04846a6858bd95adbde295dfe103b83b3d9840a33104ddb06ac5b6b059dbf04f

General

Target
MCDownloader.zip
Size 298KB
Sample260929-z5hycasbme
SHA256 04846a6858bd95adbde295dfe103b83b3d9840a33104ddb06ac5b6b059dbf04f
MD5 80b4225554b102e33a8ccd746a7ef1ec
SHA1 071039c50bd215093fc2e9cff48aba530e71b053
SHA512 a048fe3f3f7a23efee06b13d4189a8e39941f1c90339c196b1cf11c04f185efd2c48bb273dc4d16a22cd67eece5a367623df465a450c856e586fbe245450c7de
SSDEEP 6144:5N5XYJ9nIwEAA4XXUzmJ5B1iZ5G2r1Npv/xYizPso8p2MQPusS3gS6:VILjAMwOiZ5G41vv/xYgPsB2MsubD6
TLSH
T180542395F2433DD1CBE690B46F8BC8F931678BA229B7818E776941C0DF6B2B0853D512
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  MCDownloader/MCDownloader.exe
- Size 54KB
- SHA256 7f0d469c107d695cf9d106ae61c5b7c5c0b4d6809fca1f5e209e3d8af91abae3
- MD5 753968f95398e79c0b530f46793d77cb
- SHA1 1daa304ea88b91365d456f358e64d9a165a275bc
- SHA512 7806ad07adb5c183bc0911f27c33c1ac267ef3025534c8a5d5a180c95506cea722ba90edffa134ed3284d64dc578ba6d7c0f509c4dababfaff2e2ca6b6d47794
- SSDEEP 1536:v2VZ55+w0n6GA0Ox6pQ+Mpx5HbTTgxVcl:v2VX0wxGA0OwpQ+gzgbY
- TLSH
  T186433A0533EC8226E6FB0B7DA47902504B72BE47B412E79E289C60CD2FB27518D66777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1
- Target
  MCDownloader/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  MCDownloader/WUTokenHelper.dll
- Size 36KB
- SHA256 32a940f209c3956e9f50d33bf69c6cf18bd2995f59869ff4cf6ddbb639911fcd
- MD5 152695e963900f04fd74df5b9a7c379e
- SHA1 d7b112b00fd344c77b1a5b3171333f4b570841c4
- SHA512 2895aaa5139d16b14ec787eb75941eb4d9a8dea10d7f1a9d4201b5f3f3d6919905d2b9338f88568824cbb4e87589c5b49a7c112c84860b921b4ed93247be0714
- SSDEEP 768:ZEE4ESqfesOISFZLGyozr+pi6AfejMoApsl02A+YCCE:ZzhHIIMozr+pi6AfejMoApsl02A+YCC
- TLSH
  T174F21A91B7F507A4E86BC23CCD671B1DC931B866472182CB1322032F1E367D29EBE985
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3