43985eae25a38f4dd2789a3094c0d90a06add65179ecca3c38f7d8c1418e20c8

General

Target
Starship.zip
Size 5.0MB
Sample260705-ws36zaav7q
SHA256 43985eae25a38f4dd2789a3094c0d90a06add65179ecca3c38f7d8c1418e20c8
MD5 3591f7465a121e70f78e26e4333edb0f
SHA1 ca4308ed6c9aba62d21609e406da0a337198f646
SHA512 cd1fa6971d71d1b7080ec4aa9fbab8a0f945b7a79e25bd23d952637f00e35f12db638c1c1ddb943e588b1decfbc508d617bebdbf397b8c08540d7bc9bb2574b8
SSDEEP 98304:+JVgcYQEJMitdSrhS/s9Wo1v8lVU2wldhSiPPEFhreaCTJ0pmYf:H1QXivSrl/UvUfrhSAESA
TLSH
T1F43633A7E8D36D27EE9B8AF476A6A44544D8033E74AC0824DB27CF01EC3B5AD01E51DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Starship_Release_x64.exe
- Size 123KB
- SHA256 6507041bb1c678539aa9a552ed4d1d4d5e13a71c86be4c0da8de01c59a729e08
- MD5 5bc73691dbaf569055d68a26e79ee6af
- SHA1 d402d099537fdece00a65a020eaa3954b44aec6d
- SHA512 7581748d9dd60efe4745f25b2144cbc47825c635029f6932d385d1ee2f608183df6091315c1b3f4a9ffb04765578840ffd45770b0e58925724c0758b1559064f
- SSDEEP 1536:55rjFnb5uRKOXDu051Simeb97xYrdSfvt1g+o6VM:5LX05/x7fvt1g+tK
- TLSH
  T176C328ABB965B0E9F129F43C9991A903EBE13CB547519BCF1BCC0C914E229C05E7A532
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  fmod.dll
- Size 1.4MB
- SHA256 8cddc7508b679e93b1cc1f4fa21704f4ce26fe3f6f98cf31227a5f1584f86e3b
- MD5 ffc398bd5026812777d5b88f9d90bcdf
- SHA1 c4e2d86483f33956cc1c9529bc47e6f3fc4ff08a
- SHA512 c578d3f345e676b7e69781aaa435afdefb5d05eb2114065d2ae7ad39979b4b0974ceabbb535c1324ac985d93afaebead69d1cba96e79a02776dd08aba1d95b8d
- SSDEEP 24576:n7vxJojeYCSd+vhZ4yxR4HhNTvNzLKXieYkie787tpVdG2P:n7VkMvhZV4PjNz2/ibtT
- TLSH
  T197659F10B990C1B1E4925033E6ED3F6B693D7EB5032811D3A39409A9DEF02D36AF57E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  fmod64.dll
- Size 1.6MB
- SHA256 7396d35375a305bf69b887ce9dc3a583df676bda4884666e7826ace4e7462f98
- MD5 3cc448e6ae3468c983a693a096e0a2ab
- SHA1 5ade2ad78e55fd1170125b9fdd545fc090d65185
- SHA512 e2e9e1ac94d185407b7a9c2245eae467ceaf72acfff31014af1bd263bcb2566abfa8f24452de88cb2ed27fc6d7c32804094ba731f991df64a2d2adc3c7143ecf
- SSDEEP 24576:KEGs415yauYxBTDQYj0w89+5EXu28Uo3EyQwGKdJg9vo2iJm:KEpC5yaZfj89+5g6vdCVrS
- TLSH
  T156859F82B1F480ECE427D13D6257B72BF67130940F246BDF0BA046695FA3BD15ABA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6