bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803

General

Target
bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
Size 3.9MB
Sample260702-bry6eaax5v
SHA256 bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
MD5 0388207d9609e26500953aab2a670256
SHA1 56e3b8ac20f95dbd6459f2ca67d1381f0b1043a5
SHA512 4500a8afe05e9697577ebcfc5d64808f139f0ef845b451774a5de0c46187618dbb4fce4fd85706fd6488a6ce2ad9520cb515d553f82a97c281dac35072fa2793
SSDEEP 98304:WYl57HXHfKRp0anl0bosnlDMWHDNS+BxUcFWBXBnEgLu74bQV3n3QfY:Wa7H3fSRn5slYmg6iRnfCuA3n3Q
TLSH
T1E2163312C1E1F2A7FE80C476593650AAC7D9CA1E8294522F1F163BA1D833BD3EB4752D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
- Size 3.9MB
- SHA256 bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
- MD5 0388207d9609e26500953aab2a670256
- SHA1 56e3b8ac20f95dbd6459f2ca67d1381f0b1043a5
- SHA512 4500a8afe05e9697577ebcfc5d64808f139f0ef845b451774a5de0c46187618dbb4fce4fd85706fd6488a6ce2ad9520cb515d553f82a97c281dac35072fa2793
- SSDEEP 98304:WYl57HXHfKRp0anl0bosnlDMWHDNS+BxUcFWBXBnEgLu74bQV3n3QfY:Wa7H3fSRn5slYmg6iRnfCuA3n3Q
- TLSH
  T1E2163312C1E1F2A7FE80C476593650AAC7D9CA1E8294522F1F163BA1D833BD3EB4752D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence spyware stealer trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
- MD5 c953dd0aab774f1446fcd63fa7c5f613
- SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
- SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
- SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
- TLSH
  T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  daily-huddle.exe
- Size 7.6MB
- SHA256 0c5609dc4e329372b8a08fff7d0a77762fbebc5ff15b17ee770cee6ebed54b88
- MD5 46285269243b7083649bcf2c3ee46222
- SHA1 14ab8afdb9c86fe474732b247e42a8dc333e9aa3
- SHA512 e4029079f0776ff09e3d081d26c8e4392a3110023c0da0f6a5f743b6cc546cbab2749a95a5aecaa2f496d477d3574a0bc8c916ac9b741a5e68bb3cb1b3a772d5
- SSDEEP 98304:g4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA46w1+n+I:3E8/5PCYkzq73ADGkX
- TLSH
  T143866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery spyware stealer trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6