539f3d17568a8dee5841add98bd16b7f05d8cb1a4efd09e7da5e0f44009f8481

Sharing

Copy URL Twitter E-mail

General

Target
PEAK.exe
Size 83.6MB
Sample260828-e3kc6ssydt
SHA256 539f3d17568a8dee5841add98bd16b7f05d8cb1a4efd09e7da5e0f44009f8481
MD5 2fb3d1545d973a13ab19c7fa9500c75d
SHA1 bc828e3cf21b8e3ca6f539824de29db4c2458b3a
SHA512 4c5acc24e92bb412acf7e4d3e02d7a2dbdf07a9d760977b67ce894d6193b045ce67255a42ecf8d72b721f1a7a2ba9875159fa44c0e8fd515601824181f502d6a
SSDEEP 1572864:64CfKtdj3eUar+Q0YRf+6sYr3ab5sCiprLUoQalsjvYmxEU7xaH9/bc:64CfKfzeUazDd2YWsnNgoQalijm/Q
TLSH
T1341833E591B2C692D03B9E7E666099740D6BEE7CA6D8E06704193710F13F48F64AF80F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  PEAK.exe
- Size 83.6MB
- SHA256 539f3d17568a8dee5841add98bd16b7f05d8cb1a4efd09e7da5e0f44009f8481
- MD5 2fb3d1545d973a13ab19c7fa9500c75d
- SHA1 bc828e3cf21b8e3ca6f539824de29db4c2458b3a
- SHA512 4c5acc24e92bb412acf7e4d3e02d7a2dbdf07a9d760977b67ce894d6193b045ce67255a42ecf8d72b721f1a7a2ba9875159fa44c0e8fd515601824181f502d6a
- SSDEEP 1572864:64CfKtdj3eUar+Q0YRf+6sYr3ab5sCiprLUoQalsjvYmxEU7xaH9/bc:64CfKfzeUazDd2YWsnNgoQalijm/Q
- TLSH
  T1341833E591B2C692D03B9E7E666099740D6BEE7CA6D8E06704193710F13F48F64AF80F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1
- Target
  $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH
  T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/app-64.7z
- Size 82.7MB
- SHA256 2b6e0a0c17da7f5921f4faf01cee6ad98a773281c5506e3dc8bf52010389d5ba
- MD5 016ccc5aec1cff5fdff786b3d2779295
- SHA1 66dc03db2680d4d6dfb40632299cbe5f5e139527
- SHA512 013dd3bf9bc79e04fd434bf8961e0ab523448e74d836308ab35e886da8973da1c32bc89cf896cbcf53e5eed317ef8a6c5cf7c482a58ff763a4077ab37f9fed58
- SSDEEP 1572864:SCfKtdj3eUar+Q0YRf+6sYr3ab5sCiprLUoQalsjvYmxEU7xaH9/bK:SCfKfzeUazDd2YWsnNgoQalijm/G
- TLSH
  T1791833F591F3C692A07FE67E6A50E2B84DAAE87C92D4D067002A0750F12E54E74DF84F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- TLSH
  T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7
- Target
  LICENSES.chromium.html
- Size 9.0MB
- SHA256 b1ac2fb5c8f0407ec73ffbfcff46aa634a3acf034eb10ef3f69cf483f43e591e
- MD5 a6788c05c8f55285267442473bc145aa
- SHA1 a19630a8a0536a80f095e0be19b5a21b9f8b7945
- SHA512 c7125e3062ce1591a646424e6f7fca36f0559cfe37197ad10f74415471916dd6d386b8d3f9c15accd43f678777b8a6f7c515be28f13b97d200942e5f13191d90
- SSDEEP 24576:c4QQf6O36j54wRaXe1Vmf/6k6T6W6r656+eGj7/4po:xseGT
- TLSH
  T12CA6A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  PEAK.exe
- Size 178.0MB
- SHA256 c4abf4a0512990b8626062d73d9395d885cbf9ffd5cc8fb42d5a3f7bba022aa7
- MD5 41103f4fbff767049828ee25f1c7828e
- SHA1 3a988feb1911508fdca47c6f5d77b5e6a0071987
- SHA512 92ecef5ef90835f81e362bb54e9e5ea321b37c07b6172a514bce9499be41428d94e169031ee64a03ee25a59577bbb48941a52570c9e4e290e47f1160e6373216
- SSDEEP 1572864:J0ORTnjSB/Ttde5oe7JyhLfYE1xX6BSgj7zIH+r4VOv1QsiLBRzDlJXlSubMXEsZ:aVKQxx9
- TLSH
  T1F3989C03F2D610D9E05DD1B19B8B9633EA72B8464728B2DF26540B562F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  chrome_100_percent.pak
- Size 147KB
- SHA256 14a6a393c60f62df9bc1036e98346cd557e0ae73e8c7552d163fa64da77804d7
- MD5 3c72d78266a90ed10dc0b0da7fdc6790
- SHA1 6690eb15b179c8790e13956527ebbf3d274eef9b
- SHA512 b1babf1c37b566a5f0e5f84156f7ab59872690ba0bdd51850525f86769bfebc245f83988a3508945cf7617d73cd25e8469228974dd2c38415388b6a378552420
- SSDEEP 3072:Mz8JCGIdkwTPa/XKjKkxP1L2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Mz81Idk8a4Kkx5K18Gb0OV8ld0GecQ35
- TLSH
  T126E3E1D7B3F4ED7DCAA756F7A2260071ECF3462C0A92124B178AD4352A66748DCC8783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  chrome_200_percent.pak
- Size 222KB
- SHA256 20c93f2cfd69f3249cdfd46f317b37a9432ecc0de73323d24ecf65ce0f3c1bb6
- MD5 3969308aae1dc1c2105bbd25901bcd01
- SHA1 a32f3c8341944da75e3eed5ef30602a98ec75b48
- SHA512 f81ed1890b46f7d9f6096b9ef5daab5b21788952efb5c4dcd6b8fd43e4673a91607c748f31434c84a180d943928d83928037058493e7e9b48c3de1fc8025df7f
- SSDEEP 6144:HDQYajN6svyABnI86uKkxugx5GMRejnbdZnVE6YoppO4:sfjN6svyABTKkxa6edhVELoXO4
- TLSH
  T1F424F1C7A3F89D7DC9730AB3522601F1ECB211394AB6521F53DB9C357996AC988C9383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  ffmpeg.dll
- Size 2.8MB
- SHA256 94efdb523162f7a55884f6bc423012f3dd046f85504deccfeef59603307db71b
- MD5 5253864a60577a0aa98db449cd7c6440
- SHA1 f4423def8024c5015367747c624d035a214ef49d
- SHA512 1af68134a381499134240d9ac42874005012127a81ba77ac3f1497509ba298bd092d7a17e49ca831865034d716ff156186c5547dab1ab8484431bdd1757baaef
- SSDEEP 49152:/tOSF+Xn6Rjc8E+E4Og1JytTbEcS2E+X6CftBJyN/4O5Isy:/t9cWOgTyZxzZO/V
- TLSH
  T166D5BF03E6CA50D9D029D071979F9223F631344A8F2567EF16905A213F6BFD82E3E729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  icudtl.dat
- Size 10.0MB
- SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
- MD5 ffd67c1e24cb35dc109a24024b1ba7ec
- SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
- SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
- SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
- TLSH
  T160B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  libEGL.dll
- Size 473KB
- SHA256 c9f1fb6b4ded3404ad29e629874ff05852f48f82ac33ba606847cac0ebef79e4
- MD5 cc528ba62f3867b7ad803ff22a6e1c08
- SHA1 e13118e48060a58bff0f8d5c8394a3ff7b60cc95
- SHA512 79f74d6f951624b3f8575acff6612aacae1e9f3e32b0abf9ea9688887666097429bf35d8eedf9ad3970a30957696eafd747020c6bebb76e2fd9b2d2e8526e0ab
- SSDEEP 6144:f5M81DtTHzR8J6E8cmqLD0x9cDEZAw6wu7fPbAT1TAswwdph:BMkBB8JB8cmqLD27ZOwu7fPbAuZwdph
- TLSH
  T1D0A48D1573D444A9E06BD1708A574643EB76B4920B65FBDF02A092392F7BBF89B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  libGLESv2.dll
- Size 8.0MB
- SHA256 c636de2892cb651220331734ecc578003dfe31f6ed528ffffe66370b2114b086
- MD5 f7aa9fea497e88d41e61cd5090bcba53
- SHA1 54a9f86943d1c496d3a73dc888c39df7830194d7
- SHA512 6adf7de3f6462b15c7ccec8d4858d30f3cf042dd5698c248ee371b750896c222f7720c39b787200136eff80438d0fe977d1278f49aebb90d19ba9ada79175861
- SSDEEP 98304:6nXvuO/so95HjrmniuxV0OADYDOnOQP7sG+XC3OT56:6nXvj/so95DrIpgDfnBsvmOQ
- TLSH
  T156867C03F69680D9C04DD2B8975B9623FE3178990734B6CF269017292F77BE06BBA714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  resources.pak
- Size 5.4MB
- SHA256 c8cea345bb0b6878b329c9ffa0a1d0e99036bca70ba40ac7be5842ac3ffe45d6
- MD5 3c1b2f7b2cd5c7608ebc5954a853f964
- SHA1 3ad812cd6e5e1d41efbc4c0ae0f68eaa9f2f73ef
- SHA512 6fc999e482e97019b03704db5b0e8e8278769b3a23df15f93a58c6cb33f7576faa32a6f9b123e6917c26ff289693922168fa3b839a497ee529f65d77a061eafd
- SSDEEP 98304:snNlfLKTPeIoXG13gkPOGuKJSml2rwrxySNYtu397pE2RSvc:YlfLKT1gG1nuKJSmQkrxOwkvc
- TLSH
  T15346338AB7261D3BC8AD437B48AC45331AADD93A0610B857724CE0746E273DC5BC95BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  resources/app-update.yml
- Size 96B
- SHA256 3ee48316035553ca7816972e7dc9d1da6f832e29f21566def4fa871cd09c8e41
- MD5 2bc8418b02c0a92c73dbe6c850ba6146
- SHA1 abcb6efe4c5fea000e092d632886cd0a6748e71e
- SHA512 0f24b73fc6361a025c9aae21df3555911528b0b81285390c85bba4261b6109d2c513f2088db297d7acc53257421cb1f1a58b3bf1fe13c5afbcac63de27a652d9
- TLSH
  T1BBB012708249E4306E734824340C087025585053E2810170D4EA1628B0D386118890CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  resources/app.asar
- Size 9.5MB
- SHA256 438f896140c10ec0ae25fd1ef1a59d3287164890313d06ff16fe405fbea5f63f
- MD5 bc98a6210cd3797b7340752663a92613
- SHA1 b1c9b99c6be224f404dcd147cec15591db504fbc
- SHA512 063ac24371e0c9b0177e86488e38a79106859f671c626ad391957a04102bbc32c193bd952d91f3acfa0da26cffc41e239a47b2f3ba3c67faa3278d1a483c415d
- SSDEEP 196608:JBeYDBFFhEHVb+C8kHmnJ1vVSaOYpUMrkZ7ARmCd+o:J8uK1SCa9/OYpNr87ARmjo
- TLSH
  T1E1A6D086B5F6142246A360B44E8F4001B2359D073568AC64F9DCB7D81FF987CA2B7BED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  snapshot_blob.bin
- Size 306KB
- SHA256 012485d0f26435a42f27c1852433e18d065952c8290b426b5e3ac12286ad8fe8
- MD5 186507e8eff5f2b60ea168c3099cfbad
- SHA1 274b207de1c205a582a9eb6ac5a84df36bdfd7d2
- SHA512 6504d9cbc4f6d7615ca2f0e66d6a987b32b05446aad8a2aef1faf9fc565f3b1602fa0769cb84e40b98dd66e04f51644998d842010143a9962aaaf6b4341682a7
- SSDEEP 3072:6gC8CwQXLwqHMp2ubdJbhlsN2CZz6ZU7A9Z+alYu1dVjVBzpLDTA:6gC8wwqexre4awbtJs
- TLSH
  T16564FB05F7A0CB1EEB156A709DF8DF9A3235B2DE5E06AA0B32C5432D3979A340E0574D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  v8_context_snapshot.bin
- Size 650KB
- SHA256 f4bf1406c6e521f98dd39a2ceb6d81a8c0bf35055f062bdd708d98c53cd82536
- MD5 2cfc6a8da875c38728f909046e73eb11
- SHA1 317f38a9a9c768fa678106d39038c8f75e27ea8c
- SHA512 753e95f696aa69667edbaea24c44c5651f7a27a52eb0aa6648e2d2631a2e2f868ee57a5202c98013874a0f02b4d93f5300edddae3873d1a1ceefd1ed0234d273
- SSDEEP 6144:6BUhyeygCsJwqexre4awlTGWDg9oGhgX2nhxRg/4RpZqCaBPgPEkknFmJA:6BUhyeygCNXGWDcqmqNCaBsEznFmJA
- TLSH
  T158E4B767F794DF2AEBC95E70AEF7DBD23234B0899E0A651B3186532D3179B240E4024D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  vk_swiftshader.dll
- Size 5.2MB
- SHA256 a4c0d966165bbc827c8ed00ab4ecd4a611d17872f6c2beacdd1ffa39dd08f275
- MD5 3a7acc435c09a8e04309bd0970847ab0
- SHA1 abe8fdd0954fa50f238187b7707638211ed763b9
- SHA512 a9f7f4d4a7922268170e2dda5abb1f150681a384521941a38ecdf314af8099407dd86db76ea981363bfe99956fde3e7ac00c4b44c6cc6f454b24687114149bc2
- SSDEEP 49152:/CGqXVpyP/Xyk8pKe4rIAvp4xC2JXrjX72aqiOE+jFvboDUs2TXT3yirn8h1cxls:JOyP/ihYvc2r1O4Vz
- TLSH
  T171462803F2858099F05DD1B9875BA622F632BC801B72B6DF52A01F192E77FE06B39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  vk_swiftshader_icd.json
- Size 106B
- SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
- MD5 8642dd3a87e2de6e991fae08458e302b
- SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
- SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
- TLSH
  T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  vulkan-1.dll
- Size 874KB
- SHA256 36d6a57e7f6bad5a82c096fa21a2e0c1e2b27801891c0f5f3319de18b4c1cd8b
- MD5 dab7c6d9f373359a0ac2270dcb650b1e
- SHA1 7f848a2f22b894542aad891aa05ba65386440754
- SHA512 0c5783a3709c3492bedeabe886679d9d9f5674dbef0a23eae38a48d99826be060c6f8ff4e1cfa8404b9d99065ca88f32eaaebf70af1618eff2f920e8efa56140
- SSDEEP 24576:MwklBPn5I08Atrwoyz6Z5W1DYsHq6g3P0zAk7/BoxR:ML5AAFbyz6Z5W1DYsHq6g3P0zAk7+
- TLSH
  T121157C22AA648669D47AC074CDC24603CAF274921326B9CF02A45714BF6FFF47B7DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  $R0/Uninstall PEAK.exe
- Size 386KB
- SHA256 6b3605658480351aefb09e7c3823b2feec0d7fa8c1867485eb5a21b96d4f9db3
- MD5 5f06e16d8d1d32cf03cdfa7f38f6b61c
- SHA1 6efee694db23aee423a7906b123ef5420e055960
- SHA512 71330e706148b5a3e0ad353353e7937cf58c80f280c8811b73f6793dc7cde9653127a08a2e780cc57a87c905abdf0cdeb4f81e030db4181b70f1896255b42b11
- SSDEEP 6144:a740IAvPp+sgZSllHckJ1OQH6kBfu1Q5qdR0bCpo/rs2t0EyL+yaZ:oLPUZSPHNpHGQ0dR0bCpoYRKJZ
- TLSH
  T1C384BFC2E9801199DC210D3621736E725937AF75BE9CF9126EC0B62377334D3A57AA0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral28
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32