7d948bfe8012b87c32aaf08686015e5a3471cfdd16ee65618063cd6d2a080c64

General

Target
TGMacro.Installer.exe
Size 537KB
Sample260820-vtmpyavwfz
SHA256 7d948bfe8012b87c32aaf08686015e5a3471cfdd16ee65618063cd6d2a080c64
MD5 5168bd0be4ea163f649c05bc4a43c4bd
SHA1 f5ea83949f69cf8b2862d27fc19a3e852716e805
SHA512 74de1fd61eeab71b930d169c939079d4657770d2a25fec0345453189c73d3ed62aca8c607a544c9128bcc5f6c52e5983819943d1319bb15baa251dd211273191
SSDEEP 6144:NfY+ontlymX2xfqqtL2zcFJ9xlmVK/z8+5mALRErhPPpoJuFByM+JudCeEu3HfTW:NfYyc2xRLFJ9x0VK/66pPy93/PFyL
TLSH
T1D7C412C46A6C1AE7FDF126B23C6F2696BD24F005C1DABB4BB7F5135920025D3490BB64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  TGMacro.Installer.exe
- Size 537KB
- SHA256 7d948bfe8012b87c32aaf08686015e5a3471cfdd16ee65618063cd6d2a080c64
- MD5 5168bd0be4ea163f649c05bc4a43c4bd
- SHA1 f5ea83949f69cf8b2862d27fc19a3e852716e805
- SHA512 74de1fd61eeab71b930d169c939079d4657770d2a25fec0345453189c73d3ed62aca8c607a544c9128bcc5f6c52e5983819943d1319bb15baa251dd211273191
- SSDEEP 6144:NfY+ontlymX2xfqqtL2zcFJ9xlmVK/z8+5mALRErhPPpoJuFByM+JudCeEu3HfTW:NfYyc2xRLFJ9x0VK/66pPy93/PFyL
- TLSH
  T1D7C412C46A6C1AE7FDF126B23C6F2696BD24F005C1DABB4BB7F5135920025D3490BB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  Libs/CSInputs.dll
- Size 19KB
- SHA256 ce5ce920b4e7d9d1e07ca9ee448a4360b6da55be73960681526d63f52633020e
- MD5 aa7572037804516ce1665d6cea49d093
- SHA1 489b1b257164a7a2886d0a49af720dc1c954b582
- SHA512 aaaaef87e9158a61741e1562d2a8e72b67a8a15a63b6046fa2f6c46a04a19b50d88863e19f04fa2feb62d483c23637b4ed540ba38ff857b1d1997fb2a156f071
- SSDEEP 384:ph5Z1jCykagUUUZ0Rh3OLcXD81cuw1icVqJGjDXA7yYYKhpbM2L/j0Q2u:31jCE/UPh3OenT4qDXvCj0QN
- TLSH
  T134923A2A4798C730C0A80F7DA4E202610778F0406742FF66CADCE5AABD97F694691FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  TGMacro.exe
- Size 1.2MB
- SHA256 e7af561d381c2345b87335372a82d04c4ca7033f319d899f26f20c3dcaa61113
- MD5 260c99e3e93ce44a8dc92d3d47f7fb70
- SHA1 3e7fc55f5150a1a074244343be5f6b4b3120c04c
- SHA512 c6a5cedbe425fc49560c774235a89ae4af6a640bdda91c919f790555781d0d0fbcb106bee0056a1aaf412e22f66ff61bf7744f2cdce55cbe33b8ff60d5a2b246
- SSDEEP 6144:kxnaw601VOsfqgPF/ymFEymFJymFnMGWVymFEymF9ymFfymFPzM3GWOBymH88:0nal4OsyHsTWMBUsd3KzM3BOo8
- TLSH
  T1B8453AD1695C0BEAF9F423F37C5A5462BB38B515D156F64ABEFA20CE1801B960A03F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral6