f0469503007d2fc6c226341ae4e4388e400dc8c49ce9752efc9fcfa8a16bfe6e

General

Target
WL_MOUSE_HUB-1.0.43-setup.exe
Size 127.3MB
Sample260806-b6c7gsfb99
SHA256 f0469503007d2fc6c226341ae4e4388e400dc8c49ce9752efc9fcfa8a16bfe6e
MD5 4755981487295c34aa09d6ace0e2b0af
SHA1 91a5e0b67618039d10c3ada80663c36043a0fba1
SHA512 374e91e51466b06a5b27ed4fe875b6324a97284b7134d2bad999f89a17b938651e7aeaad2ba017a766847ad2c208d96293b52ec8d9386806172c507f5d78abb1
SSDEEP 3145728:Qpe4HHV3+JgwgxR9eLH5vCo4t5MApwgsSBGGdS21WcBuZkeXFlKDDCi:v4nV0glvcLNCRUA+0p1qbBi
TLSH
T1EF5833C317DE123ECBEC233589003D95AAC966E1C3C7AD95813C81562DD9366F528EBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  WL_MOUSE_HUB-1.0.43-setup.exe
- Size 127.3MB
- SHA256 f0469503007d2fc6c226341ae4e4388e400dc8c49ce9752efc9fcfa8a16bfe6e
- MD5 4755981487295c34aa09d6ace0e2b0af
- SHA1 91a5e0b67618039d10c3ada80663c36043a0fba1
- SHA512 374e91e51466b06a5b27ed4fe875b6324a97284b7134d2bad999f89a17b938651e7aeaad2ba017a766847ad2c208d96293b52ec8d9386806172c507f5d78abb1
- SSDEEP 3145728:Qpe4HHV3+JgwgxR9eLH5vCo4t5MApwgsSBGGdS21WcBuZkeXFlKDDCi:v4nV0glvcLNCRUA+0p1qbBi
- TLSH
  T1EF5833C317DE123ECBEC233589003D95AAC966E1C3C7AD95813C81562DD9366F528EBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1
- Target
  $PLUGINSDIR/app-64.7z
- Size 126.8MB
- SHA256 590a7be2a73b1c1841dfdad10f08244602d7d6cb5a3ace74669f3c4d68609d17
- MD5 e5dbf947b8c9e3fc5c299114f45da764
- SHA1 6e251be9c09724e088cfc9a966c38b51e26d9179
- SHA512 526d62cbb99ad78b5ed1bdef1632463f8f6f340d6390cf722ac2d8a10077a43a10ae97d0560e7cc8a1e60031150a819543e6e4aa22e3859799e93843e17141b6
- SSDEEP 3145728:2e4HHV3+JgwgxR9eLH5vCo4t5MApwgsSBGGdS21WcBuZkeXFlKDDCT:34nV0glvcLNCRUA+0p1qbBT
- TLSH
  T1775833D317DE123ECBEC233589013D95AAC966E1C3C3AD95813C80562DD93A6F528DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral2