e02791282ce156c9c7d1349789c4ffb9950074da4f419a09f452b317f02549ee

Sharing

Copy URL Twitter E-mail

General

Target
Boris.FX.Continuum.2024.Plug-ins.for.OFX.v17.5.1.1404.exe
Size 787.7MB
Sample260812-nkk2escc76
SHA256 e02791282ce156c9c7d1349789c4ffb9950074da4f419a09f452b317f02549ee
MD5 bdb0bbf1995b690127276a03501b9cd8
SHA1 7438eb9a8c235ed75a126d1cc2e6de4fbe42b2fc
SHA512 4ba7df7f71057686862b8d223bf32586cb7faf38bc04cba401393bfc375002040e69d32a045bfd68fe0fa3f7d173e2a568388e82e5a855b2d02b7a962bfba7e8
SSDEEP 12582912:9KEQQXkKbGrrdtzomwIZAeD/4E9dsrcTbwr6WZo609w3C6fOmJVxn4sOKWx546o:9K+UKCrXogKE9C4mo6+hwn4sQxzo
TLSH
T12C893366B845102EC7523BF109F6E5B056313CA1E017BC1686B4780EEE79357EF2B62E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Boris.FX.Continuum.2024.Plug-ins.for.OFX.v17.5.1.1404.exe
- Size 787.7MB
- SHA256 e02791282ce156c9c7d1349789c4ffb9950074da4f419a09f452b317f02549ee
- MD5 bdb0bbf1995b690127276a03501b9cd8
- SHA1 7438eb9a8c235ed75a126d1cc2e6de4fbe42b2fc
- SHA512 4ba7df7f71057686862b8d223bf32586cb7faf38bc04cba401393bfc375002040e69d32a045bfd68fe0fa3f7d173e2a568388e82e5a855b2d02b7a962bfba7e8
- SSDEEP 12582912:9KEQQXkKbGrrdtzomwIZAeD/4E9dsrcTbwr6WZo609w3C6fOmJVxn4sOKWx546o:9K+UKCrXogKE9C4mo6+hwn4sQxzo
- TLSH
  T12C893366B845102EC7523BF109F6E5B056313CA1E017BC1686B4780EEE79357EF2B62E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery installer persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 131aa0df90c08dce2eecee46cce8759e9afff04bf15b7b0002c2a53ae5e92c36
- MD5 549ee11198143574f4d9953198a09fe8
- SHA1 2e89ba5f30e1c1c4ce517f28ec1505294bb6c4c1
- SHA512 0fb4cea4fd320381fe50c52d1c198261f0347d6dcee857917169fcc3e2083ed4933beff708e81d816787195cca050f3f5f9c5ac9cc7f781831b028ef5714bec8
- SSDEEP 48:S46+/sTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mWofjLl:z+uPbO5tCZBVEAWyMEFv2Cm9L
- TLSH
  T1D5C1A370B3D248B9C591413778AB33D36612AE747784504FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsisFile.dll
- Size 5KB
- SHA256 a820a32e5ce89e3e336afc71aa1bf42a357ec542c2bc6e50c6255c1333812587
- MD5 b7d0d765c151d235165823b48554e442
- SHA1 fe530e6c6fd60392d4ce611b21ec9daad3f1bc84
- SHA512 5d801c24dfa1b7326f72f9c0acf3a330ef0cc3fce25ceee200bb12eab8c2b653025602e610e0cecda1e7cbd851ce1b66252531220b557a378ddb0b4a1741fa66
- SSDEEP 48:a+guelvxkcuEkVy5wM4zL5stbmaN0QpUFdAwsj1gAtl/lSFc/H9UhV0n:3CBxIEkVQwzR2300URs5ldSFcv9c
- TLSH
  T191B1D83B69A097F2E0044673177B2EC76CB2A16433C9012F4B531A207E51937EDAEB47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/package.exe
- Size 787.2MB
- SHA256 66c90378c8a2c8554461e958c1dcad567e8ca9f8f678c5e383896152b33bdc05
- MD5 eb661fa28e8b5f529dec0d65b1504dd3
- SHA1 dfb7952d43b381bde4aef385440844d1d59bf40f
- SHA512 9c31ea93893e076413cb26faeea0cf14ab81d6f187a291fdcf6e71dfd8725b3cf91d276ea5df5e2591adc27c318f33f9f19dfcfd45965877403bca0a31c5e3b4
- SSDEEP 12582912:xKEQQXkKbGrrdtzomwIZAeD/4E9dsrcTbwr6WZo609w3C6fOmJVxn4sOKWx546:xK+UKCrXogKE9C4mo6+hwn4sQxz
- TLSH
  T19F89337FDC4A643FC6570E720AB77AC0AA3231817015DC6747B9A84EDF8D2652E6C932
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery installer
behavioral10 behavioral9