b1407bb9faadeee0f7203fa1e94b00bec66aa6cce0fd165fe0146cd69ea2b629

Sharing

Copy URL Twitter E-mail

General

Target
PopcornFlix_app.exe
Size 3.2MB
Sample260905-eqkheaem2w
SHA256 b1407bb9faadeee0f7203fa1e94b00bec66aa6cce0fd165fe0146cd69ea2b629
MD5 c00a135c964a899f3d6bbf145ea6f10b
SHA1 d94fefe499c4c44943b45a3bef8e5d9b8f290a71
SHA512 fc77ec66ca3ee1ed9009abc2b12693acf6690891e924350541b7c62719bbd101837ca981dd7fd67baaa203ac7ce02a1953243c932a7ac6ebab9fca675c3cc9bb
SSDEEP 98304:5Ke3W6D7Be6vYngEfu35SaumX4Z2h/Z7hiuhBg:5Ksz7MgEmp1jD3Bg
TLSH
T168E533FAA1A28E36D81394F054F90C62EB8D60C405E6DBCE504C9AD714FC7365B2BE5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  PopcornFlix_app.exe
- Size 3.2MB
- SHA256 b1407bb9faadeee0f7203fa1e94b00bec66aa6cce0fd165fe0146cd69ea2b629
- MD5 c00a135c964a899f3d6bbf145ea6f10b
- SHA1 d94fefe499c4c44943b45a3bef8e5d9b8f290a71
- SHA512 fc77ec66ca3ee1ed9009abc2b12693acf6690891e924350541b7c62719bbd101837ca981dd7fd67baaa203ac7ce02a1953243c932a7ac6ebab9fca675c3cc9bb
- SSDEEP 98304:5Ke3W6D7Be6vYngEfu35SaumX4Z2h/Z7hiuhBg:5Ksz7MgEmp1jD3Bg
- TLSH
  T168E533FAA1A28E36D81394F054F90C62EB8D60C405E6DBCE504C9AD714FC7365B2BE5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  PopcornFlix.exe
- Size 4.0MB
- SHA256 8276d9e08a71fa9852177502d1a53d6e4b283231913fc64f0938239b81575d95
- MD5 5fcb39ee5202cc4b527054767785b45f
- SHA1 3556be7e086a1f513cf154d2d93b083a46d1a65b
- SHA512 c76f4328d62304923fedd6fc975b6d5fb3d6c3f2fdbfa0b77355bac40fe7a0651ea65239b7c75a1ae26c9e9cb95cbd16846da7b91b727b1a6eae4c6954e85faf
- SSDEEP 98304:hHPxIU8cBkPQ+rMUcIcPRKx1OmzsMJrcCFUbo:hHPxIrkOQ+lOQ
- TLSH
  T15B165B82F78A5CE6CC822B74A99F23395721FE305B69CB2B655C82341D032D9AD1FF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  WebView2Loader.dll
- Size 156KB
- SHA256 2f965e10aed3b356a408978a0e6d74eb86e3e722dd008fa9ad39f68884479e85
- MD5 11d7bd8636add5f848a99586718212b1
- SHA1 e51b5cecc7e0b339925ac75ec65688efe4a73ec3
- SHA512 b7281b04069359e863578e80cb42a76cc7594486f6f9acc3eba4294932bea527f8a67a0d1e3c95d502c438e2d9450f434f836a74f9f771cf75711c1b0c8f116c
- SSDEEP 3072:qf5y3UwE64Y+8eWi6aeagd1ra1kNQG/ZTbiWEtJRm7VAbmz:4y3UwqYlt7agd1re9WEtJAVF
- TLSH
  T162F35B5BB2E44077E17BC278C5A74A42E776B8110750AAEF036447792F237D0AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  client_sdk.dll
- Size 5.0MB
- SHA256 f333fd7ef2017da7c3867a48df81c90c953689363dcc949251c6c10b8e74b063
- MD5 5ec0f46458056d2bf8533e7efdbf6916
- SHA1 ee830e1b1b65d24fcfcc0a97a1fe727b086cb769
- SHA512 59432f3f3db71d7137e044012281712208783461d092b59fc25e7b4ba7ff37bb6487573f7b1054caaf5630693f94201959853a98f56f0e417aa47aaf7f696547
- SSDEEP 49152:xvPHPSWp43Tq0TN2CViWDsgBhjFbfXP2C2LgvmrK6Vi2MYJM5rJW7KXScuuI4JLo:x9CQC1BbXurK32MYu5xu6DBiord+so
- TLSH
  T1D7367B07F38481B9C09EC1B5C3479B36BE76B88A0621B25F1AD447713E6AF642F1E758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11