35f669cbc8a8a27732d51df1445f5da2a9aabe8260a4b3421826eee1aaa70df2

General

Target
Dark Stealer V.3.1.zip
Size 58.3MB
Sample260705-2h1wraf16t
SHA256 35f669cbc8a8a27732d51df1445f5da2a9aabe8260a4b3421826eee1aaa70df2
MD5 ec5f7800d2560007541e8d1053555d66
SHA1 e5c841c0492910dc7470859f5f7ce756cefe233f
SHA512 e6d96fe650cdf9b7a8354da29a938b30d4f4546ed1cb36ce0ad3d32b176e18d913fc1adfb1cdb387e6a11d3e08b01d945439507414a87ff0350ce958fadf6537
SSDEEP 1572864:DHHZSxFrgTR2aCuqPriC+wVRgbNhgzxGnqWqOvX2iZyRET8WMpfjbf:DH4PrgTRl++wcI8nqdOf2rTWMpv
TLSH
T18CD7338C74B968EFCDF56770908DBEF26C968AF0CD8E1935A3700409BDA1AE1153D2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Dark Stealer V.3.1.zip
- Size 58.3MB
- SHA256 35f669cbc8a8a27732d51df1445f5da2a9aabe8260a4b3421826eee1aaa70df2
- MD5 ec5f7800d2560007541e8d1053555d66
- SHA1 e5c841c0492910dc7470859f5f7ce756cefe233f
- SHA512 e6d96fe650cdf9b7a8354da29a938b30d4f4546ed1cb36ce0ad3d32b176e18d913fc1adfb1cdb387e6a11d3e08b01d945439507414a87ff0350ce958fadf6537
- SSDEEP 1572864:DHHZSxFrgTR2aCuqPriC+wVRgbNhgzxGnqWqOvX2iZyRET8WMpfjbf:DH4PrgTRl++wcI8nqdOf2rTWMpv
- TLSH
  T18CD7338C74B968EFCDF56770908DBEF26C968AF0CD8E1935A3700409BDA1AE1153D2D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Dark Stealer V.3.1.exe
- Size 58.7MB
- SHA256 8d0fe5d4aa8aa62d1bdf9c5626fe047e6fcf3ae10eecac7ceabf56082a119a8c
- MD5 bed4cca9fd5983726f0205c8276b8041
- SHA1 6caa3891dbe78ec7d741322805ff13bf711e6127
- SHA512 48c4fcedde1ff3dcc12fcbe5cf213aec238338912776d62479a99150baa380d54d9d8c6031a2c554fc2680d67627a0ef8667db097b700f847ce55fb3d6c8a785
- SSDEEP 1572864:/9z4PN81rBkLPVN0iVvPNS3VTNwX13+2kXj0J7EWA6YFzFF4VVMGg7cZn:/9Ul8NBkLPVaT3Yk4FEWA7RbX
- TLSH
  T1C3D7338DF1B044DBC4AB1731C0ABEDD96E62D5F1CB95D6B28370041A5DA3BE4223E6D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral3 behavioral4
- Target
  icon.ico
- Size 26KB
- SHA256 f7e21e89a2b3a97becec297e2eee2121964d76e6bc08276a5eac06997b04b4f5
- MD5 ff978da1a6576ecf371f1f067d1189ad
- SHA1 fdb8f2425af1ce4384c7f7e7f93e36e1f50f5ba3
- SHA512 9e40bad14ecbe70c3695198e18f1b0334ad700836aca781a3e090f101a7dce9f177f1b8de14be2273b13bda456eff1a4ae690ae8237fa47ee2470f0e88297a91
- SSDEEP 384:AUZCzBkOczaG7iL4R+2m7TJ27T4pQz6tjYcvUcvqUvE5eUZKyF24pH67RF0Jl:AUZCzZ6i4+U4eHVmw5vZD2Wa7e
- TLSH
  T124C29E8DFF89D880D17909B90BF63BE18545C9B0161B6BC8C3E371428C969EE19D2DF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6