82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316

Sharing

Copy URL Twitter E-mail

General

Target
BootstrapperNew.exe
Size 8.3MB
Sample260705-wfbaesew4w
SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
MD5 c9f1c55b26e7f781b65a96ea8190517d
SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
TLSH
T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  BootstrapperNew.exe
- Size 8.3MB
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
- MD5 c9f1c55b26e7f781b65a96ea8190517d
- SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
- SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
- SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
- TLSH
  T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery spyware trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1
- Target
  costura.dll
- Size 5KB
- SHA256 7a9e767ad824afa2c1b0aed513fe1cf2b8dac6d40f24e7c4075af32b1cf23a20
- MD5 109bd38d2107f41573c48544992ead99
- SHA1 028e9832f421f11f9497c610f1734e0f3d868037
- SHA512 459945f338679c77acca8f1192907cd3ce8e19f270589d34ce8227b8eaf0c7c8c9922e52b8310d037c4d5c0c639de42a6e3b0f7d44d493fc50644b6fcf7cd4e5
- SSDEEP 48:6gMX2nhx3BTjtRiaAVLEP4iZ6iMtTg70uElaQ40JFuUPtomCH9gWk1qyFVA2IbS:HHtRYVLEmYZEZ9ruUPqJmW/2
- TLSH
  T10BB1FB2867B8573BEF7B4BB65863534257B4B950CC279B1F0985B3166C223544931732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  costura.pdb
- Size 7KB
- SHA256 fbb47bfd057253e9461bc7fe661eb8ad273451782f3e227b8db8f88b54cea186
- MD5 dd3394a0ba6f7158d029e1c3a31b7a85
- SHA1 806f4c19b2d7fd9e3b836269ec07647019a29e95
- SHA512 2fbedae58d16bfe20954094e5c7541e1b25310107571e94f7bea35b2217aa634197ef147afb9ffbd9c59aa0f7e209cf2a97349c3503077758502bf7a776e2575
- SSDEEP 192:yMD/wix+PI6jMai+NLy5nj4SCBg5MRkCIFQkC8g7AHOuXk/N/8Hu04:y8YPI6jMai+NLy5nj4SCm5Mz6QkOAHO/
- TLSH
  T1A4F1B33F5748C463C89959720521C49CB6B343202670ED78F3DB2608EDAF69AC7B5772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  microsoft.aspnetcore.systemwebadapters.dll
- Size 21KB
- SHA256 20db4d4162ffc6e2dc44637b649552d58432c4089c4adc3a2d5e582a7c0933bc
- MD5 7012a0fc3d0d9aeb48b646a188abef41
- SHA1 d52d3d75681bf2bfde6e2e6f9a63bc6740e3494b
- SHA512 2ba2f180c44deb089fda1e8c6259f347a4a2a24bd2294aa409889b78af4f7dd898b6a9f64533abeebafd29b5e9d0cdafe4f24a7e852d3174626f1b6059352c83
- SSDEEP 384:v386ISoQomqTM7yZnssB/CRWFbD0WhsLBiHRN72dtHNsAR9zOn0Z7p:v38ao9IAryBeAts89zS0r
- TLSH
  T19AA26B5997285717EDA73FB8A66EE2927F3A73C269718B5D108DE00C085374C9B3132E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  microsoft.aspnetcore.systemwebadapters.pdb
- Size 5KB
- SHA256 4c4510b5bdc29ead617fe65bc8283b32aae3a6d9208ce20116d1130a7aa15f98
- MD5 1e6596d82ca27fcb03bda5e27269fe94
- SHA1 8d05d0b0641d9d639d305a05f7f5618ff5ad3ba3
- SHA512 40774af04a35252073125a4be3956ce7d142e1032c8db1668b89ea4680daa2c73da55f9f5437bded3dcbc75f4fd67ebc4c2cb1604469c3d6c0150cb85613fd3e
- SSDEEP 96:/N7MZKULVNsNyo5njcEbtugtmMY2Us2MMTJr/a5U3J3V3AMe9NRZhhlWGrSojd0u:JMZwNyotjcEggZ8MK52MeJxdKtho
- TLSH
  T1CAC109AF9A88E329D2433039792985C4A7B1D16567F1EC72F582079CDC8B2CF87391E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5
- Target
  microsoft.bcl.asyncinterfaces.dll
- Size 25KB
- SHA256 23fa57d17ffa074869331bd25ecac07b234523124690476e24e0885884e65467
- MD5 828d010b05d7840a689db092152c1109
- SHA1 ec5d820c866f08dbc0ed67ef1b172ccb8af446f9
- SHA512 5d1188d57c2e060149eb85c3e84469b56a813b71d0fb1f71bcced111d4252c4105e3aa0fd038d326434da5c56b6647ea2486d3a1d3d8c8d80fc100fe7ad9edfa
- SSDEEP 384:M9OJWqnwKBbNAP0VES2j0cX6dAl+NWfVzrdcQJMeWer/W9qfLXmztvGHRN7eltGB:6ulwKBhRVv2wK5hdcQJ1jjQtarkC9z2+
- TLSH
  T15BC28E1AD71C5327CE6B2EB5E5A0D9432E36D78A2C22EB3F1148F2D51D57345AB30638
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  microsoft.windowsapicodepack.dll
- Size 96KB
- SHA256 808e96f59e7dd2212eace049079d25545f6c9c3f05244ec9cdc539fda18d34d6
- MD5 0d661949ebc172dfb3c3b98566bdf0fe
- SHA1 c400a3d279b9b2ed8f5cfca0b3a8c342ea64d9e1
- SHA512 7baf43c4ae7709d91cdd2f70dfceb1db881d0d7c89c673fb166294d56a0eafff056128b605be20e0ad304f9392235403441a3b17a3c2f785a4e81931b40e0abd
- SSDEEP 1536:dCrMf4QNZsVFCnmaDAtfMR1C7KGLnZOzIaxGIA/JtyzV/liTiA70hiuD:dWY7DyymCR1CfNXaxGIA/JwzFliTiFhF
- TLSH
  T117A35A61B7BC89A9F6FF0B79F6310510CB71FD462A16EBAB2540A5CD14A3BC04666333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  microsoft.windowsapicodepack.shell.dll
- Size 529KB
- SHA256 e6fa9d9e34ff3bf63ce782654b14e4b54a3abd1022c87bc099032c2948157672
- MD5 54fe9a2748c4a0f282d4ec91e3cadc16
- SHA1 970b783a697d893ecd4916dd86b5ff7574896c9e
- SHA512 c7d567e3c039f98f3a99249b2d9bc2186c34efd73eec421331732d2307a8af940911381e27b015f58d0f65871bb4b038cc0f27d3fa495acd08994226bb033b7f
- SSDEEP 6144:KRAFnp++R1yj124hKX97kANqQHlWBwn9dgPan1W86b8c3v6n9c6KwZErn+LYHtA:iApI2D97kANVFWBwn9iPIL9Mwh
- TLSH
  T19AB429207BBA811BE19F477CE5F61721D7B58602B213EF0D0E8462AE2DC275645839FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  newtonsoft.json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  presentationcore.dll
- Size 1.3MB
- SHA256 7c6cf727ee790f6625537bd607d0d755db3510cfc7d83c3630ba375eb83555e3
- MD5 ede661579992313bab0fb01962a1da46
- SHA1 2db35fe481f03ce2663c5599c0a6662cc2167371
- SHA512 220bb00c74373733dd50f27c46fa8750e170b2334b6f1adb2bdc16ff95f80af235446eaf399f57e2a5a8298caac760e91fe54fffbde522fecaa29085d583b9ea
- SSDEEP 12288:bW2wRrYQXgQnEYrF8+H5HNU4Hihwvmh82LqvHEfp/IOo+WY:bW2wRr7n53NhHiamhHbv9
- TLSH
  T1585517217BD85F6AC8E64336B46D44366F70EA42B313C38B65119BAD2C47B430F963DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  presentationframework.dll
- Size 2.0MB
- SHA256 a1958e008541e47eca7828dc59d8ea60528ec235db4fdaf5222c494df1e318e2
- MD5 8d335f0257ddf37a120dccbfdc0f6f0c
- SHA1 a504f113839fa7adf4b4162a057c2bec99430c5e
- SHA512 f778318b461da0d222cb6a1d6a5feba225a3e03af981c4e6d27494a18d4f10c7da1cdfc798bff6b66ce0d3f08fce3fc5a8c2dcaf85e2f9a894c6d014d78cec3d
- SSDEEP 24576:uqPOOQz66GkQtnOZ2h6wXaEjp9HLpOzOwaa:QPwvHNOPj
- TLSH
  T130A51A6477A88A3ED4F70736B4B21624BE72E9CB2302CB4E2525673D0D52B474F627D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  system.buffers.dll
- Size 20KB
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH
  T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  system.codedom.dll
- Size 29KB
- SHA256 0071a5e455bf2a4b04c3e103417aac30789cb5b5b0c99f3f078a4ec5171b93a5
- MD5 acc07f521936b011e6665a63a7bd442a
- SHA1 89b053b11d08fd0b457a2480f822a26e2b52aa85
- SHA512 69b5c6fa4b5bfe104592d1d9eaf3cf9dbedc228340372412f750f4ade1d32c65d9cc304d9701d7efdd15587246e14df83f58e41b077833d439cffaa79f987e00
- SSDEEP 384:Dxaz4VsBrLcTPWi3h8241EEtYW0u+BxehzsCtZ7U6rtk2OyavWBuWUYA6VFHRN7k:NK2hTjaveEtYehzZ5kFClYdl9zxE+l
- TLSH
  T1A6D24B6293EC4ABFEEBB0B3075B7D1D50FB5B2D22425D61E1544B40D2AD2BE04A32736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  system.data.dll
- Size 1.2MB
- SHA256 31812365198b0707ad98005e19e38a3d354b13fb5cdc272d5000bfe4b82a9b97
- MD5 31cf3c235cccb381ec282bbf3975f9ae
- SHA1 bfc8fd8e2341a6ccfda95d8be5d7c425295672d5
- SHA512 a1a61667c6bc1cafe0790b3c651ab11a83b873e9cd66e482f0f9fecd39b3f0ad1df2d37207e0306f898698408f401ed35865b4393426745e6b2f8bb46b0fe032
- SSDEEP 24576:Ak5enR3m5LB1GX5g7PTvN7TJ9VdBLKpagagngRhyNX3AsYN4hCJg6B5+ghg7xNxA:wiLB1GJg7PTvN7TJ9VdBLKpagagngRh1
- TLSH
  T18F45F81173E0267EF4F72736757A40116936FA472302C7AA2C19A62E0E63F231D737A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  system.io.compression.filesystem.dll
- Size 23KB
- SHA256 fe0f7dbdc68cc5668ffa8d20bac687fd9ea7bb113017218bbd6c1ef494f81037
- MD5 1d41042101552ff2fdc6eadda2a86ceb
- SHA1 20956bd1064ab643956a9a064f4e0c608de40016
- SHA512 f2423c2c22291f195307d3dfa18d79af3c555c3402fb196cf4c9ca6288c68c1583d43c8e84458ee06d1a1da57a29664967ad57943066b78e49c7b2f33edce69d
- SSDEEP 384:SSyvsPZuGdQGWgoWTLF0GftpBjLtTIc4HRN7EiAXOVlPPE:qMZQYV+iZaBE5X
- TLSH
  T1EAB25E92CBBC9503ECA31E7067A8D9833D3CF7C75D51961A109AF6962C933D0EF10668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  system.io.pipelines.dll
- Size 82KB
- SHA256 ac7b789ebb910cce0947550136cb6aca39e0b803df9ea9c0d80daee12ab80cc6
- MD5 e761d71e909fa0b32f95afb951ce9528
- SHA1 6370737a0e6eea0b305192b42a048beb2493ade7
- SHA512 520f8d456a5bd3e6f91743ad615e1281aedc576df9ade03f425a86bd0ee736bd14e30610c658ae817d4e78f2bdb2b8812782de96b9374cdfdc5057c2dc3a483e
- SSDEEP 1536:ROBEtNwWq02pH6ZafBzoGrriJNNjrgFXjfYbsAWYo4bgN0xeR5evOjvjzT4Ko1RB:wBSNTAl6ZcBzoGQ8XSEYo4bgN0xeR5eN
- TLSH
  T1BC836B6853BC472BEFDE1ABDA57095020FB7D7166913F74AAC4CB9ED188738046242B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  system.memory.dll
- Size 138KB
- SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
- MD5 f09441a1ee47fb3e6571a3a448e05baf
- SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
- SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
- SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
- TLSH
  T1BAD37D6857C6DE56DB5FEC70E02052016631C52F5742BBEE5DC8B8F026923EA28193FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  system.net.http.dll
- Size 84KB
- SHA256 f5737983cf08ddcca1f09f93409dc7b85d233643a6aa3a5c550c51ef733e2670
- MD5 374bf9212a466e369431125e79169c98
- SHA1 515f0bcff3878bea4f71337c25ca7469905942d5
- SHA512 ef3889be58efaebf21ed9e678703fc9a091bca067358ea1d9516d18504a051ec2620f288edcec54fc9fdf7b7a355c35930832b017b7859521e49c1f6e5b5d9a8
- SSDEEP 1536:+C3UkaSGZKFcLZBPH5bdlSAgLctI+DHBQ:+C3xaSGZKmBPJdlSRYttS
- TLSH
  T154832A0897E4832DE9B707B0F4F5C5A6AA39F7873921C78D2485134C189274FA7627EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  system.numerics.vectors.dll
- Size 113KB
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- TLSH
  T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  system.runtime.compilerservices.unsafe.dll
- Size 18KB
- SHA256 2d6f419d641682d8efc4a40e850d2e85de519d6823b93daf2aeee63206d4e32d
- MD5 aa7a54f5a3ba48e60d51e6eeb378404d
- SHA1 e5d644311a6087c6a500f0e79bae4af305430b3d
- SHA512 b033330695b4edc1bef5d36d98e1a68f5862469598cd6a71cafb8f72732d29403d4e8b9e4df3809c2f49dcd59d5ca751ada97ea9b7e268298effd6e19eb52399
- SSDEEP 384:hkGbUzdrbbxHKWgr2WXTX6HRN7K3/7R9zXL/Lq:WGAdlQTWoF9z7zq
- TLSH
  T1B7826D20C7D44543FE673B3055ACE583BE38E7D51806A3763585E97A2C963C8AF3562C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  system.text.encodings.web.dll
- Size 77KB
- SHA256 7bea336a8d3c9a3c9fb6af280391ce2abc4724efeb098a747b24026995fa31c3
- MD5 5f5199aab87e4c227b64a79e8e5f78b0
- SHA1 4a9f39684403df0c70ada37fef1f6cf1c16a71db
- SHA512 4ebf2400751dae7647cdc7e7da001854d8c01edae6eb3293d1d77a0baeef1442ce128ed89629dcc12a0492d38c41f8e922dfaeb0af011293121505cb70d444e3
- SSDEEP 1536:qOOUnOOOc++v9mBkdQ3IWIxLBHFkzoA4Vnrpwrx7ojGjH70mQcrM5zh:A+FmCQ3IOx7oCjAmQdF
- TLSH
  T15C735C26A7888B3ECB7E16305560857097F0BF5F2362F3825854B40F0B767CA621D2EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  system.text.json.dll
- Size 709KB
- SHA256 51bdfd754cb827a3724d1f9974836f34b493fca0059751d9c87669a8f2f96a4c
- MD5 9005abca36b04787dfe07fb49b13667e
- SHA1 5bb2b766ae43cdee59042ea169ae242ccc7d0836
- SHA512 aac78b4042869cd7122d7becee5b2e9341a0f7610543d52bc89eac6773cfb0e4af1bb6c5e0875198ee4bccfb6daaa136e8b194910fe424cb6431220dc72b9b3b
- SSDEEP 6144:KBKdLt5cj2/gSYvY6M7XyTSAMREMJ03Yt7HO+xMSXCIVAL0jO0ypCfDhGI8UgE9E:Jt5cvSYLM2jMl7eI3gKeLwOZmvZRiPb
- TLSH
  T1D4F44A117FDC5B2BDAEF6378B07451148BB5EA12A3AED70F264485E93C42790AD803B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  system.threading.tasks.extensions.dll
- Size 25KB
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- TLSH
  T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  system.valuetuple.dll
- Size 24KB
- SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
- MD5 23ee4302e85013a1eb4324c414d561d5
- SHA1 d1664731719e85aad7a2273685d77feb0204ec98
- SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
- SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
- TLSH
  T1DBB23955DBFC5143EEA35E7066B4D6873C3EF7C35D21862E106AE14A1CA37C1AB20B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  system.windows.forms.dll
- Size 2.4MB
- SHA256 0b0bc1f2ebfefe0cf827b2e2a0caa3fb8c772d84df26ab8e40abe98e0f2eb300
- MD5 5704ee24d68eb8a6d01b2e74f926ce3a
- SHA1 79c9b2c2396b89cac82f277e41ab5460296837f2
- SHA512 c8365dfdfec24094d9abd4c3ae03e2742e8fe0e8ce432a88883c33da4f10f8793e2e2272fa23e2b9ea1c25097ecd10f8c05b9943f8026a49c2f6967b9691b88d
- SSDEEP 12288:3VQkIfvWp2pYn4cpEFi86OQdIxpH976ad3jveSlLT4QPzNilliUHJufGJULSo+wl:3VKvrZd6ObdTveSlX4Q4llBpufIo
- TLSH
  T1B6B5EC112B9DBDE9F1B50631EB3642E84729ED602A80D70F11503D0A3A7F6D3BE61B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  system.xaml.dll
- Size 108KB
- SHA256 f88a02dcc1dc1037884032624f3ab092aa5a3e85d215598d7d13ad7ddc814d81
- MD5 db6d9b68b72e6ef70cab7eda4e76184f
- SHA1 c8ee82503654df7084af8ac6db7ba7f36fc5b00b
- SHA512 b897a6695a74eabb9925e1796fe96ffc67f3d4bda3d2c68a4007044ddd30635859b386da89e4a6936e882d55bea100889fa88f03e574effe9921bc2d0b5fd3e2
- SSDEEP 1536:5pSss54HVVyHy1+rG5yMLTTgQHJaDJgAUR5Oy9/N0HefpCRIZ1VN/p+cBe1hX:5pBs54HVj1OG5yMPTgWAA/NUA7h03
- TLSH
  T119B32A05A7E8823DE9F30BB0B936D8A5DF39FB563621C70D1058405E05A2B479AB37B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  system.xml.dll
- Size 903KB
- SHA256 00208e20e3d1d520c233e7ffc10e4e56f9e6b3920bf4a971faee864268c7e5a5
- MD5 9ea44b529e14810c45c35ff5e9de4e1a
- SHA1 16a13de42754e6d42210e8f7b5ceb15f3c8c4ae8
- SHA512 eda42a71be3cceb0cfc333dc46bdf7130c5f1a1c2abf7f2cb793ea90a25417352527b176d037b9afa5cb407255ab85bedcb01bd03152bff5a37a56e170b4d1e5
- SSDEEP 12288:Y4lDNpKQsu9AMJvPJNiAC76mKfyy5NJFgzvRnS:YaDNpdUaPJNi/76muyiNJWvRnS
- TLSH
  T1C2152A64B7C4913AE6EA53387D7994244AACF6672502CB6F701C5ADD0F93F4B0CA27E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  system.xml.linq.dll
- Size 44KB
- SHA256 39e51b600362a070fbc231272d167072ecf74b2bbf0fd80bb8b37287683b29ac
- MD5 d0c673eadb63a8d11f573abb578dc98c
- SHA1 3e292375f4df6284f295f7410f9cdeb674b99ed1
- SHA512 44001cbc0014e97a8c9ac309675221fd2f61528f9e26b404e75bb1222c93a85d46dd7fb2f34d280a878fd2943520b8bb56b2e867607e1efb592473282d2143db
- SSDEEP 768:gRLa5+k3XRK7THV+6xMM1beCxkxz+4pW+Aj+iHsgBB/pD:GQ+QXk7DVbpKL+4pWL+SfBB9
- TLSH
  T197235D62A798853EECE72BB0B561F0522A3EE3C63413CB1F2065D259189775F8B327D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  windowsbase.dll
- Size 655KB
- SHA256 99591f58a3b54d5e38c9ca85ac2488780161da511748005c542ee7db03857081
- MD5 640e47908e078505eb2ad6bc86d21ac3
- SHA1 61d4cc8cb61beb0568f7d87c053d65b1e346d3e3
- SHA512 26854cac603d426a5c96addd3c2441261f73d3c3e6f4d449adadaadbe1eee89d2f2772702781567e1d96ea2d3bd9af0e20baee189b4c6f6b293754b666cb040a
- SSDEEP 12288:b/5+uC/gMHYtyW1YgX8bvAucdriyhUZE9Hcf:b/M//WyW1zMb4loyhUW9HO
- TLSH
  T1A3E4191873E4462AE9F707B4BAB75656557BFD821722C78A2130869C0EE3F474D233E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  wpfanimatedgif.dll
- Size 41KB
- SHA256 b4c69be213ba3dd40e6bc819b7bfc13ab03d06d5f3efa0e4643b1b55e5a529f9
- MD5 47d729b6841f1e0e510bbc7d74454b73
- SHA1 bb7a519a2bf2dbfa8aef238241d6dd5c62aeed77
- SHA512 f5ecd0cca56306273685c12ccb5af8f540161e2cffe3f639a2fa1f9de29cfebb2f6d8f8ba4ad43e02a721da30dd8e3cc911e46e4237578e026a5ba8c059429af
- SSDEEP 768:H0Gl7W1UiZTo1ooEqTh0sq/s/MnBOyvUPrYZbkch:UqQpZTsooEah0sqU/by4UZzh
- TLSH
  T135135C2403BD836AC75E06FBB4F0402442B6F3867512DBE96EA4E16FAD6739107147B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  wpfanimatedgif.pdb
- Size 16KB
- SHA256 afa73a32b976ffe3926c21b06cf8cc25b72ece16aec7e546dcadc6596fd4932c
- MD5 81b1ed5a70f7cd884555bd43ea2cedbb
- SHA1 5b5038cc52a18db1581ac9dc75a6a8612a310b0e
- SHA512 f55e04663ffa9e65dd030743a98644f8145d4ca2b982cdc8c16315c8482e7e2fe5a83249ef835dbef9931db99f94f54fcbea1b756ab5aef961c7739c95cdbfda
- SSDEEP 192:xweyh7FAuKjOP60wMD7wiBXndS0VTYJAkzIDC9vBkT5hcO5FLm:x9yh7FAhX0wUwitw5JAkmCQRLm
- TLSH
  T14372FA265694CF2DCBA84976EA7353366BB0C104FE078F27A184B77B9CD67504F231A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31