1884e093bae261c4942210334e1f2eae71354913e4ded3cc1a4a18c5320741ec

General

Target
npp.8.9.7.Installer.x64.exe
Size 6.6MB
Sample260814-ky45nszapd
SHA256 1884e093bae261c4942210334e1f2eae71354913e4ded3cc1a4a18c5320741ec
MD5 de37a0ecc2d8bfbe67ea93112808118d
SHA1 2b9e7a200f617679b2eeea97fa97d7c66c298e49
SHA512 ac3e8b4feba72eb5eba4a0082bd2f20de390872a951c98976cecdb749ea35e798d87bfd8fffe50c7aa7d759d8488810cbb71eac15a845f37fdbdd564fd8ff919
SSDEEP 196608:BsXSjAFpYW+ODMqsKGsX+4oj1k9dsxvlxPlIDMDyCsRhN4leL:BsXUW+3qK4OCdWvlxPKYDyfR74lC
TLSH
T1036633006392C933C6517A34013E51AFE170BAA674B36ECB3F867B3BB83155CDA586D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  npp.8.9.7.Installer.x64.exe
- Size 6.6MB
- SHA256 1884e093bae261c4942210334e1f2eae71354913e4ded3cc1a4a18c5320741ec
- MD5 de37a0ecc2d8bfbe67ea93112808118d
- SHA1 2b9e7a200f617679b2eeea97fa97d7c66c298e49
- SHA512 ac3e8b4feba72eb5eba4a0082bd2f20de390872a951c98976cecdb749ea35e798d87bfd8fffe50c7aa7d759d8488810cbb71eac15a845f37fdbdd564fd8ff919
- SSDEEP 196608:BsXSjAFpYW+ODMqsKGsX+4oj1k9dsxvlxPlIDMDyCsRhN4leL:BsXUW+3qK4OCdWvlxPKYDyfR74lC
- TLSH
  T1036633006392C933C6517A34013E51AFE170BAA674B36ECB3F867B3BB83155CDA586D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
- MD5 7854290f8bc473fb9fad1917b0065731
- SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
- SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
- SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4