a8f8ad87cd89d06df1dc673dd82c7a6ab56c90f9c25447936bf4902d258950d7

General

Target
Nebulastrap.exe
Size 73.9MB
Sample260907-rf77yawycs
SHA256 a8f8ad87cd89d06df1dc673dd82c7a6ab56c90f9c25447936bf4902d258950d7
MD5 1dfe71a354f56693c919bb6b3448f949
SHA1 41aa99f42ea66cb57da538fd0fce702e7076e6d0
SHA512 8664fea0c8376d4e0e5a7c3a39e43a21759420f6be0d16fb54bdb8c67e2977ed63882a6f88af68a7845ef67c5566844aa2d461790e6317c3f1668f739f4f68e4
SSDEEP 1572864:dVXGMK4XR3b9CHSCU/+UyPlKUW26a7KZJiIOK4hg6amph2IVIBP:bgYRSSC++Uy9D8a7KTL4hg6lph23BP
TLSH
T1B7083355BACA01DBE6EE363493E5C396ABD0A4CF437480EF95B8041308A3AF5D635B71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Nebulastrap.exe
- Size 73.9MB
- SHA256 a8f8ad87cd89d06df1dc673dd82c7a6ab56c90f9c25447936bf4902d258950d7
- MD5 1dfe71a354f56693c919bb6b3448f949
- SHA1 41aa99f42ea66cb57da538fd0fce702e7076e6d0
- SHA512 8664fea0c8376d4e0e5a7c3a39e43a21759420f6be0d16fb54bdb8c67e2977ed63882a6f88af68a7845ef67c5566844aa2d461790e6317c3f1668f739f4f68e4
- SSDEEP 1572864:dVXGMK4XR3b9CHSCU/+UyPlKUW26a7KZJiIOK4hg6amph2IVIBP:bgYRSSC++Uy9D8a7KTL4hg6lph23BP
- TLSH
  T1B7083355BACA01DBE6EE363493E5C396ABD0A4CF437480EF95B8041308A3AF5D635B71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  Nebulastrap.pyc
- Size 269KB
- SHA256 bf0e6dd491f69543bb63c913795fca8ded74bf5af8706ae03ce710984f1c118c
- MD5 24d76e93c58e811f862ccb522b2977f1
- SHA1 8294a9b59576cff4b7dc90d1a862df73a5efb5e0
- SHA512 475d3da74bf332124e35758f683c442b44e7c85b4df0880018bc9df003b2d2f75389e324eb5229cd6cf16e59dc6918eb6fc046543159b72858b72300fa919d32
- SSDEEP 3072:07I4raqgZZw2jk1vyULwQLw1gNKPLLw8o0STSul/otbQo7hKN486kWeYvgnFX9sN:0VrDUwYk1vyZgNKzokY/UldvgnFXm
- TLSH
  T176447D61B2F5543FEC27B0B5991A630EB734A013B306DB12B56E61782FC79A18923DDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4