7db7e21e63acbec6282b3757ac5b286a3cd9f83d2b82d6f438a79dae94e84a67

General

Target
WOMicClientSetup6.3.exe
Size 1.7MB
Sample260713-w8a55aev3q
SHA256 7db7e21e63acbec6282b3757ac5b286a3cd9f83d2b82d6f438a79dae94e84a67
MD5 a30d52ff282f62076fbcdb8877176d69
SHA1 a1f94d917d05fa978e4f7d32ffd3443bace4d862
SHA512 5f1275d12b2db4f636391bc55d7ff9aea4c470199bda20d451a998aa549ec92926748d8b1226eb96fff3a35c9baed2da109af517ad37455e02fb52115770f524
SSDEEP 24576:Ypr5p0LKU6CnTZh5GYP7INP4w6ZtwZdsIAljoXHNAi7JYYDd+7PJCX:e1p0WSlDzBaZfuo3HYnPJ+
TLSH
T18B8523107210ED49D8AC6A32CD77ED6C0464BE6C2E289BC6F2C1BF1FA57134EE9B4195
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  WOMicClientSetup6.3.exe
- Size 1.7MB
- SHA256 7db7e21e63acbec6282b3757ac5b286a3cd9f83d2b82d6f438a79dae94e84a67
- MD5 a30d52ff282f62076fbcdb8877176d69
- SHA1 a1f94d917d05fa978e4f7d32ffd3443bace4d862
- SHA512 5f1275d12b2db4f636391bc55d7ff9aea4c470199bda20d451a998aa549ec92926748d8b1226eb96fff3a35c9baed2da109af517ad37455e02fb52115770f524
- SSDEEP 24576:Ypr5p0LKU6CnTZh5GYP7INP4w6ZtwZdsIAljoXHNAi7JYYDd+7PJCX:e1p0WSlDzBaZfuo3HYnPJ+
- TLSH
  T18B8523107210ED49D8AC6A32CD77ED6C0464BE6C2E289BC6F2C1BF1FA57134EE9B4195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Drops file in Drivers directory
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 f577b66492e97c7b8bf515398d8deb745abafd74f56fc03e67fce248ebbeb873
- MD5 174708997758321cf926b69318c6c3f5
- SHA1 645488089bf320f6864e0d0bc284c85216e56fbd
- SHA512 214433597e04ca1ff9b4fe092d5d2997707a7c56f0f82c85d586088a200e4455028f3b9427d87b4f06f9252557d5be4b7a9138ea6a8d045df6209421fd8ca054
- SSDEEP 48:S46+/ZTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mCofjLl:zDuPbOBtWZBV8jAWiAJCdv2CmpL
- TLSH
  T1E1C19370B3C248B9D491513368E733D36A12EE746784600F9B6711AA38209F7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
- MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
- SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
- SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
- SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
- TLSH
  T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 aedb5122c12037bcf5c79c2197d1474e759cf47c67c37cdb21cf27428854a55b
- MD5 d6c3dd680c6467d07d730255d0ee5d87
- SHA1 57e7a1d142032652256291b8ed2703b3dc1dfa9b
- SHA512 c28613d6d91c1f1f7951116f114da1c49e5f4994c855e522930bb4a8bdd73f12cadf1c6dcb84fc8d9f983ec60a40ac39522d3f86695e17ec88da4bd91c7b6a51
- SSDEEP 192:oWa8cSzvTyl4tgi8pPjQM0PuAg0YNyZIFtSP:DaBSzm+t18pZ0WAg0RZIFg
- TLSH
  T1CE12F793E5A820B3C2D3523F35BE2B2ED7B95335B0512C0482738A497A6947A6E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  driver/devcon.exe
- Size 81KB
- SHA256 aca1bda08690dcca930254f96f9185c776671a85a58ffa1b59cf16017546f218
- MD5 816c4e245b286b4e4903131f75a94948
- SHA1 eda70c1fc8a461efb0e376d42e35a72b96175e4d
- SHA512 d0dc74956c57403c0638e6595aaf1c2eb75233997a15170b064261a5d3f1f525a3e35e13fef04c36cc20fd1d5d1cf000a5fb7a646bf2cf1cea73817e5d3335b3
- SSDEEP 1536:11Xslj1j7qfAgg1j9f5G/N5hJO+D8AQNJ3Fc5VnZcFMqO7WH:11M2fAggGnD89NJ1cPZCM3W
- TLSH
  T1D083B40263E91659F5F37A3469B552354A737CA1AE38C69E0298912D0FF3EC0DC74BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5