cb017a27058302dc0a191716d15417f7467aeabe3fb6a2dbf0eb776581ca8fff

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Hoax.Win32.SpeedUpMyPC.zjr.1eda1446760662cc7770483a213fd140
Size 511KB
Sample261009-vsb7tada73
SHA256 cb017a27058302dc0a191716d15417f7467aeabe3fb6a2dbf0eb776581ca8fff
MD5 1eda1446760662cc7770483a213fd140
SHA1 f66fb7599bd81acbdf18339435aa14a0b9f97195
SHA512 87bbc6fbe6fb7ab3024e9d9b9fcffbe09420b69342caef98f962ebbd53723f6a22f93c25c634834b4503a7d9ae2ad42f5db51d362f9cfb31e47338bd96e83f32
SSDEEP 12288:2vjtOYIczVmjuldONAvA7KGbNuwqQnpqa:yjtfSudONgA7XUGnMa
TLSH
T1E0B4236926D1BE63ECD7153106B7937EE33EFF34042A0A1FA3A53F6B1FA051A4949448
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jaffacakes118_Hoax.Win32.SpeedUpMyPC.zjr.1eda1446760662cc7770483a213fd140
- Size 511KB
- SHA256 cb017a27058302dc0a191716d15417f7467aeabe3fb6a2dbf0eb776581ca8fff
- MD5 1eda1446760662cc7770483a213fd140
- SHA1 f66fb7599bd81acbdf18339435aa14a0b9f97195
- SHA512 87bbc6fbe6fb7ab3024e9d9b9fcffbe09420b69342caef98f962ebbd53723f6a22f93c25c634834b4503a7d9ae2ad42f5db51d362f9cfb31e47338bd96e83f32
- SSDEEP 12288:2vjtOYIczVmjuldONAvA7KGbNuwqQnpqa:yjtfSudONgA7XUGnMa
- TLSH
  T1E0B4236926D1BE63ECD7153106B7937EE33EFF34042A0A1FA3A53F6B1FA051A4949448
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2
- Target
  $PLUGINSDIR/7za.exe
- Size 574KB
- SHA256 c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf
- MD5 42badc1d2f03a8b1e4875740d3d49336
- SHA1 cee178da1fb05f99af7a3547093122893bd1eb46
- SHA512 6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c
- SSDEEP 12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A
- TLSH
  T15FC47C2A3AE5C079D65215308B6E5BF5D0F693680F2308C72794DF2C1E359D6CA3AE39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
- MD5 e541458cfe66ef95ffbea40eaaa07289
- SHA1 caec1233f841ee72004231a3027b13cdeb13274c
- SHA512 0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
- SSDEEP 384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
- TLSH
  T1C1921A01AF5566F3D3A90830F569375686EBAE742530A4876BF31FCD186A283FA35703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH
  T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
- MD5 acc2b699edfea5bf5aae45aba3a41e96
- SHA1 d2accf4d494e43ceb2cff69abe4dd17147d29cc2
- SHA512 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
- SSDEEP 96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
- TLSH
  T19BD1E73D75C33DB3C54ACA762C65292B0FB8C9261B5402119B6716C279D5AE3FE29382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  uninstall.exe
- Size 91KB
- SHA256 7e36aa07f038be4ccd1dbc0d8fb50db6413cb702c031d277a392827dab886a48
- MD5 f27aa6b8b40a631458ad84e04142352c
- SHA1 47906076327b433a0aa7058efb1830707eea4fbc
- SHA512 788713b3823d6e292f148d6dff8b91d80f0afae628394e2b8c061033bceced601a72afffc809d74296d836bec97d6590e6258e5c39aef8e917bbd8d48b619d92
- SSDEEP 1536:ZpgpHzb9dZVX9fHMvG0D3XJfd/YPIRvIESm2HkRfgxquWrA9GPcrspFIh:TgXdZt9P6D3XJfdAgsdHEgxquWqr+G
- TLSH
  T19093E14A23D0E87BD6A32A710ABFEB7FF7B9D6C402155B0747542F3B2E2614AC905294
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware defense_evasion discovery installer spyware stealer upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Deletes itself
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
- MD5 e541458cfe66ef95ffbea40eaaa07289
- SHA1 caec1233f841ee72004231a3027b13cdeb13274c
- SHA512 0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
- SSDEEP 384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
- TLSH
  T1C1921A01AF5566F3D3A90830F569375686EBAE742530A4876BF31FCD186A283FA35703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH
  T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsJSON.dll
- Size 7KB
- SHA256 49b173504eb9cd07e42a3c4deb84c2cd3f3b49c7fb0858aee43ddfc64660e384
- MD5 b9cd1b0fd3af89892348e5cc3108dce7
- SHA1 f7bc59bf631303facfc970c0da67a73568e1dca6
- SHA512 fdcbdd21b831a92ca686aab5b240f073a89a08588e42439564747cad9160d79cfa8e3c103b6b4f2917684c1a591880203b4303418b85bc040f9f00b6658b0c90
- SSDEEP 96:Zw8NZ0x0OOdzJt0TwYKj7W/NYDNd9fQ6blfW+KrWC69r7ncnrD6Qdm:6e/7vAmrHblfW3iCmDcru
- TLSH
  T122E15C8173B8409BE0F1137A68E5830B715DFD50CEB5578E6AC0224F6CD16B49F44B75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral19 behavioral20