dc32fcf112d28928b28b01bc60a7e993e3d32bb02280bdde72cfe96a08261d6c

General

Target
DroidCam.Client.7.2.1.exe
Size 3.5MB
Sample260813-tmhlzack4w
SHA256 dc32fcf112d28928b28b01bc60a7e993e3d32bb02280bdde72cfe96a08261d6c
MD5 73d3cfac4b77a68391a98013fb1d4b9c
SHA1 7e6bdb747c5c7dd1756d83f35a59928d7bc8b45d
SHA512 38f3de56857660ab2961fc1254f198906a07da1eacd1ae88988205df956034b19410480406efe512e37664a91062776125331d3fc490bd0c32920a19d6dd27c6
SSDEEP 98304:TBMLXaDC+ZLkXoHe5pj+YLtK+WaZLhjwOPuO3T4Xoou3kC:TqH+ZLsp5pSYLdnhjAO3T46
TLSH
T14206336896437E13D32CB1F526EEDF028FB13841D4E8BEDFA3DC6E524C97511412A6A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  DroidCam.Client.7.2.1.exe
- Size 3.5MB
- SHA256 dc32fcf112d28928b28b01bc60a7e993e3d32bb02280bdde72cfe96a08261d6c
- MD5 73d3cfac4b77a68391a98013fb1d4b9c
- SHA1 7e6bdb747c5c7dd1756d83f35a59928d7bc8b45d
- SHA512 38f3de56857660ab2961fc1254f198906a07da1eacd1ae88988205df956034b19410480406efe512e37664a91062776125331d3fc490bd0c32920a19d6dd27c6
- SSDEEP 98304:TBMLXaDC+ZLkXoHe5pj+YLtK+WaZLhjwOPuO3T4Xoou3kC:TqH+ZLsp5pSYLdnhjAO3T46
- TLSH
  T14206336896437E13D32CB1F526EEDF028FB13841D4E8BEDFA3DC6E524C97511412A6A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution exploit
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Drops file in System32 directory
behavioral1
- Target
  $PLUGINSDIR/NScurl.dll
- Size 7.6MB
- SHA256 efe7d99833a05f3d25cb7b151f156de3b1ee347306d2bc23a920828d3831b06b
- MD5 923540c263c7e649801d996a5abe6151
- SHA1 622133ff6d471a1f1b34ee6c06320e744403f4ce
- SHA512 5ff4c3b28a15fd22f3294a397f638031e0a53efcf96fa7cb46e2397a193e5beab33dfcd627a5dfadfb136903afeb0b40328e41bea07551edaa9e5af2e855f986
- SSDEEP 196608:U1eO+SNs5e4BWrZay5LDTs4bY6Bj5vuMYAKzOZE/XZfZZ21jPB4:WQcFuMU7Sq
- TLSH
  T1D6864A94FFCB44F1E90788B088E7B37F8B34A7158025D6AAEE5C1E56F933701161A35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
- MD5 c953dd0aab774f1446fcd63fa7c5f613
- SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
- SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
- SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
- TLSH
  T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5