4cf3a7030f287fd0739ab49655655255c7ddeeb75f705def9157aedc45aefbf9

Sharing

Copy URL Twitter E-mail

General

Target
StarUML Setup 3.1.0.exe
Size 107.5MB
Sample260727-1m1acadd85
SHA256 4cf3a7030f287fd0739ab49655655255c7ddeeb75f705def9157aedc45aefbf9
MD5 ba41e06dfeb0f37444104c195ee06821
SHA1 53f7269f32f57ba3cc7d4ca7148f38c5ed6444f2
SHA512 6229422901ff00d05e43bfc9de89599213c7ad8f03731fd068ec33fccc3130b8ba2ddaca8f12b3e713a4574661e824649bac3e007be8eb386afd8c585472992d
SSDEEP 1572864:bJOXn+Y9YEilQ++RSkQlIsaACEwwYGY3mqtv9UC7YJOXn+Y9YEilQ++RSkQlIsIR:bJO3mNXanE03B9NYJO3mNXIVcH4vEZf4
TLSH
T109383306AD75AA2BE581087CB204B5660AD15EF21D39761B0BEFFC95F3F3A44076B870
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  StarUML Setup 3.1.0.exe
- Size 107.5MB
- SHA256 4cf3a7030f287fd0739ab49655655255c7ddeeb75f705def9157aedc45aefbf9
- MD5 ba41e06dfeb0f37444104c195ee06821
- SHA1 53f7269f32f57ba3cc7d4ca7148f38c5ed6444f2
- SHA512 6229422901ff00d05e43bfc9de89599213c7ad8f03731fd068ec33fccc3130b8ba2ddaca8f12b3e713a4574661e824649bac3e007be8eb386afd8c585472992d
- SSDEEP 1572864:bJOXn+Y9YEilQ++RSkQlIsaACEwwYGY3mqtv9UC7YJOXn+Y9YEilQ++RSkQlIsIR:bJO3mNXanE03B9NYJO3mNXIVcH4vEZf4
- TLSH
  T109383306AD75AA2BE581087CB204B5660AD15EF21D39761B0BEFFC95F3F3A44076B870
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1
- Target
  $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH
  T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 101KB
- SHA256 72d38ef115e71fc73dc5978987c583fc8c6b50ff12e4a5d30649a4d164a8b6ae
- MD5 33b4e69e7835e18b9437623367dd1787
- SHA1 53afa03edaf931abdc2d828e5a2c89ad573d926c
- SHA512 ca890e785d1a0a7e0b4a748416fba417826ae66b46e600f407d4e795b444612a8b830f579f2cf5b6e051bea800604f34f8801cc3daf05c8d29ad05bcda454a77
- SSDEEP 1536:Ayy+wx2YAlWrU5OX9crt5c4DBqiC7hk333kbQk:ry+wojIwgNcr1a7WH0b
- TLSH
  T189A31A527174349EE1F5077C176E2373847E1B38AB28A8DB03A249CEC3761E1A0F5B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
- MD5 17ed1c86bd67e78ade4712be48a7d2bd
- SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
- SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
- SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
- TLSH
  T1E3325C12135081F3E4918138C86B3A276B6A15029BF98E57DFD39546BE31BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  LICENSES.chromium.html
- Size 1.7MB
- SHA256 002cc048e33fc1498e91f71a2bbfd61f44bb258281155cb629b98fca45824d9a
- MD5 17205885fe0ef1d8f42fd9d7a8322644
- SHA1 3b058f382be32e58f2b26e0df115b90e46a69344
- SHA512 87ca942702177dab6d05ae740ab591ee98d99a1db6700697b53d22fe23ab5e4b70db1905fdc8324aa30efe9284ed9a3143b66b118f07e8b76df7332babe47942
- SSDEEP 12288:xm3m4mqm/mfmgCHzA+Sx2cXrDCRm0FtZZmS6h3BbZrS7Ui61GQqbdWHzW3F17fWm:hmnLiL4u+wvudB6rCr+KH4clkUzsQqB
- TLSH
  T1F485D62BAF4507B306F2C2516A5AA4CEF31E903E37171904346DE15C2B7B92983FF699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  StarUML.exe
- Size 54.0MB
- SHA256 c9424c4f65fb3327006518c25dfb0b373927f7d60349f4957918ebbdece9815d
- MD5 efaf08be04f56dfe508d7fa7536ef121
- SHA1 d469e3943819c42f9593a72ee9c54fd3f7084931
- SHA512 09f11db8eeb92b9b5c942a90dce0b1a3d5d44d28bc7bb84756506aac177a845f8c718e3cc4356ddaa0e30c34296b48998575bb1c57dcafb379d290759cff7b29
- SSDEEP 786432:OYZzfCN189HTYmmoBvdIuFyNbrsJR+k2zPZim4NBFWcQIEODvSPDqpm9:OYZDC09YoBvd8NngYrEmeBFWcQILDxo9
- TLSH
  T14FC79D23A9815035C79343F19E6C7A29A7FDBB74037196EB5B9C18489BF18D2B326343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery spyware trojan
behavioral7
- Target
  api-ms-win-core-console-l1-1-0.dll
- Size 18KB
- SHA256 6b74e4cf18b07d6018e4c2ae561e9a37ab9e1febeff06ead44125cf1b070f372
- MD5 893ccbb69c80f31e4113fee262899556
- SHA1 6db45d32cd313ae052fb6186573c5657852c3e80
- SHA512 effbffd7e9d24be133f0ab888203a223df8942d396c99c962132c2de48ca8ed0218631c4b8d6bd29874c30643fb589d91e20132e27cd457ce5ca1ed8a68ecdd5
- SSDEEP 192:p0WuufhW+PTBuDBks/nGfe4pBjSfcF8WebtuVaVWQ42W7yEqnajPf33PLlkoPNY:KW5hWsTMq0GftpBjROZmJljZkINY
- TLSH
  T1538219928EFC9583ED979D7013A8E9837D3DEBC35910A15521A9F5EC28C33D1EB24A1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  msvcp140.dll
- Size 429KB
- SHA256 9c1dc36d319382e1501cdeaae36bad5b820ea84393ef6149e377d2fb2fc361a5
- MD5 d25c3ff7a4cbbffc7c9fff4f659051ce
- SHA1 02fe8d84d7f74c2721ff47d72a6916028c8f2e8a
- SHA512 945fe55b43326c95f1eee643d46a53b69a463a88bd149f90e9e193d71b84f4875455d37fd4f06c1307bb2cdbe99c1f6e18cb33c0b8679cd11fea820d7e728065
- SSDEEP 12288:vTLNQjAM80l7Vpm8j2NoSpmanEhUgiW6QR7t5s03Ooc8dHkC2esuDPG:vTLNQcMmYpET03Ooc8dHkC2enDO
- TLSH
  T124944922BB460EF2E58E13B531C643225BF9FC254760B3C393DBE0696F556C26633A91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  natives_blob.bin
- Size 256KB
- SHA256 63ca83faf83e5c47f9ea5915961aeb171b740fe4d4d10c18581c867567fc2e99
- MD5 2f3295417175b37822bf3106b33fab6e
- SHA1 45c1db70ce3062aae85069629519e61bac6cf5d2
- SHA512 30f1de45805f387684a17922aaa91596ce8874dc49d9faa251b0d72bd2c55f91be1d3e3bd74a00933869ddd79e1d36ba03a12db41b2a2875b219bc8e91a98255
- SSDEEP 3072:5sVBVrxNpyXcsR/H/UxRjh7gWQSqeJg/UbqSSU/czL:5sVBVrxNpyXcsRf/UxRjhQSqeJg8Gv
- TLSH
  T16544E95ABEA5AD6742B394B9410F450E7ABC88375418C8E4B18DCCF01FB61199A3BF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  node.dll
- Size 13.7MB
- SHA256 5a50fd0dbd067163212841b20fee6aeece726f27bad2ac0cfbdb887949628d3f
- MD5 2c3f094f3f97bead173c38ec5014b28e
- SHA1 a17eb13136e5db3fb26c25c6b4994e350e765a63
- SHA512 d25a617b1b8c81ec7f05b3643f7a9c22a4c8bc8acb864cf727b5cc2c6fd5cc5fc4d1f3bb6ae9728cda81096b625614aae2f3cc677844f51dd297a132f1d0c18c
- SSDEEP 393216:KUmrIk8U5EDegBsP/QWi9mmNLepqQyAnQngm8RogBh0vfLUEM8AID:Tk8U5EDegBsP/QWismNLepqQyAnQngmN
- TLSH
  T1D4E69E33B4814131E9E261F1C9BD6A29117CD532832D81CBB79D6D405FE25E3BB3A78A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  pdf_viewer_resources.pak
- Size 137KB
- SHA256 73811ff0473c30a8153ca640776507d4ad0e9366b10918c68ea949f3670ea5ca
- MD5 a03daa2328b5df6f58766d552363c90e
- SHA1 6b4d9a18d58706d502a02ac7399c8a631c1f3eb8
- SHA512 97e7865c45d9634f7c938e598c61e72025233662649ee2749b143b8ef2f1ad64e5f0c67436e8e28260f3add5ffcc55b1bf159188f7d61404e470c2a5149f806e
- SSDEEP 3072:ZuujrOzMNsto/AzajcBLAWwlumjAB9IU/O/:PqawBLAWwlumjAB9IU/O/
- TLSH
  T1CAD3E71D6AFE11754027217AAF8F6248A235401F5A27E8993CAC97E41F99F3403B5FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  resources/electron.asar
- Size 232KB
- SHA256 2c16af93461416fb4e645fc32d52f997c89da8531856136fcbb506e45ceabf8f
- MD5 c5dc1d9f15c08edbc471b91c9cd623ed
- SHA1 73d05257bacae6f7ed0b8e0707d5e6544e7a1c5a
- SHA512 37ca8c900acf7b6573efca2dae95c4dda37139f095c83d6ca8bccb4e430ce4763a0e2d8dff3bfe1d0867bf4f978c4fcfb6d749632996526f83d288f7f566cb88
- SSDEEP 6144:b1YRaB5vbvSW9PgS7uUJ1bNw8AIP8yCFZ:bCRa3J1brpC3
- TLSH
  T14234C75926F921250757B0BAA98F7106B63AD013201D5E61BCCC87D4BF8463892FAFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  ucrtbase.dll
- Size 895KB
- SHA256 94952e907781c68d22294fc38d3463a86bbacf285d637eeb1889f7cf41c69129
- MD5 f0270079e98f80cd59ee4c45fe9c7697
- SHA1 9faf9ca18036c83d83d1c2c3107c4d285381049f
- SHA512 1995d1fabc38f078af3fadcc054080be9d2587123100dfb830df0040061a2a68cde43e582e1e7b45d849b1d2c65c733ac6a0aad02ef736389a9c344ed68088d5
- SSDEEP 24576:Eydlff6eKJm5LT3+9ETmk4AtLCkumcvIZPoy4k0FS8:vdl3D0QRF0Fx
- TLSH
  T128157B11B889C665CCEA71F816AEF232457EB1D44FB1A4C337D40FEED9241D02A3766A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  vcruntime140.dll
- Size 81KB
- SHA256 6823b98c3e922490a2f97f54862d32193900077e49f0360522b19e06e6da24b4
- MD5 a2523ea6950e248cbdf18c9ea1a844f6
- SHA1 549c8c2a96605f90d79a872be73efb5d40965444
- SHA512 2141c041b6bdbee9ec10088b9d47df02bf72143eb3619e8652296d617efd77697f4dc8727d11998695768843b4e94a47b1aed2c6fb9f097ffc8a42ca7aaaf66a
- SSDEEP 1536:tBYGvQ2+Ub54AE6ZkJrIriwx0AKGsu0g1kq1ecbRMKlB66M5iEBiA:tB7vQ2+a54AE0sAKxQ1ecbRMKlQoE0A
- TLSH
  T17E836C11B4A84072D176597452AAEAB3B63DAA508FC54FCF6FED4CDC0AB82C17336217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  msvcp140.dll
- Size 618KB
- SHA256 517cd3aac2177a357cca6032f07ad7360ee8ca212a02dd6e1301bf6cfade2094
- MD5 9ff712c25312821b8aec84c4f8782a34
- SHA1 1a7a250d92a59c3af72a9573cffec2fcfa525f33
- SHA512 5a65da337e64ea42bcc461b411ae622ce4dec1036638b1e5de4757b366875d7f13c1290f2ee345f358994f648c5941db35aa5d2313f547605508fd2bcc047e33
- SSDEEP 12288:eNQSZJrC30ovvjPo9E/YZt4QEKZm+jWodEEV2qwcg5MpccRwLM:0Z2jPo96QEKZm+jWodEEYqwcg5Mpck9
- TLSH
  T1E6D42A23FB590AA0D061937891874342E7F1BC154B22EBC752ABE26D2F277D5A33B750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  natives_blob.bin
- Size 256KB
- SHA256 63ca83faf83e5c47f9ea5915961aeb171b740fe4d4d10c18581c867567fc2e99
- MD5 2f3295417175b37822bf3106b33fab6e
- SHA1 45c1db70ce3062aae85069629519e61bac6cf5d2
- SHA512 30f1de45805f387684a17922aaa91596ce8874dc49d9faa251b0d72bd2c55f91be1d3e3bd74a00933869ddd79e1d36ba03a12db41b2a2875b219bc8e91a98255
- SSDEEP 3072:5sVBVrxNpyXcsR/H/UxRjh7gWQSqeJg/UbqSSU/czL:5sVBVrxNpyXcsRf/UxRjhQSqeJg8Gv
- TLSH
  T16544E95ABEA5AD6742B394B9410F450E7ABC88375418C8E4B18DCCF01FB61199A3BF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  node.dll
- Size 17.8MB
- SHA256 e619276471d4f2a513352aba12ab49bf099096143dc77f0a94138f391c7fc19f
- MD5 a50d47188f12878ee9c47a273f55f823
- SHA1 e4ae184535d914e87378e2642f2dd97c15e5814f
- SHA512 3d3de79a3b6afab0c1c9eccba5adbee797566d365d2cdab527c943603abcb4fb90beebfec34de88d3f392d6e3a7ddbad0db7b09bfa5efabb3c40f57af264f9c9
- SSDEEP 393216:CF+mrHzFKyKhNLfdHv30xlYUsw26Xi4qDoUPGi7we9SodRj5ytWr974yaE5KAokZ:xy7PIrAI
- TLSH
  T145179D1B72A50199C5BBE1BCCA578607E7B178568331ABCF22AE43811F63BE1563F314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  pdf_viewer_resources.pak
- Size 137KB
- SHA256 73811ff0473c30a8153ca640776507d4ad0e9366b10918c68ea949f3670ea5ca
- MD5 a03daa2328b5df6f58766d552363c90e
- SHA1 6b4d9a18d58706d502a02ac7399c8a631c1f3eb8
- SHA512 97e7865c45d9634f7c938e598c61e72025233662649ee2749b143b8ef2f1ad64e5f0c67436e8e28260f3add5ffcc55b1bf159188f7d61404e470c2a5149f806e
- SSDEEP 3072:ZuujrOzMNsto/AzajcBLAWwlumjAB9IU/O/:PqawBLAWwlumjAB9IU/O/
- TLSH
  T1CAD3E71D6AFE11754027217AAF8F6248A235401F5A27E8993CAC97E41F99F3403B5FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  resources/electron.asar
- Size 232KB
- SHA256 2c16af93461416fb4e645fc32d52f997c89da8531856136fcbb506e45ceabf8f
- MD5 c5dc1d9f15c08edbc471b91c9cd623ed
- SHA1 73d05257bacae6f7ed0b8e0707d5e6544e7a1c5a
- SHA512 37ca8c900acf7b6573efca2dae95c4dda37139f095c83d6ca8bccb4e430ce4763a0e2d8dff3bfe1d0867bf4f978c4fcfb6d749632996526f83d288f7f566cb88
- SSDEEP 6144:b1YRaB5vbvSW9PgS7uUJ1bNw8AIP8yCFZ:bCRa3J1brpC3
- TLSH
  T14234C75926F921250757B0BAA98F7106B63AD013201D5E61BCCC87D4BF8463892FAFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  ucrtbase.dll
- Size 973KB
- SHA256 4c5b8e529854cedfa8f46cd6906952400cdbbf25efc4cf37dda2c42d8e96ddcb
- MD5 ed82e9c6c4f7a475d7fd6ebabf3fab2a
- SHA1 1062942b1bdfc8d7c8a941c152df69216010d780
- SHA512 bf7bdf4762455a1224cdf1e7cdeb73a3c24c3e04d0b01df9f46b87d174cf4a88621372aa87b7e622b210f63a453c911d88e214ba67560f8ff7d7d0d24da58ad2
- SSDEEP 24576:WhEbImsFPf/JtGlA3wubyZ9dgruOqy38V89DamxvSZX0ypkXvE:WhgImsFPfRklAVyBgr599hX8
- TLSH
  T181259E79FA6C06A5C17BF17CC95B160AE5B2740247604ACF02E64BBD7E2BBD9163B310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  vcruntime140.dll
- Size 85KB
- SHA256 d89c7b863fc1ac3a179d45d5fe1b9fd35fb6fbd45171ca68d0d68ab1c1ad04fb
- MD5 edf9d5c18111d82cf10ec99f6afa6b47
- SHA1 d247f5b9d4d3061e3d421e0e623595aa40d9493c
- SHA512 bf017aa8275c5b6d064984a606c5d40852aa70047759468395fe520f7f68b5452befc3145efaa7c51f8ec3bf71d9e32dbd5633637f040d58ff9a4b6953bf1cbf
- SSDEEP 1536:6iOTTyN9d/mqN5fomseOpLZ5UP4nlf9ecbtGgcvg9EBIN:6DIVzgx5UAecbt4g9EuN
- TLSH
  T1C5838B85B7B48293F576803CC5B28987E238F581977097EF03E583A91F837D28B3A655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH
  T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 391KB
- SHA256 66ac8bd1f273a73e17a3f31d6add739d3cb0330a6417faeda11a9cae00b62d8b
- MD5 c6a070b3e68b292bb0efc9b26e85e9cc
- SHA1 5a922b96eda6595a68fd0a9051236162ff2e2ada
- SHA512 8eff8fc16f5bb574bd9483e3b217b67a8986e31497368c06fdaa3a1e93a40aee94a5b31729d01905157b0ae1e556a402f43cd29a4d30a0587e1ec334458a44e8
- SSDEEP 6144:KI4T3K6gRPI8G1W3ODli+GIuuu8M1CkJagSdJFCAvgw7nv0Yy6ptK:KBK6gU1YsI+GIuEbgagS7FCyp7cD6po
- TLSH
  T1D0848E12BA90C036C66F1231BD18F7A621FE76B0692CD65BB39C5B5F1FB04C1A718A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  Uninstall StarUML.exe
- Size 491KB
- SHA256 fb38154416222698d342eadb48db21c38ad380fbf13e88412d843c71b92f6ae8
- MD5 1085dbab869121fa2577ee777130edc3
- SHA1 0bd6ced0dde2cc23bbd3acc4de8bc4267cba7538
- SHA512 2551379d057475b1119e77ef66846750d83040d8d10b1578328a037a7e1128d06800df52334df9389cda74f20873bf19b7313ea038d54a063bd8e08f112b37ea
- SSDEEP 3072:mC5AvbKpzDaDEi/uYTpOIjR0RokI5gjARvA+mTxG8o4EX5Si8UUKAsdDbOa3O:m9vbAHUXswR0AKmvAbxGJX5Si8UdFiae
- TLSH
  T117B40B416D74BA6FE884487CE256B52205D0ACB92A3D2B6753FFFD49F7A3788412E034
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral27
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 101KB
- SHA256 72d38ef115e71fc73dc5978987c583fc8c6b50ff12e4a5d30649a4d164a8b6ae
- MD5 33b4e69e7835e18b9437623367dd1787
- SHA1 53afa03edaf931abdc2d828e5a2c89ad573d926c
- SHA512 ca890e785d1a0a7e0b4a748416fba417826ae66b46e600f407d4e795b444612a8b830f579f2cf5b6e051bea800604f34f8801cc3daf05c8d29ad05bcda454a77
- SSDEEP 1536:Ayy+wx2YAlWrU5OX9crt5c4DBqiC7hk333kbQk:ry+wojIwgNcr1a7WH0b
- TLSH
  T189A31A527174349EE1F5077C176E2373847E1B38AB28A8DB03A249CEC3761E1A0F5B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
- MD5 17ed1c86bd67e78ade4712be48a7d2bd
- SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
- SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
- SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
- TLSH
  T1E3325C12135081F3E4918138C86B3A276B6A15029BF98E57DFD39546BE31BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH
  T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32