grapeloader | 2c75b87f4791ec0790861a6e63cf859363fa7cc40805a58d5856c4d7dacbd993

General

Target
jaffacakes118_653db3b63bb0e8c2db675cd047b737cefebb1c955bd99e7a93899e2144d34358.zip
Size 329KB
Sample260911-1xy52aeh44
SHA256 2c75b87f4791ec0790861a6e63cf859363fa7cc40805a58d5856c4d7dacbd993
MD5 37e6f87c491151458a2148a964fe8dc7
SHA1 d3dfa69a2c0ca423341da847cece542dbd5c5f70
SHA512 b4c262562122b0e13f56eb6f30ea6ffd8b6c744ef98fbb1ed99eb680b73337ba68035c295014f552d36e315a323d3f287128cc0befbffe7bc6f552407829b0fb
SSDEEP 6144:ltlZSxRD4G411pxTfXkLwzA0QOHxjBblJNKlUOGG4ZyDEbb:DSxt47vtVA0dpjKtAyab
TLSH
T1E6742383D9839BC462C8651649FB649E3B00458C37B5EDF348F2619F189B3AD36EB12C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  wine/AppvIsvSubsystems64.dll
- Size 128KB
- SHA256 78a810e47e288a6aff7ffbaf1f20144d2b317a1618bba840d42405cddc4cff41
- MD5 f474f6cd156e53a994ae3d25dcecb50c
- SHA1 3a7b4a507db8ac2aa59c83a59dcf1242411d14f5
- SHA512 b11bd56b01d4917bca6f48ad14b685cd9a360659d6431b697ea2187fec9f4ea56edca15cfcee14927cb324ac12886ccb50c73f2992b0b94432cae8f706e4d523
- SSDEEP 3072:ZDcNCpdPBXXnMaM8X5AefFrkDuXHN3xOiPU0i:ZvpdJXMWiefFYaq9
- TLSH
  T196D34A0772D240EBF06E923480535B1AA372B838466CDF6F07E447569F53BB64C2BB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  wine/ppcore.dll
- Size 178KB
- SHA256 d931078b63d94726d4be5dc1a00324275b53b935b77d3eed1712461f0c180164
- MD5 e025fa8354968f298af3f6ef2f22d7d3
- SHA1 b4221c83a3fffe7bc358dfc613c3e58fcc522a23
- SHA512 fe94d1ceac87b4907917683384dc0cc88734edca6236e21d86d3fe5018671ed6cb86b249d5a65015dc8119c328a6140dfa52609ded07de15e3e40bd973d4fc9d
- SSDEEP 3072:tIGcUg4CHNf5iI1azsrj5KhwQR79hqpJ0sOkg7tyCFYUX:Qlxza4rj5Po79hYJ2pnFYUX
- TLSH
  T125040809725520E9E9BF8038C4432A11F97174A44728AFBF07A5837A9F277FDA83D764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  wine/wine.EXE
- Size 1.8MB
- SHA256 420d20cddfaada4e96824a9184ac695800764961bad7654a6a6c3fe9b1b74b9a
- MD5 e06fbace9c2297e47e6bf991f2681b2b
- SHA1 56248469a7c079c4174f6c8351b48294bd7a57e0
- SHA512 922bb5abe5e521683b910d71168783a2c8333acf6bb0570e0d35fe62bb7f3dbdc3834e143aa3826019fbc843a88a8bb412942000f760fb9c051486690bdbe6a4
- SSDEEP 6144:P74BeXsm81c57ZXFzY5Ucyw4TapP25xxlq4cUcMeTOI:P7yKs78A5UcyOPexxPcUcMeV
- TLSH
  T16B9533C6BD16E8CEDEF85271194EED33EE203F5D391A1911FA80B76EB53A2523904139
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

apt29 apt grapeloader loader persistence
- Detects GrapeLoader
  loader apt apt29
- Family: GrapeLoader
  GrapeLoader is a malware loader written in C++.
  loader grapeloader
- Adds Run key to start application
  persistence
behavioral5 behavioral6