8257389d6264742d414404beaaaac869336c91f9f9af1e31ee081aa6e7857f3c

Sharing

Copy URL Twitter E-mail

General

Target
dia-setup-0.97.2-2-unsigned.exe
Size 18.7MB
Sample260905-145w6atdle
SHA256 8257389d6264742d414404beaaaac869336c91f9f9af1e31ee081aa6e7857f3c
MD5 6a2472af5b3df9506e5ec3d822edaf3c
SHA1 bf774bf6902e390d2a4ade45dde41f905c60ceeb
SHA512 e7004bf677d25ebef2dc95de9d571b901e4ee678edf0b5ed65217f554e3a844099db112584a4128b89bace21a517c4958a6aa4ffb73be8fca0e66c5466e1309b
SSDEEP 393216:P+xc0G6JizMOOmWw+gyT0JPnKXHjdVABdO008NdOS:Qc2iJ/+JTcfqt8NV
TLSH
T1281733CF2BE9797EDA858EB8431B0123A4B3DBD45922F26DC52AB119FC737889417311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  dia-setup-0.97.2-2-unsigned.exe
- Size 18.7MB
- SHA256 8257389d6264742d414404beaaaac869336c91f9f9af1e31ee081aa6e7857f3c
- MD5 6a2472af5b3df9506e5ec3d822edaf3c
- SHA1 bf774bf6902e390d2a4ade45dde41f905c60ceeb
- SHA512 e7004bf677d25ebef2dc95de9d571b901e4ee678edf0b5ed65217f554e3a844099db112584a4128b89bace21a517c4958a6aa4ffb73be8fca0e66c5466e1309b
- SSDEEP 393216:P+xc0G6JizMOOmWw+gyT0JPnKXHjdVABdO008NdOS:Qc2iJ/+JTcfqt8NV
- TLSH
  T1281733CF2BE9797EDA858EB8431B0123A4B3DBD45922F26DC52AB119FC737889417311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  dia/cgm.dll
- Size 31KB
- SHA256 4a04db6e27d44ab23ffddfabf26e82f4ef55dfd57680a6ae003da54bbd44f9fb
- MD5 a1764ef95d181828987575f56383a1d4
- SHA1 a6393a2730ec7fe8465df16034f41c23ef4027d1
- SHA512 cbea0382fb61ed76b31495e82e69c1de63bcbdfbecd4f1100bffb618cb33b7bc959b2af95043a430bbaffd8a10c91990bf0409c7cfbfcff9b57f37648e2b8bdb
- SSDEEP 384:eWbPCP/L19nzD6Lrqc8Qk24JPxdAW4P6VfTV9cnteW+JmPKp+hHMomwZu:ebr24NvC6Jct+YPK8GomwZu
- TLSH
  T1E8E2D5038630D074E60204B966B3573FCA669A913212C457D3C1ADA9EF9FA66FE17D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  dia/chronogram.dll
- Size 39KB
- SHA256 f39e39c28ef8149377e9d749b22b2c02913a18ce86cb773369a0eeb8ae9cb871
- MD5 1fd431b4af7680c8a47b1ea15251b28b
- SHA1 ae7f146125009ba3f0b79491d25c8461e19b0ddf
- SHA512 0906b23801389271b1e839215714863be6bb176fa846b2f2acc2adcfa96f99171a7c620423f6db661fabb371281a8c523c1f3fd52d9b5cc3be96191237a290f2
- SSDEEP 768:ZO2cLMod3tzzEf/+1bEL32V0QZFukWxo5t:ZODrzY/UbEk0QDulo5t
- TLSH
  T172030B07DD006870C02E49BD79AFA63A8975AE5525F09067BFD4DCD49F3A2506A23F0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  dia/custom.dll
- Size 55KB
- SHA256 31c22faef78da9b19f799388309f44f93f2e82334c8be80247dafa53f2acd7fc
- MD5 b24adbd918813c195e904d40dcf924cb
- SHA1 c7e3572e51ce90ad28924c8a8197fcee87bda366
- SHA512 686124bfdc5e36488ee87c95e0b55bfc59727278a7c376583fef45a37c14620c26c52bf6a626b7f091cb9270502754975278382c2f0367d6fc7a3fbe112f42d8
- SSDEEP 768:bTB3vLfl5jw8KzR8tehehsfKG/ll7+Dm7Kvc2NHsT0gCIRuo0f:R3vLfAFzR8gYhsRllKDFmGKuo0f
- TLSH
  T12B434B06D20060E1E99A04F97629473F6E345F29B1D450E7FFC4AEA8AF294E57E11B0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  dia/custom_lines.dll
- Size 27KB
- SHA256 e0413f1f44bfa5541a2f1c94dc53e3ac372aa279a6bb5fb644087d73634ae326
- MD5 1151675b754a7164ad1cf758a3ad48aa
- SHA1 7241a5aaa47cbda051256e4beb39f059e73b14cf
- SHA512 6a093255050e7b1cc14c1518c25c27100c69b0279ac37c99b944dfc1035e7727800897759853d01aea03a3109a02b223ea943ce73b98cdf1af63b7a4da856db5
- SSDEEP 768:19c/Q/EY6xZ+wO3B8bIkBmETa+LVcbfI1/NLWebwGlHaeYasUzoP:1O6uZ+wO3B8bIkBmETa+LVcbfI1/NLWL
- TLSH
  T1A0C2F70B9A0040F9D56108F677A6273BE536DA9236D08457BB6CBDA06F14A743F27F0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  dia/dia-python.dll
- Size 23KB
- SHA256 d0c8ea30747f6e6fedb3fc85140c6aad219b8ebf999d5484e289af30e8ff30d8
- MD5 53b77a87277570f100e0a7b6098da715
- SHA1 c71d107f608c423e5e26da7bea24c679acdc3433
- SHA512 45ee3c0b1a098af5882aef6883d7c21fb5fef97128f7ece1f030d7f0ddda1fb0744eaccdad134c8838be9ea35c3cace447bca7c7be47724806f16b228a1a7e96
- SSDEEP 192:VlV53+TZKiPfDlzXBsCouNS1hMszkleJ03FMn:fH3QZK4blzXaCoySob2
- TLSH
  T1A1B21933D94544F2E60A0BF567AA8E3ED935A990176140B69316C0E01E6A72DFF27E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  dia/dxf.dll
- Size 43KB
- SHA256 61b3d4b2d006e1be034457166d272ffb271ae823792090d583a1ef97a1b5e354
- MD5 c281ceea2dc96ff20e5fa8b1c28a12d8
- SHA1 62982fdf83094569c9d445c7ab5974ff071b5a0a
- SHA512 e4fe362a8e9552da2452b1fea24b0f7d4f7bea4560c0ef7d4abb4ea5deb9dd3f7d6887762ebf583a70ca1a3ee715a472263f80d1ffa712be30bdfcba0df86ef5
- SSDEEP 384:9i5mfmoxjiPKuDPff2AqhDhNhYUH8eJcAerdVBNR1i9esRPX4dMow:9i5KmoxYDcBbSUJkdbNRKyMow
- TLSH
  T17A132B05CB0084E9E26C11BE7267B33BD674AA617450D1EFDBF8A8F5AB116127D01B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  dia/er.dll
- Size 47KB
- SHA256 7c3fd3281ef57ea7a2fed2317756e1c2821c53329d105cd3ccd47011c91aaf3c
- MD5 b61b11f30ea3b0a3a83cb0fbf2b399a6
- SHA1 40542571a4f73a3a10772ad828ef067033d90090
- SHA512 feb534c90e85facc2166c06d1d1637dfac1415f66d64bd4d31b751e3f9b18fb7732ab66c1d8f6f5c55fb07d604051be906b935c51195b2e61281b32bf11a6f06
- SSDEEP 768:qhFfK8lysXNv5slyTtOnSgLqxxAt4TK2pUopt:qrK1uGYmLWxAt4VpUopt
- TLSH
  T16E23B4028A2421B0D56F4AF1A4759B3FCF748F0072E4157BEF56A5F4BF2A760692620F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  dia/flowchart.dll
- Size 51KB
- SHA256 a981064d9aafa3cfe3641920ec73e90bd00288603edba0ae62e035871904d6a5
- MD5 a9abc98a763c131278db39e4c770947d
- SHA1 3b7b613a0bc338f1aed84fd89a49e56c46c4edb9
- SHA512 513900ffd1efdba3a4eea83533f7ce4957d3a94ca7b48875735247adace8e2a0cfed7d5e08135acfc704174af4f056bf2acd95ae33dba9a6e12b4e3143cbf366
- SSDEEP 768:yf0NPrTlqFxB4d+jRZMwtywdgSOJ3UDKF8Dj5WgwIGqoS:ntNSnMCDOJ3UDUIGqoS
- TLSH
  T12933F9069D2C10B0E4EF44B9A87A4B3F89782745B6D106BBEF05B4F86F5E3547212A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  dia/fs.dll
- Size 43KB
- SHA256 74c9c705e3e30c4edda902884f9e5b20b5c0f736678b73348c18a43427bfe113
- MD5 d2eee1df9cfc44ff216bda0f98a235b4
- SHA1 679801e0da7482f66a751b55e6c8c22c82bc0d09
- SHA512 add531d2eee92afd5d2b1b64fa6bd92f55d2684a50997e03056ee44a96f0a3b063dfaa044d0e7f6be4152ff848e61db88f36ba663f101738d5f199af8c662693
- SSDEEP 768:bLtwSVfPDd5rQKXuclAou/Ue8lzhD1Vox:t/Thu1gox
- TLSH
  T11F13E89261909060FC1E08F5D4B6DF3F9B787B922DD04057EF48B8A88F657952923ACF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  dia/grafcet.dll
- Size 55KB
- SHA256 2dbaea71227a42535130304c08e6e17006e40b74a2ef788c2672c02606cfe98f
- MD5 92629f7df6adc32e219ba85f025c2294
- SHA1 33d00c47a145fd2518f90f05e64e03cf3c43c3f0
- SHA512 f2c9818d41737a18c228834100980f730ccd37706347ebae16d184761a1c54f13735c5adf62ab86f3f6dbfe1d0bac7e0ab349ad5d8509f39ebc1ea1311560b86
- SSDEEP 768:9/BYT4vnJs2HdJXxkra94nSYzqwi+1imSzvgmyW+oB:JBYTsZ+ra94/i+0PgmyW+oB
- TLSH
  T11A430B029A0070B1D57F01F6B97A2B3DCB386D8192E0516BFF5CA4F4DF29AA0691791F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  dia/hpgl.dll
- Size 27KB
- SHA256 0e9cda656cc6c064d6ff053a4181a48d14085a0354e28ff34ac316110bb1cc1b
- MD5 21ae008c1c2ff4017bb0a681a5e11dd4
- SHA1 aaea993fcb75f9f25300d0b139df99a1dc35e0ca
- SHA512 05b7a1608f3cdc4bc55158a4e026f09f210a3dca3414692336bd89fd7307e362100ad2a3ac050713784c775606b46d65bf3afc246b376662c868e8dae44f9fb1
- SSDEEP 192:JYlUUuMT6XqBX2t7khLxRnzxaKv/AcptFG1hMszkleJ03Mj4D:OmTMOa92Wx9zMK7FGoz
- TLSH
  T1F2C209134A28A4F1D45325FB72536237DABA2F503852D5E3B7029B95BB02B60BF17C8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  dia/libart.dll
- Size 43KB
- SHA256 8914bdd0d564a8640f214fdae72acfa512b03959828840fe4b94bad2f60b556c
- MD5 4eb781807a64052b7f821a580e9cb46a
- SHA1 905534ddb2bddfec4d4d2a00332f992ef1f6f2e2
- SHA512 233a5ef673a4cec9f389320b3cf2d00835327cf963636fea2781ce00ca9ab03992f0dd2b126bf41e41d36ffcb442992fb4d7a430b787c8ba4d52d453e0a9b3fb
- SSDEEP 384:WtOm9orrTpHNrde5sWfKIIsXO5ZIfObM9FMvyUN42CPI/1DxAq7S8AnowPq:096p1de5aIIsXU+ObMPMvHC2CPI/H4ob
- TLSH
  T115134A10524029A2E7DB02B861F7A73E893D9F253501C09FE3D09CE56F5AF5ABE1290F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  dia/metapost.dll
- Size 31KB
- SHA256 ceecdd16257942e11c7ac26bc1b0687d5c9dd215ab627175323eac87afe24133
- MD5 7e99c1eb682737b3d1e71aa3ec09b817
- SHA1 96178ba720984cc01751a4a792825783c7347855
- SHA512 37a3e98c55d9012e15479c027951f0242426f2611dcad52126f536284b40967c1564783a9c0bfa779bf199cf8bb6317c09879075941a3c0e6078cc0ecd2a2c80
- SSDEEP 768:yexFHUt/G1LH6ZqyB6lu3QP+X308HPPNoQ:lxFY/G9awyZ3QP+XrPNoQ
- TLSH
  T15FE2F8029F1090F0E54215B33312673F562755E6208285E7D3E2BB9AAF26F756E36E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  dia/misc.dll
- Size 43KB
- SHA256 290994c09b4f40091bbdc4f61c1193390dc05e81749bf157eedacf04bdd8cef8
- MD5 7066a43a625d21c7e732698ce05d043d
- SHA1 3278cf5c7ec3af071b1280f5f4ff359f4f5a7b03
- SHA512 f3a5ce7696de5cbf203075ffcec1529597076fc67c33ae54967341596478f5c2af0a5981361515536e2a7d110233a8a14201195f4baa4ea633279825a11dc3f6
- SSDEEP 384:pHmLoUX86k4kUXHLRT8msmNw/naI7HZ3gjZOyWOzFyqGDlArfoYprhr3o6YXXmpE:G/8mDD3WOcqGDyFi0pLdHPno9
- TLSH
  T1CA13F8039F007531E15B49BA9827573ECB786FA5A1C084ABBF98E6F45F542906E13A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  dia/network.dll
- Size 44KB
- SHA256 91c4e173f74c526f9452a80cd9f3e18c2982ae3d77c8c5ff8ecfdafe60908ff0
- MD5 177980118444b8643d177236f7367911
- SHA1 803586c6cd1f206ab775a94d5ce112e9db606ff5
- SHA512 0446de28d8bb3f57e61d2b8f3661caf4676929ba0e8ec8c999c8db51ff39c85de929e5bbb008afc7753c563f7fa2a8a3109991f1bc204e7d7ada9e996c58e656
- SSDEEP 384:jzsc3OTQWwzOiKkZ5YwuFVEcuMM6h2cORDAbIGQR+p3kW2EgdjjNZ5vlinkwIFZ3:fscRWZJ3uMpaAsHQ5gdD6cpl
- TLSH
  T1FE13F7079540B431E59F02FA04362B3E4AB85E60B3D454BFFF5C9AB4EB25391B92660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  dia/pgf.dll
- Size 31KB
- SHA256 7420b13a540b3e74d77fcc13ba7b89f2d18db4ba4833423d68876d67b3a0033c
- MD5 3a5ddf58898827dc107dcd59ea126e1e
- SHA1 13c0e0c3f02ddcfe4b41b9f5aad087402d9319a7
- SHA512 9c0e4c3b4791c0c74e123ff89ed1e812bd43ae96c325c3390108e0bcc5e61f0c9e6bd81a2c4e771e07c10e4e0fd78cb04d67ba198b137d1f5168c9dcf54b167f
- SSDEEP 192:gIPrPMIfnC7epVPjWc5w65tnJfSpi6D++jfsmqZMkDlEKkqoBobvzfra3u/zp6xG:LZfoO7Wc2wtJiiOHzsAKlayPfraPFHo7
- TLSH
  T1F1E2E8068F5068F4D89309B33252973F9A371D9630B2C1EBC7D1F4B5AB17A952D2650F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  dia/pixbuf.dll
- Size 23KB
- SHA256 c528da7a5edfc6dc08a8efbba3a1a09b4d3213af2c4a0ce9cb78585cbf5f5666
- MD5 441d64fea27cda4dab21361a91874bbe
- SHA1 f1c7f380484ddad0fe95a46ba7ffbc4e08b5ac0e
- SHA512 41fcbf99837b219a19109bb3c77509626100bb2bb43084b8b0e22d4124c82b8e1c1272c1691d170991047821da674b8d4e2d461480c88420408c8d72eccd5170
- SSDEEP 192:IATjt62p883gqHeXJXlV0tBSVEp6q2JQ3k61hMszkleJ03p:/Twf8wzXlbcBuM/ov
- TLSH
  T1C3B219379E0158D1EE1A5DF532E7973FD930310122A064B7E385D9A05F02B29FE27A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  dia/postscript.dll
- Size 67KB
- SHA256 6397a041f7b6801073e0c4f6c23c65a95332917afb9afccb387dbbd4af383267
- MD5 625ce7aeb8b659a7d091997b1c98e161
- SHA1 e26d8cc9c12f1ef0475fc0b79adc5c34e49595c2
- SHA512 783b49288040d0e65b98dd3b531ea49b39ab3181d9312a0d38bf764db855b283e11764a2d1740cfc32f8d9957dccccb1de216e966a0203c2d0b99b0dccdd77a5
- SSDEEP 1536:RvneP8u6vckU6YzLJm470wxG3nmq/GRh1rTsm8J+uzkW5kYk6zoK:dLFR8z1m470wxG3nmq/GRh1rTsm8JMGP
- TLSH
  T1F663080D8BA148E2C08D05BB33635F3F997FE65931D010ABD7A2FDE04D1A679B619A0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  dia/pstricks.dll
- Size 31KB
- SHA256 dd8565610d97331b3b9d5b7c805586001c94f881956bfd4fa663f57b7ba58834
- MD5 5a4c5873bd5bc1afd4ddeffcc6fd7c2d
- SHA1 486eca0d77bee04b27789474060f28cb33aee78c
- SHA512 3016c51cf1cafccbe55556ac9b96851da9067c080f9031e8042d1c4d25ffb70b1ba4f928197b672422eef900b8482edeef1cb340b3660f505763830a5212e3fa
- SSDEEP 192:tVIdpvAx6Qenp8FK0z/QOWMtiVEju4oGPHOuIsP4UxEmtNJl3+Hw327PjYYyNJBH:AueMxzIOW74oGd1xCQ30PjYNNJIFyojI
- TLSH
  T198E20B02CF1058F9D98308737302A73BD93355613193C5E7E7A1B9A9BA2AF593A1790F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  dia/sadt.dll
- Size 39KB
- SHA256 2df3f83c35e292d2590070cacb9f6ed66338816ab744dea3cc13fd7e495fcc05
- MD5 75b7d914acc4c1377bb65a14f415e5a0
- SHA1 115d972e07b17bbedbfc9f632f122d305e5f3fe2
- SHA512 b1e21a5657a41f7813c5c53c54c23110b435543e9c8441f46f0bd7ea247c43936b2d856fcdd654291af89dabf336280d11a7c09d57a6c143e283c73211452d86
- SSDEEP 384:mw281V5fHPl51aYx+s72HKLgRKUrRnrecrHNvrwyEWJNQoYo:r28pfH9aY77YKwrZrlcwJNQoN
- TLSH
  T1330329039D006431E43F49B599F6373B8B79AA21A2C0807BBF8D9894DF35B513927A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  dia/shape.dll
- Size 27KB
- SHA256 22faa49b2ec7c6fef14bf889507bd9a72582d3ed51345b7cd806588084c72b10
- MD5 906b7e240a1b25bf4df6738bab7161df
- SHA1 7972d3e7390f88c860555832b5436cccca8c55e0
- SHA512 c988c74494433440ad33e68a77d1f86055fe5f41f9c7a9b1c985b617812b7d519705617eed3cd5ff1b16d0bf286ddea63e2b922389ddb6c8ace71dd2192698fb
- SSDEEP 192:JPREL9/8q+OStrWAJGdAT72uv2XdApWXE1/dLtUF8T1hMszkleJ03O3HrJ:LEL9gOMv2XdApWXE5UFeow39
- TLSH
  T114C229024E00A472E5A615F377E6673BEF762B8071906467D750ACA02F1B76A2E37C0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  dia/standard.dll
- Size 379KB
- SHA256 fcd8c0076f2b8f58a094c2fda6ef69899a0acc9673747e72058af12c1f2f9871
- MD5 9c22b7a39f804481056ba17bacfbe7ba
- SHA1 6869d871e95640a8daefca36b65c35633c800220
- SHA512 d43f7f49ed5d7f1ae85ffdbde8b3862c1d12f57b38491ae2753678cae93343ecbaf41e1e09f90b7f2c8903f62d677d569e5a1f56b695f14422aaa752ffef6467
- SSDEEP 6144:weXomqfGASroz5zIKxcuX0Z/ZhZ1ZxZwZUZCZoZWZbZiZEp:weXoLuASroz5zIKxV0VrHPeW0uw9Aap
- TLSH
  T1F684A503966CE51FC4B60BB990EF93BA6275FF84E212851FD6D83C173626A807E451F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  dia/svg.dll
- Size 39KB
- SHA256 86b884cd9d16df1258aa497128f80c6335e6fd7c242a062c8777ab1165f0d4e8
- MD5 dd8918d921bbe705374614c6051d399e
- SHA1 27e3df4877aee07890c2be5860c463ec4ac2f804
- SHA512 ad8794b300aaf8cdbf84a2b576ec4ccf36c8149fe69643cf508a459c9508f2c40ecdffe211d6e4eb122aa6596689f371bffb3d329d836857f7528fc2fb606b64
- SSDEEP 384:unBcIsiA64pCo4dVDvvLinnPNpBMcTOCCxgrj/zp5xLzB/gqg5cPZdoC9:6jA/k1d9vLiPNoQO5x+jrvxvZdoq
- TLSH
  T1AC032942CB24A0B0F2123CF3B721173BEE725FF13551549BC7A2996C6F1AA125F2190E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  dia/uml.dll
- Size 219KB
- SHA256 8d2e0ed27b4fea580cf0dd30feb011a69d6d40f3af968b3a165b5bb4571e8c4a
- MD5 ee8ef3ffff8620409f5ad051d18fbd75
- SHA1 6aaaf01c57ea193ce1d57dbebc4404b6d892b1a2
- SHA512 0df814342eb2ba04ab775a267922146bb7576b81de0ab827f6e43cb64b3206ae6a2d8d807ee087fba2128ca276430b953e4e85c7aa8bd5ff19bf7ab071cb2d0f
- SSDEEP 3072:YGUo8Ueh88cQZdKVm1PopdYVyUXaM3vkNiP6MQzFfz:YGUo8UeSVgid6yUqM3vkNcQ5fz
- TLSH
  T117241802CA582028EE6F09F50436667A9B7C5F087311D86BF79DEDB19F676D03812A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  dia/vdx.dll
- Size 183KB
- SHA256 204df8f8729c5a9e318dc3731e0ea1077a338c3bd0238808c9f3f80659dd9968
- MD5 35adddd6bd45d141f65f34e7668f87b1
- SHA1 bb0ac91f56104840de1855daf378a4ee68287216
- SHA512 5ac1ee95dcf22755f9adc9e9d0af7e9f681a3044d91a2304a554030d98c6ba4fffeeb3eb371251d85c9d47f548a5fb89981b042e8fddc604c7c79bb94c858f81
- SSDEEP 3072:FTTEcYH12aaotsa4aTNBghltKGyLO8q29VXa6ej/sYwHVA4bLbrqJrabfjV9RHYE:Vl6fargX5
- TLSH
  T18F04A605C2C5C45CE22180F2511B47333426C6BB3A90E55B4B958FEDAB376EAAE19F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  dia/wmf.dll
- Size 39KB
- SHA256 0789d5e678ba08649fb0d97de6a6e3f9f15c793ac2ce59e237fa50b6646b856f
- MD5 bdb5475883bb69fd82110b24b651e1d0
- SHA1 3d94650ab20616ae928175a0ec62ee986039bd7f
- SHA512 3105e1bdd8beca1c270514e83197a0f05660b0f9b9ee1332b537738530414c0babfb55f85d383312261de2041bc11b75a01005ebb429978a390a82554cdeba04
- SSDEEP 384:29RVj5bC7ThqCWgwlxgjQpUi71cBi7YT1DWcSesjoh:mE7Thq5gwq+UiCict0oh
- TLSH
  T1CD0309118615A4F0D536C4F676926F3BAA3CDB852290898FC7D7A8B49F05B173F06A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  dia/wpg.dll
- Size 31KB
- SHA256 11abc32c3d1d9d2ab8c00cee77e8fc8114cc8e1cabbfa57bb674425d4b64a38b
- MD5 581b01a1677c6d68f547af683c154353
- SHA1 670d5ffc435e2fa5d67863e1e3d7085b09466377
- SHA512 07a8b51b2a39b1e5d78c7cbf8397f34ac743c912b26ebdbe0a2aaa77b597a0a60a8510e228fd89c034f1f64bfdf41c63d234ac10bf43e8949850e47b25243b62
- SSDEEP 192:B6jrJuZ8upce03K0xPvlnB2GGGx10zV8pv2RZjN4DsC/bCE6CEWVyE1hMszkleJb:Bm6Bc3K09lnB2GTxKU+RZpLWXoU
- TLSH
  T180E209038B109172E0A3D5B0B3975737D635DEA0345180A6D7D29C79AB4EA27BE2BD0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  dia/xfig.dll
- Size 47KB
- SHA256 dc0ab27648589fb99eadd11f705512f0f31f2e35095d1a299b4f8e3b0c9b84f6
- MD5 6bb4f34cbf403658f93b90d0f2d818a9
- SHA1 0042032be24405a0e56cb08ed26fb0eff4cd4885
- SHA512 c2e2d4d5316270d8a84391b28090e2714b2299d4f0d3248d03b4a9b5315decdfedcc8f15883224ab127f39659928608893c9ad49849e7cad442122c5ec23d8c3
- SSDEEP 768:VT16/GZuyQLgM/aQco9hOWM2MHYw/bsqo4Zam7zKoJ:517edoo9hJMvHYMbsqohm7zKoJ
- TLSH
  T1F22309858370E9B5D26340F73235B73B9E354F43219190A7DBE1A8F1BF23A56AA1340E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  dia/xslt.dll
- Size 27KB
- SHA256 fd9830425228aeca4706cc3eba5084e7b9ab720a977ea5f14912d1a8a09bfb9b
- MD5 ac5e565152f0840e9d65259e41920f3b
- SHA1 1d57792514a78afb300d5338b7a9ce44d2d0e323
- SHA512 5410027028722e47b9337c900f99c03d195204ee0941afffe2693dbb9faf653674e94f017f19531a318ad87ccb57791c81dcf1c9fd4853b3f14a429f8001c071
- SSDEEP 192:+ykrnu06J/5shygOMRfvt0/ZUsuVm3/0jxwlF2GrV1hMszkleJ03L1:+2LJ/5ngOiJXCbFFVo3
- TLSH
  T15EC2D6535E401872EA1109F261B72337EBB5679432D08806EFB0BDF42D2A69A3F5791D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  diagx.py
- Size 11KB
- SHA256 9d2fba8d589447cef20dd7250f594541434229cf7350fb93999caa1f5d963f0f
- MD5 424d00c30391709317f7c087e3048fe2
- SHA1 daa1cc59448ade76e46d36530ed85e929bf2fe3a
- SHA512 ee5d17668a399a53c6a4b9226256a2f0a523c56e6f36f987edeb330ae0b5da2e64d27791739bad42884d4f2d9a2ab77cefa26c02986492fccfb6cc5d54b407a7
- SSDEEP 192:6vY5mDy8Urb6KTla8Bn8ihVz+eJUMaMO/j5HlAjv:6vwc02KTla8PaeJ4MO/e
- TLSH
  T16132747E57DEC51A12A2067E8C04784ABEDE9402963C1726BCFEA63D39468072074F7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  diastddia.py
- Size 12KB
- SHA256 309aee5af775652c55bd1734a8d70561e6dc4279285bcfee4bf1d70a743851ab
- MD5 c6185d90ec657652021aa07026419f7d
- SHA1 3dc60cf91832e41aac7da3c2072e7d41abbc93c0
- SHA512 d0fa0530df158eea20105dd252059a4b13194e997254c88a6213a0bc1014ad594703101f771ba33c01a89f00377567c6fca238929b854b857da40a53d63f17f8
- SSDEEP 192:ZfDA2HzqjGmIr52W4mjwLJkX5kXgku0RkXwIBlRmkXw7BKVsrRg+MkXf3h6+lh6m:ZfDnH2imI1wLI4Q/wSRLw0sg+9vP79T
- TLSH
  T16A42D0B693E58B2F0D53011B7A18984BCB098557036E1254F9AD92F20F4E852ED73E9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32