d7f139f42f36fa95a2e63b2aa9bb4e9e034f35eac5cf09b50066412c5f1dc1fb

General

Target
KomuriClient.7z
Size 129.8MB
Sample260803-pg8trayxcy
SHA256 d7f139f42f36fa95a2e63b2aa9bb4e9e034f35eac5cf09b50066412c5f1dc1fb
MD5 368a7e275419e5665932b3063587d45f
SHA1 ae232fa44c84101809237cfb3a3e2d1ca9f6857e
SHA512 bb71f0f3b5b9e0c5adb2cc08aaad416839c713c2042b6e5932866c9e781ad87c49c730a06f386cd5619f2f5e4f2771931b9ec26d5789c101c8ae85dd4aec17d7
SSDEEP 3145728:UzdkjHMGGH7njErXJIev96HvX/dH4wa6yk:jED4rN6dH6k
TLSH
T1A7583374A0C7CCF1DA2FB075B3399F55D62A5753A72C1BE99A0170A856303FA2C2907E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  KomuriClient.exe
- Size 129.9MB
- SHA256 15629cf2df73fd72b778ab61ec4ad0e7ff0c3af01c1fa42a7e24c75c4e73ee9e
- MD5 c19b8da3de06b4166578c1ceca9dd3f8
- SHA1 5f8f339bceb43dd8e0069c25a1b1be9a6305a9a3
- SHA512 5606a4d4c3c8802ae4ad1616780aa80828e912a7f8c05d7b556e18f8bc3344e2abd5930bbe80504c6e994c2df940a020f8259cdcfc9ccfaf356c3c72f65c9280
- SSDEEP 3145728:4WPlP2+7GxUn5FehjUrH05B7s1dpnQQKwgF:FwuzeH5kpn0F
- TLSH
  T1C2583374E1C6C8F1EA2FA075B3345F65D62A5753A72C1BEA9A0170B856303FE1C2907E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1
- Target
  KomuriClient.exe
- Size 171.9MB
- SHA256 0990b274eb623a27843d8c3f692920837d7078991674fa1630ac810d573f1187
- MD5 1efa09f3908f76887391de677d025d4b
- SHA1 c33badc49987b46827e5c8d25144a05873b39421
- SHA512 1fb7fcdba4abb74c26412d6a5e61a16a82bedfb1d700275d6b777291cc2d6cd02eca02fb8e42512201a07134a872a7c698d98626423e0a55f10f626b79a26275
- SSDEEP 1572864:rasGSAvwGc3AWWR6cN2rxlMxg3fkRPgGFDyrakAcihuSrK6yj0Jip5hMj6xCL4N:j4fc/M+i6xCL
- TLSH
  T1E2888C03E29A51D9E01DE1B5978B9233EE71B8454B29B2DF275407522F7BEE42B3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral2