0cf39830d661b433276826903cf2ee9e05426da4f069545d3c4aab40e5191212

General

Target
Prestige client injector.exe
Size 75.5MB
Sample260826-xerrfs1zgs
SHA256 0cf39830d661b433276826903cf2ee9e05426da4f069545d3c4aab40e5191212
MD5 d5e318ca7abd2a2052de924d765461a8
SHA1 e09672c1c9526d9c3611074e629d2366caadce6c
SHA512 c754c9be76ed3c8b33d7bdaf04dd402b89cc4fa78bb916c51dd0d0cd1cc63cca3f50173dacb555b376f330cae931bf3af087fbc248a2a32e758b925a738e94a8
SSDEEP 1572864:nKXzjvUMOtMW2Q+dy2J0f0/rBdsG7bpip0WWdiIkK4cNpZ7aq5qq:KXPUX2HQI5BB7tE0WGN4cvZagqq
TLSH
T13C0833059A16569FF28DA737F2E1D91B3BD3244A875AC1CD2BD04D078BA71C9CE39C22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Prestige client injector.exe
- Size 75.5MB
- SHA256 0cf39830d661b433276826903cf2ee9e05426da4f069545d3c4aab40e5191212
- MD5 d5e318ca7abd2a2052de924d765461a8
- SHA1 e09672c1c9526d9c3611074e629d2366caadce6c
- SHA512 c754c9be76ed3c8b33d7bdaf04dd402b89cc4fa78bb916c51dd0d0cd1cc63cca3f50173dacb555b376f330cae931bf3af087fbc248a2a32e758b925a738e94a8
- SSDEEP 1572864:nKXzjvUMOtMW2Q+dy2J0f0/rBdsG7bpip0WWdiIkK4cNpZ7aq5qq:KXPUX2HQI5BB7tE0WGN4cvZagqq
- TLSH
  T13C0833059A16569FF28DA737F2E1D91B3BD3244A875AC1CD2BD04D078BA71C9CE39C22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion execution persistence discovery
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  agent.pyc
- Size 189KB
- SHA256 a32fbdad5728faaf4a8e841a9beee8d202f4bd9ac88bc7b7e3da5a2a1fe3a530
- MD5 02050bc8966a0ab38cc3d175a98d9f06
- SHA1 3ba88090c0c3b6150b06e5a2c843dbe1808f72f5
- SHA512 8266e00563b83b276e88f3b05f8ea12f6d89b897eb6cc78f0bac229c6885145f02d28d74428ee773ea44de4bce24004fcafc0a4f7dcc8275ba1c2f222ba52255
- SSDEEP 3072:Ep15EsJUw0GLp4hdTPCS/MqWkp56XOBXUSI/3oBL:Ep15EsJoc4hdOSkc56X8nYM
- TLSH
  T18814F6457B72CA7BF84AB37698272746B374C1F1F340CB1722A69069FE96B682C510DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4