cd6a6e376ff87c85857e9ca0a934c6dbed8923aa327264a06f023714c9dec3f3

Sharing

Copy URL Twitter E-mail

General

Target
cd6a6e376ff87c85857e9ca0a934c6dbed8923aa327264a06f023714c9dec3f3
Size 1.7MB
Sample260728-ezz98aeh83
SHA256 cd6a6e376ff87c85857e9ca0a934c6dbed8923aa327264a06f023714c9dec3f3
MD5 b3c9247c8e01376b0221553ec9736d03
SHA1 74257c400653ffaf3b45fbf5233696d8da64bd2b
SHA512 34cd6763be9314c051d87c5261def09103bb6780b7abbe9cc3b36c8682b2786d4006d64a5521d4cd3e6f05cff5c1e61ac9f690fe9847362a32aad7441f0b94cb
SSDEEP 49152:nm/glmRRtyBN9uMupBYy08YQaSi4b8AD6h:nGAm4BjuCYaSLbV6h
TLSH
T13F853341BAB1DDA9FAE64438A073E36DE19247707DD1D30E07205185386FBB225BFA63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  cd6a6e376ff87c85857e9ca0a934c6dbed8923aa327264a06f023714c9dec3f3
- Size 1.7MB
- SHA256 cd6a6e376ff87c85857e9ca0a934c6dbed8923aa327264a06f023714c9dec3f3
- MD5 b3c9247c8e01376b0221553ec9736d03
- SHA1 74257c400653ffaf3b45fbf5233696d8da64bd2b
- SHA512 34cd6763be9314c051d87c5261def09103bb6780b7abbe9cc3b36c8682b2786d4006d64a5521d4cd3e6f05cff5c1e61ac9f690fe9847362a32aad7441f0b94cb
- SSDEEP 49152:nm/glmRRtyBN9uMupBYy08YQaSi4b8AD6h:nGAm4BjuCYaSLbV6h
- TLSH
  T13F853341BAB1DDA9FAE64438A073E36DE19247707DD1D30E07205185386FBB225BFA63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  mdview.exe
- Size 3.4MB
- SHA256 2ae94dcc9de4ab2496b2c815a961bf81abcfae64405b432c443c7acebaf09aea
- MD5 82ea17093f3c9f88a8c89af357b0626b
- SHA1 1e0d39573386c920b5cf112157ac37d64062d294
- SHA512 3232f684c2514b488be998da5f610de7d3f66af3a9b2d6f51f2a841d97faea85d7dff4e75e4b152efdc91ebc0ba104aa60d64ac9247dd1508301d49d2db76070
- SSDEEP 49152:b9mA8qKuxumQ3XSI1HELFon9R2hYrTPgJeYJlsOcKfCNqoT1b02lokCOa:Bz8qKnSIH/TocYvsFHNqPy2
- TLSH
  T1D0F56D03E69580E9C06EC17883569637FA32B88B4524B2EF7BEC0B112F66F905F1E755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8