200b385a58676e03030ce1f7004e1e9944ad1dca54bc876d84f3accf55c1a959

General

Target
Firefox Installer.exe
Size 492KB
Sample260825-dgafeassfy
SHA256 200b385a58676e03030ce1f7004e1e9944ad1dca54bc876d84f3accf55c1a959
MD5 7eac71305d540a31da185df6942f182c
SHA1 afa13c5069ba2224dda82fe8b94b30bb4de5bbf7
SHA512 ee6e9f20151620178c34ff639cc2c8d6bfdda19f362b1d96c4a7cbd26623d49a2e87129d98eeaacb1641399f81d24806ee1bd621fb0d4082d429a6a01f0fe0a1
SSDEEP 12288:aMROxTfOnMmXQBejdp7Y7KRqyaveHHKtuiVduqM12uYEifBs:LIxinvXewo0qZveHHkd3M12dzBs
TLSH
T172B423BB5FE894DEE4C2B975AD5C55DB8AB58D192480DDF38031B800BFBF142254BE28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Firefox Installer.exe
- Size 492KB
- SHA256 200b385a58676e03030ce1f7004e1e9944ad1dca54bc876d84f3accf55c1a959
- MD5 7eac71305d540a31da185df6942f182c
- SHA1 afa13c5069ba2224dda82fe8b94b30bb4de5bbf7
- SHA512 ee6e9f20151620178c34ff639cc2c8d6bfdda19f362b1d96c4a7cbd26623d49a2e87129d98eeaacb1641399f81d24806ee1bd621fb0d4082d429a6a01f0fe0a1
- SSDEEP 12288:aMROxTfOnMmXQBejdp7Y7KRqyaveHHKtuiVduqM12uYEifBs:LIxinvXewo0qZveHHkd3M12dzBs
- TLSH
  T172B423BB5FE894DEE4C2B975AD5C55DB8AB58D192480DDF38031B800BFBF142254BE28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence privilege_escalation spyware stealer trojan upx
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  out.upx
- Size 188KB
- SHA256 d010265be33ead064c15604dcf5e90bf9f0608585eb9a04171294941e14a95a2
- MD5 2a779706848199e597315870c4b077d4
- SHA1 48c674022d55ddb45d741c9c901204471ac973c7
- SHA512 b092be4b0276c4fdc95ffa9635ae7be9b7babb0d3aa99bf9b6e17b8d53fc3351b1e0934ffc19639da89e580f028c5e9c38a2e78f84a071ddb546e619cf41889c
- SSDEEP 3072:488bdXF8FtO5dyzEAKZ/hx7c3unn+b09CIWncYodntK+C7VieM3SFZNt9ckP:XsdXFryQfP7nn+b0AvncfdwX3MmIO
- TLSH
  T14414AE323AD5C8FAD2532271CB49B7EAE1FADB180814493323142E5D7FBE846931D61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4