a69102170f1618400774a3dd5400b7c4d63f7ea96718d15e6e3117873b859883

Sharing

Copy URL Twitter E-mail

General

Target
a69102170f1618400774a3dd5400b7c4d63f7ea96718d15e6e3117873b859883
Size 3.0MB
Sample260814-gr4nsadp4w
SHA256 a69102170f1618400774a3dd5400b7c4d63f7ea96718d15e6e3117873b859883
MD5 501aa23fb06dd4aee007eebc768bcc1b
SHA1 68c34e3589df90c0b2639352dd313081a152553f
SHA512 c60232ed72ad170852d1372c98878ade7f4b7078a630a43c3f37cdb8a262505bcad0e05759e4e8212149e9f743df15d25c68048edc530917c47651e38528e20b
SSDEEP 49152:Pf5dAYF8qekFYPa1KUuC5kp4Y12Nco71idYLeXcxIOyth/OuQLb5tLP5:PEgYa4CrY1VdEwXOY0ltLP5
TLSH
T160E533C50FF4CA77E29B867E7A424E8AB72212329A0A064D4533EE5E30D4B874D0FD57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  a69102170f1618400774a3dd5400b7c4d63f7ea96718d15e6e3117873b859883
- Size 3.0MB
- SHA256 a69102170f1618400774a3dd5400b7c4d63f7ea96718d15e6e3117873b859883
- MD5 501aa23fb06dd4aee007eebc768bcc1b
- SHA1 68c34e3589df90c0b2639352dd313081a152553f
- SHA512 c60232ed72ad170852d1372c98878ade7f4b7078a630a43c3f37cdb8a262505bcad0e05759e4e8212149e9f743df15d25c68048edc530917c47651e38528e20b
- SSDEEP 49152:Pf5dAYF8qekFYPa1KUuC5kp4Y12Nco71idYLeXcxIOyth/OuQLb5tLP5:PEgYa4CrY1VdEwXOY0ltLP5
- TLSH
  T160E533C50FF4CA77E29B867E7A424E8AB72212329A0A064D4533EE5E30D4B874D0FD57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 32e35e4b97f8df08f07d8879ba2ec963c75707440cfc0275e944a31c946f633f
- MD5 58696f9e1a48139fb1b0ed289a88f386
- SHA1 71ed08169cf00dd00d41d41395fd982ff8e8c5fd
- SHA512 3feac3983c39194d9101c803d69c395c33d8757e6ab746447f0f22ee9d0d8f790bb4f0c6c9f4fe7fae66cd6119c2b456c02ab051ffb62af4d010387998760d33
- SSDEEP 384:3rSQMCOUILnCaSPy/yhJzmGSMRWyOUKiR:3rSQMCOp0yamMRWysiR
- TLSH
  T15C623C16B62084F5CBB2167034D73B3E6BB28F6A1A2848C24BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
- MD5 9ba64ba25b26b3964fe1ca1d331387ee
- SHA1 305e7ef9bec45556fe2de80d0ab107f12a8f4eee
- SHA512 741f72b15f6f138c0fd0ccf799dd031c731e79b54eb417a615a04d53eed72891f92196beb03795fad990c158cd358b460ecb6eefed5fc2ef53400310b2249df4
- SSDEEP 96:ZIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/O3lkCTcaqHCI:+hE+A0+sF6piUFkA6lncviI
- TLSH
  T1DFF1C776F3D20673FAAB427428232F231B2AF521576981A6490316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH
  T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  litesnap.exe
- Size 11.8MB
- SHA256 6713a66f5a3651484d5576a5dd6d253d20f1781a15d3149f32d2a52d8effb425
- MD5 c1465344a5598ec8891cf77d3e35b2ed
- SHA1 3dc70038345989bf8b258822e703e72eef221d6f
- SHA512 8808031b07b515c08ee5b3a123e5211c9f67ed4c249cdd8a6e20614519fd9eb4244306f3cc80c695570c0d6cfb1308df6308e01d9d96dd97f0cf9b7b74113829
- SSDEEP 98304:KG+A1TgQdeSXU5zZ1hV+XbLvMZeKVWn4NTlbF22QzkExs4HwNh+chlVznmii4+:5+A9zdeSXU5zZ1hV+XbLvMZenM9YM+
- TLSH
  T1BBC6F7157A5B99ACD18BC474834B8A664A3130CB0B35B9FF04D492392F6EBF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

Adds Run key to start application

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14