bf70f86de2d626072d1bb0e76029e0f6dd8e018fba1d3463a6f2bacca0f77b6c

Sharing

Copy URL Twitter E-mail

General

Target
bf70f86de2d626072d1bb0e76029e0f6dd8e018fba1d3463a6f2bacca0f77b6c
Size 10.9MB
Sample260730-tabmwsvxbz
SHA256 bf70f86de2d626072d1bb0e76029e0f6dd8e018fba1d3463a6f2bacca0f77b6c
MD5 4eb605a41f1f5ecd579d27c5a4db7eb5
SHA1 9cb2c66b4702b0d37284a593fcb16860b1ccb80f
SHA512 5986ce322d109546e899c5510eae24d6f7f504ca9ed9737ef88c58b6f036529c336f2f01110616870f99dedeb1d50eb0175a5d7c983db134ef68b70b96a9a25b
SSDEEP 196608:BuaiGPbhHGAPaFdh5zeSceJnv1N054PueXe5kp2ONX0X7gVUGL1W7rkBYmMZmatG:BhZPaFpze5e90+h2kshGjpWkWmMZmqbI
TLSH
T1B5B6334C0FA95A48EA6D1F76B91C9369F3D414B2580953834E3F620A79A1DB8F3EC1CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  SmoothDraw/SCSIEngine.dll
- Size 360KB
- SHA256 bd085273f2ca049a908fe91c10a9ef1a37cf87c2c5ec86668361f7b5b3ccccf2
- MD5 03ac24119ed29d38ff10599df8f1f236
- SHA1 141f6b0189bd995901cec5c3712fb3dd5ac379a8
- SHA512 874faa1e8e87d2817529c3447b0853d99c0245a0824b2490112686c6c18fc96c4cc84fbcb8261893444956bc7d178f5cc48cee16781c592dd04ed9964f3695b1
- SSDEEP 6144:7MDxJjRebTdiqcbRKMdNYUoqVuQeQNmW0LcypQVg1WuYSAsU3O9nKf4WTY52ityZ:WKLUoqNGmWESAD34nKfRTI2JFP
- TLSH
  T1DE74D05AFBA4007EDD67C534C9430A06EA72B84707A1A79F03604AF6DF6F7A0A63D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SmoothDraw/SmoothDraw.exe
- Size 12.6MB
- SHA256 8b2d251377a19e6966f54120a97b74c8282e32179bb518f239d28141311198e5
- MD5 80c510d1f15a599901fcdca86e23eaa8
- SHA1 2626d3a8a0e2dcb3d4e588a8421c45e683a9c87e
- SHA512 a24f767aeaac63b6342c5e31ab0f11fc97f11f7f89a4480a2b2cf8d87bd33c7fa7fe67a3540b341f73d9184c35a99a142e243735ce3a87edc4d72a8aa45cd711
- SSDEEP 196608:71rA0H0Ru4rWL57BpiY3wlztqCGQfotz3pbV7zPcrtGsqT:71rORu4rWLRBpi7FtfotTpR7zcov
- TLSH
  T1D2D69D56776901E5E077C03CC99A8657EAB17C0A0B318BDB11907AAE1F337E14E7EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral3 behavioral4
- Target
  SmoothDraw/VCRUNTIME140D.dll
- Size 160KB
- SHA256 2fbd0ef78ccc3e77b6275bb8fc679acff23bbb1ed19bc8821276fdc84dc74c4c
- MD5 01eee7747651c32df22680c4f7ca9857
- SHA1 20e509d36bce300aae0496a683fb7324a0d6302b
- SHA512 8d89f7cf555cef73f9d3c2d559634491d7046d8f98cf4484d86579ba359d5631338d247bf79fb8f6e436cba13545264aa682fbfafc0783dde3d7e1406d83eb87
- SSDEEP 3072:kze40PF5dW1Rg86k8SOnAZzf9mjecbB+giw:kAFm1m86k8SOAlojecbB/
- TLSH
  T19CF38347F76650F6C8BAC038C993322AF97131A5C33097DB97959A275B51BE0EA3D380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SmoothDraw/api-ms-win-core-console-l1-1-0.dll
- Size 18KB
- SHA256 1cfd1fde85ff9cd67a754946bb74e6f1c31cc629102279125c901dc403595f4a
- MD5 4f8e87e3e882d6358b4f8e5f3cf44692
- SHA1 32616758db852025173769a263b091b8c5eea424
- SHA512 b4b7b092f388db9ffc966cce3669956def69ec26035a808cadd0b72ca5fe72a89ee29b676822bb1f1047cabfda95c24669bd5f4ae4c9e1ab1bfc909f6df6ffbf
- SSDEEP 384:EW2hWCndpkEYPL6QWLvEzpkEkGQWLvyJ8JN77hhsT:4vIE3QWLEWEXQWLyW3huT
- TLSH
  T1B9821AC70E6AA463FECBCD7192D6D1579D34B3D0AED5584B20F8C1826EC6BA13B4910D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  SmoothDraw/api-ms-win-core-datetime-l1-1-0.dll
- Size 18KB
- SHA256 1c430b349b6725c48d80554488d1682fc8766697e15a15ec15a46b34c54b5dac
- MD5 1d75df38b4bea9eb847b3d8947651dac
- SHA1 94c0b7cb8d0265c954bf0ff62f17ff492494ce4c
- SHA512 2999cf4578dbe9621cdafdc82b3772239c1e26fe60d5a479d355932dad0b4ba244682520affb9d07818cc6c5e03b511b3b9c8b2ed7f8d2bd645f3aeeb423c35d
- SSDEEP 384:4UW2hWRndpkEYPL6QWLvErBpkEkGQWLvvt8JN77hhhp/tMf:RUIE3QWLEYEXQWLy3h7pyf
- TLSH
  T12C8218C70E2DA453FEC7CE71A2D5D6578E75B3E0AEE5888B04F881812EC5BA13B5811D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  SmoothDraw/api-ms-win-core-debug-l1-1-0.dll
- Size 18KB
- SHA256 8ed9ef47ac9b3bdef9ceb370002df06910edfd135fd2c647f2feb90e9500c062
- MD5 0c96d7e18c26809ea8b97ee0e4f8d08a
- SHA1 fde328f8b2105fdba24cb72d4bb2f6f2a4bd87ff
- SHA512 9b09b99cfca59bc839e038e8730b29419aa460007ea4a95ed7c6dc9d38cbe732a790c9e09566d90d4719dc34bd655d3bc02a16f8fd77a967d5aed572de51c6f1
- SSDEEP 384:RW2hWYndpkEYPL6QWLvEhpkEkGQWLvvq8JN77hhJd:fdIE3QWLEcEXQWLd3hTd
- TLSH
  T1E18208C70F2D6053FECBCE7092D5D65B9D74B3D0AEE5988B10B881812EC6BA13B5841D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  SmoothDraw/api-ms-win-core-errorhandling-l1-1-0.dll
- Size 18KB
- SHA256 6036143384b6cbb4ea4d8a0215b51905935dfb0e3e8dd46311540cc1d066f372
- MD5 cdfebadc36b79b65dfff0b5bcca9bbaa
- SHA1 6eedf2e5f7b1d13aa962e5fefbbbd68b9de2c43d
- SHA512 7ea462b0005c4aa730ea4a1de2209b18195f9d7d54f5a0468f67f268a6940a432a8ec57eb20f56838bc27db37e5e8164e48b4a63857f0cf4ae3bbac3f1014c2d
- SSDEEP 384:+hRW2hWqndpkEYPL6QWLvELppkEkGQWLv48JN77hhnwI2:+hf/IE3QWLEL0EXQWLb3hxn2
- TLSH
  T1B28208C70F29A453FECBCE71A1D6D6179D35B3E0AAE5588B00B881822DC6BE13B5911D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  SmoothDraw/api-ms-win-core-file-l1-1-0.dll
- Size 21KB
- SHA256 57122aeb4f83307181ede7cc5a1dd31cc48a865cf1a94f27979e0c4a875e2300
- MD5 add871e87d599a93526f3af86a662c16
- SHA1 a78f19ef56cd8eab2b105b95c220266100118b0a
- SHA512 b82a770c891968daad937229348da3714c01d7d2047bb0ac5f7df250ccc63d78413978dc555fb42e1fc4bdf1ba53740973d9638e28b0d5450caebe2494625a44
- SSDEEP 384:tBPvVXgW2hWRndpkEYPL6QWLvoFpkEkGQWLvqdl8JN77hhMIF:DPvVXEMIE3QWLogEXQWLt3hK+
- TLSH
  T1E6A208874E28B167FECFCE76A1D2C5578D30A2D099A958CB16F883867DC6792278C00D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  SmoothDraw/api-ms-win-core-file-l1-2-0.dll
- Size 18KB
- SHA256 0e8d963811793b340ccb35346afa48142a5010236c7e5cfd34d3925f9a7732fb
- MD5 1f851173c3b3c2b1d4830ec8eb037dca
- SHA1 fe953d5e28ee7874084929e50d82d5d97f0ea9ac
- SHA512 b96285ba84701a0f212b4b850dda4bfb166e10b5ad2c48257666f38e7f5413f67b02666c0d477bf1628346aa2d45a51d84dfa09c8b06057e7e6fa48e43d79cfd
- SSDEEP 384:9LW2hW9ndpkEYPL6QWLvESXMpkEkGQWLveGLj8JN77hhoFb:9dcIE3QWLE6hEXQWLeL3heR
- TLSH
  T12A8219C70E296413FFCBCE70A2D9D61B8D75B3E0AED5488B00F981822EC5BA13B5951D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  SmoothDraw/api-ms-win-core-file-l2-1-0.dll
- Size 18KB
- SHA256 32606ef714c6aa729e932ae196cecca1d172cf9c3f987d00fea14e8cccbaa41f
- MD5 1b60ffc7581ef1b00b18558436d5c5e8
- SHA1 24c53cbdff100805bfa78391db5057b5bf5f6ba7
- SHA512 7026c968042b31b1175d185eeb24c258ed695e7d93b9066f2b25fe9b06f32da613ab1233a6e545875ee7941dafadf89bc3d74cafaa7639245c294bc9a56a7719
- SSDEEP 384:9V6W2hWPndpkEYPL6QWLvEQpkEkGQWLv4s18JN77hhIA:9VCOIE3QWLE1EXQWL4V3haA
- TLSH
  T1918219C60E29B053FEC7CE71A1D6D21B8D75B3E0AEE5588B10B982812EC5BE13B5950D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  SmoothDraw/api-ms-win-core-handle-l1-1-0.dll
- Size 18KB
- SHA256 53a8c12e730cce9e433010959f854a1736c4136590c154d98a13f8039813c609
- MD5 0d5ed330989cc5728e29c5b72d7a5bb4
- SHA1 57048aaffa29eec131c0a0095e8f6226f3b804e5
- SHA512 ee36b1f7d5422a75efa55e29e6c67713cce63f3e24a234b3fec1a1251f4b17c0b9a1281e5540d63bcfc43971cff6c5e919337e4399b21b75b982e15d43cbe98f
- SSDEEP 384:NW2hW6ndpkEYPL6QWLvNG6CpkEkGQWLvi/8JN77hh8Z:7fIE3QWLNnEXQWLiE3hKZ
- TLSH
  T1348219C70E2D6063FFCBCE7192D6D2579D75B3E0AAE5889B04B981822DC5BE13B5810D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  SmoothDraw/api-ms-win-core-heap-l1-1-0.dll
- Size 18KB
- SHA256 2ff9ced1152d1b1028fa22e4c334edbd728cd0e502563c07b46e26746d625308
- MD5 996af84792c081f757742c0652d95cda
- SHA1 6841826f76398d47ca8507890abb60f2d825ee3a
- SHA512 9d30cb844d0f23e5666a353e5282a730548f3e3cc3c6cc545c8477c30b7e03b8f570e6204fe4d5f2ead65182741ac3617b16758cf96f0d4f30974497681fef66
- SSDEEP 384:ulrW2hW/ndpkEYPL6QWLvtpkEkGQWLvCDu8JN77hhBgt:8mIE3QWL4EXQWLCDp3hvE
- TLSH
  T1C68229CB0E29A413FECBCE7091D6C21B9D75B3D0AAE9484B14F882812EC5BA13B5D10D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  SmoothDraw/api-ms-win-core-interlocked-l1-1-0.dll
- Size 18KB
- SHA256 9543e30bf7ea025714053152b969751eed181204c20929374beaf8d3f8a71033
- MD5 cb9be25fe0590799bbc20ca49454309a
- SHA1 8ab910303a6d4b1bf489b5ecdd8315934e1aef24
- SHA512 845d465befe4406bff44b9fee7efa8f48b5e317a02f57794b6c7ace35c976581f2b3f88dd313bbadda7997a9e1055946c9a50cc7715a2a3bb02dd5d3a3d2f3fc
- SSDEEP 384:AW2hWNndpkEYPL6QWLv5utpkEkGQWLvT8JN77hhq5sZ:kUIE3QWL57EXQWLI3hY5W
- TLSH
  T19582F8C70E297053FFC7CE7192D6D6569D74B3E0AEE5889B10B981822EC6BA13B5810D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  SmoothDraw/api-ms-win-core-libraryloader-l1-1-0.dll
- Size 18KB
- SHA256 98f4241bbda498c69729b92cdb10834620801cee99b0d250860d96285dfe0e6e
- MD5 cba4506a2abea2399b9ab23329e57d5d
- SHA1 edb0c0ae6980e754e255f253d262f94f8c7f610e
- SHA512 d579baffcb301dd7760b3d035ed93b64466ed617ee824e28dd35beda087522d51018e3cf60fd703713cb1b12e78bbb8fe73aae17e1a5ee8a4b8cf44fbb62052a
- SSDEEP 384:uvuBL3BaW2hW7ndpkEYPL6QWLvEJdpkEkGQWLvp8JN77hhDdqKX:JBL3BiKIE3QWLECEXQWL23hZEG
- TLSH
  T14A8207CB0F2D6453FECBCE7591D6C6178D35B3D0AAE5889B04F982812EC6BA13B4950D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  SmoothDraw/api-ms-win-core-localization-l1-2-0.dll
- Size 20KB
- SHA256 d1030db8e6399c8c80e4acec65dfda3101f580e62cd5d9e63631f5e6085a0e91
- MD5 27569070a77e5f3b63b4e0dadcb14efd
- SHA1 6dff42ae1d6a8379a5a33dde44eb495eba0e87cd
- SHA512 36c686885c276341db84a3ad776bcac299a22d5beeb843f15cae8788675590b06e8df936b07bf74800f2116972db02e152fbbeaf6bcd52e1963956ee7adda98b
- SSDEEP 384:POMw3zdp3bwjGjue9/0jCRrndb4W2hW7ndpkEYPL6QWLvE5cpkEkGQWLvV8JN77p:POMwBprwjGjue9/0jCRrndbMOIE3QWLM
- TLSH
  T1349228C70E29E217FECFCD72B0D7C5068C74B39499A6988B01F587416EC2BA13B9910D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  SmoothDraw/api-ms-win-core-memory-l1-1-0.dll
- Size 18KB
- SHA256 ae953dde78c0dff3bb2d0e950e206a0a3d95515ee2187b2864d795fc23821d33
- MD5 b8d62c57bbf6fc10e09d23df41ce4787
- SHA1 db7a640176662bcea0f9d54f9e4e0aa6263fb281
- SHA512 ea229477a87fbf9ff5a69ba773a7caf515225e4a03363d78710031ead66bddf4b861d4f9be9166c208f52303cf1e66be592ce9fbc6013bba6b02d37324a24f86
- SSDEEP 384:XUW2hWg1ndpkEYPL6QWLvEgpkEkGQWLv58JN77hhPc:Yb1IE3QWLElEXQWLG3hlc
- TLSH
  T192822BCB0E2DB413FEC7CE7592D5D2679D75B3E0AEE5884B10B981822DC5BA13B1841E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  SmoothDraw/api-ms-win-core-namedpipe-l1-1-0.dll
- Size 18KB
- SHA256 f7b2d7195c6dbee0515e67491e9fc0dd9cee83ad27e8170882e8719e1d4d5bed
- MD5 868292f591a9447fed122a4be21bfe41
- SHA1 aaf5994d53d3ab8a85b4a947fe804b0a23dd1aa9
- SHA512 239ec81675f326b094e2b2977f46a02e26d0b02b12b9c2f535a879d808933eaef0f2c938b68ebd0567546e983234c1055aa362b9be4ff9f161c0b7b46fc9ed07
- SSDEEP 384:BW2hWzndpkEYPL6QWLvdofpkEkGQWLvc8JN77hhKe:POIE3QWLd5EXQWL/3hYe
- TLSH
  T1E48219C70E29A053FECBCEB092D6D2179D75B3D4AAD6889B10F981812DC5BE13B6D10D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  SmoothDraw/api-ms-win-core-processenvironment-l1-1-0.dll
- Size 19KB
- SHA256 edbcbdf7a8c08366b37c09fa01f8906848bb8d468ea0ce04d63a6b41562d5e3e
- MD5 8baa90bc7f9d63e8586c7a55ed6596e3
- SHA1 53c5785a7bd99b7e59a2bed3c23ef40e6634ef70
- SHA512 758af18d8ea866f869c2d812a52c48336ce210a13a6b8ff6b18f9ae342fbae8372cfdb5b775f4f880be105924f3ef5b7f817be77a99b4179daddf9cf279cc766
- SSDEEP 384:9HW2hWOndpkEYPL6QWLvE0mUCpkEkGQWLvd8JN77hhh5S:nDIE3QWLE07EXQWL63h35S
- TLSH
  T1CE920AC60E3D7013FFCBCD7591DAD56A8D34B3E0AED5489B10B982826EC9BA1375850E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  SmoothDraw/api-ms-win-core-processthreads-l1-1-0.dll
- Size 20KB
- SHA256 3cbf6c22c0231011eec091bd99db6abc4f953072c41ea17054efef1de7481db2
- MD5 30243abd8a0633421a97cc07db923251
- SHA1 c9de5b91769de272b56ba19c02e42448f64ea5e0
- SHA512 ba6e93cca83009f02ffb97c22b785fb058d52130f35962375006dfe031ae267e45dd5c0d62553a77f1b2bd2c2904c509bc9846522daebf8180bafdc7012beddd
- SSDEEP 384:OWXk1JzNcKSIsW2hWFndpkEYPL6QWLvkApkEkGQWLv348JN77hhRg:ObcKS5YIE3QWLkFEXQWLL3hbg
- TLSH
  T10F9209C60E2DB153FECBCD71A1D6D5278DB2F390AEAA485704F9C2812ECAB91275D01D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  SmoothDraw/api-ms-win-core-processthreads-l1-1-1.dll
- Size 18KB
- SHA256 36183988f0b6fa0e40f1b869332425a1ebc761d445a5aa0e7a0a275d8e0af07f
- MD5 825ac3b0dbc7ddec70a73e4b12f68a53
- SHA1 7c7be4dc83dd4e128d81a9662a85167eb29e1caa
- SHA512 fe2b75506f77606195dbfa8be0631155d07aad1721784911941a9870115f5975ba3970979a9f059df5cce6e68d80532f6e0361f7a5b44763020f8753cfdd4228
- SSDEEP 384:cDfIeWW2hWsndpkEYPL6QWLvHsQpkEkGQWLvyOCP8JN77hhSV:re+1IE3QWLHs1EXQWLyOCU3hwV
- TLSH
  T1708209C60E2DB053FECBCE71A1D6D1178D75B3E0AEE5989710B8C1812EC6BA13B5911E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  SmoothDraw/api-ms-win-core-profile-l1-1-0.dll
- Size 17KB
- SHA256 37d08c241b804d8dd187f61396e21a046ba84ca7b88b583f3c441680c2ee9faf
- MD5 ad7f10e528cdf4db8ea742e75a7e1a8b
- SHA1 6ed3a8457700af32fb88f03325594c8f023a939b
- SHA512 cb98210b75c43ae26acc5cb897071711a0d3f1e5151cbcb04d1838869479f2d01649bdd8fc96000a7f82c48a4a6163b509718c2d1aee127185420a4ef0558a0d
- SSDEEP 384:zzeW2hW6ndpkEYPL6QWLvE918pkEkGQWLvQ8JN77hhOd:ODIE3QWLE7xEXQWLz3hQd
- TLSH
  T19E8207C70F2D6013FEC7CE70E1D6D62B9D35B3E0AAE5588B04B981812EC5BA13B5951D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  SmoothDraw/api-ms-win-core-rtlsupport-l1-1-0.dll
- Size 18KB
- SHA256 10901f5f090c3c1765aa7daa8732d5e213fd0d79cabcfda303ec97f6bcafcc93
- MD5 652b52c4d322005e8b5d0fec3ebe6d53
- SHA1 25ab183497ca3e217bc2b882c33c13bfc2eea70f
- SHA512 083a13e214db60aff026ab154f0f69c9ccefa853c8bfbb8d0a923ab789e9ee18910dbebe1f030c0c4bdda42772b6f93ca002a8a594063a70f983c72189b431c0
- SSDEEP 384:JGeV5W2hWxndpkEYPL6QWLvEqAgnpkEkGQWLvwT8JN77hhWIHd:JGeVXcIE3QWLEqXKEXQWLwI3hsOd
- TLSH
  T13F823BCB0E297413FEC7CE71A2D6D66B8D75B3D0AEE9885B00B981811EC5BE13B1950D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  SmoothDraw/api-ms-win-core-string-l1-1-0.dll
- Size 18KB
- SHA256 7ae32d9353173a03299a0eb9c7f7456d844ba36a08af3765d0675a5499892e7f
- MD5 56278384de304787262cd185c3753133
- SHA1 917ac4750fa140b67f655dd5c70249f280b28818
- SHA512 64425833479b8ada543881f07fb6f26a7a148acf826869230f10e59fb78cd8a02ae0050431b44dfbba48cde3bcff7b018bfd7daf86c1571ce807f2863c06333d
- SSDEEP 384:WyMvQW2hWlndpkEYPL6QWLvE9NMlpkEkGQWLvO8JN77hhHbI:WyMv0UIE3QWLEnVEXQWLJ3hFbI
- TLSH
  T11E821AC70E29A013FFCBCE71A2D6D65B8D74B3D0AEE5489B10B981812EC5BA13B5D11D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  SmoothDraw/api-ms-win-core-synch-l1-1-0.dll
- Size 20KB
- SHA256 497d5f284e26387fd95c8ff318b53b5fe1dae37473bbe048713517b39c624ed2
- MD5 183356d3f80b627525cf079cbcfa3b0f
- SHA1 1b30e12413af9acfcc727bcfd6d1931210b10bf0
- SHA512 ba6cf5b791e6ac20133cc2a8caf0dedebf86a6f7213923d4f729469e36c93bfeb0fccfa003ebf3e6801bcea5b9ee90dc3a70b9103349493fa69534f0b177afcd
- SSDEEP 384:mdv3V0dfpkXc0vVaOW2hW5ndpkEYPL6QWLvgvf8pkEkGQWLv3l8JN77hhmZ:mdv3VqpkXc0vVam8IE3QWLgvfxEXQWLj
- TLSH
  T1099208870A69B567FECBCE7192D6C1578D70B3D09EA4885710F9C1923EC27E02B5D11D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  SmoothDraw/api-ms-win-core-synch-l1-2-0.dll
- Size 18KB
- SHA256 366faa544937d681bb88784772349107a0ca418c9b9c906790360563490e507b
- MD5 efb9133859cf6644af2a44ee87ba540d
- SHA1 cd977bc6a5635ece71ea76eebef5722b1fc5af58
- SHA512 f5d329d43292a603856fa641e642919e8ab431425c600c142fa7c79f950fe702e9eafd2e639273ac9775caff57708204cd970f4774c38f3c490be1695172c57e
- SSDEEP 384:xtZ3zW2hWYndpkEYPL6QWLvnpkEkGQWLvaw8JN77hhF8s+i:PNIE3QWLKEXQWLK3hAs+i
- TLSH
  T18C822ACB0F29B413FECBCEB192D6D1579D71B3D0AEE5484710B982822EC6BA13B4950D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  SmoothDraw/api-ms-win-core-sysinfo-l1-1-0.dll
- Size 19KB
- SHA256 9a7dbe17e7ebc69cdf60443b7a22d28f072380b0e1553224d4327a95c318e5d5
- MD5 6efafa23ce37ddde289565ad08a50a80
- SHA1 5a59ab4ada89dd95c2e79788632f6d98a05c85eb
- SHA512 26bb0571dd2361a62228c88adf277e5de55b7356e4fae79c1e56f91cc9025b5f055d0774fec5c38ec64a11414da9b407db8dbc6fd3e51158517c91fc476d5a42
- SSDEEP 384:fk+W2hWpndpkEYPL6QWLv95pkEkGQWLvaU/8JN77hhm/b:fkWkIE3QWL9kEXQWLtE3hs/b
- TLSH
  T1879209D70F2DB013FECBCE71A1D6D6174D74B3D0AA95884B00F98281AEC6BA53B5811D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  SmoothDraw/api-ms-win-core-timezone-l1-1-0.dll
- Size 18KB
- SHA256 39d990d7e0c3a91d8688679d97ad507dffaa67c69f1c46e18afba41e5a8f9303
- MD5 07db29700fe0991a8ee466f7e1112d77
- SHA1 f60b5227be5f9de26d3c21486baea143f3db43e3
- SHA512 70bbc9fc3eac077532efba2ecf0640844cabedcab7a2e69e794f90175b922bdf20e8d2eb37bb6f7a4179799359c9ac7a5ce718624c362660c7c1a4b9eb1a49cc
- SSDEEP 384:gW2hWsndpkEYPL6QWLvENxpkEkGQWLvi8JN77hhax:ERIE3QWLEqEXQWLN3hMx
- TLSH
  T1508218C70F296013FECBCE7192D6D5679D35B3E0AEE5988B10F981822EC5BA13B5910D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  SmoothDraw/api-ms-win-core-util-l1-1-0.dll
- Size 18KB
- SHA256 796888f4f5fdcaf568d5ae5c829d378c549a4e3a266dfb65435a4459437a917e
- MD5 fddf6f0520c61147dc5ad9f091043a69
- SHA1 5fd0e7de71eb0d3dfd88b8c0c69946aae4a7e7c9
- SHA512 a631a2fa86f28651f27eb8720f23aaf1844943071032a2b9cd90a9af40ddfe260dcb0a6998b2c145aed41ab879eb60f4f5a1bcd3a9a6a06746766f451d8d295c
- SSDEEP 384:UW2hWtndpkEYPL6QWLvWEpkEkGQWLvaZbN8JN77hhCbE:IUIE3QWLwEXQWLgq3hOE
- TLSH
  T1C08229C70F2A7013FECBCE7091DAD6168D74B3E4AEE5988B14F881812EC5BA13B5951D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  SmoothDraw/api-ms-win-crt-conio-l1-1-0.dll
- Size 19KB
- SHA256 85b7491f220c9ad9899e504ecd195cbe159a56d6c79b98114d598ed116c1eea7
- MD5 669b294ec6c305ec8b0d5dfc4282ad09
- SHA1 bd6fbfb2be88ce02b471c52870b5005c496297c8
- SHA512 32923a09492f77a2e1a5a14962b710175c3f9004288aac4a443ee311960b5703fca99fd536822558812fb0e5fa5e5c52378a8f7ed4332accd33300e0c89fc2d3
- SSDEEP 384:/LW2hWDndpkEYPL6QWLvgKpkEkGQWLvMMn8JN77hhB8Ok:FmIE3QWLgfEXQWLLs3hL89
- TLSH
  T1EB9209C70E6D6813FEC7CF31E2E6D6978E31B3D0AAD4689B40B981412EC5BA13B5941D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32