046f2cf986f378e2e607446fac2137154c0f6a132ef888fa3c10da73bb1ce10a

Sharing

Copy URL Twitter E-mail

General

Target
External 1.3.exe
Size 70.6MB
Sample260822-3ldq3agg67
SHA256 046f2cf986f378e2e607446fac2137154c0f6a132ef888fa3c10da73bb1ce10a
MD5 e503d26c15d42c4164273e614cd775f9
SHA1 2440f8f71eab46c3cac920fbf1b3cdce5cee3026
SHA512 7dc4ff72db3433c711d50a4a352b46a506a6cff2c50065f2e785bf341461ef709f8d916735f4f336994789b8bee2df14785e2051bbf7ab973ba69593b996a043
SSDEEP 1572864:g9eyHsfT6qdJ9kLpuL+RkGNZ0hN7pFWR0AlVq7U4RMpWLbSfbIMpydA7:geLAYSRkSYtGR0AlVKuKuf1UdA7
TLSH
T1FBF73379319DD832C820327ED7282F1AC28B9DED550AADF6D2C1D4BC176CA235F489D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  External 1.3.exe
- Size 70.6MB
- SHA256 046f2cf986f378e2e607446fac2137154c0f6a132ef888fa3c10da73bb1ce10a
- MD5 e503d26c15d42c4164273e614cd775f9
- SHA1 2440f8f71eab46c3cac920fbf1b3cdce5cee3026
- SHA512 7dc4ff72db3433c711d50a4a352b46a506a6cff2c50065f2e785bf341461ef709f8d916735f4f336994789b8bee2df14785e2051bbf7ab973ba69593b996a043
- SSDEEP 1572864:g9eyHsfT6qdJ9kLpuL+RkGNZ0hN7pFWR0AlVq7U4RMpWLbSfbIMpydA7:geLAYSRkSYtGR0AlVKuKuf1UdA7
- TLSH
  T1FBF73379319DD832C820327ED7282F1AC28B9DED550AADF6D2C1D4BC176CA235F489D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

credential_access defense_evasion discovery execution persistence stealer
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Uses browser remote debugging
  Can be used to control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  LICENSES.chromium.html
- Size 9.0MB
- SHA256 dc2878d9bf6ef5fca45737536272a7a1877e0c6f89cb9578cb0f956781102986
- MD5 11ee9d008e924e19b33e0b45fdf145df
- SHA1 140773241b15513e9d7a7aff4d1c1d8f7e0b7e41
- SHA512 4acd065ffee81972fb1cfbe11507aab75c883aa94e359f3c455f87813925bb2d3416ce440561b430d6dedcc2f566d5cb74de139e181da68507ad36e69a672662
- SSDEEP 24576:h+QQf6Ox6x5n1nZwReXe1Gmf36k6T6W6r656+eGj/dBIp+:oABeGLp
- TLSH
  T15796A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral4
- Target
  Windows.exe
- Size 172.5MB
- SHA256 cc53ab2fe3c2a265b68b363d7d8c6314904892d1c1353d9ffaa7093a9633b6ca
- MD5 3665c7b2d417857d2b23a08c588d89fb
- SHA1 ddb99e3d80c5169fccb9974627d4ac12f7e9555e
- SHA512 6664d3b0bf11b0e0b19d9be0d6dcc18ffe3a40ffdffb24fe49219d8085862a52131b2d0dc8bb39abfc2a377d12f5367da24ef04df44e224096bbbde30444327a
- SSDEEP 1572864:F7NR7Rm1DKEM9Lx4vpOzDE0Yyb5IcIZBVAM9gjMdCjWqgXVbRgTsndR0aL/9eO:MVxsOcY7TR79T
- TLSH
  T132889C03E29A40D9E01DD1B58B9B9233EE71B8494B29B6DF275407522F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

credential_access defense_evasion discovery execution persistence spyware stealer
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Uses browser remote debugging
  Can be used to control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral5
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  ffmpeg.dll
- Size 2.6MB
- SHA256 113ccc8e701157d0d59283baa5dc1fd3b0eae2571fd825084d7a4d58697a5ec2
- MD5 64f3f2ae25b14f5d2d168ba6aae49ab6
- SHA1 f43554aeb7a1b20b6e9dcbe5408cc004eb7db27a
- SHA512 3ffb531da6ef1955f7b71c5f6e9e3322dafce78735aaf9b245c46bd5ccfa8a6a4b282b31b3aacb4e3b423412b9ab89f792ce37f3a9e6eb83983adfe7df38bfcf
- SSDEEP 49152:R1nRu1gjn93AXtsX7I8g4AScbz6Ox+pen6yfmb+ST1PqRrYF:RJsf83Sn6Ox+tP5F
- TLSH
  T1F6C5AE12F6D640DDD02DC074879F9623F63038468B24AAEF16909A243F6BFD42E7E765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  libEGL.dll
- Size 470KB
- SHA256 01b8a8c2875ecb9979de339500ce0e0b7ecc3c5387053ce27bea51e6a09e2d72
- MD5 b12e3c1e72935273492da1daee50eef1
- SHA1 3f93237b71ee1328cf25f8223e685de97d01d773
- SHA512 12346000331cde78ea08e9c0fef4635c77f6e85fb0e46706bbec1f23b0d7a7ef99e3930475324306ab4a46587d382ee3beb18d703e2765a8c1b7ece144c57983
- SSDEEP 6144:Omi12qlTgeUDsnkcM2nDl83BgENhYCqNSfY24M:Omk2qxgeUDsNnDcgENhYRNSfU
- TLSH
  T1F4A48E1577E444A9E02BD134CA574642EA76B4820F65FBDF02A493392F7BBF85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  libGLESv2.dll
- Size 7.7MB
- SHA256 fb6ea924fbb9417e4695ce414cdcbc299f13451dbedd2d9adb55479bf1cbf57f
- MD5 5082e41d7a57506fe6b4bd58f87276b4
- SHA1 2842372c18f49c0e1fd8123891be8587cbf13146
- SHA512 9e10d0d3269939f9a497f0b0937f0aeb9ec44627d5349cee589b676aaf95dde11c996e2eda158cf8e79778cfd948b10cb61538c9cc056f7b899a057e7e959f76
- SSDEEP 98304:DPqhbsPD8TDyGDsTnI5mvmKGtS17QXC3O:DP4m8TDyluKGugmO
- TLSH
  T1E5868B03F69680D9C04DD2B5975B9227FA35B8840B34B6CF265423253F77BE0AB7AB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  resources/app/afterpack.js
- Size 1KB
- SHA256 369c61b87014e091eb6881a2ca7aa6c0d24eb670bb12de016092724bedf6364e
- MD5 89a5858c3cc33aa49033df90678f00de
- SHA1 29a6ae7de40f59030a269b59c93d733c346d03a1
- SHA512 e615b128b4a30a52ed3a56a52cc814fae3299bf4e852965af7582fdd526dbd94d7a40f642fa4baa2e75af952c55fb33dee927e43fe9c42695a493db17a7e10e4
- TLSH
  T1C131329F37E3A17456F3A8C85B87201DE153D0033009DED8BA2C4B402F92138969ABDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  resources/app/builder.js
- Size 18KB
- SHA256 4bcd2a0a32d39f4fdaf9f881b5efac8520501f8f2686e72fd93b337cd61a6d3f
- MD5 1f3ee2ee0b3cd25fd31b02c7903bec9d
- SHA1 ea11edd3ff936f1380ebed3eb8691d4f22e89fb8
- SHA512 b3867cf7bfa726838eb86bb2d4d7ad663bcbccffe0cbd34f2d9c08f281743d82c51cc6a59690633285519ccb352d879c725082f8081d90d172664be2cc971861
- SSDEEP 192:Z1dX23qXvjGpbKj/QNdujanSOJsKwRiQn6dzJNA/NXDMB/4G9vS9yzAxRrjyg6pm:Z1dF/KdZNdWaAD6dzJNAFXRrOHmHMaky
- TLSH
  T1EB82A3D54DBB15341063EA874B7B0C116529EA03B601F968B68C83DB1FEA50CCEB66FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  resources/app/decrypt_master_key.py
- Size 956B
- SHA256 13c824ae22e8d724850dccdbf29ded9bbff1727e1fb4d00052219210aeb9d5bd
- MD5 a3132f8dab954e09eaffd24698e74c4e
- SHA1 9a133361192ad4e0bb0ffc9589f09153953b3962
- SHA512 b1066c8c07b2658dd271c13e62df19d93db04e0a63c55b1313a256efde6cafe3ce29b79ae6d68c0ed46760c7c15e47ecd02f6ddcf7d24f494d1a3e5ed2595ed9
- TLSH
  T165117A458C6CD46797C78806D901C4966FC97C4B26B0692EBB9C65B66BA803DF035B10
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  resources/app/dropper.js
- Size 2.8MB
- SHA256 f1d163907f0edba33e397d212e7766dc563cd42a278d2acd2a6300f2b46528a2
- MD5 1222b9f086f44c1592d6a3a4e6a137ee
- SHA1 03f061ea976688652c2dbb994e11698797192615
- SHA512 f2fdb401d2f661385df6841802e614f4a6aeca1be39921e189c145cebbd041ea3a93e79cff450e42295390c9c8ab441c9a0a4865f6890de7eea12d62587bf754
- SSDEEP 24576:/Xqxw7QA56hnQmJmaRjzN/evwFZaueJD900hmZ1I8zAgm/hLm2VeAR19fIRfcoBg:3
- TLSH
  T18ED59EB872087EE2667F135BCB95ADDD17A51722968FA4C98078BBC30973325FD21C09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  resources/app/injection.js
- Size 18KB
- SHA256 505f8499ae133aa15848c84af27d2f92f874864236ab07b8551cdbf7a7c8e2cf
- MD5 294d2b20a4d6b52d465c43fd6887ba49
- SHA1 8d7d32c1d75c6df97d39632cdaa9a7af2e6f9278
- SHA512 13b9a2403879a05f9c6ba1aa67aff6058ce91bde1bfcc2ef3c6759f8f291321c4a787c59ca3f966b87d8a9aba0ad56f6f5379b5d9b4fb1d03702a251d19cf5ea
- SSDEEP 384:WtqbZHo0jod96TddHkMuCIH5PKZrHZHPQc:0uZI0ZIH5PiHPQc
- TLSH
  T10A82D792DDAB1C62033255B91BDF90D4137FE3972890DCFEBA5C81485F8A4285EE0BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  resources/app/injection_preload.js
- Size 5KB
- SHA256 d69f463a4bdbdc6efea48a00181e9f4eb64b3a6447076c05b93cb764ecf78f49
- MD5 d9e178acb9879bdb701118cb2bd1540d
- SHA1 e0e57fb51ee229810f1ffe0340a2c99edbe44dbc
- SHA512 b782d6a6a56ded0d0758dabee0c760784d1eae75cd13f7f9f8c3a13f8ac48d4cd0b8ec9ffb139508bec37a39e59ee9e4aec7fae1fbd1697d9347ea3e1e2565c9
- SSDEEP 96:asc+jIr/OleDALClw6LmwhYJ4UoJHG6mFAVAtmRg3lWdKQoILTyKCqw:BcsIDq9Luzyw6JfoJH6vm+QKQoIiKCqw
- TLSH
  T1C8B195AAEC9300E1A473456D4BAF150021F3A05B9CC6CCA1FE2CA6442F6B64D7996BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  resources/app/main.js
- Size 1KB
- SHA256 4cd18a1197e53654cbad42dc93406623c2f43911b33c76f63f922a4f694c96ca
- MD5 f2b4264bd2ec0217f1ff94ae08e51c81
- SHA1 a62dec53fc2ed5483f2268c69b42162b9ab84b43
- SHA512 19d0eb4311462782e5aeb008aae3032980a681f291969c94eaf3ce9d34b2d50ac32133fabe459b7b81fbf5e1e729ebcc6bd64a455454772e5334db91c852d58a
- TLSH
  T127311E8C12A7A73490E0A7CC7BAA411B12A3D1637307E6F4F85C419D2F0113886F2FE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  resources/app/node_modules/adm-zip/adm-zip.js
- Size 37KB
- SHA256 06fcb246963fa166f92ad4626d012506ceff708cf247044f495856aeb1b62835
- MD5 87f79b08213335d94dca6d9248378c22
- SHA1 1771c2dc665ae0f255bcdd45bf1eb776572d36e6
- SHA512 25565260faf9078774394ee11e12e722f34436a5a1240cac26acae1fef027126adb996bcaa4d3c85bda112ed37bbd81a1acedf1d131a548607f6e2357f486f66
- SSDEEP 384:go4Xg+1yf94EAOOLl+ElSFRcgc+EAZDISb+BwkfViCbMSV+Ckah1QSqdCCkEctjU:gpg+1c4/+ElSFjEFwi4PILqdC82bU
- TLSH
  T12203744A2DF2132145B3B7785B6F9004B214E52F621FCA90BD9D93A43F9973866F1BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  resources/app/node_modules/adm-zip/headers/entryHeader.js
- Size 11KB
- SHA256 51233162e8fb1affd4a4f45a196b5a50d38a78bd0979370f7fd2e81518c64376
- MD5 eedf0f47628322f5b0b3ae983057cff5
- SHA1 1f3e481aa884b83c64444aa8c63dabb1f317e9d5
- SHA512 69a37e7228e4547a5f9ccddb9c013c227c5152d432f2d6e06af8506991648157b30555f4ee1232ff22e6848c0712cd77376a7e7d8bfa9c735b04b5347333b600
- SSDEEP 192:ybbx3fxLiIyycM9pWPrVP/UBq6krvJgS+PYfXllRHhzBf:yFfxXRcM9pWPBP8BqzrvJgw
- TLSH
  T12A42DC4E6AE321981E06A0A9CB27E2487757B0077906DB087F3D9345AF8CD3DA5F16C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  resources/app/node_modules/adm-zip/headers/index.js
- Size 94B
- SHA256 536e4b5bf009a3d9f6eccfbbc4157cb6de663d889e0826ea5f6e5fa17aaeb8bf
- MD5 64bc889b89f1c8a04a698a8f74e24e5b
- SHA1 68781da04cf1ebc4f03434ea5b2b65f10cca07e6
- SHA512 9eb207fa61862aebd9cc5a89f85757313c7f163ea0f5a15c16250f79845b9caa1d8109bc3e634a9ed3fb0616c71aed3005ace48eff0941518c778c3063613975
- TLSH
  T1BFB0128D55CB764911340745E119BC811447C0D56110C370BC00036F16C50DCF75E574
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  resources/app/node_modules/adm-zip/headers/mainHeader.js
- Size 4KB
- SHA256 28dd1a0db451bc94d8f3234e57d8192ba17154118f841c398e0de35acea286ee
- MD5 32ee2d71a960ba5082b174fbf8fe0660
- SHA1 41f529fc2ada2c56faf0aadbfe7ae5ecd8e94c5f
- SHA512 ad2c732e55f549ec8eec1300fb757d435ef633166031c3f66fbf40f650afb832509744b4b2757001f2acb9c8665b9c5ab214b7ac704828a93d042c93ccf19b27
- SSDEEP 96:riWDe6p2ciGztwfoH7gNJzaI2mhUJfPokt:rFDe6pP+Ept
- TLSH
  T14491C04FA9F2328C0A16B0B9634B94157778B6076D19DA0C3E6D9310BF4DE3E90A37E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  resources/app/node_modules/adm-zip/methods/deflater.js
- Size 1021B
- SHA256 6dc41b2460594cfa5136b797653c166b2f7403820a40f2fca17cca35a5de1b5f
- MD5 41fd6791497f7d74ee56a7753e08da66
- SHA1 bd62d07bfe703da89172fcfeaa8848d6ba5c68b4
- SHA512 5f16aeb477321470986a8c9807ebf3b75e979e5fb34156028ef56f44f38c4f4d72d9d086784e9dfedeffa61f91f973b6ac7e7ba1730eebd86bb549de2dbb4761
- TLSH
  T13211F9489EF32194B21B7796C77FAB0D927480131C09DD153D4CE2C64FA4E38D19EAD9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  resources/app/node_modules/adm-zip/methods/index.js
- Size 128B
- SHA256 d67714f1a04be942f90be77069af3ff4214aa8ee84b26edeff3a87eb0d8e2dc0
- MD5 74d54dda1e050cad9b31da325f92fb01
- SHA1 683b0412f3bdb3ae54cd809e37f456dade4d046a
- SHA512 88ff974e69207c427ce1c9161489a275c4328ba392da65b268614fd5c66ef9feb10dafe1464dcc5873221de61bdb045dcf47092760c973ec06825158978df3e6
- TLSH
  T1E9B09B8B19F575D9E2D416C1D133D0461483C0E213408750F11D017B1BD30C4056F9A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  resources/app/node_modules/adm-zip/methods/inflater.js
- Size 1KB
- SHA256 c5e4531a11385050d77a5069487b0be8e85c8e44fe6b214d68def321e74528ce
- MD5 c2bd839327d3c2f2f3b113484820a793
- SHA1 93f0554d43968d02625736c571a048422401ff8a
- SHA512 c9d57670318cb3bcdefa01366f8fa6e5a7ed54af6653a104f8a300814a46b46cd9a05da316ddfb7f7d72c8df4aa42290f77ee6ac6494299093776a0c8bf4ba46
- TLSH
  T1EA2180489EB3559A751B7394C77FAA0DA27480132C08DD053D8CD3C58F98D38C69AECE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  resources/app/node_modules/adm-zip/methods/zipcrypto.js
- Size 5KB
- SHA256 23365c7eda0ea098385dc7ec649517fc110ce2764d2e707c37bf6b528604e25a
- MD5 f77372d0d1787c0b6f61fd58cc6512af
- SHA1 36eecf16c7b836450d763d4389c9101701273c0e
- SHA512 973cdfbcc595ea6240c9e09ac1d17faba5148cff73a7a89a092212d8665e62391561116d823cb0e4d1457fcbe5836d30d9b8a27420234eb8f6354da494b497eb
- SSDEEP 96:7RFxIiQ1K80cAAbZPxijV/7jRcDG2+2Ihpq68rMyA+GBBEF/yJ/rMr5uJkJGWvLB:jOiQ1fUAbZ0jxdz2+thJ8FoDJ/QIK1EC
- TLSH
  T1E7C174857DF27522025370A707AFB807E568F0033308CB25B95FA3405F99578A7BAADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  resources/app/node_modules/adm-zip/util/constants.js
- Size 6KB
- SHA256 208e943a2e5faad056047f3c7991cce3cde637d8e272a564f2546210ebdf2069
- MD5 9557c90a448baec12cf2cb2f97e2c5a2
- SHA1 19ece17c4aed05723601ec510ad2020fb462cf52
- SHA512 433a683e049a8d2fa321e9cf6932c2f5075c83f1713a9d0514956310174ef2959d0c8378a039d27d0a34f321262f6cf7eee40066ca54da1b57c5483b6d00f089
- SSDEEP 96:Dtbl0W6xP0XM0gly+ESo5Etdt0f2cnHBE8WdQx8Z5h+IrrOnQTUlZmsA:DxyWCsXM06I/uSjG8WdQx8Z5h7rrO72
- TLSH
  T129D1F3A6A8C824536A01C850773EEEF2979DEF0B59645214361F4E8C2F0C97C7FA66C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  resources/app/node_modules/adm-zip/util/decoder.js
- Size 130B
- SHA256 73a0ebb00c4dce2124f07acf0b34374cb03a4384cccd1cd6f58aee27c35953d9
- MD5 36fb8dd4a6ffe2655530fd6c9c8cf1e0
- SHA1 85e85bf9a92432ab576876334e64b026ab3aa18e
- SHA512 f7e6e74931b368ef0c78f9ca6798b09ef9804bd4203b19269ba5fae0190aa59ccb5d972d8993f63f1925f042f0f0d4d730c667646be2041a9989b5e802c5d1ad
- TLSH
  T1B1C09B5674F0206241B7F1485565EF0F64C876651E05547739519BC4454C53474725D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  resources/app/node_modules/adm-zip/util/errors.js
- Size 2KB
- SHA256 d2d243647737c795c2db8aeba2e1f3841d5f76370b521d436cf465322dd4aab7
- MD5 d88386a6ea50c20cfd5ef4517f07bb70
- SHA1 3a75921ab1b86126b2788f2de773ef493198a0f2
- SHA512 84ed1fa8ecbee930b5f34553610ee330f548bd9a9cf9b37a474eba44c63365e1948eb4f0ef66d6798b54fcf23089eed0a25b34ee3c320eb7be913c5cf40b5520
- TLSH
  T1F45184416EA0284B04D680602E95BD1A3A6483175F543D86FFBC03942FAEEDFC9769CA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  resources/app/node_modules/adm-zip/util/fattr.js
- Size 1KB
- SHA256 31c93eb386a2bfbf19ad92a6bf20d510a8f1e7e90cc71d33dd888f89da12362d
- MD5 7d55146c79f5a2364cfe790b13230b2b
- SHA1 1a3549cb3b2d8745327c37e4aafbffdd736c2e0a
- SHA512 a2ed22dc83680095f2e3d0c28b810308d6910a8cb5fb4b3e28d50ecd0f3da5ff71cd0e3c00ef085341ad002fb1ef678de84de1f3a799bf80a6891033caab8b06
- TLSH
  T14241CF8578F731204D0FB5669A4F81A57BED9183150DB964FE2D4350AF2443C42F9BE7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  resources/app/node_modules/adm-zip/util/index.js
- Size 226B
- SHA256 dc5b230ed853947ea55c0bf69f0e525fbeffefff09aa3da296d541bb8898314e
- MD5 1916e3ec47c420bdcc49bf9a97c7a73d
- SHA1 c14a7e823e8e6b5cd473ce9612e028f03b045ad2
- SHA512 719b4e15c49eecf7d52859018f916043427474f02ca7b456f8dc0e2aa9f4495aaa1eca15fdc3d9b563aace6ec2d2b90c65ff0f531a3ddb9f3fd1a51dfc2c8255
- TLSH
  T19FD0C7C66FE53187621C49D0E262E4021DC6DCB31111D010960C8BFB4288CD186BBCD1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  resources/app/node_modules/adm-zip/util/utils.js
- Size 10KB
- SHA256 03318ffbe6d9447fdbcc5a92b4996590f15bfc3c08da8cf684f75ee34be5dfd9
- MD5 88c25db924976941618532c124b6bdc2
- SHA1 e6c8911e1496ecc041956144c79336f71a13c704
- SHA512 87cb589cdffca0f50727b878a793940b094f8ec72a38ed94375fffe2191133d2e15d8dc1a29b25cd4f521237e3246adaf31c82b9ec770231686cc18ba667006f
- SSDEEP 192:riQAJ36MRGhlCj3a2iMjgqiUA7cHz9Q9LMh6n2d+XuBmJVPVfSXMjkfk0MUoqwiK:W62wYqNL7kZOLj2gZPVtkfCQOIhcG6D1
- TLSH
  T1AD22108A19E23220C523B17B5A9FA90E316AD4A3121DDE50BC9C52D06FE143C46F9FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  resources/app/node_modules/adm-zip/zipEntry.js
- Size 15KB
- SHA256 61b6fcc1675725efbd7f0bc7c17529806bd3819b43e3794ffd067eeb7bb88e5c
- MD5 dc76411bba511d17cdcc1e5fbf0fa67f
- SHA1 3844131da4ec7e460c309e54cabd7c48dd0e195c
- SHA512 5c60dfc3b563448eee0d7def6e957eab54f3557904b31955ce71f5362057679b3be264a2c3967e8ab2fde28b9ddd036dea09cb8d912bd498e40a735ebd54b880
- SSDEEP 384:Sd0Gmb6whQz6TuJjjUZCL94kIz/S8+s3P9eqWVZYe:uLmb6whQz6iIkIzq8+s3P9xWLYe
- TLSH
  T13B621F4D59F372014913B529CF8F891A6224B507690DC906BF2E834B6F8847DDEEFAD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32