1106196a872f10aeb0379953d67491481cfd8c7f641dc78dabfd406284e1ec1d

Sharing

Copy URL Twitter E-mail

General

Target
26da82f7-Sandboxie-Classic-x64-v5.73.1.exe
Size 3.0MB
Sample260802-ahk2razgle
SHA256 1106196a872f10aeb0379953d67491481cfd8c7f641dc78dabfd406284e1ec1d
MD5 86c41afd88bacccdf6ba2e0fa8290131
SHA1 1f737efbae02733156e748b29352e13ab37029c3
SHA512 0e3966b3cd1fe3896df7ca5c4a2e061d0370bfdc06cce6731298a808a23bcf7dcb873b14873b42f84cdf681bdd84490f8c5bb1d8605e268113ea8db0e1d88d0a
SSDEEP 49152:3l8n805wTMZi+FQDP4nAnpcW2wFIzovAExPP+kI2Juw10Qcly1zv2xsSpqeKdPQZ:3ARwAJWDQApeAIzxEMkhoSksSLKQfG4N
TLSH
T18BE5336A37D86402D95BCD723BD0D7FDF1383E91E884AA83A3A69B9B9A31F071D05141
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery installer

Malware Config

Targets

- Target
  26da82f7-Sandboxie-Classic-x64-v5.73.1.exe
- Size 3.0MB
- SHA256 1106196a872f10aeb0379953d67491481cfd8c7f641dc78dabfd406284e1ec1d
- MD5 86c41afd88bacccdf6ba2e0fa8290131
- SHA1 1f737efbae02733156e748b29352e13ab37029c3
- SHA512 0e3966b3cd1fe3896df7ca5c4a2e061d0370bfdc06cce6731298a808a23bcf7dcb873b14873b42f84cdf681bdd84490f8c5bb1d8605e268113ea8db0e1d88d0a
- SSDEEP 49152:3l8n805wTMZi+FQDP4nAnpcW2wFIzovAExPP+kI2Juw10Qcly1zv2xsSpqeKdPQZ:3ARwAJWDQApeAIzxEMkhoSksSLKQfG4N
- TLSH
  T18BE5336A37D86402D95BCD723BD0D7FDF1383E91E884AA83A3A69B9B9A31F071D05141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 254c5ccbce59ad882f7f51d0bf760cabde8c88c5af84e13cc8ad77ba0361055c
- MD5 046074d285897c008499f7f3ad5be114
- SHA1 159040d616a056ee3498ec86debab58ef5036a55
- SHA512 ab7436fda44e340dd5909ddec809c6b569a90d888529ef9320375e1aae7af85afcab8c1c1618551d3fe8d6ae727f7dca97aa8781b5555da759d501d2ccd749e1
- SSDEEP 192:+Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijqK72dwF7dBEnbok:+GvdH4qMebzPY2Vijq+BEnbo
- TLSH
  T1CE623B51638888F3DBD6013EB4533707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/KmdUtil.exe
- Size 210KB
- SHA256 9f9818743dd3f2db77d50aabc28069d99d1124ddaa219773ac1ec300499f79e0
- MD5 f39080039a4d55d33f8e91b935860133
- SHA1 207a0309a498f43c35dd603ad7b4234239e88d58
- SHA512 110a9c339c2371b5319437c0c0982dd3dbeec2a12e0fc59d2a9cc48aaf7ba3b90f35110a81b848128908051c27fcdb4db557b7009ad4c984cfdea4debe3360e0
- SSDEEP 3072:3Be3ngbC8VzYk1bI1baRAOt8hBAt/Nxb1QEez/QvFi5Lw77tRNk:3Bm8Sk1mbcAOwmF0o777W
- TLSH
  T10E247C51B3E500F9E5A7C2398DA69601F672784507609BDF03A443BAEF23BD05E3DB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 09477d605677bea48019b896f068ce6c2e89004e5c5f0a86c0276db30c6515a6
- MD5 4cdaaf5da900a8eaed090cd22b8f8781
- SHA1 6c7d9cfd96e66d236b66b8d50d65083a0dbb1b11
- SHA512 3797d59aeb908dcd66c63eca76cb2064416d3b66033dc687bc7a9c50e2979c42ac94773f54bc8ec45a9cd69c8056b83a2bca6efcd703f71a4b5f67e166f1e06d
- SSDEEP 48:iV6HAvq8WeMPUptuM4Z+0x/ImnycNSCwVYOY4vnpXTHhHX/JvR0J/of5d2:2yplJ5ZbnycNSCwVYTwFB3ZR0Qd2
- TLSH
  T114C18677B3C149F9D6854633251373C3A7139E307359800F9B6712AE2924CAB9D6E793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/SbieDll.dll
- Size 994KB
- SHA256 ed9cbfc3f842aba56a55bd43717fdb2f9381c5b00451e059818007e20e1af349
- MD5 bbb5da77540cbbe30d4821ec5c8be0ee
- SHA1 a7f82f32a5bf8099e2f446d2551a7928693b2f0c
- SHA512 c80d914eca6766e6b60564796a29d825479d118adee4a5758200f608d2ac6d4284ff345b9a2130de6dbfeaa9c8161f894170f50ff0d4039349888d71d4fbe38c
- SSDEEP 12288:ku7uC3Uibha5FnD+r7uKUUqppSgTXJl2rWD8bqjDOl:buC3UOhaIWKDqppSgTrKWiAOl
- TLSH
  T106257D45F3F91298E97FC179CA639617EA7174881731DBCF01908A892F63FC26A3A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/SbieMsg.dll
- Size 3.3MB
- SHA256 7ef43bf277730229088673b5888b1167ad12827480ebffe954bfd3d2f68aff14
- MD5 31b12eaecfa75bb9ec7487cb8f602125
- SHA1 9e7bf0aa6ddd0314242b3c60b3c34ea628344eab
- SHA512 0947904d1c37aaf5b21a75e4f3b2671c9ac21a785bd719afb023a7737422847224cdf9f74e680619c8bf80b6ac89ec5dd7f74862f28e58b70299a87e2b401ead
- SSDEEP 12288:TDKYk1o+cLvlSePy3k2ga62IVS6I85RXvPz/lksWULuhMl5QIuD:/41iSePnk6+6I85RXvPblkHf
- TLSH
  T1F9F5440767FA4118F6F3BB2169B542B15B7BBDD2AE3CC51C0285616D0CF1AA09D60BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 4ca5bf1beb4b802914c4d3e2f37861f6ba5ecf969cfeadf5855edf58f647a721
- MD5 0ff5120f1afd0f295c2baa0f7192d3f8
- SHA1 bde842d5d11005dcb4ff1d4ea97da31865477697
- SHA512 e049ffd7aace8d136eee007ee4f8dbc2ae8f3dce79d1c633d9654392240f8215787df8a6d08085257db51f28ff2a8023a13333dda3ea7f9bdc8b9c57b605f0a0
- SSDEEP 192:Xv+cJZE61KRWJQO6tFiUdK7ckD4k7l1XRBm0w+NiHi1nSJ:Xf6rtFRdbQ1W+fn8
- TLSH
  T17E225C5893E0C1F3E6A0853C18573A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  32/SbieDll.dll
- Size 805KB
- SHA256 c0764f66036b6f71233fb92eb48ca2fbfdcbd5a7dd8ffaa07be3c6851dc1df56
- MD5 c29fbc3be7ffe35d331f14ebbc744b36
- SHA1 6002544d86444def7c1da8bb745e942824442536
- SHA512 93a2920b9ca495aeed5b768d60d54382db0334bc94e78bf66cb695c4604cf1c6b53caf690c9dc161e1bd50f5dd4bbfbd8e853be7aeaf9112b6d98268a009c986
- SSDEEP 12288:+TqPYh3JABo84WWKRAaw3UsWvcT5grrlxepw+rmqHwkeI:++PIEQsAawElvcTqrlxuvHReI
- TLSH
  T1F3056C51F7E501A4F7F399B00ABFBB69583AF5044731D9CB00D8649A95236C1BE3A3A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  32/SbieSvc.exe
- Size 353KB
- SHA256 4134107f87e6822322b7213d7718b32b5189ab7235f53d31aa3ae2e008f78507
- MD5 18c8a5bbe4776cc8104caa748c05eedf
- SHA1 e66c071c43c485860d717e7e7a48b81f538ac088
- SHA512 9466c1a9b8eb798c2e94c75aa51c0190dbde76f0a3bebe2a8bad100c99a19f19a6b703f92837e882af6173b34e8f2f6186f258eb663368bb317da7b4dc1c831e
- SSDEEP 6144:TtdMiJH5CnlnNO1agO8pkjwsIa2OnVauwhFp078oO7GvFKoOeEtc9d73ERLz5wTa:4nlnNO1a8dsIaxnjwhFpy8MO49d3ER/r
- TLSH
  T14F748F01FD41A03AD5A205305AA9FFBAA97DB8300B5474CBF3D44EBA5A306D1B73875B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  KmdUtil.exe
- Size 210KB
- SHA256 9f9818743dd3f2db77d50aabc28069d99d1124ddaa219773ac1ec300499f79e0
- MD5 f39080039a4d55d33f8e91b935860133
- SHA1 207a0309a498f43c35dd603ad7b4234239e88d58
- SHA512 110a9c339c2371b5319437c0c0982dd3dbeec2a12e0fc59d2a9cc48aaf7ba3b90f35110a81b848128908051c27fcdb4db557b7009ad4c984cfdea4debe3360e0
- SSDEEP 3072:3Be3ngbC8VzYk1bI1baRAOt8hBAt/Nxb1QEez/QvFi5Lw77tRNk:3Bm8Sk1mbcAOwmF0o777W
- TLSH
  T10E247C51B3E500F9E5A7C2398DA69601F672784507609BDF03A443BAEF23BD05E3DB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  SandboxieBITS.exe
- Size 131KB
- SHA256 6dc1eb5e2de39fb9ca6cf417a96b5785830f74f30c8942311c3e3606ea69446e
- MD5 b4baf9a3c86dfdd560bd14381b23aacc
- SHA1 995a6837e20b247d39360b8bb5d76e10ffa7e44b
- SHA512 7121c39f3e8ae10ff901d37aa957cdaca698a6ba19bfe3e4076e7b159be0ada44da039d6ccbf8f8540d4d07f9e945b234e128b321318439952bf72ea4a8faf0b
- SSDEEP 3072:47dU8hN2zKH3dy++12EeyXDAUd6REvSkNM:4qU24I12iXDAPSSMM
- TLSH
  T128D35A5763B530E4E5B68638C5958A659732BC714760ABAF03904E9B3F233E18D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  SandboxieCrypto.exe
- Size 167KB
- SHA256 4f27776251975b6ecd61d79d7f9c1dc197eb3d591c41c997bf635421488f6ee5
- MD5 5141feea1b2ea8b0cc7dbf8a4d94a441
- SHA1 0da89ba503bde35eb161fc7e55c25fea7a690440
- SHA512 5fde45ce7acd2a1c64a53d026c011677de4d07c292ec0099abf1c2a446db199bb18bd7bdee7814a2268079efff2f463b8df9774c5b273da1f7b3485fa58ea784
- SSDEEP 3072:/6uAUPKVjwTlXBOj7U0ktOjmcUhrqE0KAnnAWa:CxQwklMjvktOjkcqAnA/
- TLSH
  T1E6F36B4773A530E9E4A78238C9A18A51E7727C714B608BDF03945F6A3F233D15E3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  SandboxieDcomLaunch.exe
- Size 169KB
- SHA256 62d54ba2f7e969218f283766092c29cf05842692f5d1ce5103c8506c96903a18
- MD5 3cec0ec95b03ca70e6a71f3e8c7d06c5
- SHA1 c0c6d62c131a1c3e7805a6c58186e66b7ca4d073
- SHA512 295dc637348a02ba33cdacf87e3f210593e8b05a3c810532bedac07983d8bded1aa3adad5789a6b692df9344d97c7498bf56671a3dd75c76c5a12cf9ef6e3702
- SSDEEP 3072:ZaZjwp0VatzbZPdjUvDE3RIJN9078Vl/0TH:lmot5BYDEICwlcTH
- TLSH
  T144046B4772E430E5E1778638C9A28A55A7737C750B609BDF03A44B6A3F233C19D3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  SandboxieRpcSs.exe
- Size 185KB
- SHA256 be98d853ff1126ea62576f2541cbb9ac59d268064298ec6310dc32068b0a9efe
- MD5 5dc2e46ce9e1379fb68ec7062ee9ed6b
- SHA1 770efdeffbb44cca6498fb845e876fd3159a0424
- SHA512 c7b2a1851dab5bc3480a9c0d8f1025bcf4167bf8502423167464fb33c35cb262920dddc01c031c1a96346047df2c307c2515737f3d97906e34d7def10b64c1ab
- SSDEEP 3072:0uyRJco2JjgMzvp8CgLrpqrnXUDd+Hc24wBDjxhP:0FRG5JgMPYrpsnkWpHPP
- TLSH
  T11D145C47B2A520E5E0738638C9A28656E7777C3217219BDF03A04A773F237C16D3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  SandboxieWUAU.exe
- Size 133KB
- SHA256 4ca0e55719f41189e64aa084fc50be3a70b02a2a4e116c00f90c27b3e39bab75
- MD5 7e38a16621129005759d5cae30d3ccf4
- SHA1 30f2b3f5a3dc49290c6d706b79154d8c071cb346
- SHA512 6c202fbc804798a5e3be70b2ffb469cda4891cc92e41132f001a47da786f915f8bedb8574daf6617c836b731f05c0a886dfba21f0e3243130d59946776eec233
- SSDEEP 3072:z/0IrDWcxB2jC3L8+D4U/v8tzfPLBAbo44WuqR:z8UDO68+Dpv85LB7OFR
- TLSH
  T1A3D35A6763A530F8E0678678C4A58A559772BC754B609BEF03A04E5B3F233D14D3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  SbieCtrl.exe
- Size 3.2MB
- SHA256 8852001665cd2a591f85b4f707419f4769a2a505ebcaca04302acf6dbd3b1ff8
- MD5 4b013ecbcb22c43e488ca4cde0a3e825
- SHA1 d2b19f024533a6fdb0f643c1fee6324ad4cbda4a
- SHA512 3be3900bc8d8d480e8ace4f0e3e7f01c33be0cc681970acfc442030db100685c2188a9c1699e05e7af1ba12c5d31708f3fe460bd6264350c211eb45f7ea987c9
- SSDEEP 49152:FqqpDe5vUwRe/7GCyVVgYxodVniU6Ltr5sJFu+yNgdo7N1kgbLMnCV1y4Fijn:RoHtaFuBZX1bUGbijn
- TLSH
  T1F4F56B8962BC00DCD5A6E079C517453FF6F1B843473287DF40699B9A2F3B6A20E7A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32