b435b1e9c64789c476060f2aa6875732a3883faed7ac32303c5e3c361280a026

Sharing

Copy URL Twitter E-mail

General

Target
musicpresence-2.3.6-windows-x64-installer.exe
Size 30.3MB
Sample260717-fsce9aez7s
SHA256 b435b1e9c64789c476060f2aa6875732a3883faed7ac32303c5e3c361280a026
MD5 e54f12e13e55f97f26521ba14a724bf0
SHA1 80f9497747f142324fb0344183ca60e175700699
SHA512 3f009a48b73d8a1a3cd39776cb3f2b1019e5c6c91195139d3eab00165b61951bf03d944cc5e3c2536c5f1ee0bc7a6731b1ec96421682b371bd8e69d6d7020ec4
SSDEEP 786432:yOxOjDFEZdtb4uJr9wb/aUzTr9Hu1ox/GSzlgxPdfyVWXuvfDXAocmj:yGO9E/tkQhkiUzT5HuzUiPivbt
TLSH
T1B167330CBEC67BA6CE19427312758EE263D5B0E57F8DAE9EEB6C0317406067496CC643
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  musicpresence-2.3.6-windows-x64-installer.exe
- Size 30.3MB
- SHA256 b435b1e9c64789c476060f2aa6875732a3883faed7ac32303c5e3c361280a026
- MD5 e54f12e13e55f97f26521ba14a724bf0
- SHA1 80f9497747f142324fb0344183ca60e175700699
- SHA512 3f009a48b73d8a1a3cd39776cb3f2b1019e5c6c91195139d3eab00165b61951bf03d944cc5e3c2536c5f1ee0bc7a6731b1ec96421682b371bd8e69d6d7020ec4
- SSDEEP 786432:yOxOjDFEZdtb4uJr9wb/aUzTr9Hu1ox/GSzlgxPdfyVWXuvfDXAocmj:yGO9E/tkQhkiUzT5HuzUiPivbt
- TLSH
  T1B167330CBEC67BA6CE19427312758EE263D5B0E57F8DAE9EEB6C0317406067496CC643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 89dd7d646278d8bfc41d5446bdc348b9a9afaa832abf02c1396272bb7ac7262a
- MD5 d1eefb07abc2577dfb92eb2e95a975e4
- SHA1 0584c2b1807bc3bd10d4b60d2d23eeb0e6832ca2
- SHA512 eaffd9940b1df59e95e2adb79b3b6415fff5bf196ebea5fe625a6c52e552a00b44d985a36a8dd9eb33eba2425ffea4244ed07a75d87284ff51ec9f9a5e1ac65e
- SSDEEP 192:E6GQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT311929WtshLAzgSrX8:E6Nt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T186624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E4678565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 e74f442771f034a24b77d3a849b343551bdef69ef151c622cb9fd5f34dccda81
- MD5 dc91f181f9cb870fff0c58bc0ea63eda
- SHA1 cc37e24f6071dea801d0eb59bcc2a9221cf1c74b
- SHA512 714605cad60dca30da96172b5ca1a1d8838d27f0a9979aa0db125d373cd3e015ae6b39c7b7d2b3fc9a4b5433ff1d7d2427caf3a2b5d1ae321e218d3c8fe8f9a4
- SSDEEP 96:FxIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/t3lkCTcaqHCI:4hE+A0+sF6piUFkAxlncviI
- TLSH
  T186F1C876F3D20673F9AB437428632F231B2AF521576981A6490316CEBA61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 a921cc9cc4af332be96186d60d2539cb413dfa44cfd73e85687f9338505ff85e
- MD5 f8b6dd1f9620be4ef2ad1e81fb6b79fa
- SHA1 f06c8c8650335bace41c8dbe73307cbe4e61b3b1
- SHA512 f15811088ecde4cd0c038db2c278b7214e41728e382b25c65c2eb491bc0379c075841398e8c99e8cceba8be7e8342bc69d35836ebe9b12ebebff48d01d5fa61a
- TLSH
  T1A78173BB92E40CF3D0A44BB740A71CE362B5DD301762001F4A478AAA2590B67EE7E715
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  Music Presence.exe
- Size 18.9MB
- SHA256 4f81275bfea11a23ab93d2cda711adb5f5841d7481c40a1c14b0f9b8314d9c09
- MD5 cc1515a2421f9649f66c5ef9aa6471c7
- SHA1 b14e18ee4b5613e9b656cfa6fb04be31cc7ab8b3
- SHA512 cc35fbff59f364691953b0fcc6ea1ee18fae03a652f3eb6e61e805d0b4acad6257c11796e99c4fdcacc3d4f46f1536b5b3177adf0c49686ce72eb0cbae994896
- SSDEEP 393216:MASJcO7l1zJ4F/JLQVWghekt0DdA3seQ9vTl9PdjH:MRJckJ4xJEV5bipVlv
- TLSH
  T18417E1E7336101E4E4A7C174CE268693E332BCDE5B21974B2198F6146F739A48F3AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion persistence spyware trojan
- Adds Run key to start application
  persistence
behavioral6
- Target
  Qt6Core.dll
- Size 10.0MB
- SHA256 fae4778a42e93adc82b831c879c886a05147e9cc26760808d21116be5547259b
- MD5 3b5c8f8981b2cca0c4741dcf09d7a79d
- SHA1 a5179fbfc72c59a5aca26ebdbb08d944ce5b864c
- SHA512 4bed16fef4c00773892fb6da163134cdf7819ccb165987e5bbdcf9153d7b042490be14eae984903e84b48b61fadc6f5735671df16641b3b131c0c0ecdb5260f2
- SSDEEP 98304:meAbhLTfRmoOKFdu9CwJsv6tnYNJMAA1gcV/3cNuWXelc:mhn8KFdu9CwJsv6tnuSA+/3cNuWXB
- TLSH
  T1A5B6390766FA0102F6FBDA34DAB75116DBB27C466B3096EF025861185D337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Qt6Gui.dll
- Size 9.1MB
- SHA256 8fceee959a670372aaa5763287c2ef7924cd9ecdbe2c29cf4b6c12a63079c503
- MD5 5d0da93b83dc26e65d414ff04cf86e21
- SHA1 b50cf7f75e9003825e1097f7ad095157b3d564fb
- SHA512 cbdf076636b80c412fbdeda23593826e4cbe62b056f08d7357955b3be9719e4684c9b4db88c6b368b6783724eadc3a8826cc2da336f13d9bbfa16b6ba615aaba
- SSDEEP 98304:+frUrVK+HdzDGqLVUkG/9r1hzJbgseVxDVkqtjuQQ2SI:+fABfzDnUfr1hzJb7QxvjBQXI
- TLSH
  T147A68D57A2A911D8C47BD13C8B9B9517EBB2701503529FDB01A5CA162F33BF12ABF321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 0232076731e386b6cc353bdf743d5fb17e95a3493c2d02afac984db87ed47b96
- MD5 c1f79b2e138a1658d122eccc3c446a4b
- SHA1 4edee52c0faee2bb72dce08f635c9ff541047980
- SHA512 bc9280b4eb94ea1803b6e1299d62a6427a8a326a091457adfbcb9579dca79d73d0ba6743b4387585e3382a32ab79ed514caeb6548e76596c52598c5efa5948dc
- SSDEEP 24576:yQrj1h2y2YNJ+wPBqmgvR6YFamR2bvaKLhToqYkiaKD7:Prj18o+wsoQjQZLhTYkU
- TLSH
  T1F5857D57A3A54295C86EC17DCB4B860BFA72700483669BDF42658F152F73BE22B3D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Qt6Svg.dll
- Size 627KB
- SHA256 a5866fa80cca10dd58e31f277b62f1a1060d3a495fabcea72e2f9ade0f9e45fe
- MD5 d9232ddf1b55fccaf7dc1bd306bd4a82
- SHA1 8ada9c3d81d449d9df597b4956ead145158ba823
- SHA512 5b35bc1a66465d3fe2e0bca81796e871d1f6e5a67f5670f7e70783cead1d94a0e730f16c228c2f47fbf7e258161a1dd50885e18121f39f3135dae26bdcabb3c0
- SSDEEP 12288:MlICqNLT42lBz2N/dZyJNX4nSEQmuR1Hl:KmLTVHz2Vd5nuR
- TLSH
  T1A3D46D57B3A60386E46AD23DCB5B8426EB73704003A2D7DF41B58A542F23BE12B7D791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 4d603bff620ae0830d15c25a787f9f10ed3f972d998f1f17c9c4f83937280399
- MD5 fe194f3803df1543fad6f316a50477b8
- SHA1 b9433f51f6bc4c61fa0fdb79619b64861d567b1f
- SHA512 74ec1e7bc22cc3814b1906a647beaeb4d080fd7f40ee786811990f597d0f1537700ab90198776f2e5f5ec6cd9cff568d9be8bf659cf37a265645b7096b6cc5de
- SSDEEP 98304:vM+neySH06w0WYXVxRjYqnzIjWyHTM1R6wtO0MPS:vM+neym06wvYvRjYqnzIiyza6KqPS
- TLSH
  T15B666A5763EA0185C4ABD13DCB4B8A17EBB2700453629BCF0265CA592F737E22E7E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  concrt140.dll
- Size 316KB
- SHA256 2405355f0a58067b258f8df33c327e3a3d716eaac5a3a5aebb757842d85bd376
- MD5 5fe9a647921ded8a2fad92deb9ec4ab2
- SHA1 1ce87fac4c22aae82a81ddb26952c074b744e78d
- SHA512 11fe4c0519cb1df73695ce38b5fdea2a563de565116a47ff0032d5a68b8c51fe732ad66738a7167e56d79193c60af9204a7ee0beae8ff8bb75abd0b484c2d764
- SSDEEP 6144:jfjSd54rw5k9cZW1Cbfpri5/ww8VRj7nWzg/p8Wcz:DOP4rwK9c0ILqzocz
- TLSH
  T16C64398A76140CE6F96BE039C553851BE6F2BC416352D3CB0264839E6F637D1E93A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  dxcompiler.dll
- Size 13.7MB
- SHA256 b855ee494c60a5dd0638d4574bc4d728c87fac5d415b9be3122058b5adefda77
- MD5 020e2dd8271994a77cd2b8f6cc52a966
- SHA1 238a2684118f184ad511c6486dc4e4c823ead0a1
- SHA512 8d20db75bd18cddaa5257287890a315de9cb5a7a14e6dd739675cac86ae883f1ab50b1b923b10473f98ad472c720f2f09ea1e81c3dfe60328573bd0ccdce467e
- SSDEEP 196608:w1qA9hLWHX4eSSgewvFmEGdNdKjcjftN9CVexNcpLQS:wYA9hLWHXJS7ewvFmEGdNccHAkxNOLQS
- TLSH
  T1C9E69D6921AC01E9D4BFD074CA178D17FBF2B46213B0AB8B06B406A62F677B1563F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  dxil.dll
- Size 1.4MB
- SHA256 2ae215743ca9c9c5ccfe4d53856e582c234a300a3186fc987c1d2bbe0738c50a
- MD5 7af28de0ce491cd09620bdd516f72d86
- SHA1 314aacc67f7c36176483b50e1e2dc529f7a8b5b0
- SHA512 74a7920343741eb7f666445ff3e593bbf40b6498e7198480ec62e6a77885f3ba5f10f583338219608609bb0daad2cf8aa32076cae638cfbd2069594caa2a798b
- SSDEEP 24576:5cuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/z:5sHMPzbOxBduHdSCde8ZF1/0Wy4oV6bO
- TLSH
  T1EB656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  generic/qtuiotouchplugin.dll
- Size 98KB
- SHA256 0a517e732bd6a12889e0708d6c464db1c07cfad9bb80831815d85505378d54ba
- MD5 f666b030d95cdaac4f177dffcf36436f
- SHA1 30b87c971d88199cddb4ed2942458b1d6ecdf294
- SHA512 926602fb4128f107a9cbf1955426f30221463a1f7e621857866400c7d367081bda0ef9da54748079ffd07eb8660d1bc6214013c9da991f5ee4d711d112d36d0c
- SSDEEP 1536:N4QUQ0iiCKyF/7sn2Kc84Qtc0EZY441QDjOdl0DmQPPytoXUYJm7u1:N4Q90ipKyL8M011QDjsfQHytoXU4mW
- TLSH
  T1F4A36C7B52A042D5D936D279D79B8A1BE372B02517318FDF02A497490F33BE12E3E624
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  iconengines/qsvgicon.dll
- Size 70KB
- SHA256 dcfe12e028e1fd694a99fbc18f6aebf08d36223f5fd99c1bc1e7bc85eee11281
- MD5 df5dee25db3c355c698a2e66a219b63f
- SHA1 ff9212b3ab6d1afbb5d55b015d3fddd3a4b9b4e5
- SHA512 d17612d3bd9fdded24ad6f3d876953e59aba72cc081ad2c43b592206ca28ecd2f66c1f29554dfdd507875a52938738fa0c5930972f97a500146adf465041a418
- SSDEEP 1536:2AaqA/RCDOhLqWyybvXKmZHyHkkaB1L0EfzR3RSoyfAuHPMM7upR:ZaIqFTdSHkkaB1L0EF3RSoyfAuHPMMo
- TLSH
  T116636B5367A41449E87BD63EC317861BEE72B41427A1E7DF13A1C8362F63BC11AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  imageformats/qgif.dll
- Size 46KB
- SHA256 1ac71f48e08ee0aa405d55041f8340d56ed827fb94260bceda46ac0a50dfb7a5
- MD5 34fab6ad2c3ca6cc2f1128de0ec38777
- SHA1 a08dd0d38e99d95eb63167cac8dcaa39f1ba0fd4
- SHA512 df93830fd323cad5984c8addd3d1f927002314bc6365b8c2205e898643684976e3fab4f26336aeb17c8bc9b161849e113e59fe3231825f7d320c9bea303bb330
- SSDEEP 768:spTlEV6wdBj3NpVt/Mqs0VOIEmmfcyjcocTQz5Yiuip5ALTSZ:WTlEkw3j3XDB/VPmfcyjc1Q97u/SZ
- TLSH
  T14C237C86AAA044D8D123C234D9964E2EEBB6B5504B92C7DF4221C62E1F337C13E7D779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  imageformats/qico.dll
- Size 44KB
- SHA256 0eb08bc9d8f6c1ab05f3a837629eb10e41eb6aa72240d23e291056b801894794
- MD5 acb1c5151430eae36afcf007d5beb08a
- SHA1 fb71f2d2a8b16ff9a03125ce911381a8952c3eba
- SHA512 bcbbbd861765dc8901815e79f1cc0f6914f1322a69d429b738514b8b11b0583ab77ef0b1c4cd92918e582f8a7cdf2ee20cb01123b3a872d6d2419968740713c7
- SSDEEP 768:yzYsBkjz96XLC21FXtMJu7QzLXeQL5Yiuis5ALts:eBkjz967jFdMJu7QzLXeQ17uEs
- TLSH
  T106237C93A2780489E927CA78D8974E36E9B6F1605B52C7CF0261861E1F333D23E7C794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  imageformats/qjpeg.dll
- Size 564KB
- SHA256 bc3815c58443a01f43417ecac74bbf182c245d433ea82af0b3dc669c2cb064ab
- MD5 94754ca8e90cf6726634b09d9f36823c
- SHA1 20bc7474c63407b32b200b1261d28f7bec9cf51f
- SHA512 fcc66f30562e1d4a2210ebcf67f59f5d85fab42c2e0fe57b91b466be10883f7c6788020e386840714d70e1b26185625428aee9b8520c519806da4514054cfb37
- SSDEEP 6144:j2/1Vqt7fL5r5op+dBGGaxTJJTD3LwFU2b81crpyXN+S2z5wGLioXSDEXYGyxyEF:pg+STkkyESzIks
- TLSH
  T159C42942F6B51841C7A68478DE1AC966EB91781D03F98AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  imageformats/qsvg.dll
- Size 38KB
- SHA256 8a4db91d1cb7689554794e93a9b0811fdffecfa43fc8c703049092ca27097ab7
- MD5 ec7a145be1696b7f621fdf341386556b
- SHA1 50767aa3b4a57d1bfe429e4933b360ec97df2087
- SHA512 0f3f39bc71e8cc22d209fb3f13c2d1abfc130ee112cdcee19038acbeee8c945bc938a8b5600d7a28bb915b60403fe75dc0cd29af1a267de942a78d038f0b59c0
- SSDEEP 768:6iT735G/9CkYsndxOi4oySnpS35lv95Yiuie5ALn:6c5G/ZYsdxOi4oySnpS35lvj7um
- TLSH
  T1A4037C57CB641886E427C678D84A4E26E573F5604B5293CF6267822D1F733C23DBC3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  launcher.exe
- Size 218KB
- SHA256 8e1a2608bf55379667f601358928bc86d67487458bf6ba9a4e9496f7629990d3
- MD5 4ee5fb00f98072ea38fd60748ac606dd
- SHA1 623ebb1049fecc63fcbee88c89719c5e4511905b
- SHA512 60cb70e09d79ca85b899924855b774f2b985417148062762fd7377dbbdd50a48bce6008c84cb99c0078cee4f177cc0d438dcffe1894f81df666a13aafb0b9f87
- SSDEEP 6144:5lLsbr48oTwQf6zfPrVvRuXkzgxZ2psylzJLKR2DOin:50dzLVpuXwgxZ2xZ
- TLSH
  T165246C2ABA5508B9D5B7C2F9C643C903E7737C864760D70F57A19AA21F27260BE6F301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral21
- Target
  libcrypto-3-x64.dll
- Size 5.1MB
- SHA256 febab5af132a7dd6ea0f0aa49f18777b3af435f0e3bd2a0fee4256025d2d6d73
- MD5 88c61b1b4e3b695ce681e20d190c7cd8
- SHA1 ffb12f9719b725a6b3bf621e0b7bb7f011ac9d0d
- SHA512 607c54fa914dd8d71baeb072f91894dcd84911a399d7bd3d7f1586307237254ce59cbb85c7aa798fc77b1306a139418d28c2d4ee339a1de687ac3c5904d0038d
- SSDEEP 98304:M0+FbR+BUdf0L3lyY/pY4C7ZlZPW1CPwDvt3uFlDC2:pmV+BU6L3lJvC7ZlZO1CPwDvt3uFlDC
- TLSH
  T128366B5AA7A80149E4BAC13CC5934623D2F1F81A57B097CF19A596790F33FDA2B3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  libssl-3-x64.dll
- Size 762KB
- SHA256 66ce2332757f2a5c290ebfadcabcd0f2d664bd7a8a0d757f782536f0eb5ca8c4
- MD5 27bb8243514c6a156aa103baa7635161
- SHA1 4843f9e115ed3bd78fa2dd2a5555a82df58e74e4
- SHA512 eb559de97fe28840b635510c64c6998bff96786c20dcfe7f32a7715e7b09e78fbaf3009d1869ea916f91528cd976302056b4f0237cdb9df239467ba674e61cfa
- SSDEEP 12288:ZrFZKUWWpyBI8hQoERmB2scSg/n7501sQi:tKUWWpyBIOQoWmB2scSg/V01sQi
- TLSH
  T1B2F43BADB3BC05DDD8B6C17986934623E3B6F4152330EBEF065186790F277D52A3A248
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH
  T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  msvcp140_1.dll
- Size 35KB
- SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
- MD5 2a214cb2f0f9473e7765ee3b8db8651e
- SHA1 9ce5c3d6c7d94b175f136f552af8771dca6147b3
- SHA512 ea9a759babdec5818fa1e430d1cb453cac762cfaa8f934e01d7182100f66cae21527962696f5bd963fcb0fba2c0f38bf4028e75f89e9e599ddee008021646a33
- SSDEEP 384:3jJ2J9VQH+qNy09dmFWcS5gW7YZ1gr4iSt+e92xS+R9zWd/I1IHRN7SUl8BR9zTr:d8QH+qNy0PmgogU9v2ci9zeHSn9z3
- TLSH
  T1C3F25D86F7248442EC674970C699EE837C3DB3D25B50969B17A5F61C0DA33C1FA34A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  msvcp140_2.dll
- Size 273KB
- SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
- MD5 3151333808c2c2339d5f5466df70b7dc
- SHA1 e48159bb2127ec812ff679f6fabc41141009f26a
- SHA512 8f1daa078e124dc89b51b84baab8d6cc2d77497be23b2ba95ef3fee54d9034e17bf5cd15a4043d025699972cae20f9c46d2e7bef48e4283f3ad9ca6b84fc64d1
- SSDEEP 3072:1J51P7emwi1j+XZi7b1dbqtH0h6XV3Q0JPQo07ICl3Sg2xmygdCg2LMeDh5FD799:1JbjwvnQo/iy5L/XxTWrNM
- TLSH
  T1AD543912B51A2EBFC5D6E8B04939B416FC223A418775C48A57C31C8D9E2BB437FE3529
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  msvcp140_atomic_wait.dll
- Size 49KB
- SHA256 640b2aefced484d0368eea5bdd06addd0658a3a70a49256e560d6923b404a479
- MD5 44aec42494531580bca182b0e2fb19c2
- SHA1 a85a6a4de6656e5969fa4ab15f2230dfe2839e75
- SHA512 d8afb5bbb1394fd14c3ec8ecdd4c02e1c6f23031b15173b1448dfd4915c392bb8512cd41eccb449db19969397a09046d27d54db704c8122ff62c12ff5a89c9d6
- SSDEEP 768:ayMsqh8UGchsJr3KbYA5XeDmqw4DYPW9zr0JD0io9z7p1uF:W+UjCKb/5XeCqgazrURgz91G
- TLSH
  T19C337DDDA7684083E5678634C1A4E517FA7AB7E20710D6EF4352F0890FA37D1AE34B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  msvcp140_codecvt_ids.dll
- Size 31KB
- SHA256 f2069a52880ec885ee7f0511186100eb7fada0411a2b4948fafea7735b878a18
- MD5 3ece3fb90bfaea8e9a5fb7139ff9cbdc
- SHA1 91b19dd0db24a5cbd944eca9c67fad3b53f9c154
- SHA512 c059ffd80de25ad10d34064b1e9421666525da67710de0ac445cfc45b8139715dd946f7e90c1e0d719c60e3d5902e3229db4496c87d674c0012c9b4a8c2b2291
- SSDEEP 384:p7GVNpd36sRWioEWEw4himRSt+efdDtdQ5R9zpU8NSqHRN7w9ju0R9zlWdo:5GVsfaw4DYd7ds9zmMEu49z0G
- TLSH
  T19BE27C89DA3C4487EC9B5C7082ACDE477C3D77C60A10569B4392F5181DA33C6EB3866E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  networkinformation/qnetworklistmanager.dll
- Size 69KB
- SHA256 8de339b75f82efac6381ca01e3dd3482c500a9115c49b53fbccafe0d933eef64
- MD5 c10ceabe936f848ee2c96418edebfc5a
- SHA1 b2bf4cccd2431d17d8e2f087885838187070e23e
- SHA512 b96568ce2b70e3e2be4cd1d26a290da5ef0b121a9bcd8990e9a9e54e6fcd9fa7b911d1dd6c371de2ba07f57dadb416c6ea0ca7bf49df23da61217b4bd0b01299
- SSDEEP 1536:zFdGtuyuhbhR8KQsmSMEJefEUEXi5+Qx3jps7ui2:373FhSKQsmSMEJ2EUZZps92
- TLSH
  T1FB634A56A7A84489E426C23DD9E31F56F672F46107228BCF1761831E0F733C16EBEA81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  platforms/qwindows.dll
- Size 983KB
- SHA256 dd126e2a47f7f3d4a855981e9d4012076058b1440f6900b9a07aa950e4e4f20a
- MD5 4cae29bada2173718689e037d346ddac
- SHA1 435cf4ff7c94223ae11bf030ab415af9b01d0713
- SHA512 20f40799d6939493d532a01912eb84dd591fb9f851d446209260c5f79382d87d468e4de3131526c1ab295ffb7569542f3b86ec81b411f9527c951c62e0396b99
- SSDEEP 12288:bTtxVV2OA9YVQaF/pWjuh23xnI99zp4ztJ1IiYoxQIWBU7OPJ9et:bPNjVQaF/pWjuh23xITzp2tJ1IiYXjet
- TLSH
  T1BB256D1B63A80295E83AC07ECE5B8712D6B3746903A186DB4161DD1D7F377E23A3CB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  vcruntime140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  vcruntime140_1.dll
- Size 48KB
- SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
- MD5 cd1b08f4930b276ad78853580b76b5c6
- SHA1 a0330279d3d0d47f19ed984726e25260b547a228
- SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
- SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
- TLSH
  T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Adds Run key to start application

Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32