f8c1b6126f31bd18cbbe34ef752aeb969c5e5172997a8d2d12950b3047e6388a

Sharing

Copy URL Twitter E-mail

General

Target
PandoraLauncher-Windows-x86_64-Setup.exe
Size 11.7MB
Sample260801-vme2hsdn9s
SHA256 f8c1b6126f31bd18cbbe34ef752aeb969c5e5172997a8d2d12950b3047e6388a
MD5 aeaa40cc48e73b36f3191f451483611f
SHA1 c21a5333de1f7fa6a03c10eb869dda740e4e1e22
SHA512 18056a75c263412a092439fde486922d397d9975cf6150c65c5b14e02f61d9ce8eb9864c4f1895aea674a37ca2e0b17e5fc0af0fcaca7e53ba71b255e77b0f8f
SSDEEP 196608:uHRmwuPqs2qJxZdl95a805ZeMQ2gUfTglA3xSXtSkI2sOd//yGV07B5a:uxmwuPmqJlT5a8KcMCOklAB2nIY9qGVB
TLSH
T1EFC6339116E6A2F9E0B1273CA87B172C74E706170BB09F1E941FA92D1FB33CD5E1A161
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  PandoraLauncher-Windows-x86_64-Setup.exe
- Size 11.7MB
- SHA256 f8c1b6126f31bd18cbbe34ef752aeb969c5e5172997a8d2d12950b3047e6388a
- MD5 aeaa40cc48e73b36f3191f451483611f
- SHA1 c21a5333de1f7fa6a03c10eb869dda740e4e1e22
- SHA512 18056a75c263412a092439fde486922d397d9975cf6150c65c5b14e02f61d9ce8eb9864c4f1895aea674a37ca2e0b17e5fc0af0fcaca7e53ba71b255e77b0f8f
- SSDEEP 196608:uHRmwuPqs2qJxZdl95a805ZeMQ2gUfTglA3xSXtSkI2sOd//yGV07B5a:uxmwuPmqJlT5a8KcMCOklAB2nIY9qGVB
- TLSH
  T1EFC6339116E6A2F9E0B1273CA87B172C74E706170BB09F1E941FA92D1FB33CD5E1A161
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/ApplicationID.dll
- Size 198KB
- SHA256 f6851dcbf0a39edecd8a46564bc455e5273736c3dbcb02b954c201c79ccdf117
- MD5 91c2e2f34b5bba068e9a6178e13a4e5c
- SHA1 affcac00894c9afd152e55d0bff7899349edcd6c
- SHA512 ce7f629bc0e6e10eca9d671513062f353d8d47666df58c9ad7cc7f767df520b75b2da1f9d6551eae86c738455919463ec89a0c3dc2a8366fa021e6fa6e292000
- SSDEEP 3072:/1RnVZfr2qLTV4U3fKHzy/s3fyitDJXqtZnyj80mAg0FubAPl/IJ:/Hnzfr7HU6ipJaLAOKy
- TLSH
  T1B8149F11B491C172D1BF16340979DAA65A3C7D600BA88AEFA7D84D3E4F781C06B31BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 110545415a59402635e1c9439acba15b44bab268ed02ad2a262ce12604a47855
- MD5 a8c86996c4230c2209f5927f21321377
- SHA1 45ce0ab93cb6a3a594e54878cce05df724024393
- SHA512 69ee73496b916777936b0dddd2cc4a4f916e393f7d0b167cba77a4a239ee1e3f645d9b90dee1627c42a23eb6c3403e4d086546b9f78b3a2e4999c8f92f6a3bc3
- SSDEEP 96:mIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/23lkCTcaqHCI:bhE+A0+sF6piUFkAylncviI
- TLSH
  T154F1C776F3D20673F9AB427428632F231B2AF521576581A6490316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- MD5 1d8f01a83ddd259bc339902c1d33c8f1
- SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
- TLSH
  T12A120992E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 1.1MB
- SHA256 0eed48313a7f904d7cc1977b70000ab3f11f18cadc8e6a69b807d288ca71f9db
- MD5 1e38f56aba852b737f2866c48b823165
- SHA1 53a7cfaeb6a4a9653d6d5fbff02a3c3b8720130a
- SHA512 5cbf6ca67aee29f5afbbaf57a72eb58e8f85b692e69aa5acd5817b00dc6948486189a8e74f4fcae302e9c453cc770eef78b3ffa70a914d911246e5b4992fc9a4
- SSDEEP 24576:wSi9LsLAEnNUYZbeC4JwA9HU7Ncot2O/rBWDTRYQn652FOVE5TmcnlgVIH06iyQ:di9Y/W07NP/eTRPLD1n2IU6i3
- TLSH
  T1E545AD81FAC29AB1C94F1674105FE33BAB3558084756CFE3D7809E31F8673A25DA929C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  PandoraLauncher-Windows-x86_64.exe
- Size 42.0MB
- SHA256 8682ce95cde168ca3e729f5695a1ffb7e81f8b6851416f29d923f5603c70b937
- MD5 fb6be422bc5e1c1e476d99e5c44ff584
- SHA1 bcab1cb895a8b5d9ed8208e6aa83a5ab05ab0d14
- SHA512 8caf09181bfdd5c843d49e689951a2a9cfe762e69bf4743947a44eef675a7eb816c4a742b174b1c8c9075bf9b4e3d26a0fcfd242d052211ca362ba82e2926bb5
- SSDEEP 393216:ABnH95GAd5v37J84zld24tGUAEyTAdJ+2xV:onH95GAd5vLJB24toJ2b
- TLSH
  T158A729127B5B98ADD15AC87083478A635E2130DB1A26B9FF44C452353FBEBF46B38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  uninstall.exe
- Size 668KB
- SHA256 684b847549018d6409efc4711cadba058abb72058c6f59dd919f05c462586ebe
- MD5 1f82600b49f53e0228fceb0abb0e3e7a
- SHA1 11651e9e573926c3c1a67cdb234a508aad767801
- SHA512 801fc5f08b6a1816e02f48482ef8e12cf9c0a5939e348d32326b898f0e3182a5c7cdacf556a054014c3c68aca2d30d47ea83700920d56cac55cd7c666680b192
- SSDEEP 12288:enPdT2DX1Uvbj6JgeFeOaQZAOXBmQAY9Dwd6b0KmGtKAYnFmxBDqKS4:CPdTSlUvbjPhOaQuMgM8imGKAr5qE
- TLSH
  T175E4232432409872FBA34371C87E0B9B57A968116034DB979F58EACF7D524E1DE3E1A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral9
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
- MD5 50016010fb0d8db2bc4cd258ceb43be5
- SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
- SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
- SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
- TLSH
  T113C18370F3D248B9C5D1413778A732D36612AE74A784504F9B6315AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 1.1MB
- SHA256 0eed48313a7f904d7cc1977b70000ab3f11f18cadc8e6a69b807d288ca71f9db
- MD5 1e38f56aba852b737f2866c48b823165
- SHA1 53a7cfaeb6a4a9653d6d5fbff02a3c3b8720130a
- SHA512 5cbf6ca67aee29f5afbbaf57a72eb58e8f85b692e69aa5acd5817b00dc6948486189a8e74f4fcae302e9c453cc770eef78b3ffa70a914d911246e5b4992fc9a4
- SSDEEP 24576:wSi9LsLAEnNUYZbeC4JwA9HU7Ncot2O/rBWDTRYQn652FOVE5TmcnlgVIH06iyQ:di9Y/W07NP/eTRPLD1n2IU6i3
- TLSH
  T1E545AD81FAC29AB1C94F1674105FE33BAB3558084756CFE3D7809E31F8673A25DA929C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12