aad0b003d306ba22697134f096bd229cef9b176ba813f3d0cd0a48666446d9ab

Sharing

Copy URL Twitter E-mail

General

Target
Softys.IDE_1.1.19_x64-setup.exe
Size 26.8MB
Sample260810-3ffngawwat
SHA256 aad0b003d306ba22697134f096bd229cef9b176ba813f3d0cd0a48666446d9ab
MD5 096c02266f5994adf2c86b1dfd34421d
SHA1 9caac4616b8f8cc28d2afcc31a552301293f32b5
SHA512 f50aa7e4bc7d777325ea493e1cbb770447a0e8484e0a1a21f4d916b282901e6fb47d4d35e1fd9252d3dc57bc85b58a8e41e28da5cb7c7d1331473e0c51ff5eb4
SSDEEP 393216:trbO9kgRrD50rNxizX55v+wCW/MvpmasDYsJIskdp+mSPaCa6+ocwQDxWJlrkb+w:ty0+LiwtCsJuyCbiDYxuZgCSXz
TLSH
T1C45733571701B25CE06B6C7E08E61CB3E5B2EE794069C1A9730C4AE1897B44EF237DDA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Softys.IDE_1.1.19_x64-setup.exe
- Size 26.8MB
- SHA256 aad0b003d306ba22697134f096bd229cef9b176ba813f3d0cd0a48666446d9ab
- MD5 096c02266f5994adf2c86b1dfd34421d
- SHA1 9caac4616b8f8cc28d2afcc31a552301293f32b5
- SHA512 f50aa7e4bc7d777325ea493e1cbb770447a0e8484e0a1a21f4d916b282901e6fb47d4d35e1fd9252d3dc57bc85b58a8e41e28da5cb7c7d1331473e0c51ff5eb4
- SSDEEP 393216:trbO9kgRrD50rNxizX55v+wCW/MvpmasDYsJIskdp+mSPaCa6+ocwQDxWJlrkb+w:ty0+LiwtCsJuyCbiDYxuZgCSXz
- TLSH
  T1C45733571701B25CE06B6C7E08E61CB3E5B2EE794069C1A9730C4AE1897B44EF237DDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery defense_evasion spyware trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  server/node_modules/monaco-editor/min/vs/lua-DtygF91M.js
- Size 2KB
- SHA256 16e36e65f32eeb630be4622b6066d42ebf03b35d2aa60f8ddd884ee8c2bc8448
- MD5 44ced53d5a6b4d8aafb8ac8994ee5ee7
- SHA1 8f468e3b51f57ec4b326dd244fcb600194170a9f
- SHA512 f1c3e43ba9b9d82925af68dd5f0b4a66835997211ec5c644689f8140e6d161a617075af729dd5ea959176a223618f3ce4638b306e051e1d5790e7ffe229136f5
- TLSH
  T18041140CE49615393AF776180CD55AA93CCE1B34C0A417EAFAE4DC618739EC554A2E3F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  server/node_modules/monaco-editor/min/vs/m3-CsR4AuFi.js
- Size 2KB
- SHA256 8cd14878f7f2bf8ca1293a47e368f6b351d6ebd667a072049999281db306df1a
- MD5 5f4dffbda7f31d456f807822a4793349
- SHA1 036085737894405a03d0dfd210392d348ec29b7e
- SHA512 dcfebfdd232fe394c9e0ba8407ff7d9398d82c3bf678d22baa13ed890998dd1eb4df38bcb5073394cfa44728ccbe45040f067386c985df65bb2efbc838b57160
- TLSH
  T18F51450DE96336352B66B60C5CD545A278DC163402940BFA77E8B8F0921DAC33E62E7F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  server/node_modules/monaco-editor/min/vs/main-BEx-Fmlo.js
- Size 12KB
- SHA256 393cc4473613f2314e73964e287ca23990a1c751c9b2bf09ea01f26a80f1ad47
- MD5 6dd0ac717d2a7014fff3c116cc07e676
- SHA1 e5f5d77dcb8494498f044adcbca6560d3511ad70
- SHA512 1bdceea9f22836f3a509ef2b14da084398b2d61bc46cfbf363833a051ee909afd36cf8c107e4c4fa075d8ff891043ecfbbabe467418ce07aa9cd010be516d315
- SSDEEP 384:BmIMNhV1czqlcvTCf3WyagPkWs2VYekON36hWSYPEo5F5j7B8B:VIV28cCf3lagMGYNON3ZF5j7S
- TLSH
  T1C542D82131DE6E0B36F2E1E621E35184BD340610151E7CA2FB15E7A270798D329E7EBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  server/node_modules/monaco-editor/min/vs/main-DsK8pnKg.js
- Size 20KB
- SHA256 1e89389527e31139925d680012e813dc9ab195b1c6ff98634cc3f5f93df16eb0
- MD5 a92ac90d567eb2883240eb041ff0cc7b
- SHA1 8d9db41805cec466032b96de6fd4cba9b40b18f6
- SHA512 43828d0992435464b71f411cc81409c98eb1f8e25774575aa770848caa082ead6266fae09265067a5452e053475a1cc4b388133a2b1bf2cbe2ff386a21379959
- SSDEEP 384:W6TVNP+LwKMg2ktPTj+xnDyA8BCp8sZWdOPuShjHJClcnFGpyFsSu:W6Tzbktx4R/hzhGpRSu
- TLSH
  T10E9254DCB382F8024B9F9A20E07F1509E237F4A654895410F198DCCB6C69639637BFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  server/node_modules/monaco-editor/min/vs/markdown-C_rD0bIw.js
- Size 3KB
- SHA256 daab8a5150c09dd393aca1ab782bd6a1bf13c12b2f961a33a8420932c6be32c5
- MD5 a96775ef25f324d40b707afb494d94c6
- SHA1 4f236677381024d44ba4f1c804dfc9e425b9f833
- SHA512 ce8ffa41e88fe831d212215d9469731f0d492354af7d5dd326ede0fa880ec14b1f93bf6fbd246176cde1b3fc78e0dc8afef218dd172e17c04b637f4387ad83c3
- TLSH
  T11371731D5D2768782EA0980C8CDD15CB6C4D1B3861A039D9F6D4F8BADA782C4451BF77
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  server/node_modules/monaco-editor/min/vs/mdx-CpzZIPHF.js
- Size 4KB
- SHA256 deabcb3cbe4c05af61ead9514b227fcc3d6d5124b685aa8a23f0023656555947
- MD5 5dff71d02d1ab6556e4413ec0a9d539f
- SHA1 84d927f29a43fbff9c13059653efa1740905e595
- SHA512 082f83b54ed472ea6fadc0fb6d1931ef21d5099773dde83448b5512c45a623d68b81ae6a3174cae288cd44d8cc6d9bb471681b92771817936d75f5bf1c91653e
- SSDEEP 96:N8hmQwojV1+73PIyUlmKo4riz0625EQ2OC7j/gIRpW:NrAKQjlZcQ2OC7j/giW
- TLSH
  T11191FF8BA0227C7416A3665E38FE05CD2C7E0678E59474C9E5D8C5CECF31188446BBBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  server/node_modules/monaco-editor/min/vs/mips-CiYP61RB.js
- Size 2KB
- SHA256 6c936f788a9b27b8464a492c0a7e62b439caff1b05bea2eb5a837b663663cf08
- MD5 a7984755de015d502b486ba0519e9f44
- SHA1 d270ab59ed60c9196ea0b3fb0963cfb5749b5363
- SHA512 b973c54a5e221ff5dec90bd6425fa16b8d9f8e1839b43420f76405b49fd09f1cbc4392cec3ecfa33b46d973139f7369ae9130a5627656cd0c2e8f45e34094b4b
- TLSH
  T11051310CA41C29223D1C59891DDD00822C9A3B6AC1B82DFDE3C0F8558739AD5B0B9BB7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  server/node_modules/monaco-editor/min/vs/monaco.contribution-9cKT3C7t.js
- Size 2KB
- SHA256 1eaf2e813456a583e6a3e2cf7d8a9f521a4efa0e83852159394d6ad45d742a2f
- MD5 ec6ca8476fe640e71aecbdf924f21fe0
- SHA1 6d7639cba967cde1e35926913e8b587268f43321
- SHA512 f04eb0aabd5795e362784443d3f688e68d2648eeb6b305db89342b56d7be0a992b14ffe876f1362ea4731e6f3593dfefa162157b5fede173f1d57eed36294798
- TLSH
  T1674142A17202AB8702C332D2F2E6D063D5B847CE588C782BB71CAECC5A5FC809212675
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  server/node_modules/monaco-editor/min/vs/monaco.contribution-BE88ZNGY.js
- Size 4KB
- SHA256 b7cc63f56cdb61a7b03971edef3faf3532fc73efb46077caabdb3b41fb267bea
- MD5 50707cd80c1c4461d8967ad03fea7d65
- SHA1 7bd29494220c1d0ba2c758a96ae44c7ccd2cfbb3
- SHA512 bf970d0c1108d182fac92985b76f8ba3e025452f98b386a5fe7c6bfea0b11b0e7a378525f3bec03829f2851065b7b47097cbee8dd4a8597524ef71d14d10f99f
- SSDEEP 96:04ssAid/ATEhn4+QZBpW6P5JnCFJ9oKIbg9b568UlU+RtM:04skQRXWyAFJ9kgJ5IO+DM
- TLSH
  T1A6A144D22BC5DE1352C2A292637AC502A22887806516703FBF6DEEEC51DFB557193B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  server/node_modules/monaco-editor/min/vs/monaco.contribution-BPhsneLd.js
- Size 1KB
- SHA256 7d618c62cd2fc7c02aa933ef165d90c906bd57139ba62129d41998cbe7e0eb2e
- MD5 2d202ede39034e2086e5bf2017f531b4
- SHA1 9fb26ed82af618aa0d9824bd928c45143a658819
- SHA512 50c2cd468d5bcd7949d1cfdcd3662b054b8a32c1ced21c2bafdb378b7663624449b9801a03e6b15ee0ec680c8fac6c3b03751ebd152e0f5981652f2435ecfebc
- TLSH
  T1393120C55281AB8306C6394BEDA59913E56D0A896408B83FFF1CFED8185F8855222265
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  server/node_modules/monaco-editor/min/vs/monaco.contribution-BgRy6xDf.js
- Size 2KB
- SHA256 6f8ea9b7fd550b1ac7930ca342c28512c7ee4239d983fa8eb4c51c4f2983a659
- MD5 4512c83b078da5a2ced95f1cf54e0475
- SHA1 4d959e9838daf13404dce01f015209fea640081c
- SHA512 3ec4a8657d5b42c45feab79bd8710713964b42c4b038d3dc91866a97e70a0e2f20c738a28e9268fef8acdc07aca1d74421bf24a8c22967acdaefbcdeb00a0869
- TLSH
  T17B4164C9A0C6F5A313C6A892B5B648036A7D05D56C0EBC6EFB5DDDCC09DFD480121BB0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  server/node_modules/monaco-editor/min/vs/msdax-C38-sJlp.js
- Size 4KB
- SHA256 c32791ca0a361d805fa92d92f07d316b459badacc5dd51efbc760eaf9168ae83
- MD5 d509b8c4a364a2d0c566da24b7a197c4
- SHA1 67c43af4770c57fe228d8cdf01d10208230ad117
- SHA512 a453272a273e69f033f2e54f6da2d09190b8d5a881b4f251d5f0ecb51af49773f1f3c5977e6e41c0ac99795a1bb00bb55758dfabeec5d52c9ed81962dd92f5d3
- SSDEEP 96:gxrviqgq+q17qj/E18Qby0qbmofEsl93Bjy2rzR9sJDJOuz3O+PYLq+v6cmiaxe6:gxrTd8Ey0UJfEI9z+zz3O+PYLZy4axe6
- TLSH
  T115A1A348F8A0B7711D55B87C6A9E8AF07CA10331576006F9B0D13AD25039B87BAF797A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  server/node_modules/monaco-editor/min/vs/mysql-CdtbpvbG.js
- Size 10KB
- SHA256 d9a7c012fd5dd55810488d928eb0e4dc3e4e8c856c5d45a497d02b4ade124510
- MD5 607230de9ddcf1c7e1047eed96de8249
- SHA1 20abda74d80361259a76beb1136fc8a8e6e5431e
- SHA512 0cfcfe01f703c8553006a3426eff41de7272cf68f49fa4fd1d0502178d5cf42b70e388277c83e9537712cb87c33ecec3b6dc5e02287b76b19aba3af230e2defd
- SSDEEP 192:fxLxjgsX+lz/zvS6GEQ+izEdfANAM+U+hqXP0BpR2/6AVzIAtCH2jZLbf9b6yZ:fxLxjFX+lfS6YUlANR060BpR2/6AVzIm
- TLSH
  T1EA329445EDF57B7841F67F7873B49A372C704C18E32949F9C0D1AAC5601E60ABA6322D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  server/node_modules/monaco-editor/min/vs/nls.messages-loader.js
- Size 266B
- SHA256 c2ec390ded129b3ed8b7994c348246be7ac83969019177ea5bb23278cbe4e1b1
- MD5 e3fa5f0532ec002ceedd87dcbc376492
- SHA1 bff8fd8b15603267bbe36b351c0915cf197cf960
- SHA512 b647eb39f240874bedec2555caa2ddfaf25507686bb0528d42bc2c9ab172ed8a17c48611dd1d5a78345a568e02a2083b5a575adf46531bd50b4a0308f9b2b816
- TLSH
  T1DCD02B095220A9A1210358C0685D9C93F786141713FCBCC62B291C86396204C71E791D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  server/node_modules/monaco-editor/min/vs/objective-c-CntZFaHX.js
- Size 2KB
- SHA256 1cd6f9265e8ca66348cb976ffc510edaff6997a6d8edc96b67d674d47997899f
- MD5 e6aec163dfc7d5ff83409372483235d7
- SHA1 98a9b3c1097e385660c48e3f3b4403349f9c8cd1
- SHA512 9e5f2e5503642e7886e2edcd658e7ddec0abc91748e2ec611e944a36393c073a9b0f3a5f2da9a87fe38c642f0c40b18263899d94b9d51f4a56b83bca4ae65f8f
- TLSH
  T17C41321ED90A0C3ABAFB2A8419D819457CCC4735D1B449D8FBE8D9B15A3878124BA63F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32