8441b8312e9078a636047aaabbde8d6b148a387ac754abe556a5316b17d3c314

Sharing

Copy URL Twitter E-mail

General

Target
SlickPDFReader_617635.exe
Size 16.1MB
Sample260702-p9asesex6z
SHA256 8441b8312e9078a636047aaabbde8d6b148a387ac754abe556a5316b17d3c314
MD5 946ae99810ec2ec9e93c91d0e64dde52
SHA1 7527ad955094fa75481babc15f5ab9182dac10cb
SHA512 3fce345dcbcd7eda996cf1d3ad409d3e6737f9a9156439125b1032aed1f49dfd0486ab6b43a7cc2ed5dfa86afba01be3380ecc38a62e1ed846eed29a4ed616fa
SSDEEP 393216:Y0cHWFEL/FMGnvi6mIuhnzVkRU51a67oi2FHfifqSBI4kUMQ:Y0xw/OGnviXNpmRU51Wi2Uqz43MQ
TLSH
T1F907330AFE2A6442F9DD1BB60103A35BFD0007566B6E48EACA59E31D507A1B7BF1C50F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SlickPDFReader_617635.exe
- Size 16.1MB
- SHA256 8441b8312e9078a636047aaabbde8d6b148a387ac754abe556a5316b17d3c314
- MD5 946ae99810ec2ec9e93c91d0e64dde52
- SHA1 7527ad955094fa75481babc15f5ab9182dac10cb
- SHA512 3fce345dcbcd7eda996cf1d3ad409d3e6737f9a9156439125b1032aed1f49dfd0486ab6b43a7cc2ed5dfa86afba01be3380ecc38a62e1ed846eed29a4ed616fa
- SSDEEP 393216:Y0cHWFEL/FMGnvi6mIuhnzVkRU51a67oi2FHfifqSBI4kUMQ:Y0xw/OGnviXNpmRU51Wi2Uqz43MQ
- TLSH
  T1F907330AFE2A6442F9DD1BB60103A35BFD0007566B6E48EACA59E31D507A1B7BF1C50F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware defense_evasion discovery spyware trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/Banner.dll
- Size 4KB
- SHA256 189a30bd5802d2f43256c9f8958a7ec7fdf794a6a681731c85af01796d13582a
- MD5 4e50e372bed7882789360c37b1369e0d
- SHA1 24aa9ddf67ebae447313082d12b358029cc0070c
- SHA512 c05db65d19621132cc91ab09ce8ae7edc0906c1b9eff80b20921147de451138921b384345f98e88ee9fec8328a130a9d2bcb0e68cef794e81da3d26325a87500
- TLSH
  T1B781633BB2F04EF7E563023300830BD3259BA954A728471A4D67A1ED764A9D7D53DB02
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/EmbedHtml.dll
- Size 767KB
- SHA256 888fd9e1baf6e78c41c87ddc203b84d754ae5f73167876e3bf83a5253c375d8e
- MD5 d1d5fc1d51cbac6171601d3f990e0cc8
- SHA1 fc3b32f7ad1e717a7f31590dd6c02b8417d7c75d
- SHA512 571e2b767608bf502f3cf7a320ce5d93571168510a37e6aefd37c43ce3319feb8211bebcca1274f13deaac0c444366ea2091a9e4a744344874a22f9294370a54
- SSDEEP 12288:39nfbYbyicF595btShv/NMAPjhxBDcoBJHD/Yd1QPN+N7Eq:39nfbYbyi4595btShv/NMArhvcoBJiQ4
- TLSH
  T1B8F4C4C2E2A5F656E3A700719C0962D50A612E303394ED67BFC632858D3A1E7E5E1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/NScurl.dll
- Size 7.2MB
- SHA256 f41c74c3024c8640e82e924db0af73b2fb04dd65e8f239af745926b2761a8162
- MD5 578986617b7a4e3c93adfd9172705a53
- SHA1 162efb4fc94797726f7d360643b45011a3280cda
- SHA512 19d7e0cb8a3eb957c0cc611d51db64d01242b8e5454a8fe03c269f7d964b73f28e3e6b48cf4218402a88ffd1fb8ce26f7c865c4cbfe6fcd29031d6bb563c7a9f
- SSDEEP 196608:zXr8P3PrSYc4SThnIhr8vOKnbDR8ncC9NRlrn9PGYAY0iT6V:UnEkTT2
- TLSH
  T1FF763A94FECB04F1E55384B0D8DBB37F8B349B018125E6BAEE4C5E56F933701252A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/eula.html
- Size 2KB
- SHA256 9c0c0ad6ad8378551421514f046b945074f678b105e2640c9794a483b76e59ed
- MD5 cb19589828799d5f33cfe69a03f244ac
- SHA1 780629a1637ef5e6cc397e401946f4acd98b3b67
- SHA512 18dda77e19bfef79735f3ecf47cf13b2737b2d6aa2d78cc910e6a016b39b944ec22a02196dc188e0d3a5e1dbbede655eabd5aa6584b823d69424d2e304b86abf
- TLSH
  T1B541FE6C739337224AB006141F4683E8EB169A77636A2191F5CD800B3FB291086F37DE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- MD5 1d8f01a83ddd259bc339902c1d33c8f1
- SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
- TLSH
  T12A120992E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8