Overview

overview

7

Static

static

7

Autokroma ...ER.exe

windows10-2004-x64

7

Autokroma ...ER.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...er.bmp

windows10-2004-x64

1

$PLUGINSDI...er.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...rd.bmp

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ze.dll

windows10-2004-x64

7

$PLUGINSDI...ze.dll

windows11-ltsc_2024-x64

7

out.dll

windows10-2004-x64

3

out.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Autokroma Plugins UNINSTALLER.exe
  • Size 382KB
  • Sample260825-galfwaxbpc
  • SHA256 faa2e9e8df1fcda49969fe6d3147982775c8ad0ebcaeef6f1a81d0546f5a4040
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstallerupx

Malware Config

Targets

    • Target
      Autokroma Plugins UNINSTALLER.exe
    • Size 382KB
    • SHA256 faa2e9e8df1fcda49969fe6d3147982775c8ad0ebcaeef6f1a81d0546f5a4040
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/modern-header.bmp
    • Size 25KB
    • SHA256 3f932a18d310ff3581a5cce10ed66204f89d9d9f58caf8d64be16aef79ad0d00
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/modern-wizard.bmp
    • Size 150KB
    • SHA256 d25f16534d7d397f7844c11a973449732a2c05959ae8b0d219dd944531223c16
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 3cdf3e24c87666ed5c582b8b028c01ee6ac16d5a9b8d8d684ae67605376786ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/nsResize.dll
    • Size 4KB
    • SHA256 29b0e5792679756a79d501e3a9b317971b08e876fac1c2476180d0ae83b77ba5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12
    • Target
      out.upx
    • Size 6KB
    • SHA256 90dd60058768960ee8c1f9d2432430fc2d397f52337df6013e994eacb992f349
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks