67c73895fffa2dc7698529ec6286d731e547339d2ddeef6ac91a14ad10ccdada

Sharing

Copy URL Twitter E-mail

General

Target
GrammarlyOnlineSetup.ch7VdF9dbvcoaubmat9j0782.exe
Size 95KB
Sample260722-b1yk8she36
SHA256 67c73895fffa2dc7698529ec6286d731e547339d2ddeef6ac91a14ad10ccdada
MD5 9624f4fc7e1f8a76bf998463c4227cc0
SHA1 692dfabf9ce563554203fab3fcba0cf47308ba75
SHA512 2b6c1778b759b1f4cfb018060cd1a640cda6deb644783c1d8ecf33df8f1d84ff77a33f33002e4954c94b992420af30970d133f39ddea95e308fbf5f6e04d4302
SSDEEP 1536:3rX4tpfcUjrwLxZYE8ksuDvOG1vFRc7Fm/mC+VdHtV5AIx11vBD7W:7X47fcIrwR8ksub1vF27o/mC+Pn5AEfq
TLSH
T171A3BF3567608863D923CB306BBADB671EE6AD21D4F4734F235076887E322539A0F791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  GrammarlyOnlineSetup.ch7VdF9dbvcoaubmat9j0782.exe
- Size 95KB
- SHA256 67c73895fffa2dc7698529ec6286d731e547339d2ddeef6ac91a14ad10ccdada
- MD5 9624f4fc7e1f8a76bf998463c4227cc0
- SHA1 692dfabf9ce563554203fab3fcba0cf47308ba75
- SHA512 2b6c1778b759b1f4cfb018060cd1a640cda6deb644783c1d8ecf33df8f1d84ff77a33f33002e4954c94b992420af30970d133f39ddea95e308fbf5f6e04d4302
- SSDEEP 1536:3rX4tpfcUjrwLxZYE8ksuDvOG1vFRc7Fm/mC+VdHtV5AIx11vBD7W:7X47fcIrwR8ksub1vF27o/mC+Pn5AEfq
- TLSH
  T171A3BF3567608863D923CB306BBADB671EE6AD21D4F4734F235076887E322539A0F791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan
- Adds Run key to start application
  persistence
- Downloads MZ/PE file
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/Banner.dll
- Size 4KB
- SHA256 42c9387cb1749bf8338d5a6e6e8f598a22997e4cb9472da8dccc75c44b48f59c
- MD5 2dffef22d117e60be69ad89cdd01dc19
- SHA1 d39efb73bdc7a5c8f89c1427f0d9d284c501bf13
- SHA512 9705ce9b0c2cd1eeeebcb9a951b029ca7b990cf4c4bddac2dbe1c57a6f5dca3f8b47d96a29d3cfa070c317837f9c219646489ef6435ef5014f1b143041770ac2
- TLSH
  T1F281633BB2F04EF7E563023300830BD3259BA9546728471A4D6791ED7A4A9D7D53DB02
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
- MD5 8fe362ffdfa66269b8a64e3a87f68e52
- SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
- SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
- SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
- TLSH
  T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8