b2171ed2dc6bd4d26239a10d0bdde7282ece8069176cb99723cca69890f8393a

General

Target
process_lasso_18.3.0.34.zip
Size 5.4MB
Sample260925-tr5bjavyht
SHA256 b2171ed2dc6bd4d26239a10d0bdde7282ece8069176cb99723cca69890f8393a
MD5 8e401af48368f8c55c834d7e1288d8ff
SHA1 523c3e4e3265edb3b32822baf07613c62f36e672
SHA512 593c78d1c3f073ed132480529e8220d7cb2a3a75ead59d6d71fd261dee931c44d3b197ba3c65743d8e6f714ca0789b5cd170fa4bf354e5651b699669dcffe73a
SSDEEP 98304:Mi0qJHTqHlWwq1x9MgJNM3gz/UYLJjbJda:Mi0q96EL9qgLJBda
TLSH
T1A9463362A871787BF4335B719BA92082FE872348F123F55EAD7354109BD8731FAB5290
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Process Lasso 18.3.0.34.exe
- Size 5.4MB
- SHA256 a17a72a527f3a3789d153de27232f3cbf25f6a923611d167e0f7ed757f93e1d5
- MD5 3810ac63610f1b1e0fdbf1106bbd4953
- SHA1 3b03a8f4ab0e797cd59c15fbb53345c25b59ec2e
- SHA512 65bbe143f9228b174820034a90867357a6e50ce14393a5de703d55f04f5a14989f4406dc177471eb78cf08dbabb3f3657d600f87dc08adce2e173010c2607787
- SSDEEP 98304:P5sI+4xhhSnZw2+zx9O+rsy7ud1MYDZjPNm:eI+4Jm819TCDZrNm
- TLSH
  T1884633E39CA168B9F033DF705F691C42BED7274CA432B57E7DAA68009FE4721E625250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  _Silent Install.cmd
- Size 1KB
- SHA256 6601cbe618dd90ef2daf02fb3fd41b492ea8b2afa2b234d3b7f483c432e4d78d
- MD5 1586fcb6353ba97337072ffc9a49e046
- SHA1 9e29a16a45b4a0a61e0c481ad20f5c278c3504d4
- SHA512 e36ef005c18bb0905d453afa3eb2eabd1c3552e72385fb1ba72992a0db440cedfc3f84ca1237c2479033e2ab1f81d18ec061941d046ff21704da66bd76ed4138
- TLSH
  T139115A773674E54C93B40F842D748522746122DB2DB20D50B57F403B87E46C8386CF5B
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution installer persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral3 behavioral4
- Target
  _Unpack Portable.cmd
- Size 1KB
- SHA256 7256488f34caa5538294556b0b728e291cbe635f8d3cc6cd8195ad4bef1f782d
- MD5 11bb19b34ae3d7efb2f2896416bdecfd
- SHA1 76749fa742a58c585c7a9e6044d798776fc35d00
- SHA512 8ced83bb80ca73c583890bacee3c2306c347e84c33bf883dd4589139b8d830d01131f6d8e3c6ea7a29b9bea59c40be447d5d2968a3d78bee2fb11d4116996377
- TLSH
  T16B11532B36B4E94C93B51F882C748522B47122DB2CB20D10B17F843B87A56C9386CF9F
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution installer
- Executes dropped EXE
- Loads dropped DLL
behavioral5 behavioral6