d9bb219b88ab5d0c1b2f339521f216817d3abb90a590072cc500c748b7b047b0

General

Target
Swordstrap.exe
Size 14.3MB
Sample260812-jrrekabc88
SHA256 d9bb219b88ab5d0c1b2f339521f216817d3abb90a590072cc500c748b7b047b0
MD5 bc55cec25c83f9d0b7284ba01d606031
SHA1 dbb688bfd711a4369771713090f318750e56b55c
SHA512 03b6f538225af86ef735c2f6551f4262ccf33668ea7bb4ea0f47e497544766c1bddc7e0b7c1881a600df546e0924469dd1f658d7c5932d8947bb97a0df424d0c
SSDEEP 393216:n0Pd63zXEAphVtnIUQSg+F0caDt9PvF7G0CMEc:0o3zRphDto+icaDtVvF7z
TLSH
T19DE633AEE3A019B5E8F7843C5951C660B7F1B1412FA2D2FF1BA40A251D3F6D04E793A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Swordstrap.exe
- Size 14.3MB
- SHA256 d9bb219b88ab5d0c1b2f339521f216817d3abb90a590072cc500c748b7b047b0
- MD5 bc55cec25c83f9d0b7284ba01d606031
- SHA1 dbb688bfd711a4369771713090f318750e56b55c
- SHA512 03b6f538225af86ef735c2f6551f4262ccf33668ea7bb4ea0f47e497544766c1bddc7e0b7c1881a600df546e0924469dd1f658d7c5932d8947bb97a0df424d0c
- SSDEEP 393216:n0Pd63zXEAphVtnIUQSg+F0caDt9PvF7G0CMEc:0o3zRphDto+icaDtVvF7z
- TLSH
  T19DE633AEE3A019B5E8F7843C5951C660B7F1B1412FA2D2FF1BA40A251D3F6D04E793A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  Swordstrapv3.1.pyc
- Size 183KB
- SHA256 3e5a18509340f743260c634afbbe1b45f7a7187412b68e37a114766790e1f999
- MD5 a298615ea67a8fccd3632b71908051c5
- SHA1 1cefc0f6a09535451baa36679cd0952edeef8540
- SHA512 e3a20a1ba4f5f5a2414ac54d02cc04515a2951ccc60ea4c08bdbd843ff12397c9e145915748645a841a87a94a35763baf66bc7c03feaeb4414e4aae8badc7f07
- SSDEEP 3072:1Lwo0LwKhpA3Lwxv0ipTvlkI4Yzs4FP6xrKNkQ:dehpn0iLYcsrmNkQ
- TLSH
  T1A6048DB1A2A4182FD877F07972D2BA467F748043A116DB05F12C26B86FC5D62D93B9CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4