5804e4661f3a752725a60a90cdb2b92d18db03a957167940ff4d9c85e558bb20

Sharing

Copy URL Twitter E-mail

General

Target
ToX Free Utility NEW ERA.exe
Size 37.7MB
Sample260719-2b1bmsgz2t
SHA256 5804e4661f3a752725a60a90cdb2b92d18db03a957167940ff4d9c85e558bb20
MD5 c2c80bfa0411b39ea8f404bfcf7caf0e
SHA1 a8f1413fd238946e9e908d42013961afd497a876
SHA512 4fa551cbf8498dda4c077b31f14cfd30dcfaac338c416df2a0a245c52cc1c9f65ac87c0f6da484208ae61a9815cf534e4affdf2049d075d38fdf7b969d1cae7e
SSDEEP 786432:hTnUeGx+qqZU7/EmbgB83AuPhyr11/rnru4RXc7OtrKI/qzkkEh:BnIhqZKEmOPx1/rg7OtrK4q
TLSH
T19887334033E8095AF2FF5FB9AEBA14808B767D96297AC49D04B854CD09B2F50CD61B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ToX Free Utility NEW ERA.exe
- Size 37.7MB
- SHA256 5804e4661f3a752725a60a90cdb2b92d18db03a957167940ff4d9c85e558bb20
- MD5 c2c80bfa0411b39ea8f404bfcf7caf0e
- SHA1 a8f1413fd238946e9e908d42013961afd497a876
- SHA512 4fa551cbf8498dda4c077b31f14cfd30dcfaac338c416df2a0a245c52cc1c9f65ac87c0f6da484208ae61a9815cf534e4affdf2049d075d38fdf7b969d1cae7e
- SSDEEP 786432:hTnUeGx+qqZU7/EmbgB83AuPhyr11/rnru4RXc7OtrKI/qzkkEh:BnIhqZKEmOPx1/rg7OtrK4q
- TLSH
  T19887334033E8095AF2FF5FB9AEBA14808B767D96297AC49D04B854CD09B2F50CD61B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution exploit
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Stops running service(s)
  defense_evasion execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral1 behavioral2
- Target
  microsoft.bcl.asyncinterfaces.dll
- Size 27KB
- SHA256 f251c93b08880a46320d6cc6e0d9225630794464f86e6e2729036f48124b331c
- MD5 8e484cde5ba7bdb418e4198ba475fdad
- SHA1 6afa1e4078609d227646942ad74c8d9218defc16
- SHA512 27d6c97dd6f897ce33829bdf3fb46b2ce22c163f76111722d84810e950c2f10d0d5e423da7155cbeecdf5f0fe6850b1e30bdcc28550a10f78f8589408c7cb7ba
- SSDEEP 384:onuDmDZGXT6NYkxey0ZrS2Yh0WXIdGl+IW66FUlh5Wep+/WClNt3oR9zFi8dvNe:ouwIOTx2Z22LwJWFUlhmN309ztvNe
- TLSH
  T19BC26D12D36C8323CFEE2FB5ED64D5816E74E38A2C33D639114CE1554C9BB889635279
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  system.buffers.dll
- Size 23KB
- SHA256 2d78d770c9cb997199154ae8c018b9f1d1efbc86729f7264dde6dbad2a12cac3
- MD5 902760412abffbd10be14842e83f0c09
- SHA1 d87680e1a96549cf45506d17566ec08c27a770d8
- SHA512 016a283723e32eedaa3b3c6d92bbd0d4c4d2663ab0f0b74bda56d6d2d742632ea0005b3c0c982ca77dd152b839deed0af07228172f059c9e0840e31b530bd0f2
- SSDEEP 384:7RJyzxhqFAB5n55560IZplFuA6ccxReXWd2WkRnfLXmztvGHRN7LgFA9bFs0R9zJ:FJyYkx60InTuP0njQtaUFQZs49zUS
- TLSH
  T187B27C11D79C422ADE7F1A716AF9DA862E3983C16102E66F144CF5040EE37C9DB31BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  system.io.pipelines.dll
- Size 83KB
- SHA256 03e71241fe75e7ea917365a176a04222cb76f61a799ee58cf10b14a9078e42f7
- MD5 2b0d9fb7332303b75013b138513cae98
- SHA1 00ba070a134f8771698fab25da4d201b31045a1d
- SHA512 54e0288899355402f25b40276d77c14ffbfc88dff01610e1176f2317a4f6e71320ad6d391bf203c4ad48fd917790a75275236367d78ec1e371c3b61d85042666
- SSDEEP 1536:gEqfoDX1DK6+ZXWKJF4uONjTQ4RzY/4bgN0xIRgevBjM8j2npVdWy1zb:aglUZGQFENTPNY/4bgN0xIRgevBjM8Al
- TLSH
  T1BD835B6893BC0B1BEF8E19BEA17456121BF2DB257917E75AA58CF4D908837C046243F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  system.memory.dll
- Size 141KB
- SHA256 d5e8e4866f9cfa66f7765660f84b210198893e55335487afe5ebda342c0e913d
- MD5 bd7f42207f4fdb9c7eafb0013abd7334
- SHA1 96c87b7148805a0adcd4b9e23162deb06d7a4702
- SHA512 a903fda3c5585af8978918c6fa5dd7649e84bee41d0dfa09667e151819d74e16cff626595eb9760588bec12c0b8ec31f527e7dc84800378683156309c3247240
- SSDEEP 3072:IPgSRYPuMbrhcabqwwwUumu36xNOIRJAW:OuPaaWwww4u2HX
- TLSH
  T161E35CBC67C6DD12CB5F8C70A028621A5A31873FAD43F7E615C8E4F425A37A936193D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  system.numerics.vectors.dll
- Size 107KB
- SHA256 20c2fa81b8c70d651099d762954f285fd4f942e63b2d7217c145dab8d4b2f4c9
- MD5 a57f205ce75d4e4a19020e8b627469c4
- SHA1 c5583c3257cf193ff4736671445f8da64366a6a1
- SHA512 6b5985cb7ae4daecd1be3d6dbc709171ec94b89c0671aec1dc7288e08f5fe172900be75da1c43b75fff37504a33e7f8992c66581e562397f47e2ef2cefb46b54
- SSDEEP 1536:2uIaashZlF/cLecJE3+DWG/E2NstmOz+IAKvR7NQcmzF9:2zaashZzWeca3+DWG/E2itDf9NQ7J9
- TLSH
  T147B3DFE22F6C655AD7CF9F7B20E64E120B331963C403D2E160DC67A227A776729421E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  system.runtime.compilerservices.unsafe.dll
- Size 18KB
- SHA256 08cbd7278b66f1e68425a82d4b97181a4130d93e3dd91831407aba7212ccdacf
- MD5 cb5b861883d2bddd9833c9fe956406f7
- SHA1 43290cd4aaf80df5d1cf9f242486ef8e646fddda
- SHA512 79de2065d8af3713662afb2a10e0a62c0821920608cc63cc2a47a09dc7bb6baf1fa71612da3ebe22d410ddc92fe52c0261faa019839d241fe9252d1663f4f4c1
- SSDEEP 384:RGbUedrbbxT4WT2WCwnHRN7bEpGR9z04yy:RGpd1R3XbEY9z
- TLSH
  T1F0827C24C7E44503FE627F3485ACE543BE3893960902D72B2582F57A0C973D8AE35A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  system.text.encodings.web.dll
- Size 85KB
- SHA256 cc56a1a706bf65e7b62292e9895d122b7d1ad8a71b939f3534b5b688ee6aed67
- MD5 198aba95a32b08251ce5abc16e5fc33b
- SHA1 3445ba67765ef708b9c89f5d19f8fb010f4642b8
- SHA512 fb4ac5a49b57b2e21cd2b9a9cb924446c402e892531b19912d4775012963f5ec0d5a714164351495f52ff236bb3fb25e83e35ed9ccc7c4b19c261340dd0bb776
- SSDEEP 1536:LYQU6qF6FmUroWpn5qTQlyydbrkSGeICopK6XqoGMm9z8:LYcqwTrfgQlTBraelona9A
- TLSH
  T160836C12EF9C852AFF5E013B5CA090659BB4EF961133EBC33859781916733C46209AE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  system.text.json.dll
- Size 759KB
- SHA256 46fbc7b353a934e6d96fe2bb467a836d1313a1a9502be3fd6caa69d1522ef17c
- MD5 24a2b13ddc6587bdb68db74d7446bd05
- SHA1 d3e523368ffbdefb8815193d9fd5f61e564cae20
- SHA512 ad04a907da1e84bfb5b8646c6ea9db66503576ceeb11938bec0e343e6575ad2ae995f12def20a67e445391861619a9e2f3b0f373b372beffff33af6f2615b956
- SSDEEP 6144:FUijbPJXV/2IdelcQTy6fKdHfibTxbsjaq/dliUL5ZFFD5wVMRxQx6aUYMFlsjwA:FVbxFO7lcQTJKd/805/dlQVMYx6tlU3
- TLSH
  T17EF45B2077E8D72BD6DF4B71B03089148BB1F61967AAE78F618846ED1C92780AC453F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  system.threading.tasks.extensions.dll
- Size 27KB
- SHA256 af4e13ef418fd89b432de20cd1dfb7fa10a7179c8dd049c9856316e50c5949ca
- MD5 0fff41795a1107691ec1e5054211c04a
- SHA1 3439da9b7918fa0c17836acbe1fa4e05c40119ec
- SHA512 1333847b76025af23a4a4dd421707732078673c96dcdb726a38b477c51606395002574fbcdbf224fd0ae5b80e8da8b2f02dd4972d88f31c36c3dcbf595510e90
- SSDEEP 384:F7PVBSE/ug12sib05JCw0p8CUQefpnQKwU3RymGWuXWJwnHRN7rpGR9z04RI:9PV0iug12TY+bUKmGfXrY9z1
- TLSH
  T15FC28D6183B85113CF6F8E77D2A9CC175F74A3466A02E7391AECF2D40C5338A8A31275
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  vortex.ui.dll
- Size 381KB
- SHA256 b7361e1c6c1ed756760c08d8251e2e49285e3d3988b18ad9757d4c903c5352fb
- MD5 3aab367a5d42dfcfe907e4b648d81b83
- SHA1 c629ba2c989579eadfb73adec3aefa86d5b2ef37
- SHA512 8fb7054fbe868370104f4212e2a476c863c3d2543ac88adc3de791132191fed137278483a9ae9428900b3f38f636184871b24c79a2f82d51b260a87bf46e1b61
- SSDEEP 6144:GE1s/kgaxdXQhgVGxBUOocg0P6POQ5qkAW9RROtHqX19UKDrjiqNvmSEO64AR33Z:GE1YkgaxdXQhgVGxBUUoAuROtHwWqo33
- TLSH
  T14E844B5863448A2FF26F63B8D06649A1A332C152B29FE7AE4DC4D4FC2DC3B7851161B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22