99b7bc74a1ed4b4c04f03eb12aa09f581bc201928bf20654dd1e77397efe5a96

Sharing

Copy URL Twitter E-mail

General

Target
roshade-pro-free-main.zip
Size 53KB
Sample260711-rlkntscw4k
SHA256 99b7bc74a1ed4b4c04f03eb12aa09f581bc201928bf20654dd1e77397efe5a96
MD5 5bdb8ed0dc48c57f0483a392c744fc53
SHA1 15b6e20e4c3e8208b93e26a38b73943033c82dce
SHA512 35779a19034ef9f20dc6789e07519168924e073391796d434bc71aceb833fe98102b5e7c5da947f0763c068c30151a9c1d89d8ea42c01f06020451062d93f312
SSDEEP 768:ilSnzilqsYG5etFg9zURg865TguYBHnpNjROd73cjkB08EW8tEx+I0cx:ilSnzilq5Gtzu+5cpBnpY3cjT8Mw+xo
TLSH
T18033E045A39B2A98E25486F270D25D8F67F6CE9E4B04AB704704F9D25F620113FAB61C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  roshade-pro-free-main.zip
- Size 53KB
- SHA256 99b7bc74a1ed4b4c04f03eb12aa09f581bc201928bf20654dd1e77397efe5a96
- MD5 5bdb8ed0dc48c57f0483a392c744fc53
- SHA1 15b6e20e4c3e8208b93e26a38b73943033c82dce
- SHA512 35779a19034ef9f20dc6789e07519168924e073391796d434bc71aceb833fe98102b5e7c5da947f0763c068c30151a9c1d89d8ea42c01f06020451062d93f312
- SSDEEP 768:ilSnzilqsYG5etFg9zURg865TguYBHnpNjROd73cjkB08EW8tEx+I0cx:ilSnzilq5Gtzu+5cpBnpY3cjT8Mw+xo
- TLSH
  T18033E045A39B2A98E25486F270D25D8F67F6CE9E4B04AB704704F9D25F620113FAB61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral1
- Target
  roshade-pro-free-main/Glossy.ini
- Size 8KB
- SHA256 1b59aa7d27f97620e8a79640cc7129136461986c0fa6d05544cd63f019004859
- MD5 188ad88641733896400d99529d52dabc
- SHA1 adb9d4e65236cb8078537491f0faf9146e29a23f
- SHA512 e9d95ffa01e5f0ec80af26f0c3f61babccc95f1df5bc1fd6e025afc2f9a279fc1f5a00ec16eebe8346cecbfcc6b1c0a1c6b15e4ad25f8b87c0fb85e4e6d2cdd9
- SSDEEP 96:Q5YoYM37oBPugtGWtijcvvHIafxrRMstJfk7Z0zBX/ai4VhvQM+KEP5ouqtth3wZ:CeugtGWtlIQrRjO0zx/h4oM0XKe9t3
- TLSH
  T1DB02D8DACB3D0995ED479787C8A23AF118F631DB8CD4961C2CD824263CD2D8D090A92F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  roshade-pro-free-main/Greenscreen.ini
- Size 30KB
- SHA256 49b4816ae0812037544a94c25afaa81c0fca47157e26eca900a470e98674172a
- MD5 e59b63d32db4613cc15671e0d838ab08
- SHA1 6166279c44095f917c580f0fd804cacd17eaa66f
- SHA512 1219004154769df56f78f2de36f165c292e905cc9e24b88ef90e1fac0b209c7ea4e756e967521ca50ad35b02f26b9cff43a73e533bbe43df3e33f74f07d1be90
- SSDEEP 384:Kck/kpxVWuzYvFn3KnhWAmbiBAXkO2ay/p079uNu:iYxVWuzA3Hi/V0f
- TLSH
  T19EE2C7A7B34F5BA9391365F9BC3901543E7FFA12213A1ED4B032C61AE50876E05B28DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  roshade-pro-free-main/README.md
- Size 877B
- SHA256 22e60233b06561bd21a414bef5279a035230d54c868c5e45e3a5c31bb7d364cf
- MD5 5daeed1aab0e49954f9662ae8478b5a7
- SHA1 afc161ed86eea57053f425c8238b2d1bd58701fb
- SHA512 258e42a5206644c656728e82eccd60fb8a4ba61ca5caa7346dbd49ecf59f78ad797b9f67badd17be115b06c548c06f8bc3e4bfdec0e3478852e86609748f0453
- TLSH
  T10711EF3FAE80C23B8E7535D1E20E3EE7634B502E61A2C52114B50058A3F1C358F9B1D3
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral4
- Target
  roshade-pro-free-main/Roshade High.ini
- Size 9KB
- SHA256 f7209d5adc2a6a8c52411044f3d1e7c71c7d743539fb9a9b4db0ceaa1ee6fdd2
- MD5 ecabb07bb46183b6a76b7a95ddbb848a
- SHA1 e50a066d16fa996e7e2aefe44b449d92c870cb8e
- SHA512 1838445d44e6734e8304609d959aa2c1c183a6d0a2ae602e2a0dc002df39b1d92e9d2d9fdf0a6ddcaa09b4ef5b2bd562bc972576d839bf751db1114d7c2fa2bd
- SSDEEP 192:CA0/lyEE9wZ3WZUYiWrRDHBU8fM9G4lhIR:Cl479wZ3WCYnrRDH7Ucl
- TLSH
  T19522D9D6CB3D09A4ED479687D8B236F028F731DB98D4D61C2ED824262CD6D8D190B92F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  roshade-pro-free-main/Roshade Low.ini
- Size 9KB
- SHA256 42a1f230a64b407c59653e5bfb82db1b157b023a1c8ab8b2f54b802f8f20c4a3
- MD5 a3042e76af2efaa8ac2095f8b0d50f02
- SHA1 b913c52b93d9d61c483974b936712739c2a0ce5a
- SHA512 fa0620c35ca4747ff51a9634e165b8f4870bd7d26a0c9c5f4a8b66b2a230fa094f96371fd0962e06468d079a112e03d1fc7d767e9d1980b2b2b4ddfb19eaaeea
- SSDEEP 96:Q5YoYM3vy0WXH+5lyEE9wZwhIWZyj5exvvibAfxrRMstZGjQ70K1CKt5r7Eb8+W/:CK0VlyEE9wZ3WZUWiWrR7nBU8jM9G3
- TLSH
  T16712D8DACB3D0995ED579787C8A236F118F631EB9CE0965D2DD824263CD2D8D090B82F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  roshade-pro-free-main/Roshade Medium.ini
- Size 9KB
- SHA256 f1e71132e00d97f858da712aa5a57dbc02dd2c9d84ea22cf9a24df31cedb7e06
- MD5 48c50fc4a5a0013988a0a6894b0f1336
- SHA1 da081c5bc4268b1ef376f89e80229306c5448679
- SHA512 18d3a197d09875c5bd50861254e3966413b482c978df8d91b4cde0832035146a94fe5df9a90d2bc556fb96e999bf13adf117a5aba5f581a54fc542c68bac5275
- SSDEEP 96:Q5YoYM3vI0WXD+5lyEE9wZwhIWZyj56KoxvvibAfxrRMstZWrjQ70KG5r7Eb89oH:Cg0/lyEE9wZ3WZUYiWrR7OBU8KM9G3
- TLSH
  T10E12F8DACB3D09A4ED479687D8A23AF018F731DB5CE4D65C2DD820266CD6D8D190A82F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  roshade-pro-free-main/Roshade Pro High.ini
- Size 10KB
- SHA256 8bd4112d2f882a371e2f48db8b2fd48d9e740878fa75459ca463e6af1fbaa5f8
- MD5 60b1acf17be869b22cdc02bef3439d8f
- SHA1 ae7b2afcd781861f4d25bd6a8397b77660dc374b
- SHA512 a3e26e50cb242ba04d3b28cd3d9c8e9d9e38c42385b79cc922b836eba5581f16a830894d4999ef4277bc614c781a5a17b1e0ada8d5a4c5a38ad19fc19f3744f7
- SSDEEP 192:EYVceyky10JlyEE9wZ3WtUeXrRDtX6g2ZyxcjMwKCWgRDV:vVcv1c479wZ3W+eXrRDtJ2ZEtwKvaR
- TLSH
  T18632C8DAC73D0994EC479687D8B235F524F730DB8CE4A7586CD824262CD6E8D1A0B92F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  roshade-pro-free-main/Roshade Pro Low.ini
- Size 9KB
- SHA256 450c8940ef9c13d7816b09042606dd61d62f474c52994c398b09c26dfc244382
- MD5 11aff927d9059a00240118ba3be60f31
- SHA1 9a4a8dc4cf5ad38f7817a46c3d28f44db3d6dd85
- SHA512 6d9c2f36a4af4a3e8526894be379ae38544db0c8205dda23b5092d86c0a703f963624a6d86a25cd6e97863a3598e990436e73d98c415a64227f997853fa41ef5
- SSDEEP 192:EYVcrykyB0Y2SHWuFFk96RKBHYvUgfZ8xcjS9AC8g7X:vVcW18SHWuFFk96RKGHfZ+v9ABsX
- TLSH
  T18422F9DAC73D0995EC579787D8B239F118FB30DB4CE496586CD824263CD2E8D190A92F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  roshade-pro-free-main/Roshade Pro Medium.ini
- Size 10KB
- SHA256 7d801e356cc5392bf97cc6806df8171e8b0a881651ecf052553f97fadf7d2eb2
- MD5 19abbf7fa48516febef6d4970dec9672
- SHA1 6f127f681261e6e30284c1e9133f2805a464fc4a
- SHA512 c7a8c1a5ca03aef1ecce8127d2d7247b9a8411c831bab39ff6a6fb9c795184a0267265f22340bdefad7a3b6a3be9a40f4b2fb815fbee221a8918b2d93097a45d
- SSDEEP 192:EYVcDykyB0Y2SHWuFdA8mcRgKj7/UgCZpxcjS9vC8g7X+:vVc+18SHWuFdA8mcRHP3CZDv9vBsO
- TLSH
  T11E22D8DAC73D0994EC479687D8B235F128F730DB8CE496586DD824263CD6E8D1A0B92F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  roshade-pro-free-main/Roshade Pro RT+.ini
- Size 9KB
- SHA256 541bf2da71669e09c91f86f41d4d493350c8c72890f0f0d1783ef87e34814287
- MD5 63effa3922ba5ee77dfe709aa88baa3f
- SHA1 39a665acb3bec25aab2a1683d4eaf54ba8724988
- SHA512 006b561ca9dbeaef030b05cf0ad32c00fab710b0ac434e7695a58064301c96cdb25019c319f6f37d37cfbc20ceb56c4748ec0961f1f931b3e97fc5b6d3e8f2fd
- SSDEEP 192:EkVcURc80glyEE9IZ3WZUYOUrR2QMgIfawz13:vVc0479IZ3WCYfrR20IDzB
- TLSH
  T1D612D8D6CB3E0AA4ED47568BDCA12AF128F731DB5CE816086DC824276CDAD8D150791F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  roshade-pro-free-main/Roshade Pro RT.ini
- Size 10KB
- SHA256 785c868f9dda1239524636e7812c9d6917c86d759b44f0c5d252977c6621b0b7
- MD5 c5067ab5af2fd6b0925ba97c5d7f161d
- SHA1 65720526e9f1899059b5ebf543c3152f2e0153da
- SHA512 5beb647e788094c745c7c7941016da14c61c36a1b82e81cd3c11f5dbe73ce6a7133a03fc0eef2f3517764029d3c53d5bb8ac32c041f00aa6541deaebaae58079
- SSDEEP 192:EkVcUis20glyEE9IZ3WZUYrrR2Q1g4gyhhcdGvGsp:vVcf479IZ3WCYrrR2BjyvtX
- TLSH
  T12222F7D6CB3D0A64ED47968BDCA136F028F731DB58E4564C6DC434262CDAD8D2A0B91F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  roshade-pro-free-main/Very Glossy.ini
- Size 9KB
- SHA256 b9147d9d4cb79e31d7d64307ae3bcb9d0c58c3c23f3a8ddb24f2929b68f57f69
- MD5 ebe04b3034f3f9266e128c848e46030d
- SHA1 e1e5d14a11e07dff338e1058d7ae14b647d2cfaf
- SHA512 3cf9a233bbd80f3669a3bdf8a5c97a6b5989f47b5e6dbdca5f7691cf277ed97bd9ca5e50ceb2cfdc08f6e5135209c6cfbd0176978d12c18416d4d2fc2c122170
- SSDEEP 192:CnugtGWtlIQrRjO0zx/h4oM0Xz88mRFX9tG:Cnu+GWzIQrRjR/mX0XF2pDG
- TLSH
  T1B112E9DACB3D0995ED479787C8A236F018F631DB5CE4965D2DD824263CD2D8D090B92F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  roshade-pro-free-main/message (1).txt
- Size 29KB
- SHA256 f65f6bca6b5af349d311e8d31348e749045704e9180f25f2502561b8c2b4636a
- MD5 33119d48ced70361df28c1ab910d8bb1
- SHA1 181d9fa7b8888739242b8f2af4844ecd056403d9
- SHA512 3af11cd46d36e4cbc2d1f38ea0b58c3287c9cee6258cfc1c6df3f37eaa489b22a3fb80d433fd153446c61444562d723e3b3ea3995e68015d62c836b7eea721a8
- SSDEEP 192:z/0Itb19MRYBWSH1pHLUJBLKx9AEZa+dC/vt1C0JXtk4r6eH8+7xt1ZOiZHEZs40:HJ19MQOW4B2kVjh/yZ853goItG
- TLSH
  T1B1D295AB330B1BE9792395F9EC3B42543ABFFC1211991AE4B437DA19C00078F15F2999
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14