a9cf0ff00bc7cf0d6f8082d77f52b68c7ab6f1430ae4c6d8f3753b91630a770c

Sharing

Copy URL Twitter E-mail

General

Target
avast_secure_browser_setup.exe
Size 6.8MB
Sample260808-g1ee9aap91
SHA256 a9cf0ff00bc7cf0d6f8082d77f52b68c7ab6f1430ae4c6d8f3753b91630a770c
MD5 55d1f57a913a94f6258d079e4d481cca
SHA1 1d13464eff75071efb79e1cf1758d3b0b4d44c48
SHA512 76502c25514c70c26577f198f55ccb9788a10c0711cfb3b6386a3d43efac1547b8f5927a7793b8f04b747af8bf31628477d0afdfa9fc85c3c28825272c40af1e
SSDEEP 196608:st86rk+KjsHqnfKrxEk2+XdR/MnPQtFRkC:6rkZjUrb2+XdRuazkC
TLSH
T1017633893F21C516E7FFA838265C3BD35634AC24AE71B1811398393C62B3DFD451669B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  avast_secure_browser_setup.exe
- Size 6.8MB
- SHA256 a9cf0ff00bc7cf0d6f8082d77f52b68c7ab6f1430ae4c6d8f3753b91630a770c
- MD5 55d1f57a913a94f6258d079e4d481cca
- SHA1 1d13464eff75071efb79e1cf1758d3b0b4d44c48
- SHA512 76502c25514c70c26577f198f55ccb9788a10c0711cfb3b6386a3d43efac1547b8f5927a7793b8f04b747af8bf31628477d0afdfa9fc85c3c28825272c40af1e
- SSDEEP 196608:st86rk+KjsHqnfKrxEk2+XdR/MnPQtFRkC:6rkZjUrb2+XdRuazkC
- TLSH
  T1017633893F21C516E7FFA838265C3BD35634AC24AE71B1811398393C62B3DFD451669B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

bootkit discovery persistence spyware stealer
- Checks for any installed AV software in registry
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AvastBrowserInstaller.exe
- Size 11.1MB
- SHA256 5638bd9add1dc2665e09890352d721fd983c2b280f16d2f95ae9b7a57395cc31
- MD5 18d2a47d07d74fee3b5171b4c89d1cfb
- SHA1 4bfcbaf117c6c8b2fd548e8ecbe4cb6a0721d519
- SHA512 a5515979f5f89b76c975a429761eb5782357a6c93b81bf9fc7b2a0e72166a5854e0a6caaccd996378eabf18e8a7f3aa678cb0fc548c44fdeec66084e5280c92b
- SSDEEP 196608:djznGwZMb2U/KMgTHNcfVNurYTtajHpEgwC8rM+BWKLNoGfK11oEqSG6klkfsMWG:owZMbu6+yWKLjKzG60rqNp+
- TLSH
  T19CC6BF33BA81C079C69203B0594CF79997FEFAB11F32419BA798275D6F384D1A721A43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/AvastBrowserUpdateSetup.exe
- Size 1.6MB
- SHA256 2425183fa25e5a6e99d38a3a2f98ad74a51da09e3f33105bf88a1f363dfe9666
- MD5 518936ad220f261fb1c4be46c9e8f5bb
- SHA1 e9d16718e8a6f9c19a461b0079dcb92cd9e6374d
- SHA512 b05df7f397baa7e1fce6deec4c4eabd0cb59382a497ca6ac2dcfe89c6dce26ecca61ae3a0b6e14af1f4e3624f14a85febbcf66c9efdd7aad565023d75bca7e90
- SSDEEP 49152:kbGrGVjIj59OfWx2YtJ+qlnZfS9u4i8Jr6:OGrGVjW2/KBn5uu4X0
- TLSH
  T1917523027AE18171F6BB1D35667453F31A7AFD708D30996B2394382C2AB5CD19A34B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/sciterui.dll
- Size 147KB
- SHA256 923f9bca72d8b13beabea40b4d733088d5cad1047b4ac4b2699fa1e8b1379e41
- MD5 ce343f3452cc463ecac9d4b86416b2c7
- SHA1 824c5d5fbeeb0cc71d3caedfa2d5f23922c9093f
- SHA512 79a52b18ef92fa94f2305b02049abda91ba86fd5ab8eb817041075fdc7c95a0fde79d69831201b326a76e09f33b5c4dfff089cc75e53daae2ad620eedd60eeab
- SSDEEP 3072:4DKviR92IK3cV8z51WCqMzqGpksYaxNKvR0QzYFRGQ1yS21ZCVV:4GviRK37z51jLzqYBYDvZYFRGQ0XoVV
- TLSH
  T16DE312CF7E1473A6FD9A4E711090477168C7F3F8BBB695A218948264A66234CE90D0FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8