97c598349ab9ec91a71e0dca91aa0b241ee177710a494228db3308136f720a71

Sharing

Copy URL Twitter E-mail

General

Target
HueForge_Windows_0.9.3.1-Release.zip
Size 183.9MB
Sample260912-nkceaawapf
SHA256 97c598349ab9ec91a71e0dca91aa0b241ee177710a494228db3308136f720a71
MD5 bc10d9f875d00ace88275010356ab01e
SHA1 3df5def93e2dfea6ce9ca3c8207edc0a68bb1e93
SHA512 6580ad1226f2be6b4fb4f927a576150b1ef4f97ca27cd8123f3c05bffe1476b1565d376009223e5aa036cada9a3c09d9e5d6fb355f859efa9a10c9c281e5b634
SSDEEP 3145728:ZAN4gufdRWjehpQsz5xOtGYPCDlxjzIaVvkY+B1ydeMW31j2QlokRdC426Aucjvm:Ze4gufDWyhpQsfOHCDAYvGB1ywMoVokN
TLSH
T10A9833DC615E22CBFCBAE0B6C14A1FDBC03A91B6F60210757D4417A361EBC479B984E9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  HueForge_Windows_0.9.3.1/HueForge/Qt6OpenGLWidgets.dll
- Size 63KB
- SHA256 3941a9753884ed0a035ed95a03a3b7f4fc12c6fe8f67fca3aa9b82a1aeaec632
- MD5 db99b39f56abe031f77559631ad2d69e
- SHA1 8ab5c7dae10cbef725380e9068e3e7f56f9ca05c
- SHA512 2c5aaf5dfe4ef485080681d740e7cde9c12bdc98afa742469d961cbe7f3653da0ec37accefde7f5669fd2b431540b76f1e426cdd342c1b634b661cd932903ccc
- SSDEEP 1536:+D/H4ELaZO3ttYM+CS2m9i26ElKfb87ngKxngGp:YgGaZO3ttYM+C/m9i26ElKfb87gKt
- TLSH
  T1A0535B836A5A5085CA56C67E824B8F26F1B3F824D70387DF85A9D11D0EB33D12D7DB88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  HueForge_Windows_0.9.3.1/HueForge/Qt6SerialPort.dll
- Size 132KB
- SHA256 fa7080d50be093a2b1146f65b4ca884b6220957d4961b67df0555fe3e03efcd3
- MD5 6717041a3b1d4572fbc7044a552e8188
- SHA1 137c76c73ac0835c7f45e2356a2d2f38d3905745
- SHA512 8a94533efa0d3fab1304de3b41795dab6d4b1a39ec74ff61adb826c7ef63fae18bc68a15d4c71eaa2a3e6e4ea03d88e19ad9ad40b7d3cd185bff7a7380368ac0
- SSDEEP 1536:IHdej5f+N6v6nO4iiXbrC9/Iei9hUro4APhF25SAN9gKxngGr:mIj5f+KtZiLrC9fi9ergPhF2SANaKX
- TLSH
  T14CD33A9B77A011D6E4BED27DCA474A03D7B3F04093629BCF02158E662F633E1AE39255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  HueForge_Windows_0.9.3.1/HueForge/Qt6Svg.dll
- Size 593KB
- SHA256 da0da4afa90789bf7f7dcc61f745308b3e02af7afb74269fc2b1ac771b1f93a3
- MD5 3b1868555eab3a921fed9cf65efafde2
- SHA1 cfcef72e65e2c7e8255fe86cd2c338dc1886a1b0
- SHA512 077846233a1ccd9573251efa8d3b227981dc2e2f2bd5afe8749b1a0ae3b0d440e0a18852b64aa7e21906f1109fa43c5682bab96ae6be6232d36f211900b96eef
- SSDEEP 6144:6Hh/SX+Fpb1T/djaQ2zNW99V1H+H9XcV774W9HLg983pqcYFIPHZ6aEnviy7wo/+:Mh/U+FpBTpR2zNntkb9V8cVHDiTrf
- TLSH
  T138D45C67B3A60786D4AAD13CCB1B8826EB73700403A1D7DF41658A652F23BE16F7D361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  HueForge_Windows_0.9.3.1/HueForge/Qt6Test.dll
- Size 374KB
- SHA256 6d93033dc3a3d5d30be93ab277d6ebef9474e7887012bb832cbb124af6ebc703
- MD5 5136ca140cd979ceed3d4e2187892eaf
- SHA1 62330c15fd445f8fec4a5a4e4f93ca1266dfdd9c
- SHA512 de4007190553e77c244618c79699e5b07e57df63755fb96e2cfaab92fe5874d8e9c28911b8e162215a2d39dacd6bddf75f2048d2b47fbe8a165dab7113721a07
- SSDEEP 6144:9SjPlgh2ICVKlbmydbYwIkxgGHDm0r6ZDyXRnTqmGCTtJx0BsCAQVtX4Qmk3kcV3:9SjNghUumydrhXGStJzuVtpC+
- TLSH
  T122846C2FE79501A5F07BD07DCB6BCA07EAB2309843919ACB166D89061F377E5393DA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  HueForge_Windows_0.9.3.1/HueForge/Qt6Widgets.dll
- Size 6.2MB
- SHA256 36cfd5321d60623047f51bc9ce34333e1d090aca7a23b45e6c8a79f92d6a1aa6
- MD5 4a860faba366f3b6b011a0fe1f3ab7dd
- SHA1 fbcb0b60528943919aa3fb6062e870a116386dd2
- SHA512 c9622ac23e6154beea89b5d37bfb27d851a853a44acf04f0438169f59c8e87bbd61a1d216c23812374fdc3285fc5be3911eacc7d2783024144a273ede2d3323c
- SSDEEP 98304:+Tqb6Isci3FldorKq3Zj3X8/rbESofJetr:wqb6Isci3FlirK4Zj3X8/rbESC+
- TLSH
  T10F667C57B3AA01C9C96BD13DCB1B8A13EA72700543229BCF11658E5A2F737E11EBE354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  HueForge_Windows_0.9.3.1/HueForge/SVGToolsLib.dll
- Size 142KB
- SHA256 a99c68458686cd5001c3a48bde1f266d6c9c827e565455ca3767bfbdb9429a37
- MD5 72b787171da844150cf74034280ac539
- SHA1 4cf24d67ba58ecf13acf49998a0959ac7b8fc3af
- SHA512 2f7a1afb2ca00c2bdaf4141b09080c6a13df46311f455fdef1c6fbebeae4b34b44c9d4709a7d76834c9754ab5b588b8740a168d5ac290152fdcfa3f16d43ac43
- SSDEEP 3072:45IcEDH1jS8nHrWlDdQQEDTYtD5EhjphqnIrfPO6x7UaRtPB:4ScI28nHCdRGTaD5QjponIrfPLx7UaRT
- TLSH
  T151E33B2F33B701A6E175C13DC59F9906F773701697129BDF015A8A3A2E27AE12D3D250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  HueForge_Windows_0.9.3.1/HueForge/TD1/update/update_1/lib/rgbOffset.py
- Size 159B
- SHA256 c813dc87b283971fba6e36834dc6f740e99f14b3a51acff319a9a853d8e468c7
- MD5 59987dbadc96617ce4fc5c36fe67ea52
- SHA1 6eacbc2329c201484480481c088ae5313c4ba8fe
- SHA512 e5a28afd98b22459dd64a950ec47ea4ae066ffb7eec9017f886b40523d0eb45f78946042d24793c6a0e3134e7cb250aa9998e8c2e75e041aae955cbcbab22d18
- TLSH
  T140C04C78E03CE0005E449E408650E8B5FC187115AEC610C242F354073F1E9D53B43205
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  HueForge_Windows_0.9.3.1/HueForge/Tools/The Seashell Method.pdf
- Size 4.7MB
- SHA256 81a732818f40020d1b0a9a38b639c4f5b9fc7c1e59c2164eb46f5cd367776750
- MD5 6e036f369e117655f8c617f330cbf0ff
- SHA1 e897fb43ff5d71bcefcc4270bf17f7a4166f7e63
- SHA512 33153d29216bed2f27e9cbafcdf32e13a058aa1e7ad7b6ded293961b40068200af0ece4f9880b7555929431c1b150a4be2330275ad4df9ea8c8f716f85413a09
- SSDEEP 49152:zWD0K8sq/0S4GIG8z4ZKLMKTSw+fOHZeM8NfqpN686WrCuwK6gMf6Spp:zkdHBF4YLxINSf6fMKgMdr
- TLSH
  T15136AE13CC088A86942C47A4BD831EBD2F082A8DF5C67FFE11634E9ABE907655C5F45E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  HueForge_Windows_0.9.3.1/HueForge/Windows Redistributable/vc_redist.x64.exe
- Size 17.7MB
- SHA256 8995548dfffcde7c49987029c764355612ba6850ee09a7b6f0fddc85bdc5c280
- MD5 23985a8a66ae306aedf0a9feb1a3d14b
- SHA1 7ee9442ceaeef605ea66849f042b8410433c988d
- SHA512 b618f601a1989a696c8efa0208efd977a3bfe9a8df8ace8fae9eef20262240e7eefcb67ce466fe166bdc606d80d594d2de80b3b4e530749aab8e99f5cecd86d4
- SSDEEP 393216:Sr3bJsxx3E2DiCLwmQQp5MTFarWznCY1LHRqLJ:S3mx3D585AI+WDCYZHRw
- TLSH
  T1D717333160A0413BFBF51077B928A2202E7CE73C2B5598BAD7D8AD1D7D6A84147FB163
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  HueForge_Windows_0.9.3.1/HueForge/dxcompiler.dll
- Size 13.7MB
- SHA256 78b5e21a91707b4a567ef281a519c52a45b709561202f54c5ad79c5a315847ed
- MD5 0ca18af826757e8dd313d28dac9bf6cf
- SHA1 6502e2675707a52afc9160f7afb314ee6dffbb9d
- SHA512 fed5372dc6ef6b241cce6b78664a048a7a8410462cd72bc98bfdf601d7e025a1a4d70b14ac142f8df7197d0b6547af137c17209d6912af011588197e0a153f60
- SSDEEP 196608:b1qA9hLWHX4eSSgewvFmEGdNdKjcjftN9CVexNcpLQo:bYA9hLWHXJS7ewvFmEGdNccHAkxNOLQo
- TLSH
  T1E0E69D6921AC01E9D4BFD074CA178D17FBF2B46213B0AB8B06B406A62F677B1563F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  HueForge_Windows_0.9.3.1/HueForge/dxil.dll
- Size 1.4MB
- SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
- MD5 c9a7241ce83437d54a82522aa0b54575
- SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
- SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
- SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
- TLSH
  T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  HueForge_Windows_0.9.3.1/HueForge/generic/qtuiotouchplugin.dll
- Size 100KB
- SHA256 6e9784408b75adc57a28527e6ebc24baada0e90fb5bf4946ccb9798bd8784057
- MD5 a0e6e0e94ae7c5ae04ab028b07e2a82e
- SHA1 66bb04e40396caa46ea2691c096e3f9b81d4a125
- SHA512 7b7075f8f687c245c88faa9fe0bcf4103393dd746aa6053167140b66d5f16f2e14d794511ecae15a9e06f98d206b1027079e1ac81d239bc572e67e18ed5c54b1
- SSDEEP 3072:AtREm27KUarH87uyRpwD/Q7rU7kZRCrYBKl:APEmYQ8rrRRkN
- TLSH
  T17EA36D7B12E052D5D966C27AC79A860BE772B05967329FDF026046590F33BF12E3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  HueForge_Windows_0.9.3.1/HueForge/iconengines/qsvgicon.dll
- Size 77KB
- SHA256 92c6fa5cadc4161fec213f2f6cbb9d793436b222ee88369b70a97123b1e3302a
- MD5 6af113314061236f3a9718bc3804ed73
- SHA1 1db545e8bd732177a25102c3dfe65bcf356fc90c
- SHA512 69043f38e1290112e76c9225273ad5b6e596734212f614f79d0e4323bff99665442f8529cf24559524d1d8c43e527674bb0a84c951910b7f4b884ad538d74f22
- SSDEEP 1536:LL3+aD7ygGnT7ontIMUes8VSRxVsPSgCS1XhPIDgKxngGIi:LbZDCog8oRxVsPSiXhPIsKn
- TLSH
  T1A0735B2326AC2109D86AC63EC3678657EF76F5047392ABDF125184322F63BC16E79770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  HueForge_Windows_0.9.3.1/HueForge/imageformats/qgif.dll
- Size 47KB
- SHA256 cee83c066006c46f8dee16f33e524bac12f166ac667f4a86956473e8e207d68b
- MD5 75bb20dc90d5609c4626c6d5a1be93e7
- SHA1 9439751c7788e81e9fefd34e71004cee0e05f6b6
- SHA512 447b26b50b74c5682404e23a5fdbc38d875b5001f8cf37d649e226f1e046455843cdc19ce9879e6b0125d999695f0c7b74fa1029e20516267f8268a48816c104
- SSDEEP 768:2oTYg/qwa4IBpGtEa5DM9CQfPEQc+m9cV4h1xongKxnVbGYJBwfe5ALt:RTYFwfITLa6sQfPEQc+m9cV4h1yngKxc
- TLSH
  T114238C879BA444E1E5A3C234D1968A2EEBB6B664AB43C7DF4111816D1F733C13E3C729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  HueForge_Windows_0.9.3.1/HueForge/imageformats/qicns.dll
- Size 55KB
- SHA256 83ecab9232f204bbb3c9a2f5dca626ec9f4f31d466b457f91979a6b6ea43dee2
- MD5 775629548104dbafa8c780e07860b1dd
- SHA1 2cfa372016948fa2cf482de6151c8483217a3124
- SHA512 cde6778d6a1ac1d319c78b7c9be4781d74955a634a85a3ba69e1839be6cdb2566f7cde54703eeb0082c4f2767ee2e7638ee17d3bdb9aae553d3595692089a43e
- SSDEEP 1536:WB0EKj4q+Y5gP5zJDXRnMmo/IRZIkygKxngyOB:W614wgP5zJVMmCIRZIcKO
- TLSH
  T132438C07A2959281E59BC674D646463BDB72F4016B83ABDF0261C53E1F323E23D7E788
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  HueForge_Windows_0.9.3.1/HueForge/imageformats/qico.dll
- Size 45KB
- SHA256 82afc4eb27771e452a39fdc896bc638a138a0afb820d1b813b36cabba48c178d
- MD5 126226fe2bce89e39f377206d664e823
- SHA1 b3c1d8b22591ee528fbfe208f7d8421041e13826
- SHA512 144ab743071bc2d9f7ab52971e0d2f8eeecd9e3a42b6b2d4decea35feb0fb1ab6dd732f1d3032662b98e7907f08a4ca08044188b76eea8439d947fe95e936228
- SSDEEP 768:0LwsT0/weModaXZmpuKMjBxfYkgu8nDgemgKxnVbGYJN1vZ5ALX:8o/weM6akMKMjBxfYkgu8dmgKxngG1o
- TLSH
  T14D237C9392680191F967D678D8874A23DEB2F160AB53C7DF0222865A0F733D23E7C794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32