dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980

General

Target
dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980.exe
Size 1.1MB
Sample260810-ze8fbasyev
SHA256 dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980
MD5 828855c9ca1b300541e581ab41cc40d6
SHA1 909ee047f4df7affaee0e911efc49306c1652b41
SHA512 c462e3f17045b0642e2752971b21a281f4574b98c220a50d87d06da4334d145881218c5b15484efdb8454625076ad3153accf37e69ded8ada30631acd1156291
SSDEEP 24576:K+/0ARK/TWLGCtES37Za5DE5rmYGOqzSF:d8P/T1wESFKQr/G5m
TLSH
T12635F1D4E768C890F01A44B9E323D9785E74AC119DACE9AB95F07C2774FBA83641DC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980.exe
- Size 1.1MB
- SHA256 dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980
- MD5 828855c9ca1b300541e581ab41cc40d6
- SHA1 909ee047f4df7affaee0e911efc49306c1652b41
- SHA512 c462e3f17045b0642e2752971b21a281f4574b98c220a50d87d06da4334d145881218c5b15484efdb8454625076ad3153accf37e69ded8ada30631acd1156291
- SSDEEP 24576:K+/0ARK/TWLGCtES37Za5DE5rmYGOqzSF:d8P/T1wESFKQr/G5m
- TLSH
  T12635F1D4E768C890F01A44B9E323D9785E74AC119DACE9AB95F07C2774FBA83641DC0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 a44ca08afb3f6bafd76aa35c259f3d599fe34f6f49ea5118626c1c1a540b0f03
- MD5 81e268e27dbbcadbf116b5a9402195ab
- SHA1 bd2b701b2e5e279786e179bceee2dc132a2afc37
- SHA512 784115c69df4a6f180efb4d48cf5c6e8c2393b8ce9aa664f192abf5a260984880c668dd0f93564126d2fc718130570c4f6224d1373d73bcb8343f04f6ede25de
- SSDEEP 192:VFiQJ77pJp17C8F1A5xjGNxrgFOgb7lrT/d93:97pJp48F2exrg5F/d
- TLSH
  T10C424B1583618EF3F5961E3C00667E2F2B79BE3416F104A39FE34481AD9A1CF99B5392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 7853be9190489ba84dae8232e9a967cec02d941732cb4137bc9ae6a392e89fb8
- MD5 3fbd78c889fa40a2e5567b980c57b7db
- SHA1 303564bfa6fd5ab7a65d35ae1cd14a05643b6b5d
- SHA512 95ccd599cdacb1128aa35694aa5428f12f50a20d95bb500e9b180b3ab322b1870ae301f77f7ca0e8674c78742a1eb5c82ba3cee05c67d3d961a695563c8c1514
- SSDEEP 96:oX7lf7AR1VhrfzBik0cxM2DjDf3GEkniJnifvcx418qndYv0PLE:oXl7wrLBn0REc0JxedO0PLE
- TLSH
  T1371207135A0044B3D9E2223A31AA2F2ED73C932490527D02C777DE5A2BB43166D3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6