f1e5d842e96367aff831e096e2b3fddf2db409b103a641299d009aa0bd46a167

Sharing

Copy URL Twitter E-mail

General

Target
WarpDeskDesktop-x64-1.0.0-installer.exe
Size 25.8MB
Sample260912-wekgpstycz
SHA256 f1e5d842e96367aff831e096e2b3fddf2db409b103a641299d009aa0bd46a167
MD5 e39ea635980af715b8d297cab7d8fa47
SHA1 f9864781f1e274b77bb7ecfb8203030a4aa0fd34
SHA512 659918de3fc818be3d43146328b28c2534206352a6ee9536d25a396c98e8f7e66d16bfee500f81ea84fcd45bfe92f3d76696447a5a503d287f858847cc9dd912
SSDEEP 786432:PPbQz662df8hRXdyBdmGWwD1NONWNtUUw2QF:P9L0RXdSdpWwDKNWN+ce
TLSH
T12447335EE0A5DFCBF8BF5CB21FB9D4328EC2F16112662A244C6145F6B38A1D42E8543D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  WarpDeskDesktop-x64-1.0.0-installer.exe
- Size 25.8MB
- SHA256 f1e5d842e96367aff831e096e2b3fddf2db409b103a641299d009aa0bd46a167
- MD5 e39ea635980af715b8d297cab7d8fa47
- SHA1 f9864781f1e274b77bb7ecfb8203030a4aa0fd34
- SHA512 659918de3fc818be3d43146328b28c2534206352a6ee9536d25a396c98e8f7e66d16bfee500f81ea84fcd45bfe92f3d76696447a5a503d287f858847cc9dd912
- SSDEEP 786432:PPbQz662df8hRXdyBdmGWwD1NONWNtUUw2QF:P9L0RXdSdpWwDKNWN+ce
- TLSH
  T12447335EE0A5DFCBF8BF5CB21FB9D4328EC2F16112662A244C6145F6B38A1D42E8543D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1
- Target
  libgstcuda-1.0-0.dll
- Size 170KB
- SHA256 e7cbd88a5fd0db131540f7f110f8a0a1825405c5bdc0387a1b9f7e3ff1818890
- MD5 1d07b839616f1a417977a8c877f8b3b6
- SHA1 9788fc273de11dc2f01991198ae2a83be3dbc3d4
- SHA512 572344a230b1bb7a532def58362f0d72c0c87b7a30e2e2ba527e40b9539aba69dbabfa273311a9e5a116fd209db5347ffe4fc4b42a8810858cbf2f7d37e81bf1
- SSDEEP 3072:8QHdc2ilPiTz2/W8oMibNY8DkQi1iNs1pdddQd53+14RvskzguvuB04GeLm:198Pi30WTMibyxQi1iNqdddQzu1Avskv
- TLSH
  T134044A36E65924DEC9B7D37889CBB333B9B2F44453287DBE1B0084701FA0A59F62E954
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  libgstd3d11-1.0-0.dll
- Size 248KB
- SHA256 aa188cef39ff6f33e4b4558fc3811892bc0cdd18a92fe1bc2d99f57dfd228c28
- MD5 48985530b70da532aef063ea0d8b18b3
- SHA1 dc42457620a3557b9a478bc35c3069792dc36454
- SHA512 b478a5ca3ec84e520d97ce151242879f4ed6577c90d9a912e9472aee18ca55cdb253086988318dbb90ca119338df21d4196f1f39696732c228ec6ec3fae8241f
- SSDEEP 6144:QaV6GTrgnuhOugrVi9sz8dId6sgzLxxTD9fmu/2x/uB3pjt9G:36GvgnuhOHrc9sz8d8JiLTou4uB3xi
- TLSH
  T114444D17F0966C8DC467D27589C3F632FE71B4481635AABB1B1086341FA1B50EABFB18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  libgstd3d12-1.0-0.dll
- Size 434KB
- SHA256 f55500e48fd79426788d1ebc4a5845363d40b0b5acddb516d34655116e436e2c
- MD5 7d138a504825d61a2bae28011198ae54
- SHA1 801876f80457a52766abdb316522ddb3f0822b97
- SHA512 7dfbee1ffe9e3be06a623df3b1f0ab0d3ea8afd72086026c6daa97a5053b9b496a391b3d3744b8b555ec40d9785cc9aa7f716d66e880196ca7b4809065d32b52
- SSDEEP 12288:o4PZ0XAwieF8X3i2k+Fsy99bTgrfMm7mx9dHdddJdodddTd7dedWdad3dqd/32io:TPSXAeScX7mx9dHdddJdodddTd7dedWK
- TLSH
  T105942A17E262989CC467E2785547E633FB31B84852387AAB57E0D6302FA1F514B2EF1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  libgstd3dshader-1.0-0.dll
- Size 208KB
- SHA256 9073a4b35f806de8a65abf830ab58f3eb24f90bf0d79e3b98a5abb3e66ccfd86
- MD5 636a25c04179d0ba4ee14025e3aee1af
- SHA1 5cfdc0f064d1cc8983f8e0f85115787605332221
- SHA512 6b732476a1eaaf0ca4ba3aa95f85b5b7422f1b08ae987ea2dea9d0d5abeb0774b4862f27f4cad99c5ea58b56a633d663a9c36fe931c883dbcca86b6bcddb79a3
- SSDEEP 1536:9opgt41cEW9cuVI8mvgFCLVHAqeIiXT9dvdSdXdR45qXpN4L6WnX26fD6aDL6W/S:9oit47oygZ9dvdSdXdRaqXpNbPmwFSl6
- TLSH
  T1E624E81D939A4014CD2BE07E8F0B1D645112BCCB09ADCE5A7E0C93352F96C6EB4797EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  libgstdxva-1.0-0.dll
- Size 74KB
- SHA256 117607beebe1c1043ee8b5eb3468c6dbce1c9265708466ea59f24e18516d9162
- MD5 516c9b1cfbc150abbdbe23c503a22db2
- SHA1 6ffc48a5ad735df97f15011651c2b0e99d46a1da
- SHA512 77c5fe26060715b9d5054103dc99bbcfa9aeca10613474589d9e98606a36a687915d7512e1dba1441ba5757a63317eb3e180b1d2a957f4755ad25f8b4f4eb06b
- SSDEEP 1536:NZvDXR35fXsQUSPO+Lt/jypavXValKdLdedIdPdudSdPdid7dedpdcdRcGNRNkh7:bLRSQC+Lt1vXVIKdLdedIdPdudSdPdiC
- TLSH
  T199730AAF944294DCCEAB9139C053EE33F367B455A2206FBB3B91C2341FB1964CE2A515
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  libgstgl-1.0-0.dll
- Size 506KB
- SHA256 eaf2a1376defaceeedb30367823e96a2af937ce4e4bec9d435b6c2cce1ae0498
- MD5 6bb84b3e481341b861d97e94dd4e6cb3
- SHA1 27f6fae6f1aae0fc07774fb1ade4f4c8df06c97e
- SHA512 28630ca9a73571e86f85334e07c8d38975d09081477127f58b7afbdef8251186e4168d4909f51a492778fabf8faaae14ac8da7377b8d3f926a17a697dec0bce3
- SSDEEP 12288:oHPHiILlUaYBf2TRT2XwOiii9PyLzprO6viNeuD90jG4nLKZdRDfrXxhx:ovHiIJUaYBfq6Ajf9PyLzprTvYeuD90w
- TLSH
  T141B45B2BD2925A8CC577E2348193A663F670B4589725FD7B8F50C6302FE0E60926FF58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  libgstpbutils-1.0-0.dll
- Size 315KB
- SHA256 1142d0b14998fcde6e70179a508a9e50bd80d18f5c7701cb355da09653957170
- MD5 05baa1f68f1a39745f35c5b107bb4d25
- SHA1 eb53bfca9349a26d0a1291139d7725cd42a0617c
- SHA512 94d967592073ab381299906f988911d22757153a8deb66f6cc7d1856cfd56f85d413a2c02c1f095264042e1c9c3b87007ab7914cb287d2bef2890959bc415e78
- SSDEEP 6144:UF/vF6D5Uk8HLjfGpBjZRus7O89jSqhlZKJMXR:aljfSjas7O89jSqhlZKJMXR
- TLSH
  T11E644B6BD042549DD577C33C86C7E332B579B059A375BC6BAB20C570BF20EA0DA69A0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  libgstreamer-1.0-0.dll
- Size 1.4MB
- SHA256 8193a4428cb7e0cc8cd4490b2b0600c70a0047fabc5ca278d0333c7abfec236c
- MD5 60d6692a73acccca0c0dbe73a5c88d52
- SHA1 a673853e0d7da8004bda951ad0abd9c91c663000
- SHA512 ca922b78e25fd79596d4b3ac58945a496f04bceef6f4ec62e15e03cbc3d023915ca3aa604d31991d9ebbdb22c9a5e2946736faf749dc6eb20b1117f7069713cc
- SSDEEP 24576:x5LR6yYQRUA2X8m17Od5ThRjxDN0j7HdZrxfRzCst43j+SRkjxWMq1TgHwR0tAHO:rLspQRSX8m1725TnFi7HdHfcst43j+Se
- TLSH
  T17D654A2BD29260EDC57BD238C65A7273F9B0F0581634BEBA5A64C6752F30D61132FA1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  libgsttag-1.0-0.dll
- Size 308KB
- SHA256 f4e26254b0e316bd073f44805268521d01fdda875e3edabbfd692c91387fc648
- MD5 12bf46690cfea8601f9b36fc5f37a79c
- SHA1 fe52e4563b278d245906f1ca084bb777b37236bc
- SHA512 002d7df77b04751478402b3ddd26e53271d3bc7aead2b245cf97ae97c23b188e4f3feae40ab18c9546bab55ddfb9174c5c8855356e799364e886ecf8895304ff
- SSDEEP 6144:uN1ZkL92gTzdAoO/0n63aslc8OtH/wRonrKG4UiV0TSEai:A1ZWxTxcs63arb5/wR5G4UiV0TSEai
- TLSH
  T1B4643A27E14324ECE5BBC23A53D7F273F535B45943687C6BAF60C5712A60E60A639A0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  libgstvideo-1.0-0.dll
- Size 902KB
- SHA256 208bf1d6d37e3a53864073407fd712ca94476d0a05cca1c7a8cd9225a192e742
- MD5 7718702472258f441d921bcb08f8ceca
- SHA1 453ab7dc7c391df16a7f58889a259c2bc1992973
- SHA512 780887f5a3b99ca81693bb673ae0df18477fca864b05f15373e5c16ca7fab92a99e8c9a80602a6695125872388ef285a67b4f1c525f7b7c41c3c860276ad3ee7
- SSDEEP 24576:4uEaPX0K86tN4uhGVttFd9JQdOXEsl0AuD90jFWUwKkZyZUi6g/:VX0K8c/hldOXEslduD90jFVLkZyZUi6w
- TLSH
  T163154B53D283649DC97B82344BBBA773B574B05C62287F3B9E90C6703EA0E60561BB5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  libharfbuzz-0.dll
- Size 1.5MB
- SHA256 ad0a89a7d69f3dea52ab1bc8b7f660cd98fb0b577184f0482ca80f95e742e25e
- MD5 8d0f7f037e3cc5b76c206b66fbc39a9f
- SHA1 7b5de0de54c4e50b80e6341954c019ad4f241a7f
- SHA512 cbf0b19de2c8c7f40db4319a382e98a088acad5ed74629fb6bf2154cdbd39e7b5e0c6cb77cd9734592d57dacba4e1ddb41be4b61986db2727c0ee31d60b12bb9
- SSDEEP 24576:1SlfStm4SOhp3z5Hi05GyxHCJv+UDD7A4s3jFxmQdsXEow00+ZRzh3PPbB2Bj:1SlfStm7+pz5pjxHCJv+UDnAfjP7fow5
- TLSH
  T197655CD7E193A0ECC12FD1305257AA73F531780100286DBBD7A0DB74AE92FA0669DB79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  libiconv-2.dll
- Size 1.1MB
- SHA256 94ec68fb8d342b6c91b6b48a8d95092819cdcd006a7166e0b68062f946afd08a
- MD5 f8739ae787ae7ee2d4e4d92b56ca4848
- SHA1 4b0dee9d119a00b901c885f64a62c253474516da
- SHA512 44ae7c5d63a06fc2391dcf83d2fbfe931f1cb9425e56ab126fe7ed2081a1c750d645681c8c82e189f4286be16d4b407b4dde80ba577937d33c99caa71a700071
- SSDEEP 24576:st4X1BAUZLY3wPKU7VbbTOZGavkg3NyeuQ6l9fH+f0f:FX1BAUZLYgiU7IZGaXBuQQ9e0f
- TLSH
  T1DB35CE62F3D3CB2BF263C6B0C96A5B26E427EC216B0645373660B3BC5D337A414C8566
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  libintl-8.dll
- Size 291KB
- SHA256 0e5a178731e6be6d115442a6ade3df7f03265cd1fc4338f8b6f86a8001cbf582
- MD5 5b759f0aa10cedb61374bd1aed536a84
- SHA1 f690d8065be25fa3208b973ba9d166efe3474cfe
- SHA512 386282ac3307631be7cc62da94e3925fedbaf8b5f70bc0974e354a620289cd77e842a0b5e0d68913ee963aee301950f8ffab5f56b4d80cf383aa054a37c4418f
- SSDEEP 6144:obbN9vz4FoZi+2F15nkEDHKRbFEIQlQ9no+s:cb3EFXN7HUhXQluno+s
- TLSH
  T1EF541907B243A5D9E1A3D5309987C7F57973BC620BA06AB726A0F33C2E32C515B19B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  libopenh264-7.dll
- Size 853KB
- SHA256 29ca6f7ec1be9b951edcd61e8f7197071d7266634c9e0af3968ba8282f1c9ded
- MD5 14965ca8f91c92cb60d65582ec5e3d9a
- SHA1 32cb5209ea9f85cf015e02b749b4cd4d6e0263ad
- SHA512 992b604669ed27c4454eae22f22fc364d1310760d4aa0ab1386ff2057a7f8c5f779d3f3ebe99af9ae120027909192faf57078a3f4451de84446f4756a7ef329d
- SSDEEP 24576:LIel72aXpmbOpdYEvGsKmd9euhqxF5vIR3C9:Eel72aXpmbOpRCeqxrvIR3C9
- TLSH
  T147056C4BE26360ECD66BD070862EAB73F574785C1130AD3B4695DA302E27ED0971EF68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  libopus-0.dll
- Size 480KB
- SHA256 c12f9a671a106c649a5517d28061670aa57c805d242b80764853a7551099498d
- MD5 3fc38a117575e3869a712f9309d40285
- SHA1 5310e057190c99cc85ef497b0746e4bce277c373
- SHA512 e50d4a1c0d84fee608f87a780cb764afc561364c1dd7ed2fe120cb51d0c04f53e6c141710cc7acad90cfc00251276cad8ad8a27eb9805d9a46ba18e37392047d
- SSDEEP 12288:xPksBOdZHTul+yfI5C2x15lsIXNV5e3zzY/0S2B3m:a6OdZHyn2xjBXfT0xB3m
- TLSH
  T1ABA47C06F2A3A4ECD367D070524BBFB3F830785901246C7B97E4C6706EB3D505A5AA7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  liborc-0.4-0.dll
- Size 466KB
- SHA256 4388f1c94d613f2494253ac75871eac10d69b9b82f24f3776dedced156e12284
- MD5 3217b7a6a6c6195482d510cf464e5069
- SHA1 9084a113b3094c6567d8f6aa117e098d2b240156
- SHA512 6883ad8c7cd173d34abdd7ab47b6a15c156673a11c8f013cc9fc0cc68947eb62f28999f1cdc5efd49e46f219327bd2e6ac7d121ec0faeb8e6bb5137ede9008f9
- SSDEEP 12288:6sMJPJ42ViKqjLldiu9dTMBogIL8zKeZdGBu:M42ViK6LAIL8OagBu
- TLSH
  T1C4A4E622E36376BDC2FB83314EAB2371F924B0A811712C6F9574CB717A52E50576AC2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  libpango-1.0-0.dll
- Size 414KB
- SHA256 d74291e1be6a0b5544849b1ea3fd9dee71226d5e2674d01fbcc144ff59e840d0
- MD5 6b512e42a3487ac03ba50cb94be5d12d
- SHA1 13b5ca1e49c57ff1f7e6052ecd3bcee0427c50a6
- SHA512 dc42f81d7656174eab938fbe072dced0eefdbe2e6462c6a45069de80d85c73993edc92675e14d7e842d55bdd6882c568d0b582e2962ad453a8097bbf02c42b2d
- SSDEEP 12288:iOK63CekWfdaDVoDMPBL1XvhQeqBnu6gdGk+/9c8q/:iOb3CekWfUDVoQPBL1XDc8+/9c8q/
- TLSH
  T19A944B2BE24258EDC567C0398297A732B43074395761EC7B4B90C671AE60EE4363FE29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  libpangocairo-1.0-0.dll
- Size 73KB
- SHA256 cc13ad77435617ce67248513e9d99e75ee0e4b8ae2027a55f2c757d812e70614
- MD5 77dd33b81cf55458003f9a1e65bafc69
- SHA1 edbf75315f308dac1b00414e758a3dfbfc204fc0
- SHA512 4f583e60fa9a0760ccba95f08419410bf67b1bee0208aee8cf4c5d20b697599163b5581680ffc1f52730d874362eed0337a192bd99b9dc1dce70d5aba4f945d0
- SSDEEP 1536:zbF6e52A9AfYytB4pORm4yyGLvHIBC+Nxtlr4ps7Wsvu4e/8U3:zx60aBtB7bGz+C+NblrR9v5rK
- TLSH
  T120732B2BB441DC9EC4E3A63DA8E9E631B33A79284326D73E4700C534AF617757C6B642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  libpangoft2-1.0-0.dll
- Size 108KB
- SHA256 52752c65d3886ef32064f4d60a0639e6b453a878a2199e688778cda590f1060e
- MD5 ddd1b527365618e9efddf520f049c075
- SHA1 5a707e27aa0e873b962516e4fc0b9070ba910d4c
- SHA512 78d262563d3b2b8eba8eef1a16d59d36d4b228b389ab3ae90dd4a2f56e9a3a94342335277f6e152dd56c1a424a29bcd1bba725b6f935b90a6523fc85f4588b42
- SSDEEP 3072:6ZAiYvdFOSkKG0JtqwER8iFEmVPYi/v2/zJk:EAiYiSdhOFEwPH/u/C
- TLSH
  T15AB3093E740168DDC5A7C53CA5E46632BB3A75285226EB3F47A0C6309FA17703E2FA41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  libpangowin32-1.0-0.dll
- Size 107KB
- SHA256 e24ee31eed5d280c7b380bd3d9641a5be37d45d05b9b6df18c1076efdbd27aa0
- MD5 1f8f45cc6b567848b6932b5f992a630f
- SHA1 c59d2b63080984f7efd2a63393a748be89a1f9cb
- SHA512 d82edb23d0775fd7c228a392ddaaca6460376339cb87a29216d9a3673c1662b60c16b7b10925d9698fa8dcb46ebca826d943981e0069ab910d4672298fec5a71
- SSDEEP 3072:fNENrTsc4InWaX5WcrKqyiQHmW8G1LxhGZ+uQhatpi:u8NG6b8GJxhGZlQhatpi
- TLSH
  T109B34B26F55228DDC1A7863C66E69731B736B8280225FF3B4740CA359E30B607E2FB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  libpcre2-8-0.dll
- Size 701KB
- SHA256 52ccc7e4ec5ad0aecf307c0328826340f5d504aa59f7c4143b9a1b9fff16ccda
- MD5 8e91bf787f3c98c03589b1781ece645a
- SHA1 d826ca667d621f6d859f3bd36944e55aef0c5351
- SHA512 e70f0e2a8e2c6e5173db89c0e64a484f6f4f346ddd4cf020843f3323161766628eb4eac9fbb58218871366d8acd4db481ed84fcea50edb0745446949ac16a23c
- SSDEEP 12288:GZJqkmkkYt+/FdeTF00UCInTLy1GcLr63AfCDu1FUn8:GZcVYUFdT0UA1dyQaDu1FUn8
- TLSH
  T161E4D547F4E321E8CD36C175E7B732B2F53639E91035BDAE16A0C3312E139216A5AA1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  libpixman-1-0.dll
- Size 722KB
- SHA256 e2c9b3d6346ff078546d100cabc0f68bdc23cefd34f55d6fa706cfa978999610
- MD5 cfb47f173bf312630322c13a2a4e80e0
- SHA1 60d1042c5d617ea624a2892a4a09bc7a8b98ee7b
- SHA512 10e2ab7f8273873b4bc6a981a576c6a538580609f87583cb286178961c277b87299f84c4cd32cd1448356218cccfce8ed17b866632366e78c37d88ddf8282ac4
- SSDEEP 12288:DuB28jX450hs3V5TMlf0xtBImoOUgd8BBjfRGxYxyCB3c:A28T07HMlf8tBImVUgd8TjfMxoB3c
- TLSH
  T148F46C9ED59720ECE26B90B08256FFB7F930782881109DBB52D1C9356B63EC05A17F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  libpng16-16.dll
- Size 252KB
- SHA256 5c1dd5410af563f4a3c4aee10d1f749aa71e0d7fb3b4fac240eb9e96cadebd26
- MD5 e6102021a6b29fa88f869e066f10f494
- SHA1 5688763d92118fb3bcad4eddec454db59cc57962
- SHA512 e356ceb9514c3efd459cec6fc49c1a324622e20b26ffaba871292dc14759fd7d7a762ffcb3d7900e7ef3cbceb34962046fc7de7f9a5b7db7e3ccf705f65c01e7
- SSDEEP 3072:7MvyyfF5ECk0Zm9UOZj6Ii/lz+Uj4cM6PHt8xAaZ66TmZIFUVkqxlCvvHLkwxRvd:AvyyfjECOU6qcc3/+WjHCKV4DhMlQ
- TLSH
  T10E445C87E2A36CBDC7A7C1748257E7B1F53578641220BEBF06D4CB302D22D606729E69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  libssl-3-x64.dll
- Size 958KB
- SHA256 733a07dc9a6868b408fd2feaaa3e2afa32cdd4805177e2e540eb96edb770de63
- MD5 03d4bd4a30af47259ab9d2475236620a
- SHA1 0e5448e05e59345897dd55fbee9d80feda35f12d
- SHA512 710f7250546f09470d485a5462001f4ec9c1493cfcb1bb0c7c08d9d5f966b3c8606dfa27d3a7ddad18906f70d2a0faad6635c5a1a26b645cebc8b90b3a1e032c
- SSDEEP 24576:ysb2W3/z0TxRI5onqx5YNAtw5ijvsVOEABUi6bGAAA6cKR:ymvz6xBqx5YNb5izsVOEABUi6bGAAA6r
- TLSH
  T1A5252A67E2A728ECC5A7C174C6679372B532B8142235FD7B1E54CB311F61E60233E6A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  libstdc++-6.dll
- Size 2.3MB
- SHA256 57bdffa90e6ac252d5fbfd437aeace6598fbf7cfaa354bc6f797f022d3f8dfd9
- MD5 ff11ebdd2b0982a656c34f478e5fc12d
- SHA1 3b272d35fd80e3a3f46e445405e62521004089ad
- SHA512 fdd809cc3a43dfa15c00447e57d29e2f248802c9ec43be6b093109e257b36de3ede25f613cb2f8b41de1efe7dad94d15902ce9c92d739bf143f9d72b9d57fb7d
- SSDEEP 49152:JdD7dZMixbyPUk1horFVppplZfpYsNc2SiHnIupYLyGYvk:JV7dZM4FFXZpYsRnIupwyGYvk
- TLSH
  T190B54C03E5A34C78C9E7E7B4525B5736AA20BC2985387D7F5E9CC3312B61E50922FB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  libthai-0.dll
- Size 70KB
- SHA256 d8d8b87e9089a811e088f6a01da57c19ed54d2b6613bb85697f1958473f63666
- MD5 f840e965d369ecd3501246b11678ce1e
- SHA1 b9b16fffe05466ce331ebcbbc9b059727e13966e
- SHA512 a09e6c5528c78580a83a1f72c83b121847e06a5bb55b24e6bc02fabb9b418c3b80fc8290908973db5a3a5c1cb44abb88d0455cc2983b3ec62b928afd8e7a255b
- SSDEEP 1536:bPs3eEQWRwOMDiWHKz8DS9mBANDhkwxQQfHYCMg5cm/IYT2KcFa5VVL:bzIwO+XHKz8DS97TkwxQQQecmQFC
- TLSH
  T1A463E42BF29328FDD297C27885975771F536BC120232AF7B8690D6341D30AD05F2DAA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  libvpx-1.dll
- Size 4.5MB
- SHA256 f43be692ef1cf014931a39545b4d7a191264bed4df05ca112399b49a1fb1d167
- MD5 867ad76cbf010663c3b62e260001fd19
- SHA1 e0fc83123eef937c0c0306ca80040ff7f04544c4
- SHA512 54ae3b4aa25218baa9658d33b2360c54cb40bdda3173e37d12454e6ab388796b77b35e5ce05428be22617975dcbe83bb412edf388b4db7ac0ca329e4160f7f69
- SSDEEP 49152:0KcZu2wGOZG3+q5qoKR2mva6nSXIJ4x0ldqCG79BP7CR6JqVoq+R5ce1d2IHimb4:/cZuFq5qoKRaZ9qgWhv29ABb
- TLSH
  T112260A8DF2B791A8C51BFC70213DAB53AD2C345E40182BEA9BDA4E601573BC45739FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  libwinpthread-1.dll
- Size 62KB
- SHA256 2b3136c1d085fdb84e0b55c7a7e004672f35d576e4eff7fb2bef0b5899a781b7
- MD5 6ba34a023898b10c20c18f08479c2723
- SHA1 74e37a34ad96b79c18ef3da4f34a9ff93d79344a
- SHA512 3cf7cccce679269c09cb1878d0b6542dcd8e3645268b80f913f7f616b4aee0a5b6978647d2752d0a8aa1a8635ce4cc3779cef9043044ca16f66ee2a5dc75472f
- SSDEEP 768:d6X8V5Pia21LZzgTBwK+68K5w/d5Wst1z0mPfKRZPQTUPzm4ew3Gjpu:gsV5P/29iGyEd5btiEePQTUrmXw3Gjpu
- TLSH
  T18B533A1AB2A654FDC697C23898FB1331F533B8241235AF2F9720D2352F74D658A2DC99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  warpdesk.exe
- Size 18.6MB
- SHA256 6e879f4450661bddbdb7aa51992cedf9baee809d26c56de9dd7a90cf1d7be588
- MD5 b4682b2c7ffc6a52da2780c1cb24718e
- SHA1 d67a59fd51763b1ac933bc0a3ba7051134710f35
- SHA512 7be35a696ff23aecc3dccd438ca3b69065739a6fa6135e80c0f38b4f78c8d3dfbfeb9ac826f4124abf77cc987aca839cbac7783e52b9a15f12bee4287fce2554
- SSDEEP 196608:8vgVR91YgZAKb44xK9hRERiOADZ5gJORrFTCC:8eDtElCRJAgJORrRx
- TLSH
  T185175B47E86541E9C5AED534C57292237F317C4A4B2027D72B60FA252F77BE0AEBA310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral30
- Target
  wdhost.dll
- Size 431KB
- SHA256 f2de6d0790c0bd3352b39dba1f777406315da641c4ade73f458242683b088790
- MD5 b0dd6380356c87648c1e2862822c806a
- SHA1 b6ab499ad80b6e275d8759c5122f7938c6f63db8
- SHA512 3ca13165a6370e57e03c12beb105f9e583f7865d2ad999e38c52a1eb2a121b48995ca809ae81f01fb0589d42b8d0cc9ac4f2c18bfd224b2f5cfbfd10e8d56b24
- SSDEEP 6144:IPvy5ksfLicSLI9o7L0Hgg/RGoK0euRU4kj3tpQDnBHXQ7FQ:ll2X4H10oKoRU4S9pQx3
- TLSH
  T1FC948E55E7D421AAE237C63886934B02D673FC150761F9DB03A04A6A6F37BD06A3B70D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10
behavioral31
- Target
  zlib1.dll
- Size 124KB
- SHA256 11cd91171765cd65f1c3362e3df67e5f5a618a6b88c8cdec899b802eaf1c7b0d
- MD5 a59cbbe90d948f3e929d72d0ff921126
- SHA1 367f3297e2018a5ef9d7abf13997454c0ba51a8b
- SHA512 925d2c58ef9c859902764013d84875a44dfc691639f32d987b88b98e5e4758477636892bcbedb3dee6c21417ede809df3da49e263e158f138dbd7ccdaa7bcbb3
- SSDEEP 3072:wws++EwY6wsz6G8DN30Fl8JQebsw+O3iCzkwx1wsHkmYh2tCp9tjWF3U:bXQwW3FlO7LGUCp9BWF3U
- TLSH
  T115C36B5BFA9364FEC667C17082D38BB1F131B81117246EBB8154D7742E21E506B1CABE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Discovers running processes

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32