General
- Target setup_jingle_palette_v572.exe
- Size 8.5MB
- Sample260730-lxmpnsvgrg
- SHA256 4923773c67ee7cdba2997296655a0f4bde0092864d4567cc0408daceb9b8b6ef
Malware Config
Targets
-
- Target setup_jingle_palette_v572.exe
- Size 8.5MB
- SHA256 4923773c67ee7cdba2997296655a0f4bde0092864d4567cc0408daceb9b8b6ef
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/AccessControl.dll
- Size 13KB
- SHA256 d52a83c2a8551cebf48ff7a8d5930be1873bce990f855ccab4d7479cfeb22e3d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 fd26ef21d72797fedecd3d15f2001cea793383aceb3cee19a5ae2a3d30e197b6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
Score3/10 -
- Target $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 579a034ff5ab9b732a318b1636c2902840f604e8e664f5b93c07a99253b3c9cf
Score3/10 -
- Target Dependencies/LVBtn.ocx
- Size 168KB
- SHA256 ffb20718f00598c019c9d0565f4cf2c65704e3be6508d75afbe7fe3a6c2aca0c
Score3/10 -
- Target Dependencies/MSCOMCT2.OCX
- Size 646KB
- SHA256 160b0cef5e9ed57c024e9b3a278e6456e849daa85d46f2b6d1450bf19fca72dd
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Dependencies/NSLIDE32.OCX
- Size 34KB
- SHA256 1a6167f289ec4f3da825d75581d5bce85f18977202b7edd44ccc837b5384bf68
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Dependencies/ScrollBar.ocx
- Size 88KB
- SHA256 d6c984e94c5641e3d4a4110ef47399fac40c0acdfa4bbf8b7ee65c7d9b3134aa
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Dependencies/TABCTL32.OCX
- Size 218KB
- SHA256 d10a197fd53e65dc910ca4aed86cb674c613ff14ce6436d1a445bb27a7a499e0
Score3/10 -
- Target Dependencies/comdlg32.ocx
- Size 149KB
- SHA256 e32d8bbe8e6985726742b496520fa47827f3b428648fa1bc34ecffdd9bdac240
Score3/10 -
- Target Dependencies/levelm.ocx
- Size 48KB
- SHA256 68c18dd043e5aec1f03ae2d16391eb56257981993c084161191ef0780545eae3
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Dependencies/sysinfo.ocx
- Size 65KB
- SHA256 6bd71e7d01b763380809ddd74a78c83e490d71779269ce78bcac19929803bfc2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Jingle Palette Reloaded.url
- Size 236B
- SHA256 ed4263ccb402d9ae77f668d58e7b800dda4cb63290c6c1bb5ec8a18e1a3406e2
Score1/10