bea2ca4c9d9abd1ff214166d638792be974ffad7907a8a8ed0370acba800e815

Sharing

Copy URL Twitter E-mail

General

Target
unifying252.exe
Size 4.0MB
Sample260825-2l4f2swzev
SHA256 bea2ca4c9d9abd1ff214166d638792be974ffad7907a8a8ed0370acba800e815
MD5 e27d92658cebb4eabea7e74125464023
SHA1 c8ca0643693fbca5cda17886f478666ff0d35cee
SHA512 77e261afda1eed9ab1fb38d446a08f58fb7c8546aac319565c61a36805c040637f69b20d91521d7f6ea4e8ca571ba372d7ace9f115c03c39d2f3c9131cfc8a57
SSDEEP 98304:TIFT3aZ0m6b0GL3vdHLu5UMEyz4IL+ox9frfixLdRz:T03aZ030MdecaCqNOx5Rz
TLSH
T1361633A25DB08768D606A07737B8F3A787E1A51D2EDC1597871D8FC63C622C07F6A243
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  unifying252.exe
- Size 4.0MB
- SHA256 bea2ca4c9d9abd1ff214166d638792be974ffad7907a8a8ed0370acba800e815
- MD5 e27d92658cebb4eabea7e74125464023
- SHA1 c8ca0643693fbca5cda17886f478666ff0d35cee
- SHA512 77e261afda1eed9ab1fb38d446a08f58fb7c8546aac319565c61a36805c040637f69b20d91521d7f6ea4e8ca571ba372d7ace9f115c03c39d2f3c9131cfc8a57
- SSDEEP 98304:TIFT3aZ0m6b0GL3vdHLu5UMEyz4IL+ox9frfixLdRz:T03aZ030MdecaCqNOx5Rz
- TLSH
  T1361633A25DB08768D606A07737B8F3A787E1A51D2EDC1597871D8FC63C622C07F6A243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e
- MD5 3f176d1ee13b0d7d6bd92e1c7a0b9bae
- SHA1 fe582246792774c2c9dd15639ffa0aca90d6fd0b
- SHA512 0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6
- SSDEEP 192:OPtkumJX7zB22kGwfy0mtVgkCPOsX1un:/702k5qpdsXQn
- TLSH
  T1A8325C15136046F3E1D2853C542B3AAB6FB869118AF04E43CFB36852EF396C79D79352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 510e466a715933499fb9d5a1753b483826b2bf89161b9d466dd2ad7e52ede2fc
- MD5 c22c9d7b6937b8960fba4c8a145076b2
- SHA1 2e45c2dd6e5132a942fe940dccdaf771e0f9e81e
- SHA512 b3b93fb97bc0d16ac35a1f0e877bcf42324e19d21839b025329d1b27d8e96bc9c0cbde0a8d60b23fd0c864f62e3c287461108c6abecf53ac488de1fc16b47d6e
- TLSH
  T1948171BB62E40CF3C0840BBB41D71CA713B6DC702792011E98470E9A34C4A6FED2E705
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3
- Target
  DJAPI.dll
- Size 257KB
- SHA256 1d1668649b5071fb2525c02e445b81489ce52d84bfcc77d00ac60c7d4ffeefaa
- MD5 8d94c99591dfadbade072f5ce4ca4efd
- SHA1 8df5b49d88747a99d5336113a17d62b4027e2811
- SHA512 a608d9f7fdf9c2f4556762dd22fc27f4a74fcdf04ed75dae5d7ce86f765c4a99f193a745798f2ba8d190ee5c06405d8ca1fb9d782e8af197c8619f588b46714c
- SSDEEP 3072:a0MUGkJcLP4UAZg+j1FQyhQm7xol4aHP6UcHgAUR5lGkKOvrn:a0MUGYQQ/rj1umllaHPvxJjn
- TLSH
  T190444C00B6E08439F8B715B68EBB91AD85387D605734D0CF63D4985B6E72AE1AE31733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  DJCU.dll
- Size 3.1MB
- SHA256 b752fe25f954146161b8400f805543264a5a8c5a07d6ba6abba1568504492be9
- MD5 d09cd2fed001441173757d8dde519181
- SHA1 af4aab81cd1cc6cb84660130d6d2075b0b803716
- SHA512 4eebd5e7e5c5e7c673202c0ddbfd2d6d89a90d21e2b9e7c3f7e7e401298b399beb19f4d2f13bf4f613991d48d8cbf0f298480e787a7cc8330e20d45559085d90
- SSDEEP 24576:ElQUfBuGZYmluJdzzrGVFaw3dJNZNr0gPMwlaeufcXE:EWUgnmluXzz4aIHNvlaeukXE
- TLSH
  T18EE5091555F94204E1F353781E36E18A1FBBFC15A9F4C08FB25E83BF187A9589A22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  DJCUHost.exe
- Size 319KB
- SHA256 0046ef7c22d104342a2cbac54d035512a80e4bd9d1005547cbf99d7dd4398c86
- MD5 9194a9b0dbe5082c77d5b2ce9d3fbdc5
- SHA1 18f0c900c70b95645c03efa336597556ae5af82e
- SHA512 a95c703c1b2ce6df16c33d3cd304b23fba484b207294e690f2cbcb3e498598d9424e87bda285d115d08dd6c5c0a88880dda0ce07fb7fc59f7ea058f468fd9808
- SSDEEP 6144:gCVzOgdcUJ6KPkMYkYL7CE6oTiV0H+t+fpsLI:kUJ6eklkYiE6SiV0B0I
- TLSH
  T1F4646C107EA0C732D567217749B9976866E9BC604B6182CBA38C3FEDBE316D17A34307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  NonElevatedDll.dll
- Size 62KB
- SHA256 42299a7d4468cd82d2b9e8e7bca0ac4bd968ac325e8f3d20a572c7215d997fae
- MD5 ed4bcd2fdad6396540ee3c8faf71676b
- SHA1 95008bbbba5eccdaf806281ad601f4679f5c1ff6
- SHA512 034f822f82039c5c0631c32093ac1ab29b14ea0e7639a7f4a499b012bcb5982b30f0b7f783af80409cd1ccd3a42ed2b6192d3266cbc10b0dcd67116c171bbc7d
- SSDEEP 768:1nilAEdw42S7b/E7aPfihlNrgaByouL2bCkMmpav:1nilL7b/EW34HBy9SCkDk
- TLSH
  T1FE534B457A038073E4050A7892D987C25FBE7D033BE2A05FEFB6424D1DA13D8667E7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  RunNE.exe
- Size 102KB
- SHA256 d45331ee5f322b4267d3811ac599035802d33e8046f87c0548955a5e39595427
- MD5 2b1396e9d64da60a949b23d65219fe9a
- SHA1 e4e83cc4a5ff390b2c731097e0a0bf1d010ae3c5
- SHA512 dc9b702b4e714a5fdf981317a9121a9ffc05e6c65fd3164c079f9e8b342fb984e219743f8decc9440e73887540784445aa677e252c15e3453eb40d1a24381043
- SSDEEP 768:wGevHqbz312oj9uNBmCDr7juR5uE8srOqOEOgbtKSEZU9qZU9WxL2bCkMmB:nb7wopurjr7CRmAgetnEpFxSCkDB
- TLSH
  T1FDA3B40629028432F3090B708A95F5D00ABE5D3F29D5F05FF678BD3A69722971A7719F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8