e9344e2b1a638f33307da86d5d208f30b9eea06e0cb4aeca196701af9687ffb0

Sharing

Copy URL Twitter E-mail

General

Target
Rave-x64-Setup-1.18.14.exe
Size 154.7MB
Sample260724-zz5j6aec26
SHA256 e9344e2b1a638f33307da86d5d208f30b9eea06e0cb4aeca196701af9687ffb0
MD5 8d23dd46b7e30379068f1f87bee46d4d
SHA1 d63081f4338509daf3eaae5f3a1c6924fe54506e
SHA512 9a7f1540c11940299bfda1bc88336ffea1405bb43fb8867ea3809784f9f7cde07c3236d944afac39d023b9fceaf8c0cbe62229b846ebd322e774ec0fa66b2e76
SSDEEP 3145728:gfM9NTNjPyE+KnOGaHnPwHPy2ZBZj6ckxGpYKlPA4+7pNm4:r9NZjPvTOGMPwtZb6ckEL+7f
TLSH
T1757833A60C30795DEEC287F315251191A5F19F912A9912CB37BFBC4859B0CE72EC0E9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Rave-x64-Setup-1.18.14.exe
- Size 154.7MB
- SHA256 e9344e2b1a638f33307da86d5d208f30b9eea06e0cb4aeca196701af9687ffb0
- MD5 8d23dd46b7e30379068f1f87bee46d4d
- SHA1 d63081f4338509daf3eaae5f3a1c6924fe54506e
- SHA512 9a7f1540c11940299bfda1bc88336ffea1405bb43fb8867ea3809784f9f7cde07c3236d944afac39d023b9fceaf8c0cbe62229b846ebd322e774ec0fa66b2e76
- SSDEEP 3145728:gfM9NTNjPyE+KnOGaHnPwHPy2ZBZj6ckxGpYKlPA4+7pNm4:r9NZjPvTOGMPwtZb6ckEL+7f
- TLSH
  T1757833A60C30795DEEC287F315251191A5F19F912A9912CB37BFBC4859B0CE72EC0E9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery execution persistence spyware stealer
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates processes with tasklist
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1
- Target
  $PLUGINSDIR/EmbedHTML.dll
- Size 99KB
- SHA256 ee95b019b9c8681be56038bf4a4455f74c4f83c287fbaded6b5aa7b5dcf4a38e
- MD5 c08431578109da597240a3cbaf65fd63
- SHA1 687ef12f3db594332a3c9e679b8822eb9bed89e1
- SHA512 8c8814a4c11ebe48be075e228477f394077efac04f2b7ffbc39339270d9a0b699f8398a17aa4cd4a0570c8f8c9e7de757facd30c326f1dde480a799542b07e8f
- SSDEEP 1536:nbrMlUndmhyVFzIgJYGjUJjwWcgBAJs8jcdc6I++aSEgKP6Zn3WD:nbrMlUndHuJ3Dc6I++aSEgKP6Zm
- TLSH
  T118A35A1136E09079E0EF463548B49A120B7EBD62DFB09DDB7B951A4E5EB02C06F35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH
  T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral6
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/ElectronService.Common.dll
- Size 6KB
- SHA256 26da8bcce1b8b497c2ea22ea389f651eb300cd88ca945cb8086c482e856f964c
- MD5 f47992afe2893438b49c5ee105ddb495
- SHA1 57b4eb461e5efbf5d77b8a86a4c3987ae55ad2b3
- SHA512 8cd705ba923439d620c2401553050c2aac14c27edabc52395405d514e68093ef65b05830c9d14dc5245338ce07c6d92258262b32f0b77faf0678507defe63fb1
- SSDEEP 48:6w0bufTU5EH58gb+nQnj3WIoytEh/m9gNEi+Yp5yQia98MDffEG5vC3Fjew/Tf8G:uEZNbHCUExmCv3L9zR5vLw/TY5n/Pk
- TLSH
  T1F1D1B70BD3E48A33ED3B077DACB703914674FF009E53EAEE1C48A2569C576540B61B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/ElectronService.Core.dll
- Size 56KB
- SHA256 ce192c36cf9eb1b25421c50e731f80f04ac9ff7879bfcd5ea68f21d478a693e6
- MD5 457e826c2879b7bd1bf29677ac45d8ee
- SHA1 a55ec9daf2c2e447f78031ec1dc08cd205ab6591
- SHA512 613f48534324a7853e3a9b9e57a123cfd8c583f2f9e5825dbf69ac77189e030fb0efebdf7ae318a9a3023921b5d192c99cbef02fe61b175cfd0a7a072fce8a43
- SSDEEP 1536:MhfHI57BByCMAPInRLjiqwAFH2rkRxaY:MfHINBBy1AgJiqbF2rQ
- TLSH
  T1C7431858A29C8B07E69F9EFDA27483634736DA09A522F78F2C4CE4F414D73D09C446A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/ElectronService.Native.dll
- Size 76KB
- SHA256 8b4f4c40f092faf113ab809d6c5cbd7c041c6ecccb2c09a9ce3465481eaf959d
- MD5 feb3b04ac7da7527d6f259d812521466
- SHA1 e26fec9ac57c9845d11e1d24dd63a94d86274cca
- SHA512 62094fabe989c8b34b0efec0de12f44c5bd2ec446af30f0dd229c01378cff5109a321e2a741d47c8743ab093f94e073724686988b275da0ca80c8b71e1e2f745
- SSDEEP 1536:yALL3YC422k66T76guris01aUI5AORIyOhrQy:jIS66ahp01bIPOy8cy
- TLSH
  T13F733BD9AB7146E5EC9E53F81872D6C2C33995CF6A43DB0771C09A440F872C8D69A3CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/MessagePack.Annotations.dll
- Size 11KB
- SHA256 a2b4d559e90482903facaa1ba894831c2dc15fbb322c029cdc5447899aa61bb1
- MD5 d8dc23aefe3035d7fbafc381caf77c2f
- SHA1 816e776325543dc503c221f594f79f9b49d6f0a7
- SHA512 14e20743b1d4b4870353c15ba20370c955c68adf38305533a2bdbf1735585de26ad22efa0b63efbe94a3435c795de40d5b8a7eb675de0f54d6c952d12c31d22d
- SSDEEP 192:HwA4ftQPvIPlZTpM+u7EprB1fZOKCAgx2S0wpayIym/ajpmrFcxM6ndiSic73W:sW4PlZ1MKrBNCoS0w5IDSFyc73W
- TLSH
  T1B132C928A6944337CE7B0F3ADCF5B2830979EB09A913DE7D9245830B0D12B0E596173E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/MessagePack.dll
- Size 325KB
- SHA256 96183ebe7429573896bb3d270c7380050ca45409b19b2d784dcd3913bd08c107
- MD5 4eeb865492d383523475ce9c411cf756
- SHA1 28e2bdde747ef35c021c4807b1f4891e71a102b0
- SHA512 750ef050ce36a9d20a6f192d350b3cf08c03f5011a61d999f15314359bc1cc2dbd17d846de40f02f90ce858bdbabc9ad0b6a739ea8ed8ff4ec34e2d262b2b96b
- SSDEEP 3072:ZoVGTssjGyJL9fw8VHS7ACXhtMlkTLJ4Cz3+p4EiYUCbG54YGUdkbtYl1bk/jwA8:ZoVQGy+wTyclkhjCbYGU+prwAsJ
- TLSH
  T101645CA96BDC9F22DABF57BCA060121C8BB2D413A493A78F68C4B1F11D41FE5DC10667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/Microsoft.Bcl.AsyncInterfaces.dll
- Size 21KB
- SHA256 92d094a2edcb7686f221c815186c384b4b010d4c56c5b2d3825b0e8c549841da
- MD5 c121d7dc82a525a930eaf64235d69b88
- SHA1 a52c3bf5fbcf7db6be245b7c67db3887bd0c3110
- SHA512 f7cc5346a3ed267a6987631a954dfa295797f37e6ff935ccdcfc6d60d9b9a223d4b9d5bfffbb24ea228c4c230dccb69c4840b54b818704da4984ca0c0d02fc34
- SSDEEP 384:n/9H/xZjc6g0F0VM20Ftdalemxa3gwqQWeb/Wz/uPHRN7ds9l8Q/:n/xzg6EVqUAloMdm/
- TLSH
  T1BCA26D11D39C4203EEBB3FB59671D6062E39FB86AC21E32E244DE2650CE37855720779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/Microsoft.DotNet.PlatformAbstractions.dll
- Size 22KB
- SHA256 b1f4ad169fb192747f5d2d3111c01db4257e3ec1f7f18f301f7fc4be3b869ff3
- MD5 00ab0f02b1114c57c758f5ad595224f1
- SHA1 8ca2d65ebaa52496c3d963869cc8edeb0a62f654
- SHA512 0ec5e7fa1a48c7abac9e31e00de7de798a8f5b6c613bab27ae559bb361d7d35baf69684e1e3f48c3525e7f2563647e304842f243e6bdf82e44d7c5e3168d915e
- SSDEEP 384:oRV2ogIFIB2Xn8fevHJW2r0WSWixHRN7W/4lrlX:oR+BUdy/
- TLSH
  T1FFB24B44CBBC4502DBFA1B30A5B6F056793973834DE1CB5E0558A24D1C677C85B21BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/Microsoft.NET.StringTools.dll
- Size 29KB
- SHA256 389aacd0e9c261fcfb417c75d602bba4be80031b9472f623dfbcd4bd46aa1bd8
- MD5 b09247fdaed00fe26527768acdfb837a
- SHA1 c4c9ba36bcaff447258fcccaf5489fc115b8648e
- SHA512 d4963de460dd12e651a6c5d06e177cf97d16d68e2c2e394fa8db771044a5260ba09450ab0f91a1702df82c37b55b65df6002e6bbae2e4288270406ff1b362c55
- SSDEEP 768:oh49nSpNtGZKaODCtSt45ZseCxNaix9zD:oAnSpKKfDCEomZjzD
- TLSH
  T106D26D0192AC8212EEFE49B0A5A2D5929F317B975461DF690C9CF0490C1B3D89F32B7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/SuperSocket.ClientEngine.dll
- Size 48KB
- SHA256 b741fbefc8576f305df244918fa3d3bb167353b3fc44a2cb666ee5208ab95327
- MD5 d0b4c02720d3eaf223665c31f3a5980d
- SHA1 e92dbcb6ea2db9c745e0e566cfb001bba026129c
- SHA512 61cb24a6d86b491b7ace554f3fcb33c20e308642540669ea04f271de1b5b45bfe51f730d8d02013f71cfe3ed571581ad319de9d470900acae7ebc833ffe09912
- SSDEEP 768:tBoN0qD58Tbkn9DSZyBQAESH3S/aCGcjjJToUSrqvSKLAPs/yOrQV59L:tBvwFg/25sjVToDCAE/yOwP
- TLSH
  T1B523191063F8C326E76E1739B4B501150BBAF9423533EBA85DE621E97C93781592C7B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/System.Buffers.dll
- Size 20KB
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH
  T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/System.Collections.Immutable.dll
- Size 189KB
- SHA256 1200b0d64b654c3181e80824ba26d821235fca03bc8d2f3749ee706dfcc5af97
- MD5 69a2bd21654ecb692a2e5388bb8bfd86
- SHA1 10251a160051b986659e4afd8a63e909192fe0f8
- SHA512 4d3767d444d835dd978a42de55ccd450271c0b8f32c55f0a02de0adb3a9a165201f607a06a4e71812db6b407ed49d75ba3280b002533951693ef5420c5593b09
- SSDEEP 3072:tkp/Ua6cZb8uX1SLlcYK/fcWKKzYN69e5wwwMmpwwWJlwW+DFANXdOJyosFkCab:tkiapb8uX1SiJ/EWpzYNnjKWRXk
- TLSH
  T180142805738C9B36DEBF4E73B951A09A8A31C213A092B79E21DCFBF594D33254DD44A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/System.Memory.dll
- Size 139KB
- SHA256 11590d8bb3b12f29f4202b3ef8593229a5cd6debb61e76cba9ac5493a82ee382
- MD5 0aed51b795e3424f306840013ab4b6ab
- SHA1 03d07a75ece4f6f20952836bdbdf3722db9da697
- SHA512 a5da35cde61afef3c49e7f1facf8ec672278051bbed0f04000d9c4cd115eb0ddd3177b38462c28ee57ae3b9ed7920fbc86682df447855a3145dab7ae835874a1
- SSDEEP 1536:xRi8ae06y7Q0kSvtmvEmFk0pBa/+h8k/6wY2F8VNdhqABtW5yIk1c6ud/zuj:30vDkSvtmhFFYq6DqAGzocX/I
- TLSH
  T157D34CA46BD9EA57CB4FCCB0F0245155A730852B4652BB7B5CCCB4F06993BAD240C3EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/System.Numerics.Vectors.dll
- Size 159KB
- SHA256 2324ee5a35674269225e2aa20957ce8830dbca0cffb918bd593f7a3222dee480
- MD5 e9abb00cd885368e7943974f8c11e61e
- SHA1 31855ce721d078678676f5d07afa28ec7627b47b
- SHA512 14a2627fade56d88699e72fe78bba1a25d49ddf448b50c78acd400bf470e410866c1b67b5ebac1198d5d508fa9df1d33e58eec73eca90243609468169bbe3e34
- SSDEEP 3072:Kpuq/FUMoXHRr2QV9PEfJ2o7MeulvAaL5ztc37aFLz:82APqvAa1zFLz
- TLSH
  T1E3F31DB75F2C6C56CAEE49FE20D00E229235E4A7D203DFF245DD8A62068B7D664065F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/System.Runtime.CompilerServices.Unsafe.dll
- Size 17KB
- SHA256 01748200f2400c742aa689f1f5101bd6298efdfd92c00c18f4fa473847235ba9
- MD5 93ae20e877512f420abb5b2d8ebe1446
- SHA1 802bce64836f3efd2f74ebd0e767ce341cb021a8
- SHA512 2c8b7cdad056d03b51356ad3361b431600c8674e49a182274fdc481ba817042e7a3be85e6a23c7f2052561f22c81e91f33f992a31c5e48e1e31029132f3efbe1
- SSDEEP 192:6fwP+RIb2m0XysErFbbfVrx9lWB2WhWOL8/pCuPHnhWgN7aYWHkW/5qnajOBQ84:0dyb2mg8bbr9lWB2W9/uPHRN7UFhlsQt
- TLSH
  T1C08249198BD84617FC237F34467CE506FE3CA3966813A32B2545F27A1CD73C66A21A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/System.Threading.Tasks.Extensions.dll
- Size 25KB
- SHA256 09901f63ebc4b8f0897b0128fb230c146529aee5c5cc90d7a7872e66a976bb5f
- MD5 b2ed9123b13df49f4e271b6a485d56d1
- SHA1 850849aa6723733e661f3bfe6da805f4657a2fcb
- SHA512 a409e606b0faf2a029f90c4d23dfcd184118851f6ea3eb474bb550ffcbef10568c853ed9eec004712fd45befc0df220703266e36c717413d9695e80fd1412c80
- SSDEEP 384:i2R9PE8XHrMzTGavb05Mlw065eUGef8t72tBfauW2JW8aAcyHRN7WEypt4JeRlwj:nRF1XAvGUYSbdEhzqgxj
- TLSH
  T197C25E0947AC2167DFFB5E7496B3D906AF34EB4A5902E3686A8CF2E40C533C65E2113D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x64/WebSocket4Net.dll
- Size 62KB
- SHA256 bbaf622cc3f4b512c6c131ab7ccad2db6b0662c03367afc10f1aab3deff5efcb
- MD5 4ce1bfb17e847feb3e7ecf1cc33df731
- SHA1 3e48d0f7f5cd8a618d2f32c6aa08cff0c3c61c49
- SHA512 1e2723f0c10720d0491e0efe1ed7d123db94ae8eaa8f3c82771502bb10fd0392096578ae360ca308735ce319d37efead6713d12c8b24cb8209280f5e470c5da8
- SSDEEP 1536:MoNIglS4xUF/NWN2MPilIlLIoSBlNcIguQM1:MMIh4yNlINIoSWIguV
- TLSH
  T1E5535C2A77ECC663C7EE1A75F030422107F6A5097E13EF5F6E44B8AA2C637814924767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x86/ElectronService.Common.dll
- Size 6KB
- SHA256 26da8bcce1b8b497c2ea22ea389f651eb300cd88ca945cb8086c482e856f964c
- MD5 f47992afe2893438b49c5ee105ddb495
- SHA1 57b4eb461e5efbf5d77b8a86a4c3987ae55ad2b3
- SHA512 8cd705ba923439d620c2401553050c2aac14c27edabc52395405d514e68093ef65b05830c9d14dc5245338ce07c6d92258262b32f0b77faf0678507defe63fb1
- SSDEEP 48:6w0bufTU5EH58gb+nQnj3WIoytEh/m9gNEi+Yp5yQia98MDffEG5vC3Fjew/Tf8G:uEZNbHCUExmCv3L9zR5vLw/TY5n/Pk
- TLSH
  T1F1D1B70BD3E48A33ED3B077DACB703914674FF009E53EAEE1C48A2569C576540B61B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x86/ElectronService.Core.dll
- Size 56KB
- SHA256 68e6cc7a2d18bb14bdad5652f05339af2a78ff7b4f632b39af0abe1ed479e64e
- MD5 f9edacfd23a2e28f0ba51c16f2adda43
- SHA1 89a30db0c2b2e973539f799d0a2c7a7c3f7e9c43
- SHA512 d21ddf5f56bfc459a7d7a7489a22018559343f555e026ef682b013a3b6551a302e6c28d959b9dcc30d220c41aa16dd8eb2c1e6c00b395333982b8af53a9250d8
- SSDEEP 1536:BhfHI57BByCMmPInRLjiqwAFH2rkR/taY:3fHINBBy1mgJiqbF2rM
- TLSH
  T1BA431858A29C8B07E69F9EFDA27483634736DA0DA526F78F2C4CE4F414D73909C442A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x86/ElectronService.Native.dll
- Size 66KB
- SHA256 c338c233328086d2ee556b40f4aa540f3e1ed115a1da48ad1b086aa4c1d88164
- MD5 37d91cb915e36cd7e9f9d8b66e944ef7
- SHA1 e18e346b0f363df9fc670c4b130b408e7ab37c66
- SHA512 3401f7f2c63c0a8f92d691c359036e7e2956a8ebf89075e872561859f5a1cee3fac90f119b8997ab5e9600b050729a67da26aeccb6dd849a2e6afc775c13967e
- SSDEEP 768:yiJfZwfPLM3QJmJLFwRRU2hcPaRDH0qETosQlyQKORkFnFSlxby:xJfZwI3QILFwRR/509ksXORInFS3by
- TLSH
  T15263E5E177B24467E0DE667318B2D7C0073FEECE9993AF17B2A062848C5728491653DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x86/MessagePack.Annotations.dll
- Size 11KB
- SHA256 a2b4d559e90482903facaa1ba894831c2dc15fbb322c029cdc5447899aa61bb1
- MD5 d8dc23aefe3035d7fbafc381caf77c2f
- SHA1 816e776325543dc503c221f594f79f9b49d6f0a7
- SHA512 14e20743b1d4b4870353c15ba20370c955c68adf38305533a2bdbf1735585de26ad22efa0b63efbe94a3435c795de40d5b8a7eb675de0f54d6c952d12c31d22d
- SSDEEP 192:HwA4ftQPvIPlZTpM+u7EprB1fZOKCAgx2S0wpayIym/ajpmrFcxM6ndiSic73W:sW4PlZ1MKrBNCoS0w5IDSFyc73W
- TLSH
  T1B132C928A6944337CE7B0F3ADCF5B2830979EB09A913DE7D9245830B0D12B0E596173E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x86/MessagePack.dll
- Size 325KB
- SHA256 96183ebe7429573896bb3d270c7380050ca45409b19b2d784dcd3913bd08c107
- MD5 4eeb865492d383523475ce9c411cf756
- SHA1 28e2bdde747ef35c021c4807b1f4891e71a102b0
- SHA512 750ef050ce36a9d20a6f192d350b3cf08c03f5011a61d999f15314359bc1cc2dbd17d846de40f02f90ce858bdbabc9ad0b6a739ea8ed8ff4ec34e2d262b2b96b
- SSDEEP 3072:ZoVGTssjGyJL9fw8VHS7ACXhtMlkTLJ4Cz3+p4EiYUCbG54YGUdkbtYl1bk/jwA8:ZoVQGy+wTyclkhjCbYGU+prwAsJ
- TLSH
  T101645CA96BDC9F22DABF57BCA060121C8BB2D413A493A78F68C4B1F11D41FE5DC10667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  resources/app.asar.unpacked/node_modules/@honeygain/node-sdk/lib/x86/Microsoft.Bcl.AsyncInterfaces.dll
- Size 21KB
- SHA256 92d094a2edcb7686f221c815186c384b4b010d4c56c5b2d3825b0e8c549841da
- MD5 c121d7dc82a525a930eaf64235d69b88
- SHA1 a52c3bf5fbcf7db6be245b7c67db3887bd0c3110
- SHA512 f7cc5346a3ed267a6987631a954dfa295797f37e6ff935ccdcfc6d60d9b9a223d4b9d5bfffbb24ea228c4c230dccb69c4840b54b818704da4984ca0c0d02fc34
- SSDEEP 384:n/9H/xZjc6g0F0VM20Ftdalemxa3gwqQWeb/Wz/uPHRN7ds9l8Q/:n/xzg6EVqUAloMdm/
- TLSH
  T1BCA26D11D39C4203EEBB3FB59671D6062E39FB86AC21E32E244DE2650CE37855720779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  $PLUGINSDIR/license.html
- Size 527B
- SHA256 6bc1a0c139f438260d86c8f4d05c113e8b08e21598f67fead6b63b5bfc5c7dc6
- MD5 30aeb1a4ed9513176ec292fc3501e26a
- SHA1 2b012b02aa4ae7f0628ee4ea74ee8c6e4682fefd
- SHA512 b661269bffd8abbc94b14cc2b15cd1195f1c8d01e85b14239ac7b5c814dfed95fb256efbfcfb904b2b4b600dba3aa3169cbd2f043147d4a3382a0f9cbaf4a294
- TLSH
  T106F0E975C0E192A18540C4809AF1A61F8B03E9E77DD92E06B65D5E966FCAAE1CC031CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  $R0/Uninstall Rave.exe
- Size 209KB
- SHA256 fb0df04a894a7efafcdba241fdcc489dd514f34f5ad3e483febfe643a1559af6
- MD5 b9923764ddfb69628c09eb459d30bfca
- SHA1 e723278c2da8606b8fcfbea10d17425b7a85e62b
- SHA512 c28132b5807cbc8668936c740340f4db9bbe91e27308acd99f98fbe03f4831facd9f8d6ae714b5f7807ed9e94339ecd7c35d1b1c207650e2d1a57d5ae1a000d4
- SSDEEP 6144:1740I8L9EvldfYK2OimsyV8ess2t0EyL+ya80Tn:1rEvLfCXyV82RKJ807
- TLSH
  T158240212DBA0C853E9A78F7025E593B72E70B1142D708BC37785672DBFA3392AD1D216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates processes with tasklist
  discovery
behavioral32