5fcbc5eaa9b543ff4745734dc27f2624cf635d175e2718476075e9449a541c16

Sharing

Copy URL Twitter E-mail

General

Target
ControleFinancas.zip
Size 45KB
Sample260727-qfnb4abb33
SHA256 5fcbc5eaa9b543ff4745734dc27f2624cf635d175e2718476075e9449a541c16
MD5 a0c1ce1d69535791f48121312829db42
SHA1 296df84795627fa595a96db906a88e3145cd5421
SHA512 9d9df01c9a1b4a2adb4f962d737e477f8f716d93727ee96889a7d7f231d5cbcc70d993ae6bfc6838d466e236896456cbd87f37236d9e1662b585a673676f633e
SSDEEP 768:HsaX8rlAcJw4SypIMbY7YFK8X1DxIT7gpTPB0qyH2BSEjzkMxu+L/4Qnh:HsaX2jIMMsK6DWCTPB0qyH2BSEno+L/j
TLSH
T1E123D095DE7A46F6E32B88BC3C545950B428F025181A4D77C2717C824FD63B38FAB88D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  ControleFinancas.zip
- Size 45KB
- SHA256 5fcbc5eaa9b543ff4745734dc27f2624cf635d175e2718476075e9449a541c16
- MD5 a0c1ce1d69535791f48121312829db42
- SHA1 296df84795627fa595a96db906a88e3145cd5421
- SHA512 9d9df01c9a1b4a2adb4f962d737e477f8f716d93727ee96889a7d7f231d5cbcc70d993ae6bfc6838d466e236896456cbd87f37236d9e1662b585a673676f633e
- SSDEEP 768:HsaX8rlAcJw4SypIMbY7YFK8X1DxIT7gpTPB0qyH2BSEjzkMxu+L/4Qnh:HsaX2jIMMsK6DWCTPB0qyH2BSEno+L/j
- TLSH
  T1E123D095DE7A46F6E32B88BC3C545950B428F025181A4D77C2717C824FD63B38FAB88D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery persistence privilege_escalation spyware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops desktop.ini file(s)
- Checks system information in the registry
  System information is often read in order to detect sandboxing environments.
behavioral1
- Target
  ControleFinancas/ControleFinancas/ControleFinancas.jar
- Size 28KB
- SHA256 40ed63960ffae95fbac6b6801af71f7143890e6d778df6e03f4084ce815cff5b
- MD5 d9334c6528b6d7cc4be359c6bc519235
- SHA1 a286f46c8301b962abef02b034f90ec41930b2ff
- SHA512 3158ae7c92776ee01728a593cc101b8dd60c800a710486c9837c917053ae38b90e3b70afe1092271c7c80d7d75699bdf8a0055cfc9fa86ae8d5621f167e55bdf
- SSDEEP 768:D446bNOsmWYMBBCwyL4ARtsUZ/ECdwGFl:DG4j9BRJcGB
- TLSH
  T178D2C02BBBD4D0A7C20652701863E942720B965EAAA4043F62F41F7F7D2AA4F461F3C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  ControleFinancas/ControleFinancas/LEIA-ME.md
- Size 4KB
- SHA256 4ae1a4c92d01793efc8d38e0a738725ed238c54a275adf5d084d0380b2fbe7ec
- MD5 864f6213b45c35c8f33c15e7cc16f2ee
- SHA1 65c0a39fa8d74ded78c431d9738726aa938212e9
- SHA512 fa04ad81950688a70ef3d467bb636f184a0a452d3c92ebd3cc1b35db8be42c06f7f675795f99c607334ee923d38fa3609659fb6ed448b59cde4c1c82e65e11fd
- SSDEEP 96:Rhq0l+1wWFyUDMzKnzO6HNHphf691omDFqoKeCoX:Rhq0l+1wCXQzK6SNHphiLZqBoX
- TLSH
  T13991C329AFC503731A3A03C0374E9FD7D9D421756942D9E6D63E4E36E8C1522E06FE54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  ControleFinancas/ControleFinancas/src/BotaoModerno.java
- Size 2KB
- SHA256 c11b1d6d089723653750b8d261b006b21a2d39fac68d8def699b97fbd114c363
- MD5 dff371312d9f79bafa441779f6d4bedf
- SHA1 c8f6839d2b62ff998170f41899b391f2c26485cc
- SHA512 47cdf1c32c4c69cf9d4febdbfaffed64620521019aee483846b9b368abbd87fe9445a36340a4a1b7cf64a363742c73b9e17708ffbccac3775f8c95154e3d66a0
- TLSH
  T19B41FD18699F090B5833CAFE0B8FAB06985FA093651FFF5C7D2E83241F900D8A660D75
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  ControleFinancas/ControleFinancas/src/CardPanel.java
- Size 1001B
- SHA256 fcaae4839da8b975f64c3179b047ce63b2aee082872a59522ed4b7166dc361a2
- MD5 682444853b7c4fae16eac402f475cd77
- SHA1 42f1249d03466f96a9ddf7428ead7cb945bebfbc
- SHA512 90deb89c12f2eb93a29b9645db5adcb9eb1a474911c132a35603288abe5aa310e890ade07ba06a81ebf72ef3d41b0cb332375ced1ad358adf718678dd16886a4
- TLSH
  T136119B2328E31C5990779AEF5B6E4B0A68DF4463A4AFE21C3C2DC36A1F1211564E0A63
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  ControleFinancas/ControleFinancas/src/ControleFinancasApp.java
- Size 26KB
- SHA256 6f51c987603679c4d6d0310896c5f66d56a4e1834aba1d657346d6fc6836272c
- MD5 bdc55ebe76c2de98a1ef99d65595179b
- SHA1 b777eb8ba51b8ae6f250f16b0c1413328dfae2af
- SHA512 02f0df8b614911c01352f8277f7ca1526d921e78a939126074fd6608f1f1b9c4e355f67dda766a69fb76137afb913ff079823c2562b34af91c8de4fff0bfa14c
- SSDEEP 384:1X8fwFc0BoWgHaClC4cDaxZAF48SOpg3tL8a7JEf:1X8oFHgHFlxkktL8uyf
- TLSH
  T1FFC2B709ADE708900133B27C8FEB99C1AD95450F1A1DFEE0BE6FD6674F408269178F62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  ControleFinancas/ControleFinancas/src/PainelGraficoBarras.java
- Size 5KB
- SHA256 e52f04ce6e7e5a726b83ae3c11e0474d52a007b63e08ef773fdd5a2698895d1c
- MD5 40266a592b37e99061bf9509b9156352
- SHA1 c4273d4ca843f4a6c57fe95a4b069ed2212c2b48
- SHA512 7eaade099a6bd5ff2efe727887889ac970428b180a1c0dadfcab6f8cc6133e7f5d12c8d4a528e8893af2234297db63888dd05a3e8abe06a692d460ccc7dda6c0
- SSDEEP 96:6vJ0yZLhVaaSHijq7Mm09fhZbTUDtHAob+2i5tok67IOIk0e:6vyoLhVaaSCuX09fbo1AZh5fk7
- TLSH
  T1BCC1A51B4DA70D52CE235A194F4F12C9DD8C986F4179FE6FBC2F86A24F40428A1B9B35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  ControleFinancas/ControleFinancas/src/PainelGraficoPizza.java
- Size 3KB
- SHA256 8fceaf58dfbaaf1efefe4b294a0fd46d7ac3dd227b8dffbceb4fb8afe074683c
- MD5 7cefaa9675ee776d2d5e77c1676cf454
- SHA1 a63f027a0468d6bec344cf95c7cc03fc1cbb713f
- SHA512 3f7553c413287d4278b486e88dfcd33b843b63ffbf4cc8553d6d4d37db1ba25eb6457910a11de947892bb25ff6842cfe4745da37c43b8f1e93d14693595558d8
- TLSH
  T1DB51342FAD6318504736169C8F9B1686B67D882B854FFDF83C0FA5658F4041975B4F32
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  ControleFinancas/ControleFinancas/src/RepositorioTransacoes.java
- Size 1KB
- SHA256 d83c900712a13b40604c63654589103228ecb7073959da475a6508f71d2cff45
- MD5 fcb22a3e4605e041613522f21f26634a
- SHA1 6648615e1c94f58f5ad3c4d595e4d76d06f2e840
- SHA512 8c1db4bf46821e5ea8222533831434626810b7521d9ab602c4b857d27b5d24c93f84ddbf1e2ad51eaa8c1e78781115a14dd8c136fab96224de0a7c1d802f39f4
- TLSH
  T16E41400BC9E209A2434732D87B8F6086B6A7CE670A6DCE95F80D6B402FC41B6D5907A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  ControleFinancas/ControleFinancas/src/Tema.java
- Size 3KB
- SHA256 6657e43147c9a3cb78aad09f23bcf85bec122e11b10b2b51e52267af91fd267d
- MD5 e46161c6729accffd3b9ed0fba44f183
- SHA1 4e818b6f05b36109f9478b00abb529ed23a3607e
- SHA512 0fe9edd165b91572dfeb052f8252e52493604f8ecf20ef6251732e6c6468c667c30d5b178c1a4e19d70af21c14259b4a70d0bbfa404ac81c174a0ec468f692c4
- TLSH
  T173715D445346C5D01E73B0AAAFD747A78613201F277E822F7D1F06401F8A49D637ADAE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  ControleFinancas/ControleFinancas/src/Transacao.java
- Size 2KB
- SHA256 42279d71867002702f789a446047c8f43745924154cd1a5aed994277901fcae9
- MD5 43e189203fb3b1dc511ee0a0b7304da8
- SHA1 a1efe0be59adf28e40090800c9e6bbcfb37c4bc2
- SHA512 ddad3ae4a9222282403411f81a005cc089a77abd3a6cd01fda68ea0168c78fdc639d9621f8c8a181dc8087d096951a5475ca89da638e7e0e3db50caa0bc144ab
- TLSH
  T17441D01E3B9B8D40041530945F8A04C77B63D1170B1BCFB9FA2F4942AF5158AADF8E76
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11