2b1d5fea7898a417de16b96beaeea9bed041c62a72a23aa59e911f27f68600de

General

Target
2b1d5fea7898a417de16b96beaeea9bed041c62a72a23aa59e911f27f68600de.exe
Size 789KB
Sample260727-c7g3haha55
SHA256 2b1d5fea7898a417de16b96beaeea9bed041c62a72a23aa59e911f27f68600de
MD5 9494a2871a5782e1c3044e2dc8784282
SHA1 daa5bcb603981597c9e7cb17455b0a3dd69615b7
SHA512 ecf8006cc25b781285a6f46cd15af7c9b109e9815c87f0eb739a70f6a8c839efb689478f66ed471cfe5ac37bf710ca9ab0f522b15de8ca7a1e1c69bae8c88729
SSDEEP 12288:FSW9MrpT34uxqhxw3LUOCxiO4VYdTxC7dZcU6siAaPmpmM:FSW9MrpT3kbw3LUOHtYC7dZcPs+E
TLSH
T175056C517670E7AEE6761639B4CAC26D65547C30AD06038FF1B07FA807B2EAC4F82791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  2b1d5fea7898a417de16b96beaeea9bed041c62a72a23aa59e911f27f68600de.exe
- Size 789KB
- SHA256 2b1d5fea7898a417de16b96beaeea9bed041c62a72a23aa59e911f27f68600de
- MD5 9494a2871a5782e1c3044e2dc8784282
- SHA1 daa5bcb603981597c9e7cb17455b0a3dd69615b7
- SHA512 ecf8006cc25b781285a6f46cd15af7c9b109e9815c87f0eb739a70f6a8c839efb689478f66ed471cfe5ac37bf710ca9ab0f522b15de8ca7a1e1c69bae8c88729
- SSDEEP 12288:FSW9MrpT34uxqhxw3LUOCxiO4VYdTxC7dZcU6siAaPmpmM:FSW9MrpT3kbw3LUOHtYC7dZcPs+E
- TLSH
  T175056C517670E7AEE6761639B4CAC26D65547C30AD06038FF1B07FA807B2EAC4F82791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 014f1dfeb842cf7265a3644bc6903c592abe9049bfc7396829172d3d72c4d042
- MD5 12b140583e3273ee1f65016becea58c4
- SHA1 92df24d11797fefd2e1f8d29be9dfd67c56c1ada
- SHA512 49ffdfa1941361430b6acb3555fd3aa05e4120f28cbdf7ceaa2af5937d0b8cccd84471cf63f06f97cf203b4aa20f226bdad082e9421b8e6b62ab6e1e9fc1e68a
- SSDEEP 192:gFiQJ77pJp17C8F1A5xjGNxrgFOgb7lrT/nC93:E7pJp48F2exrg5F/C
- TLSH
  T15D425B0583618EF3F5965E3C00667E2F2B79BE3416F100A39FE34481A99A1CF99B5392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b2699fdfdab6a018fcc972806d12f71972de1861660bb6578935d62b1da06504
- MD5 3cea4c9994912d8f3c3e8b6a814e810e
- SHA1 c48d34a0981d4ab576c7a3ab566f5ddb94af5d86
- SHA512 d317449f3c3115e279cff148c3e0bccc9b1d4ba82d1f85c0b99d7db657e85f752c0691d33f8024ada5850c993d0bdcbcc70b296b7cf33d7d14a67bc16ca3b4a3
- SSDEEP 96:o417lf7AR1VhrfzBik0cxM2DjDf3GEkniJnifvcx4Lb8qndYv0PLE:oOl7wrLBn0REc0JxEdO0PLE
- TLSH
  T1D51207135A0444B3D9E2223A31AA2F2ED73C9324D0A27D02C777DE5A2BB43166D3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6