0966d744cb259daa6554d7a0c42ccbada946288adfc6029207f1c9e1c7196f28

Sharing

Copy URL Twitter E-mail

General

Target
0966d744cb259daa6554d7a0c42ccbada946288adfc6029207f1c9e1c7196f28
Size 372KB
Sample260801-xyssvsvarc
SHA256 0966d744cb259daa6554d7a0c42ccbada946288adfc6029207f1c9e1c7196f28
MD5 d500fae65aa0f93746ba97112562d240
SHA1 b896d171051045994d5fdf68a6f1c525f5072180
SHA512 9d6918c94e64cc811c3c393cd7eff7e0037f23e0e0de5db65f38029d0f1e0b4540bda3626cb9b291c143a6b8d6a1455d0e500ae688e4502ca40df4c47fd32400
SSDEEP 6144:gX45rw6xUdTGLG8wGwVrmJuNIqrNe+KHGncZQTsMmIfkKLf6c0v64xSqYPEytC/:gX4JU2G1GwlmJuNIeXoAT1lkPc0pM58
TLSH
T10A8422253540D4B7D9230B701DF2833AABE8C67553A6521B731D4A5F7F33B82CA09BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  0966d744cb259daa6554d7a0c42ccbada946288adfc6029207f1c9e1c7196f28
- Size 372KB
- SHA256 0966d744cb259daa6554d7a0c42ccbada946288adfc6029207f1c9e1c7196f28
- MD5 d500fae65aa0f93746ba97112562d240
- SHA1 b896d171051045994d5fdf68a6f1c525f5072180
- SHA512 9d6918c94e64cc811c3c393cd7eff7e0037f23e0e0de5db65f38029d0f1e0b4540bda3626cb9b291c143a6b8d6a1455d0e500ae688e4502ca40df4c47fd32400
- SSDEEP 6144:gX45rw6xUdTGLG8wGwVrmJuNIqrNe+KHGncZQTsMmIfkKLf6c0v64xSqYPEytC/:gX4JU2G1GwlmJuNIeXoAT1lkPc0pM58
- TLSH
  T10A8422253540D4B7D9230B701DF2833AABE8C67553A6521B731D4A5F7F33B82CA09BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  memreduct.exe
- Size 387KB
- SHA256 dd55a81d56e8c32918e5190b2ec2a1f2a7edbbca884627439b4b619fdfb5602d
- MD5 66f5c7ebe24abc9405e688c1597e1be9
- SHA1 39988b6f5b654475f786292e6859b067a388289d
- SHA512 226bb6f5fcd77d487aff2f378d87dfe8574e6331051b5c14fb8c767a6b7fc849e9299ab751e97ccfdbb7e199304b67ffb0b31626ce08c74153108a7471380673
- SSDEEP 6144:+0jxaVsVSJisMi/WHHg+KTzrUd+Mb+kNHvsP:+UaKxji/WvKTzrjM1g
- TLSH
  T14784F708A991C4A9D1EA8334C56383F2E535FC99DF6389EB6264FD693E33DC06938711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8