cc07e4e132760db97646ef292c5545cc2f41a1eb12ef90d3da681c96be8dcfb5

Sharing

Copy URL Twitter E-mail

General

Target
StellaWare v2.2.zip
Size 12.1MB
Sample260830-3efbbabk8t
SHA256 cc07e4e132760db97646ef292c5545cc2f41a1eb12ef90d3da681c96be8dcfb5
MD5 f1c53d68e3312935ca7ba9a6ba9d5987
SHA1 fed2e435d804dc6108b2ec00382ac040e235aaa7
SHA512 7b96dcdd3863ccac7688950fec3259bea77fc32c84a67de59a2422f30d3feccf340756ad32f7c73a8822150e7b3cf59ef051457ac1149fcab35578858732459c
SSDEEP 393216:/Wr0bLUMFEldha393NN6pne5HZECjyel+q:/W4bLfeLhq6pOuel+q
TLSH
T14FD633F02B5B2DA864B5FDBCDD11952B36161785F503ACB406CE2B362AC63910ED0FD9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  StellaWare v2.2.zip
- Size 12.1MB
- SHA256 cc07e4e132760db97646ef292c5545cc2f41a1eb12ef90d3da681c96be8dcfb5
- MD5 f1c53d68e3312935ca7ba9a6ba9d5987
- SHA1 fed2e435d804dc6108b2ec00382ac040e235aaa7
- SHA512 7b96dcdd3863ccac7688950fec3259bea77fc32c84a67de59a2422f30d3feccf340756ad32f7c73a8822150e7b3cf59ef051457ac1149fcab35578858732459c
- SSDEEP 393216:/Wr0bLUMFEldha393NN6pne5HZECjyel+q:/W4bLfeLhq6pOuel+q
- TLSH
  T14FD633F02B5B2DA864B5FDBCDD11952B36161785F503ACB406CE2B362AC63910ED0FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  StellaWare v2.2\Assets\Branding\discord_mark.png
- Size 2KB
- SHA256 184e53ce01e05c884da9ccc46dd3d66f757b49c355c3f0303cbce2fa00fa4e0d
- MD5 88b94b47b45c22657a1a5a49f5fb5465
- SHA1 c769628fd8498865b76e540b9cbf39de1ba34266
- SHA512 8ed422c3ca091c7148219fe9a6be77fe73b7713ad50af3f9b486cfe344477c0fcb2a2c06708431fe66d0fbcafc978f9bc74581b53d6b8ac5fed39e75093867b1
- TLSH
  T130412D9531256899E86D1971DE254BD3122522255C335D211334C1FCF81FF99B015730
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  StellaWare v2.2\Assets\Branding\loading_logo.png
- Size 2.1MB
- SHA256 6f6ef7fd4586566d1105e310f2b5eb7d99ef35c9d5f005afe3817d3759e05b05
- MD5 c65c14e63f1ec87cd155f39ca148a102
- SHA1 7ce7f7e56d343330257914fcbeaaab65925ac6fd
- SHA512 8488dfd495a9fcd7432c30674fbe11726aaae3c99c856888e35eb2e35ff9430084944faed78a3dd09d23b2f2c92fd715043c9dd46710125582e632788371a95e
- SSDEEP 49152:Ad/2iNc3tatI3Iqnqv34bA7o30Khgee2j6YoxjyUvXLIqYxpsCE:s2tdatM3Y36A7ojjjfAvXLIqIpsCE
- TLSH
  T147A533C32E297F53E8F871B5DC04583E2B1472D77A42EAC12DCA5F6D09C63498BC4A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  StellaWare v2.2\Assets\Branding\logo.ico
- Size 51KB
- SHA256 a38b5fa8bdd5348295432d55a1dd0ba4da1dbaa624063018acfda03b9d109d73
- MD5 7528b350ecd6bc70bc2d8aea54740046
- SHA1 3bfcc24f0e34bb4e458b8c24da03a3bf064fbd10
- SHA512 99eea01d7f3c1c5b8c8f97c91c4fd751b65e74ee47118a646c74ab658f7e42af5c6ee9b8ce70d57e33ab1e528c1eb2ec555da9653aa5c1e53107e88afad201d6
- SSDEEP 1536:1Ny5X5abL7KYSdIY6PZx3TdU4VI+uFfD0Nd097B919hc:/OXEL7Klf6PzhU4VICj0959hc
- TLSH
  T1193312D0AFD78B3CC828C627566BA936F73517E34177F6838D22192D98760402BB6BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  StellaWare v2.2\Assets\Branding\logo.png
- Size 203KB
- SHA256 f0e4512294c559a5e45898c9463e72da1fb9a2cb3975daa447e681478e70cd42
- MD5 e4e9040f8dcee2a94495260c885e220a
- SHA1 c7ff468ffc319244b4fb26db5c75db05e63284ec
- SHA512 06b4a5aba86f613e373df882369d46d6564d659daffc3971e4055c4ff4acac2eac0f1ab7a216c74c258dfdcf3a98b84af1a6f238a0c749897046db74171dafae
- SSDEEP 3072:0CbbbbAGtmS7HOc7kweBSWAPvLtBYhAtmS+xuFIlIjeM7AicDdYRxEq3zPmVeRud:0muQkdSWAH7aA6uxAiGYc0i9N
- TLSH
  T1C3141290A71AD9B2AB143B757F0A7BE62AA9192DA03E051B4F75CF4144C7FD00CF6728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  StellaWare v2.2\Assets\Branding\stella_banner.png
- Size 2.3MB
- SHA256 5cec8f11f1494718f414d147b798f51c1efcf89fb7ce7561c478f8ce729e6eea
- MD5 18911e3b7b4379aaf45081b187c2f809
- SHA1 65457e0542a74689b96ff1ab5f80ef80569fda53
- SHA512 1c695eeb249f29d2c04f978ace30f963019cf526468d866af842b2789cc810892f72462489e2dca0592e46c19c6eee6959a742d10706f16938c13514ebe83a11
- SSDEEP 49152:PVaGlGCGKN02UorYHwB7k3ndDL5xVN7Dn4OasZM5u6pZs+VEsTVhdzJl:PMClXUorYIw3ztDnh7ZO7Mi/l
- TLSH
  T1CAB533B4223A14FDE55BBD39C842959B4BB3DE0DF993EC5010590332CA57AC52CA8EED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  StellaWare v2.2\Assets\Branding\stella_bg.png
- Size 199KB
- SHA256 33113f78a6ca2d0ea28c240863a59e704f800da031f4af222c4eb96ae6d91fde
- MD5 7db11df217b9537871f8e9b789ee0f61
- SHA1 6cc3570ad628cd919a00963042b5431099c30b5d
- SHA512 c299405ac7f930ec42727b361659a33835d5d4223d70d7a067ec7924f9ed203ca211baf82aaf1c3b2dbe59224eba094eb99ed9c5e6664052b2856a2408c530e2
- SSDEEP 6144:AA6i9MKwjS27M3uejMbZrGEyOht8ddfg8yBj:AVi9LMF7WAdGEyOhtuR+j
- TLSH
  T1FB1423A7440D0B93FEA3BFBD1F404AB537740A033F4488966AD715E322942986F937E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  StellaWare v2.2\Assets\Branding\stella_flake.png
- Size 29KB
- SHA256 3fc68632f660c6588f109c612ce966e60c37bf0d6663aa2632e7aaf763a97d27
- MD5 16acef9d41727e87f53f37d6fdd69ad4
- SHA1 b3c3565abc39565088e46bad83d04ace4ae49a8f
- SHA512 775fdeb4ae4628f753084260a197e15508fe6f28c038cc307c29f9ecda19e85b995f8917fcac3d5d81a21a0e8601151e3a329db78ac19c34886b605c8062f902
- SSDEEP 768:kXXd6atkAFwscbf/sb4vXcGSFMG9B5fvcNdwLW1AYodq4/t3bYy:M4atkAFwlbHaUVSFDvhczkeAYg/trYy
- TLSH
  T12DD2F1CB79BCD493C4B6B2A64B6968083FC7398C7591823505E22FA08BE57C7F284756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  StellaWare v2.2\Assets\Branding\stellaware_cc.png
- Size 785KB
- SHA256 8a3679f0cc66f91e236a8e7aee8eca003247e92928c85dbf0fa2fda8cf0bef2a
- MD5 5c84839ec6deba6ba3b9b32fcf6ec701
- SHA1 39e5e7f15cf974ba133ad0b015a94e9aae07e556
- SHA512 ce3de45cd2b29e0398f10c78b34f971b6b69dd594e32526cbe23d33f24d8ccf845914a917c27663c50a9e823902f54ef78052bdec6633eedc41a987f1c3878e6
- SSDEEP 12288:mZJtNr+UU22ehr5RY21BFGF+5SIK0xt8xTvTLpRxhf4FYAZ21WFRDIlWA2q:0Jtl+hg3LFnS0MpBRxhf6ZqWTDk2q
- TLSH
  T162052346F8FB4DA7F74763320245D925EE5A4089CDAA07E0430EE474B9D732A07A8BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  StellaWare v2.2\Assets\Branding\welcome_logo.png
- Size 203KB
- SHA256 f0e4512294c559a5e45898c9463e72da1fb9a2cb3975daa447e681478e70cd42
- MD5 e4e9040f8dcee2a94495260c885e220a
- SHA1 c7ff468ffc319244b4fb26db5c75db05e63284ec
- SHA512 06b4a5aba86f613e373df882369d46d6564d659daffc3971e4055c4ff4acac2eac0f1ab7a216c74c258dfdcf3a98b84af1a6f238a0c749897046db74171dafae
- SSDEEP 3072:0CbbbbAGtmS7HOc7kweBSWAPvLtBYhAtmS+xuFIlIjeM7AicDdYRxEq3zPmVeRud:0muQkdSWAH7aA6uxAiGYc0i9N
- TLSH
  T1C3141290A71AD9B2AB143B757F0A7BE62AA9192DA03E051B4F75CF4144C7FD00CF6728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  StellaWare v2.2\Assets\Fonts\62593142a696a55ccb710bf1_Ginto Nord Regular.ttf
- Size 229KB
- SHA256 71a11dcffb3558529d82e7c275996e00ac61899c22e2d3717f314a1a315b9fbb
- MD5 d123ccf2194f0e31ce8188b1e17f713a
- SHA1 046704dc610dfd1fc7e3a4fbfa245fc0bc4871e0
- SHA512 284fd6f8bf4fcc54e5108f415a7874fd597cfbad269c352811efa4c182717a59a836171e93efc9e7eea4e067357011faeb0fdf0d6c5a068a39fdd44533efff6c
- SSDEEP 6144:0RKfOQ2oZVQPQnzSvevYgqPsJIJKZUNDfZnoqXbf+d7UOw0:IKfOQ2oZVQPQnFF2JD1fZYy0
- TLSH
  T11F345D457160CB41EF675D3098A4F532F2E6BDBEDBA38743F03729B418860D11E6369A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21 behavioral22
- Target
  StellaWare v2.2\Assets\Fonts\625933f807781e4a4303f1cb_Ginto Nord Black.ttf
- Size 243KB
- SHA256 29f879f8c25e19444352c6b8aaebde44cdca78ed921ae24bbffadc63d55ae4ba
- MD5 caeba66c703fc462388408058ac91fda
- SHA1 b5f21e0ae9d297f9b26123abbe7ab6306fd67185
- SHA512 a0c31d5e63dc02357ac4e56ee5e6c10b7061e500341f50a2f1169a5764d9ff47806a6279a5c627aaccf3a80db51cb2e457c4742dbad1e26168cdfbdf8fbb5433
- SSDEEP 6144:SGEDUjbkNjapVEW6iy90FNfuq/U/rWcuKSd6wDSIe8:C+bkNjaFNfuq/UzzSa8
- TLSH
  T16F346D03B212E202EA534934D5A5E763E3D8FCA65FA3CB4B714BA7B86C930E11D631D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  StellaWare v2.2\Assets\Fonts\6284e0f599173e62453ac15f_Ginto Regular.ttf
- Size 224KB
- SHA256 e1b8d3a78823aa94c69715020fa72aa780bce2420db0c73d5a2e895c02c6e083
- MD5 9572d1927d46d80b8e8be24d3ec63b9c
- SHA1 002972394295b1fa77e6d0f76061f0b1913336c8
- SHA512 38d332391a58ea7dfe4b7e412f3ab91f2f6086954fba981d22086cac57decb9f7d58db8c0d30d8cff81641464392217f3ba2bdfa3a7a26d0774b117afe3615b7
- SSDEEP 6144:hQhf1bvB6lyZRf0hP892vnu6a+LkC93H3wsGrpVEZLCO7DS9XFuFGNUEUb1NpHDL:6hf1zB6lyZR8hP892vnu6a+LkC93H3wQ
- TLSH
  T1CE245D413150D601EB6B9A70A461FDB2F2E6BD6ECBB38E43F4373AB854460D12D93359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  StellaWare v2.2\Assets\Fonts\628637495e0b73615e1e27b6_Ginto Medium.ttf
- Size 233KB
- SHA256 71ad443891284774547f283aa2b622c2bff5d7980532d081eff1293af6a3b94c
- MD5 ede83583115319c5ad929edfbae5b1b0
- SHA1 43095d86e231338da5842aba5b3ddc2f158cf283
- SHA512 e9e14c1ffee34d64ba7d88f675159296af87ae4d64ebfc501c7979653403df678d8a5a27119bf06a1994bdc75e326ee1cadeb54074d97bbaa34deb448a1cc424
- SSDEEP 6144:IIS7v+fwbvha8K2u6u+aoL1CR3g3KsvruV9tLPq7iASLXdCFHNWYUMRNUHko0iXp:I7v+fw7ha8K2u6u+aoL1CR3g3KsvruVH
- TLSH
  T130346C067211D602D6274E3198A6D632E3E8FDA75F638757B42B77FC2C820E01E63796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  StellaWare v2.2\Assets\Fonts\6286374983556efc2e78b45c_Ginto Bold.ttf
- Size 224KB
- SHA256 9a4d98517bf98b4c29ea49dbc1ce1a9229e5c8e0595e524d2e116fcbc7dcd3f2
- MD5 ff994b568d4efbbef94a501b45877ec5
- SHA1 7d3c4666aa24cd9c95e510c22cacf508a65de1dc
- SHA512 43c800be0011d4f00bf4350d1ae2cf319dcef34cdfd714dbd72fda490e4794d19e29fe7df68d69f632a83a39333dfcbe66a5fe97d08a8a9d1fdb88f5e2090802
- SSDEEP 6144:zViE2L8uxidlOV7UMTpP7FjHHuQ9cMZGRYcgbCN3AY485TqE4wMUHNKB1QvI6oPd:zV8L8cidlOV7UMTpP7FjHHuQ9cMZGRYz
- TLSH
  T18A248D06B2409A06E6674D309CE9EB71E3F4FE669FA38747F01F5AB86C920903D53785
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29 behavioral30
- Target
  StellaWare v2.2\Assets\Intro\new animated logo.gif
- Size 4.2MB
- SHA256 091ef66fa1bd747a351ddfc71bb5db84a618f3241354548e7d19334e2513c60a
- MD5 da48114adfd46c87c128f924c222219e
- SHA1 63644e210a73029e54b7cfa4f1f1ac3494e9bab0
- SHA512 d1d68302a49031acbcf7147d30be87f397752c19613a7196e3f2a73a76fb72d8f732dc266c214ef447ae0c23cf83becf492e211a0ab63a592c6e70a14afc1662
- SSDEEP 98304:fWs64jWScuBo4o5TNx2QtQ1upWCSEs4ZK0IvPFb9x:fzr3lq5GQtUD74SPFxx
- TLSH
  T1D016338D063E9811B8F031707C6E66CF3E955DDEF4328CCBA855312F628A27D6447A7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32