4202fc6f513a38ba553591a05c4244bc022540b63d818d6ee66daef80f93d0ac

General

Target
IVCERadioRestoration.exe
Size 2.1MB
Sample260730-dndfmsbr4y
SHA256 4202fc6f513a38ba553591a05c4244bc022540b63d818d6ee66daef80f93d0ac
MD5 b36d831e5d6deb48acd4db079c615aaa
SHA1 99269a4e77ca4d2f3e2a95abfe9cb4d20e0049ab
SHA512 c172845582d9f4f3fda7c4470fd3eea4d8ffe0a5bacb44f8b9925484637752597152880ad97f7d2fbcdc64afdf7c3ae20a0a60417713263c51e385f3da1b962f
SSDEEP 49152:2zWJ/NFp+4FJJ4UjNiBshLQI53t6I1/+K3xVqz+QpWiz:2zWJlF7FJJ4GushsIGI1GqxVfQn
TLSH
T133A533E0B4279679C5A26B340CF681159FA5A34C572CC74EA3A5D8AAFB11F30D81EF48
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  IVCERadioRestoration.exe
- Size 2.1MB
- SHA256 4202fc6f513a38ba553591a05c4244bc022540b63d818d6ee66daef80f93d0ac
- MD5 b36d831e5d6deb48acd4db079c615aaa
- SHA1 99269a4e77ca4d2f3e2a95abfe9cb4d20e0049ab
- SHA512 c172845582d9f4f3fda7c4470fd3eea4d8ffe0a5bacb44f8b9925484637752597152880ad97f7d2fbcdc64afdf7c3ae20a0a60417713263c51e385f3da1b962f
- SSDEEP 49152:2zWJ/NFp+4FJJ4UjNiBshLQI53t6I1/+K3xVqz+QpWiz:2zWJlF7FJJ4GushsIGI1GqxVfQn
- TLSH
  T133A533E0B4279679C5A26B340CF681159FA5A34C572CC74EA3A5D8AAFB11F30D81EF48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/HashInfo.dll
- Size 1.5MB
- SHA256 6ed33858b59ca6cb769db55c6a841288a1e08603409d5448867bc15eda4068ce
- MD5 fa4b472320cb003b1c549e40e953195d
- SHA1 dd2c2c578dc8c76bc77483414c7e6b7420c779f2
- SHA512 365fbad12a54b94389ba8d549bbb4745387594285ccb6a801ba02e14cc50307fa2a1d5ae6d86cc744b518ef9f5c96962d301745868d81ef6f26fdd1a4344c1c1
- SSDEEP 12288:EIAeFQpdKx4Zmyg8NLMbJECQpCahamSjqVvO4nLASg6H12iWWZvK:0GCKx4YyroJep/JS+44nLASgA1FWQ
- TLSH
  T1CF753B37F245707FD1AA0F394E629373963A77316A569D17DBE00B88DE3D200DA3A906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/NSISpcre.dll
- Size 609KB
- SHA256 06912b2aa02ebdd717088a24968a38179091c1914b6b807df47934749de8b72a
- MD5 d62706e11c17d5eb3913ec6485bc5b2b
- SHA1 ba6cc02c84acd00ba305f81b2dd5c18f9fa02b3f
- SHA512 37ce1eabf21589c0ff242011011e75cd1c9261cf2a6a51c5a19efa7db532a02002261be9e112550f2f1632b8c9dfd6cf140ef46c6d49267d0e8e1c48a1b879de
- SSDEEP 12288:EwC4vJwbVM0R2ATGJuS/mNp7NQRO0CoxScqdMKiiZUkXml2tm3G:EwCyGbVfR2ATGJuStjCoxboUXkH
- TLSH
  T120D43925F743C2F5D85714B0094BF7FB69349716C8308C6EE748FE64EBB29A1281A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/NScurl.dll
- Size 3.7MB
- SHA256 1f3ffe4e41193b2c98edbb0726cf9ac6102a8e2346a1485788e1b83e99407995
- MD5 b92b00bde182c750feea85f03fcab8a4
- SHA1 6323082464a9559885d9b637dd666f2cb8018bff
- SHA512 e8be32fdf1478863da014e7040fd3b8fa4ea3e5055cabab47f4f8296c93a0ae00dc82be2b23ae9e2371b3ebc0d2da13b51edb0705dd779c710b5a4720acfd8ca
- SSDEEP 98304:deOVpO6zhYO6Q3KfJm4Qwj9gxWnsYeyxLnf5si73oFUPqpDx:deOPO6zhYO6YKfJm4QwjKQ7rxbf5h73i
- TLSH
  T1D9063994FECB00F5E55398F0F49BB37F873096054025EABAFE485E26F933745261A21A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- MD5 1d8f01a83ddd259bc339902c1d33c8f1
- SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
- TLSH
  T12A120992E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 01e72332362345c415a7edcb366d6a1b52be9ac6e946fb9da49785c140ba1a4b
- MD5 b4579bc396ace8cafd9e825ff63fe244
- SHA1 32a87ed28a510e3b3c06a451d1f3d0ba9faf8d9c
- SHA512 3a76e0e259a0ca12275fed922ce6e01bdfd9e33ba85973e80101b8025ef9243f5e32461a113bbcc6aa75e40894bb5d3a42d6b21045517b6b3cf12d76b4cfa36a
- SSDEEP 96:JwzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuH0DQ:JTQHDb2vSuOc41ZfUNQZGdHM
- TLSH
  T171E1093571C02DF7D08D89743816BD2F43F4D52627BE05A04A7B1AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7