f6f930ec5ef8040c482df59545179c0bec9c5b2753fe440e35244e406dff4f87

Sharing

Copy URL Twitter E-mail

General

Target
CurseLauncher-Setup-0.1.0.exe
Size 159.7MB
Sample260718-yz2ylaby5n
SHA256 f6f930ec5ef8040c482df59545179c0bec9c5b2753fe440e35244e406dff4f87
MD5 ea71a3f4d8dc1e17531eeef45087e8c6
SHA1 4fad19a027f29385697efd60b2d9ea968ffdf25e
SHA512 8b34499ce2bf160d7aa8b9c0edcca462fee7f4e2277aa74fdb6ffd53cf448adcb060575105cc6a554631180aac55089f54179f32a27583fa85857dac39bb7d5d
SSDEEP 3145728:5oTm4PFa0dJuBuINwerDQj8YXLskw4s/C0VuBCH1yVN6DATMN6jFmma:WC4PhruBuINwersDXLskw4x8xVy36FCY
TLSH
T1CE883384A8CE2560C6829C77950B83AF01E4D62606BBF31FC71652BFF1E1CF1E5B5992
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  CurseLauncher-Setup-0.1.0.exe
- Size 159.7MB
- SHA256 f6f930ec5ef8040c482df59545179c0bec9c5b2753fe440e35244e406dff4f87
- MD5 ea71a3f4d8dc1e17531eeef45087e8c6
- SHA1 4fad19a027f29385697efd60b2d9ea968ffdf25e
- SHA512 8b34499ce2bf160d7aa8b9c0edcca462fee7f4e2277aa74fdb6ffd53cf448adcb060575105cc6a554631180aac55089f54179f32a27583fa85857dac39bb7d5d
- SSDEEP 3145728:5oTm4PFa0dJuBuINwerDQj8YXLskw4s/C0VuBCH1yVN6DATMN6jFmma:WC4PhruBuINwersDXLskw4x8xVy36FCY
- TLSH
  T1CE883384A8CE2560C6829C77950B83AF01E4D62606BBF31FC71652BFF1E1CF1E5B5992
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  CurseLauncher.exe
- Size 168.9MB
- SHA256 3d736bcc1c7e75d40d8d8e9fb82b27951753123ba95ecb34c6cbca308e7308a2
- MD5 f08dfdc891676017c35af88fce59bb46
- SHA1 748b4b512de45e4f143d62f8d9680c37841fc20a
- SHA512 d422d25b4116356501a25d1d25fe592119ecedd4d6a82adb72f7adfe1424136ba35019813cad4ddfd51134b1d06f4d38aad6f9ba8797dbc00d00a92848b0fe15
- SSDEEP 1572864:JMw5SJUgPbksdRW8YcrVEGPv/fNsYCdwl0KWCfLM14GYoQt0imGWgyTpQGa:1unRK2agyVQ1
- TLSH
  T1AA888C13E29A50D9E00DD1B187879233EA72B84A4728B6DF2B5447563F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  LICENSES.chromium.html
- Size 9.8MB
- SHA256 c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb
- MD5 0ff177fbf2a3873dd573077840e0b8f5
- SHA1 03d06bc7cd894399a5fc6600a0210f6e3226f92a
- SHA512 3264becd3103c905ab7f9cc034320885f18cbecaa45f582a4a9567ca4bcd620d64dc59fb03532964e775c35f07928a4497f5529cf1b9dc18379e4e9cff02ff8a
- SSDEEP 24576:K+QQM6Ms6x5d1n+wRhXe1BmfL6k6T6W6b6f6V6GeGj/3BIpx:LUzeGdY
- TLSH
  T134A6A52F7B48037706C642627B8BA5CAF21E903F3B561654344CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  resources/modpack/mods/MacroKey Keybinding-1.12-2.0.3.202.jar
- Size 85KB
- SHA256 f475df07df75b9a1023139aa316d384efa66ed071d1eebed7baafcffad8bc0d6
- MD5 e9c3e5480f2a16f7a40165854bce8277
- SHA1 db52cdca91da60f40f9296aa97d092a1d5ada7fd
- SHA512 737eedecb0c65ed15bb6f92117f3b7bab1f007bcf768bddc0b1c434f489ec392eb626fa08edb0aa705527e9eb2a060eb4c1a688e19c96ce497f4d396d225a8ea
- SSDEEP 1536:EvriJ8EICSSdt9WiukpRVXf/pxkz4jrp9pRRY+gPb:EsMSdtc0RVvRx44vpRCT
- TLSH
  T1C7838C16AD9DD55FE72798B5032AE09A6C1A0BB47071F40B82EC3E959D30D2143CBADF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  resources/modpack/mods/[1.12.2] SecurityCraft v1.10.jar
- Size 4.0MB
- SHA256 75cd42d1cc0cd999c5a1d169869995533dfbc94acc472bd08f7d536043da3930
- MD5 ed6745e3f376fef60f8e4d48a620f79a
- SHA1 5edb3c34e0ee432e95d08c3905c0eccfdae69e44
- SHA512 12a67b0c448cf53d87bb024dc2dd724df8ba8f717122b7212163afccefc810fae0e5552934d9bc633a4a121c6905e0bc344e71e9de68c93a115bf5ee4a118d59
- SSDEEP 98304:hBPmQ/PdLKyfAMv3dKEuUZjRxDRm0qATiBWQ7jw:msPcyfAy3dKexDnqAOC
- TLSH
  T11716CFD6EABF946BD00B807B80725477F024DE9A8442D27F7271A849AD9DC0A4317DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  resources/modpack/mods/blockbuster-2.7.1-1.12.2.jar
- Size 1.9MB
- SHA256 76163bc33a17709891178c2f9edca86399b1c533b0230174f9d4bea3e2cdb047
- MD5 f40caa1d9a3cc9221d0882cd8fcdcb41
- SHA1 6bd1b06c68f5fba9d2feb951302f262d5f76fa47
- SHA512 fe4cc828971aa6ee2581fe4672e78974dcc6f21d05dde010fd6447e250339a9f368e4bf129091b93b2ee6aa4ad9af4fc1f26d286767af81a32d8c715435d532b
- SSDEEP 49152:q8nJavdpoEhGYMLNy7MA4ardiIBYweZHQEIY3tzkGrO:qAEPo+GYJr4a8I2wKwERtM
- TLSH
  T1CA95E16D68F885F4CD63BA358E40C42AA0EC0266572AB4B7A5F9D6471C6FC44430BFDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  resources/modpack/mods/emoticons-1.1.2-1.12.2.jar
- Size 2.0MB
- SHA256 38cc1b37caf13672daf6e223a77f94f68155e78fdef6e3420a6a716e7a61c7ce
- MD5 3be77b015d89b68a086adc9338458a1f
- SHA1 ebbdbbfa0e7389be2866480c5c8d4e7451501eed
- SHA512 386251db3aac5458615fbdead66ee85a6f4b8ce2e0d873b14f9d921b0e86795970bcee7e00319c22909d0ff57da98a7670210717f1d52b4a5aa1c397bea42fb6
- SSDEEP 49152:tye8Lcb6QhYdYjCD7VEizcA45fHG/7Tnrr0ofLnatOT+W:tyeQYHoYr5+fn3ZfjYu
- TLSH
  T1389523193D8958E7F2432FB85062694AFC9776458868EC7F98B0A881CC7E891434FFF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  resources/modpack/mods/furniture-6.3.2-1.12.2.jar
- Size 2.3MB
- SHA256 f412373512e14b431736ec54f465bf196b81c07939fa484202f457e1c0fbf144
- MD5 c337d9b9b5465ba6ac78a2ca9f3dbf7c
- SHA1 3214f030651e7585a076bd96ba3863e2fa1b6676
- SHA512 73884074cb00b96e4bd2b49aa717cbf9df940032f34f00c34f1aafaf3feddb20ce5c84da6edc83ee053d37fb4761aa519388564a4d5427d774027b2ac2198fda
- SSDEEP 24576:sBYrJEJMdr6Yk6olblZMJ/6dfgv6pFfZxzjFfIlzMzxfjLvzOT5/nZgo7hUU0bgQ:+JMdHoSJQBr1bpC5/ao7h03Z0g4sVv
- TLSH
  T190B5BF3D6DACC95CD28F58BD1D168CC39A084F59A440FF6BA6749C48AE2DC442326DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  resources/modpack/mods/mclib-2.4.3-1.12.2.jar
- Size 749KB
- SHA256 55acd32583b01851aa58fd551743ddf71e3b6f7c0dec1503bf7799e0951ef1a3
- MD5 99926b655d86cc15823ec350138bf27e
- SHA1 450948175153effc4f30f593a12ae0d8f6421873
- SHA512 152d32c39f7b2f69dc71e052657b7884bfed5de8419e4be688fe9863e5b106176a2f00b9b93efe4b9e20067f5c3013d0384a4a0061b08e6dca61db47223272da
- SSDEEP 12288:OcBmfRPjVPiOhiwiN9XsE3YnUaYTcM2qwe2ughS+Qi6UV4O0Ww:MRRP3hiPhsOYUa8eT3nQi6843
- TLSH
  T1D5F4D01B38DC5974F99BDB35E0A1D91BB878429EA10AF45B78B14B8B0872DC50707FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  resources/modpack/mods/metamorph-1.4-1.12.2.jar
- Size 411KB
- SHA256 c12987321d7cc9cead972e632576fd732606caa522d0c60fd5e8853494e57550
- MD5 e54a9cd422bb876fd4805486198520b3
- SHA1 108567e4887640f8b6154e7d91c9c75bc7e5c8cf
- SHA512 10f0197b387e9cec50df5e33b32898f7e1f88235d70da1a9b9d114d12d2eadbe8e62629f4818ca892e445992eba0eeb14a79d9836569aa89cf09e196b7a064f4
- SSDEEP 12288:A0lgbX2OQxLfxgq3SQQi9RUoq0Bj90WMPQ:tmbmLL5gmTQQvq0XMQ
- TLSH
  T1C794CF17AAEC80F6DD53B7351088C552F42D9E9A7B0AD47A63F50E4D0C66CA40B13FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  resources/modpack/mods/proxys-lib-1.12.2-1.3.0.6.jar
- Size 32KB
- SHA256 cd49b39abbd9ea2a3841c8b7ff968c272be90e3cacdad9f314d2b8399a0ac5f4
- MD5 a22deedfd5c62930f3c99bdfe4960213
- SHA1 efd5dc53ae65ef02dcc21c92a4385537211e65e6
- SHA512 d7e76dcfd31ea02964158167fdb3f0110c368cbac6db02c0dcd4bd2b3ea4d757a56ff88fa96bf99fbcd9681aa1b80a235ad5a61a61e4233dc75dd3735c69527f
- SSDEEP 384:QRXjEbMpFhwiwnsG7QYEixFInLfcDUvMgtF9u44nDEQNy5swXFpaEystYvDfD4fT:uXIOhwi0s8jRFyfPvp4hN/w2EcvTD4
- TLSH
  T134E28DE25CAE8ABFF39FC339A580E297B94E0950450A5757CA54AC673B29C018707FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  resources/modpack/mods/spooky-biomes-1.12.2-1.2.0.19.jar
- Size 208KB
- SHA256 44584a86717c3ca86fd9bb730b79c1c6ba777e020c5a8a1043e8bc2ecf64f694
- MD5 2d14d8aa213405654f38337fc463fdf6
- SHA1 4a7d56b93126694cba18b5729b4c2fe1800e8fe4
- SHA512 20ace52215f1a215efd36a6af6a2977eb758f2a44a4135755f8b95c67065cf6307f329b969a97b5ddd7d34f5aeae406e0afea8b1ff4812cf1dc203299c595909
- SSDEEP 6144:7TGKCSflJ1V5tgg52jKWy/sZdjx+we3bS5gC:7TnflJr5tggojKCK3tC
- TLSH
  T157243C0B6BACECCBC04E99BC9D05579AFD099BEDC540F07B86669C442C59EF01601AFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  resources/modpack/mods/techguns-1.12.2-2.0.2.0_pre3.2.jar
- Size 26.8MB
- SHA256 154d3d794cfd74252f2cec979a6e72f5187bb9c21897ed4b42f45771a0e558f7
- MD5 dbae09102aedeca925d4b3546685e5b5
- SHA1 65a5cc41422bc665ec4b7d5e115efc7d95b002d7
- SHA512 caa7d0a2a77b1746335452dbe9e7021479742ccbfc23e5d90892f2dd78eb7114f39970b731dd4073830c0cf23edb223afecd412222b0e8647879f9d49593724d
- SSDEEP 786432:Rp5eI772WGh7bNZMLPw+IirILDxGErYBxvm:hL77gNZMLPw+ItDxXcc
- TLSH
  T19257331ABCACAF9CC11B4439EA43C043B5D42999C205F05BE1E684689895EC5D3F7FFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  resources/modpack/mods/voicechat-forge-1.12.2-2.6.12.jar
- Size 5.6MB
- SHA256 ff8465e67e25958634e435f6e8412adee38989c66d38793ff71889f84f3cc46a
- MD5 1549063011c1695bc8b99e9b7498a18a
- SHA1 6f5212262bebee2fa02754779b6228c2d4dea1c4
- SHA512 adc316bc2946e1bd95296c58b54a8a9ee7f2f37ebbbd6a496d60f04140e36feb0e30ca4c2cc0b52a380fffa2e028c1ea48a0b69b6f47696adfb20aa81766acac
- SSDEEP 98304:8zeDC72POvcj9xnq9FAOmGMjhTO9McgZ07Pgr08svXez3lbZ/uccCPGb:4eDCzcR8KOmHhTOPgZ3hsvXez3lbZS2S
- TLSH
  T17146123DFE629065D083917A40D3C473B87D42CC924AD1FF25AB156B8C78D868727AAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  resources/modpack/mods/worldedit-forge-mc1.12.2-6.1.10-SNAPSHOT-dist.jar
- Size 1.4MB
- SHA256 f7103d2dfb8d8f63e9dff1525359f2b8c6da9cd9e70688037668982b130b704d
- MD5 6bbc8250b88fd60b1bc0d6103019e820
- SHA1 057b9b4d63e223a0f754b556fd3a56aaa87a1489
- SHA512 331bfef72d7d9f11c60939b8e987084ef8d2f68320607de8f34172cc9cbe305322cb2348db2e3ab1f6350354bbed60587ad6bb2b2ec02c78e309edb8117b0172
- SSDEEP 24576:0fEpOOt9WUmgwqdpH0WRdyjealHN4y2oCWqGvCmHHVaAYCewn:kEjwUmgwKpFyjeGHChG98Azewn
- TLSH
  T17265CF4F3E8DC3EED90BCE326061C462662EC598F105A4D327FC49B6A8A5E451786FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  vk_swiftshader.dll
- Size 5.1MB
- SHA256 6ff65b7a5faf726cf747eca6d6504e885a70664e37dc5e38e0e0cc68bed3bf6d
- MD5 885126e1b9fa17b2d2c70f96242750cb
- SHA1 fc28b7d294536c91f704aa8830e507de174364d2
- SHA512 ee9f229b798ccda8496e30b1f7aa07af4e7e991820d21989af535a36f0b7dd1a34cc06babb0caea8755caa01ce390cbab1e68f3865a18327baa090f1c295e541
- SSDEEP 49152:moaTaX1+4J7dN1uB/t4ABL5V1v+3+mFcpZBqtpM5KZwFlox0ikAiJb1XQGBliYDX:geX1+qULMSx17nb24
- TLSH
  T1C7463803B2858099F05ED179475BA632F232F8811B72B6DF52A41F192E77FE02B39B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  vulkan-1.dll
- Size 935KB
- SHA256 715dca5af441dc220a61fb0f8e66600dc4f9f63ecc106fa43bc683098e00fff8
- MD5 0004c153cbcc311235a0e0d31c679020
- SHA1 45a141107941f231bb49a5278b984a63fa7df41f
- SHA512 d45f5815892368de23c985091202d3b1bdd423cb0fc2448df45dcad0fbf5c0107bc6d95c62e21f4842e4f2411a4075aca1a91106df67896cab3e04f8bf2a3c60
- SSDEEP 24576:F7t2bkeR6V9+8T28zEQ6Z5W1DYsHq6g3P0zAk7mNmb:FYAeR6VY868zEQ6Z5W1DYsHq6g3P0zAW
- TLSH
  T19D156C239A954669D476D034CDC28607CAB178912726B9CF03A81708AF6FFF43B7DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  $R0/Uninstall CurseLauncher.exe
- Size 207KB
- SHA256 73bd375b6b2c634335a3b020f0e383eaef02af8eb561b1d4975e71798ea9e754
- MD5 0196c2a4f88c60269f250c4f913f6310
- SHA1 536f138340f0dc8709b4812702f0d7eed34c32e8
- SHA512 08eec6e3975fbd805dfdeacb322a61102e2f4406bd8d926d40f663cedeb696bcab8dd6c5f61d7936c277c6a1c8475dfdad4f3db824d2f4d31323a63723e47df8
- SSDEEP 6144:A740Iyy7lm5oU72GamXRSV0KKWCG2Ua8T2t0EyL+yav:aCGoUiHm0CWYCLRKJv
- TLSH
  T14E240160B3F1C527E1B64F352BB157E79AB2F111293C4B433781664E3DAA6A0ED4DB80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral26
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral30
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32