4e0e5a890309450c4829dae82932b8a8b94d65c685b5a5380cf54539c0909f33

Sharing

Copy URL Twitter E-mail

General

Target
test_august.exe
Size 8.1MB
Sample260802-ztscmsfq2x
SHA256 4e0e5a890309450c4829dae82932b8a8b94d65c685b5a5380cf54539c0909f33
MD5 3e2e963f0f3e6ad5d56a0c7dec8dd7f9
SHA1 c39a690c9534db908102de53fdc9816f1c3d338f
SHA512 7b8389c6c7023c29b638881d00f2d21e843db6da6ee5189c8f71bfb6cbe10fff8b7e7acc6d4c13ce49aa368c8d181d4c4d1989369a053f55f5165c26c88536d2
SSDEEP 196608:G8i6noD8tTe42P3d7hqMHdh1rWKVfDbSx+HxA2X+0s5I3:GP0oUe42P3lhpHdhXfDHq2PUI3
TLSH
T1938633166FC881A2DC64AC304BA246B101F72E3D99D0F557C1E8734F9B7BADB21642DB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  test_august.exe
- Size 8.1MB
- SHA256 4e0e5a890309450c4829dae82932b8a8b94d65c685b5a5380cf54539c0909f33
- MD5 3e2e963f0f3e6ad5d56a0c7dec8dd7f9
- SHA1 c39a690c9534db908102de53fdc9816f1c3d338f
- SHA512 7b8389c6c7023c29b638881d00f2d21e843db6da6ee5189c8f71bfb6cbe10fff8b7e7acc6d4c13ce49aa368c8d181d4c4d1989369a053f55f5165c26c88536d2
- SSDEEP 196608:G8i6noD8tTe42P3d7hqMHdh1rWKVfDbSx+HxA2X+0s5I3:GP0oUe42P3lhpHdhXfDHq2PUI3
- TLSH
  T1938633166FC881A2DC64AC304BA246B101F72E3D99D0F557C1E8734F9B7BADB21642DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1
- Target
  $PLUGINSDIR/CheckProVs.dll
- Size 18KB
- SHA256 64e6aad5d6628bc743196a42e28df3f8dc71cdf0d2ad4c250bab872d2a3991c7
- MD5 5422e399fabd3a344e8dcc807a48637e
- SHA1 59b0830698b15993671eb0dd43020041c351deb8
- SHA512 9d102954e0d7bb7e69219a14158e410c18adb85d1cca9e269f3955d3fc5e61b23872313b78d16cd6488eaac0f835b233356152575bf130f8ec91e0d481aa1493
- SSDEEP 384:qJqUuDf+bOQNnPV5By6ki2/iAV1/wfT3ir2WSx7bLFMGO:q8UA+bfndbd26H3iPmbLFJO
- TLSH
  T1B7828E6B3E2A2463EBCA09B850C5C2674D70B3926FF010E3796143DA2D957D1BF6815F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/SkinnedControls.dll
- Size 77KB
- SHA256 5f7998711ea856730139c4dac403f11b947ed94a464dc6d2d4b22f928c3a8536
- MD5 364bb3c9218429dd1315ad1db47e152d
- SHA1 3253c1a381161c268bce8c487e892c8e5dd29dc3
- SHA512 d9084068a259acb9a1691d10da8610053d3abdf6dc78d7357d80d1ac794d940478d2b05c3050484680ddee4c832ae30d71a67b2c2978845e298aca48058e01f6
- SSDEEP 768:Q0p2dJFs6nYFg0vxrF9jd+IpMCGC8BnmmfJmLVp1aB5tEEThyX7QirbTGgyhTFDK:Q0YsX7vxGjBvJgVTadaXBTeh55axv
- TLSH
  T188737D417288C9FADCDE083A0C2AEF2595BE591247D2C5C33B5E6D56BE323CD9674382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 22KB
- SHA256 3924b57f8993a880d53e1e4e18eb6ba9b5dc610cbb00345c954c7e8a9078c309
- MD5 86a488bf743dfab80ff142713adb5d48
- SHA1 02e4b39f2fa40cd4edcc42cb524dc3ce911bfdac
- SHA512 0ed09bcddd5bd13a91e7b99b78e37a01a36d62a29ad74acaacbe0da6446c8523e83ed2c089d2847e4d1ba467da93e2fd2de104feb51bcda445511b334bf932c8
- SSDEEP 384:h8QIl975eXqlWBrz7YLOl6q6ki2/id91/wfT3ir2WSx7bLo0w4I:hgPgrfYLO8F26s3iPmbLVa
- TLSH
  T1F6A290473A2415F3EBC28578D0DAAA235E7172829EF44C93AA9286897D107D27F7D10F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/dotNetFx45_Full_setup.exe
- Size 982KB
- SHA256 e434828818f81e6e1f5955e84caec08662bd154a80b24a71a2eda530d8b2f66a
- MD5 9e8253f0a993e53b4809dbd74b335227
- SHA1 f6ba6f03c65c3996a258f58324a917463b2d6ff4
- SHA512 404d67d59fcd767e65d86395b38d1a531465cee5bb3c5cf3d1205975ff76d27d477fe8cc3842b8134f17b61292d8e2ffba71134fe50a36afd60b189b027f5af0
- SSDEEP 24576:3idS2cRQNb9dUcyezFSja7zEwA2BH6SEUVGDKX68zuQm6wwr5mAPepC:SQ2cRQh9GexmCxBxVV56CmWQax
- TLSH
  T1BE2512306A90C173D4E30571C6FCAAB229B9E6601334D5CB7788179F2D753C22ABA797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/nsExec.dll
- Size 17KB
- SHA256 863cfac6df27d31830edf983e68634860c3a4671303b956cfdf82f5f855b7913
- MD5 eae60d4807a106d8795c4260bcc9bbee
- SHA1 13511a9e35c3e20c9b55016a3226a0aae52e15f3
- SHA512 27f495de634cc10aa5c0b36cb17904ca33d3241a67edc9d062d9a64f50ccf9aaf91a2a99170b43cf1fbd492ba3bbb598aa9a67e28ea41a8f990d3472a3219a71
- SSDEEP 384:ImKgIWhoAGgmkNW6ki2/i8MbZ+1/wfT3ir2WSx7bLb33:dzEAGLkT26p53iPmbLj
- TLSH
  T1E3828EBB3D561DA3EFCB8AB460D598230B71E2E25FB400D194A346995D953E2FF1810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 15KB
- SHA256 382aad28fa439b18d3d41a4652201c1d1542d73ff756a738c4cee6b75ebeca8f
- MD5 8205bee74d498724aa5508e93c6d21f8
- SHA1 2564cc3032e59d538826596a88d80c3d022ef595
- SHA512 67c1e7fcfbc03565ddcd0cde4a91104231b30e0e3edbfe338ba5da76085fe849ea2dea199554dd3b25b90ab9722c30fd22399932463ef4a95e6000fcb5ef3ca1
- SSDEEP 192:gUl64IGsjo6kSDnicMBT6iiXt4/0Xx1/wfT/5QyrWrMIoWSx++Xa21RyoWljGC:/Zt6ki2/i+/M1/wfT3ir2WSx7bLyoWlV
- TLSH
  T1A2628EA73E643473EBC34D74F0D5CB775C71A1A31BA56086A812869A6DC07E2BB5801F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  $PLUGINSDIR/setup.exe
- Size 2.3MB
- SHA256 cb367c2a7ac294e6b6f75c1c42f0d832f1c6cdae1f0ad5c720482036d1324bde
- MD5 c39c7c1e93aabdc5ce86d09e7a76712e
- SHA1 eaf34503fded12d8527bc601db9a8246efd432a3
- SHA512 eedd515dedbd00bbbdb3d80958c91e92b3952420b895a20b245128c91eb221fb350608f9d117bc5b7ccb189dc8c43dffdaf50d37ec3a8389118bb40fd964c6bc
- SSDEEP 49152:IX4OeH9JbE4YFQAdEvQnvPNe4OmGvQkpOENH5X3ngbrnL5yzpVMRCn:1gVQAdEvQvPpDAH5X3ng8N
- TLSH
  T177B5D0223BF881B6DD99063049355A7042F6FE398A74DB8759C87A2E4F777C1803276B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  $PLUGINSDIR/uninstall.exe
- Size 5.7MB
- SHA256 d25d75113b82cb5fee961f5dbb4eff5e70ef2f9222da4c59e677830006170f6b
- MD5 b5386bbcb1d9b15e254276eb9f709119
- SHA1 629a246ce5aa43869dc77cdf521a30f1b1c70d7e
- SHA512 1af4a5f984b00ed668bd145c84dbe08d5b3c68482df8491f628a43705b59b6ec8a1cf680ff8c3a38cbe30476e34ac57864733c488b77238f08f458a2c3147fc1
- SSDEEP 98304:4/E2sME1WTIoRNbdI5gyvfIJxpOBP1g5W1giXLvRImf0uPETwOfrkCD1ovb:4xsMlP5lyCrOBP1g5W1ZzRqux61m
- TLSH
  T11A56330367C08115CF66693396E1D3820C6E3E2E2D58E02FE220B78B6777AD77A54F56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral9
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 13KB
- SHA256 d46ab59420f1eed08f2b4e93d9a2feb0986a5df703e33be0a739b0347c7dd618
- MD5 8401375a531d44e40b02c0739acf13ec
- SHA1 2937b881c4a1ceed819dfbe604315e2c1c320e77
- SHA512 f5bc08b540508b152a4cf0bbe05a1d0c0a82bd512ca59e83d4290ad078f3b4368caa57deac85de42c1b945ec3b908a5b3a7dc863a017801479437595834863d7
- SSDEEP 192:t9Hsl/C6kSDnicMBT6iiXtIp5F1/wfT/5QyrWrMIoWSx++Xa21R4way:r6ki2/iunF1/wfT3ir2WSx7bL4way
- TLSH
  T10E526D9B3D292A57EF834D78F0C9C6635C71E2D26EE420C5A47686996C483E23B5D10F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  $PLUGINSDIR/CheckProVs.dll
- Size 18KB
- SHA256 64e6aad5d6628bc743196a42e28df3f8dc71cdf0d2ad4c250bab872d2a3991c7
- MD5 5422e399fabd3a344e8dcc807a48637e
- SHA1 59b0830698b15993671eb0dd43020041c351deb8
- SHA512 9d102954e0d7bb7e69219a14158e410c18adb85d1cca9e269f3955d3fc5e61b23872313b78d16cd6488eaac0f835b233356152575bf130f8ec91e0d481aa1493
- SSDEEP 384:qJqUuDf+bOQNnPV5By6ki2/iAV1/wfT3ir2WSx7bLFMGO:q8UA+bfndbd26H3iPmbLFJO
- TLSH
  T1B7828E6B3E2A2463EBCA09B850C5C2674D70B3926FF010E3796143DA2D957D1BF6815F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  $PLUGINSDIR/GoogleTracingLib.dll
- Size 46KB
- SHA256 5b8cadf540dd47d19b1020bf5c0aca1b6d14d9d875b0a5794b432401c60ee5c7
- MD5 3a914fc853188765010b73ff99834383
- SHA1 374b9c4bcc852e42e85aab7b142ecdd80f0c40a1
- SHA512 1e1a26dcb480cae7dc0fb89c0e8b560206b23b85a6f56458e2019af9c67ca9f942e2c75e78052e4e0eebcfff5e7a3c5eafb5538ba776c0a40b39cafee0bce0e7
- SSDEEP 768:/WXV2fVEC5h9KclMCumc6plPHY4jq7rOZkdhKZVz26e3iPmbLb:zSmh9/BumTlg4kOZ+KzztQ7D
- TLSH
  T167235C213A084473C68F03B174BA971A9B38B6920FE156D3B7A796BD0D743E32673607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  $PLUGINSDIR/SelfDel.dll
- Size 15KB
- SHA256 f9882a63181c93d028c43ff86db4c8927196b5e9bfcbee1d87a8004a37b083cf
- MD5 0975f56f06c5d3680ce1ca46c9ffd583
- SHA1 87cc2a8dd5b58b734e3dd4c4f7ea1df7c3a90c93
- SHA512 7e292bc659313ecde026ccd6cc239adf8aaeb77ccf2bb806d59900481646ac9350b72d02c86cfa61134952053e40ea4280ee05ef9625deb21053e84da0c9b8e9
- SSDEEP 384:Vi9ogS6x+TE6ki2/iio1/wfT3ir2WSx7bLS4I:E9ogSE+b26g3iPmbLG
- TLSH
  T15C728E863F293653EFC78EB8A0E4CA235C71F1919EB450DA5860428EAC5A3D16F5E11F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13
- Target
  $PLUGINSDIR/SkinBtn.dll
- Size 15KB
- SHA256 72ddf9ec65f49d38ed181b4e73e095524d9c83118e6d7ae705227c7351300b95
- MD5 0325c49a03baf13592272fec2b36968e
- SHA1 ab10d9f3b420d7192ce6e3ceb953d94b669bdded
- SHA512 9009b5ebd7c45ecf9aa967aeddaf6b7695581ee8e212432eeaefd0777df3fbff41842975e0d09774f01b3b994500299042a004efc030162576cca925bdc0f43c
- SSDEEP 384:lxSX36ki2/iXmXc51/wfT3ir2WSx7bLVDDjn:cK262Xcu3iPmbLVjn
- TLSH
  T156627EB73E552673EF870E74A0C9C9A34D72E6A25EB410C6683346896D447E2BF1C10F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  $PLUGINSDIR/System.dll
- Size 22KB
- SHA256 3924b57f8993a880d53e1e4e18eb6ba9b5dc610cbb00345c954c7e8a9078c309
- MD5 86a488bf743dfab80ff142713adb5d48
- SHA1 02e4b39f2fa40cd4edcc42cb524dc3ce911bfdac
- SHA512 0ed09bcddd5bd13a91e7b99b78e37a01a36d62a29ad74acaacbe0da6446c8523e83ed2c089d2847e4d1ba467da93e2fd2de104feb51bcda445511b334bf932c8
- SSDEEP 384:h8QIl975eXqlWBrz7YLOl6q6ki2/id91/wfT3ir2WSx7bLo0w4I:hgPgrfYLO8F26s3iPmbLVa
- TLSH
  T1F6A290473A2415F3EBC28578D0DAAA235E7172829EF44C93AA9286897D107D27F7D10F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 20KB
- SHA256 942dd3d2c5d1057e20ae15662c33997d816f622d2b09364fa1552142ffbae39a
- MD5 607d190fafa8284451681b17106130e1
- SHA1 dbb86e422931fa6864b324f644ba5cb8e8254272
- SHA512 1bd2a5438ecd4566a1e8efa37a187bd9ac4e22c68fa1d4c413797e144be30511f4cc7b5947d5138df276461eb6de6fb5a2ad2123704b5172e687792561023712
- SSDEEP 384:UBxzm+t18pZ0WAg0RzIFg46ki2/ih1xW1/wfT3ir2WSx7bL7ezYq:yupZ/Ag05f26xh3iPmbL4P
- TLSH
  T19D925C9769252473DBC3463D70D9972FCAB4A361B9A02C4554728B497D593B23F3820F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 15KB
- SHA256 382aad28fa439b18d3d41a4652201c1d1542d73ff756a738c4cee6b75ebeca8f
- MD5 8205bee74d498724aa5508e93c6d21f8
- SHA1 2564cc3032e59d538826596a88d80c3d022ef595
- SHA512 67c1e7fcfbc03565ddcd0cde4a91104231b30e0e3edbfe338ba5da76085fe849ea2dea199554dd3b25b90ab9722c30fd22399932463ef4a95e6000fcb5ef3ca1
- SSDEEP 192:gUl64IGsjo6kSDnicMBT6iiXt4/0Xx1/wfT/5QyrWrMIoWSx++Xa21RyoWljGC:/Zt6ki2/i+/M1/wfT3ir2WSx7bLyoWlV
- TLSH
  T1A2628EA73E643473EBC34D74F0D5CB775C71A1A31BA56086A812869A6DC07E2BB5801F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  $PLUGINSDIR/registry.dll
- Size 35KB
- SHA256 59120dcdf3315804ecaa8cb76b9cf5ee99f992407f30a11c6df8e23c09294c06
- MD5 2e7ced24d47e40e0725e8d80c2d2ba6b
- SHA1 b74c0fd4d1111bc461558a96720d40adb314a21e
- SHA512 ba0afcb54ed33265faa45a22ece8ee8f35fe3ee96170bd231e4e11b409330216c95b1a2f360a4d1955c6ef77a45a4c65385047333b2bd46f3e27fbfbfcc19713
- SSDEEP 384:F2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQf6ki2/iipe1/wC:075w/OfrzB4CUxuQfAP26eZ3iPmbLy
- TLSH
  T119F29E8375D0A933D68B0478A2C9AF17D7FFB9507A70A84310617AC736907E2DB6D20B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  $PLUGINSDIR/uninstall.exe
- Size 6.1MB
- SHA256 8a199bae6b965b657462412a6fd2ebe15bbb6c5b69d71961af62b86fac8161aa
- MD5 ce6d3c9fad409501150b353846ac00e1
- SHA1 932d8340a463c3e36b314fab6597c6086bd3c2f0
- SHA512 4128b4ee3db8b782c07f359eb0e0c4efce9cee96edb8730cbb79eaae70385b6a2b41f4c945c08075ee17053cb1e3887f04455cb8efefdce4f97cc6389e010ef6
- SSDEEP 196608:ukypGHM4z21bW8Zjqva0j19bpvGABTs4i1S8:3ypx59BWvNTtR/8
- TLSH
  T11F5612031BE84570CD9F0736A0B1460C3EFEBD1A1A65E66D988EF5AA0F733498541F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

ACProtect 1.3x - 1.4x DLL software

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19