14de361c22fc55e2ec07c1ebeef01ad53c2e1b6e1e8e7b5a680ab807ca381be1

General

Target
14de361c22fc55e2ec07c1ebeef01ad53c2e1b6e1e8e7b5a680ab807ca381be1
Size 3.9MB
Sample260702-cw5dnahx5m
SHA256 14de361c22fc55e2ec07c1ebeef01ad53c2e1b6e1e8e7b5a680ab807ca381be1
MD5 e20989ccdbb59b26becb2fa60e688669
SHA1 6326b300e072d0424390b8db498b011d78b01855
SHA512 d7347afa7c306eae4512e7506f2cd9b036d03d09345dc7acb3798e3cb12f8bcf2d00ae62c789a8dbd96d41757a7e51b9e3242895539a7db690c11108c521d8c5
SSDEEP 98304:mAN+SHQYrZ1+dH5p0sSD3p2aF9EsbxPM6fraeb0kXsMWQuPcoE0uQ:mOtHdrZ1CvjuHQsbZbTZ8MWQGK0T
TLSH
T14B1633469AF0D443ED4372354F3C5E5C4A00DD9A9084CB2A572A3AE9B8DAFE1E71B353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  14de361c22fc55e2ec07c1ebeef01ad53c2e1b6e1e8e7b5a680ab807ca381be1
- Size 3.9MB
- SHA256 14de361c22fc55e2ec07c1ebeef01ad53c2e1b6e1e8e7b5a680ab807ca381be1
- MD5 e20989ccdbb59b26becb2fa60e688669
- SHA1 6326b300e072d0424390b8db498b011d78b01855
- SHA512 d7347afa7c306eae4512e7506f2cd9b036d03d09345dc7acb3798e3cb12f8bcf2d00ae62c789a8dbd96d41757a7e51b9e3242895539a7db690c11108c521d8c5
- SSDEEP 98304:mAN+SHQYrZ1+dH5p0sSD3p2aF9EsbxPM6fraeb0kXsMWQuPcoE0uQ:mOtHdrZ1CvjuHQsbZbTZ8MWQGK0T
- TLSH
  T14B1633469AF0D443ED4372354F3C5E5C4A00DD9A9084CB2A572A3AE9B8DAFE1E71B353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence spyware stealer trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
- MD5 c953dd0aab774f1446fcd63fa7c5f613
- SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
- SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
- SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
- TLSH
  T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  daily-huddle.exe
- Size 7.6MB
- SHA256 7090f01ba8edf9ab9800b3ed11ed95e89eb9bdcd2094e61996080e371b785eaf
- MD5 a5380d2f55c42bd950d4c0ce3714f8ca
- SHA1 9b2fe4d6f32ccf5e4345acf4d50da6137c8c84ea
- SHA512 2e4854bd8b99af5d42f84a74bfeb3a612553ab7674458e4d0652a34dada909c9f25bd742f2408db26b3657367ce8c175fdb05ca63acbdd119fb90cfe010ca585
- SSDEEP 98304:S4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA46w1+n+:xE8/5PCYkzq73ADGk
- TLSH
  T1CA866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery spyware stealer trojan persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6