f6031e3d547ae1fd8c6002ab868ea1154f2ca3ed8f0f7fff25c6f324438071de

Sharing

Copy URL Twitter E-mail

General

Target
f6031e3d547ae1fd8c6002ab868ea1154f2ca3ed8f0f7fff25c6f324438071de
Size 4.3MB
Sample260820-ec5anassey
SHA256 f6031e3d547ae1fd8c6002ab868ea1154f2ca3ed8f0f7fff25c6f324438071de
MD5 4ffbd77d514096ee93545d203657c54a
SHA1 162e35a887fca3a51f477c162a58beefd859987e
SHA512 eeb36b237e96706122ee0896c236a86f3e60fffca873febfa83a0456c58c478cd62790a4ca2441a0b6b13ef4fc88f02d461c692071419522f86f0d7ea6cb2d81
SSDEEP 98304:PJhlZTN5VCKXp0d39Dm2pak4KxvRI0zn/jRfT7J+ZLfk2:PTlxgGI3Lak/FljRr0Z
TLSH
T1CC2633F01EFAE7EBD31A2672707283E60A358476C5217B5D7133AA34BD41A98D2E015F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  f6031e3d547ae1fd8c6002ab868ea1154f2ca3ed8f0f7fff25c6f324438071de
- Size 4.3MB
- SHA256 f6031e3d547ae1fd8c6002ab868ea1154f2ca3ed8f0f7fff25c6f324438071de
- MD5 4ffbd77d514096ee93545d203657c54a
- SHA1 162e35a887fca3a51f477c162a58beefd859987e
- SHA512 eeb36b237e96706122ee0896c236a86f3e60fffca873febfa83a0456c58c478cd62790a4ca2441a0b6b13ef4fc88f02d461c692071419522f86f0d7ea6cb2d81
- SSDEEP 98304:PJhlZTN5VCKXp0d39Dm2pak4KxvRI0zn/jRfT7J+ZLfk2:PTlxgGI3Lak/FljRr0Z
- TLSH
  T1CC2633F01EFAE7EBD31A2672707283E60A358476C5217B5D7133AA34BD41A98D2E015F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 32e35e4b97f8df08f07d8879ba2ec963c75707440cfc0275e944a31c946f633f
- MD5 58696f9e1a48139fb1b0ed289a88f386
- SHA1 71ed08169cf00dd00d41d41395fd982ff8e8c5fd
- SHA512 3feac3983c39194d9101c803d69c395c33d8757e6ab746447f0f22ee9d0d8f790bb4f0c6c9f4fe7fae66cd6119c2b456c02ab051ffb62af4d010387998760d33
- SSDEEP 384:3rSQMCOUILnCaSPy/yhJzmGSMRWyOUKiR:3rSQMCOp0yamMRWysiR
- TLSH
  T15C623C16B62084F5CBB2167034D73B3E6BB28F6A1A2848C24BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  CommunityToolkit.Mvvm.dll
- Size 112KB
- SHA256 e81f937cb4a70645e5106b22cc4972d4009f0527f19efa10eb74115c155fc66b
- MD5 634fa35f5855bea7fda4f5631ecb7aff
- SHA1 982159403969b8d4a5ea31d99d18e3ba927c9ed8
- SHA512 339d20de6ed61e7b86d43305198beba32a26d7e7721923219d475e0112f5429e01998404c4fdd10c0630813e55ad766ef3f2f8aa1df3c937c2b3a3f88bf22061
- SSDEEP 3072:H+c+yfwDziGuqRGia5iKYR2l+EaXcw+MP:H+8wHiGuri8iI+c
- TLSH
  T104B37C0263E85E13E6FF0F7564A8504A8F32FA07B932E39A598C63F519837905D533B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  DeviceId.Windows.Wmi.dll
- Size 10KB
- SHA256 8531fbdd5394ba5662b8b4b4b00c8550ed04ccf853afde170ef731834e4e2363
- MD5 d815553bf8a547936f516be1824791e2
- SHA1 6ca405829f7293ab062e8c7e97173cdf30b23b93
- SHA512 79a994499b7dfc2cbf08c053ceb90bbe4310fecea61fd7af542362b8b0efe396f65431d1c9f5c110ea27312dfef45d4a1c174901906f5b6332f4f80761a64025
- SSDEEP 192:5vQRoP5Ge9F9HevpsmjjuCPSQ/31lwEgjEDkLeAdXnfwujjINeelie+:dpGYFjuj1SQ9SEgjEDkLeAJIuRelt+
- TLSH
  T1CB22E918B3EC8326E4FB8F795DB2420103B5B6949D63C61E1C9DC16A9D32B054EB1FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  DeviceId.Windows.dll
- Size 8KB
- SHA256 3b2a5111c16018dec4002dd35147807a85c0e0b5afc0aa001ac9aa1cb64e96da
- MD5 15c3a745f8ae98d4a96f384097125d54
- SHA1 7fb2f1848ebeb50a1557ed448c9acda1464a8dc4
- SHA512 ab4ec6a6631f94c22d54098704b39f2bba3da9416ccd0ad4197f7893b7b5efc83fdcb6a9680c9274f5585c4f935d2a4926aa640c051f99e163af0ad6fa23dff3
- SSDEEP 192:BpSKToBc7USHjd5pi9EOxyBSEVEC36QobekiyS:BMMoBc7UEFimO8oEVERQNkxS
- TLSH
  T11CF1B414D7F8866BD8F30B3EA8BB23004A72F754BD63CB5F0815401ABD717914AA17B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  DeviceId.dll
- Size 22KB
- SHA256 196b4cd2bf45f006b22e323fd738026a8cd1aecf2798b6f30b3818e809f70059
- MD5 54616cb537127d72fef144cc53e95fbd
- SHA1 cf69dc3afee41ad58826344f2e90e2965827dc8e
- SHA512 8312907a115e81be4fd0dc86933f6cc714f9e467be6a03d15f22125a7f2f8e8b382b6569c6be8a33e68eaa4dadb7e9bfb7745cae69dec03df8dd31f3aa4bac73
- SSDEEP 384:GGBr+SAks8s+dzLCA+OYDRxCRbMelxSrpknuK:Gs+/ks8s+z2A+vERbMelxSrpkn9
- TLSH
  T129A2192493AC8723C7EF02BC7CA6BAD207B0B75668D3D74E1820E18B1DA77540E117B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  KMplayer.exe
- Size 1.9MB
- SHA256 739b4722e929e34c37a23670dd4410854c108ee29de967526ef3e872076d0b29
- MD5 e22fb305b17bc4c413480cbbfe502b4c
- SHA1 d927ca2cb27aa906807a9e9a594befc780954ef6
- SHA512 9709ac26848205cd01a669a920e7ad3c7ffd305fa81ac116e8cb8fddbd71383d55cf6e9119748fe63cbc7b2d3434f99972290bc221347bbde0d42fccd1e03d8f
- SSDEEP 49152:gEkidCUvsAa7AtP66QK1JlrLHduB97O9U:3sAsTAJlnHC9v
- TLSH
  T16495021327605B12C12766B89CCF46288F37461D35C1D75E11A7AD9B3D9A3E22B0E3EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  MaterialDesignColors.dll
- Size 295KB
- SHA256 b5ec30c93b1d2b4631ee2b178750ec92e302e2e331090ec9783981b9572354f8
- MD5 5c108c4da6d03f0fa2c3b4dc7890cb52
- SHA1 48af67b6166068b6f138306bbd1157c7583c6e73
- SHA512 48d055610eead361809bd839c66ccdca1d5e0d9dffe15af9d15afa106ee7791c8b17acb91f2aba5cf3dda2997b049bcf70b43c3b56b8b01f1fc7bb845ce6c91b
- SSDEEP 1536:wr1In+fq1fDfDemxD0EsXpGX0EOAcTtU7fKoVxbzQcV:G1WB1PerAjOAj7fKoVxb1V
- TLSH
  T11354755C1250E0FED813567A5838359972277A36AB948F8AEEAF71FD8C1600B4F331E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  MaterialDesignThemes.Wpf.dll
- Size 9.1MB
- SHA256 344e2cee979e979932f504dc76bd75e97ae1ff46caa3fe2795adfe0a866347f7
- MD5 824cbf63999f954aa1747f79586a4d3c
- SHA1 5f1cd6346a45024bbbe09e304c12b6f6bf227d5c
- SHA512 d36149f7cb5ffc62dac6bb4521105d09fac988de567e181fdca4f23e5079aca5f4292e1d314f797f1a597263ddac0210060cb71c111565717e3a288a47770c51
- SSDEEP 98304:PW8EOPXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCRM:PW8lnJ45/9iD54+V11bFv4z
- TLSH
  T100A6B72CDD05A727E2B7C164809E0A1BF1A2856AF5395F0E70CB1B693247A433E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Microsoft.Bcl.AsyncInterfaces.dll
- Size 26KB
- SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
- MD5 ff34978b62d5e0be84a895d9c30f99ae
- SHA1 74dc07a8cccee0ca3bf5cf64320230ca1a37ad85
- SHA512 7f207f2e3f9f371b465bca5402db0e5cec3cb842a1f943d3e3dcedc8e5d134f58c7c4df99303c24501c103494b4f16160f86db80893779ce41b287a23574ee28
- SSDEEP 384:cOJWqnwCBbNAP0VES2j0cX6dAl+NWpVzrdcoquWeP/WxR5kHRN7dDFcYR9zPrf8O:culwCBhdVv2wK5fdcUtFFn9zT8pY
- TLSH
  T14FC27C1A935C1317CEAF2EB4E570D9422935E78A2C22EB3E1588F2950D97345EB31738
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Microsoft.Extensions.Configuration.Abstractions.dll
- Size 30KB
- SHA256 47bcc0dd74ab89d355309b86aa9bc4da05b250a7d3ae558e424bbb85588d2e95
- MD5 d54af1962bb17e5a1bd39b39c7fc08c5
- SHA1 35cd34cd5bf62139699a14cb3c7e5b4a4c363e14
- SHA512 21aa36906c9567b086a570ddf62bb11045185d610c2a7a84e23e6a8cb54d89c4c00e2d2d40416e8fc176e4e0366315ad672ed0e0e09087a5081113ed1b2b2b6e
- SSDEEP 384:ny/E3cUQGqRKbUND5RdacHh/t1o/98TG/DHzzRjz6oM0GwmHMDlEWsfNWtTb2HRy:ngE+9lDPdhh/volC1sGQ/i+9zV
- TLSH
  T1C1E23A2263AC4337CEBB0FF0E5A8D5413E3AC7567412EA2D699DB1090E27BC4477176A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 62KB
- SHA256 19edd4f5e69a4589dc314909b5854a22f89c4b9ab040591771397b2cb1a17ba6
- MD5 a4e538008c7b51a399e093d06fb2221d
- SHA1 be912df83f49eadd957ea17a0e72467a941c5bc2
- SHA512 132f8848b9d6d5bea0bb7a186911b6ae1a1f34e26ec2dac291252bf6bb43bb39d952f1f5f4ded9180937837193b0d90d1ed919a63e25544891c3fac1876a9a65
- SSDEEP 768:Ar85NhSBuU1jGHAOeQVGVfueReYmXzXtqjKwRKPfnlHrMrDFIwFClNf9zo7H:ii1aVPu3w0PfnlLMrZIsivz6
- TLSH
  T10D534A1473FC8767CBEE467564B28300DB34698B2222E72F259EB08518C7BCA57917F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Microsoft.Extensions.DependencyInjection.dll
- Size 95KB
- SHA256 e969e314ce9398a34710e93e5f77668efe2f85b08f8c9729f98eba786c32c2a2
- MD5 a973b15eb913fb38776a4434206fa752
- SHA1 f090b568176c57d9005f469a9f6317bda3b00415
- SHA512 a4569ca9a69c9744f877ea173e02643f8644734a0cf3f1af393f523115b9edd178cd08fcf00193729fcb33665f8caa704f87d4527afee319e264ab0765b795a9
- SSDEEP 1536:Hk/4OTrnPdm6t2nnnEFrCPWl9LaOwG7kdE4yueQOitz2:HEnAa2nnnEuWHmOwG7kd5+QO+y
- TLSH
  T131A36B3863FC8B3AD6EB0978947545100BB9E6CB3502F31D1E94A46D19A7FC60B31767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Microsoft.Extensions.Http.dll
- Size 78KB
- SHA256 8d72adc5117a0d74772e4dda1cacb21c1c9127565d16a6da58bab8e846a016f1
- MD5 aa1563d2f30064ebb5985cb54de9084e
- SHA1 ca59aca63250cef7626094cc87e620a26d75a613
- SHA512 1b98b5deb201ee57b3031c65776e3c0710769bf74256e592ccd9f79e4e1a9a60ca40bec7729bea0ed506ca51f2d9402335cba1e4399bc2658db118d955f592d7
- SSDEEP 1536:9zwXca7y/N2OO97MRwjKYLJ7LMiSIQy7wBZ5k93GteSai5z5:RwXvm27+YLJ7LM61gEWlaat
- TLSH
  T18B73191573EC1767CBBB1A34F878A1108F36FA8A6521FB9E698E75DC08637D08710726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32