cee13e96f1fc70f74795722ebc01be5172903d9b071adcfa226c5dd9db548abc

Sharing

Copy URL Twitter E-mail

General

Target
Sandboxie-Classic-x64-v5.73.0.exe
Size 3.0MB
Sample260721-pgc23ss1gt
SHA256 cee13e96f1fc70f74795722ebc01be5172903d9b071adcfa226c5dd9db548abc
MD5 ec7d96fa645c195e8d3b97149bb3a577
SHA1 adc0c7ad1c1b55c97584d64feb5fc15a87dacfec
SHA512 8f06d10560b1311aba5fa58ac29b27285f34e075f7ce051ce4c3902fc81be6afa2029f04435b5bd11084789d7bbe0bf78e808cdb94fc11833135e1a1769bcf3d
SSDEEP 49152:JhY9fR7Vi+DsS6eDI+eWdfJZl5xSiqj4ea5bMkF6TZzOSJdfpdcLpwRaW40RP1TA:vMpJD9J8+ewl5Yi8Ta53F6TZO6dfspIU
TLSH
T127E5330BA2E4CA76EA7E1FB71D458FD7A3B624491C511B436ED1A93F3E40052AF168C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery installer

Malware Config

Targets

- Target
  Sandboxie-Classic-x64-v5.73.0.exe
- Size 3.0MB
- SHA256 cee13e96f1fc70f74795722ebc01be5172903d9b071adcfa226c5dd9db548abc
- MD5 ec7d96fa645c195e8d3b97149bb3a577
- SHA1 adc0c7ad1c1b55c97584d64feb5fc15a87dacfec
- SHA512 8f06d10560b1311aba5fa58ac29b27285f34e075f7ce051ce4c3902fc81be6afa2029f04435b5bd11084789d7bbe0bf78e808cdb94fc11833135e1a1769bcf3d
- SSDEEP 49152:JhY9fR7Vi+DsS6eDI+eWdfJZl5xSiqj4ea5bMkF6TZzOSJdfpdcLpwRaW40RP1TA:vMpJD9J8+ewl5Yi8Ta53F6TZO6dfspIU
- TLSH
  T127E5330BA2E4CA76EA7E1FB71D458FD7A3B624491C511B436ED1A93F3E40052AF168C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 254c5ccbce59ad882f7f51d0bf760cabde8c88c5af84e13cc8ad77ba0361055c
- MD5 046074d285897c008499f7f3ad5be114
- SHA1 159040d616a056ee3498ec86debab58ef5036a55
- SHA512 ab7436fda44e340dd5909ddec809c6b569a90d888529ef9320375e1aae7af85afcab8c1c1618551d3fe8d6ae727f7dca97aa8781b5555da759d501d2ccd749e1
- SSDEEP 192:+Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijqK72dwF7dBEnbok:+GvdH4qMebzPY2Vijq+BEnbo
- TLSH
  T1CE623B51638888F3DBD6013EB4533707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/KmdUtil.exe
- Size 210KB
- SHA256 7a5b811d9eacaeccd7056e6c49e2d92b13ba3eaa41f02f3009e0cb19d27e02e4
- MD5 f7abb2c4961514bdf67bdcd633186187
- SHA1 d5774d88350873906f147c80793518bad43b0d72
- SHA512 c82bc07b20d63aecf739e2aa3261f59acf72a75b67b8322feceebd03617d116daf413d8e414e14eb8de22a47c193ddedf8891c506f567c4e4c64475382bf3891
- SSDEEP 3072:WBe3ngbC8VzYk1bI1baRAOt8hBAt/Nxb1QEez/Qvsi5Lw77Ksvu:WBm8Sk1mbcAOwmF0Z77Dvu
- TLSH
  T1F4247C51B3E500F9E5B7C23989A65612F672784107609BDF03A443BAEF23BD05E3DB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 09477d605677bea48019b896f068ce6c2e89004e5c5f0a86c0276db30c6515a6
- MD5 4cdaaf5da900a8eaed090cd22b8f8781
- SHA1 6c7d9cfd96e66d236b66b8d50d65083a0dbb1b11
- SHA512 3797d59aeb908dcd66c63eca76cb2064416d3b66033dc687bc7a9c50e2979c42ac94773f54bc8ec45a9cd69c8056b83a2bca6efcd703f71a4b5f67e166f1e06d
- SSDEEP 48:iV6HAvq8WeMPUptuM4Z+0x/ImnycNSCwVYOY4vnpXTHhHX/JvR0J/of5d2:2yplJ5ZbnycNSCwVYTwFB3ZR0Qd2
- TLSH
  T114C18677B3C149F9D6854633251373C3A7139E307359800F9B6712AE2924CAB9D6E793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/SbieDll.dll
- Size 991KB
- SHA256 1070faa9144520888e2d5cb0385738b78d3b428df3614c131fd00359dc946bf4
- MD5 2178cc6e94e49680537c7b160033e62a
- SHA1 168f688e9093735e8d7974bad4c4184c86235dd0
- SHA512 9d0b1096086f70ea8616665152320aeb95bc629829147911a59d60e52fea6d49a77291efca23e95812498bde8defb0801be5856c01cd2708b976298bc0e9f281
- SSDEEP 12288:8c70CHWCDD82nG3cDzeTIqkMEHXiuiMUUVENb/Us:8c70eWYD5YIhcMU8SbUs
- TLSH
  T149257D45F3F81298E97FC179CA639617EA71784417319BCF01908A892F63FD3AA3A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/SbieMsg.dll
- Size 3.3MB
- SHA256 fe20d4d7e91906573a9fb0f5a70bfc578bd32538dfa0b783b16d523c157a0b6f
- MD5 c205baf078f2495b96b46819f5244b29
- SHA1 73b14a396fb8c8aa76af0c17e4005e753aa4b14d
- SHA512 20fe7e325ce05e35e35083cf28bfa6dabb80afc5019e595db107c3b58e71147331ebefcacd7e75a136aa803374f8261f5b56b2d53eaaa243f77fbc1a8674ce3f
- SSDEEP 12288:7DKYk1o+cLvlSePy3k2ga62IVS6I85RXvPz/lksWULuhMl5QIuby:H41iSePnk6+6I85RXvPblkHC
- TLSH
  T136F5440767FA4118F6F3BB2169B542B15B7BBDD2AE3CC51C0285616D0CF1AA09D60BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 4ca5bf1beb4b802914c4d3e2f37861f6ba5ecf969cfeadf5855edf58f647a721
- MD5 0ff5120f1afd0f295c2baa0f7192d3f8
- SHA1 bde842d5d11005dcb4ff1d4ea97da31865477697
- SHA512 e049ffd7aace8d136eee007ee4f8dbc2ae8f3dce79d1c633d9654392240f8215787df8a6d08085257db51f28ff2a8023a13333dda3ea7f9bdc8b9c57b605f0a0
- SSDEEP 192:Xv+cJZE61KRWJQO6tFiUdK7ckD4k7l1XRBm0w+NiHi1nSJ:Xf6rtFRdbQ1W+fn8
- TLSH
  T17E225C5893E0C1F3E6A0853C18573A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  32/SbieDll.dll
- Size 803KB
- SHA256 8e60007f705f14e3f908d868ce6dacb5be37539482e65ec8612fca9f7d703a06
- MD5 500e46fd04895523845d3d5092736023
- SHA1 7ad9f89a58a825dd82c5986303c0879cafe343c7
- SHA512 b99c3fb80f78c4def190b68174ea45a2672c1fdae176e5e72fdbbbd29e65bd039d66bef89a123313144d84a104250c419fd01d98b116fd55b0d55f34145fb65f
- SSDEEP 12288:unbc0pDKb1riCe6AWd/sZQ85sP355X2uwakEzDJ5ZPd1kDpcCv:MbpSriMAWd/pwsP355rwaNzxdCDWCv
- TLSH
  T1C0056D51F7E505B4F7F399B006BFBB69583AF5044731E8CB00E4649A9523AC1AE393A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  32/SbieSvc.exe
- Size 353KB
- SHA256 1d7b99626fbbacb9fed30d9587d1dfcd4b3aa3e6c3f42f988dee624177f422f9
- MD5 067642b661b63f336ae7d15da485e4cc
- SHA1 77a84e99235203442e05915617f6d10624724203
- SHA512 eb1ea2ab5745dbeb7b7a5f763e51378bc5f1db303863932dbe29f0d0e593dfdbd79374316026ddd77315c2909c7c53299cc0c078c755badac0d1484a2ab0ac32
- SSDEEP 6144:bAvB5R15gg2gss2kXc2vczV4xhGijqQdRpjMSoO7ht/KcuGltU9d73ERLjX/p7:dg2gssYLzV4zGdQdRp4SJuR9d3ERPv5
- TLSH
  T147748E01FC41A03AD5A205305AA9FFBAA97DB8300B5474CBF3D45EBA5A306D1B73476B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  KmdUtil.exe
- Size 210KB
- SHA256 7a5b811d9eacaeccd7056e6c49e2d92b13ba3eaa41f02f3009e0cb19d27e02e4
- MD5 f7abb2c4961514bdf67bdcd633186187
- SHA1 d5774d88350873906f147c80793518bad43b0d72
- SHA512 c82bc07b20d63aecf739e2aa3261f59acf72a75b67b8322feceebd03617d116daf413d8e414e14eb8de22a47c193ddedf8891c506f567c4e4c64475382bf3891
- SSDEEP 3072:WBe3ngbC8VzYk1bI1baRAOt8hBAt/Nxb1QEez/Qvsi5Lw77Ksvu:WBm8Sk1mbcAOwmF0Z77Dvu
- TLSH
  T1F4247C51B3E500F9E5B7C23989A65612F672784107609BDF03A443BAEF23BD05E3DB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  SandboxieBITS.exe
- Size 131KB
- SHA256 b30ac15a7f1bfbd1ccc6f35482ad0d56c86a6a4b5df04468eab5bd74027a3860
- MD5 8b389c1f4e2e8519fef1dbd8477a70d5
- SHA1 eb2c0cd36438e00a01f4bea257e569737c08b9a0
- SHA512 a165d8e94e03f6825ea138ef5bf5e59024f09eded00d6c5d6f9fdd68adf55ac562c20c657c80fed06090630bc489caff99d3c2265e82b7c8bd8d8a4875696d5b
- SSDEEP 3072:87dU8hN2zKH3dy++12EeyXDAUdjREvSntBe:8qU24I12iXDA2SStBe
- TLSH
  T155D34A5763B530E8E5B28638C5958A659732FC714760ABAF03904E9B3F233E14D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  SandboxieCrypto.exe
- Size 167KB
- SHA256 a5b913af88d726d0db90ca1c09681c5b22021a3d6f9805d8b6f1e6795f304d76
- MD5 5c5613d11ed311355c773671e9f78299
- SHA1 53626358227a3a05d7be5a002d6e849c83c8da23
- SHA512 10e3504fd665c07247c208e75716a48b53917b5cad94876b322a914888a230ce788248f868bf9f1ae42d3b751d5e02c7e6ff7a17b3005dfa97bb08e415c0a87f
- SSDEEP 3072:R6uAUPKVjwTlXBOj7U0ktOjmcUhrmA0KAn0mD:oxQwklMjvktOjkw+AnbD
- TLSH
  T1D1F36B4773A530E9E0A78238C9A18A51E7727C714B609BDF03945B6B3F233D15E3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  SandboxieDcomLaunch.exe
- Size 169KB
- SHA256 3913bb90975088d6f2a47e209e33e49506875ae4f5dfbaf757211019acb34801
- MD5 53c8afc404007a404793e2dc40dfa41c
- SHA1 0286950048d27d835822a12e4fd40d374a9f3f36
- SHA512 337430cfc95ab358d6eab653e1087fff3639ee3d813a8bba9405a3029d9a41c6060e607e2e7683c11351d304dd95893266e4111dd7619829edb76686284627c7
- SSDEEP 3072:zaZjwp0VatzbZPdjUvDE3RIJJt078VlMfHn:bmot5BYDE8ywl6Hn
- TLSH
  T1C3046B5772E430E5E1778238C9628A55A7737C750B609BEF03A44B6A3F233C19D3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  SandboxieRpcSs.exe
- Size 185KB
- SHA256 cb2146347b2dd592beb9f2bb7ba5a4d7bbd5b3c8ab2c858924041f646b49aed1
- MD5 92f731247c0ecfbc792c19be29c14d6d
- SHA1 299584cf82679a6e3c5de42dfcea3e6d4c7f8493
- SHA512 ad02ceef2846511a74ae26c2e5a4408da0705fdc320b37fd719456975369d4d2419d53122d8b64bd0fc6fbb6367290bacd56ed118f6348a8a51acce4310938ad
- SSDEEP 3072:AuyRJco2JjgMzvp8CgLrpqrnXUDd+H8+4wBDjueT:AFRG5JgMPYrpsnkmpHtT
- TLSH
  T17F145C57B2A120E5E0738638C9A28656E7777C3217219BDF03A04A777F237C16D3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  SandboxieWUAU.exe
- Size 133KB
- SHA256 3c6b839c3ebab0000971972071534030240d3d85dce0c07af005c8acae653c6c
- MD5 fcb5bc9b47e7991032db705fae938ab5
- SHA1 5069450cb81e7b46c7f520093dc0fdb823cfe607
- SHA512 ca5286d9ca729cff2f77746024ae3c6dc32974c60cbfd18d98f5c32132711f7713c038f0640e479fb5f0507f089c3d5bd74a23e9f7a84c76016dd6957a1631dd
- SSDEEP 3072:P/0IrDWcxB2jC3L8+D4U/v8tzydLBAbo44WRBz:P8UDO68+Dpv8MLB7Ovz
- TLSH
  T170D36A6763A530F8E0778678C4A58A559732BC714B609BEF07A04E5B3F237D14D3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  SbieCtrl.exe
- Size 3.2MB
- SHA256 0a1467b884272cde174ebcac9d5ebde83b2528f9bd26f48782db796f216e8fd2
- MD5 7f47d8cb7c6c5d9314d0ceae6a028761
- SHA1 afa1be9a1942b9f9e9617ee2a846ccce6bed3e0c
- SHA512 8660b1fd2ba6517451bbf0ef96844d2088a730acb19471cc8db12bf6ad7e64e23d7ba297c4c90c58b1bf1f47db2a41f275147402b689b049b70b0d6dc5e33de0
- SSDEEP 49152:+qqpDe5vJwRe/7GCyVVgYxodVniU6Ltr5sJFu+yNgdo7N1kgbLMnCVgy4FijK:UrHtaFuBZX1bUDbijK
- TLSH
  T17CF56B8962BC00DCD5A6E079C517453FF6F1B843473287DF40699B9A2F3B6A20E7A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32