75caab85154c97165c28387ad6899a0f82e61351a74095e699926344468b8d69

Sharing

Copy URL Twitter E-mail

General

Target
75caab85154c97165c28387ad6899a0f82e61351a74095e699926344468b8d69.bin
Size 18.0MB
Sample260812-a55pnswbkd
SHA256 75caab85154c97165c28387ad6899a0f82e61351a74095e699926344468b8d69
MD5 400e4b330f3387316b02dd22f7e35909
SHA1 fc8ee17f94995c08b53274e0a4e495334f2dbba6
SHA512 74ca9e58a1169390832b7ae9ba170a7ef7ef71a0b1327e59ac7dc0874c6e18a63f0271cfacdb55c72385ab040b21702c20bb289ceb1f298358bd60fa7a3d6b25
SSDEEP 393216:T8LzCNW1akeQKDERyXQZS5GSJe4JflNhcB+eurQdTgtaDBKFBT6x2v:T8nKWgk7mEU35GShJfeEeuEdWUByBT6E
TLSH
T121173392E0CD871DEC5FBEB9B21885BE212FE8C7614CBC0B0D0AE755EE02415677999C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  DMAlertListener.ProxyStub.dll
- Size 28KB
- SHA256 e84b726be1d9713e59197e76d77e0294ad13784fc1fc786ab606524d3300adb7
- MD5 7adb8d6fb6433c13ad2fdcdfec3a067b
- SHA1 62c3fe39f1ae1c816aa89f0560bcfd7f83c29fea
- SHA512 e34ad0967699786eb135af7b14cf271e71504870a062aa7a6773a6037d14ee7fd177502d4cd552ddb4989116c45dbf60dde5c12ad0f820e1553ef9fe3063c6f9
- SSDEEP 192:s+HBJWvgZgDjLqA16CpxWG8cEpnQWXyW:s+HLWvg6jH6us/QWXyW
- TLSH
  T18FD29505976184A5FAF547B818770F95623AFE1097A0A7EF146CA00E1DB6BE09F30B88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1
- Target
  DMAppsRes.dll
- Size 12KB
- SHA256 f74bad884ce9c6f2c20435537d64df80d0819a0e88053e015debcd170cb81f50
- MD5 000565845cb346d9d814188c76d24430
- SHA1 7c14018e779a411c11ef8fe30cc625d5a42ed62f
- SHA512 a05667587a4996a6057f32d887ab21ce74d7ffedaa95d3107273f7f4006671a40dd18ad7c551ce17c69673f7d1bb27dde1d6fec7df2a807da2b0c6d529426b67
- SSDEEP 24:e9GS9PU2+oaYV4uC8DMvALIZW0pm2cNFZtEynA35WWdPfPNBjTs:K982+oa241GdIZWKmrFjnnu5Ww1xs
- TLSH
  T18542B903A3FC0665F8FE4BB095FB0B2B513DBD24AA7297291AD0015D2C75A20E870F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  DMPushRouterCore.dll
- Size 368KB
- SHA256 dc4ec3e05d34ce819d6e681f9de957452aabd896a732a8251d98a5354c33b970
- MD5 3df1689994b44aa15be898b1fc898707
- SHA1 f79d364bc6f0ac6b82db354aaea3b1b54f86217b
- SHA512 35cce8a7fb8df88ddd6fc2eea838964f6657d783d5495756d3483778bcb3f956626a5bad3e4fefe607312c93f60ec9cc530ed8c47002d784a28857a770f37fe8
- SSDEEP 6144:BSMS48BMhc8TrqZ7S3grttNEaxtjzWIfqQXpHi/:BSMS4CMhc8TY7bTxZC
- TLSH
  T13084391E97F800E4E1B6E23899674505FA727462173286DF12A4C07D2F67FE4AE78F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  DMRCDecoder.dll
- Size 3.4MB
- SHA256 401a67a6805829491c0d9a64922f8f2d03b357a68f46e5cecbd24d586a6b399c
- MD5 255c8331aa5134f6ae7876ef1696b848
- SHA1 6fbdf693b56c2ea182daedc69339bcc098a5c50b
- SHA512 516bf89da4a2791bc4b541fc853651ff9fb647290b781b655886e182453141a01549522770ef81aecd612abc9b46b7d3966dfa5056d7abff8faa9918e95ef746
- SSDEEP 49152:1n0Roz1K26gmNdrt83+J6Lhosrx0gRJep2JeVEoZhiZUQ9EuAxgFlk1AtLj:VKdJ8IsWo3EEoZRQGuAxg/X
- TLSH
  T1CCF5CE57729885A7E263D178C5975A1AE6B27C0B1314E3CB13E1FBA92F237E0167E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  DMRServer.dll
- Size 562KB
- SHA256 6087d4a0b5a05cc95f2cc6c448cc334a9a307e29ea95f86d800aa5e978ab1ae4
- MD5 6aadddac0fb9bb679c73c8b9e4ddaa4c
- SHA1 dca4429b0d4db739681bcd4a0a4abef62343bf9a
- SHA512 0ec244ee6a195ee44750f71bcf8b19c66aa93005480723d243fdf1532005734dd691cd85478e557df1b5ee46d1344c471811a24d3147de1c93fb8584fccf411e
- SSDEEP 6144:8rnfwvqQPxNNZIgLLbaeGrYBeLVZLOqCZQ8/u8B8aTq/ED0a/PCiUnsJApY:ynfwyQZl/KQOVZLOqCZQ8G/inSuAm
- TLSH
  T141C43A2E6BF803A2D6A9913C85534609DB7174246B2286CF326C437DCF2BFD45D3AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  DevPropMgr.dll
- Size 196KB
- SHA256 f68d3fba791c4732968dec7641df408183000def7d67d92cd926b7a68e793a0c
- MD5 621af54058f45309192d7f2dc6c23074
- SHA1 bea691dbc68b3265bcb3a4b888370cf769d2610c
- SHA512 154f7941e18c3ad644335220e06106cfb341649ae823f244e86f76a9895e31db67c9b8e5c457cff95503dff0d712d8d4fc6c88e73f5e149102d58cb785ac521c
- SSDEEP 3072:DZ/66zmrfyZa7rCYbiHTMWTlpCVXHogOlF107rSR/cC/:9/KryZaiYWTHlpSGkrSR/9
- TLSH
  T1A4144B2E23F811A5E577917CCA57474AE6F27425231292CF03A0C2BE6F2BFE46639711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  DevQueryBroker.dll
- Size 88KB
- SHA256 d3c2f4881faf96e8a773839929c551e68784c195f8a17f159a81f98b44aa0e86
- MD5 5a75f6ce42263b260292f5828934fc3b
- SHA1 bd90502005aa0b8eee4de9bcb4e9397668c4b294
- SHA512 4d3850124f210f0c5b2301bc6f165386a7f75d2382dbd3737ef9828ad75ba0a50327fb4bf674bc819b8e10ffd9615f3d2720929eeb096d8d325884385b0e22a1
- SSDEEP 1536:uh1hOWJIVsq8dGby8mwhn9qesVLT/N9Was4J8NW7:q1hRJIVVaGbt7Bsx7Wkj
- TLSH
  T15993F61EB26820A9E46A8179C46B0E05E3B1F025271127FF03E4C1BDAF67BD56D39F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  DeviceCenter.dll
- Size 260KB
- SHA256 46fb75fe6f2f3953acded2e7995a36ca1c4038519287c0dcda642d0f023316f1
- MD5 a730153b686991b0f08958d281602f89
- SHA1 603952e392e18b38c1b308f5cdc29eef27acbae3
- SHA512 04879357a488e2b2a529a5cb63e474d16d4356afe0ccee87018b3b1528131522873100a33b7bb4c5b1137100f9793bf75e8a9b50c27ec783e4a969d89b0cf213
- SSDEEP 6144:142yOevHWdKlRiOkRDIjT8YscOUNWGDYkPqB:SFvqKlRFkdIn88b
- TLSH
  T11C44181E23E80996FA76927C85538609E7B278316711D6CF02B081BD9F2BFE45E38F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  DeviceCompanionAppInstall.dll
- Size 108KB
- SHA256 272c4871e8ee37d7b95819c89ad723196748eda66d337fc09b37cb827c039737
- MD5 da5cbc17aa82959d554970d18c560b84
- SHA1 799c680c9b58a43154c2e71cdb46bb73f6c0af53
- SHA512 1d07f6f56e58729ee23cc765bca0a7fc9738ed64be8094f12881e8a129f03681d5fe4c4c0141c101cdf22ba687bd9288c7ca617aaca229228c37b3afc1f45f69
- SSDEEP 1536:NWeNR+g04PIsIOSXhOnN2Igj546tuPWpoA6bCxR444VtL:NWeNR7DIsIOgUN2ChupoA62xRf4Vt
- TLSH
  T1ADB3E72A76FC1296F57296B889B74A19D772FC26A702D3DF0251406D4E33BD04E38F62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  DeviceCredential.dll
- Size 96KB
- SHA256 aac184b6f55b418afea5a4797df3c318352c60e85e2647351595fa7db7b5b940
- MD5 880647709168c26d563492115a92ca9d
- SHA1 747e1c074d7df7740d0a9c703ac380db70387fae
- SHA512 bd021682fb7fdbad479d152eee3148179142e8fa06e8079e97573e910a530d688e7d1d73c40d46990106051001b675cf29f3f4571376538a9c23b32865a98795
- SSDEEP 1536:M075VSxU22wh+Qqgocomv96ciM1Ea+UkkgLup:MA7SxIcoqiM1mUkkg6p
- TLSH
  T1CFA3282A72B510FDE0BAC03D85E34A1AE770B450479167DF029142B9AFA3BE16D3DA91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  DeviceDirectoryClient.dll
- Size 320KB
- SHA256 a07e3083679680c02a80d43524bdfe5714a90c77d2a2ca3afb821084df71e479
- MD5 d48a8766f827f57003aa315beb1a535a
- SHA1 3ede5233b22e1caac111a9de8984d736065a7837
- SHA512 b75175d6367e10c8d3cb5fcb96e0d4acf25fd29e3415cb2b9dc5612f7e28abb007f6bfa0a22c3dda7c027ad9535552414c9098e68ede3825454a45ec7ea7f810
- SSDEEP 6144:vjA+xqvLEykYxbhbvbmzmTl3dDV6gqpVbHAy3SY:7AqqvLEykYzbmwl3dUHpVj5S
- TLSH
  T12764192857E810E0F5FB937CE8B24019F5B1BC5163359ADF0654082E1E33EED993A76A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  DeviceDisplayStatusManager.dll
- Size 60KB
- SHA256 5a754de68f19283534e8e0cc0e2416c6169e28347e1da86a1f1848979256abae
- MD5 11895563ba5978b22ae5e20e42acd212
- SHA1 1dca54f51b50e30101a003fcd69de56810050abc
- SHA512 67d2ef313c8afe78d867c4717d13ecea53fd9f0ff21fb0804cf140330be58e3e35571906b812048bd2779d9f281f864614f2216eb1b9c6961d45185fe1e2fef2
- SSDEEP 768:nYEpmT/khDbzPjdFq6jzsD2NlGOZvTK4OnPaVhTxxRY+YQxg:Q/cjnPwclTLJAPaVhTxxRY+y
- TLSH
  T11C53284E27A410E8E6AA127C856B4A0ED671F420134256FF07B0827E5F77FE1ED3AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  DeviceDriverRetrievalClient.dll
- Size 136KB
- SHA256 6af42e84f83c1b76c4c0d0b68da1b276b6b552bc81367e8f3b1318d9bc7853bc
- MD5 5b64d60898bb9849362857ffd59811bb
- SHA1 8b5e26046f6809d23548fb2d7624db2909438578
- SHA512 87703558e322be8090db475e73bfd136b9ba4d034c5c2a429ed0d63a6dbfaa57d45466df3ccc806829a98590ec28edd46de035eeaba5fcfc40d4fb6097697adb
- SSDEEP 1536:J2V1/k+NgASigY0Iwj8WVhH0BjPC+3KzBJTvsl6ws+Tc8o76JPYk1JCpN6RjCuzw:22BigYcjxijCGMkPYSJUoRjCuyj
- TLSH
  T146D3182E76A920B5E676D13C88524A19E371B02613125BEF03E0C17E5F27FE86D39F64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  DeviceElementSource.dll
- Size 184KB
- SHA256 da205b2ea8a389f98900aa96f1da92f1e59cdba598fd70ad84d004ee9ae0b37a
- MD5 03425c48a9dcdc6d982679fd1cf0b65a
- SHA1 2b7e4701b19e806916c5f65e543481ca1976b93a
- SHA512 026126a359a0b30c5fbe19af02a6b4ff837d79e51233d2724a769888ed751899c4b5adf06d0e5db8e63a1122ebd0c0f50d36e35d2d15cdf101d75feb4dfbe10a
- SSDEEP 3072:wZyZ0Yzb7XrKZY1AYuL9YLUHOQzeg7mo+bFx:0yZ0Y/7rKY1AYuL9YWzegCnv
- TLSH
  T1D6044B1D32BA10A5D56AD13C95174A59F3B2B022831263DF11E4C3BE9F53BE87D39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  DeviceFlows.DataModel.dll
- Size 2.5MB
- SHA256 a87f4707eb23b36ecbe1d4f9a4b612117463a19e176bc31cc351c3b7cbd579bc
- MD5 96d62e144e88051c8e6dd3e530c2544b
- SHA1 754535d0dd778e2582064928ec698d8aca62859b
- SHA512 1eec0871be69e888a246cfc3896b994c3502aaa3c4c782711209a3dfdb5f1d819f14cbdf19bc3fff57e7abe6b5b956a968c48cf0ff5237078ddc8dbdeebd2fb6
- SSDEEP 24576:AZ2QJoDH3DCYoGlBWgFmCSICwbOwetAconF1ubUYNdlrjepRwgR3JqKx3n8QSsVI:AsRW3oBW0CwLtYNdhapal3YMIa3F
- TLSH
  T1CAC5286A19AD00C2DB79B1B98D1B8A09EAB13451071097CF4674465FAF7FFF8987E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  DeviceMetadataRetrievalClient.dll
- Size 148KB
- SHA256 acb9c58c7bbf19963160aa23ff7835bdba0ed13ad8a9c3b4ae8d10bb997bf8ee
- MD5 9ba1a6e88491af581f69cb48e690c507
- SHA1 8422ce7d47102eb6be5e7179a6ad4c76a93f2684
- SHA512 375559bfc0fcdd2853f8cf619c885b0bd8a04e868be211849bfb97ad34c721eb5cc522c301e8ba7603920ab56f07435b46e9452c03f6d631ebc3b750a6551062
- SSDEEP 1536:R6QxFwNI9Jgq5zc0uK9/OGPqyyR7DWUyZ1GNiamYmOoE9gEpgS0db1jVTc+OB8Da:RtfwNlq5zcJqgOU61bsoE9gv1jVTTC
- TLSH
  T168E3F71E72EE206AD562A2B485930215CB72B03A271353EF12E0C57D5F17BE9BE79F10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  DevicePairing.dll
- Size 332KB
- SHA256 95a392322e1031e3e35f896d371b700bf489d8b8fd90c0a55d6f7caca330e8a1
- MD5 2b41edf3c0e4d4af6e1820616b9c5d44
- SHA1 ea59b646c3dd0e7e2c81757b4fe7c4db2e108db8
- SHA512 899634c7452cc5c3f4cf9c8508ac97490bac1ffbbea35165236c4b14c22fa0577d1501d86e8130712f6dc1c59f6be3b689cec17e696f8e726b352df2eac46630
- SSDEEP 6144:O5Bu9JSmKlif+W/nOMaE6XNF07o+354UNAMCXPvNaj1DgRgTv+:O5Bu9JmVMaE6XNF0554qAMO+U0
- TLSH
  T136743A6EF3A51CA2E46AC13C85434B09E772B0249B2693CB16E4437D7F63BD06D39B94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  DevicePairingExperienceMEM.dll
- Size 180KB
- SHA256 ed871a64df14952147f9d2e49be87604ee9a6d34cf6ffebb67be94f113c17d68
- MD5 ce13f00ebb6a4ce28e99b1a3c49f641f
- SHA1 5b7dd7e96fc21598ee44dc1cd96b4365e0898d41
- SHA512 2cfc68fc2c96e63fb696e0d0518be506df69dfc2bdda13c34e55f6762a8812a4cb04d988076bccb7cd67fc41199d994e4b348c283fd5df7449a0908b3abd4de6
- SSDEEP 3072:9lXy2aUV7MUAsyIGlle43w+3RtKojT64riMVJ/oV0CJp5v2v/KMb:9VbV7TAsyvEeU4em/lCJK3KM
- TLSH
  T101043B2E26ED00A1E577A17CD9634F19E2B2B425571253DF02A0C17D4F67FE8AC39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  DevicePairingFolder.dll
- Size 140KB
- SHA256 5d0ec57f148471588a0e3204392c1ebac1ddb7b8aad5d0a687af8d47c5628066
- MD5 7f2eb70d49e24d3d905e0470e2a05461
- SHA1 ebd9f24da3239f61f1a8e6ca4327f98c5975c463
- SHA512 b44cd2ac2458c7fb4beacdda71fd429b66c472bac304b437c687fecc40f2af09b51156fbb654b193ec4d4426f14bcaf1c15c12a1648f6483677f80aa6430d98c
- SSDEEP 1536:1X0m0E7DW2egWIhnNCXZZ20Y3ZWY4ANyyeSloDgKdT9kxpD2vw8ZJOuI66Dcb+T:1rDWw2XZP+eJDgmxK2IuJ3I66IU
- TLSH
  T193E33B2E72F810E6E176913C81564A4AE7B2B025231257EF03E0C1BD6F67BD4BD39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  DevicePairingProxy.dll
- Size 48KB
- SHA256 71fb7e65e45dfc871444f3127efb36fe3deed5ff212660d1f89a501eb64a74b7
- MD5 faaf9ca04fa8054a4f9c8c56a52377fa
- SHA1 42162e159a33995215d05af99870adf868187379
- SHA512 9f9b55af560bb6ff191b4d4a25e11ea5a24a31b8e6677f2c158b046e20b10fa8dec4f7293952138ac6dcc6d436ac6084d92c4fd226c10963818a9d2fde8c793e
- SSDEEP 384:dXEYJ1M0VUCGIOWWZ3Wtfqz2fFTD5tVFhO:daz1RbO9tc
- TLSH
  T19A239586B742899BC81A12328C574B8976B2FD011F23A7E33794778E5CB77C4AB34784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral21
- Target
  DeviceReactivation.dll
- Size 137KB
- SHA256 ed63eae034b49f9e995f21d7a142cdc7c1287b21f735451b6b09e73db9ab8676
- MD5 2be2f8d08ebe2fead7c5de1bcb7aa9d1
- SHA1 d5fecf0bf9b0e635f99ed40dcf61d780cd4d7b69
- SHA512 049030c3dfcf70e7abff72748fbd62d1264a46274983eb93711e04d815072cc4687de2c873630ea254b48b366312cf72c53339691ed5c9a4ad8b8e2869004d42
- SSDEEP 3072:sq/wPwTciKrVGo6tstI9ND+uSJ+SMLxi4IUL0TY:H/wPw4DrVGouDU+i4IUl
- TLSH
  T1A4D34A6E76BC1096E576907C85534F0AE7B1B461130267EF0390C0BD4FA7BE8AE39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  DeviceSetupManager.dll
- Size 440KB
- SHA256 6ba7992338b2f9b0848356e769571b5b020d1bd48413ae4039e436949f0d5fcf
- MD5 d240c10253b245a94a7a3edebbea597b
- SHA1 85c40788b920dca93458624085b5543c86f61333
- SHA512 899edf2faabf83d0b8d96dfe33a55f49f13d7bc5fb446de726649e804de641413319117acd10621ee8fb7a535bdc982acb17e0e71fa518d21280dbc6b874874e
- SSDEEP 12288:QUF5s7TFJn23IzJiYgAsj8fWUssMdOeiflM3b:oJnpJ1gX8fW
- TLSH
  T17DA44A2EFBEC00A5F07B827C89A24605E6727879571296CF11B482785F37FE45E39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  DeviceSetupManagerAPI.dll
- Size 112KB
- SHA256 afbb58a2ed8cc5708bed9d22bd4204c0a03236b80996dd61f96924183a80feb5
- MD5 9e60433f265c88dc556c0c5ff6cd57f8
- SHA1 14ce48cfc7e835af54cc46b22d21fe5e2e10a51c
- SHA512 596eb7aeb28f86aa1078bccf35df7125cfe8242670f7c77462eabc3d4a9c680cee25955b2ad0a338b0518a7318ebc3261d74307e039fcf4d3bdce1499f6c8644
- SSDEEP 3072:sG+s9tVnzdIJ7clezYbuMZhlMOQGWU9O:sf+tlzd87ZzYNXKOVW
- TLSH
  T1B8B33B6F76A820EAE579817D84970A18E3B1F425131257EF02E081BD5F27BD46E3EF90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  DeviceSetupStatusProvider.dll
- Size 88KB
- SHA256 61e54cb21cb743dc90e4b2f1fc873af2ea9523632950be1571cc2e76a3d1c0bd
- MD5 833c41f01b27cb8e526c4ae7856a7f81
- SHA1 59727cc66ec7f1260d7ae5b72b6c1f4b87646558
- SHA512 e7032ef18dd07fa006ac0f2720f894613ca0878b05ebb21513a0a45be4553c05ed6ca6f4d79f1742d4ef4fe13f34941d04bd4e88b635acee3610832e8e0f5ff9
- SSDEEP 1536:ARLFhILz8LN8L+mZ/LBq3nUo4DLKhcI8sOjv89x:qhBN8LVFq32LKhcfT4
- TLSH
  T1DF932A5D62B820EAE576807DC9560909E7B1B021235263FF03E4C1BE6F27BE46E39F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  DeviceSoftwareInstallationClient.dll
- Size 216KB
- SHA256 d1a685c8c348c32fd4b0d35127f0e5bb4afb5369ddac35d9751d87633564216f
- MD5 42d305fbc676e3725e1b948105967aaa
- SHA1 33ed0ada132dbb213acf0c3dfd679208f5de8eb3
- SHA512 674dd7d4d30abe7534f19b40e06fd23f7f1a4b7574454c08cc33b8a867295b561ac42223d78f95257a58f95fd2cdeb82974b9bce8509fa7a3e836bc7ef5eccc9
- SSDEEP 6144:TdwvkWGp1b7VWPozKq6+1rRYZ9IWP4x/:TdwvkWikwz35qMx
- TLSH
  T1E8244A1E23D921D9E077A17CC8434646F7B2B42A232252EF07E1C17C5F27BE86939B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  DeviceUpdateAgent.dll
- Size 192KB
- SHA256 26dc33a9da7ffe73158d6a5828f08b4c33ab8fbfd11c524bc668d24404c26608
- MD5 b6cadc4c9f193c57c6f1f056a9b9050d
- SHA1 c1de15a3750f661a2d0489aa97b7d804c7e8d43e
- SHA512 31817c4ee48fa7391562e740b85989100124aec25551f65ddac24dbb0148919d8292498a8d586dc2f5531a0dec09ddb57444983aa7393fa10b3a46419da8f3bd
- SSDEEP 3072:ZuuCYgmOEMAkE4BDn1NuXNPIJlLaB5cboRx4tj8l38hXECaSn:kuC3mOEBkJDn1NuXNPIrmrcwx4tjo8hp
- TLSH
  T1AB14082D32A910B5F57A8278C5914A15FA72703A272252EF13F0C27C5F66BE4FA39F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  DeviceUxRes.dll
- Size 36KB
- SHA256 e24fed5f29ea417590e200fcde320a5d51c4857cc78d4be319d3baffda524ecc
- MD5 84da19710cc1f9d33f6432f03a867baa
- SHA1 ca055229e44669b75b33535bf67a605d37109f4b
- SHA512 6054a679d961036939f0e2e156a3f3960dc459096f8e06389a1f0fa51300b6901c4bbaded8613a9df0c21f43b36902ebcdcd28c0115b730f068fbce6a73c4030
- SSDEEP 192:DGGWFaUT1BWBoWSaWjODCr+s94MIL69LYxD05M5:DGGWwATWBoWSrdfKLL69L8
- TLSH
  T135F23E07A7E88E55F0B707B00D7B83146938BA619F55828F3168A22D1E71FC69D3237A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  DevicesFlowBroker.dll
- Size 708KB
- SHA256 ac312d450702173777255345b96a85a3dd2d34f5dcbfc5c7be0bc39493565437
- MD5 31ac33b3f9858ff830d4604da6fd081c
- SHA1 62c011b32b7df5750f7876661b6a21e441eded3f
- SHA512 42940a13c3dbe4b333bd004daab0ac9e95cb050df8d26499a339969facd5674fdf530e35959873b6332f5b6471e6e49679b82ded55b13d898b39ea9f635be4fc
- SSDEEP 6144:B7+FNExCg4tC+MLqc/tGZcbnItYIKE5VHrKGutGcJF2dzBPK9C7ccSlYsjUmnI80:B8Nng46qpYIKEnrKQcX2dzgPIariN
- TLSH
  T166F44C2E2BEC0196E17AD13DC5534A0BF5B37811533296CF029942AD4F6BFE8593EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  DfsShlEx.dll
- Size 100KB
- SHA256 c3abe255453d8df99679eca614897c6b826ed0836e5b54c2b424fc40d3c4a177
- MD5 d02afc3531aa9e07cfe8f142537e1fc5
- SHA1 f22020bec40d3be479aefc342dc22492b3d7b178
- SHA512 fa8d758ddc42670979cd0be34cf62d6fb1c9e67f0b85e536d44f05e518a5bc7e29b29e0062bba152596bdd0dc75b5c5ab39d7a18cb1234c0cfbd17ac1e262b52
- SSDEEP 3072:GXzjiGGZh1YjT0uG8pQdDJ2rPJ6b+A0lceE33w:GjuGGZh1YjT0us8C
- TLSH
  T175A3F55DB2A830AAE166817985670A44D772FC30276227EF12E0F27DAF337D05E38E51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  DiagCpl.dll
- Size 1.0MB
- SHA256 f6d89ffb32b266c19b5c217d8a07f2439654b0357fbab098735919054e29a3d8
- MD5 8b20ba1ab7145e233bdafeb8119e58a1
- SHA1 acf8bfa89e83ec2e34c73d445e816695979247e6
- SHA512 3b9af082c1b18b9e17fd28ff2683e7df6787cbe3ddb41ff484aa39c1731f1a3fc3beec1b56614035aa351f215d181b6ee640a3c3096a3e1ae9be6f6c13ca173b
- SSDEEP 12288:vmxjGFv4UtTmB86XtuGUlif2cDKC0StQpe3B4o7L+rio/:vKjGfv6XtuLupv0StQseio
- TLSH
  T169356C0462964CB4C73B5134E5079F569960BC30CB022AEB56A7B17F2D37FE1A0BEB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  DiagSvc.dll
- Size 244KB
- SHA256 daaf619327ff7865e4073c086026705da4e2052483537086ad247e2921c25ed8
- MD5 ced1f1bb5a6d87945d95523982da0f8c
- SHA1 18241d5e1d31beafac3a4cba0178046a875363eb
- SHA512 fca8d4501a94e24c3c8b49618deeb41965a4746b761ff3f96121bb7bfaf71dd9d2a50f619bbb1260f18d88b3ba58506191d18b8696d46a7636e843db36a7e209
- SSDEEP 6144:QExrBUn9X/+F48Y348xJnmqmfnTjaLJc3VkDeO:lrBUn9X/E4/348TnhU6
- TLSH
  T153343B7D26E91CE2D93AD27CC453890AF9B1B8140365E2DF06A0417E5E6FFE8783DA50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32