Extracted

• • Target
    2e8b9731346a02479a030a74192adf305fd5f4b698264ef3ce49ea90923867a9
  • Size 4.4MB
  • SHA256 2e8b9731346a02479a030a74192adf305fd5f4b698264ef3ce49ea90923867a9
  • MD5 83c13d2f19bbfd7853999896e05eebf1
  • SHA1 4702e2dc0201b4f3b54b49cabd60582d68aea3d4
  • SHA512 3cc6b405cb1e4eff60635d1fb306e933237c552a95a846aa8a6d53b12b6655953343382fc07d80c39f05fa73e9215e8a5588811cdf0f3878b4166560d7b06e69
  • SSDEEP 98304:ioggh/xMnBl7U+vT3ihWi8a4NBdIxlB8695WXDiIlD0sXvsdJsDFn:ibkeBRr3iwtvATB9WXuvsfsdJsDFn
  • TLSH
    T1F32633E6FAD4985FDEAAF17288697E3BD8F2D4D894D1538E06300ECD45F86408DAC14E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  discovery

  • Loads dropped DLL

  behavioral1behavioral2
• • Target
    $PLUGINSDIR/NSISdl.dll
  • Size 15KB
  • SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
  • MD5 8eabbe36e8b52e69322780d0f541fd19
  • SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
  • SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
  • SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
  • TLSH
    T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral3behavioral4
• • Target
    $PLUGINSDIR/StartMenu.dll
  • Size 7KB
  • SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
  • MD5 b9b71990b37e04a56cadbcbfa694f30f
  • SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
  • SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
  • SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
  • TLSH
    T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral5behavioral6
• • Target
    $PLUGINSDIR/System.dll
  • Size 12KB
  • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
  • MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
  • SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
  • SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
  • SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
  • TLSH
    T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral7behavioral8
• • Target
    $PLUGINSDIR/nsDialogs.dll
  • Size 9KB
  • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
  • MD5 8f0e7415f33843431df308bb8e06af81
  • SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
  • SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
  • SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
  • TLSH
    T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral10behavioral9
• • Target
    $PLUGINSDIR/nsis_tauri_utils.dll
  • Size 33KB
  • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
  • MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
  • SHA1 75197fee3c6a814fe035788d1c34ead39349b860
  • SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
  • SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
  • TLSH
    T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral11behavioral12
• • Target
    AlphaAI.exe
  • Size 14.9MB
  • SHA256 004aacc2c12461f3a0c65c53996ea33945ddb53ef5a992ba86e1084798a16317
  • MD5 89ac8169f5eecb7d6b6f22a209f8a0d6
  • SHA1 b0b99dad909fcd55e6822acf5ec927cf53cfa52e
  • SHA512 6adae8a73053018a5fd0705c6218019ba381cb08437d22551bfbba5acf5bdfde4a747d87af740cdb1e6052f35177e519ac9a9a354349cf8cc9cd1e042f22ae1e
  • SSDEEP 98304:OYyIard360EO7XjGJ7PrKi0S7Fo1nXtjmYTRJ20vqgMWWG5w7GFO9wHM6pcJ5HEa:Nq7XjGN2i0FnNfuW4JfHEvZo8d7
  • TLSH
    T12FF65B43F6A181E8C0AAC5B9931AA233F7317C8D092472AB6BD45F312F59F105B1DB9D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionspywaretrojan

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Network Share Discovery

    Attempt to gather information on host network.

    discovery
  behavioral13behavioral14