a7439ad10f8374bd27dded63d74f44d35d884093d6f78b44707fad66ebdc8a43

Sharing

Copy URL Twitter E-mail

General

Target
Setup.exe
Size 220KB
Sample260723-g57mlascrd
SHA256 a7439ad10f8374bd27dded63d74f44d35d884093d6f78b44707fad66ebdc8a43
MD5 47046d79884fe1e14545b55408e6c0ae
SHA1 90c6e22b07012c6d9a73b99d215439f61dcf7127
SHA512 5163303d424ba6a3f4719e01a28de82ee809f2c56386011c4397374d2531102c28a5dbcd27e869d8bfc4b84307af642ac57d570931e9f55ec82609dca4fae1db
SSDEEP 6144:3bE/HUG2OWmmldovHY6av4TVeO7+FU1FKLJBOFg45n734:3blO+d4YxgTVeO7+F+KnIg4b
TLSH
T11E2402017660DCC3D8E387727A3E973A99BDC27E52746E871304AB2D2E522116B5FB0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Setup.exe
- Size 220KB
- SHA256 a7439ad10f8374bd27dded63d74f44d35d884093d6f78b44707fad66ebdc8a43
- MD5 47046d79884fe1e14545b55408e6c0ae
- SHA1 90c6e22b07012c6d9a73b99d215439f61dcf7127
- SHA512 5163303d424ba6a3f4719e01a28de82ee809f2c56386011c4397374d2531102c28a5dbcd27e869d8bfc4b84307af642ac57d570931e9f55ec82609dca4fae1db
- SSDEEP 6144:3bE/HUG2OWmmldovHY6av4TVeO7+FU1FKLJBOFg45n734:3blO+d4YxgTVeO7+F+KnIg4b
- TLSH
  T11E2402017660DCC3D8E387727A3E973A99BDC27E52746E871304AB2D2E522116B5FB0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Downloads MZ/PE file
behavioral1 behavioral2
- Target
  $PLUGINSDIR/Banner.dll
- Size 4KB
- SHA256 39e3108e0a4ccfb9fe4d8caf4fb40baa39bdd797f3a4c1fa886086226e00f465
- MD5 a1b9bdee9fc87d11676605bd79037646
- SHA1 8d6879f63048eb93b9657d0b78f534869d1fff64
- SHA512 cd65d18eca885807c7c810286cebef75555d13889a4847bb30dc1a08d8948893899cc411728097641a8c07a8dcc59e1c1efa0e860e93dada871d5b7acc61b1e5
- TLSH
  T15981523BB2E04EF7E562023300831BD3259BA9146768461A4E6791ED764A997D53CB02
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/GraphicalInstaller.dll
- Size 105KB
- SHA256 b3f434cffaec74b744edfeb916cd54b2fd0404319178c674e46f6bc65c6e56cd
- MD5 6ff9aa6c53a5035789f57fa3339267a0
- SHA1 dc7603910c8ff0ffb9364cb5e5e2b6afe6f6e72b
- SHA512 981064b4bf3d2cae0afb1baebce2c0f7379eacec8d64c85293754a4c43f74a33fd07a2a6cb949504b9d8662600f3ac24512eae7e3143c1242f679c7473074d02
- SSDEEP 1536:v2JZgqik14o+q5qbCfKIJPcFytROki+GNjFcspf8U5JsIyjWpk6:+JiCjt5qbOjJUFytRr6jFR8U5JsFqpz
- TLSH
  T124B35B15F2409838E0DBC13D46B5A2F1C9DFBDA287D058E73729AB657B726C09930B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/Math.dll
- Size 67KB
- SHA256 8d9a23dd2004b68c0d2e64e6c6ad330d0c648bffe2b9f619a1e9760ef978207a
- MD5 85428cf1f140e5023f4c9d179b704702
- SHA1 1b51213ddbaedfffb7e7f098f172f1d4e5c9efba
- SHA512 dfe7f9f3030485caf30ec631424120030c3985df778993342a371bf1724fa84aa885b4e466c6f6b356d99cc24e564b9c702c7bcdd33052172e0794c2fdecce59
- SSDEEP 1536:GUZ9QC7V7IGMp2ZmtSX5p9IeJXlSM2tS:T97WSth5lwt
- TLSH
  T174639D2276E480F2D09E81B125955F1B9B7CA63087E64DD35F622C86AE30EE1F237707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/inetc.dll
- Size 38KB
- SHA256 a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df
- MD5 a35cdc9cf1d17216c0ab8c5282488ead
- SHA1 ed8e8091a924343ad8791d85e2733c14839f0d36
- SHA512 0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf
- SSDEEP 384:njt65uI9oYzcCaHjl9Cb4I1f0AGhrHXoREnRxtIpH/u0abJ2v2DW9O9tk8ZwkpwD:noHtNQoRSIwTJB6Q/kPyBp6
- TLSH
  T17903E7419BE8456BF7F61638B0B99A53896D7C304769C8DB87134F8918A23C7EE34323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsJSON.dll
- Size 23KB
- SHA256 64b3efdf3de54e338d4db96b549a7bdb7237bb88a82a0a63aef570327a78a6fb
- MD5 f4d89d9a2a3e2f164aea3e93864905c9
- SHA1 4d4e05ee5e4e77a0631a3dd064c171ba2e227d4a
- SHA512 dbda3fe7ca22c23d2d0f2a5d9d415a96112e2965081582c7a42c139a55c5d861a27f0bd919504de4f82c59cf7d1b97f95ed5a55e87d574635afdb7eb2d8cadf2
- SSDEEP 384:n7U5CiIZ1ZC2RvhrTfldNuwQ5pk+BISivMyyOgqCoRUj+OvHxOuofnykhVQJrTU:YoZ1ZnhrTfldqk7Yyy94RxOcVQJrT
- TLSH
  T1D4B21746A6B054F4F57B55BAB4322E232E7EBD08286095EFC73319196860913BB3D333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16