65a2f4890a99cd399feb309663558605affefbc8b84b6a5242139242d07c8bdc

Sharing

Copy URL Twitter E-mail

General

Target
65a2f4890a99cd399feb309663558605affefbc8b84b6a5242139242d07c8bdc
Size 11.3MB
Sample260813-dhh4yagd74
SHA256 65a2f4890a99cd399feb309663558605affefbc8b84b6a5242139242d07c8bdc
MD5 2b355cd562772b50a1fd192a1155fa8a
SHA1 641bf26bdc54c787ebdad6efaeb92c506685f8fd
SHA512 285afd53673edfc39e0a56f1ca53ec18b97102eabdcdca40405c06960a319b0ea3cdad1e14aa5206939b497cc62b62aa12f60c5fb0f52d6696859d79ddb9b5c2
SSDEEP 196608:ohw7lK54oSOOAvzQMm1lMy5ItNbqNRwZzm0AQwqq7HSQCRYw+SvkwakD:oh0rO3QMKlWuNIZOqoCRPLc0D
TLSH
T1FAC6338FF15F5A0AD5502D76821154B467BAEE3B203C265A0770FF9672F007AAE3CB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  65a2f4890a99cd399feb309663558605affefbc8b84b6a5242139242d07c8bdc
- Size 11.3MB
- SHA256 65a2f4890a99cd399feb309663558605affefbc8b84b6a5242139242d07c8bdc
- MD5 2b355cd562772b50a1fd192a1155fa8a
- SHA1 641bf26bdc54c787ebdad6efaeb92c506685f8fd
- SHA512 285afd53673edfc39e0a56f1ca53ec18b97102eabdcdca40405c06960a319b0ea3cdad1e14aa5206939b497cc62b62aa12f60c5fb0f52d6696859d79ddb9b5c2
- SSDEEP 196608:ohw7lK54oSOOAvzQMm1lMy5ItNbqNRwZzm0AQwqq7HSQCRYw+SvkwakD:oh0rO3QMKlWuNIZOqoCRPLc0D
- TLSH
  T1FAC6338FF15F5A0AD5502D76821154B467BAEE3B203C265A0770FF9672F007AAE3CB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Qt5Core.dll
- Size 7.8MB
- SHA256 858abb9ddcb3cd4fa15c01d3cd64ff4371a79516b02bc3df20590a82161fba55
- MD5 f38f9d503157c6b2401801f9572fd048
- SHA1 52f999e93532349d0fca73f49e7a4e987b4a5e1f
- SHA512 c31966139cb1d5df66ea5cfde65b09449d5f25d5c4fc146cd44f0e0124e8106eef124fc40e2522aaee571e4685e605ebbcab8305a23d00ab9d7828c70a7f1be3
- SSDEEP 196608:N84evpspTjPCixOJsv6tWKFdu9CUGSFj+p:NNevpIT2TJsv6tWKFdu9C4g
- TLSH
  T158866B83B6D7449DC96BC638C6DBA33375357C428732AE6F5244AB351E22FC02B1A719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Qt5Gui.dll
- Size 9.2MB
- SHA256 8bcf807aaf2419843a778994187fa4a2fe9e2d926435ed8add3e670935b3f9aa
- MD5 fc7d92feb89f055f7f19169e7a1f3621
- SHA1 5a0f1b5fa82f419020fb38010340032971495dcd
- SHA512 e97dbc3afc7875dd753c10804aa1c98abc6462f4a295ef88f9f96292a620d607f8d67fb3172a4eca72664f7c0e928e2709dfff42586f516c4ba3567fa4a334e0
- SSDEEP 98304:4jXCr0pPxu7Ve0VW0I4UZYS437MU1MXUDyfK:Oyr0pv0VW0qYDLMUX
- TLSH
  T1BBA66CD3B5D298CDC927D63886EBE332B5347C954332AE6B52508B352E53FC02B1A719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Qt5Network.dll
- Size 2.6MB
- SHA256 7660849b5647d0cd1c893fd0f977474df7b968bfae17cec79dbc77359f4e01f3
- MD5 94da65cb700658388a9cc3478abee446
- SHA1 d6eb041d57a730ca203a00c925281bc112a99fda
- SHA512 d71046b4a48ee6b085d10131a4bdd77045258685d6d10cff8626e7c5ed1a02218e095dc5e3a63b57868d84ab71b41e1265b7f8cf87fe462c90e8d7ec1248e699
- SSDEEP 49152:duOO43/DCdP/4O5WPkryQ/HiCn3Ihf15PA3/ITe:dtFs/dn+hPI/ge
- TLSH
  T197C51B93B2D658DEC96AC738C5D7D3337538B8918332AFAB46149B351E42F812B6D348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Qt5Svg.dll
- Size 566KB
- SHA256 25ad9cf13bbef3b7f7f99c8effc25aedd20dcf8b2455e4b685ebb27d510f9ecc
- MD5 7b80103c5e287dc427a6e9435ab05f35
- SHA1 272f90165ff6d440e2d4ce21f69eeb44ac8a5c9b
- SHA512 522037c7aa50cbf122d1e11e1b0284afe7b7f77dc6f1fafd89d803816e8ab92a98b8f9a14c2cca45bcc475405f4b6c89ba9da3973572982a903d38fd6bfff2cd
- SSDEEP 6144:L/C5POseyOirW00dvVLZfQGWIbZpqLf+sia1FSafmeVdtH5OMavK1qUWKarhiZ0Y:LKEsUirW0YdLub0c9l
- TLSH
  T16DC4C7E2B2C54CCEEAB6863C85C6D321353E7CD153329F6B86204736AE01ED57DA5782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Qt5WebSockets.dll
- Size 371KB
- SHA256 e74fb6097b6fcde4d93348f47a107190452eb11d87be54089a47447665482ed5
- MD5 b64199d4ad422026a31cc7696f3703cb
- SHA1 d24e1d092a5d0e1a68504c5cedd662aa92751921
- SHA512 c98a61d189ff465bbe0ece23eda25d368c69ad598fb28f54ff648887331ac987e72530934bc59a6a83581571ca912286b78d34b7313ebf6df97051f8d229cddf
- SSDEEP 6144:RcC49I6mSUKXWsZ/Pj/rkke1AnPhT+bUnoFbudiIgj:yuS5NzMj
- TLSH
  T13984B6E272D95CCFF9F18638C4D2D362777C78955B225BA7C2204F360E02BC26EA9245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Qt5Widgets.dll
- Size 8.3MB
- SHA256 f1cdc4e0717d054a654373c52d98b8730d4dfd48eac0e5d9f518d9cede45fcdd
- MD5 f4cf06dedf04a732be32acd1291cf032
- SHA1 8b9f8b822722537cf3043bc0e3a0069c33c1c66b
- SHA512 e0dd90285afafeef96776c268672283604c61502f7ca7d165b054654e6ca960f0e9087f56693fad48d4d18c78b44fe7e5f05988739e789a1712440c3a742dc3a
- SSDEEP 49152:rSMPF2bpm2G9ZoRpLYAELJGZ+9gOfXFipQcwZR4XRDFT8wedoyq+QkniEDXvpTxW:rUpmSkLY+GDyC/qWjxLKg6fW+jVD8
- TLSH
  T162963A83B2C69CDECE6BD7388AD7D32275347C858733AF2F56108B351E42AD02A5A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  XApp.exe
- Size 2.5MB
- SHA256 2bc0690559fa46eca94d94caf8962efc197e22750cca0c34908272ec9cfd84da
- MD5 b1bd7b17440f0d6a8c2c1e6435b0fa26
- SHA1 d452059b559035697607f1a41859c48f50422c32
- SHA512 808fe971bf3147328461042671fa6727529520506614ac530550e31cbe77580090cef5644c887dca3c6744b114da8b4359254ed9475f707c1dbe6ead0ff92089
- SSDEEP 49152:Wkaggv7HQFMGdaVyEalb0kPUlZVWLgL97opB3bnkh2LYPK0xS3oGV8b5CvTX8kiR:WxgCGbE0b03Qhtk
- TLSH
  T1EBC55BD2F2C64CDED559C27D82E6C331713D3CC696316B176050BB391E32AD36A6A32A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  imageformats/qico.dll
- Size 81KB
- SHA256 a721b24ca1fa0187891ec899a8a0e969e4e2c3a7d1d01edc97ceffea9e379026
- MD5 7da403414b84b57eaee35fef9a907152
- SHA1 19dab25959851e5c5876131ae6479e2809ac51eb
- SHA512 2b1037bff4e07e3f91a52140770f755e03f54204d91d0a81ebad472aaae73ad5b20d450de5a9748434a7d1727046bb1a0342608c578377b02854364a3f2ef1fa
- SSDEEP 1536:T9vXN/kS6XMWxZsJDJRIvEAzloT/vqfM+AbeBTUfE:BNqXMWxZtEAzloT/vqfM+AbeBf
- TLSH
  T1FF835FE6B7E89E86EA6582784386C332673CFDE056238B57113C96324F52FC639C5306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  imageformats/qjpeg.dll
- Size 476KB
- SHA256 830442002bb18dc98a97090942cf8dd892d264e6031123c856e2acee8b2d89d7
- MD5 5efa4cbf69cea6e2e5db46492b6fb31a
- SHA1 4c282dffbebcab838e56cd3ab11e71b62ed7e0fd
- SHA512 14686738e281113caec512b30165a18b8dbb982add6bab3447508fe69c666f1072d93febedbd07bde0660143b5489bf3a2ca5900375a7e8f8ccd2c1de3b43926
- SSDEEP 6144:kNnLzZc+4dtRABmfnvJru/rmIjwP3oXg4fzAWYyRH9OirkePfWiZBkM:kNnL9xOnDzN4Zdr4M
- TLSH
  T111A4D597B5A11C8FDBD68138CE96D232673879AD53F38B773128D5F03E12D913A89A04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  libcrypto-1_1-x64.dll
- Size 3.1MB
- SHA256 34d149e53307831e6f1a3eb0c81fa619a232e243255a278f3eaeba6aa21b68ea
- MD5 b7ae9603e042991d8c7ac9e05d18989e
- SHA1 cec5f589651fa21f7037c97e22f8f8d18a699f9d
- SHA512 8249a08a9a110473dee18398de047ed97340c84c993e29ede424fe25dde34fde37d78b9d8772fa3bbab4c745f5cae1b948371f9a11863408e38c51316af5b755
- SSDEEP 98304:ylDHQUIOlt+V+QDfcFTD6nMtlf+ste1CPwDv3uFfJBMv13uFnCPwjZ1/iqX:CbQzIc+9fZe1CPwDv3uFfJBMv13uFnCi
- TLSH
  T170E56D53B19258DDDE6BC234C7A79333B635B8A417B2EFA70A14DA301E12DC02F69B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  libcrypto.dll
- Size 3.1MB
- SHA256 34d149e53307831e6f1a3eb0c81fa619a232e243255a278f3eaeba6aa21b68ea
- MD5 b7ae9603e042991d8c7ac9e05d18989e
- SHA1 cec5f589651fa21f7037c97e22f8f8d18a699f9d
- SHA512 8249a08a9a110473dee18398de047ed97340c84c993e29ede424fe25dde34fde37d78b9d8772fa3bbab4c745f5cae1b948371f9a11863408e38c51316af5b755
- SSDEEP 98304:ylDHQUIOlt+V+QDfcFTD6nMtlf+ste1CPwDv3uFfJBMv13uFnCPwjZ1/iqX:CbQzIc+9fZe1CPwDv3uFfJBMv13uFnCi
- TLSH
  T170E56D53B19258DDDE6BC234C7A79333B635B8A417B2EFA70A14DA301E12DC02F69B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  libgcc_s_seh-1.dll
- Size 74KB
- SHA256 438ae82ffd621a2413199155574cc85681f8986f05420b1485aa4be936c3bc0b
- MD5 534b365361004828059600f05b34006d
- SHA1 d8ff411b0939a021f47c845c6a90f1240bab5268
- SHA512 1ccb3732a82f2fedca85c27afdd48e65dde70d5b1620e436d457624a2cb796887c5e7dc2983a0794ebbbcade3e5b9f9fc9320b390894471993c7b1e85268592d
- SSDEEP 1536:TVhSLCst8rZQk8HzR8+lXbPtccSPOrBT3SIKBx:itu7+lOcCO1TI/
- TLSH
  T109733B62F1E2B0BCD157817086CAEA71AD33FC7812205FA726D4F6352D76A841E4BB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  libssl-1_1-x64.dll
- Size 690KB
- SHA256 f7caf7b44800d2384492d0d98df20d62476b52161191adf17a7f6650495fe9ba
- MD5 a3968a2aadcaa08a87cc61dca1a0ccc9
- SHA1 a8ccd24830a32a9aa91ffd9747f08896e190e7aa
- SHA512 d54f16a9499c48da886cf4ee8d0d94ddab758b27832f2d7dbaca40f76d397e8a5c73159c225b65b291b22263256c6d0ed6b6bdb6fc7a2fe4161b47a606e9db8b
- SSDEEP 12288:yMRstKnmKirfJ5MwkMQo2gg3VYQru1UYaYHKK3958+QUgAx0WoRieWwO6NUhBTFe:ySssmXrfJ5MwkMIDVYQru1UYaiorWwOW
- TLSH
  T1F6E40951B2A65DEDDA72C23CCBA3E332B53DB8641332EF57662085300F10E9537AA6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32