f4cdee31063f9c4ab7be04464a4b6bf384755f0cd90c5744b7487788a5dd1408

Sharing

Copy URL Twitter E-mail

General

Target
f4cdee31063f9c4ab7be04464a4b6bf384755f0cd90c5744b7487788a5dd1408.bin
Size 15.2MB
Sample260812-a4djsshf92
SHA256 f4cdee31063f9c4ab7be04464a4b6bf384755f0cd90c5744b7487788a5dd1408
MD5 d4851d55ed3a0f384ab974713424d5e6
SHA1 ca975e3e2b1dace0e25182e836f54809b2945700
SHA512 c2749a974e968e7666e70504cddee506a4cc8e6919b002f283b160e8ed7384837c72a4bbf8e9f650f0d3b931e068ed067528c8e7264a29710a192ed9211ef3bb
SSDEEP 393216:KGYUs2cVAEVKQahYdNAhoBs/b52lGvisVzVkXSRu1eiZ111:K1KcVAEx2toS/ApsVzVxU1e6
TLSH
T1B5F633A2D6DA5130F21A0B373674B53D142AEA16C23739D6EF62A2B307493D3D57AC0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  NFCProvisioningPlugin.dll
- Size 136KB
- SHA256 ddb0e7a5ab4e17f8f7349a1f71e29a5e03a8e5e73c7f4fe5e25b62693b94363b
- MD5 3f0d822d75c7ca97486baa4ac7f2d0f3
- SHA1 99d345ab7757eaf5a37912671d66eb89b6625c4a
- SHA512 3a3bd6ae00b07efd3667a650138ace226a9778085b814460ed6e84aa521d11481957394befa9a64d8cc01957cd53dee20219712054d0734c751e07049ea70b8a
- SSDEEP 3072:jhCKXKD3FcHztU9xp7yTVQSgv4Ce6u//isia:jsK6DVcHZCx5yTVtqu3iZ
- TLSH
  T182D35C2E35AC10F5E2B591BC85570A0AE7B1B061131267FF0690C1BD5F67BE86C3AFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  NPSM.dll
- Size 232KB
- SHA256 50f0169d8f1c8a819c467f27d0bb90ff46138b4d2246a0dc75f379884a865a7b
- MD5 ed1fc3201bb3ac564138db79df7941bd
- SHA1 a1beaf4170470e1bf341bc1055b33d6efb62af14
- SHA512 076ea7eb0dba81d96a4959b8b5324d7154e6df7b01ea4bb1e6d9bb5f9fa2def34791d0450aa86b47a1da81aafd7751be489dff0eff89e4db048a09e5a597ae60
- SSDEEP 3072:1HSexvXf7R1Jp/BPWK9XPjN6nJ217q2oKhXBVXC+kXYgXla9WOEKNaF:FzvP7RHp/BWK9P5sJ2Fq215eXlFOVN
- TLSH
  T1A7343B6E26E904E6F977D27CC5934A0AE672B4110722D2CF02D0427D4F67FE8AD39B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  NPSMDesktopProvider.dll
- Size 196KB
- SHA256 c347224b6c17ef768c44b8c2b929e0779ae367c4d29572c36eb28331841627aa
- MD5 26b0ee2bf9c6aacc7adf6497630bbddf
- SHA1 259e3d211737b2ae1a80f0a575ca72beda08d4ec
- SHA512 c02cf2876e3a56953c1b89a7b6eebfec544cf6dc4ad8258fc0d063cd4c194bf47a0162d1bf348401238d1f05e46c67a47871c02197978941a986af93bdbfffb0
- SSDEEP 3072:SX0XwrcmKNOqCLica0Tj+0i3yK5svEE9bAHTf06KTM:dXwQmbRLXa020i3yCszd6KT
- TLSH
  T1B3142B2E32EA10E6E57A913C84974A09F672B461172261DF03D081BD5F6BFE4BC3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  NetworkBindingEngineMigPlugin.dll
- Size 381KB
- SHA256 0a8a3df97c267445c2956ac025b15f61dd7286b889062affd9d2ce0c08eecd59
- MD5 3c35978dfe14f044299180c549217ac5
- SHA1 1a5f1f5c9c6e287d79e392ed65842431e998e42f
- SHA512 ae5531507d9308e39467631730deebd45de7ca8e17f2aba888267d8cbc2b8aa88bc494e49473cdc8f0b8834033af127d3bdba24d68e771571fa62e5e92fc0798
- SSDEEP 6144:XbnCzSBa+0VyJ6ZThiNFsYC+sSzzkR/JwWh0fzsyKkeiwTfvS8bk53i3LLgK+H:bC+4+0VvBhdYGcMibys
- TLSH
  T1D0845C2EAA980CA0E177D17C89AB8546F7F278551B32C9CF0255817E2E37EE4CD39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  NetworkCollectionAgent.dll
- Size 140KB
- SHA256 4f8684a3a0983d74dae0405f7ca87742bca7d79a016867871775bd06bf9b7b10
- MD5 15f13dbcc6b748b72199c9fe4268f0eb
- SHA1 e04f7ee29d83d550721806dbc883377c4dc6fe7d
- SHA512 e1d00e71e25e7b87dae31c699838b6f30ed02dc896500530c984fd4825e4a4de8825d23f6947cbdd2aef61fe0a37995b4954955bc6cd082faf7570f049afb6f3
- SSDEEP 3072:18F23HRvBxyHzabnNP0yewflwigO6TKaP9CtfF3T:SGJxqaNewdtg739WfF3
- TLSH
  T152E3A57A3D9C00E3E175B079C9C38A1797A6BCA10B6267CF2190230D4D7BFD99D39A21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  NetworkDesktopSettings.dll
- Size 244KB
- SHA256 54a510c0a252df8c4dafc54da17aa7605e8f3fbd57d33152c32dab82c6291bb0
- MD5 f68b5bc526f0330dbccef4ba8fdf14a0
- SHA1 4700112433c7060c593c89a8a0c6c7b8fb7aa563
- SHA512 061f5c7cc6c048f64c8984c8eb9edf9dc368169a860d34e7778aa40a3178bb2c8fc682e61af1740f59023957a17b34bd2f01c95483912170317a267e57d43555
- SSDEEP 3072:q64VEOELB0Nrj4G8++Z7Ee19XuyksUiP9M3OzKnCPJVxLPFFLiuHeWy3VGWb7suy:r4aOELBiMG8++Zoe19ogPqezvRVxm9e
- TLSH
  T1CB34F97B2DAC04A3E576B17EC5934B0AE3B27895435293CF0664036E4E1BFE86D39271
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  NetworkIcon.dll
- Size 300KB
- SHA256 0781a63d2f840d4195355cc98cce115b14dc915c23892dcc3efb7a02e3ec1fcd
- MD5 050de6219d1d58ca4153d76b0a240b41
- SHA1 e2139c14f10c67719cb54e54ab09b57e5bd38573
- SHA512 22bb082df811cc3477aff39feee63a559cbd25d5c14270013fc8d5b21711f840cd3f341015d44f877433d3cc82c11fd19b39d0f53504a00be1fdeaa0ca52ba0b
- SSDEEP 6144:Wjr8mZTUrFcixXKbnBh0a8Qzxx+hfHCMgr1l:BmZgrFct3mhPCT
- TLSH
  T10E644C6D66690CB6E57BD13DC6C38A0FE2B274554332C6CF069102AE1E5BFE8903E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  NetworkMobileSettings.dll
- Size 3.4MB
- SHA256 d85481e840a43ef89a5d35a6ddbe9a5e7b461d3d7d875d41b5f4304f43056b2c
- MD5 b911f3f8e5b6d4e465d54fcb1e1323bb
- SHA1 a675ed03a70e857569699b5ee43f2d2887f1aa52
- SHA512 6d378a3c2ca653da49889489ff5e0e71e4172837f13fa4fff197f2652318486080dc828bd600144b513308dca3a67860161594b44969c7b451e06e650865e9cd
- SSDEEP 49152:g8fndjL+ChyA6gi5gnrE8XO1AAlAOf5nKl8BW7mQNOEz8DGrIizudV2Gib1:LlbrE8XitnKl8BW7mQNOEz8DGrIIb1
- TLSH
  T108F55A2A56EC0298EAFAD67CC57B4907EAB178495331D1CF216C054D4F2BBE1893EB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  NetworkProxyCsp.dll
- Size 57KB
- SHA256 4c3d80bb8e5476088c746b4d122c5aad19b59a02c7daebacf4541198d9f22333
- MD5 b9f60ea71bcacd3fe15c048f17738439
- SHA1 adc2c989fcf44162bf3fa50d770c2c296390bbb0
- SHA512 ebc1ac0d302ca28e6ce07e1a92a8880efca2e953080df089ac09a3dbb24083d57b316a26c1f8eea4696a0a32f36ebd3051b664ae63571fd33b51dbf239ddaaa5
- SSDEEP 768:UJjPohAhhppylxvwamWcmgCmxrLJLO01Pic9z0E:UpBhhpplatl4rLJLOEPiUz0E
- TLSH
  T1EB437C8963381095E17AD13CC5A7CE06E879F1112B6156EF8370D1AD1F6B7C0EA38BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  NetworkQoSPolicyCSP.dll
- Size 104KB
- SHA256 24e273ff6d7de12c6179403a44c432afdf606b08be5303c7aa33d9ded66e07df
- MD5 aa3f5a291500c0e8401eb9aa49e77b61
- SHA1 6f3530bcc68ad773b08c88bde3c39aff11fc984f
- SHA512 d2ddd408f29e2209b5cefeedcfa9b48a07b1a17486b59872ed9cf442e186f6cd8c2ddcd6a452c3c55713cc3f1a3bc621a0c83e2162f4ab132bb8edd7aec6fa09
- SSDEEP 1536:9CLlKWFauhX4dxYx1YOKmv+toAhpjQSDASGlhQJIT+YdVtj:9P8dxy0v+toAhXsS/JIqYBj
- TLSH
  T105A35C3DA26C10B9D1B6D27C89934A2AE7B1B41D6B2247EF0360826E5F13FE45D3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  NetworkUXBroker.dll
- Size 560KB
- SHA256 9d29773850f4267eb74daeb512978a7b72225e2379017938df3f92bc870328c0
- MD5 bdb5abc971682001be69a2d4d290b2eb
- SHA1 ce398e615fac7452b3f9155bbde2fa61b3786219
- SHA512 54e9ff1e9e6575f36853e3661c11488fd51f4c4340ed2bbc6924322b3c6ff5c9ad31d9363fe48bb82d0a4401393ba56e9b81c462f6f854e24984a0e49eb8a86d
- SSDEEP 6144:ntVay88nd/2en6rQSo+8xoSXMXs4hmJCjKYltyc9nSzeTev7pXilfliuGc3zz0VI:7ay88nd/1n6rQ48isSm8ltLl9S3V0
- TLSH
  T110C4292DBA9802A6D17DE13980A74915E371BC1197A2D7CF01D0727E4E3BBE15F3AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral11
- Target
  NfcRadioMedia.dll
- Size 80KB
- SHA256 b67698891ec200559f5c7849b419477441e302f15d29acdbd545f6ddd07bf14c
- MD5 59e2ec8fbe78f078de140b9f963ca3fe
- SHA1 a3ed1934f4eb64427418c3d7b94b75bf8203056f
- SHA512 594315cc93bb6cad9c33d0fea65903ad5eb4f7c0beb6666282d8151208c01a3c3fefa7838de522f0e00188a6a41a8552c1e82640308da7efc15758c77b8837fd
- SSDEEP 1536:fVJkN5gJPhyi9gr/adxGzQn88KNVtm6QrYb7:fVI5WhejadxGFNm6AQ7
- TLSH
  T10B832C5D63E82495F6B6D17C84A34B06E270B4245712A3EF07A0827D9F2BFE4DA38F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  NgcCtnr.dll
- Size 605KB
- SHA256 0e853216865d4bdaaa8bf59b9ff2e3c2f69548caaf4fd021a1cdb1765261b90d
- MD5 31b21127d4b435c993ba125c2c6fcb97
- SHA1 1bf1807dc87282293d59819b001794330c94b941
- SHA512 50efcd620855169a4452172f6803f390ae4491227d810f50dfd51afd3fd3281fe942493f351e5caffc262ccbae763bc4817e8a46752de8b0b6033885118a0e7b
- SSDEEP 6144:b1zjolwn+qMpnajqX/weOMIxVuTvIhw1mKQTkAvgCqJtLeFRQ36ujlDmTT+0K6Kw:4wn+PpajqweFuVuTvIy1/RSRQS06cKtX
- TLSH
  T180D44D3D22E817A8E1F6C2BCC9934516FAB23815173599DF025181AC5E3BFE4D73AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  NgcCtnrGidsHandler.dll
- Size 428KB
- SHA256 df1f7a31c1dd38639b8462592c0ab108d0bca6251a08d97354cb77c451dd295f
- MD5 76121d30136ff678a0d22830fe9c3dec
- SHA1 4455925559ed919c24fdd104ea92fab5ecafed98
- SHA512 d68faf5d7d4f595145e7164f575b8b1c8b944bab4fbb2cdeacc330a59654cc287f554c32bcb1cdeb00f7c98884cdc42708eeef057be2420f01471ae55375d576
- SSDEEP 12288:I8l7kq7ACiCVu/bi11G1jEQuhbFzBvbH/tOgICV+d:NpT7xiCVu/bJ1jEZhb3wWV+d
- TLSH
  T1E5945B2DE2E803F2D0BAC0BDCAD7450BE2F1385843725ACF169615991E1BFF4963A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  NgcCtnrSvc.dll
- Size 821KB
- SHA256 ab6e7f0946a9a215b8d24d4fd6b763333a08e5f0300b37832df2bd93116f7173
- MD5 5522b3defe886edc744b18dd02d71273
- SHA1 15278a48b956b322f83ecf0c492b903a7669b55c
- SHA512 f52cdd15047f6070e7f4985bf2244f303185f2e187142423cad108c0beda7d2b2474dca12af519bec8f06a6aa946c35dc701677d5deede703218ca97edcfd204
- SSDEEP 24576:ZGQZ3HPH0pkVN8qC3Qz+xnS5YFVBFEvXSM2Tsx:ZGk8NwAnS5YXLEaZTsx
- TLSH
  T14C055D2D33EC02A9E0B6D1BDCA934656EBF17855177296CF0150426D4E3BFE48E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  NgcIsoCtnr.dll
- Size 833KB
- SHA256 9c5376cfc39b8b59139acbdab1c735aa7ed4f37e1fbabc19575da74281ce1031
- MD5 25312850557b530dc6023d47490f62e2
- SHA1 5175ebf104a17df1db14019f7e3243a5d364317d
- SHA512 107f921ea1b33f7ac7190ddffac3f405b28ba27deb91c3e524b151dedb7d7acfef1b2ae4dbcfea674a85b8fb8f95a5b9c863b4a80dca28244f60b51f3bbcfacb
- SSDEEP 12288:3CkwlVUUbpNkEF6/Ld8iL7BCb8pynG5HI+4ix:3CVjF6/Ld8iL7QbEynG5t4O
- TLSH
  T1DB054B3C66EC01B9E0BBC27DDA938917FA72384147359ADF0190425C5EAFFE0593AB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  NgcProCsp.dll
- Size 208KB
- SHA256 00b336a24ef66d0407b2e14b0bfe64d92eb8491d03f655152fa65578cef5d1ad
- MD5 2486c6605ea6688a147c1cde70eb2811
- SHA1 9cb1d8e20dcd49c00e22833caa81c04a7f87f3cb
- SHA512 7779cb2c4a554adedddf190f48521c40bcbceac82d20d0091690008cbaff9f96c79f0fcc5fe6dc0ac3f0c83a4e0a88bf0592d3513d577fb20e5b7725f4da6cc3
- SSDEEP 3072:I5LDJXwN6P/PUAiR1e/+lKwRaMut+P3fNs5xCx8jEuUfWAaEUqjVN:0DqNa0AifO+6O3fMIrUqjV
- TLSH
  T1EC24F71A27E80069F5F79679CDB38515EA72B8212B30D6CF0290817D5E37FD4A939F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  NlsData0000.dll
- Size 1.5MB
- SHA256 e7cf3850a3afe5f437c27149904423596bb53008a8f9feb90106928a23c10f4f
- MD5 c95467289e43f6ee6eb9484462875cf2
- SHA1 3ba969023d1e281675191e2ef4c7fd52e978dc31
- SHA512 c968d59386896252a7ea917cae24e53f31f1f7435b431da79fded4f60eae3fdf80ee6b55aa1a326d1e9a6f869fc1c4f5012eb8729007ea87061d33707764d31a
- SSDEEP 12288:t1QKUjoyaTnGHjSnNLWEI+fI9tsGbSThLRdh6OBf/m3EEY+SdZLHF4:t1EjoyOGDSnNLU+fI7sGbEh1BlOy74
- TLSH
  T1DB7591E0F4724B36E3EB8D3181657A2B87D78C1EEB1190D6C4BB834C359A78719A4CD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  NlsData0009.dll
- Size 6.3MB
- SHA256 aaab875c1aa277472a2b83e282529c7ebeeaca8431b55fa07c77cf8d1f654c61
- MD5 788e0f1cb28ba1954feec079293dcc73
- SHA1 5af23d1a1ec7342e5a8eafc15330e2ffdea557ed
- SHA512 b9f270350e06101e65124b9f106226c7390907af70c9818ea6ac9f6e1cace630c8fbdfe24f6e580acb2c391808e0900a91ba7db6ea862cb87d0583c7641a01cf
- SSDEEP 49152:q8G7Q2mH52DNNNNNNodAuw7kqdTecWYnCJ:p2NNNNNNodSoyTz
- TLSH
  T1DA669241B5E217A5FA9D803A817B2E3EB0AFF048C6502667667D8D17F3447EB07B4392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  NlsLexicons0009.dll
- Size 2.5MB
- SHA256 70795969439fccf5b6ab4e887b0758eea4dd6cdf35b3947993c18c10beed6e85
- MD5 0d90a16d94f32f6f0d8d205d37202f8b
- SHA1 fdefeddba5b303de158255564db01fe1090aac41
- SHA512 c7e9178496f396375b3b2d0d5f75316fa279d8f14490580d4edf5794a2dfaf917545ade09fb95b7822a1aabb726b53943c997fe893af03d79dbbaac242d1e11f
- SSDEEP 24576:s9omWG4w/tG/9IwBCHat/WFmvsyGqD2ONizqFpASfhR2ltPH8rWTkE+:YzWG4kG/k61WtydNrfAm6s
- TLSH
  T136C5BED3FD0B2E5CEA6F5B3512B19524A3BEA0AC6BF5DB43B0C141377A43B405E126A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Nlsdl.dll
- Size 36KB
- SHA256 50d42b7f0e17b2f583595b7183a503359e72bf845c0113440d992d55b1f4ed1b
- MD5 b4229a6544dc0be8d2398d3ac0847e36
- SHA1 f42856876968febbe199711b883118f29db7c4fe
- SHA512 37fcae75bee076231f6b8979f89ed4af1974e0ae0892ad23d3c198c582ef4759fe2adf9040c7c04cc5deaeafe7ac59a2ccc547326cae2bf8e3f507389d317a52
- SSDEEP 384:n06R2Imlg2mREAd+sVa6q+JYq0zrgRWWwW:BR2IHRxB46BJYq0/S
- TLSH
  T104F2F899BF5928FAF871C639C5A35A0DA17DF522472247DF03E201AD4C22FD46934F91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  NmaDirect.dll
- Size 224KB
- SHA256 58cf7c93539a3ba98e963629f066682a64236922aafeef436503ffb58320427e
- MD5 257a63208af346f92d8ef00e2938389a
- SHA1 ced17e08fbd0a48d32a07e04283e64ee9b858f0f
- SHA512 0b06b239719e67e0bedce18bf2c06666f488292b8ca76157fa8cf782fbd9fbbfd4bdee7143a16d43428f68068a1e3da55a9b79322865d93a942330dc1635eadf
- SSDEEP 3072:4ZlzFgHbGkqharyPfxOlzfgbmtNjvZfzhzU15eFWFQ1HJmIKFc1i:45gSkqharyPElTjtSxF4HUf
- TLSH
  T107241B6F379D00A3E576A23DC5834909F272F462471397CF0AA5427E8E1BBEC6939B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  NotificationController.dll
- Size 1.3MB
- SHA256 40528ab4618ec3a3cc75a785cdd9d5aeb98935db6f0716c3b55af09a1f82dfb3
- MD5 b50974850be5db69dcaa04a05a7afc66
- SHA1 2063f4755be24cefc3c61017428dcbac071f3479
- SHA512 e3e637a890da712065c554c59686f2d3881e8e348a73b11bfce45e2854f7838534a882b0021cc171f70bbaafdeff3c8058f97906676d0f2d94de43e1496cc127
- SSDEEP 24576:peBANpvODDSyvbK3LMq98y7V/F+SDXPLXSmF6Tmw5:peBATvOPXvbK75zSk6ac
- TLSH
  T11B557F2E56AC01D5E5BAD1BDC247891BF6B378160331AACB0158467D1F2FFE4963EB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  NotificationControllerPS.dll
- Size 404KB
- SHA256 7ac76a088eca357773f9202c1fd729168f3d4149a536f0eb815164eb12fb5f44
- MD5 6bfb5a6eddeaa14571b8ea4e88c7497f
- SHA1 889ee44b31cb5d90d55c9495f5a998ed491d5fbd
- SHA512 8b0ccf2029440e414f10845fcfdd8c01a39a2df7f609d0c2c9062a22c9f057ef5a34ad1af6092e59bddaca0716e83e7d4f4dadb263a42b710491d7657c34f3bd
- SSDEEP 6144:DusUstPYaNSKmAJTLUkCEd2Gonwryq6lLZ3kqIyMefF/j71K:isUSQaNSFITpFKwrF8LkZ0f1
- TLSH
  T1A1944C6DEAE800B5D1BAD17CC5A34A0AF2B23C5953725ACF0650425E1F77FE8993E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral24
- Target
  NotificationIntelligencePlatform.dll
- Size 216KB
- SHA256 14a9d9faafb2f3ecd3110590b2cd1995b3e5036d100a3cb1b2dfa7e0ac1b0742
- MD5 4c0ba28fd299ab6d7f8668de7a3b1208
- SHA1 f592cfd0735fa1148fe6af0941b182abfefe8390
- SHA512 67bdb2fd7e4cafd42984cf6b60594f024159dd297b80155c4ba68d4e3d2b90bd7acd94b6db010b2c5e2376ab54ce3d40623af8e31158739ff48fd5729f54d126
- SSDEEP 6144:cGdRk7Gvy+ma/dL82fTD0LhxAaFcSF7kfLVyB:cGk7Gvy+ma/TA1xAGHF7SS
- TLSH
  T1DB24295E66A801B6E1B7D13DDAD38A0BF2B27455432252CF02D103BE0E67FEC653A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  NtlmShared.dll
- Size 110KB
- SHA256 d4d6a38127f6989db063547c7a16fee98647cb8dce623237c5a32b64dfc33dbd
- MD5 08920df65e993fb8d138ad5188006ef2
- SHA1 4c7e6fb92645e7a1e6d0c3594848beaefbafd7e7
- SHA512 77fed85a9d40a3501178f21e86b598b1231cf7ff9d5875d5cc5f26471081c0822862346ccbe1961a3626bb3212acfe3d3f3b382d10d428045afd44beaeb4d206
- SSDEEP 1536:SL6BNEUMMePhm16Uc860hdrlpInaIAWPxKmKzqfKIDl+KAHN28MaaP0zSA:SLENEeeWJbrm3AWP1x2N23aac+A
- TLSH
  T148B35C6E72B83096E566913CC5628619EBB0B039671167FF03E0C1BC9F23BD46E39B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  NvAgent.dll
- Size 69KB
- SHA256 15d36b98b066ad6842e59dd8feeb1747331732eb8b57e84dbcaa77d2d30c911e
- MD5 41d2b58e01419c6bebfc4208fd1f6fef
- SHA1 bee7bf610da3f02d4ef1d536cc7138211f6f8a8a
- SHA512 b11af1f930cdc59f4a5500704dd29957dacd556d2e89c3e6bc7f167e49c11e1578b4c25ec4c3a3ea8cb3d2f441ab5d9ebc7a4ce5e94f9dd8a12b5a86917917d7
- SSDEEP 1536:ql2FEoBBANJBn/DhXO0lrjkrh1I0qJf5+Poz9S:qlzobAnxLs0TJJB+w0
- TLSH
  T15D638E9DA6A410D5E475513CC5938A1DE4B0B1A0A31217FF03A0D1BD1FA3BE4BA3DF99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  OEMDefaultAssociations.dll
- Size 40KB
- SHA256 c10402250505adbf5976f197201053d43a22c511ed953a46c5602ef682b55137
- MD5 546ec5bc7b023226d7d5fe9b02189a02
- SHA1 58786a373d59fac9b2d4eb16494301634e4a9b52
- SHA512 6c7251027dca264c1abb1541ecfb461002f76e9494931d0e422957a61a19323ff7a828b48167da2b15b43379f0b53e7f7168c3b6ee789e0ad114156cadde1df5
- SSDEEP 192:RRWtMcIYWqX6bg4HuXyvLIvrlBrFEgow+1:7WnXWqX6kXyvcvrDFEgo
- TLSH
  T18803BDD18BD108D3E36799B62A03D89C13FBC07ECA986F54B112623EF515B3D47A7829
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  OmaDmAgent.dll
- Size 192KB
- SHA256 e7ce7513271dd46d7c3a7a09cebc051008e1e875be27eeaa7814ac7538a36ebd
- MD5 9d22a726d9382cd192717cb68d84d027
- SHA1 64309953b2d0b1bf362a7ec0aa88da38f68696da
- SHA512 446d78ebab1ee7e115fabea6e9807a676c4e812e17510ad16888dc29fb7f623c0cf198b5ab859fa02b147cb6af39a4b6865fa839ca096059d592f239cbc8ba16
- SSDEEP 3072:TTdLNhoB/5PTT0+Vci2n0BsW8oGUivwgIy8JWcBAJmkDqDcuT:TTdLNhoRpg+ii2n0B0oGJ8hNDx
- TLSH
  T113144B2EA2AD11B5D1B6D27CC6C30666FA733419172256EF02F0C1392F17BE8A939F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  OnDemandBrokerClient.dll
- Size 72KB
- SHA256 eb11a7fcf9cf6f32d8b840f66bb9e832c525d75b6200c52d08b6cdd0f34e843e
- MD5 4b974a73fdfb6432a26f751f35164fad
- SHA1 d5155b4e8395f5b68833d8f14a2441753445e392
- SHA512 1b1bf7b9db165b6eb4b3129c80f0e2876908956fd64533b08c7665d57aa8ae888a9bf222cfe01ae59c62b74f771709a88e10d787009404e08f3703655ab502d6
- SSDEEP 768:fOMTHvsBbouEKpbUDQwvJxlZSlz8olPMWVQkBc5YmN:mMTHvst9rpbkLvJxilxBVQkBc5YmN
- TLSH
  T1FE73075EB7A820D4E47AA17CC1530E2AE672FC2453111AEF43A0837D5F677D19A38F91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  OnDemandConnRouteHelper.dll
- Size 96KB
- SHA256 fa6f0a14231217b3600ef176be5f0d35f99a5dcd8d359bc0f0d863bb2b2c1fef
- MD5 dfdc0df6408aafd76082d96a53897435
- SHA1 e53a39db0bec1e0444623082bc072726b3cc795b
- SHA512 487bb16a281c0fd590bc41a2463b945c65f19d8a9b069b5edb7483c2a59a666cb38a1ce7b2ecd1e4d7111710207bfbed9e9d3410f8fdd724d7f284ff5838d278
- SSDEEP 1536:4syyPHGRD/1AIhl1c+2/Y+vSNd6i9UnyeipTbpM/ZIfjfwiwYM3Frt7gcc:9PmZtTfRvddeGbpMm7fwiwYM3Vtcp
- TLSH
  T180A32B6EABA810E5E479E17EC5930A19E7B1F425531307EF0760826D1F23BE41F39BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  networkexplorer.dll
- Size 108KB
- SHA256 bc3fbf9b40771941742be85df32cc7699c4549af9831c602230cbd8273140313
- MD5 1a882b9cf7cd9dfcbd7f58e8438ce45c
- SHA1 8f02b021b274bae372118c7823b313169eb94ea4
- SHA512 1d49d09f174e9b5e246a77b42ef9bacfc5095c84ff194ded9ec9887c4f885391dac779d6844479fac916ac3274a4c385f62a61cee1f77bb144d851620f195928
- SSDEEP 1536:c1kLxNLXWSnbqUIQbfsoIRhpPbCXGhabkuDhRStye+PZyGA+jl1YFGOjXA:3LTzN2FIkkhstye+4GA+p1YFrjw
- TLSH
  T1CAB32A6D66E820D9E675A27CC5420A1AE371B420231257FF0BE0C2BE4F67BD46D3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32