5bdfa993065c8d0b8ba0f227b0db857d8a39d666d3ebd8f0e9206df7c04c9fae

General

Target
horse museum.rar
Size 8.6MB
Sample260930-mphleszhpg
SHA256 5bdfa993065c8d0b8ba0f227b0db857d8a39d666d3ebd8f0e9206df7c04c9fae
MD5 b6d9b319b0cf744b8819ea78f8f51341
SHA1 643483f87455e402040b8e5167b308de9851dcf3
SHA512 7328979e2be133f96d689c0dd58e9c63b325b9bd100974fd19d2864e9381357187d477a97aacfaa5f92e7a1250586d2c58436b64f8e715b1c19ffc51f2bf2fe0
SSDEEP 196608:5cyovvg5Sf95pD/8wg1k4CY3DHEipEgkkp5vb3nJ:5cyoEI95Klt3zqg95vb3nJ
TLSH
T1D1963353BDA17FC0C73C5DF9C9F3655848DEB0824691A8F9EF998A6D8F7302104AE486
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  horse museum.rar
- Size 8.6MB
- SHA256 5bdfa993065c8d0b8ba0f227b0db857d8a39d666d3ebd8f0e9206df7c04c9fae
- MD5 b6d9b319b0cf744b8819ea78f8f51341
- SHA1 643483f87455e402040b8e5167b308de9851dcf3
- SHA512 7328979e2be133f96d689c0dd58e9c63b325b9bd100974fd19d2864e9381357187d477a97aacfaa5f92e7a1250586d2c58436b64f8e715b1c19ffc51f2bf2fe0
- SSDEEP 196608:5cyovvg5Sf95pD/8wg1k4CY3DHEipEgkkp5vb3nJ:5cyoEI95Klt3zqg95vb3nJ
- TLSH
  T1D1963353BDA17FC0C73C5DF9C9F3655848DEB0824691A8F9EF998A6D8F7302104AE486
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  cfg.hors
- Size 4.0MB
- SHA256 0af0a4e0989106278ff63b8f4c9507c6d9358f99dd1bd9b7855b776853aea983
- MD5 fe9a29d57f5c96ecdabb7735f1a0b565
- SHA1 6887d662b74ab9e1921ce58834eb8ac46f6fdc80
- SHA512 66fdfa3820dd4d518d8a43225f027a81aee07c7f21bab926b6fcdc97b660f1e3178ccd997a78cbb261d0006a5552f4a97b5730dd90542b288a512402747d4034
- SSDEEP 98304:dhsTp6xyaSovEmgTdm7fB/RvpD/RCAQpKZId/L:wcyovvg5Sf95pD/8wgz
- TLSH
  T1701633B1BD807DC85A7C6CF8D2FB9A3C0CDEF05314449ED4AA89B53D9F26076152A386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  setup.exe
- Size 4.6MB
- SHA256 673ae0777b251d77cc27f6e1b42e94bb57d14bc948f693b35959a490f9ae03e4
- MD5 23421d92972e37dce5c618d59ddcbd3d
- SHA1 5ce488dff05fe5971b45a8c184498ecf3e31520f
- SHA512 61717c4a00cf42d53807a0a67018f35f54bd312bdc0eaf0bb4d4782b4d02c853736f374bb9ec9ca0fa90ce1e303d72a61aa0639442865f476763ac7da84ba6b4
- SSDEEP 98304:9zLGuvmQyt2XQKowUXEc8uygJenIzUdvC/SvDRQF1jKPALQ:9eO1XQsUXEGygAn9vCKvCF147
- TLSH
  T1BE263305E2B19DBBD857E5BF9FA0BA38B1172A45F096510C8645A32236F3DCCAF4C6D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  HorseLauncher.exe
- Size 1.8MB
- SHA256 93f83d0ead20be789340a3edd26557416c425e09fb2250077293a57ea58c1337
- MD5 26ddb2522973a597ef9e973c027a1484
- SHA1 af0664fd87ffb8a1699103f2f79b76686ca6b6d4
- SHA512 ce9517a736211899ad6f4cbe2d9ca2698a56098a77a4190e172addf18ff6ceb540911b9b757e43fb16eb5f84bbdbb046d008f23fc97ab588e03a704b62feb49b
- SSDEEP 49152:IQsDAOI96Ap5Fjx0o/fbOp8RWqVDIWdO5g7+s0SiIP9z:UAllOp8RWqVDIWdhh
- TLSH
  T192959E2376A801F8E1B7C278C9529A03DBB278551F719ADF07D089AA1F236E15F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  tor.exe
- Size 9.7MB
- SHA256 60c45b01938c799862e511a9a5bab12f959a819c6264a24502edc342165f570c
- MD5 4edd2723154608d3d13f4c93a1c007ef
- SHA1 f064ae020b89e4bf4f0a6e6289d0560f34050ccb
- SHA512 babb21d145a6ffbaebcd18b6c839d684b9c165c00557cf0b397b4d3b0a8401a4171d2774d341eea41158f73e3ab4b99c026737e846b9d41ca6ccd5f1cd99db5b
- SSDEEP 98304:XE7pu2Nw3522D4eSYizAmIJCQKeVuOwPS1A0mYwnQjGTuPjd+u:8pu2G35EQKqwq1A02u
- TLSH
  T114A62947F27710DDC5BAC07892177223F9A13C9C81346B6B599097A62B70B68AF3EF14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7