e6681d3b9e6adcb3dc88c98aebf41bd5a41a10daa89d6b2a5ba8addcab907cf8

Sharing

Copy URL Twitter E-mail

General

Target
dawn-installer.exe
Size 3.3MB
Sample260718-2hgswaev3j
SHA256 e6681d3b9e6adcb3dc88c98aebf41bd5a41a10daa89d6b2a5ba8addcab907cf8
MD5 29a2a0fbde4a6abc4c51430df5d4c5bb
SHA1 e38381f6d52ed85f0dcae723ed5f3ecfbc0e930d
SHA512 e2f854476ec04f92ada4add5aedcd299ab03d31d0dfb64c06a774174adab4a61087bec4cc3e16d43d8319b6c5335a2e3731d086f34f1934bc0b98b9160e3e15f
SSDEEP 98304:5vn0CBVqlto1BFJZLY5GWo0D/0siRANCJTdCYd1F57:51Lqno1NZLQGKaRDJVdbN
TLSH
T162F52221A44D9467E65E2A327301FFA609A66FD514CE5032F6473F6FF836BB2E904903
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  dawn-installer.exe
- Size 3.3MB
- SHA256 e6681d3b9e6adcb3dc88c98aebf41bd5a41a10daa89d6b2a5ba8addcab907cf8
- MD5 29a2a0fbde4a6abc4c51430df5d4c5bb
- SHA1 e38381f6d52ed85f0dcae723ed5f3ecfbc0e930d
- SHA512 e2f854476ec04f92ada4add5aedcd299ab03d31d0dfb64c06a774174adab4a61087bec4cc3e16d43d8319b6c5335a2e3731d086f34f1934bc0b98b9160e3e15f
- SSDEEP 98304:5vn0CBVqlto1BFJZLY5GWo0D/0siRANCJTdCYd1F57:51Lqno1NZLQGKaRDJVdbN
- TLSH
  T162F52221A44D9467E65E2A327301FFA609A66FD514CE5032F6473F6FF836BB2E904903
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution persistence
- Adds Run key to start application
  persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NScurl.dll
- Size 7.6MB
- SHA256 efe7d99833a05f3d25cb7b151f156de3b1ee347306d2bc23a920828d3831b06b
- MD5 923540c263c7e649801d996a5abe6151
- SHA1 622133ff6d471a1f1b34ee6c06320e744403f4ce
- SHA512 5ff4c3b28a15fd22f3294a397f638031e0a53efcf96fa7cb46e2397a193e5beab33dfcd627a5dfadfb136903afeb0b40328e41bea07551edaa9e5af2e855f986
- SSDEEP 196608:U1eO+SNs5e4BWrZay5LDTs4bY6Bj5vuMYAKzOZE/XZfZZ21jPB4:WQcFuMU7Sq
- TLSH
  T1D6864A94FFCB44F1E90788B088E7B37F8B34A7158025D6AAEE5C1E56F933701161A35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
- MD5 c953dd0aab774f1446fcd63fa7c5f613
- SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
- SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
- SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
- TLSH
  T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8