7b2a949bf460fb37a3888c9048698f43222a185a48323023df1c51e78a3ca1c2

Sharing

Copy URL Twitter E-mail

General

Target
npp.8.9.8.Installer.x64.exe
Size 6.6MB
Sample260910-anxmqsed76
SHA256 7b2a949bf460fb37a3888c9048698f43222a185a48323023df1c51e78a3ca1c2
MD5 8b2d475a92e67026afedf1b9e5f51dd1
SHA1 e251fcb743b2e7e4c0b0ee03125f6809d512a1fd
SHA512 52a10632bf5989abe73dd14e50c120240dcf010ce3703569f612923bc51cb9ffcde6a8cc79ac3a3ed43b1b1474857bf062799f85e3f8f24ae1a905282f934d88
SSDEEP 98304:xsvnBaJCKbjLOVLkdntuOLO+fRAllUJlsfX6bnDMzVHn+SSDYZrAFeH+SSzYua:xsMJCKbeVLUUOLvfRAluJlsmW+SzKxS9
TLSH
T16966338436B3E07AC8C189320B7DF3EF9136758D1B64E273B679728B1CE6B405E94691
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  npp.8.9.8.Installer.x64.exe
- Size 6.6MB
- SHA256 7b2a949bf460fb37a3888c9048698f43222a185a48323023df1c51e78a3ca1c2
- MD5 8b2d475a92e67026afedf1b9e5f51dd1
- SHA1 e251fcb743b2e7e4c0b0ee03125f6809d512a1fd
- SHA512 52a10632bf5989abe73dd14e50c120240dcf010ce3703569f612923bc51cb9ffcde6a8cc79ac3a3ed43b1b1474857bf062799f85e3f8f24ae1a905282f934d88
- SSDEEP 98304:xsvnBaJCKbjLOVLkdntuOLO+fRAllUJlsfX6bnDMzVHn+SSDYZrAFeH+SSzYua:xsMJCKbeVLUUOLvfRAluJlsmW+SzKxS9
- TLSH
  T16966338436B3E07AC8C189320B7DF3EF9136758D1B64E273B679728B1CE6B405E94691
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Suspicious clipboard content.
  A suspicious script was copied to clipboard.
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
- MD5 7854290f8bc473fb9fad1917b0065731
- SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
- SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
- SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8