137f6415d1184a77643521e7b2a01774272971853774b72517921a788ae7c606e3940c39fd36f03a7da76c972d1ef1adbc0e409
- SSDEEP 384:1oacST1ci4MZzWc5bgoUK+RQ0s6SLARs2v/C7zAkAFTqI+4TFWAWGQg5s:CaciEMZzPcoUK+a0sD52HCYkCTTmABw
- TLSH
  T1BCC29F527578003ED2B9823871A99B538D3B8ED82D5ED5771E363F3E2FB5E84181A1B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 150KB
- SHA256 2125550c12fa512782f2016e802d70bc51f4a06017cfbd4176b4a994eb2542f0
- MD5 c2cf6928a3ab574a5548b4dc1c38b6c0
- SHA1 8860ff529f60b38a93912f88f234d46eebcf664f
- SHA512 fb6b28f2677b1418f8ebf621dd1e201b127b53b998c02300caa66a9f374f681961f5b9a7f843d6082821890df9e3d91a3403b4f83d70d155e9c841893e1f80e4
- SSDEEP 3072:NKrK243U6RNfWAKVZ17e28FTfWDG7wFlF9:NKW3UMfWTpe2eODG7UF9
- TLSH
  T1C1E3C05623F050244C08167BEA7A6ECC3761BCC2787D75A15F52C36FCAE43CAE6E91A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7