d187aa1509d57fb487712730fe1e508f865961e6a909fa4f401ff68460064b94

Sharing

Copy URL Twitter E-mail

General

Target
Central-Gestao-Desktop-Setup.exe
Size 2.4MB
Sample260916-zy7ccsttbx
SHA256 d187aa1509d57fb487712730fe1e508f865961e6a909fa4f401ff68460064b94
MD5 e2735597e07d7cc318c1b1742e7d2fa9
SHA1 9dc806613fc4d2de19760f443c93ecd196c5786b
SHA512 2be61a3d06601a3f34b5b271290f9947ebc7d93f4b95950782da8f208f1bdb6d1c876454e11d23b6c09a261685b2e8d3f593464e6ffa62d33ca0f757fdd62e81
SSDEEP 49152:BDEGw2tVRc80X9p9LH8GhapbbSpgb23DdQK7FLZLKjoOR39mW+:aGwc8fP9LcPfIgb2zdHLZLkPLmW+
TLSH
T117B5331D7B1B98F6C97682316D53EB9F9C511F228D9DC10BB2016A3F5C37A27A20F246
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Central-Gestao-Desktop-Setup.exe
- Size 2.4MB
- SHA256 d187aa1509d57fb487712730fe1e508f865961e6a909fa4f401ff68460064b94
- MD5 e2735597e07d7cc318c1b1742e7d2fa9
- SHA1 9dc806613fc4d2de19760f443c93ecd196c5786b
- SHA512 2be61a3d06601a3f34b5b271290f9947ebc7d93f4b95950782da8f208f1bdb6d1c876454e11d23b6c09a261685b2e8d3f593464e6ffa62d33ca0f757fdd62e81
- SSDEEP 49152:BDEGw2tVRc80X9p9LH8GhapbbSpgb23DdQK7FLZLKjoOR39mW+:aGwc8fP9LcPfIgb2zdHLZLkPLmW+
- TLSH
  T117B5331D7B1B98F6C97682316D53EB9F9C511F228D9DC10BB2016A3F5C37A27A20F246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  CentralGestao-Diagnostico.exe
- Size 5.8MB
- SHA256 fcaf53a521c27266d89af272c0a9185ae51c484d176f95c81c419d686fb3a7aa
- MD5 8450888d5360543fb76254ae7bfc8f76
- SHA1 5af6e0e67cd41ceb14b71ca9f75b99c30fa03831
- SHA512 a3ce1a542737b7d412aac78e83858bf34d47ba877cfc437d1d90aec0d4e5303b2c0d9ff4b716f8031f6eca9f2b218d3a5ab77817fdd8f91733481979b0aed5b5
- SSDEEP 49152:TiOqNhN+x/pHMccvEiOpUZmkg8J/8712cS5EvngB973DctsjDTqjxL2OX:e+JW+pqmb+oGESBHT0
- TLSH
  T17D565B47FCA045A9C0AED63185669263BA71BC485F3123D73BA0F7392F76BD4AA75300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery execution spyware trojan
behavioral7 behavioral8
- Target
  CentralGestao.exe
- Size 5.8MB
- SHA256 4b26243c8773040b3692dbe6279740204160f18eb7c9fb5a9f9b909cdbff7fd4
- MD5 6e303a02bbff511d2513fa3b29d76b18
- SHA1 76195eda5bf69621825797db87b4c5bca0ef512d
- SHA512 acd7a46a958bb6968da520ce8bb5a65c400800111053c0479bb26bdae3b5b3d0db2ba4637fe2ce5afd2784cb90ffb8765fc6c89c804e07caaf7d60792109fa2e
- SSDEEP 49152:rtjmYhxw2xU5S2ZSvykkZPxqvyRPGrkR5EvvgB97ip5ctWqDTSjxLIiMvz:ZUg14Pxqv8eIEKMp0TsCi
- TLSH
  T18F565B47FCA445A8C0AED631897292A7BA717C485F3523D72B60F7792F72BD06A79300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery spyware trojan
behavioral10 behavioral9
- Target
  Desinstalar.exe
- Size 111KB
- SHA256 edd0b6e92aed833b9973c5b595643da9c6bbe610b35fe29726185b7876876c33
- MD5 2b3b05067cd075dec05e9c21103e15c2
- SHA1 d0e45d14ff09338f01988f7ed816ba6a4360596e
- SHA512 c0e11b59a18cf019090bb7329800900f3cd2e007554ad190a990f9be6c34ff71de7509cfccf6be7903df3f8c431c713c59774f14b970944c3065d2f1bb31c0a9
- SSDEEP 1536:uTnvHeLrwe71iakGFHmpaoOTb9abxQT+5U3SuxF+itDWgdLeAyNbzU:urv+LsMjvFsOTb98xQT+5U5qwKceAuU
- TLSH
  T1C8B38D1CBF168CF7D83645305597FAAF4A35AD718A5A960BEB111B33DC336A1E60B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
behavioral11 behavioral12