4b12139f0bc6a7ef12a930d35de53113a07a63895519d9836cbe33ff17b70eaf

General

Target
4b12139f0bc6a7ef12a930d35de53113a07a63895519d9836cbe33ff17b70eaf.exe
Size 463KB
Sample260727-e9h4pagr4v
SHA256 4b12139f0bc6a7ef12a930d35de53113a07a63895519d9836cbe33ff17b70eaf
MD5 1f0351dada7cc8e1c9d0710c877ec76f
SHA1 940c129d57a8ede58eddbf27a90aad06bc9c624e
SHA512 2adc3c2b4ad847132727aec880183310837212791dd80929b8dcb91667ee23936f52e22bba17e08b0f948267b1d76407a4d3510b8a29861b5d946e0fa6425203
SSDEEP 6144:ghRMPAEwuZ0NTcIonakh9gjQ+2aONKWChHP1Y2blH33Jaa3LjLacI1/s+X/YHrob:GAAwYJoNh9ge7IW2BHXLjLaxUAgLwnH
TLSH
T115A4F103FA50A266C165033158B78B3C1737AE645BB15B0F235CFE353AB72D65A8738A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  4b12139f0bc6a7ef12a930d35de53113a07a63895519d9836cbe33ff17b70eaf.exe
- Size 463KB
- SHA256 4b12139f0bc6a7ef12a930d35de53113a07a63895519d9836cbe33ff17b70eaf
- MD5 1f0351dada7cc8e1c9d0710c877ec76f
- SHA1 940c129d57a8ede58eddbf27a90aad06bc9c624e
- SHA512 2adc3c2b4ad847132727aec880183310837212791dd80929b8dcb91667ee23936f52e22bba17e08b0f948267b1d76407a4d3510b8a29861b5d946e0fa6425203
- SSDEEP 6144:ghRMPAEwuZ0NTcIonakh9gjQ+2aONKWChHP1Y2blH33Jaa3LjLacI1/s+X/YHrob:GAAwYJoNh9ge7IW2BHXLjLaxUAgLwnH
- TLSH
  T115A4F103FA50A266C165033158B78B3C1737AE645BB15B0F235CFE353AB72D65A8738A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8
- MD5 55a26d7800446f1373056064c64c3ce8
- SHA1 80256857e9a0a9c8897923b717f3435295a76002
- SHA512 04b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b
- SSDEEP 192:MPtkumJX7zBE2kGwfy9S9VkPsFQ1Mx1c:97O2k5q9wA1Mxa
- TLSH
  T1F2324C15031086F3E1D2853D682B39AB2FB969118AF04E438FB35952EE347C7AD79352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4