5693a35c64b7b5e223e78e0d9d7684b883d5a81de19dd77a0bf289d551d4ad1e

Sharing

Copy URL Twitter E-mail

General

Target
NoRiskClient-Windows-setup.exe
Size 19.0MB
Sample260910-x4py6aed58
SHA256 5693a35c64b7b5e223e78e0d9d7684b883d5a81de19dd77a0bf289d551d4ad1e
MD5 ef5eca790d815ea6b9c54c1440ef085d
SHA1 ab503972d4490852d2314579d8d10a486fc252e2
SHA512 0d6da22ebddf809a5edf8e949a1250043b68c4476d9c0b0552267056ebdbdf5f18a6cbe992af54e7fc17455ee37c8ecd4cbf840c465c3c783bcd49e9d875529f
SSDEEP 393216:i20xq4uMk4TveRCmFXZSth2+HYfLBVjZsFR1G1lwDjFg0L81KrBN7a957wfSqxO:i20xqWnTBmpZSLpHYfF9OnG1WDLLhrBu
TLSH
T1131733B7DC77A206F70621316663CC2B0700F36285E853A1267D46C17E2A6BBF76D939
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  NoRiskClient-Windows-setup.exe
- Size 19.0MB
- SHA256 5693a35c64b7b5e223e78e0d9d7684b883d5a81de19dd77a0bf289d551d4ad1e
- MD5 ef5eca790d815ea6b9c54c1440ef085d
- SHA1 ab503972d4490852d2314579d8d10a486fc252e2
- SHA512 0d6da22ebddf809a5edf8e949a1250043b68c4476d9c0b0552267056ebdbdf5f18a6cbe992af54e7fc17455ee37c8ecd4cbf840c465c3c783bcd49e9d875529f
- SSDEEP 393216:i20xq4uMk4TveRCmFXZSth2+HYfLBVjZsFR1G1lwDjFg0L81KrBN7a957wfSqxO:i20xqWnTBmpZSLpHYfF9OnG1WDLLhrBu
- TLSH
  T1131733B7DC77A206F70621316663CC2B0700F36285E853A1267D46C17E2A6BBF76D939
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7
- MD5 d070f3275df715bf3708beff2c6c307d
- SHA1 93d3725801e07303e9727c4369e19fd139e69023
- SHA512 fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d
- SSDEEP 96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI
- TLSH
  T1CCF1C7B6F3D10673F9AB427428232F221B1AF5215765C1AB450316CE7661CE3FD34B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 30KB
- SHA256 7317e5508923f425bced2698bb89f79b00fcddcd1028f44b598732b2e3711464
- MD5 fc4691e51cdfac476b2fc63bbe951e82
- SHA1 6532da4545864c6ec95f62f27f2199bfd668560b
- SHA512 5b544832f1b1b8f2e1c6f8d61a839bea22c2c3d7e2a03671a12bab936e46a6f3fa3dd8aa53ec91157c1de08f0b349d6d2c1aec29385ad38cc0b2ab4c033c58ed
- SSDEEP 768:IMSeZbzz284uMJSmuGrAFKpnp0jdhK7R+qV0Z:IjKfAuXiMtXIV
- TLSH
  T16FD23918FCC56FB6E2DF1575240C596E429FC8180B14CE9BD7A25E22E9E63722EE500F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $TEMP/MicrosoftEdgeWebview2Setup.exe
- Size 1.7MB
- SHA256 17debf797a6c737959bc588236e897936ffac1af5f7e515e674ab32f9edfe719
- MD5 8ee098f5969d3395c0ed113bc91f36b3
- SHA1 8f6eda8bfeea599d3f0a2d818ad57defeba17a4e
- SHA512 5ff8fb0b9c12e8e605601aa34e43f31af17473a037e95934888c6054c426bbc0e804d9068c3e3582cb0b02f1aa4cb293f108a96d6b0562c70a0402bda6c3b9fe
- SSDEEP 49152:xiGu3I5VuJhf/tw0rMc0wBTlcjT7p3z+I6BurP:xi45cr9wm87p3Sor
- TLSH
  T15685220876E04031F1F32E315AF089B16A7DBC658F765ADF63815E285E38AC2E235767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery persistence privilege_escalation defense_evasion
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral11 behavioral12
- Target
  noriskclient-launcher-v3.exe
- Size 31.9MB
- SHA256 486d8c28dd39da3a2cdc1de072fe4ca699452d85c3637ce70b92d3027bca71c0
- MD5 bdcdf4ece0d3cdfe0cbd767b0758188f
- SHA1 32bb4e4480211f46da24fd9451f4a440abe24904
- SHA512 60546189314b2b8c5e1977217367f2fc56a4f10faa3005937c070bd18a567bad7b9970bcad004f9945dbd35efee7939f3b9c0b0bd0a6840c62d6857006a4eaed
- SSDEEP 393216:RcANfB5U+NCBcW3z6j/MOXu0BObpvDrxxdnj9gZfX:G4p59CeW3z6jXXu0BOdpxgFX
- TLSH
  T15877AD03F69180E4D0AEC478835AE637EB72BC894535B25B5BE4BB112F79F50AB0D319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral13 behavioral14