b0c329506e5128d1711b4edac5bee19c1b1b9e9e04d2f8aa94670d38dece5bce

Sharing

Copy URL Twitter E-mail

General

Target
Setup_MakeMKV_v1.18.3.exe
Size 15.6MB
Sample260724-2adq9atzht
SHA256 b0c329506e5128d1711b4edac5bee19c1b1b9e9e04d2f8aa94670d38dece5bce
MD5 e216156f7f747a44c4c771d2fe4f0f9e
SHA1 ea53456e43a95c2a8406a7cabce9af4fd44aa736
SHA512 559a854ee5413d3520028d5d7db109c1cfb33d7521d6c0a722dea55f1940b9fec0dfda611988e23e0675a19c4284512284fa1ae0ce1ba07b2d4a473d1bc26011
SSDEEP 393216:ViELmbf9D0mV+zbmaK0wALhDfNxy6ocaTFd1LXgeIdr/HdnBMxb+:ViESbfVr+2aK0TLhDfNM6w/9QeIdrlh
TLSH
T195F63310BF56F560EA52C330CA2315F689127CC1C6244B7FE7DABDAEBCB3995001EA56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Setup_MakeMKV_v1.18.3.exe
- Size 15.6MB
- SHA256 b0c329506e5128d1711b4edac5bee19c1b1b9e9e04d2f8aa94670d38dece5bce
- MD5 e216156f7f747a44c4c771d2fe4f0f9e
- SHA1 ea53456e43a95c2a8406a7cabce9af4fd44aa736
- SHA512 559a854ee5413d3520028d5d7db109c1cfb33d7521d6c0a722dea55f1940b9fec0dfda611988e23e0675a19c4284512284fa1ae0ce1ba07b2d4a473d1bc26011
- SSDEEP 393216:ViELmbf9D0mV+zbmaK0wALhDfNxy6ocaTFd1LXgeIdr/HdnBMxb+:ViESbfVr+2aK0TLhDfNM6w/9QeIdrlh
- TLSH
  T195F63310BF56F560EA52C330CA2315F689127CC1C6244B7FE7DABDAEBCB3995001EA56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/System.dll
- Size 29KB
- SHA256 46b364f13d089636b60c33d3f6a4b1d2cd32e6af8d9bc29339af0b7dadd21703
- MD5 bca82a3fab6254d30b0fc51a75b3daa5
- SHA1 f51b721a3970201b355a539ab7743e0cff73f345
- SHA512 9aee67a05ef3239c3e728b212cecc389d74e0ae9ec08d07194d79b0dd6ba16f0cec637b848e4efaf541a12a6872e8f0814d06ffaed086aa351fc8ca1a1c27c13
- SSDEEP 384:D1ZNeD4lUtoDp3VZQmR9nfalm+NVin3YkvuhFQiBmIZDjJblVVe/IG3:D1ZN0SDplZVRk0+MvGLBmIdVkAG
- TLSH
  T11DD24D19FB02D8F3D272D5B088CFE637C921682A6B660667FE6B9E09FC33741555C106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/mmnsis.dll
- Size 26KB
- SHA256 5f4df0b078c486008b593ef33bb10c28146524a5372cff9949716e064bcbd24b
- MD5 d8416a241243da2617a7ccdb45fe04d9
- SHA1 18aa0ababfe12a4e06ceb55b27a30318247358c5
- SHA512 2f6a8c38780c9fef831f5d693a04f78b6e648ebe118badfcdff1619a9bd00f73457d5c3d94f90ab00cfa0a9f9b6df4e6ec716c380f7e1e51f91fbc904053d958
- SSDEEP 384:MrlpTvilzBoOIkMlk2PSCBkktoC3wP3gHpzZIn5b2PRtg:ODTvGFhgh3wP3gtsQRtg
- TLSH
  T10CC2E640A7E802F4F7F32B75FD7596568EA7BCA22878D78E23A0091E0871555EC78723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 2b32395df2fea42a3a79db54b29f01d82db71bc090255201e03a6db872942ee8
- MD5 e23b7a59bf4fc0953cd713b8c710ef4f
- SHA1 22d168ac1e8c073b68fa86af28082ae45fdd122f
- SHA512 1b775c58cf50cc7b5fededd742d6f297be247f74907c16e21e5939ce7339f6dfdd88755e52690242f77413d33c252a2cf471871e0d39bebf4c7b4f007478539c
- SSDEEP 192:3tePawtmjSfGLexeQR1A58Ykv/RClhgF6n6SZSMbsoCANt:4iwtGSfGLexeQRyGYkvYlha6nXA
- TLSH
  T16852C30DFF0644F6D572D935508BF72F8A98A415C26F4E0AEF170B1CADA72B2290E342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/wincdarb_inst.exe
- Size 14KB
- SHA256 25daee59449989f5c22d0a3cd74cd4a005277e36ccb75bbc3e2543c6982c510f
- MD5 4fff2d495d145f20d1ea7a29d7dcbd14
- SHA1 2c6bf891c5bef15c22aa4cb8570c37a5616e4966
- SHA512 7c48ea56085fbae750feb310d79fb3112283fdf4064803595551901671bbc4bdb5ec9cc19738de62c5456ac6a0dc5e2c9b0cb864257734db7e03efad11c3daf8
- SSDEEP 192:KwBG7Dkxr/XwrA7TJQeY2ju9KjHhnCwvcW/H1a689aZcZUw9VMXeowHU3JEgrdtQ:/QC7T7ju9KjBCwt8MQU4Fh03Zrz
- TLSH
  T196523A476E9C05B7EFF2203429751E02547FFA906E91BD0397A8D4592CF2CC0E826717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/wincdarb_inst64.exe
- Size 15KB
- SHA256 32c61e1fb073c1c442bc6e4bdda33b5dba6cd89e8817e952218ee8f15924c62a
- MD5 b5c3d6f5731f2277adfe1deddec5378c
- SHA1 9aaf1d0a897ecbfb9e2a7cc9a06f135e327b39a0
- SHA512 a256e91939ae5d7ba6a5a4e7979151890d689c0912700e5ebca42a5fc754ac218b72e9da47e6bd1954360385a9c90917f5e4b19193975852e12dc1d39499cf70
- SSDEEP 192:YuDTNPUW+Ob/Mqlr3dUu5jaKQJjdeY7tfulafSlZd1e8C5HOeo2CLbfyY7T:Y2TrbUqlL3JaKQjemU1e8i7rCLeY3
- TLSH
  T15962294677D80EDBF8B78676C5F10A2161B9F9251721C38F12A0C20D3E6AA81FD76B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  $PLUGINSDIR/wincdarb_tiny.exe
- Size 7KB
- SHA256 feb69343328205b9920583803d52e578c6f2fa475037dd59447cc521b6f52d76
- MD5 78f1265bdbb0696eac5765c4b5b82ba3
- SHA1 cd47067bd09a9a7f5d4a0bcbca718b88f902f584
- SHA512 918e66cb75ca7d39f408faccb4b7ddbffc9e23c76c371458fb0d88eef5bbf52526af5b45c2431b2345ad14a906f8d2f61740a1f116a47ec30409443281cd4950
- SSDEEP 96:hril01uQffUsgOOvnVbV0/XlanzFrxdunL1at+o8UY7c8M8n/QYZz8XiM6K:xYmuQaOgWoreL1at/lY7cD+YdX5
- TLSH
  T10DF1F745ABE809DFF1E64FF40FB21B269E7DBD202328816E47B6888568B1350F51375A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  $PLUGINSDIR/wincdarb_tiny64.exe
- Size 9KB
- SHA256 8cf5ee320b70d2723f9c8b45ab87561fe00cf5394e907e6d38b84ac01a164f32
- MD5 ce3c3f6de72b3665209111796c1faebc
- SHA1 88ad3ce93e7dbec38a91be949204b15b36a8db64
- SHA512 9eef46aee7cdd050968099b709204001cd46f5d187cb27b847572c9b5423cdfaa50110f08b1ba3824ebba5d87af85ca27cd5727d3eab92a799a29ddd4da7b1a1
- SSDEEP 192:hQ/CoI6B9Cz+7AYcF7dj1TvnJBFatp0od+Q+Yw5MX:hQ/CoIWQz0AYcvJY05ZYw5O
- TLSH
  T10D122A4963D405C6F8F7C2F8C2B1075BEBB9BCD13925970E0A2494641E61B1BF632B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  License.rtf
- Size 44KB
- SHA256 041939a7a7bec83f0b88b2783275abfef146c9b449fc38a6b486516f1defdbd8
- MD5 054576067accefc081419623eb409c5d
- SHA1 9489ac769c799a0f0b79f142946a75b4187d3ce4
- SHA512 f7ce1b5257712c3965b7beb4a10e30d2650c62a7644b95df11063a7dd05f083136bf36d78aaff0f5ea6293293da85ed00f9ca071124899cd7ba6d74c7b696dc5
- SSDEEP 768:rSPzjgjkNpXHBH7+vThGBj3IxEbhHLusuWRI:rSPzEkNpXJlzmEVHL+W2
- TLSH
  T1D623ECE9A7F1D3B20ECE0240553E749BE2D69C382D225E5034D8F1D81276E3472BE69E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Readme.rtf
- Size 1KB
- SHA256 8361605f7e2654e0f69859498eff6dadb25b9d45c1910085f582472304169a58
- MD5 8d58f0950742453a05d99b1d226c6f6a
- SHA1 d25faf5460b36b278d2ab0bd5b4b589e05eb6929
- SHA512 392b3dcb3f5c9933cc1aa1e8c8db25cb8d082ae4d633821af3ca8f595ab6667d645cc85d1c244419d748b25a9b79ff2b0fe2600470f4659f704d26b782f3713d
- TLSH
  T1284110AEFFB4D5B8099FC1423AB57287DB6859701E22CA053889F1D81131E3571BF29C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10
- Target
  blues.jar
- Size 2.9MB
- SHA256 99a6c4ed97e670b43a5fbe975ab9529d163bf4f3f07aba6e81c8abce31652785
- MD5 896f42083b006bdd99012fea4cc9629f
- SHA1 e530ec3b34309aaf9623e6020ef55c40ec173afe
- SHA512 0babb3c860003a073017e3da740753cb16e1ba909fee683cfa87a22ff8cce843e5b04cf78a17156e7007c158debb8b7841d51d2a26a221a631436fe1ac8ae57e
- SSDEEP 49152:DG0uEWM35WINnGiKTfdQcCLZCTR13+HYEuLYRsEiPL9cKUcj/S6ZezizqO0:q0uEWeMIN3kfCcISL3+YEuLIsEA9N3ZG
- TLSH
  T1F4D5E03564546532E4BF9736AF21D47FF93F06B86089342168983DC3F8A3DA16A93B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  libdriveio.dll
- Size 38KB
- SHA256 fc664b65ff5024b7bff91276d29331b39613d4a8ef6471a07bec0a26783dde63
- MD5 d8e8d9c25360c369b2819f29652fb824
- SHA1 88cda9ddb814cf6176d38cc25184771cab17002a
- SHA512 a74fa0303cbb2e78798e2ccad55fde72817aee104f6131bd389c03a408d9bfd811df8bab80b1d02eccdadf30b379e3423de65c66e1593bf3f257c59d2efaf956
- SSDEEP 768:RA9hMU85vgMGoz1+J5Uhoibbb+S4AJKqBz8MZL0ez:q8pgMHzkibbb+S4A3
- TLSH
  T14803BE43F614CEF6EAAB35706437DF3B2BBACE241A95950BC76318520834297B937427
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  libdriveio64.dll
- Size 42KB
- SHA256 40223070db3331102c11d2603332f72d9e5661d3faf9a3fb11401fcf145d41c6
- MD5 f4189a8032689e5a8b6a7d561b801243
- SHA1 e8b8cf13cfd0732ef2bb34e01562e5061ecfc236
- SHA512 01b572ea35783d1e5884561b987d694f1f94b6970c535cffacc3bdad5422023a23b02790399680aacaa0d4a58ccee0a174a5112033dd003dd0e8f740f3bde44d
- SSDEEP 768:N+VWJ5hmNNx8KrvXV9yYF9xGA+5Uhoibbb+S4AJKqBz8MZ7BBW:NlhCLpVG9ibbb+S4A3E
- TLSH
  T1F2139D1A37245EFAFDA761B9C523890BF3F3B0565361A49F03A007991F63391393A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  libffm.dll
- Size 1.5MB
- SHA256 815ec6d5370c586b97b87250a6fdedfabda488af75f295a729276b8e16ea104f
- MD5 3020b5cf10d4070cb94ba59a2a1a1a4d
- SHA1 97fbeed584bef354917ff3db1890fb08b1ffa78e
- SHA512 96609bdf5e69961a8d8200ec960ac10ac3aee1fec51dd4db37b15efb2a55e4960993581f6e35f3bf435f60d38f5a28a5df82d8c139aaa56249679d2232ecff06
- SSDEEP 24576:Foymhu8h33e7U9ZyjhM5RAlPDvM4LZxCRTt/B2iXs6sOAa3jCaUsxL+8:f03eY9ZKM877CRTD29E32gL+8
- TLSH
  T16275C041FFD741F2EA4A2430319B771BAB395E460919C323E3D83D6AEDBA7106DA7244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  libffm64.dll
- Size 1.7MB
- SHA256 7ad18506518b5aec794b05a85684d97d59cc87fa2cd5d5f1d99c2150cf5cea20
- MD5 d750908221f70b4bc15987ef73aa36ca
- SHA1 914fd96ecca27367c51f78c049b3347edb62ca1e
- SHA512 8be70d6ab1dd610cd652c46249dd043989a8afe690cc4dcabf2b094602c946987f78733d233446561be55745bb0560c5e15a48168eec5424322299c5bb0cf501
- SSDEEP 49152:ap2Rh5dlAEEfqKFBHSGerutjBR7Ov65pwrjnD8mo+:zdlhEfqKFBRX
- TLSH
  T12085CF42FBA015E9D5B78070C6A7AB0BE7B17C4A0210832B67D47E6A3F77B605E1B315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  libmakemkv.dll
- Size 130KB
- SHA256 ec94cf3e3d1ed4e712bc85635f23cd4b340d20c572dbd21fbb99e5733ff7c81b
- MD5 c08550b765139364d7c539deef699329
- SHA1 c9cdfa067079d6a6e740fa91c60d1764cb998739
- SHA512 ecd4e608f85b1a8c82e8f31fc17378fc258b3e78c4526a344470567ae620936c231cebf4b658e33b9ab5ed684eceebf64b7a78ac7423c48cef24a878e4de1934
- SSDEEP 3072:DaRXPvDTnOHgJepTtZ2PzU//3oPE01YW:Dq/nOHMHzU//hW
- TLSH
  T16CD329D0E2AE107FC21DA8BD26497B35F1696C51DCF19613BF558C214FB26842C0E6E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  libmakemkv64.dll
- Size 200KB
- SHA256 ea7e79611fba3cfef63d022b82e2ae7271d5c8422f2e8c99cb3e7061ba0bcc43
- MD5 02f2aaeea1fb12531098a869fbb56a54
- SHA1 01e5274d9f51952e7f169ae2845bf4f7bcf9d1f6
- SHA512 d6f59db3b240b35e62d0461cfd7d8adb654d36fb1472eb1e439deb590d0a1bc52dfba4c0fef13610e19ebfb2917dfbfb3c688f90c0eb5884bc474932808a6011
- SSDEEP 1536:6yGdFDqdgCfdOrX9OcTY7ICdLL8ihKpiG6K6qlVjg9uSiwBzzzzItw8iXxZggob/:bGdFDkge+9OcTYcC98ATt7cCbzLP
- TLSH
  T1FD14934F2ECB16A2EA10A239CD435F4497E1F8594312D2075B12035EEFB3785DDAB9B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  libmcurl.dll
- Size 233KB
- SHA256 3791ab85ed172136c5e89e042f4432b327d8b14e34b5c22029c006f036555679
- MD5 7f5ff767250b3278d0a05edc49f5b4f3
- SHA1 23e97af1c9f62d684a218b38f29260e56c57f4b5
- SHA512 f4d8d3244d5f32fb02e194e746bc00c276e488ecdde5cd0ec538d4049335dbfbd6dd58e439616cc856df5ec38cc3f07a244c6fe67cd6fa36281785fbc012fac2
- SSDEEP 6144:epYrCglo8dO/+ky5U8neFhskpSoKXJCYWoFF5R:eaTO/NgUH3rroFV
- TLSH
  T16934AF83BEDA89F2CF412130702767279DB8E11506C059D3ABB54F9DDDA1349BA1E3CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  libmcurl64.dll
- Size 274KB
- SHA256 eaf14b032fdaaa5ab5ce196de811efd49a91438a61fe6554e5c83d9f4fe7b53c
- MD5 e50b7165e27fd175ca656a9e04ac6b3a
- SHA1 103939e8d1c1dc0bd2485fcaae89aa53499a58de
- SHA512 c2c11d8a793be372c69d50ffc968a015647b23bc6f75d6e8fbfb98d7fb4ad7009e8f8ad9fcbe9ae7bca88da498821851157a4082371e773ba4ca8e3df8397daf
- SSDEEP 6144:Cf/WUrvJegRHX2lqIPgDM+/AxNIcPQfZ75E:k/9hXTIPgDM+eIcIfZm
- TLSH
  T161543A5673B805A6E992C138C513C70BC7F2B0966791E38B13B48BFA6F637627A1D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  libmmbd.dll
- Size 37KB
- SHA256 27f4a5a29cf49563b2fdd19c076094b799d44e2b68ae86bff2f7e3ab879f326b
- MD5 0198fd62e4ce247ee636cc415c9a70f2
- SHA1 03b79a60ae8caa2bb7733e6d62e12cb63d3bedba
- SHA512 ee10ebbafa6da3b624b6f01d5e364153c5ee1cbf5f3daaebba2c4d8c8e991a4fe3c6ee64a7d764a46844a8a32641aaa1d7fcfbe04154b9493b059f96878c1590
- SSDEEP 768:Ww1MZs4VQ/An5B8EFCSayZH1XXoneDcmrSLhVaf290FBBhILHHqptZMglzL:f1AVQ/An5WyZH6ERd
- TLSH
  T19103BE067AC510F3F9B10272602DDA67CBB66B404F8119EB17E19D0A9B314E9F63DEC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  libmmbd64.dll
- Size 44KB
- SHA256 03378c4c137eb2206d4bb5c924ace727218dfb6e347537b3d910bd356ff8ce32
- MD5 8e0c8ebaacfe2385762aec97cfb288b6
- SHA1 754bd7cba5c6de391d55a0af5b57c134c9efc1e6
- SHA512 4e8c6fec899e0bf01d4310cb71d1d6a2995b32b0a96b64cf54bac05c511507affd2368ac89b077d09b70c823bfa29ec741c04e087f418871917365348e8d78cf
- SSDEEP 768:MSw6rMr4V9/cP/xzJmDmLoZNXwJ7rm1Q+jtYXO2G2+TF2WJAaWcDxWE290FBBhIo:Oc5V9/szXowJHmXa0T/AQtNdq
- TLSH
  T13F136C8EB6E010A9F063913ED51749D6D6F2B5012F61C2DF0390DAAD1F237E6613EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  libmqt.dll
- Size 5.6MB
- SHA256 f858e64c05b3c33b7720662f3818281c5a3a9c9d20a040f8c2fec4ccf682698b
- MD5 4f26504d2417c8d27ae400af141c62ae
- SHA1 373267a812646c898e13f8f6c4a223c86972387f
- SHA512 a9580a87d9fa7a2c1e5ff70464a84bf5a85af8da2d1f958b038ca513fdc7585a884f560fc634b8efd5582fdca88d4a83d9953e1a6c8fdc8284367ae17ede0909
- SSDEEP 98304:qKGy5+QjzYYaKgVAwriPfd9t95+YDYC211pNUe1mBBjhJsv6tWKFdu9CBy7:CKFkVAWiN9DkYDYC211pNUe1wBVJsv6N
- TLSH
  T14F56AE83B2C381B5EEA37230156BF25BDBB5B9028D1CD25B739C3F4DE9762206927245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  makemkv.exe
- Size 104.1MB
- SHA256 7361941fb4c0e1e3eb69e1d85add1a0eac53f82ac7e53e658cc448217bc83a25
- MD5 f1d3b2ee6c1993a7af19fd2c43ca5adf
- SHA1 4705a0870e25d17913e5c7436b6793540fd0d0be
- SHA512 99d181b3ee34d01f70bae6e33c151d8e25f3a37c21cf2e1448196c3bd4583709d507d16a75d49309dd936a3f596473cb40962b8edd03d2961c7199c4b7c753a4
- SSDEEP 1572864:z/jyzuADvqJI05r4Hs/omzcCZgmarxwa:z/j
- TLSH
  T1BA385BE3B04062CEE4235871D5214AB36B73AC3A82D136B65654BE7790BB7A3442FD1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  makemkvcon.exe
- Size 4.1MB
- SHA256 a1e0c746ee19fe8799bfa826dccbf3e8cf4cc309b59fdf80ec0ce1567811b810
- MD5 79e226285cfef10c09830935a432efe0
- SHA1 c1639978eb644fee68767f9390402958e3393dd9
- SHA512 7c0d71e8fa29ca41818bff64b70c75ad29aaf309007ed758f7a1632130a65321a3b5603ef6023f4068089e69193cf1e08a801d6680ffa9a4a630d571076cf653
- SSDEEP 49152:+vAOll7oVuHuwEuuGvGM2sElGxHDDjECJKkU73AhmRlM+BAggigOpMPp:2jWuOQvGMAqQCJU7DBAgHgOpMPp
- TLSH
  T1DE16D0A37F4740BFDE79AB78262BB271DECAFA008E75212F0198A9F5D061101457D3B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  makemkvcon64.exe
- Size 5.2MB
- SHA256 a5e3b2d9b38da2a891c5dedb6306e5d90d8e23b6b8ed2a8732d1c660bbba46d6
- MD5 c40fb5329361a57dba35e27c4d073ff9
- SHA1 03c51014c5b9f7e07d4cdfd94db25de90d0edb96
- SHA512 2d9a0f9bae0b89a6ecc2a1897437897fc3ee496decbae8934d62706d2f82976d4621a88d2296d1b256d3a02297b2b18d70a52cf923b9dd6e2684bb29261eaae9
- SSDEEP 49152:j4q3xTVK4N+hklnOaJRAwztzMrfbp+mKjOp5/N82RjuTwmhyonlhCz7dgElGxHDm:DBz+nhFoncNqfsL/cEgHgOpM
- TLSH
  T10D46AE9C2AB943DAD8F9C534D228E46FD3A4B489417CCA7E45D75AE94F2B3B01C0EB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  mmccextr.exe
- Size 241KB
- SHA256 eb7006a038c31f0cbef983162ef246a3b7820bbd99e3e57279f4a7ad05c40cff
- MD5 a242079b14e0535fa6a7a6c45fca2719
- SHA1 b6545b3965299515a9672c0851dbbbc0ba41f141
- SHA512 04dfeee3282ec3706717c1ee0454385ee596af43f9d301d66e365c0fb4655cf0571f467c0860b050017a25e104095bd6870a902fa9b0a2198d8a4c76741d24f3
- SSDEEP 6144:PjDeadktEGiv2AbIp/CGDoJra41CuUb5eO0stDef45U:PjDepwegECGDgigOpef45
- TLSH
  T19434CF43DD41E871CE85C3B1DAA366F0C82AEC43E610444763C67DA83EF7985A47BB69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  mmccextr64.exe
- Size 242KB
- SHA256 b6a42654cb382624170dc758417da0eadf974b0cf8b640f3d71ab0d88b8e4563
- MD5 42b477bb47341362435d5ab1acb09a8b
- SHA1 dc45691b61773ee2df5f2722395a227192e07975
- SHA512 cc7474817ccce5234b8b054829d2e4311f8d8d949c18c7afac49612c76a25b00be39dd88cec6caa503a073813a58764d11219254c3ebdb8f486f8d2908170665
- SSDEEP 6144:J+ig43ggPk2CO0bIp/CGDoJra41CuUb5eO0stDef49:k8QDOMECGDgigOpef49
- TLSH
  T10434BF638D01E0E1CD92C371DAB356F1D52AFC53D620824F53C6BDA83EB7641692AE4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  mmgplsrv.exe
- Size 79KB
- SHA256 9f15a68296f846d0f08708e549d41b0c1da11439e5b5793780d2c1cd318f56b0
- MD5 39262233921227297bccb94e5e8320ce
- SHA1 940e567d4874dee2d47ada574c132000ae0af604
- SHA512 f5c7a9dfbc1015def4fb81a05e39a11279be07f4d2bc1309b82f2f6bc8842dd56b1225b28d8cb9065607e47621b1d7bb0e3f5632808f8540e41157dded346b26
- SSDEEP 1536:lP+/v8JNvE63LgW4wH4se3o6XmstEKziCCdS/e:eu9TYsdUmciBS2
- TLSH
  T155838E415CC7C872ECC720331859EFB1C9F9CB5B282D4296A32D26DD951ADB1189FAB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  mmgplsrv64.exe
- Size 99KB
- SHA256 53e557a5787ec16ae884a8c17bd733c620d93dae0d614ceef781544bc4af141a
- MD5 546c300a7442f2394129a36db5488ecd
- SHA1 57751c0c81f69363842e6fc9409def360a0a3d38
- SHA512 768a115a69853e5a05e97aba745fbef7a2813ff9372d725f4eebc72ea32fe8e967e97bf10cfcd3901acb2edab37d789d0838770b33ebd2f9b31396d1a27a9bb1
- SSDEEP 1536:mE65smJuiWmEeyR+tGYF73U4lpaiCjWS:mLPWmElR+trFbynWS
- TLSH
  T102A36D60176741F9D8A74071C677EA0BFBB0F09A0198975E0BA153B61F076312DAFB3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  sdftool.exe
- Size 302KB
- SHA256 c772ceadfdb3e8edeabf9c3112aeab7d4bc73bab59792def29fa3367ff6db115
- MD5 8682ceb4ee237dae03a966a6d7cab0a6
- SHA1 db22788c3a78ca18da09d9d95758e2b4cd4f9d74
- SHA512 dce6a4af2f4d8d6141d06e7b95fa6e6e45a12486ab3089167971aee9e0f7cc32b9b15d52f6a1915736eaf7a7b18e88a83d7c21d5567e05471df74dce871675ce
- SSDEEP 6144:v1A7kDa20EHdVoo5QbIp/CGDoJra41CuUb5eO0stDef:v27kDPJvV5wECGDgigOpef
- TLSH
  T11864DF42E886D4F2C9A6D379D3E36FFB15779C22DB00854BA3CC7DA538B7210512A6C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  sdftool64.exe
- Size 322KB
- SHA256 c62cddedb5728d7d4e9e8b7ab763a758e15ee1d5cce2e1fe0fc8d999cf562bbf
- MD5 8a9fdd51f949796464bedd301a27890e
- SHA1 78fd0051bdb8dd9539d30db063b290308df4e949
- SHA512 da589431145aaa0a524839aa8801e29453df7dbbd4a6e92a8c67453343ab194e73ae63925c8afdc88f45307c230139c4097c8e634c34d632a2a0a2585266c4c1
- SSDEEP 6144:rm66YKU7YgSWbIp/CGDoJra41CuUb5eO0stDef:0zEVSaECGDgigOpef
- TLSH
  T15964CF51E954E091C966D270CAE39AF6E3B2BC06E350434B63D97EB43FB72207539389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  uninst.exe
- Size 295KB
- SHA256 d01d96e22a7dcf1dbf254f76dfe1402d6832cfabc5c4025987e6e5be121b4284
- MD5 59b9db22843489b9df050da100142229
- SHA1 3425bacb80106653b9e5d0efa311b7f9c7364934
- SHA512 b34c9049019c7f645d8d5ad966a41ed70e8e1c443b3ac2d52a1b254bf86650ff9e77d7ea1fadf13009ad395e7ae8acf5be851ea918effe96c6de375edaa95081
- SSDEEP 6144:VclpzFEhQwT9rbIp/CGDoJra41CuUU5eO0stDm8f97Ah:kFEtxECGDghgOplf97o
- TLSH
  T1B654CF18FE01DCB7D8368271D6A3F6F705266C72DA18894BE7813F6ABCB75909517302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32