3f740e7019e11ff455af374945edb25413e0567c1eb6a16afefb23a496545649

Sharing

Copy URL Twitter E-mail

General

Target
bundle.msixbundle
Size 4.0MB
Sample261003-pv82nsdb97
SHA256 3f740e7019e11ff455af374945edb25413e0567c1eb6a16afefb23a496545649
MD5 a28d78e7fcc97002c2dbfb42c582fd24
SHA1 2f4553836345cba9e212f8142bd350844648536f
SHA512 0bc8c5e61ca15f292e1210c648e07d4f123e65906e0ebf25a175dfdbc5c483c8c7ea83014ccb02a61728665ad4eb9029181a82cef8c015b92e143614d52941ca
SSDEEP 98304:andEsINI98IVtbNUnM6N74P9FBUTJqCLXDW8jQ:Ot38IVvUnGBU5LTW8jQ
TLSH
T16316332D6DA09560F56DC93505E36B699E27C24353E0F83537CC498DFF30EAA4888E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  AppPackage_2026.2.0.0_ARM64.msix
- Size 1.7MB
- SHA256 634130222078ea96a5e4712715d38fff49f0dccd2b2cab78b13779501986142d
- MD5 d64752cc0ee3c44df08002b44412811d
- SHA1 f2ed8063faac5dc6b8e1cb196c2ce5ffd1ca6186
- SHA512 03e0ff6ad9ad393b3940e5530798b036796c388de7c96c5810c0791bcc4753bd866c1ee21773cbbd1ffd665662f3911b8c947c8bfbda1b93be3ab73307834aaa
- SSDEEP 49152:5f/3MoEotI+c3AL9uZIVKYbNUnMM7jbbA:5ndEsINI98IVtbNUnM6U
- TLSH
  T12785335AA9619170F118853106F2D7A5DF33C793A2D0F81133CE0E8A7F7499E5A8DB4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  AppxBlockMap.xml
- Size 6KB
- SHA256 c58a49b0c944f2d332bf4b133d4f5704f8036c7f39416e4b1509f3ed801c2312
- MD5 08d92d0865cc5fd3f80a43fe5cc9bf8a
- SHA1 1c9a7fe29999821f8b85156111691d39275326af
- SHA512 ddefff75c21dfa257104f4fc3c3a4633a63efc29b3753ae941b9069232b6b840cac9ac56011e1e9611f6c55fce962b6e353658eae9679e27b9585ca6c9cf7486
- SSDEEP 192:2HwPVwgiSQ6DC+TEsBzWth82mYmkiOEbcAO92ZuA4HdySLtgBXNXfi9di:acDtQIJGfXHd3t8pfa8
- TLSH
  T19AE1D8A0523DFE3A826C4BFE4F69F1441C21982713676E5F9C8A85F21C6F4635E630E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral2
- Target
  AppxManifest.xml
- Size 4KB
- SHA256 2da2fa4def14cb4719075b7da4797d98e6e7992f4fd9b252e9f8ee93991ed596
- MD5 75ae3693871412de06ab01dbe5f4489b
- SHA1 032f310960a655c516c97b9756ab393cf70bb60e
- SHA512 ae0de113e899b630446b66e2db3ea107c7bc738b263e856139c213cf9aeb76d6f91a80664263ecee881354e1dd01da976f5d8aa9031893ebe73fa108c2a54810
- SSDEEP 96:EXATANPANJAN8ANNATAGtMhSnnFX6zrcDfD8kaDfD8NDfDxb2H9/KV20AJBqaKE:bEmcNME8x9dyHkVSJSE
- TLSH
  T1BB913356E0C80E7442719965E373A287F63D46D754E88848F8EDE90B1FB769E0233723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3
- Target
  AppxMetadata/CodeIntegrity.cat
- Size 12KB
- SHA256 a02f010dff05ee032ea278f3c00e9f2734ffef9764e2ec51c3ad0bda3c9fee9e
- MD5 3839c07f0a6b863d697dae0081731c8f
- SHA1 48ff5d1eb75dcb8c85520663f8d9c50a948400fd
- SHA512 69995e8c0752c45700eed29a20f2e73f4f5917c4750f975ca82c929b5b21d2c32108682f584d4439fbd0c2fba0f84cba5c72f6d26681f753944613691a3de7eb
- SSDEEP 192:Zqrzhr4nXEL1MiUiJFg9cbCzwgLC5tiJR5zQR3JKX01k9z3AglMC:4Z1MiUi3g9cb8P25EJR9fR9zxlMC
- TLSH
  T123525B858D3841C7EC8BAC5092ECEE5B7C3D17DB185090766A7BFA9409933C2FB2952D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral4
- Target
  AppxSignature.p7x
- Size 11KB
- SHA256 4454efbe2f0f15c45c28d02e8f693b488bf82fd28208788439fc84ee089bba42
- MD5 d30c7b587a30ce282b7fa7fb1c08deba
- SHA1 73e1c2513dfa00c67c88c0f89ecccdd9c282cd9f
- SHA512 3ca406bad29a7ecf3a35a12838b88c0ca478d7087a832711756789955916f92694dc134ca505bbfb3da4c5af415185a8fefbe1774071b6590041f7f354a55de8
- SSDEEP 192:Gzhr4nXEL1MiUiJFg9cbCzwgLC5tiJRdznAk2K13X01k9z3Aua9S:oZ1MiUi3g9cb8P25EJRZnj2QR9z+A
- TLSH
  T188423AD14A7891C6DD9BBC8051ECED877C3C53C35940A1A16AB6FAC42D933CAEB2853D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  ExplorerHooks.dll
- Size 178KB
- SHA256 8c25fce3dfa9f034b8a1f38494f6bc9b5431562db60e5fed2dcf9272fddf2c04
- MD5 29e2f9a8e22da3002a3d28ca1a1e0dff
- SHA1 2236e5876bce1e1eccd4053044675f538fc9823e
- SHA512 ef006de51abf724df3c5d0f8c1bc5ebce6326e9a798131b735d227bd1e8e5da60950d0bf5303eb5e91b79d664294dd5ee3c8262eeac5168d6a74c7216fa117d3
- SSDEEP 3072:ul/BXMywiU4yxj7KMy3b//IccZuxyYrkRv86EGO6Tu:A/BTfKZuxyLva0u
- TLSH
  T1EF044A916B8D2843EBC3E77CCC574D50713BBA688A30C98B7153026EED5EBC0DAB0566
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  ExplorerTAP.dll
- Size 523KB
- SHA256 123b456e35487ca8ff490d11d234ce1dd917e509f025791a74668e307806b802
- MD5 018d55236a6a27f80867c8a7f5df2900
- SHA1 51730936c85247abc364b27ae951d97dca1bdd85
- SHA512 07cdd4d8c7da31edbf70bf3ab77e8478258fb44dce68c40f01e61775e6f1d5cd92fdd55a1f46fa204051f20aa4ba64e403b4f58bed14f4427fc007b709f2149c
- SSDEEP 6144:dqqD9SqzJ5MJSj198QnUgcqgdQbDDWQph0lhSMXlBXBWnVuNhLUFNjWU5C8nS:dq++4XjDDWQph0lhSMXliVuNKmF8S
- TLSH
  T13CB48E507B8DDF11D2C2D37CCDA74F54322BB9684670868B3197022FED9ABC5DAA1123
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  ProgramLog.dll
- Size 393KB
- SHA256 14e003c985a8c10783579649331d5372506e34109e8b4e43417bdf784e36e56c
- MD5 1cd638a76b70cc03a91b276624992941
- SHA1 ea4537b88f6533fb37717f3f6233a13fab1496f0
- SHA512 3b8c03ed07a0caff0c021406e535140e58d77160646549798b70a7c276f8a0c86ad96c19c9457baf641e839a853db7ddd7fe71dd322472eb2de0d863f1cdf612
- SSDEEP 6144:Jo2QBmcRipa7VmK2KfdZcph0lhSMXlBXBWnw7FLfQakRkn5+L5XGNQa:BQ1RipuVmbEqph0lhSMXliwxL45y7
- TLSH
  T139848C64EF4DA821E3C4E17D8EF14F70363BA918A771028B702A435EDDE6BD1DD66122
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  TranslucentTB.exe
- Size 858KB
- SHA256 25500e798081b7eccacf5607972a08e0af000d64b5f7024abd836dab6da9179b
- MD5 3987c9b31491e042a7dc0efbd1e97470
- SHA1 792f9055349ece0d65f227de07c0f6d7e7824206
- SHA512 06b1d9b35c708f9d4c817f575dec51ea489ff65eba1caba5afcd767b6959a55dd476192d697af6811d9a6a4bd10ea1bab2dda923a2a77041cc43266f3d113935
- SSDEEP 24576:auA9RPh0h0lhSMXlbf7GKpDMr8U+HpoAxYciwxyDXTCJCIT07TTvh7Msyysr:auoLj7G0DMr8U+HpoAxYciwxyDXTCoIl
- TLSH
  T109155B616A9CE854E2E6D37CAEB58BB03037BC04C631824B715A7B1DFCBA6D48D51732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Xaml.dll
- Size 1.3MB
- SHA256 47405bb4db7f247f9adce3cdbc558883dc7c714c8f768153a7d033ca3592629a
- MD5 58f8fffc5b2455a92f18b570c1bef850
- SHA1 0d4134e6de07acebf048b8afb31906052aeac38a
- SHA512 931ac2232bbb7504a03ca62f56bce80378477781997294a955e2fb386ccc54afe05e0a03d056fd31cb71e39a18cab0435bc658959a6deb8b799c572bf28b55af
- SSDEEP 12288:1+AbydK32lt1SpNRFOreeWNYGCpYSuQozdkVVMhmmG1ph0lhSMXl+6Wh8DacaJUh:1pp5WHh0lhSMXlihYa6rOO
- TLSH
  T181551961AA4CD974D1C3727C6EBADBF83637F9289B308156759F032FBC927D58948022
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  [Content_Types].xml
- Size 792B
- SHA256 9fa0ec5d966c2449058afbe075f986a1e735c92bd894a0a25d2582486bf2b691
- MD5 fe688ff30809e951ae38cc076e310be3
- SHA1 810bd8489afe11b389b3d9cb11cbdaa69fe99b3b
- SHA512 f37cf8549b350d0d33235f33fbf83b65925b1e8f6778676cf0aed3dce06ba5e966e398947744d1235777d1ed51d606a5b419bc4e21c639e80af30d61a8819a78
- TLSH
  T15C0161D2707E9CB007A689BFDA676C501233147DA4E47B0DBF9E564EA0E075B01B13C8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11
- Target
  resources.pri
- Size 112KB
- SHA256 337a47232a8b4775b894dd37b7fc5328dd440f4366afc119de288fe42a6384a1
- MD5 0ab95f8ca43feb4739d6ec52a8e135d1
- SHA1 f9e9e0fe1637241edadf2d5068fb9759501650da
- SHA512 2cf44b4b17ef290e8b0791540c9afb5d8a323caee29083d5d158639faca051b123637a3f626dd73b98bb376ab92cffba8ef00e0e12fce94c55d203f0a5817962
- SSDEEP 3072:DjccHutxkxVFlPmzOvqgqzuP1fCSTHKzwtB3aS1VA1jBtY4CI21+JGB:XxutaLrFlPPSY4C5
- TLSH
  T1FCB37414ABF50315F2B3EB75ADB20715B872BD73A931CB1E0059031E2972A419AB1B7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  AppPackage_2026.2.0.0_scale-400.msix
- Size 519KB
- SHA256 2ee2002e2734514f97b35debceea378ed8382a4c020a27b7d0d78a2fdd3564fb
- MD5 115221d0ad5f5bf7dabc2cd185afa2a8
- SHA1 304c406da7fec3e960223b8774a155f79d20de54
- SHA512 7a9faf1b7731479cc5508e9a03dd61db49be96ecd7ed4054b65be4c43e79ed644339e438606ab91d80a938197757a119b90c9a20657175d34d1acfb1bf29e1b1
- SSDEEP 6144:CYNUrhTwIdz/njGRilvB6Kgr/yy/L13OluC3dpHFg/hqOel7a3jtFCXfedkfRz23:CYelTVdzPjJbtSLpMn9mB9vCGdkymg
- TLSH
  T184B4233B5E28D8A0FB6F883910C60F5E5E1F4113D1A94AFBB3CC469DBF74E624549892
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  AppxBlockMap.xml
- Size 1KB
- SHA256 93b7e0deb35720a24617a014adc080f7e7f3bd4b3f5e8c1ca45e9664e0908a3b
- MD5 e093c2ee73953c6848de753e083b48d0
- SHA1 a09c2185eaae3b465b4b283f0aa1b4c40239837e
- SHA512 5b3de06d7ffe1e39549e0355b00321b34fa0239bde48da5bdf6eb54522095ebc1ad8b871ac12928215722c57f01c5776315ac44f534c1a89de4e78b5ca1dd6c4
- TLSH
  T127310F70903DBF2A403C0BBE0F39F0542CB649576B9B4D1FEC86C6B5085B9251AB30C5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral14
- Target
  AppxManifest.xml
- Size 774B
- SHA256 508dca8f6dfc2adefe2e8b862db55016f67e2d824ec5d155e5a74123cd5795ab
- MD5 cb8ad5481da175f05bbc46826bc6a901
- SHA1 c95a5552247f8d14ef2e0df25d6cc59527d16c47
- SHA512 cfd4e6bc1993abb6a74885d3668b80477bf501f2deaeffd90a468824e4c703016e3d8c5c234b38ad827dac65bd1888885d56b91c309ca98b0e9d8598b1aa92de
- TLSH
  T160012042E0480EB44B34BCBC637EE183A25BA23620BE939CECDDAD0626D42D70163132
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15
- Target
  AppxSignature.p7x
- Size 11KB
- SHA256 4decd4750cb1bb233b678313c8ce56a779a49dfb579e2ebd720c1bfe1b70e7c0
- MD5 14aed840a73f6128a532eb450964e73f
- SHA1 c3bfc4c564a8113ae001d3b218c0a69fe8ad1521
- SHA512 4ee97f79a2744c3fa308d159d5d6e29ec145d738bc798e08d703b6f045f8e744591cf62b05098d37380cc7a49102787ec38cbe73888d35198f4b0cc894762e4c
- SSDEEP 192:lzhr4nXEL1MiUiJFg9cbCzwgLC5tiJRNzZyAU9NBJYh5wE3X01k9z3AiSn4:hZ1MiUi3g9cb8P25EJRpZyAU9xDE3R91
- TLSH
  T16C424BD68E7881C7ED8AEC4051ECEE873C3D03C71960A4A22AB9FAD41D473D69B1852D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  [Content_Types].xml
- Size 565B
- SHA256 78505619b00ed2b1f5031d92ed848243f1bee5b4eef415254791aa2b1882dd6e
- MD5 e447f1c59436ada673317c01057dbbbb
- SHA1 2642c12c8acfb220b04a6b0570fbcdcab56a42f6
- SHA512 71713cdaf15845d2a4f0587c22ea8575dc16a342a3cb12e5f92840eb307c181ec07f82c7a5fbe7b5dddfb2223a602f8809feaed59eb76bc07d87c73b07e90666
- TLSH
  T1FCF081D2B13A9CB0037189F9DE2369051272147D90F9374DBFDB464E50D079700B13C4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17
- Target
  resources.pri
- Size 5KB
- SHA256 2dd165fddbd37f2862c944617903e648677ad0bf84983634a8aa2ed5f0cb5fff
- MD5 caab9a3a8f7d86d11c5d995cb92a33a6
- SHA1 2d23bce3c18ce5cbdbd4200cb5d1b1a824026503
- SHA512 80690d61433352bdaadf71d0437249667e918107859e1fa7acb38766b9e2b3321fbe5815d2c8a7750e9736eeecfd40227179f13e38b6b60c88b302edf4c8b223
- SSDEEP 96:W/IIgrGB9NnUyXgrQegbWJ5uYUeNTQl1T10ipjUxIxX9awOQk5IQCw:W/4CUyZekWHtdpQl1T10iNUxSX9ROrMw
- TLSH
  T147C10F12A578EE84C127B339F8B343F5EEA05EF152F2CFAD056453859F505486EB223A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  AppPackage_2026.2.0.0_x64.msix
- Size 1.8MB
- SHA256 aef837663ed7af6b530e071b49a70ff916f8bd7813e542cdb3872fe5806f60f4
- MD5 bd2e9f5494790dc55d2cd2584ee170fa
- SHA1 ac5bb34ecccd59f436052cc6d88678f327f272c5
- SHA512 a28db359e01a4b03b3c8f150bf90c060fe95cafd7905a3babbd32577ce95ce53c2606ffcf3c1294018c2d7e54143303ea74e1d3876e51b248312d6d9776ec329
- SSDEEP 24576:Nf/tFRtYQ3BafRsf0Ug7zYbCLN9GAkZ7oWXoq7LoU9B/NqSpx70RD:Nf/tz+WBUscJzYbCLXP7WXoZU9GWx7AD
- TLSH
  T11285331C54E4A550F85EC9BD09A77B385516C2824BB0F9757FEC8488FF306E98884EAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  AppxBlockMap.xml
- Size 6KB
- SHA256 e0f52d862fd6f2f7ba6a82b37d92dfebff175322ed1f1e36515e58c804e68ff6
- MD5 3851858302c5a568ce28f835162346d4
- SHA1 699ede1d67609da03ed3b07725d9b220e316d18a
- SHA512 0d376bc6beeade8dd76fa22d77689cc6b279735117552e01fe17596fbad3fd87926acb456a19f6ca318e8d7512f4602562c616b344126be5df9be0d68a1b0f83
- SSDEEP 192:2HpVwhfiSQ6DC+TEskBdMock8xztZgBrmAuaMsenzapZ85CuP1ch:abmt/oulcBrYAIzpl1U
- TLSH
  T1DDE1FBA0413DFE76425C5BFE8FA9F1442C61882357672E1E9C8A96B20C6F5734E630E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral20
- Target
  AppxManifest.xml
- Size 4KB
- SHA256 44112b7087298f326a4b94637cf9e3d63794463eb6691973a3ec5a93f166235f
- MD5 89fffbf24385260e5d10f9ed6d43211c
- SHA1 b9b85c9c40c432ce50ca5c9cbc33421a57f52363
- SHA512 7df6c8d1a18069f5a2bc09375ad675c91907042eb2a0df9f9a4d70bd4362fca498c17cccb8de9d014a51a2ad8a3bbe2fbddd78616a80ba1943e4efc12df78bc7
- SSDEEP 96:EXATANPANJAN8ANNATAGtMhSn/FFX6zrcDfD8kaDfD8NDfDxb2H9/KV20AJBqaKE:bEmcNME8/39dyHkVSJSE
- TLSH
  T142913356E0C80E7442719965E3B3A287F63D46D750E88848F8EDE90B1FB769E0233723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21
- Target
  AppxMetadata/CodeIntegrity.cat
- Size 12KB
- SHA256 ae007ece6a4bffade867cf88b51463f438c9bf23f76764bc7ba4e9a82e84e952
- MD5 feb97ca9ddd9cd3ade985a7b78b68710
- SHA1 3910c6aa777af5d19da8f8198fcb6755c32f50bf
- SHA512 a95c4fae0805732abef37c489654ed1ad79650de9a1c917f2c98e661e896510d63aa4f6f66035979dd94b827e60f1cae241069e0f30e942a5f61b58585df3038
- SSDEEP 192:DKhSWJzhr4nXEL1MiUiJFg9cbCzwgLC5tiJR5zJasQcxX01k9z3AMLbZiKu5:DUZ1MiUi3g9cb8P25EJR9JzLxR9znZy
- TLSH
  T1155249E1492482C6EE9FAC5011F8FE577C7D13D7094090752AB7FA9409A33C6FB1856E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral22
- Target
  AppxSignature.p7x
- Size 11KB
- SHA256 b00b4313ffd2f8b4f5e361492a5ef86168ab6a2e2a5b5d0c4c9e7d1709629fdb
- MD5 dd5f9b2336f720804816ec9e5871e016
- SHA1 4bddd476473ebe3886ff582fdd607b39a46208e1
- SHA512 17226578f8d5df6ad78051ca17908cf65c16852729150cbe8f73b62f3b10e6285206a352c47c98b7a51fd924a98df9b3a1c5b40991c77b7b52f5350100eb5888
- SSDEEP 192:cSNzhr4nXEL1MiUiJFg9cbCzwgLC5tiJRdzmh7ms+3NxPOxFX01k9z3AJ0HPZ6lH:xZ1MiUi3g9cb8P25EJRZt9fPOxFR9zYJ
- TLSH
  T190423BC54E788187EE8BBC8052ECED477C3D53C71550A46266B9FA881D933C6EB2852D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  ExplorerHooks.dll
- Size 202KB
- SHA256 5ab9ca00b41a0676c94430c43a5de106acef2ade5c42e6c2ee45912de7a718d6
- MD5 b1ce351b4812020e8d531d218b9a664f
- SHA1 ee89ed57ce3767edcc5f3c908a6f1286c7314bcd
- SHA512 77a43602e2fccfde7194a29f34312ec00252fcb57b3e2cb9f0d2f31786b58cb295865c3ea641e0c8377b1392704450edf6aa9063d8c8ee50bdca3cd240019176
- SSDEEP 3072:407LPedcnFReLzZL85PF1NLu7UUTweaY9KXTLDfTf:ydcTEgnNLuUYsXrf
- TLSH
  T1E2144B557AAB04FAE967923489534F05B372F81507208BEF039246BC9F3B7D29D3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  ExplorerTAP.dll
- Size 552KB
- SHA256 c48f1a06168acd7839269dde0d15ccf5d09c702512b94dd6ba9a05df1b153dc2
- MD5 17381d24eeb7e72b65542b31b51d6369
- SHA1 467b04f860c6993922e6177740561281e52e0166
- SHA512 0937f17c2da5215abc1678dde872ae1d6a203ad0cd7b110881547a343a3f3fd1363ec4917ad94d2b129eed6c68a45ff678d48f008918076a3b5d23c324793779
- SSDEEP 6144:YJaS/eoIXT8tqlWm5F0T1pe7bvp2ph0lhSMXlBXBWn7DDZTZdKfx7EYl:5IIDyq4m5Fqe7bvp2ph0lhSMXli3BGl
- TLSH
  T1A8C4BE0172A647FAE567C178C85B4B09FA72784107905BEF13E08AAA4F6BBC44E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  ProgramLog.dll
- Size 404KB
- SHA256 0ac96ac53f5575369ad7b2f12ee2bd272e77438de8d041ec8aa6d4b900d2f701
- MD5 f1d12283389bb52e12874a9f63e6cedb
- SHA1 6df7becdf36ee5f25d0920a2979a1724eb4a2033
- SHA512 971b2ab7e6c3d71572850304c00648bfea2f97b8b52e7091fd1962f7ff0c2556fc728b70fe6f84230f287e40fe2ed714fea5442ef32027ddb33358313c506a13
- SSDEEP 6144:lY7Pfd9HIeHyph0lhSMXlBXBWn87Pddg0:6FiOyph0lhSMXli8Zd
- TLSH
  T13694BE16FB8941A9E14BC2B9896B4E45FA73788C43415AEF13A8C4675F2B7D02F3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  TranslucentTB.exe
- Size 859KB
- SHA256 f933f5bf70405e13feadbcc53883f2676b5a8a1dae214b52c0fe0971c583a0ff
- MD5 2530d19b54bf03133f908f7ece4f2239
- SHA1 0e232b94ead1e75768623c837566766d77d97318
- SHA512 65717e277c10fc0341734340639deaea485ab4d20bb9ad56ae0a13a52cf3fc879d438df3ef0fd77c736693369474b58b835b9e6fd0d6f94d6dad184dde85daeb
- SSDEEP 24576:gS6wzMAUbDat/ZzG81k9rvah0lhSMXl3VsZqTC7eqgMsyys:gfgMA0Q/5J1k97319T/Msyys
- TLSH
  T1FC158E16B6D8C1E9E077C279C96785B1FA323C54877096EB0290BD2E3E37AD4493E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Xaml.dll
- Size 1.1MB
- SHA256 473cc6ed8e9a1f37dbfee0c0b4ef04de9bbe5b8872b7f75d7cb2c9e50576f13c
- MD5 c58038bdccc8944b3c8e1a8960110c34
- SHA1 21743e444b76b07a8c256c35ce3267fafdc35928
- SHA512 3483dde9e4400baced747c84a9e42af17d29e465ece7b8cbefbcc7a32a795eaab1010b44b713aaae6fdbbd61f697d961c5330f953e2e6d94cfbd21ca471060b9
- SSDEEP 24576:Hzw8TQN3NrgKCNh0lhSMXl9dwsaamUreK:H08o9rNLwg
- TLSH
  T172355C12A2AA52EAD5BDD47DD6174916F9B1782047309FDB0271850E4F3BFF80B3EA21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  AppxBlockMap.xml
- Size 422B
- SHA256 099de4e7222426091cf77e88587cc5fa0a2ac5bd59998ef0bccb71f33155c3a0
- MD5 459d9ccafb8c4cf4f3dc53633f9c80b1
- SHA1 571d059a04cefec27335c78a21efb5c62a613d4f
- SHA512 3e72311496e8f9eef341dbb2ff3c7a3aa963304312ca4dcaed116b1bebc7f0183b3ba90550ced64006e2e98559eb6854661604332ae8e2e12457432979f8fc9e
- TLSH
  T122E0AB94D0B97C224225CE640BBCE0183952629B016D8AF6ECC9CC2A205A0D529023C6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29
- Target
  AppxMetadata/AppxBundleManifest.xml
- Size 2KB
- SHA256 8ef55dc08b9cca563e54c1a2f696396edeae57a7236c3c002ab6119358be8aac
- MD5 083c1323bf838342682c24d2ba1f69f9
- SHA1 1a19cb2f84d73f2e354e36b9c82e94d1a1031a72
- SHA512 8a349a43110026b99b567f80b5658810d9c41d137a5b051d2e47b693747484b8cd65903d1c6b09b284e778d5a8a01ebb40b658dd854e73c1d77b2ef4f4294ef9
- TLSH
  T147414957706D2CBC1231045FF2786D42A11FAE248C39A06CD9FEBD3B27EF64900A1765
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral30
- Target
  AppxSignature.p7x
- Size 11KB
- SHA256 d43b3d31927057d8e981ef124893bf23f58ff80120f76d10d22451860f0196b0
- MD5 d0b5c3c763cbfda1c62375209a8d6356
- SHA1 213d00262731e94751873949ea70e91b3bf3e51d
- SHA512 abf878e7dbe6a5a83a999cc623225ee7f917e2ded431757b2d6df7279df915cf978222cd3f6919af6f9fb9608a4eec50a7f71dd15bdac3e5d4e8e81f0f957778
- SSDEEP 192:vuzhr4nXEL1MiUiJFg9cbCzwgLC5tiJRZzwSsrbuK/X01k9z3ACTqBRKBL6n:vQZ1MiUi3g9cb8P25EJRdw1riSR9zZG3
- TLSH
  T1D7423AD68E3882C6ED8FAD4062FCED9B3C3C43C70850A0A256B6F9851D973C5EB1852D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  [Content_Types].xml
- Size 469B
- SHA256 3054f940f18b3f9c0a1db7658cf7f200e7b81e06a10823bc282d19528b1496d1
- MD5 671f697929cb7be9d6cb4f138d1750d0
- SHA1 1173d78a57a1a795a92d404d4ccea2117f517467
- SHA512 a6758da07e0b58c2a1678ce9f4e95a3e4900eea36e469f238197e2d096a2cdfad290f860e8db8f41324d2d98c0227ca5eb0e9b5bb701e08996093d5509ab80a6
- TLSH
  T16BF05CD2B17A4C7003F68D7EDD23AA58127200BD54EE2749BFF65B4E11C465B12913D8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

Badlisted process makes network request

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32