3d66a8da93dc797e5ad43bde004307b69079f463cd6ad2848c0285fe245f0ce0

General

Target
imgui.zip
Size 4.3MB
Sample260708-v3sybaex4z
SHA256 3d66a8da93dc797e5ad43bde004307b69079f463cd6ad2848c0285fe245f0ce0
MD5 13c9f756ba607df45e6dccd2b0727380
SHA1 6ca3c6acd37c06dc412c0fc81e81f6a14f65ef4d
SHA512 37c3cad550eb29e574e36065284ffa7ee950d8369cc728feb11565024da5b73c7a82333152d9adb04170a1ad60b4c64fb4a8eee056beffe122137aa9f07254d3
SSDEEP 98304:rJqxot4/PSuHleITWzd/6yh65b0M4e84CH9DiakCxXldcL/y0DyxxjwJ2G:rsGtea2eITWd6ys5b0KYOad3LxOJ/
TLSH
T1D326335FE67CA446BEFE292A52E373975F46CB98A1C0CD43218415E0FB8F409A81853F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  imgui.zip
- Size 4.3MB
- SHA256 3d66a8da93dc797e5ad43bde004307b69079f463cd6ad2848c0285fe245f0ce0
- MD5 13c9f756ba607df45e6dccd2b0727380
- SHA1 6ca3c6acd37c06dc412c0fc81e81f6a14f65ef4d
- SHA512 37c3cad550eb29e574e36065284ffa7ee950d8369cc728feb11565024da5b73c7a82333152d9adb04170a1ad60b4c64fb4a8eee056beffe122137aa9f07254d3
- SSDEEP 98304:rJqxot4/PSuHleITWzd/6yh65b0M4e84CH9DiakCxXldcL/y0DyxxjwJ2G:rsGtea2eITWd6ys5b0KYOad3LxOJ/
- TLSH
  T1D326335FE67CA446BEFE292A52E373975F46CB98A1C0CD43218415E0FB8F409A81853F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation ransomware
- Downloads MZ/PE file
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1
- Target
  imgui/D3DCompiler_47.dll
- Size 4.5MB
- SHA256 2a8bc296c24647e0f5b6bb269e1cd2a0d77256a219ba9fafc6688e968532fc3b
- MD5 f79f214da80e715f88c23829c5c19464
- SHA1 1b5764481c482d23744ba8eba15a4cee96e5aca8
- SHA512 baafd3a3ef3d7471ec3166c963d10db7b15fc0fb756f3f7df5b55e936ee58b79f386ff37d0dff64386b25d1c5e58841212c8ed7455e54a5025ba9b2769d09427
- SSDEEP 49152:4lkVeOBK5P4PMgZ7RgDz40R6lwSxd6R/GpMPraQzylybnX14j09hd9ALlqnM9ecP:K2LKk7inR8i/sMDrzyIbnayh/tJ
- TLSH
  T1D7268D5767E840E9C5BBD238C6878757EBB1B80403309BDF415086699F73BE16A3E728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  imgui/example_win32_directx11.exe
- Size 4.2MB
- SHA256 79df266e47a7e8f526dee651e561bc90b9c162d47a0d0ac8b465981519cadd10
- MD5 2d38d3ec90ce6a79df39833d24c56c14
- SHA1 0d3a56da37a6b8b32f4ff835b833ddb0b0ff4af0
- SHA512 72232cc426e6878997b44c00645300353d407a880be632afb9e1c01de51b8667b763aad7201475ba38c28cb526350c0a0ab64a07987041c2994a5f2d2e9a8b57
- SSDEEP 49152:+4gjYEzThD0XFAyLqXC1I+8RcovwLrHtyH0Cthsn2HWkECEwWsGfVaYlyzUAR:VEVgFAnXy8pvwm6nOEEWKzUA
- TLSH
  T18726AD21A18C979DF062E178DC83962793F17C4D2320CFD766E04EF75E5B998BB69208
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3