74e6cad482686abad1fe43905f2e025d56307667911c728f9aed89806a6dddb5

Sharing

Copy URL Twitter E-mail

General

Target
macOS-Golden-Gate-Theme-For-Windows-11.zip
Size 7.1MB
Sample260803-y246qsar9t
SHA256 74e6cad482686abad1fe43905f2e025d56307667911c728f9aed89806a6dddb5
MD5 4bd1a439399a8f2c3921814c6649872a
SHA1 5a619c81edf7ad017588a8efd82c475c8c3fe131
SHA512 1a70c6d9d114d5743dec50483c7f670f0b682976bc6d41dca81c5fa62f144a4af7d9008c79d1de9f2690d2c6cd5158c904b9f86d74c39dc21f0499604c25c3f2
SSDEEP 196608:PDJGCYeol0SB0D0e8hdY8fuOLEAQ8MnKpYdY8fuOLEAQ8MnS:PDJGte6egRuwEvFXRuwEvFS
TLSH
T193763305E9B181E9D8EFA0B54A42248DCE2DF7321D2BBC47BC5A791ABD530CB840675F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  macOS Golden Gate Theme For Windows 11/Extras/Clear_icon_cache.bat
- Size 320B
- SHA256 f58e8b3ef188f54cd242425d345c4927d60f87493116d54233b18422bf89f59e
- MD5 bf74f70297d0b3b6af8986e29cbcbca5
- SHA1 f8744fa9973d9b1acb4348c1709c194ae61046ee
- SHA512 2e65f9c3bf3d087417ff472225cb2ed65bb33cf5b6b95f73a627418c8325bbd519ac5e820be663fd8279bb5921aef2f6c1ffd6db043ffefb73fb199786384677
- TLSH
  T1D1E07DE290DFA001A9711C802D5F3DC1D304E13FCD4C7E12E19CA6BCE70784461651C4
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware defense_evasion discovery execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  macOS Golden Gate Theme For Windows 11/Extras/Disable_folder_thumbnail_previews.bat
- Size 553B
- SHA256 66938509bad0cb71ca314d427210e3729549b0ba87d2a6cc811a1de2b9c8f554
- MD5 fff1da01869ca366960c1af9ad7d9981
- SHA1 4377fcb0c53e61e44b06c20280b0f641a2c861ba
- SHA512 29f6dc8073769e1be0389a18925676bbda4d074be4e801292eb2220dd65d1bf27ac17a704353762b8c71ce4f4fba2ece269606c722945280c0358bbaf5977cc2
- TLSH
  T1AAF08BB2A047C501992A49D4BE9A3AC4F289971FCE988AE9F294B15C83428D942670CF
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware defense_evasion execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral2
- Target
  macOS Golden Gate Theme For Windows 11/Extras/Left Sider/Leftsider V1.02/leftsider.exe
- Size 491KB
- SHA256 78c95547d0753e787f721e155f3ae671daeffd3a64c45917e2bc8c5d4f9326ad
- MD5 1044774145e7a75c93260a199b081bd6
- SHA1 ab588c39706d2a389e45e16ef5b7bd9da5ad7e64
- SHA512 86f34f55bccdc897e87ff722da3e735180bcf4a96c509c44f58f8afb8be84ba286e2261f4d0dd24fe7e3f6209d08f2c3ef2f2ebc6e22067f24e15b59a7c66842
- SSDEEP 6144:MeH1qmBzyjHkIGb+O9UCKSfkb6UOZBEe/9BZOUC8rEGiHOkrYOTssaB737DJZaXl:FEmBiHkIGbDNKSMbYE0BDEwmZTV83A
- TLSH
  T17BB46B52FBF485B5D033D179CAA38B8AEA727898573057CB0285971D2E336E15E3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral3
- Target
  macOS Golden Gate Theme For Windows 11/Extras/Left Sider/Leftsider V1.03/leftsider.exe
- Size 73KB
- SHA256 98fcc34aa501eb312ef2f184babbc0f93187029aebf34bfae78609015592ebac
- MD5 5feeb2a45ef421006c978d0e02aeff06
- SHA1 75d908af7c525bc93ae76ac87ab4137fc45b7536
- SHA512 41053a7bcd5743c843d2e35e6de61a67db4e768078d727a407b019ded2736b5ffd3be09a2cf7f8986e613ca5c821b6284489e5b8e5dbbc1d79335f9deeb54f53
- SSDEEP 1536:KuTMeFW9ifTxuGvwThvmU9qgu7Obyzjell:KleI9MT9vYp/u7Oboell
- TLSH
  T11C732B766CE140F2D27EC2F07CA5DA335AFA58106361534247D7BBCA2CF2EA5DA1D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral4
- Target
  macOS Golden Gate Theme For Windows 11/macOS 27 Theme/macOS 27/Shell/NormalColor/en-US/shellstyle.dll.mui
- Size 69KB
- SHA256 3cb5886626e190b7f5b214d7d7fd8c9a1a412c6789b7be1f61ea4de8c4a187b7
- MD5 e99f64831e113f3760ec055c5706abe9
- SHA1 8f9d91594e309ed36471d20883e8c7cb12b8b9a2
- SHA512 a4095d25cc39d8b29b1b1661e330a22755d4dabf1607b0e8cda7e20bfda249f9c3ff24bdfe807c0de863dec56f74f736baa2fd23a9d9213418d4c4ce2d4726ac
- SSDEEP 1536:kXXo216Tvg1K8H6wMe2CLFBCd9PFXCcccNg+ZTIMJGoX:kXsQKuwe22bCk+iMfX
- TLSH
  T16263E1CED312147AC12F2A330D4B8860E21F785D2F53DB49D5B8492E7CAAB15A5B6373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  macOS Golden Gate Theme For Windows 11/macOS 27 Theme/macOS 27/Shell/NormalColor/shellstyle.dll
- Size 140KB
- SHA256 b026874971293176a7945f2b9bb98951fe8f30c791cd0b964fda437fd2ed5476
- MD5 ad30bab16d9ccb44650bbc601d63844c
- SHA1 2bea4f57c5ee0938bb382d517d37a8a2094f9ec9
- SHA512 555242f4d6233b1a2578169d79f0565e1e7f5e6bf3635859cc3b10ed4f3d56a8386a301e5892c64cc5929066fb05f790e18ff1f0f46aac6ba2d46af131d23909
- SSDEEP 3072:PmxxabAbG+Evfr+Ev8+Ev3+ESfrHW+EvA+EvG+EvJT3TbTRq4:bbAbG+EvT+Ev8+Ev3+Ej+EvA+EvG+Ev5
- TLSH
  T1BDE3E80533552D2BC21AD239B2A1CD3B6E787C02D15F076AF5BE34A962F448DA0E5B93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  macOS Golden Gate Theme For Windows 11/macOS 27 Theme/macOS 27/en-US/aero.msstyles.mui
- Size 4KB
- SHA256 e20a103f652a9904244722a9037b6577651d12df82a51666bca4c5108408b823
- MD5 3df809940a0c6c2e4b13d82e929c7eed
- SHA1 7d078fedaf9c6fad8a134a208779afdaae10d4bb
- SHA512 314aa8730873d2ccb9cf7e8470acf328a77827a41974ddd75ca17f78c9cd202627d4a2d69c68a1c456bd786d5f04636fff620d4f0d18e584e8a992dd164da7b7
- SSDEEP 48:yLb5g+2Md93D+y1kGRPrZZZIfAytIl/SmIqIuSvt9LIZW1rqMZqJK5Ww1h:t4IyimP2LEWRbqkWw/
- TLSH
  T1AF91A004EBFA0525F1F35EB9AFF7855399BEF933693ED26E4600151C2830204A451F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  macOS Golden Gate Theme For Windows 11/macOS 27 Theme/macOS 27/en-US/aerolite.msstyles.mui
- Size 4KB
- SHA256 e20a103f652a9904244722a9037b6577651d12df82a51666bca4c5108408b823
- MD5 3df809940a0c6c2e4b13d82e929c7eed
- SHA1 7d078fedaf9c6fad8a134a208779afdaae10d4bb
- SHA512 314aa8730873d2ccb9cf7e8470acf328a77827a41974ddd75ca17f78c9cd202627d4a2d69c68a1c456bd786d5f04636fff620d4f0d18e584e8a992dd164da7b7
- SSDEEP 48:yLb5g+2Md93D+y1kGRPrZZZIfAytIl/SmIqIuSvt9LIZW1rqMZqJK5Ww1h:t4IyimP2LEWRbqkWw/
- TLSH
  T1AF91A004EBFA0525F1F35EB9AFF7855399BEF933693ED26E4600151C2830204A451F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  macOS Golden Gate Theme For Windows 11/macOS 27 Theme/macOS 27/macOS 27.msstyles
- Size 1.4MB
- SHA256 4b8296e27a55d9f787fb8e3dae5fc75a49f581ab97b1a7314c59e8cd1824aba8
- MD5 f1bad390e7cf119e7c6a38249ccf8a6f
- SHA1 024075d486fee8f32b491158fe25af95d162d1b6
- SHA512 852a1d968ca8985f174e6d2160043ce45d6c13103389c0d61ef9608a18d0f925aa6521f41be8bb93b6ab18d9ceaa01c415bc96e1d3b6754bcc9dbfabfaafcd11
- SSDEEP 12288:BpHE3XOVhIQOaHURbqzqewSoh3W2rcbuk1I:Tk3XOjOPneslRC
- TLSH
  T10C654BE7E798A83CD12E097141AF1794B7F2C5AE0A93170B7528912D3C26398DD39B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9