e6c2238e4256b93d1bef01b4437604d8d3aea915500c21a4235365b27f969deb

General

Target
e6c2238e4256b93d1bef01b4437604d8d3aea915500c21a4235365b27f969deb.exe
Size 296KB
Sample260810-sfwdtabp8z
SHA256 e6c2238e4256b93d1bef01b4437604d8d3aea915500c21a4235365b27f969deb
MD5 11c6dc3fb80e4f08449d1c38db508382
SHA1 47d1051cc8e4ea3931f586799fddb70bcfe184af
SHA512 7f5a2efc736ffc24e68adf468ea9fe44cc1b70a4bab2641cd0d1b2da812358c78fc6aa1b44723616042ef5a2a1ec26be2edff739381c3e16365510742c325bfb
SSDEEP 6144:35OhKh5mmdnKHn6b7SVLk2S99RPqj5Bt3rf9Rkjc4YTxoBIT:gh859dnKH66VLEqj5PxeQ4Wx
TLSH
T14554120B27D0F8E3D55117704EF2AB98BFB16DA11521421B17847A6F38397A0CA2FB99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  e6c2238e4256b93d1bef01b4437604d8d3aea915500c21a4235365b27f969deb.exe
- Size 296KB
- SHA256 e6c2238e4256b93d1bef01b4437604d8d3aea915500c21a4235365b27f969deb
- MD5 11c6dc3fb80e4f08449d1c38db508382
- SHA1 47d1051cc8e4ea3931f586799fddb70bcfe184af
- SHA512 7f5a2efc736ffc24e68adf468ea9fe44cc1b70a4bab2641cd0d1b2da812358c78fc6aa1b44723616042ef5a2a1ec26be2edff739381c3e16365510742c325bfb
- SSDEEP 6144:35OhKh5mmdnKHn6b7SVLk2S99RPqj5Bt3rf9Rkjc4YTxoBIT:gh859dnKH66VLEqj5PxeQ4Wx
- TLSH
  T14554120B27D0F8E3D55117704EF2AB98BFB16DA11521421B17847A6F38397A0CA2FB99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1
- MD5 fbe295e5a1acfbd0a6271898f885fe6a
- SHA1 d6d205922e61635472efb13c2bb92c9ac6cb96da
- SHA512 2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06
- SSDEEP 192:yPtkiQJr7V9r3Ftr87NfwXQ6whlgi62V7i77blbTc4DI:N7Vxr8IgLgi3sVc4
- TLSH
  T107324A5503604AF3E986843C086A3BBF6F796B2196F04E53DFA384C0EE6D5C96D78352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 3cdf3e24c87666ed5c582b8b028c01ee6ac16d5a9b8d8d684ae67605376786ea
- MD5 ab101f38562c8545a641e95172c354b4
- SHA1 ec47ac5449f6ee4b14f6dd7ddde841a3e723e567
- SHA512 72d4b6dc439f40b7d68b03353a748fc3ad7ed10b0401741c5030705d9b1adef856406075e9ce4f1a08e4345a16e1c759f636c38ad92a57ef369867a9533b7037
- SSDEEP 96:o3W4JlD3c151V1gQoE8cxM2DjDf3GEst+Nt+jvcx4K8qndYv0PLE:o3p3ggQF8REskpxZdO0PLE
- TLSH
  T13512F8235A4455B3C9E7223A31AA2F2ECB3C9324E0627D02C777DE562BF42166D3E355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6