6bcf233552d59c4676308db85d85f5b6c3c3fc620e66f05159e6877f804cfd20

General

Target
6bcf233552d59c4676308db85d85f5b6c3c3fc620e66f05159e6877f804cfd20.exe
Size 1.2MB
Sample260810-yz75lsxdnc
SHA256 6bcf233552d59c4676308db85d85f5b6c3c3fc620e66f05159e6877f804cfd20
MD5 ec74202730ea2572960cb1ff4396563c
SHA1 d57cb6a75f63480c2cfa8cc95a1663c93fac79bd
SHA512 7cbcf1989da36fbe963fcc1a4cd995158cc1817097d480750a3a3b95fccbb6205d7a25787a51a15dfff9cd18b81b491c4c1287be8206893bf66641c709048e53
SSDEEP 24576:RTMn6rH7RZZ/fSbjZ0v5zYACxeEzpVessMBFa8QRQt5bgw/msswwYz1x:RTMn6rH9ZZ/CCvyXsmpV7sMXPQRQt5hz
TLSH
T116452283BE1D90DADD6C08335837859B5A327D3EC9D41E9623C0B7AD9871122AB1F1F6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  6bcf233552d59c4676308db85d85f5b6c3c3fc620e66f05159e6877f804cfd20.exe
- Size 1.2MB
- SHA256 6bcf233552d59c4676308db85d85f5b6c3c3fc620e66f05159e6877f804cfd20
- MD5 ec74202730ea2572960cb1ff4396563c
- SHA1 d57cb6a75f63480c2cfa8cc95a1663c93fac79bd
- SHA512 7cbcf1989da36fbe963fcc1a4cd995158cc1817097d480750a3a3b95fccbb6205d7a25787a51a15dfff9cd18b81b491c4c1287be8206893bf66641c709048e53
- SSDEEP 24576:RTMn6rH7RZZ/fSbjZ0v5zYACxeEzpVessMBFa8QRQt5bgw/msswwYz1x:RTMn6rH9ZZ/CCvyXsmpV7sMXPQRQt5hz
- TLSH
  T116452283BE1D90DADD6C08335837859B5A327D3EC9D41E9623C0B7AD9871122AB1F1F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
- MD5 564bb0373067e1785cba7e4c24aab4bf
- SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
- SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
- SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
- TLSH
  T1F6427D1193B089F2F590593805A67F2A6FBEAC5C27E44963CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156
- MD5 48f3e7860e1de2b4e63ec744a5e9582a
- SHA1 420c64d802a637c75a53efc8f748e1aede3d6dc6
- SHA512 28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583
- SSDEEP 96:oFsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YuNqkzfS:oFsvWyNO81b8pCHFcM0PuAgkOywIFc
- TLSH
  T19112F992E5A450B3C5D6533A35AA2F2DCBBD5329B0926C00C7738E4D39355B66E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6