9083e34a0d948ff78f4cda11457a0b94e08f23fc4f6bab2c409ffd2e028ff60d

Sharing

Copy URL Twitter E-mail

General

Target
Remote Registration Software Moscow.zip
Size 19.9MB
Sample260807-jfr7qazdrf
SHA256 9083e34a0d948ff78f4cda11457a0b94e08f23fc4f6bab2c409ffd2e028ff60d
MD5 04d135131b7b7e15e4d7e0ce3ecfe8a9
SHA1 d16b29695b201cea88c878b674475baff3523506
SHA512 9d9e1ca0c0cedca49e742724a3252249eefc7ce97ba0a9af7034350f394b5536ea02e9686c4112ba79f824fb6ff76ff44f350a71718ac1955774f7477757ee90
SSDEEP 393216:NupykgGFBkWD5Z9H/UcOaN7Iujp1ff6RV56YfYfQswfCclN:IpyBGFBkoVHWaNILeI1Cc/
TLSH
T12827339447D3120F9CA3CE3A21B27B81D69B09E4A2B4C0F25379D77B157DA7AF1B0648
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  Remote Registration Software Moscow/AEA.WPFControls.dll
- Size 22KB
- SHA256 6c304e05e74f8e2ee634f7a96ee5a234d9220fd6370bcb060496ba5fd54364ce
- MD5 abd5ea99c66d4e8a39e1ac8e7f20d482
- SHA1 52b47b6ff72ec27d726ea94af40bd565fb7a1cc3
- SHA512 8efd590fd7b5fdbd9f3ed95300030ef770309574d48b3a46b0f7ad0e2fe89c25add4824311d1845b493eaeab7d5e17ccf7632bf14c011b80529ca415de7539b9
- SSDEEP 384:MxRMZmR+fwkkGILLxWm8+dD+WGFs3x7G+:9YzGIPxEcub+
- TLSH
  T11CA2299163F41778DBAE0F747493964602BC514AEE62DB4A28AF191EECD370305923EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Remote Registration Software Moscow/ActiveReports.PdfExport.dll
- Size 324KB
- SHA256 50b043e2f1119f6dbad1a7e68ccf5ceeb21f41c04c5c3405cb630466bf59482d
- MD5 8fb567bb5d5d843b3dcd4fa26b9108be
- SHA1 59826e1825d24762b9d8523debc9d42b97e82fc6
- SHA512 e516dcf6cfc93370e5cdd0d2ff0d3d444db6ff8147636e9d1b632c9ff2eb83c89d636ce65eb13f0a383d27816f4e48cd3954a59b2a72584180fead595c2d9cc9
- SSDEEP 6144:sd4e60rWCZmOliUxuI3GMkwhs49+o07Dg7Fe:sOgWCgOliUxCMkwJ
- TLSH
  T1FA645B692BD82727E22F8379C1F95C3293B0D22AE76EEB4F0DD056F60C56750A942353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Remote Registration Software Moscow/ActiveReports.RtfExport.dll
- Size 82KB
- SHA256 6eb32197788ecb1f9d58caa757cdc1e1ab4783891a5104528066f16770277bc0
- MD5 d4f12e9581af451637e2e3d5da49e1f0
- SHA1 325fd4aa6ad0e4714ea6f445e22806a9e5a17989
- SHA512 81448b449120a9fdbe242b5f7e29a1588d5d945568dd0ad86e5ac5c91a4b101356957924fc347d388832488278b9dab1f9ec6b71eb61a7006722bec25ab76293
- SSDEEP 1536:IR8u8EqweSVAKz0oD3sr1eQ1IwtiuRrZUBa3TRG/iTGAWZ1:IR8u3zuKz0oD3sr11IwtdOcG/iTGA
- TLSH
  T11F836D18738C8F62C7BF8778A4F492924BB4A559A667DB4D0DC118FB2C327905F21B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Remote Registration Software Moscow/ActiveReports.Viewer3.dll
- Size 1.2MB
- SHA256 1acfabf127797cc379f329e7dce514f94f9c99e2bd43a042ce9e1a8cb375ba5c
- MD5 49e7e3a691daf67ebb8c7e8f66060d3f
- SHA1 cc63cf11226954a8e0d4eff1b5110a85468c654f
- SHA512 cbe2f54aa0f903843db0f765c89bd21c45940e343a5834ad4ef1be80b4ecee27bdd0f0eb856ef4f90cb8ec53f7021a33f4411323307d1401bddd0c794359d9e2
- SSDEEP 24576:ZZwWFkqALmfDIxEvtnJ0Q6KaKFbA9hiLDSuKL:LFkJLmsqeYAC8
- TLSH
  T105456B3033EC8A2BD1AE4375983929A507F5FC17E785E74F6894B17C28BA7518E12363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Remote Registration Software Moscow/ActiveReports.XlsExport.dll
- Size 263KB
- SHA256 73385bb4f4dfb692bd950cc298ddf86756123b46d8ae4ea51ae5f43bed565306
- MD5 c309a982663351763a0a0c5c780852f7
- SHA1 2445ccadd044da0cbcb23c977b24d2579c72ee00
- SHA512 4941b6a06e3354d12e0bbac8d79ac8ed96d49cef86a5e3474b8cacca8c7b957d8c1e78405e89dc35fbf862e1ebea0968e603dc778a879cb121bf4470086f8dc9
- SSDEEP 3072:Rpp8Q56J2oqxJO7GqRRcpjn20LqO0PJtxVosekyP7sqWHEYJucd0akfqQxX2GjrW:KQ522zY7Xcp7afrEKucd0Te
- TLSH
  T13B444C1027FD061AE2A9B3B1A9E699E587F1F021517FE78E6C8211EF1D52780C712B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Remote Registration Software Moscow/ActiveReports3.dll
- Size 1.3MB
- SHA256 ab734c7cbbd691a4a3b7bbfedc35c3b0a9e25ffacd311fc1cc3acddacf6cb2ff
- MD5 2168749cdc9bbb867fd7d2d2fbd255cc
- SHA1 5a2a14af905c9751f22ce7ce98faa88435662514
- SHA512 7b6e799a864ed4f34a506e439de3e59ea53f3a88bcb6e0a7ebb35449a734268900cca72c3a6be93bc8ce5128f0056ca9682af0af0be19ac34364ccedbaf689fd
- SSDEEP 24576:kTd++3U17Wr+Xxf216YijV8eQXhAmfG0r:kTd++32Xxf25J
- TLSH
  T13C556C007FEC8736D2BF4375A474485183F4E026F6A9E74E74ACA2AC2BB6B058D51397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Remote Registration Software Moscow/BarcodeLib.dll
- Size 113KB
- SHA256 3519b9eefa0836293c9d79eb01c58149a8901ba075bfac46df9dd2dc549edcec
- MD5 a217343e95bd603b5c9f4258dd2003d9
- SHA1 b9e880c4a71a05f9a44cf1fbe68b3c8a8d28ca1b
- SHA512 f514476fdd83be846f8ad2bff7a14698b4190e74d6c4c6fd397186dc660bd6bda0bf75a3d0d20362d6318a1af56640faf83a0e8a09361f30eea639233db0f929
- SSDEEP 3072:mDZ7l9F/rVZQ35DmYjnanSSbVmMPhPPmeuPeuUV9oLXvIUP/SqlPB5sqBTxvNeEJ:mDVl91s3lm
- TLSH
  T16AB36184FAA85725E23FD7FB95D01013137EA0C7A512EACD9E9423BB1B62740C509E7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Remote Registration Software Moscow/Castle.Core.dll
- Size 60KB
- SHA256 3feed1447fc1ad73956956899ff7974e6100a87bb2d58e77ddb54ccea2adee14
- MD5 eef1ddb29926607a28086ce5fb3888cc
- SHA1 390265044f3858997e43618cdf7d24e0b9bb2bbe
- SHA512 b3dc323b105c77486d07dedd942e9335b10aa87e74960311b2378bbe7bd0bb308db550c9ea7b958affae1e75c00fa7a507a2a17c8768de547d0f2eff1286832a
- SSDEEP 768:AVTc6wwwt8qoHAag3eTdsio9SpidaIoHtttQgxyQR+qQtpmiL:646wwwtEAaXsiGCidPoHtXxRR7QpmiL
- TLSH
  T19653FA8D1BF99766C9BE4778B4F501100738E2527A13E32E8F90A07A38B7774C99162E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Remote Registration Software Moscow/Castle.DynamicProxy.dll
- Size 72KB
- SHA256 e3c6db418ac6f1ae6e1d030f062526488e972f97c86d8250372da6b2ea4031c0
- MD5 ce5bb303cf383e04be1d6f96e85fb042
- SHA1 d72df253efe390ed87186a98a04e4f1f4a4782ca
- SHA512 cc4ac1dd9dddb7270b8e2ad321772d8866f23f44b0f28fccb446074683013fef603df1457e16052c49f5384b387d3af483112bb687bed5a8cf915b0a01f8b97f
- SSDEEP 1536:F30kkXqNKMhRoAsc05v6C6dpHUuZVqzuL:qkkX5JABLC6d1vum
- TLSH
  T19D732A6D23E88E67C3EE89B874755B614FF1E9473093D759CC8095FA4887B900A223E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Remote Registration Software Moscow/Castle.MicroKernel.dll
- Size 112KB
- SHA256 7643a9c740ff101d9d24e44eacd5bc70ea3523190ff4f6ec817d0eaa9546674c
- MD5 42372bea668e6556ff548855d4ad7b09
- SHA1 375100ac42358ddba5cf3ed19a8894e32145f947
- SHA512 3919c38a87bc9f79c2dc0d7f95070425d06aa375a4176c6f05d8d7a55cf6a0d24ce27635440a1f1607f035e26b55b64c5ea29cee9e04d85213a7b44ce56853b8
- SSDEEP 1536:TMRbc+vM6PLrKN9t5sX8y7kvLxitHMlZZa2NHjumGjCRxS2fHv1OAFr:TOUOLY9sXF7kvLxiNMlG2dxUCvgAFr
- TLSH
  T130B3185527F84A51E5FE6BB9A874140007F4B94BF873E30E8F80A1BA2D737A08D56367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Remote Registration Software Moscow/Castle.Windsor.dll
- Size 64KB
- SHA256 e8e9c87ae610cc33503329dcb68727af45911e6c3570ff1794af3f4315913e64
- MD5 cc247c011dac48744a962030949d5c2a
- SHA1 c599362b933cb2022214babf584251f09bf60ce2
- SHA512 59e6f17e45a107347bd4a8e9957c4e1136e6b65d0e51a24dd6d104c1bf760ed95b074c010a95dfa01267a0b520b3bcfa03db96791f12f4ef57c4b0b5b12a9d2f
- SSDEEP 1536:BjGPWxDfiaaFRxh80hQQeQzfOiLI46CWz80:ByPWYFRb80hQQeQzfxc46CWb
- TLSH
  T1F853075833F64A62E1FD177E757105010BB8F9529973E31E9FC091AA1EEB7D08A6032B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Remote Registration Software Moscow/CheckOut.exe
- Size 36KB
- SHA256 575baf063a70f2bb120fd0d61cca1d4fa4eada8a0d0c86db39259f56df43e796
- MD5 edc6d9e22ebd547f69e9b54f9d4407d7
- SHA1 763957a0ddef194272f93e80ccd203dc6a8b0886
- SHA512 393737c7d13b4ec00d39578a92575df41bc73ca80f60c3b33e3ad96880072441cbdf99f84d6008561675e1c0ad5a94e8dd79b13f9b5ed25613a47a5dbd501e04
- SSDEEP 768:FnB9ERtuIiN7ktGFqLZy/rI+jysG1Ly6OkpB:FbkEIiYq0Zy+sG1jOkpB
- TLSH
  T145F23B033AB89F32C9BC93F20451169003F97612A707E71D5DDF64DD662AB248792FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  Remote Registration Software Moscow/DevExpress.Charts.v10.1.Core.dll
- Size 140KB
- SHA256 cb4dbff3be18d8501a060bcfe5fbf0a035ca2068b0c343f856d02906cdf93912
- MD5 f445e21f1f41a53e6ad9612d8c62c99d
- SHA1 0d6763d859a00bd103442fbcad9a355c7f2028f8
- SHA512 67bd738b50b0ba19b457a3a93edd1fac6319e27335865774d95a71bb570224cf1f136dadb5084cdd87a218b4a03589b5067b677f5b7ceb0ee1cadca9af81cb18
- SSDEEP 3072:90ZtJ+iur1U0Z5j6hXYZS1xIAKwg6gZLnIZ67lHf1E9s:9CzUvZ5jMXkd7W6
- TLSH
  T1E7E35C2567D8C53ADF8E90BDF0A4121903F4D02926D3EB956D45A0FA2C83F91FB66363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Remote Registration Software Moscow/DevExpress.Data.v10.1.dll
- Size 2.3MB
- SHA256 c1a84736d38caec45910b8b60871d855cb3c610b4a06272185ea9578870c1382
- MD5 09522c2bc85cb5cdb19d2844e47b8e0a
- SHA1 648f7da7f2c201e81a1e83dc917d2b02ec434098
- SHA512 029a940e99e18aec034db56f6c5e6fd255b292440a82d1a4989dc00c50d726b1f2a5561d5cf2e64d54a019a46787bc08f86ec6cf425d9d658ea3052bb29bc765
- SSDEEP 24576:L8x4LamvW8tko91x5dwVZUklU6KP3EbyLcCtu3x3VLFHayTbdwAExNUBu4sLXkG1:LYmhkoeVZZlUNoIRkGstmpg19muot
- TLSH
  T1BDB55A01BBE85F6AF0FF4735A072151116F4F945A767E3AE1A20A27E1C63B814C927B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Remote Registration Software Moscow/DevExpress.Data.v7.3.dll
- Size 560KB
- SHA256 22b1f5e737a3664c4a15c4afe49849aad238b57769cea9ec3fb0fc0b13819f79
- MD5 8ee294211d56b5f233bb1f81ebc9481c
- SHA1 28588ce8cb38fcbe44b2311ca7921ac75fc7cbae
- SHA512 04957e35651648e9f252924b24b8db7096bcc7d643f3fd58c209a7df3c9072858f5b7da7541fa44a15e4f35f445d7fdf0d6f229fef9b0ea1cbc8e4be75fe7fc8
- SSDEEP 12288:mBFR1/RcZBis1BV0knBmyC6Asrr+lHyqJ0:AEBKZyC6Asrr+lH
- TLSH
  T168C44B0533A897ABD5AF0339F835052542F4E846E7B7D72F5D50E2B82CA3B819D027A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Remote Registration Software Moscow/DevExpress.Utils.v10.1.dll
- Size 2.8MB
- SHA256 46fc8b793526bd2a3b0e1b140d97485f4e349b7352fe1526ff0b040a1c5cae23
- MD5 dcc1c206b3217fc44e675de9024654e0
- SHA1 e512e8a11d8322248352bb2998b4b4fa99d66005
- SHA512 4abe0367ddf4ddfbdb40d048a8829577d1072d0d5a415c4909ebd176156a730daa89f19f3780d17a89d32b8ec74164edc0633c790e54a621019bb642394c972b
- SSDEEP 49152:woEglFF0PojxJyMhf7yK0hwEIR6i6wM5CohxDKrIt1X0QrAuMQo4vy:wILxJ/yK0hwEIIAMsohBKrIt1X0eAh
- TLSH
  T19FD5BFD337E4AEBEC5AF4A3BD1350020FAF1C655BF92EB5B1591E5BD2E923008981253
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Remote Registration Software Moscow/DevExpress.Utils.v7.3.dll
- Size 3.6MB
- SHA256 30bb9e133e4d31a6486f5249d792ca95cf8facdee70657d4e4e572485c2766b0
- MD5 12b70c96c4f75e3490ad77bb0f45378d
- SHA1 33674fee59eda815c8d9385ed1bdccbfac76aa4c
- SHA512 2f94121c2c6470a71467820278f8d927027c5341f2d30fbee912728b8ca518cdf3810a136d3c8bda62274257b984fe39a9ab5f0c7c75548ec797ca39a29b86b3
- SSDEEP 49152:Yz10jxayH2xcu3Yhw3xH1iNHUtMCZyo9v5V4Mzg6VbzFyAGqu8CAwUpajADnlVB+:jxaw2xm4JgNHekwtD0mYN
- TLSH
  T1B8068CE1A3D41D6AC76F013976331440EEF66AA387069B46F85DA53B8FB6B844C43723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Remote Registration Software Moscow/DevExpress.XtraCharts.v10.1.UI.dll
- Size 45KB
- SHA256 28bd608e5ef7cea41d6eb33340509c81ac259f1ca4ee24c24da2f8a18e9c2e26
- MD5 cabe036836955aa03803cdfb9da233a2
- SHA1 7db87ef88703cefa5e63b5aa963bc159fa22cb76
- SHA512 0356c9bdf51867c8839e5f869bbf5c9a09da2a956754063381624fbeebf84904d0ac1978a0069a5a9f8e27cf4d56f0763f8146f43153f07c53c81cb56ef96c01
- SSDEEP 768:YCqzLaE/7ywjc/X6kOQvawb9quZuH4wdim5lZWFmtuJYxAHnrGZtzXUyF:YCKaEzyZ/3Xvawb9q/H4wdikzW6+YxAE
- TLSH
  T1FE23E8BFEB61C578C69F073A596363810370C64355B6EB2B2A48F1BA5453B270F231A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Remote Registration Software Moscow/DevExpress.XtraCharts.v10.1.dll
- Size 6.5MB
- SHA256 6d0fa784b97ac7f9492bf9c66b0ed175a4c6167fb9aba1eef271553d55cd110e
- MD5 43213d54494ac17b1cf6bc2dc50f60e0
- SHA1 c3a4f9d53b02249d7fb8a7fd4308d9e8d62ab72b
- SHA512 6eea6bb96b150122f1be37221b57523895696a099a88dbe6209e3eecb35933d92abd03560d2401b7f0672ea2e4c5f6738cc4aa55ff235605795138f1b4d6ecad
- SSDEEP 49152:oeJnlOwA8VAwGQYVcrVU+mpsYHgg5pJyGSvyPQT3zSwsLTY1hQvAL6kj:mwA8CUS+mKtupoGS
- TLSH
  T12166D53077B5521DE87A1B702C36A68113B6BE66BF50CB1E7119121DAD62B138F03BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Remote Registration Software Moscow/DevExpress.XtraEditors.v10.1.dll
- Size 1.6MB
- SHA256 ec54c298124f0b56b8cdfc6edd57e4c2f06ce9b3a84bff65b5f7b89d7dc69caf
- MD5 71cfef86c100d35a4ed9c810913079b0
- SHA1 831f5747275878744f81a197d256b5bba908442a
- SHA512 cad5ce8ba2574fc956b22fa3633e4bd239a16820c5c98c5ef7e99fc143aa848f1131c5a2a7e370bc60b4702f2eb13893382ee2da76e1212b9d6c564149cfbc00
- SSDEEP 24576:nO/k3Igv692Visjp9KuFOJKVCgzYisYNx:c8CmC
- TLSH
  T1C175494237EC4F2FD5AF4336B051153142F0D86AB793EB6B6E51A57C2C93B138E22266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Remote Registration Software Moscow/DevExpress.XtraNavBar.v7.3.dll
- Size 320KB
- SHA256 1917649375722be3add4b2445b69e88aa41aa7bbfb54b8dd7338fd59aa8d7663
- MD5 5b239a544c750ab0da945ab1f7ac9b13
- SHA1 b72b38afff8c0f81b2e74304105b17e6250a2e54
- SHA512 353913ada4dc2b104607a33827af09cbec4f42c72e64cd0a2436120000a9486bda8eef465ee0acb5ab5e27d86be946258cefe5fe795a42ec25ffee423dad7ea2
- SSDEEP 6144:+f50Q9PtcJCTjKmS5Dt2CXUUsMHLzDvTTq5XwPgrvUpMY:+Br5t4Cot1sol
- TLSH
  T100646B1013584A6BD5EF423AE008155942F4CAA2F6CADF6F2C99F9EC4D63712EF1712B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Remote Registration Software Moscow/GridViewExtensions.dll
- Size 96KB
- SHA256 e2e07a23ee89d7578ccd8a318327bd0870ef9a048d277ae6b6005541e213597b
- MD5 11df50ef5e3245dee1685f288b1c8ce8
- SHA1 cfddaae1b615ccfa1565e8bdd185b23e87dc6c9b
- SHA512 aacfd6d9ff243bc70f83ba1dc365fe691ebd2963684a81544922d8ba69a3cea8806e3e26956ef1eaee841d95b843bf1da6388f1f0a29730fda8a43e25aaab13e
- SSDEEP 768:SKB81QynHIqVbYkx6AHlm2T/A2TsMOpx1qKrSP/uhN0L8d6PcicoV29FrANyEEH8:jUbY46AHlWJRzILcrw2jrANyEs4rF
- TLSH
  T154A31A251BE85F6AD9BD4BBCB46410002375E691AE13E72F5FC860EA1CB3720CA4775B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Remote Registration Software Moscow/HistoryResultDetailsTemplate.vm
- Size 3KB
- SHA256 17351d2131d9a1af08948aa7d752aa98c037ff4adbb30d2a8bf16aacc0f9eb95
- MD5 8d6ad90b37fd378e48160abef103eb98
- SHA1 d67bfdd75ca2147b2a5080f50129810002d7daac
- SHA512 91fbe4d73f9c6f14d1afa3bb03581d8368720b7becaf5b0df78768c113d20aa0e0a9808178ec17c196401fae4378b471b04e1573a4226b58f5233ef1a5e07e27
- TLSH
  T1E061AB7B17CDF686E632911895205F80EEF2807773431A21B84F459B3F77A6D824311B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23
- Target
  Remote Registration Software Moscow/ICSharpCode.SharpZipLib.dll
- Size 188KB
- SHA256 cfc2a838569a48d16a15269bb701de87b81b3d2bc303bb7c4c3724cc3bba0c50
- MD5 0b3b4e8d1de31f844e466d61cf7937b5
- SHA1 d699e5b46a14ea4d7c052e4193f85f0a4f2b29eb
- SHA512 a5e7d1f8b7d9242f213046cfe19b0e01d41fcb285072bd079a054293b6778ca78a76b3b2ec4aba8af396a7fc46d6eeb62c2df652187b77ef7f7900c130d26e12
- SSDEEP 3072:7+UpysqWNqkXWZfUKlnF3JLL1cRzm3W6FpSarDwVqS8vINqARK:RysVufBn597NX
- TLSH
  T12914282467FC9B5BF9BA8BB8D078195183F4B892363FDB2A5D4494EE1C12B90CD50363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Remote Registration Software Moscow/Microsoft.ReportViewer.Common.dll
- Size 6.1MB
- SHA256 e475122047a36371f61e86b8d099fc8d6f263bd3bdb03d00b1116b0cb5b28636
- MD5 1ab118e292b518fcdbdb4e6dffd6e859
- SHA1 264036e40bfa9fed82d67d2c9a7b9d0be570cd3a
- SHA512 572f52a294890af88b860ab3887970c1268713d56ae3917e0865766d84b12fd1728688c5f2f931fc20fa88dd4a2be0e1f70e7d06926e592687b4bf5eca4095ad
- SSDEEP 49152:eLoY0vX6K4/vkJvFViWOEl6eM0bEmRR0eZhIne76WLN1ksrsDTjRDPlx61PL:WK6K4/m83DeM4seHwmL86UKD
- TLSH
  T16C567D0177F88F19D1BF0A76E4B2652977F3D8222312EB58756CF23A27627015A22377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Remote Registration Software Moscow/Microsoft.ReportViewer.DataVisualization.dll
- Size 3.7MB
- SHA256 6abb0c733248c3cae99c58512a6e2b4f938fad3420203e96eb03c9cb1aab60b7
- MD5 6a3bcccbf8d945a666d825b85d6284f0
- SHA1 b59032024d576446afaa7565f68883d915feb731
- SHA512 6a2b4e853384f603790e3f109808c6f69433f49e38242a1e01c76bb0f10145ef76833d39eee91e56b9788b8d57edc8cdbed63a19813a083751677c2ece62eac3
- SSDEEP 49152:YxdSUT1d9eFT381NfA+XvtnLNkxSYSMdqD990V62E/vWCU:q8b36Pkrjt
- TLSH
  T14106F900F7FA663DF2EF4B76DD35909C45B6BE566F02C12E2890A42E2971B444E6037B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Remote Registration Software Moscow/Microsoft.ReportViewer.ProcessingObjectModel.dll
- Size 89KB
- SHA256 68df6e12892cdd9244d50be4c0baa22a9e14bba4e64655521b29c17ebaed2a24
- MD5 c6021782bffbe07c8d79a4171a55f36f
- SHA1 1ba19b627901be3c895c089397ee4db86c27b6ec
- SHA512 f0914b903ed79b3eea270cd89f770fa0ba647c931e91ca57febf7c12ca44f2acfe8c08a2c018a7630126eff02381dc965a9e95e2aae2470208fa8b10891c7a96
- SSDEEP 1536:im+rBQpJ7dJg+wqtetLRBQi+IYKDjrMr9Yqds4JUQ9rHUgP:p0B+JRSBqtS9Bm9Uq2CUQ9o4
- TLSH
  T15893FA25527B573ED6A90A7BA4F409A2BE3173723526862B354C370D0507FFBAC2163B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Remote Registration Software Moscow/Microsoft.ReportViewer.WebForms.dll
- Size 2.0MB
- SHA256 6b488659b937014469cf01973f0055b0c817fb6a15d0f136c0fb405b2e4524ec
- MD5 e337ca3f8ae598d3065c932e4186b0a1
- SHA1 c39533068318bfcfc05d5f05c9e799c01013f13f
- SHA512 ef7da045a11f4e9fb7e1709ca693b0271753cd0471a8c3ff331cf28590687dbd7f17f2f213a9ddebf6ee0ea8d06302e7df33f6fdb263b9f60cfb86861428b776
- SSDEEP 49152:NgJUzOAMMfsbDjIFZOzQYtpf5sZ0RIgF4xD151bzoA0y0oDJe6gD/Q1IjQj0jyt:mJr04SQqqCx
- TLSH
  T144A5BE2033E81A2AD5BF07B2AA7A0508E37591071692DB1E395C53DD2FF6B948160FF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Remote Registration Software Moscow/Microsoft.ReportViewer.WinForms.dll
- Size 535KB
- SHA256 eacc72c00295d057c3ad9aaaaabef3086ca52a14fa717e16ef05340011a71f88
- MD5 9009c3b320d67c0972bb8cf542d9078f
- SHA1 e45e9a4f4dde77613a882e6bec1906c084656df2
- SHA512 54b9cbb041dd455ca238e2a2277e5cf237fa9f87b928a05b6be7fa212c047bd0b7b92533af3a46b7c4e5fc6ecda5eaff054cc281da90e344e9782918a55d65d6
- SSDEEP 6144:ZjRzVOuWKe7M2+HEEZ0yZ94D6q/oNWW5B/PrKKGXHMBagTFGID0dBOWfQP752+VC:HVO7nrwBx5hGj/8651
- TLSH
  T1C4C45A2037E9A71ED4BF0BB5A476404097B9B703A694EB5E8C54535D2CE7B86CE013B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Remote Registration Software Moscow/NVelocity.dll
- Size 268KB
- SHA256 1f56a60ccde56127e6a516af97b404057f149cf70f454f9c2e6a9b9f77d73324
- MD5 9af9ffc67a7345784bcf0bc4e7397ec9
- SHA1 41280156460deb2d6556cfa1fc4020ef951faa85
- SHA512 6abd2a6bbca5186e9219ce4e8fac0ee2a70821595452a1a4087bef2cb4213a481424222fa74a989b54e199e0ba8374b5924ae3dbda6568aa2a614196f8791c7e
- SSDEEP 6144:QQl5OkVkxB9AFvjUGuZY6D0hquKwZp6k9umTf6ylEuoY3Vy0h:aHAFvjUGuZVeWwZp6k9DVy
- TLSH
  T1D544E4445FE92A42E5BEE77E98710100D3B4F45A8D7BE71E89D064EA2933B10CE9C727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Remote Registration Software Moscow/ObjectListView.dll
- Size 418KB
- SHA256 60b2d89a0c3049f251699f44f7510bb712286007fae9ffdcbd85b949d345d642
- MD5 bb196abff565ac353843184b33b4644a
- SHA1 03384aeae5eedd21a5fb5651ab22ebac7d14937f
- SHA512 a4869041251c4df13694dea91f48f6725337afac64c7447391300a75ed492c8efb099705ece21996721321cf3153820304194161c4d103ae928ac60aca922864
- SSDEEP 6144:q2L9TXGZzyppo/6kggzvjH4puT3gLNa7IeG8UG/nUnP95heX:qM9TXGZFykPjH4puT3g
- TLSH
  T1A7946B2A7788D62ED1DE4375E01C1A1983F5C10173CBE7A72D95D6AA3CC3B629E502E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Remote Registration Software Moscow/RRDirectoriesVersionsRemove.exe
- Size 11KB
- SHA256 b020e58c8eb2acf815e931130e704678fe8341949aa1fc42348751f7d6cb7e9e
- MD5 045fee5e6dabd2ea8d83bcfcbac9cc59
- SHA1 2ad255847f5a18e372260aa0a3d89a827eafb93f
- SHA512 dcf7dac416b50e7fd34361406b94b8e5e02bbb467c8a3f1db94abcbc808f34b31b29d3322a0c67ca115e1ad928c4513e44a067373508ccb4af288e5060a53e3b
- SSDEEP 192:a/e2v0iJfU8dc4WeCYcte9qOriQll/83xv3064K7/f2m0U:GnJc8dcMRcte9qOX/83xv3p4wf7
- TLSH
  T120321706B7C85729E8F30B35C97353014375BE888A66871F26887A5F2D316601E93BF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32