eb9696f008fd49305e1f121f07f3ac3ad18758d6a70efd20cf393d8a0010e9de

General

Target
AutoBB.zip
Size 1.4MB
Sample260708-vprhbset5x
SHA256 eb9696f008fd49305e1f121f07f3ac3ad18758d6a70efd20cf393d8a0010e9de
MD5 3d303e2466391500cc9a8aef5e0d5348
SHA1 8872b30d5aca0f32ea24fc0a253fd03624ed5a49
SHA512 81a9a62b504e0d1b885d184ba954e57fa324d2151ce3b7917416bdee20e49c0a82ac688e7eb7b5e3ac97367d925b558c00fcc15dc2a88fef279c831abd639dfc
SSDEEP 24576:Crx5O9fxlYCR3KUOO2BRqIFYrHAuYHI7+ZOjCp74K7h5108OzVbYl:Qx9CXboqzHAllZOIvh5Bl
TLSH
T1BC6533C2486D0F67E02BEC2A9E659B4EF5364DD73A18AB49414C246B173ABF42137C8D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  AutoBB.dll
- Size 800KB
- SHA256 320e8a94789942486d9822cb9537af1d06ed6188e22f4d8cb01c36bfdefbdaed
- MD5 28860d5e9a4752de4d38b70845ff38d9
- SHA1 ca42de6478b939eae76fb15595f678e59786bb24
- SHA512 0730b326bbb0fb271f72921bcd086166735d52abe1c96ec5d6dfda2ebbe21953be2ea21c9ebaa40bd86a70f3b37d37b73f5794fb180750bf0947bc840e549424
- SSDEEP 24576:UCMMMMMMMXu2GOXfhlxEtNBHLk/EMhpwlMnqqHi7qMMMMMMM5L7BY:XMMMMMMMXuMXfrC/cnhhnHi7qMMMMMMU
- TLSH
  T15F05CE0122984146E32585B5DB67C232F7B2BD5B5220D6DB5FE1BCCB3FE3B919062A07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AutoBB.exe
- Size 202KB
- SHA256 257d788caf1f0feadcaf4e7fc4de4af50ddb6eac84564e6c3d120d23287403a3
- MD5 25dd8365a61397bf8aed08b02e77d5c9
- SHA1 2680640331632cb6b54dfb47dba0a9cd20adb025
- SHA512 073a3f94ec8b6c53346c7e004d60b8419b22529232ea7ca5f4ee489d7b43e3e4c80bd6cec3c0f200bd760f9ebdd39273ffbdff9a19b63aac3b88408abc027be3
- SSDEEP 3072:H454jE83DwHBoi2r7Z9V58lmpCnclxuZmPgBZ5C5spWxa6GkX:H454jECi2rd9V58Mp/xuZmIBfo
- TLSH
  T10014080272A800E9D1A7A2B899A6D935E3727C5A477197CF03D1BD273F73AC19D3A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Newtonsoft.Json.dll
- Size 1.8MB
- SHA256 fbf20c412819f6a2ea60065f4d092a68efdb1c62b71840b782958d78ea76c834
- MD5 19da32d3d4cfd4578b43bc995fd3e5d3
- SHA1 57d33e7a4b41efb994d1d8b400ddb9d604e062c6
- SHA512 34a8c8ae190f2644fd348db64fed5dcad25ba3615b85ece6930cfa7d413741bb3c20f7c70fbf4bb9ce9c5b7b86ad9da77fdc30ed8a47d9ca369f145427c0a3d3
- SSDEEP 24576:e3fNj6w7H8ky393LfhSKF8TnmtKpS2Fvnk+b88fxEBBjgrIQtDgCwnYTx7Ucn:aR57ckm3LpVAmYpi+b4BBjHQtDgznm
- TLSH
  T1C5859D1697D84B06D22F92BD819B4452E5F1F0435322D7CF158CEE913F83BE29AB235A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6