d348f7d129ff5b17419db8886083283dcb268098ab8137035d4282f810c2f688

General

Target
Human Resource Machine.zip
Size 63.1MB
Sample260716-ca4v1ad18w
SHA256 d348f7d129ff5b17419db8886083283dcb268098ab8137035d4282f810c2f688
MD5 d055ccc15db5c05b4a65e5e8852712ff
SHA1 015e6f8d84bd99de1d8f29fe56eb32692aa25aa9
SHA512 6ae8e75c2779f567d1be9dbaac721ca57cbfe27c29573dca44d99bc914f9406585896208d29e479bd460e1e7655b1e8cf24aa9771d667ed115c525b7271aff6d
SSDEEP 1572864:AmOj8qnRiRYObvMNOQQymaCDk/W2MKV/73BwM5YOjdY8y2k:Aj8w67b4OQkFg+2MKF3BwAdJXk
TLSH
T1B7E73382CBDF4378876218E1FAD7DB16D82CEFC8E7A8611D72B79453A1DE9615032318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  Human Resource Machine/Human Resource Machine.exe
- Size 58.2MB
- SHA256 cee82da73813526e3ab6719b985add5934eaea1b8107a7ad15276f515f3a0ca4
- MD5 e5b8eaf2ba3efe1e5c570371ddb0fbb7
- SHA1 abfc476fb286827ec971d22693cd5526b3e6e18c
- SHA512 417b53bcd4420cbe4ace9177e3e75f9cda14d20d30bcf62a3c6c3f3988e74fb193a6ab9647d132cb9fb6efc5fb3b0f1d590a8883b67ae3cacfcb8e4baf0f6e18
- SSDEEP 1572864:vmGm3OrmyfGgAZvpJg2Gxwg3JGhAAh48/ZBpdmvqyAPFH/:vmerRZAZsiYoB/ZBpdmvQFH/
- TLSH
  T1F4D733A9CBA9A0A7C867E07A516FC279F7731368833047DB6B58171B793539C5F2208C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  Human Resource Machine/Redist/dxwebsetup.exe
- Size 281KB
- SHA256 111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288
- MD5 fd6057b33e15a553ddc5d9873723ce8f
- SHA1 f90efb623b5abea70af63c470daa8674444fb1df
- SHA512 d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d
- SSDEEP 6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc
- TLSH
  T1F154F11267D9853BE0F56B705DF341236B75BCA15E7AF32E5246A88C0C32784B83A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral2
- Target
  Human Resource Machine/Redist/oalinst.exe
- Size 790KB
- SHA256 b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
- MD5 694f54bd227916b89fc3eb1db53f0685
- SHA1 21fdc367291bbef14dac27925cae698d3928eead
- SHA512 55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
- SSDEEP 12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
- TLSH
  T1E005F10020D5CC73E4EB32B3843586746EBA7E912F0A285B7FC476AEE673176DA71215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral3
- Target
  Human Resource Machine/Redist/vcredist_x86.exe
- Size 4.8MB
- SHA256 8162b2d665ca52884507ede19549e99939ce4ea4a638c537fa653539819138c8
- MD5 b88228d5fef4b6dc019d69d4471f23ec
- SHA1 372d9c1670343d3fb252209ba210d4dc4d67d358
- SHA512 cdd218d211a687dde519719553748f3fb36d4ac618670986a6dadb4c45b34a9c6262ba7bab243a242f91d867b041721f22330170a74d4d0b2c354aec999dbff8
- SSDEEP 98304:RuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0z:I7wq1W6HqULS8djZDTaNNeCKVP5ORsg0
- TLSH
  T1D3363341B7A660F9D20778B256377FDB1C28C2CC7B28130AA365E5E87ADB7C08355798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral4
- Target
  Human Resource Machine/steam_api.dll
- Size 782KB
- SHA256 cc6577baf37f77207abd176670a52fdec8b28113af4e3fb194f72b6d4addd5a9
- MD5 eec63267c52df7b219f3243525e3e30e
- SHA1 858293d3670ef8622588265d85cced0b8a8003ec
- SHA512 576d2f4e9c4a2cbc053a02d4a0ee51461bba49bd6629720c810e83492297f9edbb6bf84d325db65d05c579c81ad466c0ba2f2ed4aa8dae60d73e64bed799e76c
- SSDEEP 24576:nfOvMzqSqSyAA9af58ddAC/BqEnzh8RsoiSC:fL2BSFfe8C/Bqwzh/mC
- TLSH
  T1A305227E611660F2C1BAD639BC9A5D0F77B0928F30191EBEBB904532D84760B6E371C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5