b9da3819127c176d132749a2687492f1a232399ebc925104abd267bf07c64410

General

Target
KomuriClient Setup 3.1.9.7z
Size 129.7MB
Sample260801-n8ejjsam2s
SHA256 b9da3819127c176d132749a2687492f1a232399ebc925104abd267bf07c64410
MD5 b7533142fd67ffec27522fba7f6331e7
SHA1 55bc5bf36ddf938f4b83eb3c2d98370fc17f4870
SHA512 20cd81838a6198a6ac52034159e34dba01fab21d05d44ea6aa9ce0d8ee8b4b7f41b1ae581bec8d93a0bee1f1ef7f0a31eb532486a2273eef902d812357ef469f
SSDEEP 3145728:IpXOMyvl7DZ69qrayZe6JjhnwjL96LmJd5:btgqzJAR5
TLSH
T152583374B4CEC6F2E91F6074F350CF92E26D678266081FA55A8534D86A603EB393907F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  KomuriClient Setup 3.1.9.exe
- Size 129.7MB
- SHA256 5d32106d6d5ff1934cb4ace2992fd3fe64f5b9a488512784f2c1a6bd60a0d429
- MD5 2bbd1b042c348f38bb1e048e74cd64a7
- SHA1 255426839dec712c4ccb46aedefc8a08316ec4db
- SHA512 846658842097c5970aafdbbd308f634f8d5edab81d89aded827f0b0317f65cfaac28aecb2b81b6c26ee4b30dc3e7fb2b3714f81b959e1bd460a739fb3d9d32ad
- SSDEEP 3145728:q/Plb9OGxUn5xehjUrH05B7s1L0G2LKwg0:uubeH5Sv0
- TLSH
  T193583330B4CAC6F2D91F5034F350CF92A6AD678266181FE95B8534EC6A613DB293943F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1
- Target
  KomuriClient.exe
- Size 171.8MB
- SHA256 6b8cdc88b7afd37eab29410c008cab9e6acaafc2cfdb80e225676c5aaf889a64
- MD5 782e58185c2cd59de118e9f490401c7c
- SHA1 301c824018bd132750b7fad0201c6460790886f6
- SHA512 ea8804e7a06559a606deab0aad23e50abc7a2b5d8116a9e68e9e05d4202370d953a47b3aaf212b402995eb5f45343a1698792a46a5c1b712643952ad4b681061
- SSDEEP 1572864:TasGSAvwGc3AWWR6cN2rxlMxg3fkRPgGFDyrakAcihuSrK6yj0Jip5hMj6xCL4N:b4fc/M+i6xCL
- TLSH
  T1F7888C03E29A51D9E01DE1B5978B9233EE71B8454B29B2DF275407522F7BEE42B3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral2