550502ff88abffdce9e3087067894bc8f95ad2dc6765f647802058ac45373092

General

Target
XO.zip
Size 326.7MB
Sample260804-tpy2qsvare
SHA256 550502ff88abffdce9e3087067894bc8f95ad2dc6765f647802058ac45373092
MD5 9de8c95a8eb4be0750c9cb6535f107af
SHA1 99f97583b5ba35e410d10068ee82fc83ce6efa3f
SHA512 957a59134e030c749eef00e91571a73cb7055424643b3c7922f06b0e4fa7081c9d5ca1e6e0049fb713ff9ce44175e0d18f301bf2b8363eb3adaba20ca4e0fd40
SSDEEP 6291456:r4+2ya1GO6L085vN/tW5u289wuXUXgKjS92/3Zv1re8YREv:b2Hb6L02kAOEUXIOnre8YRA
TLSH
T1CEF8335F712105EFDE3024E0E7BA4972038C9EBD7B98ECAB696C9279FCCD55A4903160
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  App/XOBV0001/Binaries/XDPack.exe
- Size 289KB
- SHA256 fbdfb49f88dde345123251cec4fb9e1656a9c920c71a3ce8d2d93922a537ac13
- MD5 b63f41456afc95d8148f1de00a7f2159
- SHA1 8e11e6f40126c0190fb68a69c96ddf073e105fa7
- SHA512 3f6a36590e2ef9ae2c38ff321e02971d2b4123bd9a50ee96a515dd361ed2d239f75b3be0cba712cab35c9a72f48a8df8fb33d476912c8be93ae7e39580fa0e13
- SSDEEP 6144:PzVuEaUSiDDXELnIzRyPBJIYlxLqhmT2:PzoZUbDXELnIzRyrR6
- TLSH
  T1FD548C217785C132E5A305B35EB8AB17443CBD600F6956CBE3C85E1EE9305D1AB36BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  XO_Library_Placer.exe
- Size 5KB
- SHA256 2e525d511c104c8d80cfcdb2624c5d70752c59bfabcc16f2f4a150079aece11f
- MD5 fc6c64e166b35ef47fc865d513a835a1
- SHA1 26e4cfdaac4fc71f0d389e35e3841adfe8b0a135
- SHA512 6ffde65640e2ce2542207eb48f626a3f3c0ff8d314decceddbe1226cf479584ae031074bd81c8edd1c858dc968f178b858e00bf2e200945e24a6f2ee12645b63
- SSDEEP 48:qMu6Ydj1cvAmLOqNg5CSChxUOtbOqNaSYFT4i5sBUI5YzMJO0leO2yvRO2lEO1mT:DuJj1cvp6IgS8IWJ4v/5bXAKRKFxX
- TLSH
  T16FB1C986E3E0055EF9FB43799C77460D6B38B5609137875C68C892C72F61921F952731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4