d15035a9341bea4a659674b6e79b038b38f0cd1b01c537e82be57b1035c5e5f0

General

Target
YandexPackLoader.exe
Size 225KB
Sample260805-mnrspsdr3z
SHA256 d15035a9341bea4a659674b6e79b038b38f0cd1b01c537e82be57b1035c5e5f0
MD5 6971695b5893e9952c35f0653bb192c3
SHA1 42f496f742ba2dadb49151ce9539d4f2ea99aa28
SHA512 fa86a6ae6ccfa74b7feb9a710fe97aabda33685c41d948b9930dc92b3a4bc0a5f93f39254c3ed6c0cbad87cc98859aa44c437043694dec06975308c09eebc4eb
SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
TLSH
T1A73459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  YandexPackLoader.exe
- Size 225KB
- SHA256 d15035a9341bea4a659674b6e79b038b38f0cd1b01c537e82be57b1035c5e5f0
- MD5 6971695b5893e9952c35f0653bb192c3
- SHA1 42f496f742ba2dadb49151ce9539d4f2ea99aa28
- SHA512 fa86a6ae6ccfa74b7feb9a710fe97aabda33685c41d948b9930dc92b3a4bc0a5f93f39254c3ed6c0cbad87cc98859aa44c437043694dec06975308c09eebc4eb
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH
  T1A73459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware defense_evasion discovery persistence ransomware spyware stealer trojan
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- Drops file in System32 directory
behavioral1