f11dde5431cc2a85bd0f27e71f0ac0478396e6b1be6ac18c9df233e6a3d1d8e3

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 75.1MB
Sample260712-e6d1kacy8r
SHA256 f11dde5431cc2a85bd0f27e71f0ac0478396e6b1be6ac18c9df233e6a3d1d8e3
MD5 c20f5e0f2a3c98aeda4f6c003f9073e7
SHA1 fde0accf6c6f8ad80b499289aab37ed4860ff78b
SHA512 8248d75bbc461f0bcf4002a447b5b69e83a69f327ef720d4b98e7623192814f58fb65bcf5bd80ddc0ce995ac2d2969f3d7fa7e5623d2b255ebfcdcbbf9d22cb1
SSDEEP 1572864:GTj7D9tBIUg29Yl/WvCSMy+Qt/t0lJdHbYN7USMtwlbdH/I1z/dHnz7:CD9tBIUg29k/WvCVQeJdMUa21zZ7
TLSH
T19908334120D31B6DBBAF403BD20D72F51D16A337E4A88C37929EB34B35957D5A02AE1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  setup.exe
- Size 75.1MB
- SHA256 f11dde5431cc2a85bd0f27e71f0ac0478396e6b1be6ac18c9df233e6a3d1d8e3
- MD5 c20f5e0f2a3c98aeda4f6c003f9073e7
- SHA1 fde0accf6c6f8ad80b499289aab37ed4860ff78b
- SHA512 8248d75bbc461f0bcf4002a447b5b69e83a69f327ef720d4b98e7623192814f58fb65bcf5bd80ddc0ce995ac2d2969f3d7fa7e5623d2b255ebfcdcbbf9d22cb1
- SSDEEP 1572864:GTj7D9tBIUg29Yl/WvCSMy+Qt/t0lJdHbYN7USMtwlbdH/I1z/dHnz7:CD9tBIUg29k/WvCVQeJdMUa21zZ7
- TLSH
  T19908334120D31B6DBBAF403BD20D72F51D16A337E4A88C37929EB34B35957D5A02AE1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  locales/ru.pak
- Size 166KB
- SHA256 ec6654ffd877ec62d8afcf90469ecef5790e17c7306654cfe4b905de449b06d8
- MD5 5d77bc0c2aa843ec5be6a3614c062359
- SHA1 0b22c3376169a5bbb4697d586e4a0d3094739dd5
- SHA512 a2cf1ff9f7020ba1998a7091b802dd1aeb59bf2b800a41ff221152e2d017435372bfcd52ec454db543e856288e2dc381dc46a7926d4bb4b917b8749657fee0ab
- SSDEEP 3072:KWFppsemP4lV+TQUXEmOAdOiOFIQgIvZfbRrK5VH934RzDqa7BLuW1LV2Lle9X+p:KWFpp9mQLPQVOAdOwQgIv1RcVH9IRzhM
- TLSH
  T1EDF38761669A64DE1201F01BDC08BE0E7CEB44FE7FAB935619643D7E35F2024C63E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral2
- Target
  locales/sk.pak
- Size 109KB
- SHA256 d7baa6b1c0355e1ce9088c6eb508235c7a640ba70cc7ad84c9ac607026400495
- MD5 ba56090d9658733694473c7861d04040
- SHA1 dde05b47d06fa81abadc1b8f74e5993d0ea61ca1
- SHA512 ed49f76f2ef4975e105fe13850258a51e44d0ffa7167a52b398276898237636aa50f62209757dcd756e3faef5581e314e261baa3a1e46b183a3b93af68605c59
- SSDEEP 1536:ufxhFgi4HHK9eDpYaQWQtTe7hukM+zBHCYaiggGP352wmQPE:hBSaQWI2ukM+zBHCYauGPp2wLPE
- TLSH
  T1F0B36F2FDBE6584ECE940108EBD6A234FF7D05D98A4DA091A80F724724B3ADDCD78D46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  locales/sl.pak
- Size 104KB
- SHA256 48e9004441f8afb200601ec2843a03892076deb1706e1d3a7bbdbfcdd137ab57
- MD5 b1e33bbb0abbe113a024694bf4608c5b
- SHA1 a157c8578685f5084fd805c9d0734bc7646d77d9
- SHA512 94854eb7021ab112b710332a410af53e59a42c4a501eb02098a41004613e5b2f7727a192c74e2a1c17bfc584a85477e75bd1eea0187e79db1de83c8253bec322
- SSDEEP 1536:RU1M1nublajdqz6HYogW4xVivgnUhXaA99DqJdIqTCORahNNi/fzU1BwwRqt:RUpZWqzon6x8DgIqTCO6Li/fzMwoqt
- TLSH
  T1E1A33D35E69B1E0E0CABE28DFEB253657FDC045DE241E1A1FC4F23685021B5427BCA96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral4
- Target
  locales/sr.pak
- Size 158KB
- SHA256 68a04bae37629675c49d9aaeb68a1da974aac427b61151a18f3210499702202d
- MD5 c56d29bcf5fb38ea25ab1a855690f9a9
- SHA1 f3161f2890971ef929473c58654dac0718983957
- SHA512 551a72041772737139190894f5dee50963f5597a2271bd2e94af390cae34967cc435bf5504601c061cf6c2ccccd19e7bb708538a6789f185412fc715e85d54be
- SSDEEP 3072:u6umjOFT3hFmGK7vVsY+f1GX20Dl370BQn0yh9K3Y+Nst3r1GLTL6itWYJ/k/Zp:HT+TP0B7XDp370+n59URV/k/Zp
- TLSH
  T15CF389719B9E64DB0A01F41BD8087E0A3DAF41FE3FAB935215642D7D38E10B446B935E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5
- Target
  locales/sv.pak
- Size 96KB
- SHA256 c63e812fee929492974c9b5dfa14a7587258e6fabed355a105015b296246b068
- MD5 2befbabeabbbae5e7c57934acc5cd41f
- SHA1 d48e9fd4d73627f4dcc57ec31924d97f6fd6b8d1
- SHA512 8e06850701c6bc2a4a5ed8b9d59f68b68d631be7b037e2df2a738b5a44d36a37b1419e739341a00ee7681249a434ca69ba53bbc58ff0f204322f7dfde2d43405
- SSDEEP 1536:49G15Swi3ANlCXU8qwJ4Ey9HdSfvlALur/WLdP/ldO12D2CMqeLKBqQOPXE9b3cY:JTvi3AKT8OCbU+Vn3
- TLSH
  T1FAA30842C660F525FBB1470DA605116F0BDDE59CF2D180C9B8CD893EAF97AA805FE24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral6
- Target
  locales/sw.pak
- Size 97KB
- SHA256 8b07bfafa5c97be2da9b6146535b7848d88a44d43a45ab06dfae286d93fd64ce
- MD5 2490296567a1cd3c7b0852e1ed7d115d
- SHA1 04b527742cea9487344ae08c463d6fd4ba16b1ce
- SHA512 b930c14847012e12bb19bf217c79516c569fc163204d9c2b21a36f6f5061a50c3ec057882970517fc3bc4beebcf3d1b1402ccd521404cba827309940a5496b3f
- SSDEEP 3072:AUaDx9XlYKed5nDi5jXmQtVPGoHLeH+jKHw9E:AU8MnDiZmIVaH+jKHw9E
- TLSH
  T1DFA3E8A2D8B1D1140622919903D8FF7717DCED5C2D2758932A4ABF4F228FA8C1677E0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7
- Target
  locales/ta.pak
- Size 245KB
- SHA256 22eb9d73331e92c898b27546a9e775fa8df0fdada391734a9291b2a016662652
- MD5 8c8b63dfb6dbf75603d3e2e4fe981f9d
- SHA1 3e7c9a1a01526367b016df20822a41e430328e94
- SHA512 978af09738b4e00ba58f91b82db6cd455ffb3cb4951c25abaf79b8159c6fcd9212348373ef5a5a421f9ff5b4604a3f5b54aea3257dcf566807b6a84824ca54bc
- SSDEEP 1536:ow9AvDLcYemZ9w7towiy+bvnTDE2k4ca6QVW0LlGJfB1okotPttRmL+EG5aIAuwA:39I/cXmHw2tRBp
- TLSH
  T1B2342FCE913EEE890E93288F0319536952987155C46BE3A27CB65F1198ECC5DCF342BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral8
- Target
  locales/te.pak
- Size 228KB
- SHA256 2dd8a542ee0778ee39639380208c584d9eec8932d1307bd5563e1eab320fe0d8
- MD5 c370f82ff93880c0f32e63ceca8f1050
- SHA1 a1190895ea7e699621f930c9b4b672b786fe1d9a
- SHA512 be8febb9ce42731f6f3dbe0775d2bae10267f0790ce7bb8b437c4dd5e736fc28772812231b0a4a39b28dafc63d54d27fbbfd94375dbceb317fc43debbd566844
- SSDEEP 6144:O9cJA6UspbDcUSanSBXvQBgIiCQvWSsxU/dUVo9wLwxEE:ocJA6UspbDcUSanSBXvQBgIiCQvWSsxU
- TLSH
  T12034B2023A7AD311DAE70273352CF5AC49681B4261D6732C1EAFA357FB87D6E0843676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  locales/th.pak
- Size 195KB
- SHA256 cffd61f7954ca10038529d14fda6a4e34c8ea1a9f202ead0b0c2db93143ef485
- MD5 f265ec50e0eb62893fbc187c1c962dd9
- SHA1 5a60ff7287e5d4e35f000d229a4cbb37db76acc0
- SHA512 696140d16655b6d1c17d59b3e280f3f387adb8ad58c4a0d369925bd01cf03a3fd934c3b8e02e9e868bb64f81e7cfbfa532e732d1cd705c52c7b0f588765ecbea
- SSDEEP 6144:aMMGozCJFkcSCkIOBrQrUXFIw3reJZK8Q9w1p7ETsGpY0bhdxPtA0kC5/0:aMMnzsFkcSCkIOBrQrUXFIw3reJZK8Qm
- TLSH
  T132145E733247D9D479481A5B262A7789662DAE693F73F8E040C9215A73F071AC432EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10
- Target
  locales/tr.pak
- Size 101KB
- SHA256 b1b66bfec0aff21c64ec8ba3f19008501f196f80e7e41b2e8ae73114357df458
- MD5 d8373d7bc1bdee4cfb48d85694a78ff9
- SHA1 323408e39b2c953728420e5f21b1d1eb25de6c2b
- SHA512 6960d7c0481985e0f151d66d047a02e7c31cdd670afd71a0a3949b9b0ab9e083a5ca55faa48e38c8793ebbf1218a4503043867d1999b163a923e5afce8058888
- SSDEEP 3072:uTJeZiainAmSngesR/Rv2NEiOwi1PNpskBa5Y8GKhEtJj3:bZMAe8NEhwiBNps2r
- TLSH
  T148A31880B4EB281C8F78274FD7E1466EF98F165AF232A446E626D726379534702F760C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11
- Target
  locales/uk.pak
- Size 167KB
- SHA256 fa035595c375522d09f9de5a545f5339fcd3ddb224fb19f1828a7958b7dff3e8
- MD5 e87cbe2cffa7d3a95a8f837231d6f44f
- SHA1 40f7d1602b47c7a7ad445fe04377e3145f8caff7
- SHA512 4a8b970b50da8b92b824c92c6075c8b4440826da5a581c91ad6e5b78bc65e3b80be0080e4fbb20ad91e3ee30f8a3a05ca6925e93c76c8d2474cdb9a8825acc74
- SSDEEP 3072:fxJB3IjwWDCj+KU/TI7Yf7/QLNiXMMQOCqbCEb4UdL+v:5JB3IjwSrILNiXMoCqbbW
- TLSH
  T1F6F3AAA19B9D58DF0205F05BE8487A4D7DAB40FE7FA7431625A53DBE39F2024863C31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral12
- Target
  locales/vi.pak
- Size 119KB
- SHA256 044c48581c2395a8eb0f85b5905e1b4cce1fc1fef2196710cef06e197afdfa99
- MD5 dbf8363fe244c7d45d44e987d7194566
- SHA1 c3bf0058f956fbd6fa0ad89218a22c7668964b30
- SHA512 0953c455581f045a17e2ae35712487f36603b942f754805011047e4dcf531062d1dc1c8755f022177f7e21b7ab52fa71db5eac7c524424e1e5a2563429318e34
- SSDEEP 3072:2KqJQj44KMPnMpPiz+sEqOa2WYmc/14Ca1bNeqhzi5OZpW8uTtdLpFeSZTzeNQ:86Zac1bNjzioZWN1
- TLSH
  T130C3970117E1302680BC553DC6CD941E6FCAE45FF3808FE16FE825787A621A56F35AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13
- Target
  locales/zh-CN.pak
- Size 88KB
- SHA256 690dafdeb5be360e8b3a84c711d0d48b3cfc74c871b89a8f03f8058738ca9834
- MD5 d9fb680d115846809114de2b35ab4ce3
- SHA1 d1f68e0181233c98ffbe91b09910b9d87c1e35eb
- SHA512 5968bba15bebf047df19b519da87bde959ccf1e564012043ea390b3c1e572bbaed79b8be6bfb884f4f9da8f1c25f3e6709d6620c582910deaf723906fdb04525
- SSDEEP 1536:fS4xPz13JLazuzqWI3EnkHhE9vcolEclL:K4Zz13euz3+B8pl9L
- TLSH
  T1D4935D9D41E9FDEC058184581726D23E7980720FF213DAE6BD91889D1B72E960E6BE0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral14
- Target
  locales/zh-TW.pak
- Size 88KB
- SHA256 8187e67cde3292c6f18ea0a40f8f8d3f2cd604e62feec9ec40c71b5d2bcdec9d
- MD5 d0141fd3e851cdb790549c069a76abcd
- SHA1 3da3787a8ea94aa066c5e5d17e42481330e0caff
- SHA512 947e19e8fad3a761e5e1d0380547a8f9bc06f28cf8103d80865eb9ced9e3ed3d601bd92710ef1cb9fa68d56eb62ae95c1aad78145d455bcb6dda1b8c280f4162
- SSDEEP 1536:Nx0gkZ46QB0MYZ2wcxAhdmDMQ+23mVcb7/8sfjkMQP1Rh5u/UxLiow5No4V3XiP9:PXkZkaMs2TAhdmSYkg35N/9XiPm45ycd
- TLSH
  T1D49349A948F6DFAE0510D64873C9823F3C49749EED33B7B6BC4D48A81F76A414E6580B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15
- Target
  resources.pak
- Size 4.9MB
- SHA256 a30b8269e588c6cc2cea5fd4685da3012fd10451edb59a283005116f8e033182
- MD5 91f8a4b158df6967163ccbbe765e095a
- SHA1 95db67f0a2352fd898f4a4cfdfc860f6a9c58c87
- SHA512 6450d75d53f24d11e1c1e7e3cacfc57ee9dd09c00ca0dc2ff30f580b59a6b17e7ad7d96682195bd7d806b49068653538c77ca4200491560cecff128a0b012d92
- SSDEEP 98304:L300L4ikWDclBYMiqOs7y33cJIVh1uiUdrwrAUFJ7rK5zkIFvd4XTI:z0Q4ivKYMDJOh8iqkrAUXrK5D
- TLSH
  T1F0360112E4783EBBC2CE213B74BE315366A118C341697E7E77CE518C4F99D0611BAB86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral16
- Target
  resources/app.asar
- Size 1.3MB
- SHA256 4f1bb6888d1a0f7083e76d5c873d6f5d84105396006f3300824286e63081bd6a
- MD5 c0a31edde6589241af70dcb2f9deb723
- SHA1 d983c69ba7d8dba19cbc1fe4aa4f614c1d62fe4c
- SHA512 433d8d332ad1e7b847e14be83cb37735bb332a1975762e701c8121e86cb50894cd782db8bfe63301ef72d9464ffa77a56cd024b439298c72c73f87ace64fba15
- SSDEEP 12288:Jruk0FK/jP2/Qex3cb3nTWmT0xsrDIFpVpZ3uQqPjSFxfPfViQt1YCOx:JrukCK/jFexsmmCrlt1js
- TLSH
  T1C3554BA776B7EA79569613FA0ADF0184A2384116A401C458F81CE0CC37B5F2AF1F9DED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  resources/assets/icon.icns
- Size 46KB
- SHA256 a4dc3ce7a64207d10d15c4c537599f47b4ec1f16b53dbf3a92466d050ed4fcc5
- MD5 8f80ca9ee10705d617566a041ccfe010
- SHA1 531c952d46864e1a295c765e236d31147c5b7dbf
- SHA512 ad1184a361b1645c6ec9be311bedf46f1518060e558da758e01fb56d7668b4b611bb1b320f8664c53958d6192c5f3d16c2f7643c2e99246fc6e1fe41bec72ad3
- SSDEEP 768:DEE/FGBpID9deCikSY4CbB5k1yBte6eLjjuX5V6S/00wnkKhVLXCe6sP:YE/FGBpID9dvhd4C95Ey2HX0N/3mLXGy
- TLSH
  T1952302310C9D3DE51886013678E33327DD7847218366D8BCB29541F93ABE1A68C8BDCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral18
- Target
  resources/assets/icon.ico
- Size 107KB
- SHA256 72869fefc1e9317c157d7f172affdf426559e84998c2bab7881af0c77516a1d3
- MD5 61f2a4a068a4f66d4c9989d877956b58
- SHA1 1e417fd77bcb30540b94b5fdedcdae4ae2432811
- SHA512 3158d5c5769958d18029cdea8998e528b34df231a50d08db660400f90518b4b067464597ab3257f3c0aff5b33ee8817b037a8d724a12ba6af79ce2ee2c340d08
- SSDEEP 768:XQkPg9JLMV7zoEMABueLtlcsM0pzqvjj5T2REe:nobLMV78NxeLr5A5T25
- TLSH
  T1D5B32A1212909A76D8722B3C60D2F619FCA878D0A7722DC5BD45F539BB7CD0EC2EE214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19
- Target
  resources/assets/images/background.png
- Size 297B
- SHA256 1d370406c3b0c6bfe109feb76229fd4a0fe1d4171ae2a77655a0fd3264558d2f
- MD5 32338b60ff8368fd431b32109eae89d2
- SHA1 7a3a844f2e6371c8f3a08a142e2e792a6e77105a
- SHA512 be71b3dcc24cea203d59e08d8a4082dcf253eb02a971e67034f8cc0930f6af72830b1e35430cc861c08341082156585adcedcbfc788a83ec35fbd78107e20f2f
- TLSH
  T19EE08C929FC22817BD774A2A58361360B96542B6C4F4DA1853F68B3318920E927F8297
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral20
- Target
  resources/assets/images/canary.png
- Size 2KB
- SHA256 dfd3446ba31a55a11b45e0196b4eb2800e0271749c99102660d0df59f2ad9b85
- MD5 a2636a83d1e5d412d1459b3134f0a3e0
- SHA1 ad04552d42a12e0aad79995bba521d163f1c6af3
- SHA512 c51cf43252083bd2c5a31510f8a1e34bc08b3c142484d40f04d4979bfd334c9c34456f4908ae881e90de355551bccefecf88de187383dc0a0d8e9d146917bb80
- TLSH
  T1FD413AC650765F80C64EA633AB2D4720EAF01A8376E0049F9814FB7DDAC7FC9AB46084
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21
- Target
  resources/assets/images/ptb.png
- Size 1KB
- SHA256 b5b0f8076b0ac106fcc8f172b5e81516b69387f4119ca54715bd00739861fa27
- MD5 d17d46244937c3705cccfe590b5a3d0b
- SHA1 318949d0fd6d1638c7e0bb170e59b8d2f3662e34
- SHA512 930eee25bddfe72835f5ebf6d5bec2e05e2e3a8740a588264efb8b7bb1dd7b46d3ff402206124b5a9878ce317bc64cb53d7fe0611e2a20902e9fc129760dd861
- TLSH
  T19A31D6D2227CD3C8C017A6B10BB04656E3B3199D41F69963BC68E20D1D1639433D8C4F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral22
- Target
  resources/assets/images/splash.bmp
- Size 564KB
- SHA256 c14a86e456f5b9783ed3e2118c9e97de6306fbd2b40cf9cd0dfb821b945c3569
- MD5 ab867e66abaad50036f8dca8bcf3b63b
- SHA1 ca0bd657610ce7b5b86514adde57e2b0f18a83b8
- SHA512 24b122fd7f8a48e03b387308e91ec1ccc6025a44f3e65404a12679ed50ce7633ce9f6c5b86efbc175cbed716478bd015e42711bd0148742f1ddeca5e3dbb1863
- SSDEEP 384:V6sr5D9wQM3Qxu6QejY8RGEHsDf8CdvCdXJWaTlnZIWYvylfQTexJ3:VHNaQM0uhSRGFD0CRe5Wa5OWwBMV
- TLSH
  T1A5C43BC05B3CCC4E95180DE4AE9E2116611C3CA89FA8F3582DF87F4D9A3F9D94A3A5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  resources/assets/images/stable.png
- Size 1KB
- SHA256 b5b0f8076b0ac106fcc8f172b5e81516b69387f4119ca54715bd00739861fa27
- MD5 d17d46244937c3705cccfe590b5a3d0b
- SHA1 318949d0fd6d1638c7e0bb170e59b8d2f3662e34
- SHA512 930eee25bddfe72835f5ebf6d5bec2e05e2e3a8740a588264efb8b7bb1dd7b46d3ff402206124b5a9878ce317bc64cb53d7fe0611e2a20902e9fc129760dd861
- TLSH
  T19A31D6D2227CD3C8C017A6B10BB04656E3B3199D41F69963BC68E20D1D1639433D8C4F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral24
- Target
  resources/assets/license.txt
- Size 2KB
- SHA256 ee6a24a1cbaea8bce8ac430a9220a10a45793edda095745058a0bcca3ad19b31
- MD5 a2b31dcd031487c3e4364c5ad42bdfba
- SHA1 315bede7f48d47909cd75c378496095941682356
- SHA512 aae4a0ad66b47be7e5491d1f08855ad74abf39a0a1058c610f5576d89d859734c6b9d422c11af043739c05aabaa109c85ce720d3717cf63e805752da6314156f
- TLSH
  T1B851867DB3A54372159A02A466AAD4C5E31E1374B3AF47D06929C03A3323DB142FB9CD
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral25
- Target
  snapshot_blob.bin
- Size 47KB
- SHA256 68b7dabbb789a8519fce501d77a8ea9500ca323147368fbee2e963d9afa4031e
- MD5 afb3608da5b0dcb902dfef796ca8d6da
- SHA1 83569629e771abdface02aec84d710fde348f458
- SHA512 debd071364c38a97ca1fcd146599fc535fbdfb998c682580d4acf7f40f3d859178a1fd5de0103f4dda29aa9880ab1c2763cad21a691de6c828c144185c53cc14
- SSDEEP 768:0ijAfH4IlXEx+AWoD2Sn4wnPONmnJEd06zyEWGpybzV9YDOvV0EkFUM/L0zvwX:0SA/4IlXA1D2TwWNm6zyVGpyb59zvV0T
- TLSH
  T17523024A4D9C49CED07A72F843218FCD38E07A9B24505EEFE520417C5998D35A7F27CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral26
- Target
  swiftshader/libEGL.dll
- Size 366KB
- SHA256 0d4015adb1b1a4996378e06c9341b19d00e3cab8d18c002197ea9311feaf5d11
- MD5 c51dc7e0ca92c9a45467a202aeceebf3
- SHA1 5f35ec0c4e9b7663d7467a6c5f10062479519758
- SHA512 8439f2a36f0a85dbfe12e786672278c6f6250be5029313efa285f851491357e134d6c9e03b339985eb255e80988e82d37540ffaef4f358c4428f6fc6aaec9ab0
- SSDEEP 6144:z0xXgHVFDxkm2nh/nyce87Xi4dlwhNEkqZCC9uZaWPJqSpdZgOBJ4+b2T:Ih/Ze87Xi4dCC1uZaeZGn
- TLSH
  T184849F117450C036C46E3135391CE7780A7EAAA11F6A89CBD798DEED4F702D09A39B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  swiftshader/libGLESv2.dll
- Size 2.7MB
- SHA256 dac51738a42514c68ec31c962e608f6ce4a5a4244b787d2ba404a6a6065d8244
- MD5 5629b1c0102dcc1e4217276efdc60630
- SHA1 ffdd7bd4131c53b0ec5725ed8a8529b4be677232
- SHA512 8606a5e86172ab1f8cd65927b5139658e42ccf3fa870c27c2ce2a36cdfbffd3764f2efe83d4cc76c676c89d9fede70ca643950f370bbbd0b1dc8d2df005c46cd
- SSDEEP 49152:9dnrjtIvoFzKkAdACGPIuV95gE+pZRNA32yJ6uhH2elKnmeEkAz4RnEoJ2rdzNBu:9F3tfKNtja1MZdZ1X
- TLSH
  T12DD59D01A121907CE82A63F3B618AF3DAD74474407764AEBC7589DD4AFE46F026BF11B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  v8_context_snapshot.bin
- Size 161KB
- SHA256 72c3c123f10eb6e24c83ee40727a3a632cf7a8b062a3b7c7b41db4bfeda52ce4
- MD5 d88d23551a4d7230f98fe0cbd363695b
- SHA1 8e28eb4153e00aa5345bdb539b925a777588a26b
- SHA512 ea757e91c7cfc766b35da226263e82646f5b1153b8800c5cd69321d98b6d424413dcd7a02413a6a0e2f34905daf84bd21302b7ad58f2ebd814a7ac0a92b9d284
- SSDEEP 3072:jafMxvdYd2kI4vnplWH44nZKbKLSY8gLh2kPkzq3LjDY2btyqeV:jTdFkII3WGuLSy6+Ljp4qU
- TLSH
  T13AF3122B34060415C68A1577FFA25C28EFCE2D7C211F695AB5B9AF22A200C17E47FB57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29
- Target
  vk_swiftshader.dll
- Size 3.9MB
- SHA256 115ade04abfc0bc084c00716490cc9fb1de658516658bc5b95d39f341d05a204
- MD5 ef923cd8e56388b4e0746883a260a0cc
- SHA1 ca8ea23d0747cab1915acaedaf4a3bd2146095ae
- SHA512 bc1f20be1cf53c2193b3b4f25d212f5c6f1f6e58d3d2a82010d32a7ef790c6074d400e7cff711dc4a1d9713d027f1235cc97a2b58fb7dcff611e5db582d3b0c8
- SSDEEP 49152:YWzcL9x2ydlDTa7GmidqJfec1e6u9px5Uxb92ZpJyTlN9lp/5iY8E8oP7qG7rm79:YaK1GPm4gmZZrVSowgaB
- TLSH
  T14B168D01B50180B8E44B63B2642CAF39AFB04B455B764ADBD7AC2DD49E302E15BBF15F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  vk_swiftshader_icd.json
- Size 106B
- SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
- MD5 8642dd3a87e2de6e991fae08458e302b
- SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
- SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
- TLSH
  T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31
- Target
  vulkan-1.dll
- Size 616KB
- SHA256 96b5833d66faea81bea3da7e7c5735ecb43f3b1e713715304d20377cc1f67a27
- MD5 5cfcea352b182820083249567842e7ba
- SHA1 0998def9b65a187d02b77763343ac81d1eb245c8
- SHA512 0ac1b06bcb6e66d4d326fc73c0573a3caefb54e343e0f7e0298e9af08e15db9432375dbccc51a1abbd6a900a5e21a64dcaad58d266a114b01d9455aeebeef3d5
- SSDEEP 12288:3qVxi0ZmVhGfA8gFlkPdcarfoxpQGyHua8pyE/XPVPYo:4xJRrfQry4yE
- TLSH
  T1D9D48E00A890C4B3E61B22327518F735973EA7025B748DDF5768AE585F702E12B7A36F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32