320bf24e82c3b0eb0b00578530f6503c832f290b9e9aee43327b2f94d21d0f08

General

Target
SalsaNOWUpdater.exe
Size 284KB
Sample260804-nrkz1ayfqd
SHA256 320bf24e82c3b0eb0b00578530f6503c832f290b9e9aee43327b2f94d21d0f08
MD5 13ace02f3e24a9c91b6d4852847a214e
SHA1 572b4c921161317a0670c7efd3fb85e0b1ff78d6
SHA512 654df0d4691f37b70890eee6b62307b6663fe65e870eb000f033842645fd665a53b52a048507e3f7d6c4d9819e432441c439df4d20bf759d6a19f72519086c8c
SSDEEP 6144:dbGRvHyxE0I7yM3C3hRonHBU195XhCpA3Mk2SQ6O3P3zdemRAk7:dyRPyxE0I7ty3hMHK1LRvyfPjSk
TLSH
T1A95423A947C567A6C86D1F3AC8BC6E50452EF0331222C7C1E9D8DBD58653760FBF9218
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SalsaNOWUpdater.exe
- Size 284KB
- SHA256 320bf24e82c3b0eb0b00578530f6503c832f290b9e9aee43327b2f94d21d0f08
- MD5 13ace02f3e24a9c91b6d4852847a214e
- SHA1 572b4c921161317a0670c7efd3fb85e0b1ff78d6
- SHA512 654df0d4691f37b70890eee6b62307b6663fe65e870eb000f033842645fd665a53b52a048507e3f7d6c4d9819e432441c439df4d20bf759d6a19f72519086c8c
- SSDEEP 6144:dbGRvHyxE0I7yM3C3hRonHBU195XhCpA3Mk2SQ6O3P3zdemRAk7:dyRPyxE0I7ty3hMHK1LRvyfPjSk
- TLSH
  T1A95423A947C567A6C86D1F3AC8BC6E50452EF0331222C7C1E9D8DBD58653760FBF9218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral1
- Target
  costura.dll
- Size 5KB
- SHA256 7a9e767ad824afa2c1b0aed513fe1cf2b8dac6d40f24e7c4075af32b1cf23a20
- MD5 109bd38d2107f41573c48544992ead99
- SHA1 028e9832f421f11f9497c610f1734e0f3d868037
- SHA512 459945f338679c77acca8f1192907cd3ce8e19f270589d34ce8227b8eaf0c7c8c9922e52b8310d037c4d5c0c639de42a6e3b0f7d44d493fc50644b6fcf7cd4e5
- SSDEEP 48:6gMX2nhx3BTjtRiaAVLEP4iZ6iMtTg70uElaQ40JFuUPtomCH9gWk1qyFVA2IbS:HHtRYVLEmYZEZ9ruUPqJmW/2
- TLSH
  T10BB1FB2867B8573BEF7B4BB65863534257B4B950CC279B1F0985B3166C223544931732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  costura.pdb
- Size 7KB
- SHA256 fbb47bfd057253e9461bc7fe661eb8ad273451782f3e227b8db8f88b54cea186
- MD5 dd3394a0ba6f7158d029e1c3a31b7a85
- SHA1 806f4c19b2d7fd9e3b836269ec07647019a29e95
- SHA512 2fbedae58d16bfe20954094e5c7541e1b25310107571e94f7bea35b2217aa634197ef147afb9ffbd9c59aa0f7e209cf2a97349c3503077758502bf7a776e2575
- SSDEEP 192:yMD/wix+PI6jMai+NLy5nj4SCBg5MRkCIFQkC8g7AHOuXk/N/8Hu04:y8YPI6jMai+NLy5nj4SCm5Mz6QkOAHO/
- TLSH
  T1A4F1B33F5748C463C89959720521C49CB6B343202670ED78F3DB2608EDAF69AC7B5772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  newtonsoft.json.dll
- Size 704KB
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH
  T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4