97b92c1b044427f313a2d17825d49725b88dbcd30b7495aab3288178b52b22a3

Sharing

Copy URL Twitter E-mail

General

Target
97b92c1b044427f313a2d17825d49725b88dbcd30b7495aab3288178b52b22a3
Size 11.5MB
Sample260813-tmlcvstdqf
SHA256 97b92c1b044427f313a2d17825d49725b88dbcd30b7495aab3288178b52b22a3
MD5 0f15061d34c928ef25f9684690ab8b0a
SHA1 5115008f85c276af21384713ff9fa668eeffdb94
SHA512 b7c4df976a07f2501a69ae98e6c841d368ac85a47947d0681ecb79446b2355fe47af22af487facaca3a7869104776d7b8c8624aee892aa866b3c07313642ef0b
SSDEEP 196608:Ylx77Hv+ix3NEDSIrNMewNA5z6mofoBbXJglzkwFRc88MSgP52KkP3SXhHanNhHG:YX77vZx3SDA5GOVcXOFf5I6tmRE19
TLSH
T1FDC6333179FAFDC2D3E212FA4050F4106AA2EEF19855A18A18B475EA4D39FBD53190FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  97b92c1b044427f313a2d17825d49725b88dbcd30b7495aab3288178b52b22a3
- Size 11.5MB
- SHA256 97b92c1b044427f313a2d17825d49725b88dbcd30b7495aab3288178b52b22a3
- MD5 0f15061d34c928ef25f9684690ab8b0a
- SHA1 5115008f85c276af21384713ff9fa668eeffdb94
- SHA512 b7c4df976a07f2501a69ae98e6c841d368ac85a47947d0681ecb79446b2355fe47af22af487facaca3a7869104776d7b8c8624aee892aa866b3c07313642ef0b
- SSDEEP 196608:Ylx77Hv+ix3NEDSIrNMewNA5z6mofoBbXJglzkwFRc88MSgP52KkP3SXhHanNhHG:YX77vZx3SDA5GOVcXOFf5I6tmRE19
- TLSH
  T1FDC6333179FAFDC2D3E212FA4050F4106AA2EEF19855A18A18B475EA4D39FBD53190FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Avalonia.Base.dll
- Size 2.0MB
- SHA256 a6393f58058a40d722d0563c8a9352d6d650dc634bf12bab67ff0de185defa05
- MD5 f3f6ee43417a3284cef6b6c6ea1d6d23
- SHA1 7470b8bf45d26a8c0fdcf80fc8732db88ac3a7f7
- SHA512 af86a520c182081bf2e1cd14659bec13d5275c549c0879e63d3ba2aa4e3a5644b4bef557f6a2b30dca379578fe161c296ba947cb145fbda73f3fa33e6a428cd0
- SSDEEP 24576:B7xMpRiNeOaoUjtD32ZhKb+QaWzY3Ec+sLNo/vcTr/tucdSR3:nMzvOaoUjtSZ2TaWzYHAcTb
- TLSH
  T197A55B2DB3E55F32C59F4ABBB07109190375D8516366D37FA698BB792C437A01E803B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Avalonia.Controls.ColorPicker.dll
- Size 470KB
- SHA256 2d7bbd6a67b02b1d1167323b0d78ac76de348bb9ba595bc832b2a3b2b113c02d
- MD5 9454d37b67cb6c87f8998c9e2d16c11a
- SHA1 4c46f434e9211ef1c2e4cfbc5cf649819a868dcf
- SHA512 fb3e85483ead672f1d87e9baa95342cce90ba32dd84f5d7fb2fe7d4874208ec45b31e51b1dd49f3df9bdc469ce744cfebb2faa949b14393d8fb08c8f036b74e6
- SSDEEP 12288:CQjz05D5CEgm4Im/kX+gVinoXDCzw58EFHDZDzLcf2XPcJGXQ2lr:/U
- TLSH
  T11BA4E76512D44A31E27B7A3E11F13841EE3124B396F24AC4B8AD5DD60F72B471723AAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Avalonia.Controls.dll
- Size 1.0MB
- SHA256 80681354f29c83a472be584926d53ef83eaac42a42a673cdec6ace444e8aa14b
- MD5 a76508d98a3fe016fb789084fe688b16
- SHA1 103fdc6f2fa3de2d0736e8f4e373d377819d4a3e
- SHA512 965161ef75860c94455f6ffe4ac3d774711bfb55fe0400904a8db2d241006cb27a42da2c050d9688d3c248c936e8b9983c9f5c23f022ac3fe73110b03112d8c5
- SSDEEP 12288:B7UTVKq12Y7WeuvKmiaxXNwmEs02vyoe1fZen3mG9NOgyBFTZjg1RZ6:FUR7kRxXNIfZhCEVBJZjgnZ6
- TLSH
  T179356D1633E8CA37C4AF16B6B470161847B0E6865BD6EB5A3A08B7FD1CC73921C452E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Avalonia.DesignerSupport.dll
- Size 205KB
- SHA256 a5b6a02f84e0891dbc69ac19cadf044d51d2711565d5214322e5653cb58c0a8c
- MD5 c9abac1f9df29a48353f85a8aab35e27
- SHA1 19ac1f5e8410c11185b6a58bd7cb413dab2a12d0
- SHA512 93a03d28875b6cf2ca5432aaa72b80513f87ed2f6c0d8a36e50bf95771cf95ebd168cd15b374fe74d3aa10741f36cdc825f6007fd475421bbe55492a96ccaf96
- SSDEEP 3072:TuwiS/pM2h44ufl6rmY5a7smavmHYXRCJdqi8YlCGJ5RqHfNumwB6BUPy3obIyBI:qmQ8f5EayqHfNumq6BusyB9x
- TLSH
  T1A624E04113BC4633CEEF8A3AB0AA31420732F5576EF2EB8A1BACB5D91A573510750767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Avalonia.Desktop.dll
- Size 15KB
- SHA256 f4e9adf0364d82f8e06b1682efac29c0865e72decd8ca2f61162d2e93ad7ad51
- MD5 c4c712aa0ae1c39ab45a52c5b228b28f
- SHA1 78cb0463468247df147a320f073ae98d8ce03d7b
- SHA512 0d894da9d4d7526a5d9eac8f6a2bd539d633f3d1aaa1ce85bc6411246b801ef7ab6d6aa9512bd51d2f6b3257d6df42a9bc9e478ead80f5b3c6ac481990e86aca
- SSDEEP 192:cbr/2Y8PvkKjC7wAgY6DMZPGlGQkNHhTpBxK:cX2Y9gYZ84r
- TLSH
  T13A62A8D593145163ECE28A32B5FEF9956136B6C2ADE2C7565230734AC827B300F62F19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Avalonia.Dialogs.dll
- Size 239KB
- SHA256 0ac3bff3dfd72b983cf07309d49ea7ffc19f733dfea4fb75e7cd554ff96d51a1
- MD5 8ac5fc9bda6d406561817375a418e83e
- SHA1 21350def9396b6ecc3b314e48c1d0efb61da714a
- SHA512 a3a9f283b0e37bf83bcfbe2739d124f59ecf1db6e103514f438c5c27760cc8f7cea2cb279afd234b11ccfdadbc36bdca86f661df58356449edacc58402c095ff
- SSDEEP 3072:qpCa+XlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPt3/yzBuNOIOU7og2FnQ7AxWP4HOx:qpEqXpSIE6Ey/SmWUMxFnQEYP4H
- TLSH
  T101344900D245AB39CAE6E6787C7CB3BE0971F419FC9AA61734C5AB7105C5A10EC58BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Avalonia.Fonts.Inter.dll
- Size 1.8MB
- SHA256 3f433e2e025ba12a181787cf01c0b5d1d22e23d7edd678980cfa352d8c5fafbc
- MD5 0c8dbe13d885276a389f72299ace018c
- SHA1 7dae9b5d2ceb5d780e57659172def3ec1729bf6e
- SHA512 b16bb865af6c95d06d1e2dfe76316d31327fbc371eb8477c86b4831b63dbfd991322217fe8cd2749c574d10caa6075c283521fd8bbf49bfbbbc794e34fe73a51
- SSDEEP 24576:unKxRWxB3jL6wZHqBm/3nHDmHH7EFmIYRMxMmABlNGwBcDDLxYVTvAnYiRUVOGX:/iEm/a71rsLmVTYY0UVOe
- TLSH
  T19A957B13F363C35DC9172D3A87A2C7A0B363BC913B12E10ABB283A55C99B1B84D5B5D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Avalonia.FreeDesktop.dll
- Size 196KB
- SHA256 4754b00d5fad29d142e92dd2247b11199f2e1088ba49f2cc9dd6fe2861dc45d7
- MD5 8f06755b9b1bf104284a639a1caa2858
- SHA1 eb5e9dcdeacc62cdf5e51980f3d0f2757422bbde
- SHA512 2e7a2326ba3e7fc490f875b9ead8d95be1753abf0546b8042dbaec36085ee240d3a22668493956da55e84f42b2683b47a24c6423fbf64856604f8e1f1123dc1d
- SSDEEP 3072:naHblJ46aj3XCgDip83RLeGG5Yl8PPHytgFjsHF5GmoGLYX:CJjA3SSi+hLft8XS9Gmo
- TLSH
  T1A1145C25A3E90F53E79F9BB8F694E528CB72F89698C6F74C9CCC25E510533805C0869B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Avalonia.Markup.Xaml.dll
- Size 83KB
- SHA256 a069d09f79735bd6e90e672e4e7a8dfab03de359ef83809d3d2bc2f57e8bb1a8
- MD5 5e9f6eac12b654437f2ba6e5c3dfb09b
- SHA1 f95d6a60ae8859b5149fbeda4c2f488b52d5c162
- SHA512 4094623fff1e9f6dc5f03810b7e3ddf500d8f37825ab4d6fb140b2624378d46534b79e0f83957dc175bf86b3683cafd21203f0139c9420352916bc913c9ba0a8
- SSDEEP 1536:70mNnJYZeHt/DS1fTfzDuqaR56bNmHmCAwJYnAmu:HJMwEfWxMmHlFJY2
- TLSH
  T153835A2163694726DAEE4E36F07871010332F6963BF2E75B4B4475DE9663B200EA07B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Avalonia.Markup.dll
- Size 64KB
- SHA256 e9230b57e2fbfa013af98d2dce147ca80288db2ebd267553d087c3c2b91d2b38
- MD5 ae252804291b5b7adb476b8f59700311
- SHA1 5ebb51dff12a9a658cbeeb450c432c1c57d88369
- SHA512 46f8eddce8837982bf5da938bc71360ab78ea0086fc372e1a5ee457fecb4e53c22fb733e588c1971b8f42ff45e6e3cd6516a8d334e405b45db6cab67b2ba0482
- SSDEEP 768:+YP73peJrS0QWoDPpATx5RWrtsFJXqhANVqmXfj5APpYZ8K2ZMgPvJd5idN:+YzMJMzPpATxbSYTXfdSpYFdN
- TLSH
  T10E53296567988313EADE4736F4B872210636B5D77BF2EB974B20B5CA1817B210F40B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Avalonia.Metal.dll
- Size 15KB
- SHA256 80ad69eea37e9bee18ef416177159a1174c929bd2b84e0f225a4da86738e8c43
- MD5 f845a718326b77d38097c93e969a83e4
- SHA1 bfb7f83e0817fb0973e4fc86a796e32abfe4998e
- SHA512 91f934bd3cc7ae93c9936af330757f0fdbc5744d41692f469cd09f22686ad0443fb7eec2be60be941d2f3d47cf9d18ae09065089d4f92515f68ba44427cac977
- SSDEEP 192:DdIPQ8Gh18et1+vz9b8hLRAgY6DMZPGlGQNkSRJaL+xP:hRuxvEYZ8Kq
- TLSH
  T1DC62A5D093145133ECD28E3279FEF896217AB682AEE28B556630774AD8177300F66F19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Avalonia.MicroCom.dll
- Size 15KB
- SHA256 ec4d6da75ff5a973231cc0c8bda4a700c5637b7f9a0a9ade3e5e73fa1a33e986
- MD5 7dfa07e4824946c3bc01d1a9783c9445
- SHA1 e1977356dfedd770c0d79b0878f985f348a0be71
- SHA512 a5e56065bda049f734414eba2127b7de4a2641aa8fa6b0ee78cc674815c62c788cdd2545464a201548f2e78e8a6592ee0f8c49c4979c9dfe1abf91a0f1e01ff4
- SSDEEP 192:tRZBT4PczkwpVAgY6DMZPGlGBFbans5THhM9lxF:HkPc4wzYZ8MS
- TLSH
  T19862A5D593141263ECD28A3275EFF8D2523BB682FDE28B5566307346D826B340F62F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Avalonia.Native.dll
- Size 324KB
- SHA256 e7067f5e4ac9b6b375e68b95bf5491cc5e80ab0a396970aa9c70481b50b7ab61
- MD5 9f8f1001c947a5ded008f2b6753fa2bc
- SHA1 bb3b3747104be1050782cf1f18d7350e4a7f4f84
- SHA512 d185de24f3d3469a4c3d4b4ad43cdf85f03ead644a94bafab4e133367c6def227ba853e9d4c428837a6d6975b77d7b924d4cb950b21d1519675c534e511bfe0c
- SSDEEP 6144:YG9f6f1PXqNSiiHVpZ7A2jz6ZDzg68ydorDg+aD:QfqfiBL2
- TLSH
  T1FA64186677D8CB54C5AF0934A690420FD770F153C89BEF0FAC0DA2B81C67710BDA6A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32