b7ffc7c1039d8a86b7aa8c1ac7df85a1d3c96806ebeb1b9703c0958ce7699cd6

General

Target
jaffacakes118__9a9afe8ca996dbe68228d3add844b31f
Size 147KB
Sample260919-seckbaszb1
SHA256 b7ffc7c1039d8a86b7aa8c1ac7df85a1d3c96806ebeb1b9703c0958ce7699cd6
MD5 9a9afe8ca996dbe68228d3add844b31f
SHA1 e4b0f767dccfc953ccebd255521bbd8ffd748ff9
SHA512 c17e901cb5d65cc88873aed7bd8047d397aeff551604fef01085f05973e2c9ce38fe47190e928e4d669db88d1441b9074d961d2b7f2035105050961c13ae496a
SSDEEP 3072:Y33cOOSnQISzdI2GkVdi8rSX4gxiFS3dd+Jt1ielRKkdsufycYAblWT0gBzzyGv0:9jSm5I2V4D4ggFk0iKJFWIgx50
TLSH
T18CE312971FF03CF27B10B98A2947640F1666793BDBE700BD7BB91839CBA66293525081
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  prflbmsgp32.dll
- Size 72KB
- SHA256 78da8064919a53679e002e2b802775067431042b8c611ebb10c6f09537c3bc84
- MD5 9d404a24bc6cb5494f68db129a32f5f7
- SHA1 fe476b849a1eb749a12cad3157cc955f72f5be8f
- SHA512 fc8ca4fd5d86609b5472372031a23fbd195ab3333059487fa651dd8ad852f8d6e27b1dfdde137d45cbc64c792df03a6d5e5e26feb972d3c82f0dd66153a2cc7f
- SSDEEP 1536:Yh+UdU7StTlbL9rLTfkalY9pRv82umfapZZz7OJh:G+UdN5o362Chz7Ov
- TLSH
  T170730225C95A9EC6D1C91C321BB4358E3767A2AF99F1E6231635007D3E3C37A488EF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence stealer
- Modifies Shared Task Scheduler registry keys
  persistence
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2
- Target
  q1816250_disk.dll
- Size 24KB
- SHA256 70e6092c463a659db7b32500f90057ffe70ba7b1939c23454928442126fd6599
- MD5 8438d2e7216117ff0fba929c03882dbd
- SHA1 73f62bf8310ad81504893fc893285bd2f6d7179f
- SHA512 61cac73cb8ae6d2a624320d15e05dbfa41ee57b08001244058e2865a781a0a5d5c9574c5278d97e518143ed393be58bd990f5caac643b472386e75700a5be074
- SSDEEP 384:jfD/sk+icqMcnL1sz9RW0730tzYdq/6oyrGeYE7aBauJ2X31:jbf+HqBL1sz9pcAqCoyrGeYE7juJkF
- TLSH
  T195B24A43F9C1CCB3D412DEB8CD26D29CFA3A36603E05113779AA1FDDC86E281561D696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence
- Modifies Shared Task Scheduler registry keys
  persistence
behavioral3 behavioral4
- Target
  winstyle3.dll
- Size 68KB
- SHA256 e283202b46f68f5a7f6bffd4fabc3bd693ef002cf804f42fcd17dacb959cdf8a
- MD5 87912f6e7e126a0319b341134eb97d99
- SHA1 db2311efedc42b6147689daf6eee72ca1a996a3d
- SHA512 08eed7cb5457ff0ecb3a56f9cbad90274a4b62342da1e54d4e565ae251515cf253e3dc555832ebf8bf49db272de4b4f9e8ab41d45f4155263ed5010c33db6ccc
- SSDEEP 1536:rkz2kWTccmsZ3lvSGuigBThBEyfS/skz+8JAcC29EjGVwOBrkJu8/Lkh:rkSkWTccms1nuTFh6/zzXJAcC29ESVfL
- TLSH
  T14363022CA5EB9920D511363D93F358094B4EA81FB24A47D1CECD77A84F5312336D92BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence upx
- Modifies Shared Task Scheduler registry keys
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6