0b227790294a499762305cb235067dc6793a829050ae4e7b0985cdd93835ddeb

Sharing

Copy URL Twitter E-mail

General

Target
Portmaster_2.1.19_x64-setup.exe
Size 93.1MB
Sample260704-1713daex2v
SHA256 0b227790294a499762305cb235067dc6793a829050ae4e7b0985cdd93835ddeb
MD5 deaef49c98b49e71bc02aa906a1ffeea
SHA1 f798e1ede612fb351a2a6dc6e5a42f0fe91a780e
SHA512 62124f626621c548fc5e29f0c1a80eee215ed504d37a71c9f71e0f3a031c1090317253beb86ad84ea66a8cf75e27c267e06cbf1d2d62db7c70ea089b02460b83
SSDEEP 1572864:Dy+yTjNQv8+rqn6aWFL2gBEzcQMS9H8nIa0toDNxdC1KXLegN9Vj5tBDINoWMgdb:DybNQUOqePBOZM2H8nn0toz2mN9VXBDa
TLSH
T16F283397D8106465F551D0B45FEAC2FA6F368F00AF4786510AD2FFAFFEB09978284212
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Portmaster_2.1.19_x64-setup.exe
- Size 93.1MB
- SHA256 0b227790294a499762305cb235067dc6793a829050ae4e7b0985cdd93835ddeb
- MD5 deaef49c98b49e71bc02aa906a1ffeea
- SHA1 f798e1ede612fb351a2a6dc6e5a42f0fe91a780e
- SHA512 62124f626621c548fc5e29f0c1a80eee215ed504d37a71c9f71e0f3a031c1090317253beb86ad84ea66a8cf75e27c267e06cbf1d2d62db7c70ea089b02460b83
- SSDEEP 1572864:Dy+yTjNQv8+rqn6aWFL2gBEzcQMS9H8nIa0toDNxdC1KXLegN9Vj5tBDINoWMgdb:DybNQUOqePBOZM2H8nn0toz2mN9VXBDa
- TLSH
  T16F283397D8106465F551D0B45FEAC2FA6F368F00AF4786510AD2FFAFFEB09978284212
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution persistence trojan
- Adds Run key to start application
  persistence
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 419485a096bc7d95f872ed1b9b7b5c537231183d710363beee4d235bb79dbe04
- MD5 ee68463fed225c5c98d800bdbd205598
- SHA1 306364af624de3028e2078c4d8c234fa497bd723
- SHA512 b14fb74cb76b8f4e80fdd75b44adac3605883e2dcdb06b870811759d82fa2ec732cd63301f20a2168d7ad74510f62572818f90038f5116fe19c899eba68a5107
- SSDEEP 384:7py18oahashajPmIYInUJggBOZgAHhUKijb:7py18oafmeggBOCAHpij
- TLSH
  T175622D45AA2084F1DBA2167034D73A7A67F18E752A2449C347F35D4EEE16307B33A986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/SimpleSC.dll
- Size 1.1MB
- SHA256 1620cdf739f459d1d83411f93648f29dcf947a910cc761e85ac79a69639d127d
- MD5 7b89329c6d8693fb2f6a4330100490a0
- SHA1 851b605cdc1c390c4244db56659b6b9aa8abd22c
- SHA512 ac07972987ee610a677ea049a8ec521a720f7352d8b93411a95fd4b35ec29bfd1d6ccf55b48f32cc84c3dceef05855f723a88708eb4cf23caec77e7f6596786a
- SSDEEP 12288:fRdJsAp4dXFcLBz75cwoCmJKHwe6VuoH9v0D/LF5mM6:fBsmyVS151oCmJKE1dv0DX
- TLSH
  T12F354B2BF645693EC5AF063E4673E714993BBB726912CC1F56F0084CCE2A5406B3EA47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7
- MD5 d070f3275df715bf3708beff2c6c307d
- SHA1 93d3725801e07303e9727c4369e19fd139e69023
- SHA512 fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d
- SSDEEP 96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI
- TLSH
  T1CCF1C7B6F3D10673F9AB427428232F221B1AF5215765C1AB450316CE7661CE3FD34B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 30KB
- SHA256 7317e5508923f425bced2698bb89f79b00fcddcd1028f44b598732b2e3711464
- MD5 fc4691e51cdfac476b2fc63bbe951e82
- SHA1 6532da4545864c6ec95f62f27f2199bfd668560b
- SHA512 5b544832f1b1b8f2e1c6f8d61a839bea22c2c3d7e2a03671a12bab936e46a6f3fa3dd8aa53ec91157c1de08f0b349d6d2c1aec29385ad38cc0b2ab4c033c58ed
- SSDEEP 768:IMSeZbzz284uMJSmuGrAFKpnp0jdhK7R+qV0Z:IjKfAuXiMtXIV
- TLSH
  T16FD23918FCC56FB6E2DF1575240C596E429FC8180B14CE9BD7A25E22E9E63722EE500F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  WebView2Loader.dll
- Size 162KB
- SHA256 609c974a8cdd6a76a745b3d81b62f321d79f2dc8f4929e1eea8469d9d78baf79
- MD5 6842f2ebf863ab8ee1be470794d1f703
- SHA1 26242ced6ddf005e0ea1073409a058121636fc9b
- SHA512 339be4521b27e29e457e6d662a7ac98320729ad75df976ccdc9c83596c8b1bc7888ad465e7d38276fb5c0cfb597e7e6e9ba377c6f42db850c317f89e218ba5b9
- SSDEEP 3072:DrQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Ty+EtJfy2aQQtq:nMMTlTRTzWiThTNTFSzjiBM2h9P5oZaQ
- TLSH
  T18DF35B5772E4407BE16A8274C5A34A11E77778510B60ABEF03A4477A1F23BD4EE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  favicons/head.html
- Size 1KB
- SHA256 13ccaab556d81a9148a7c98e093da4c95f84c6762a9e790665ee01a6a7229eb8
- MD5 92cf95bc22fbbabcf370817e99cade37
- SHA1 d7f616e344c56cefb9a51ca44936921e76f87855
- SHA512 5668a450dd49d198efefa1b349d1197e0efd493d10863555aed8eff128bda29c436275d151468124d0daeafdd6062d266aa4b560bd25cea4c906cc8d056d6d87
- TLSH
  T153210B431808CC063731765ED72B55DAC043A5A9CEE6FD6C98E3456260F0DA10DB3977
- MD5 SHA1 SHA512 TLSH
Score

1^/10

persistence
behavioral9
- Target
  fonts/Roboto-300/Roboto-300.svg
- Size 48KB
- SHA256 bdc613d60655fab5e7f78d7a4b573e8a72cd3110176d4cb85ef0ebd7e658d211
- MD5 1edaa6e50c2302bf0221d252e1caebb4
- SHA1 abc9fdf63e51f3b26f13302ed14525f1bb052d73
- SHA512 86a15c30d94bbcb43711cbe4f9bfa114676a9fec08ee9102c6b1a4083341d19ba4aa8490c924cc70638c2e37ab65368628b1193b58dd313e2b66d54f260e3060
- SSDEEP 1536:r02QwKVLM4NyZdrlFIq/fAVkDHKOO9PXkfPjA:YjIbZtlQOEXkfk
- TLSH
  T14E23A4FAE10146C66E5FD3C0EBA0B5ED446EA17F50122C918D0A95F90C1E7ADEE0BCD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral10
- Target
  fonts/Roboto-300italic/Roboto-300italic.svg
- Size 53KB
- SHA256 25ee6421749191a8369ceacc23b56df4a78bd09cb0210e15e549b11d0e38dda7
- MD5 290e6a6c01f4703f351415432980aa2f
- SHA1 e3332d81aba170da7ba6f37014c50c2aa2fd1fc1
- SHA512 f0edeaa2cad28b9e3f844e1baecbd08fbeaa66c69742bf006d6b119dba6c94c1f2d9ff0fce2381cb3729c51529b4ecde61db64f8c4adc1426b9676f9c565227a
- SSDEEP 768:TG07cG8GhGos7258wiHd5rC86NlbtFkRKUzTkkZGjUKkk3Qn7KvKmKWKzKhJ+wAo:AyG2U5Eb/kRZzYk6UKOU+wcWYhG
- TLSH
  T1A13383F6E94141C26A9FD3C0E691B1ED842E917F620728958E4DE5F50C1E7ADEF0B888
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral11
- Target
  fonts/Roboto-500/Roboto-500.svg
- Size 47KB
- SHA256 002be2764e0c7d4d12e0f5854da7b4f23ad584a519e6ab1b781815fd65d38120
- MD5 f1d811cdfaea49c969500d4bbe52251b
- SHA1 2920b9eb83fcf21d18001acf38fb74e0e3295121
- SHA512 08b935b6783f26d72e7b7b955943c63232ed776e20a1f48af2e815c4cf6701eb72c7460a68a5b9f8629f35f84aaf08d09feb6b56d6120c7a4bc9971b87446404
- SSDEEP 768:TlvQa2mHGVSeTz00O4GzSm3i2Iw8BDF7G7N+xl5N2A7U6:ZjASeXr7GzS9vg+xXN2A7U6
- TLSH
  T16E23A3FAF54045C16A9FD7C0DB9174ED402E527F25162CA58C4AE1FA481E7ADEE0BCC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral12
- Target
  fonts/Roboto-500italic/Roboto-500italic.svg
- Size 52KB
- SHA256 9ae3e9709dcb42edc1fa758b7c9c512f9dc90a5a64db39a9757d531251e9ded2
- MD5 084d5c434250ba4b6aaa634908eb4b15
- SHA1 e9f40016b8290ab5ca6a7c1c2f7b7cfbdeca459f
- SHA512 48dfef49bcae1e9d5468348f389b5a59149965fdd49bed5c69d52af64eda696835dcf32ccbc8776c28660c6ad47fafde7e28509c74a68585b1cbb0282bd48639
- SSDEEP 768:TREbHnQIEP1ftknwLEdE4X1VesL6POaYjIypc7jJzDedUazNnuvv7QW:qta1TaT/L63WIV4fBuvv7QW
- TLSH
  T18E3395FAF50145C25A9FE3C0DB85A4EE446E827F625328A48D8DD5F5081E7ADEB0BCC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral13
- Target
  fonts/Roboto-700/Roboto-700.svg
- Size 47KB
- SHA256 8af2654240dc0e632782a4f919c6fe5885c7b9e6b856efa0a7ea989a14fb56fe
- MD5 7f57c4c0f3b44acbe338d7ff6d6ee5b1
- SHA1 35101c237ad0763d1e552b2d414e022e1e2a279b
- SHA512 988b5138a8f55dc842b815e8b17bfa3707624f789364ede2ca78bf09ef44f78070fabc53f2fd7ab59be7a39000ee3b306ebba111b40fbb22a68482b18c463880
- SSDEEP 768:Ta2NZRuu3g1z/LoM8BQmNQEazgnOM9I2U1A64LmDf6vKLroUQ0QF9Q1qQRQkLo2x:bNFg1pnmiE/OM97U42Hro1VI1nWulX
- TLSH
  T12C2372F6E64185C12AAFD3C0D750B1ED443E827B621628A58D8EE5F50D1E76DEE0BCC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral14
- Target
  fonts/Roboto-700italic/Roboto-700italic.svg
- Size 52KB
- SHA256 186567c03751c23366133102964442b995e209690f97d9763e83c36fb95cf76b
- MD5 bf39ef96a254805657605c016263db25
- SHA1 547bb7c6be969beecbf19040a6b31159895d9cc8
- SHA512 a7d80198a2b5a41dd894b21223b612df67e1ada9a023b80f6d4e9fe49c53cc10a5ac72e80a1bac97cc75deeb868cee0ea38a7d07ac2029b1d1a8b971f548fdd0
- SSDEEP 768:TE4f4d5tb4Sqk9WBBcZtX5UBs3BBKjeLIxnMltOMEfRakuZo9at+psC0dS:Yltbj9W85UBSf05xnMzOMEfRHOdCN
- TLSH
  T1773385FAF94180C61AAFD3C0D795B5ED406E527B551328648C5EE5F50C1EBACAF0B8C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral15
- Target
  fonts/Roboto-italic/Roboto-italic.svg
- Size 52KB
- SHA256 ea2903eaf37222d05d2c812d4305ae4107ace6a0f62c80ab331952f047e17740
- MD5 13fb9544bc459a2351bbcf844f5763d8
- SHA1 39737bde7cb3e9910282b3bb94f1c83d08f64e23
- SHA512 aae50a864809281fec59510c6d7893ef691aea933c8db683afc624e93bc9621910ff333f623712ac1e6285dd2ca22b0b3f960b4e7ad4687812280637f29559fc
- SSDEEP 768:T44Yj1Xo9SR0teHicPLIcFJRaZc7fbTzGa3smne+vMvovOvPYiv8ocB2I7H1RFua:05ZHicPcSJRtTZZBEg230Bb7dT
- TLSH
  T1293374F6FA0185C21A9FE3C0EA81B5ED442E927F611728A58C4DE5F5091E75DEE0BCC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral16
- Target
  fonts/Roboto-regular/Roboto-regular.svg
- Size 47KB
- SHA256 cc9d8f0f4fd1364ef57762589dce1c56c97c744043afdde55ca68ce977906a3d
- MD5 3d3a53586bd78d1069ae4b89a3b9aa98
- SHA1 148fe3b2ffcb825efff40a8378f22125ccf88cb0
- SHA512 8e7a4900bba7e679d3f4405da7ce2bb05e90faad064c7da420c203ff7515608debb2dffd4df9c3e308fb3de5074ee1989acd8ec4297de373c266b59d9630455a
- SSDEEP 768:TZPhZCupDrez67/jOgoo3D68lxC61IMzBq0yTN+KQOxKiWo0tV50gtpFh:VZ4WDgiuo3Xxz11h3Oxgt8cFh
- TLSH
  T1272382FAF54182C25EAFD3C0EB8474ED442D513F211728A58D5EA5BA081E7ACDE0BDD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral17
- Target
  icons/generate_ico.sh
- Size 779B
- SHA256 a1497c6964b3afd98cb16b590b7fa9570892bd7495101cbbf6ec3c91c297a3c4
- MD5 b144bdff88cd5202b731a2be502892a0
- SHA1 f21ce208d0ee66fb6ae7bb65730978369fa0633f
- SHA512 6fb72b650e30fe94bbe712240c817b90fc343c9ef7727b905047ba3d07e59d8c020c6e16d2b6f8198b976a19205576df3986a9d8aeaa7502d722b0e76e3597c4
- TLSH
  T185015EA7AB8444211B92CA5A6628ED660F050DCFFB4373C678E1A51CFF0616E26D7398
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral18
- Target
  icons/pm_light_contrast.svg
- Size 928B
- SHA256 a07e9af436eb1ba1292ccaf619c410b2fcd1b3c2ac430f05d0c6eba1dd6886b3
- MD5 e983e675000c0fb2683d1741042e7821
- SHA1 f5c74f6bc3f34ceef72ccd8051c748e884a79bb1
- SHA512 c2e8131fbae9b9f8029f76b32a1e86097567ad2dfe3a677eaa46a2f8d99d2cdfac9f0c42866450de1ee5cb57d3245b830c6bab5014d99f3e0fa1a3c7cd40db42
- TLSH
  T1A3111CC4A528953C9046D450CBF56B01402DD1EBF27714BA76A13232F83487D26CCCDE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

persistence
behavioral19
- Target
  img/Mobile.svg
- Size 814B
- SHA256 dd41dfbfd427c9a616b8d6fdbf00fb8224462ff64db62401d1e22dd9220e7d1b
- MD5 d98f208ec9bba0f7f0852cded4dee42f
- SHA1 06f62ab3088e3e177937ac1faabb5502ed39e6c7
- SHA512 096b32c9084ce38eebd3fc23d83050c402d1f78aac8fc68f5395471752a397120b55f8a1b1a48ed67a348200ae5f0a004f55cf08380f11fb770274f173fd9ae4
- TLSH
  T1D601680517291C3CB93A0B94E7B9B3F1403202C2495CB29CA97305B8A22679D797FDD8
- MD5 SHA1 SHA512 TLSH
Score

1^/10

persistence
behavioral20
- Target
  img/linux.svg
- Size 1KB
- SHA256 d606071735cbb7ca2c74b43bcb92b63bbe542326e931f60779f0182c5745e972
- MD5 c01b14060c38f3a60c40c3a95d4f8c46
- SHA1 4a589bca3e442c1c833a0feda57cbd14b154b0a2
- SHA512 32f8531bbec0ccd3818bf699d205656932d65f7af2bd1a5c342cd05793bdd31f5d2946ec36bbca617c934c4a4327681374dcadc25ea14e9b0d18b196b31e59e0
- TLSH
  T1B631243C8650C3FDADD6D5BCAF62A064904CF0DAD1E78796C294D56026F38C9F34E08A
- MD5 SHA1 SHA512 TLSH
Score

1^/10

persistence
behavioral21
- Target
  img/mac.svg
- Size 1KB
- SHA256 52e77e271f7b02c0b00ce8b8388fc44fc4eea6efd1b1e71a286ae7c0c1daaf10
- MD5 ae0d1bf12c83225ce2b23c08fa1951f5
- SHA1 49f05d7cbbc4a1a6e6d980ee37067997db4d8fa8
- SHA512 ce9ff03f1d7de6fb5a5053ad695c1825a97a6a7754ed8719f68c22af8596453612364729a7b079382fe28e1d5020809e2d56b663369feeb40b33eb137f39f550
- TLSH
  T11A316594E595B2F8FE0ACFDA192568C8769F30FA710952BCC3B85A84D0475CC8C08DAE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

persistence
behavioral22
- Target
  img/windows.svg
- Size 235B
- SHA256 d0a0b38f557df25a3eb7f78b44957f7950c5840a12ee923d7dcd1f6bcd36e723
- MD5 159f9816dd15157d70ac658b76efb83b
- SHA1 f2ed5e3fc2fafb2ace0f92744edc4c11e9ffadb4
- SHA512 a06174e42f4253009b232e0c9bd18457f32aac113a96283cf1222806a12b9006e522d1c46c60d75d360217a98e5eb14dd845872a2658e74842caacb1666dbc8f
- TLSH
  T100D0978A868E8E181D0043F89C28C320B8348C86B24C3039F8E0CC3F70984E06A02023
- MD5 SHA1 SHA512 TLSH
Score

1^/10

persistence
behavioral23
- Target
  portmaster-core.dll
- Size 23KB
- SHA256 a0f7d615bdd58230e20fe66df6804fffc20a38bdae8b540780236f6b15dac580
- MD5 0f94aa3c904db33e99fc076223491719
- SHA1 5d24da70bd68610db4ba000aa22176aaa86a9872
- SHA512 8d8fdba2f1237072269ed1c2365ec2e5733010618a893b62a958ce38b31affc2aeb207be8afbc3fc189b5204a45ad518b6cdd98788235567b7651603b8a85124
- SSDEEP 384:+FBUmttyqVLSXCOrZrz61GaprQ2ADrrsMy8RbmL4nNyMuhqM:+FIqVLSRVMGy82ADrr5ALVhqM
- TLSH
  T1C6B29E83999448D1DC16ADB4E8F65E26F9FAB5102BD292CF037081A50FA33C13B7E49D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  portmaster-core.exe
- Size 41.5MB
- SHA256 fb2050d8d373a6d9970588de59db8abba5e00d5dd3745db34f551d2c8ed3ff8d
- MD5 7e90f5c6c93ff40bed2f41178122b3a1
- SHA1 0e6498abd2194a7670ee3d7240ad59b17c78be36
- SHA512 03ede8653eb477c6375239ad66490fd902e04c3fb920def0f97e292a8a6eaaa4e13d549336fa27c4769d542e7fae9927b2ef0b22d8d7e9e45795968ad39513ad
- SSDEEP 393216:AR3GlZxd51V2TdL2KUV3NVOpyEHHET47fIMhQA:AR2lZxlw527V3NV/WET47f7WA
- TLSH
  T1D5A79D87E92141E5CAA9D635C5A282137B713C488B3167C73BF1F6246F76BD0A7BA340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  portmaster-kext.sys
- Size 283KB
- SHA256 a603bfeb1c71f9d94a0c66e9e239299d21dc8631fc0352e808b43f3326788186
- MD5 dd1186462af28b7ff95ccc30508c0b9e
- SHA1 68ce5fef61bbcff4c672d707199a36beee35a70a
- SHA512 5931c1416ef04dd3059217f8ed5a99625bfbf7c6815256567447a40905a98f817be55e63d4ef809105d06fafead16e7fab6d3a2b9144e8459fa56f9b70c51a06
- SSDEEP 3072:cDqbCQdwRHSvbsUPfn+40LS3D+YmworP3j5Da2WHjGfvnAPjmqLlGm:uQdwdSvRfF0LS3D+YUpyjGfvYmZm
- TLSH
  T1E754852DEB00A5DCC0E5C1F2457A3FB125DB7A395E0217B687B8F710365866C9A3D1B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  portmaster.exe
- Size 32.9MB
- SHA256 2da922d3eb4af4a8686b38edf924e3d722e57d0872e1251f7362c7481f68aad2
- MD5 67ab92544e75c19d70341693a1c298c2
- SHA1 9202ae8bba32ac421c2e80a367113ffec5c80e5f
- SHA512 cb704f115776badcd6c3cd27dbad047977467441962c4c29b7083ea2060ae320b2993a0c16eb2cd88d9b2f740af9ed41118a4b60e95c840c2274b6b2318977f5
- SSDEEP 196608:UGOiXw4yR+9bWmtLuRBm75Hb7dcHlz+VA+jXkM8zG36:UGNuQhMN+VjjXkMM
- TLSH
  T143777D03F5650E6CD99FE674866EA336FB747C894131FAAB06A0BB312E327519B1C314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral27

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Adds Run key to start application

Network Share Discovery

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27