d4caab0ad4b3c81193400e9e34ee07cc9abca187862aad17d131fe2e94f986eb

General

Target
app_patched.exe
Size 819.9MB
Sample260810-lmv83azzgv
SHA256 d4caab0ad4b3c81193400e9e34ee07cc9abca187862aad17d131fe2e94f986eb
MD5 8b70a6e417d081717ebb342bef69f63d
SHA1 cb37da6fac2b08d4f14be9d6fb7c1f11e9e286eb
SHA512 a85cddf43002231edf772d051394fb6b4f7eab5cf00ce533d557caab78de4c480b65eb18e7638e768791a5b6f51646559754019839297fd938604b910b34403c
SSDEEP 12582912:dsbqld5ejVHPkHe3jkHKwNtmSCOqlzs8:Bd5OvkHAjkHHthcl4
TLSH
T11D9933C407D6659BD31F4AF2B2BAD6D4EA08DAEE990851338DB27407C23ED9F8577009
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  app_patched.exe
- Size 819.9MB
- SHA256 d4caab0ad4b3c81193400e9e34ee07cc9abca187862aad17d131fe2e94f986eb
- MD5 8b70a6e417d081717ebb342bef69f63d
- SHA1 cb37da6fac2b08d4f14be9d6fb7c1f11e9e286eb
- SHA512 a85cddf43002231edf772d051394fb6b4f7eab5cf00ce533d557caab78de4c480b65eb18e7638e768791a5b6f51646559754019839297fd938604b910b34403c
- SSDEEP 12582912:dsbqld5ejVHPkHe3jkHKwNtmSCOqlzs8:Bd5OvkHAjkHHthcl4
- TLSH
  T11D9933C407D6659BD31F4AF2B2BAD6D4EA08DAEE990851338DB27407C23ED9F8577009
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  app_patched.pyc
- Size 60KB
- SHA256 2fe7ad62ebf5f4eed50252644db8ec8416d9a176e76f4a4a4792357c4a683898
- MD5 9bdf82e776e0f9cbb55dcca58059c68c
- SHA1 735c4d80041374c9e223013b4306e17642d9f550
- SHA512 f10dcab40599f1772cdeb74564688b8bd4cb82434d44d975342ef296e7db54453a3ce7197caa06bd990dd0d77ebae6a1827a821e74d4b2448c7be227d138a6e6
- SSDEEP 768:p7qpe8SN3jOoSfakRdaLwPm3TC1l15rdq7K6BnKev7vdvjaTk+RVE+hbwueA0uc/:hqnSNm5cueuorXFSLytnUNYn
- TLSH
  T16153D576A938B537F98DB53A35DAB98073314A027A12F5C7E034487D7DD032ACA16B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4