b24c6291e945b6fb37dce0b062761b2a68aeacf305a99879b1d7993ef902945a

Sharing

Copy URL Twitter E-mail

General

Target
FoodCast-instalador-2.4.1.exe
Size 5.1MB
Sample260930-271x2swbka
SHA256 b24c6291e945b6fb37dce0b062761b2a68aeacf305a99879b1d7993ef902945a
MD5 3fd3e2cff4b926bce8bdc619d1a6f7e6
SHA1 c100a0b9334782c036bbed4754a4901a42f465d6
SHA512 de78b13d9b663c9b0dba8c3ed5307cacc654f86b3edd280fc897631f3dbd34da2c92fa7dee2bc05de3c80a17f71aa7c0d7e8616893020d6392a1bea33d698da9
SSDEEP 98304:9ooUSXPxArNT9O8AkU0cMe8rB7R38xkkbuXpZoo0sxShzFkdfQYyjSAs:9o6mZvAgzB7Rsm2UZooZoKfEj2
TLSH
T13E36330D2BE5F88AC4541D3F5D3BE9A1D2336F3221966708E8277616BE30251152BBEF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  FoodCast-instalador-2.4.1.exe
- Size 5.1MB
- SHA256 b24c6291e945b6fb37dce0b062761b2a68aeacf305a99879b1d7993ef902945a
- MD5 3fd3e2cff4b926bce8bdc619d1a6f7e6
- SHA1 c100a0b9334782c036bbed4754a4901a42f465d6
- SHA512 de78b13d9b663c9b0dba8c3ed5307cacc654f86b3edd280fc897631f3dbd34da2c92fa7dee2bc05de3c80a17f71aa7c0d7e8616893020d6392a1bea33d698da9
- SSDEEP 98304:9ooUSXPxArNT9O8AkU0cMe8rB7R38xkkbuXpZoo0sxShzFkdfQYyjSAs:9o6mZvAgzB7Rsm2UZooZoKfEj2
- TLSH
  T13E36330D2BE5F88AC4541D3F5D3BE9A1D2336F3221966708E8277616BE30251152BBEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH
  T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH
  T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH
  T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  foodcast-caja.exe
- Size 15.0MB
- SHA256 40e87adf374bbec5fd0077b358320b32e29ae24a3e6940ba4f1137699d9689b2
- MD5 130ea5813bf0683c7b7ec311b5f6e922
- SHA1 0ad5b7c357921b66fa54900313a0f82903285c9f
- SHA512 60760688c7ae9bf8b148670e15d06ef064ad3823b5beb2ca8fdf8a665db18a1b510074eb3a939999d8315c65c175a98bd733fd4b206ea3e894c3204dcc266247
- SSDEEP 196608:x3Y18lvu4531rl5ptJOzRiG6oZNXlP3dtKvMmRcv:R/rlXYRDLZNXlPtMU
- TLSH
  T1E1F65C01BE0B5898E19ACCB0C38B86578E2534DF1936F87F56C582293FBD7B51F1921A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence spyware trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral13 behavioral14
- Target
  web/assets/html2canvas.esm-CBrSDip1.js
- Size 197KB
- SHA256 b4f3add809a6d59f46260e8fd56cab240f3153def977386b230a839e8cb0b281
- MD5 9f7a6f3253ff960324a674ef838012f2
- SHA1 ef0719d90ba002786a21922c5b7d472539d0b749
- SHA512 0319e11daba1fd21780575342306e583dffbf6f3bb1458099cef8f29acc326a71cca5a93d5c1a90cddbcdde1b18d27f1f77decd9491775fde7a8b63df38a90a2
- SSDEEP 1536:07kiD1ceKEsblFRZO0Se5vLbfpQ89JnPHkO8tCj6JJtzEWBk6NgF9eaF/7S5LC:071D19teRZ62djnPHcLEwKGM
- TLSH
  T1901445B46BA71CDE0B7EF5DA001B3D438D981B53117EC1A8F24AADA22D74706CEB1674
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  web/assets/index-BSBSgV-m.js
- Size 814KB
- SHA256 dad27de95e14a76ad8a4df4bace0b78acc5d0ac4a203f4d250a272bf62388d7e
- MD5 65d4cfb03db08c7f8441409ec7670745
- SHA1 bb53b944e06b554ffb0941976fadc4eb37e7a4cb
- SHA512 26ad72cf39683eabac2908a0df576d457ac74b3b323442b317cf18ea192dfdf0b97d0ca5bfafcabaeb93b66bf775a33a403e01d232753fef915ea5d6c5eb21a0
- SSDEEP 24576:94k6jEoMVK6zqRvPVSIvk5RezLapDU7Kl:94k4EoMVK6zqRvPVSIvkPezLapU7+
- TLSH
  T11D055C90B195ABADEB6204DC44BF0005B02E1D59F81E84A1F17C6D932E78189BA77FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  web/assets/index.es-7JZuzKOR.js
- Size 147KB
- SHA256 dc058ba68069650c83c9be92e0481023474dbe3d3e2cfde0817c097bcd6b6671
- MD5 1588f6bb43509daef5b1fb980db72267
- SHA1 15789f28776d987a2666f377697e4ec3e4ce45b0
- SHA512 7f5351510609f4628284b8d28ff2fc5a6194c79b20cda2362040a7879ac0eddffef13b1091cd332076fc2fee7cb93ce39b7d3f34435df2250e1d8fc6b8cb6931
- SSDEEP 3072:UkfOrdpnVuGGH7vxxjZdfzpH3t4m5j4JjPGGbL+Ii7x8o+f+T7ay/svYLVlaCZt7:tfaVrI7v5m9a0/2
- TLSH
  T139E32AE433D274B687D195A4603F0147F22A2D68A40D986CFB69E4E3FC68C4B517BB39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  web/assets/jspdf.es.min-DE0qg2Ns.js
- Size 381KB
- SHA256 2890f4cc1ba4e8b64be152327962868061bf6d70c6cc22b93f80ce8cfc53047c
- MD5 defa49b2e60d487c32a3d130b86843a5
- SHA1 fd9466c7c33b6171bd09d3e22ee30e3b76bd1983
- SHA512 7d99c66ef3003cda3158cf83287307e07592c5447202b44ae0f1cc662c4fe84dea7aa1e6db2f56ce81aefdce0102c96966c41e36c8fa99f48ded4c2446b24497
- SSDEEP 3072:6Jwb/9HJ3AtB4/K8BBViez5faxbQ2i1HOuI8YNDSS7YpSkuFybPYw9L4np3yY1Z:Ib4/pYU2i1HpI7mS1Rw9A
- TLSH
  T1E0843AA63355705642A3D4F010BF010EB23969295A89841CF776DDD7ACB89CEE0BBF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  web/assets/purify.es-BnINGy_Y.js
- Size 28KB
- SHA256 e1a7db8fd26de50139d42c7758c05111b45ee109c317b77816015927a8e01f7e
- MD5 56f0f0bc670531e12c85eda83f855d7e
- SHA1 1929f0cd201f9e2c1e62cad0d7073e4ef1e1b28e
- SHA512 48e0b78f195483737b907590445f11267a3c5c5cfca92edf4c6ee74952662565d8f986b7061dc34db7fb4feffa8441810c273f157497c35f3d6b3ddef5a0696f
- SSDEEP 768:eCNfWmMUtrdj8jMgqHFjf6TS2YGroB+EmygE4VRYZhfl1GnMp0qXWxveQNOHKexS:8Y8LqHWYFRoEWxvzuaAS0mW4myp1
- TLSH
  T1BED22BA8B485B9774BDB51D950BB4A0EE17D141A340DC4D0E2DDECBA18BAA092077F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  web/assets/xlsx-D_0l8YDs.js
- Size 419KB
- SHA256 0b43b64c8e0a7bbecfd4ef17ca5cc32e2102adcc74ededa912fd380637dd6f2e
- MD5 a80e7f778bd925f7caae84a0bc049774
- SHA1 8c3fba409c535b8a722f0ef5cff63fdd6df94f1d
- SHA512 c88bcb3751bcf300ab7eb2b4673544c6fee5f2516d063f2bc2b727b2eda92488cc66f1a06bce337224bf9840ed9192e46546f79506fbabad8510036f1df7c75c
- SSDEEP 6144:0md1cAV7zmUeC+PDUhZdEqQfzXQhF8dddTsP:0mdiAV7pxQUh4MhIdc
- TLSH
  T105945BD632CF702A5392A2B5109F3046B874AD18D48F5E51F201F3657CB9DCA44EFEAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  web/fondos/aurora.svg
- Size 822B
- SHA256 3bbd554dc5e523b24ab1c3ff85a0bdf1fb81ed559a4eac382c9e8921bd173e65
- MD5 af87ea6e784dd01d90c7c1cc7c83e1f4
- SHA1 f3a6406b93a6852f40b4bb96b4bc5f8983f272f3
- SHA512 3726fc0a70fb1b0fb006ed612ddd3f507175f67c82a851dfc3c23e59cfcbb79e1bcfd8d73bb7c480c802481c906a1f29db4abaa19b1d6a5358c5e99d17b75c8b
- TLSH
  T172018E7D954D4CBEE36EC37BDA50E8A9022B70C7D24592E86C15BE1B11045D2EE22664
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  web/fondos/hojas.svg
- Size 1KB
- SHA256 e05353e3c19c14ad6103c6d18888d1a89c5af1d4acac0bd19063e8e3bb24df80
- MD5 6e53866adeace4286ca14f7ccf2cadfb
- SHA1 5c66260c0ce4eb0da4dd862759e25418c2acbe46
- SHA512 c0835e8c74193a1008c93a9a4cc6f58e070f296a7c1ed3beede357270f645eb9692cedf8bf214dda5ce4e80082b38866beeb1aa9cf1df762a866b971e5ba8b2a
- TLSH
  T1AA31E06E960CDCEB872AC23FD7A4E475523F71D2D25082E99D163E5B11046C3EE9B360
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  web/fondos/humo.svg
- Size 797B
- SHA256 0af2f125ce296d32a27252a5c0620af33dfb6b2b6b0cce35764ded36b4a53f3b
- MD5 ae11af69f91b7b7a8ad9160caacb01f1
- SHA1 6357394053e411d6dc651f8cbcc76e92329c9c4e
- SHA512 9d80e6656598c781cf2817aeac6c45f09228b8e8a10edfa58e3837200719431df732e0b2dbf78b29ae538e6a4990cd4d9e7e34c8ea5a35b2a8910ec584f8881b
- TLSH
  T18301C96E714C2CBEC728C13D826680A1431BE0DAC719C38D8405BD4BA2041C37C2A234
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32