1d28ed36b02e99cfa6dce27c95d4d7d37ea68f931852a6780f6d5b4b7e014444

Sharing

Copy URL Twitter E-mail

General

Target
1d28ed36b02e99cfa6dce27c95d4d7d37ea68f931852a6780f6d5b4b7e014444
Size 1.0MB
Sample260910-3ybggaztbs
SHA256 1d28ed36b02e99cfa6dce27c95d4d7d37ea68f931852a6780f6d5b4b7e014444
MD5 30ae6ef6774b398c111e1758b4592f76
SHA1 361e37c5b8b70cfc07253f4649ae1566301b081a
SHA512 d0a83e30bfa86a5272f6f27b913068cbe5b34e87297996ef24584fd967ce2d8e204519f3de3cc85b180c2f721cacfb5e526205b8ecdb463921f96db25b2b1634
SSDEEP 24576:EVDcTG2xE9cphvzJ5dW9XKJF+BVTpVV60hH17ANEXIWI:Ed2Cch7QFKJwtDVHFAWXIH
TLSH
T18435338E1152EA6FE5530E72997159B0FE7D2E1654AF130B03D87F0ABA31A819F0C7A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  1d28ed36b02e99cfa6dce27c95d4d7d37ea68f931852a6780f6d5b4b7e014444
- Size 1.0MB
- SHA256 1d28ed36b02e99cfa6dce27c95d4d7d37ea68f931852a6780f6d5b4b7e014444
- MD5 30ae6ef6774b398c111e1758b4592f76
- SHA1 361e37c5b8b70cfc07253f4649ae1566301b081a
- SHA512 d0a83e30bfa86a5272f6f27b913068cbe5b34e87297996ef24584fd967ce2d8e204519f3de3cc85b180c2f721cacfb5e526205b8ecdb463921f96db25b2b1634
- SSDEEP 24576:EVDcTG2xE9cphvzJ5dW9XKJF+BVTpVV60hH17ANEXIWI:Ed2Cch7QFKJwtDVHFAWXIH
- TLSH
  T18435338E1152EA6FE5530E72997159B0FE7D2E1654AF130B03D87F0ABA31A819F0C7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 8165c7aef7de3d3e0549776535bedc380ad9be7bb85e60ad6436f71528d092af
- MD5 08e9796ca20c5fc5076e3ac05fb5709a
- SHA1 07971d52dcbaa1054060073571ced046347177f7
- SHA512 02618317d6ab0302324aae4d3c5fca56b21e68c899e211cfa9412cf73820a1f931e56753c904fd7e510c638b4463aedbfe9536790279e096ea0387b67013e0c4
- SSDEEP 96:/Uspq2y5jOEEQrhySvUgfj74/vvrTBzfYZA4YF3Telac1nIq/2:/erjOELhySv5f2vvBjiAflaB1nIq
- TLSH
  T116C1F7B656C005F3E40D04B93E31280F87FEE426073242769E9B1ECA19D2AA6FD68751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $TEMP/Consultation.xlsm
- Size 188KB
- SHA256 888098342aa1f4e52c30740fce1c902de5e826e894bfd9bf70702aaff2fd45e7
- MD5 a5ed0c1a2137e9ae2b530086ebbae18d
- SHA1 2364bcbe83baf840e1f0859efc0cb19687bf0c04
- SHA512 64383b437aec617d9024eb76c3d9641af70d61668eafd848eb23d9b90db62df6b9a2491e3b74ef3f875dc2b266bb5cf900ddc9c082cba3b913a27fa4c2f9cfe2
- SSDEEP 3072:dYxtbscOVMHv5+eSzgFs6aB1CfbwvRj1chatVwgbaYzWFo+TQ6X7vRpGPEo/q:dY7sLMFUPQoDwo9qBTh9Yw
- TLSH
  T11B14120590E3B0382EE96CB3EE70C9B0ECCE67AAE0C617715543AF75051DA52BF48B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  $TEMP/Gain.xlsm
- Size 16KB
- SHA256 892dab687037c70d2b1322df3b4cac688460dae6fe7648f2195b7188dd1e8e59
- MD5 526e0e9e172a6f4d55fb253b1f9dff01
- SHA1 9e4c58201496a53d8ab5c4692900b6b6f90a699e
- SHA512 0f81cc86aa791a3df959bd0ecf7d17c09d4ff2b3f922008f5b4a2fa2767b13d41cc084b0e1cf17672be415b9fd17c0dece2df0980770fc8f2d11ead8d6b3c053
- SSDEEP 384:wDHeG/pOTyxq2TuXdq65ateRpiUx3pyclSFr0WBpAwCKa:SeByxTTuX9hXiUx3pHEBBpE
- TLSH
  T182724CF2A1AD02A6688FF77B7CE08589F931C3506D93106E3F1B198D9945D186331FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  $TEMP/Getting.xlsm
- Size 149KB
- SHA256 1c06f5f406c273a52733a0a64b73ea18271a749ba3db137a4edfb8e0f2bef58c
- MD5 0b6d3ce131c9dbbc3a6672d16d6d5f63
- SHA1 cdfc5d4272e81aa4b47df2688849fa534101a5a4
- SHA512 e815897dd712f853c51702b1b5a48712962e48217314b50bde153e95976822846b52b29a4007cf1b68eafdba9adada57d13a696c26d6be85681054231fcd75b4
- SSDEEP 3072:FCCQeY0QItmtoZicKHFrgXS4JtAH61TdImdDJN6Rs6MDPGbW:AeYBt0i5mXbwHSTdImpJE6j
- TLSH
  T187E3133D16147BDA95AC2C3145153E603808223E43990E240AA9FBFDE595B079FFB7FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $TEMP/Supposed.xlsm
- Size 176KB
- SHA256 08e4456d9c8632c6c6abde5276cc9aee912c7679d40fbd6a2ca0ab5eccabda52
- MD5 fd490c0881db80e4ad760b6477a5bf38
- SHA1 e48965bf22ef4f68e32578073343b0e44b1472fd
- SHA512 73fc8536cab9c4e62d8f17a86683014f2540c5c094959569a987e5a13e7411a33f421f568b922b8f4ee582914f04596108cc4ef5dfd36cf18f36795709a14ec1
- SSDEEP 3072:mAPgT64wv7+uiwi+1xXZQHxYezHgrxMB1jUNpOMB/ArJXpaOdc4otV:n5c7zxYe7XvUNRB/ArBc74otV
- TLSH
  T10804128F34C1555FA52B847641D530FEA23A9F82793A218FB8D55D1EF2B2A02D44E2F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12