e4a6d746c5c115c4b765a0e105f6e99cad2716afa48dc44e13f78b0fcd4cad99

Sharing

Copy URL Twitter E-mail

General

Target
ElectroPuppy.Hotmail.Checker-Portable-x64-1.1.0.exe
Size 283.8MB
Sample260820-t8b2bavsct
SHA256 e4a6d746c5c115c4b765a0e105f6e99cad2716afa48dc44e13f78b0fcd4cad99
MD5 ca63208349ec4b6a8781adf53dec73f6
SHA1 28fe25ef760383dd1dc889fa3174f473b23c8059
SHA512 da332369ac077398817726f489c0de9fb5922510bcaf4c033eb4c05cbf5953c978a5e0d6abefd5365f37f3132f2c64c1cde4240458a0d1213a4b8da88b65a477
SSDEEP 6291456:hQuiQumOl5441BPnALxn11IT0u7CVcDT3yU5fPi:y1Egh1Vwn1s7v33yUZPi
TLSH
T1CCE833B86E90ADCAC17F4EF453DB217373B6994F514249BA73F8803E01B2E644E86953
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  ElectroPuppy.Hotmail.Checker-Portable-x64-1.1.0.exe
- Size 283.8MB
- SHA256 e4a6d746c5c115c4b765a0e105f6e99cad2716afa48dc44e13f78b0fcd4cad99
- MD5 ca63208349ec4b6a8781adf53dec73f6
- SHA1 28fe25ef760383dd1dc889fa3174f473b23c8059
- SHA512 da332369ac077398817726f489c0de9fb5922510bcaf4c033eb4c05cbf5953c978a5e0d6abefd5365f37f3132f2c64c1cde4240458a0d1213a4b8da88b65a477
- SSDEEP 6291456:hQuiQumOl5441BPnALxn11IT0u7CVcDT3yU5fPi:y1Egh1Vwn1s7v33yUZPi
- TLSH
  T1CCE833B86E90ADCAC17F4EF453DB217373B6994F514249BA73F8803E01B2E644E86953
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  ElectroPuppy Hotmail Checker.exe
- Size 181.8MB
- SHA256 9a162499ed047b31f82f116ff951ae7d0e85433459263cbe425677d76adbb062
- MD5 5db9428e2c55cbde86689bfa13ccf974
- SHA1 bcacd684270799c7c008f5b30231f7f1a70149cb
- SHA512 c1e083d5886e11a8c71d1c1ff7515e5e27dc56355559450df1c822015248485efd3414d443f6e59824a97aad3725bdb9330fbf66230f924b8360ba91d8cfbe25
- SSDEEP 1572864:3/r3azPGAxP3GrV3yrJeeirvGkEphhBCRi9GV5zhzcyZvJXjljupUAIiyCPWzeYq:jqLXqLEfhlx9
- TLSH
  T144987B03F39A40D9E01DD1758B9B9633EAB1B8854724B2DF275407922F67EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7
- Target
  LICENSES.chromium.html
- Size 10.6MB
- SHA256 c94cf3ff754cd21410083a042998ec5deb0b919a32abb50f0663f28381cedc23
- MD5 82138658f6352eeafb48e9f81e3d38ba
- SHA1 969a598c062bfa6bf78d055411cc7a14db8b03b0
- SHA512 5241eb34342f93d96840937966be512b0a8730a76af196b993e2ecd33b5d00da7c8760464c2b279815a957842ecb04cfac04c4a1b165dc60b43fa44f65860eeb
- SSDEEP 24576:s89dQ06poh6j5qjK6mwRlXTimf4jZ6ojK6QjZ6UjK6ajK64jK6ZjZ6ijK6e6cjKI:7+eGf
- TLSH
  T116B6A42F7B48037706C602A2AB8B65CAF31F903F3B561654345CD1681F6BA2583FB6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8 behavioral9
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  ffmpeg.dll
- Size 2.8MB
- SHA256 1a3ed9c97349ec5e96ebb2b208d7c7988dd01338001e41c2ceea367ddaacf1f3
- MD5 cfd5b5a51879bff0902488908194a0c7
- SHA1 530eba6489d432fc332bc27a011ec290c4a86ea4
- SHA512 78eaa02947bf5710676641a4169ffc6d3e043b8d1d522b0054fa4f352c2c300d27989c31a1075585b6860d4a8f552ff0ca4bb15a15ad15024d25b23f164c487e
- SSDEEP 49152:UGk7mk+cUO/Tyhlh/t45hwotzOA/7ZpddK6BfTLcGOIUspb0GN:U1+cB/Tm9swotdOIrbbN
- TLSH
  T11FD5BE03F6DA50DDD029D470979F9213F671384A8F1166EF26A05A202F67FD86E3E329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  libEGL.dll
- Size 482KB
- SHA256 c83ddd4279d29e927a3cc0d39ab2b5606cf9b2a7c07cf40abac220a4e0a78a56
- MD5 e8921ebd14efbdd95f982833eb70b6da
- SHA1 cacd91f054239996db6ff862c8a25446d252fe61
- SHA512 7e0836286bbcdc2dfff58137a4f055f54b3eaa0f9d4792bc7e988e61e69548e262be93fddfc7ca2767cf0548199cb1c9f6511d9eb71aa42ca1f599de6e7e5f0b
- SSDEEP 6144:Kjfk8WpBejiGS5HCDBWXOl3cOhaiu432gkkhuWFhM8tWy+:MkMLS5HWBWXO12iuxgkkhuW7ov
- TLSH
  T1BDA49D15B3E444B9E06AD1348A574602DF76B4960B69FBDF03E092792F37BE85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  libGLESv2.dll
- Size 7.7MB
- SHA256 d76243a8b2fbcc1a4bea038e1182afb3eee1d018dbb5284f127fccaf97a78a8b
- MD5 a773b8032e7617ea660a3d8f40599ad3
- SHA1 9a989ed477d5c0e17d68051feb1337aade3bb72b
- SHA512 32a10e1814b67816929c1e246e449fa47c08ce5c1ba9352e3c53d77b99528ad787a45bcb36d52c7afe5b3d55b78ce3144b57f9c1d8433f560feaf1a75f654485
- SSDEEP 49152:7aiJanImPNZm2vFAFx71ziSUafs2FbojInPv2ERq2ti8nZZg7CoPVrq207ggicKx:+GiNRFJEP1ti8ZqPeVKk5P9zpoXE
- TLSH
  T1EE868C03F29540D9D00DE2B8DB5B9623FA3578850724B6CF269457252F67FE0AB3EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  resources/chrome-win64/D3DCompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  resources/chrome-win64/chrome.dll
- Size 235.8MB
- SHA256 318421cc16039878cffeb8cec61d773f41fa6493134f9a3c6bd4f41bb00f2935
- MD5 a0c494ee70256bfdbd56679bc00b862d
- SHA1 70ab501eeaf5b008dad196d7bea5b0ba380ce247
- SHA512 89c436f6fda6a2023070a6ba8c88c229ab1ab4ddd72d84210940dac4ddda7df5283f619e89dbaf5baafbbd0feca0b859cb0659d7cc66d47c8bdae73432d46ec2
- SSDEEP 1572864:PczAGU9brNBi1YSG/v/qD0jvRLqUxOIMibCLRhqBCuiWfb9wzPHMZVAjSssbztO0:NR/qD0TVPbDb/
- TLSH
  T142C88C13F29A40E9E01DD1759B579633EAB178890324A6DF17504B922F77FE86B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  resources/chrome-win64/chrome.exe
- Size 3.0MB
- SHA256 fc9f0b16bf3d16ec7fbc834c769eae8f9c24f80cce3e403d6974183ff555b795
- MD5 e94e5d192a8ccc69fd8b77a78c9d07fd
- SHA1 d91b960e13e3368a7bf8e90bd8586488d8773fe4
- SHA512 0bc74a3bd1e71e2b49c281a30abace111f2645604ccf45321ef6736cd4fd7ec14d6f945e3d3b584dd15eb1b391c7e6b81824105ef3c9d4bd288b181567b506b1
- SSDEEP 49152:xke1+ivqU0Vesg2AYVHFgMJBW9NR78pgQugw7V6UhcH18LCO/1M1qbdjw:GBpF9BGR78cJ6B8B/fj
- TLSH
  T111E57C03F29950D8D019D1B9874A9632E9B2BC85473066DF03A0BA663F77FD09B3DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral16
- Target
  resources/chrome-win64/chrome_elf.dll
- Size 1.3MB
- SHA256 f21f2d80cd827ee0c2ce44f8cfeedc4479864dab2aded430e34c3807e4602da1
- MD5 ce3a8113d8d2e7cbc4cfffa0d5e2daa2
- SHA1 1fc4aff1a04148bcf50c6bead2722524ae85a3e7
- SHA512 fd710c76ce0f7eaaba89af33b17af0c43c7f4fa64bc7162c1fb4b706729a57a133343f74f9ed78ca78d6a5c80ab0251297f2cd4fde3e89e73e752a2fd1fba998
- SSDEEP 24576:8VFC/woI2Umj3+jSqMxiJVMtZtd5jjI1NX3oV:8VFsO1fOiHM3t7Q1No
- TLSH
  T174558C13B29940A8D06ED178C7678632EA627C420B34B6DF07A8B6592F77FD46B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  resources/chrome-win64/chrome_proxy.exe
- Size 1.1MB
- SHA256 4cc87319f2a52b3bb163eb1e46995d17b9cea9a0f9a12672053bfa032a537048
- MD5 c36e70370c1d380aae386a8e93dfd51a
- SHA1 ff686f5146600b006d2e690469b2d6f593a29778
- SHA512 fdc78cf49b2d2283e5ae498f4e8b6a96223e346a6d0ce182a89102e2e9906237a54269142230e59a859b4c5cbe6ff460564e89cc391b1f6085f20f1ea2c66425
- SSDEEP 24576:609xwCr/8dMJlrNs4ffFTdskLV+gvnC/:60FrFp3nFT26V+g
- TLSH
  T119358D17B69901E8D06AD1B4CB668132EAB27C510B20AADF0790F3592F7BEE45F3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  resources/chrome-win64/chrome_pwa_launcher.exe
- Size 1.4MB
- SHA256 6de89a6cdeceb1f53fa0095e08228778ecd639927cd3aff2d1d9a47b3f4e89ac
- MD5 cc398f945138131ad3579bb9a319120d
- SHA1 ed1688cc05335a86425162bc91c2a385f3ae1cf0
- SHA512 68a7430f44f22c0d95e55e303cbb05d12b4d4d3defe0c8dccb35ed71fd6dbacd52fa0177d2d7646b44d1c10d55bdfe2c83855410114ef774e239e987ad06b7be
- SSDEEP 24576:p4IlwBF4sJt4dFKxljdB2UjZnsL/vlmiQ:p4BFLCAHdB2gy/vl
- TLSH
  T17E657E37729BD0D4D41D94B0CF260BF195A16CB9C7D697DB01C8BE25BB329D03ABA209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  resources/chrome-win64/chrome_wer.dll
- Size 115KB
- SHA256 bc96fe6731bee0278ea8bf43f8b86189761378e33851b8f32d7444f55da28407
- MD5 774324c63a169e45e830c654130e4e4e
- SHA1 d0e8467a904644b118d8050911180ff2d59f3d1f
- SHA512 88bb0e1b6d4de2dd48e2b62046800196c943f6417ec64acf8026289fa851756c787ad6ea832ad544681bc434c27f60513cbf09a49983d355ece1fec024e8ac51
- SSDEEP 3072:uIghzybCWrpIoCEruhmralBYHZsZYBJbriHqE0cz:sobVy4gmralBYHyeE0
- TLSH
  T1EEC34A1B66E5017BE1764238C5534A05E773B8020760BFEF13A442AA6F63BD4AD3EF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  resources/chrome-win64/dxcompiler.dll
- Size 24.5MB
- SHA256 6918c9539e79abf046a59837f7beaff5a360d7c90a526751e302c09ca785e784
- MD5 c82aca449834a7a2b5d2815e99fd9b70
- SHA1 af7c47bd02f84dc704be670ee5adc8338b5c0a15
- SHA512 dd24b648eb4c6634852559d474c2c05d2e405d1f903f5f19de5f785d2499035442a0864b8f4e362fa61539bb85e2b0d32540acc8efed98748cc3eacf7c920780
- SSDEEP 196608:P701/ZMPN0Oln0X+03H0nbul50h0ewsbogUjTLV0cI20Y0qkse0CtXID7p0HO4cH:PyMPHlAjlBwovW/O4kd
- TLSH
  T1DE472A122146D49DF059C879C3678626CA6C34E73FA778EBC0B461252B7BEBC1B39235
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  resources/chrome-win64/dxil.dll
- Size 1.4MB
- SHA256 a5fe1d8d9caa2ff29daffd53f73a9a4e19c250351b2abe4fc7b57e60ce67ac68
- MD5 30da04b06e0abec33fecc55db1aa9b95
- SHA1 de711585acfe49c510b500328803d3a411a4e515
- SHA512 67790874377e308d1448d0e41df9dd353a5f63686df4eb9a8e70a4da449b0c63a5d3655ab38d24b145ad3c57971b1c6793ea6c5ac2257b6eb2e8964a44ab0f08
- SSDEEP 24576:+Cfhbh3v3mtZDiAQeWj26k41ob2nrZ1rqpegQDJqoZtp22GkmgA9u808jQPEdkrt:+Cfhbh3v3mtEAQrW41obCraeRhy9ou6f
- TLSH
  T18F658D1B629801B5D4BBD178DE578E0BE6B2B41503709BCF12F006A62F2BBF55A3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  resources/chrome-win64/elevation_service.exe
- Size 1.6MB
- SHA256 8e23ad3eb2123db774a53d65ebcfecd452db51ea3d5ebcf0ca8f99290f5ba4c1
- MD5 9d699a7bbe9131659604ecf2cb5107ff
- SHA1 76296f98b8abf412c173a03d2f9187c1759d0a4f
- SHA512 74c1e0decf6de823026c54d2b8bbfc48c8b53c0bccce27c530b6aa1637e25d0483a9148d82e550175e5dabfe25b07c5340c77f17af239960747324c7cd1c01ea
- SSDEEP 24576:V4S9wErjpcXQjOvpy/KxgqUVHAEhRR3lx3eb55WocBE1w9Oc:V4urjwrxyCxFUVH7Flx3et5WocyyO
- TLSH
  T1E4857B03F2D941E8D06ED574874A9133EAA2BC4A0B21B6DF0790B6562F77EE49B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  resources/chrome-win64/libEGL.dll
- Size 483KB
- SHA256 f9ca67ad19f0f8994b0d158535b318f532e8f3170a0673c7d0e01c2e68b5fc9f
- MD5 d6828689a7253d386b57b82905a3cb27
- SHA1 04138da35cd61811d8ec939250459fbcc11af7d1
- SHA512 3649acfb5f63260792c0227335de65652f9176b428e5abe2e2263a65b5f883a57d59ec13d8ad571359c6fab3cd733b7f5da46ec314ddd9d270ecdc1e7896b2c9
- SSDEEP 12288:akvZtKZhjjoQ67fNgEhXGb5Xnvtp5sT4:5vZtKZGlfNw/tpy
- TLSH
  T168B47D1577A848A9E42AC074CE534252E6B274560F75F6DF03D0923A3F7BBE89B3A710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  resources/chrome-win64/libGLESv2.dll
- Size 7.6MB
- SHA256 3ef2d23d588e4dd6946ff19b6df2ba91be1226a967aa386e94800ab6d48e4852
- MD5 b80c56b7d333d0e65ae64fdf93aebe0c
- SHA1 2b1ebbbd6667a01ee586cb2ebf63780203ee2589
- SHA512 36195c4c42f4b9f01101f768a7779947eeef9b81e447ecd514207b0ebe01c9a50fd339601102e605eff09e5557147074ddcb44c094ea694ca7700926189873b0
- SSDEEP 98304:WMDSLUNXN9LW5/FFh4A8hJ77Uhz4XvWY:W5Lat3dhJggvWY
- TLSH
  T1DA866B03F6A980D9D00DD2B8CB5BA227F63178850724B6CF279457252F6BFD0AB79724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  resources/chrome-win64/notification_helper.exe
- Size 1.3MB
- SHA256 a6f31cbf0f9be7db52ee90218f1f11775aea78b15c841954cfacf4cbc398d740
- MD5 48dd750e032447213d5ae2fee3f304c3
- SHA1 62aadef3e7da0c6cfcb1f7cda2bbed8dd885a1b8
- SHA512 e697abedcfd4fa988ca9253b1764fcfb694049b6432fc2c4304608555e21b4bc2908368268a58708dd674f8f5a2bb039f895c932ae93e8857bf7443c91bf2571
- SSDEEP 24576:PVOWgw0hZ+n0wl6tgS8hkW7B2Ul5Qlp98ZikJl3:PVOvhskF8OWV28Wp9r6
- TLSH
  T136558C03B29940E8D05ED1B8C7568636EAB27C420B34A6EF0698B6591F7BFD45F3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  resources/chrome-win64/resources/accessibility/reading_mode_gdocs_helper/content.js
- Size 442B
- SHA256 8d23bbffe429bf823e99e89da755996f2c5ee1594b926b81bba0eb6d0ab4e745
- MD5 e72984c0364d70a622bb1088da7cdd35
- SHA1 b93e5ccdff408d30b532149938325a6806695aab
- SHA512 bf988c012f6e8a2f794731d3de79442b7174421a2f5b3080ab2c6f81d72912a1f7c669463eba7cc2c3feaf0f59e9e2c3002d35ee338848e3b8bdb75dc4193cca
- TLSH
  T10BF0A31C3DD5302497690D95372FE26C3B5510349126B2977D8CC71C5F30EA95079D96
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/chrome-win64/resources/accessibility/reading_mode_gdocs_helper/gdocs_script.js
- Size 1KB
- SHA256 d291adabcfcb1a4a4a2ffacdd9d04fdb473ab0d6903556bef7446be9c3646d86
- MD5 0818ea5737462bfe5c021b9d4b922e31
- SHA1 6d674c25fa0f84a3dc52908bc36c7439994ef7f6
- SHA512 8441e11781bbee6d0106dce820eaae0e743da32a1caff73932d1e267c7350d8fbfa988c4dc60e014308c4d1c902748f7d229eb870b500d4c11e7cf72ac07acc2
- TLSH
  T1422112581EA5C128456D8456EF3F7186F305701AB022F1157CCCC3DC0F52BBA84A9EDA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources/chrome-win64/setup.exe
- Size 4.5MB
- SHA256 74434846aaf34bb26bc77b1433e6e17eb9cd5c1ffbe1cdd7b937cb08d08e197b
- MD5 acca6c85ffea988031811ea3461ba257
- SHA1 7dbb97dcc865f69601339a73b857df29c4014b7c
- SHA512 9731dfeb4babcd555f138547e095fe4b8f52f6c7f944ff8e5a949583a920814ff8ac81a34e1273a2b2b13cdbbd7eb7486c8e1de4080b8bde5e47ae98b0ce2911
- SSDEEP 49152:SkLBPwxf8vQmQnfjhjMNDxjzXrvDq4WpOitaXUrDDSk+RMZKVJU0fDRbxv1Eziii:otfjhIjv+dpOCfNSWFk
- TLSH
  T1A1264B53A3A500A8E45EC9B4CF2D552297693C8B43F493EF26D476E51A72EC47B38F20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10
behavioral31
- Target
  resources/chrome-win64/vk_swiftshader.dll
- Size 5.1MB
- SHA256 8b22ef41d48ac1464df41394d07e7c5f4e88f869ff95d9adabe10144058c9bbf
- MD5 f9acf5191ff1c3b1e78db29eef239367
- SHA1 cb5f1c83dc9fe04ab090e0413d009bdc77838c90
- SHA512 af7ee3a1091da0192c6dc583bebca85848744b631737a2b922bbece0ed6c9bd3474049af71693ff752faf88360dbf5cc7d248f6b42d970c9f8f9c4ba36ff42b8
- SSDEEP 49152:iDSTofgpe+Lc7sIifCTxpKxQegLuCgUmwPwICvlHi09A1PEvIHqQtnyUMhsDZ2K2:i2ToVW5vJ0PttKmX7OVe0D+I
- TLSH
  T139462703F2958099F05DE579875BA623F232B8801B76B6DF12A41F192E7BFE06739701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32