dracula_stealer | 467feb3ed6f209b24ee4706548a29e4eba525b01133c131efc703685c24dadd2

Sharing

Copy URL Twitter E-mail

General

Target
Liberium 1.8.rar
Size 25.1MB
Sample261012-ylwveswx2n
SHA256 467feb3ed6f209b24ee4706548a29e4eba525b01133c131efc703685c24dadd2
MD5 6eae2bfcd70e330754a476f1ed0f9a72
SHA1 b9300dc29fb953480505f6599548a3c2dcdfc8d6
SHA512 eb416c29117dd0c67b585ec7270976c58a11f91d0c11be8d40fe37320311a4dd23a9514f52be579b38ce4a6796a72ef9495fa1e71df83f6ee2e98658b9022e6f
SSDEEP 786432:dclrJkHt1/EYVwsFtxynXRArwDAlZVLaGYXlTP5IW5mB:msBEcw3nXRArw4VLaGYlTBIW5mB
TLSH
T1EF4733405F8BEC2DD5D6B0D1391DD15EAE49AA44EA8B6C7F8DF36288B00D0C19FB56B0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

overlord

89.34.219.49:5173

Extracted

Family

overlord

89.34.219.49:5173

Targets

- Target
  Liberium 1.8/BouncyCastle.Crypto.dll
- Size 3.2MB
- SHA256 e51721dc0647f4838b1abc592bd95fd8cb924716e8a64f83d4b947821fa1fa42
- MD5 0cf454b6ed4d9e46bc40306421e4b800
- SHA1 9611aa929d35cbd86b87e40b628f60d5177d2411
- SHA512 85262f1bc67a89911640f59a759b476b30ca644bd1a1d9cd3213cc8aae16d7cc6ea689815f19b146db1d26f7a75772ceb48e71e27940e3686a83eb2cf7e46048
- SSDEEP 49152:JIBbo0WIgmjljFtXCdRLRBcJd+KaGxHIkMNqzP56O8lZ7qXUqi9Y:6BbBWIgWljGxRB/LLY
- TLSH
  T15EE57B0577F81E67E56ACBB7D1B14012D3F1F82AB363DB5B5882633A1C13B805D826A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Liberium 1.8/EntityFramework.SqlServer.dll
- Size 577KB
- SHA256 a960dd4d2f0f37b3c09ffb9567c32426b8791310d7eb935c04c819c3d46bd49e
- MD5 af1646b1c2227ab206d855bd068535cf
- SHA1 3cd982ad2fb00a50151d7f416e4b05f79528496e
- SHA512 04eb6b5ec3a1655ae2fc661f6f9053f7743a2c624c4e8b0e1e6660fcb135a847adda27919ae8f38987e370e0114bd5ce45e01f1c894019a864a22cae3d24af0a
- SSDEEP 6144:EcK9UcUZV25QiE0U0CxzB6zHK1HHYkIfPQG2puGeqVmjaVmnS4bfu65+:fcuV200veIJu65
- TLSH
  T187C4F715B3E45E24C3BB4230583A701CEAB582F3627D0694F95EA3DF6FBA91115A3723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Liberium 1.8/EntityFramework.dll
- Size 4.8MB
- SHA256 ff42bca704605e187abb45523868b15128d6af1c28ad40a4579d507d34a953b2
- MD5 ffdcf232d0bb2fff78721fb347641a76
- SHA1 54c76a2fa61e6df1ae4c9df65435a38482c2cb71
- SHA512 89df103556cfbd955283bee551576134f9a7b0d121e12cf6df4e9f4028075b2c4ff9d22886cfd21b10d0a0d6e640db784b74d42ebac4a45ccb9ce9c725a1fdf1
- SSDEEP 49152:9PrnRLX8ziolcD5jX24Y/g1YmNBayW5Ci72yEBzw9vb5:tnt8zi8o5jX24Y/fmLaZv7xt
- TLSH
  T1EA362942F3E81F2AE1FF067AA435604A5AF5FC6A1352D65E381CB1AD1F227005A63737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Liberium 1.8/GMap.NET.Core.dll
- Size 304KB
- SHA256 b260bd61d577d7cf6daf5e954a8b894999441833c33ef270c9e73d7dd8580dc6
- MD5 112a37e4e190b6af687fc71a8518562f
- SHA1 3be3c34b4245cb8c27b348acf0273592b84a8822
- SHA512 a6ed4ad3ddfab121176818273b9f9f2ed3bd0c6d37a6f5173ae1256ba6dee47e2c6f40d763885934b2736380d74a0bfb0ded7cc7d24e0d847d378c485ef48ab4
- SSDEEP 6144:FFj7zE9i6vGyNr9Fb8d+Vb8uJgbqefHLBBlwePz:7j7zki6vGyJPb9VP0H
- TLSH
  T1E9644B1827E8962BEFFF4B7AD0701D2E5274E01662BADF6D4694A1FB2D137827400673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Liberium 1.8/GMap.NET.WindowsForms.dll
- Size 154KB
- SHA256 f09c31a7f0cde63b914826fcd8b47e7267394175d3fab30cb9615519e5817e5f
- MD5 2110dc2c787880b9ed2ef58f17cf8da9
- SHA1 24edeb5fdd96af28425e28f2682f9874c3f9733c
- SHA512 095a26c3c7389fcabc9f5ff24d4877879d84513e628a20248bae693f1a2241a583e398f8662131dd21c07d919c06bf3d9af54f68f10a6e361e1c0f09e1dc8d31
- SSDEEP 3072:oPP4oYc0UGujmTXh7ALGD9vgAJcLv+IEJawdS5DBRS9LXf+6qbugi7vRq:KccbGucgK9vd/0rS9jf+6qq
- TLSH
  T163F39DA273948D7FC66F47BDA0A140C1273AFA02F692D35D5D9070BC4D93B146B227AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Liberium 1.8/IconExtractor.dll
- Size 10KB
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- TLSH
  T179223809E7EA4B37DEB7873654134656E334BA10994FEF5B05CA50642CA73A00B12FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Liberium 1.8/Leb128.dll
- Size 7KB
- SHA256 0e9f5e8cdcaa564d6354c15e2fb4d33dbdead917a2e1388050a68bfb1876ff01
- MD5 e6650e116617c59d46b6f2d3498ee138
- SHA1 f499cf553215a2f4190f0c1e9d35b43dc9e1b092
- SHA512 09f9b493a5accc6ba3e724627b74189e08c34a6f30557a5e07f849957db48b22d496fa38a40640b591c67ed3d9cd797f350136fcc6c5f8fdab6c3d645429cc34
- SSDEEP 192:lxAvycMDDDDDDDDDDaZF6URpVJVXKy83:/+F6URpVJVXz83
- TLSH
  T13FF14304A3D44E24DFA642BEA96A470993B4B71D9C43D71F789456E17D0137E2E121FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Liberium 1.8/MaterialSkin.dll
- Size 6.4MB
- SHA256 3b0e1b3af6d2b8b3d02b6cd52849277c9c8066c2ae565e68253d4551c37492d3
- MD5 022f385e55d9d3d42a33b4ca999bf22a
- SHA1 5d2f22d51d2e87ae8d1f2c1acd3f08f4fdddf107
- SHA512 7fd663b56a2894d1db2ee1032067091f72a4ac301ee8cd392030c6ab186e3bb960d8e35a8591204fc23e9b5a145a2a9ab0092b1c9e6ae5c9c2dc2adf907a891c
- SSDEEP 98304:iZavd9tWpmIgMlqVz+rQVe97lwu9cXvBxDh3DYnskFb06vSXvfnjMK3aYLB+8uNl:ivKv8XcXD4K
- TLSH
  T138662902D642A62ACAC6F6387D3D933E0D70D429FC5DB62674C59F3194CA904EC69BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Liberium 1.8/Microsoft.Win32.Registry.dll
- Size 22KB
- SHA256 619737e2af8fb713085726631dd2e522fe130cac1d388a59c38907a47d7aadea
- MD5 da40f3db8b34571684c0cb5bcecd2a79
- SHA1 1c27a41fd84d6bfe99dabae2e59fcf12fccf6213
- SHA512 e656d72e111eaca7c8e9b7d4106030c1104286395046c2de58a04edd590cb2714dcf3aeca2b93f843b4663f1d1e630cc19f1e4eae2fa62f0d382fa18cc8a5981
- SSDEEP 384:z8a6WQCgE7MHVia7Z7aLPQmlJLfbTWnWDxW8QHRN74fZalxA2:AJCp70ViyrmlDt84a
- TLSH
  T18FA22A02EFE8402FFFF70E3519B5D9225D76FAC62902864E1958D2CE5DB2BC4D630629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Liberium 1.8/NAudio.Asio.dll
- Size 33KB
- SHA256 ca03780217139b37f7f5b6921d59defb8d24988315b16b167a77fa88caa7d00f
- MD5 eb254b04d63a9f03b77563243805f68f
- SHA1 b01c83ec51f7a6548d1babb5e5ff8d5b944965a1
- SHA512 af40c8b9753ebd5abdefad82597dcefc3e5272e917657e3cc7d7961ee8e0070c04f964df456eaa92c8ba832b1967f35ac57490fa2adab2164f323e778979ef9c
- SSDEEP 768:gehRrWpB5henf0HTYdpVCYKo9c1e6ttHjB6Ca:gehRr68M47hGtHF4
- TLSH
  T16FF22B71EBE88A27C92E2779B4F2040407B5F190F623E74F9A4C54AA6FE63594790373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Liberium 1.8/NAudio.Core.dll
- Size 183KB
- SHA256 fcf493fc47a2f478a65303886b975fbdbf714cbb1f2d79f7fce97e4bb16b01a8
- MD5 48867f392b8e77dc06c062638c6fbd36
- SHA1 ccc0931e2cf3d6d79e24c1f28d9c96b40c131af6
- SHA512 b536e18c482dcf810ec30b9a943ec06e0ca4f6f2bd8f187b807a9a9fd90d28c4c2fb69bada4766c72e0b7942f5e7d40dd94b193ab01e68f666838698bbb473bc
- SSDEEP 3072:n5nFpdQWUY6GwfIGsnLRp2qr2eeY0nVuEtEVEOUkk6uSYsM+S76t:jpdQJY6GwfIGyRp2qI/VZtEVETtHG
- TLSH
  T1CE046D2963E84256E5AFABB1F0F208175BF1F4463037DB0E5D806AE92A07B11C562F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Liberium 1.8/NAudio.Midi.dll
- Size 45KB
- SHA256 f246e29921797b173b54229685e997a11f9cc388fa1e589c212328abd7a94ebe
- MD5 3f5c79100f4f7902114c3fcba275c606
- SHA1 cb874b2a2561239b5b1c30a49574229716f5f62d
- SHA512 e435b839a769572a251cb07238020f2496bef97949a3b3159e85c12327e4399a2adca67bb5b2a0606318ca9b5c7ea99bf013a431c72034ce51f9224721a4cf79
- SSDEEP 768:lwuDUaOqgwjYpA2kn+sbS+O/RXgQPODHM0Mx7YlEmmSFyaetiWvmYRMUQ6LUOu5+:lwuDU7fwT2k+sbRMZgQP6HM0Mx7cPXeN
- TLSH
  T103232915A3F8861AE2BF7B79FC7056100BB2B9867A32D74F0AD8686D1D237844C61773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Liberium 1.8/NAudio.Wasapi.dll
- Size 175KB
- SHA256 618ef0e49d64e7a66dfe64bbf6ae81705b9d9683d8a9f321e5c3024d666bdf82
- MD5 278ebb79da14ecf8e0559530c2fda076
- SHA1 8a45f0400f6bc46d254120345fd5e39b6c9b71a1
- SHA512 f789600a820ff4286cb323c4f9dfb6b44001be9295bb24973308363a2668761055e807c7ebcb53900293f4be71c6b5ca328075c230b1ea8270f0d76e3ec477bc
- SSDEEP 3072:ZTo4k5xAt4T6awobjXGUHVUbLuh9aaWIiEKILT9rPr/duoSabKj5BIfgmFyjaKv9:ZTxk5xc4W+VU69aaWfIFzDoI44
- TLSH
  T121046C3537E88967C1EF97B4F8F2294787B1E0463A13AF8D15C45F256D13BA24804BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Liberium 1.8/NAudio.WinForms.dll
- Size 40KB
- SHA256 cf92f2f143c22806b88c82f7ec1556f0d814bbd81aca998814709b0da7437f12
- MD5 be8205f435b2afbfd178960c46310c17
- SHA1 6cf807daa6ab142ead6619addf8fc11c56dd51f9
- SHA512 c0cb8ed1381c932a222814084bb50788f51d863b306ba41bfd5b548930ba6939fb0cea8a39f1f171247c461e4d67a1f0aef4207216bdcbfe770e6715d8f5e522
- SSDEEP 768:ZNMJ4j7TupqLq+VHDvtiT8dDDOCPRtbQDmZ1RST+WjQ2fPj9N2fq:fuiqP8d3OMzbQDmjM
- TLSH
  T165033B25935CC37BCA2F1A7E48651105037AEA84B441EFEA7DCC729D9D83B421720BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Liberium 1.8/NAudio.WinMM.dll
- Size 56KB
- SHA256 749a01ebbb5edd8b1a03c5263b04de6acadecf52e4cc84d7412bc6e93f180958
- MD5 faf1ba532964984a34d60674fbc7a5a7
- SHA1 0999178949de510a47d87de3b8a117a003c572ee
- SHA512 d23b783bfd55a09c726ba09d627dfcc6c22a6e7bed8a53dff72c349bbe6fb190afb574cc267b7bebed1540b0bf834f259b5d03b50e023881b3ec42a8b2b57f1f
- SSDEEP 768:cQFu51JOtZ+Wr3CJBTNoNfDhPrDVSvxu1tEMgGd8GbpDrXa8Rcer+7Ul:cQ8zvWr3CJZNYDhP9Svxu1tEufpDuil
- TLSH
  T12A434B013BD8427AD2FE1B3EA1F30A524731A8D6796BFB4F1598F1DA9853B8049017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Liberium 1.8/NAudio.dll
- Size 7KB
- SHA256 8bf0f2e8dadf3967757191c2212c269333ccd9d7e59839eea968212c64787be9
- MD5 c583aa3819b16ae53859f728f59ea9a0
- SHA1 b699e8e2cfc52bc3cfba182fdabfc7f6ff8f82de
- SHA512 580fa002b890c6c36dd907b40a121153eb12192721e67b7209c9bffedf8e18128b75ed454d813b67c67040fe5869816ac10e624cd8dce68917a85dd5426a490b
- SSDEEP 96:GBFskeJHn4jZkcLqEm5Nj7AVUhkon1MrtrRGD5pkQa1LrjSd2V:G7kHn4kcLaj7zSon1MRlvQa1fjSm
- TLSH
  T14AF1D729A398C676CA674BF1A42703400339EB40EA57CB2D0D9CA59FFD133185AB27D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Liberium 1.8/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Liberium 1.8/Plugin/Action.dll
- Size 27KB
- SHA256 37e1b48e02a17a865b18cd315a28ef4f18d702702bc786f557e4eb5d7878184b
- MD5 23a7fb014b665f3e017f86d9ca2643e3
- SHA1 2727a1b37a4accc74cc13cd087a260ff56230fd1
- SHA512 37c67c329dfd41ed01fc7272c1d28a29f8aa4a8d3ad464aa505d288c41050e82be32f9d197cfdeb71ccfbc37aa0676a0f9e85494b607205e28eb1908ef123d3b
- SSDEEP 768:9oE6MFY/dEMKix0thSCBsFY/dEMKix0GjRjrEquHp/Uz5x9Lv:+E6IjrEquH2zBL
- TLSH
  T18EC20A04F7D86A30D1FF07759CB21B15EE35610BD8B2C5193A8C40E82F767598AA1BBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Liberium 1.8/Plugin/AntiProcess.dll
- Size 10KB
- SHA256 0563cf42c946bc00760f51e7c81e5b83f5b65077afb2f70e90ed3fc604534cf6
- MD5 5713ff897403f3831da890ea800654d6
- SHA1 1cad6497a4203fd0a7bc28d4eb52be1187769e98
- SHA512 cdd4bab489a89dafe71995346c1d39cc1b9b77eaca2b77c3ede0e677a3db64b577ddc95bef7f206712e4032894e960ea03c78fc3ed11e8f0c584e1845e8b346d
- SSDEEP 192:7nGYHQ8s3Zjrt+5Gie/4tusI6ibn7NHaTt:bned+5Gie/6us3ibn75aTt
- TLSH
  T15C22C6059BE44B30EE6E06BBFC7B875A8734F6554C43DB2F2C9056B13C463A85A62398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Liberium 1.8/Plugin/AutoRun.dll
- Size 357KB
- SHA256 f7884811c963a0b8006f282c121278f39e113e2a1fa8aa2d093e4acdc95c7b15
- MD5 c422f2256dad3fa20dfc3701ce4aae96
- SHA1 134490ce82f68a49dd9f45e27b825c463f03abf0
- SHA512 d7e69874f1a6b168de15205f2c9083c2287e0df4257ad990860abcfba1b0a2c90bbad144cda2d4cc493cd0874a598bfbb44ff867d3bb956c8615cfe12a108fa4
- SSDEEP 6144:2tsANPVlFHG7QU9V1X7E0AEfRdq6sLtMwNEamxkUu1t:9AOn1L1AKOMIWxkUu1t
- TLSH
  T127744B11AFE48237E9BF17B5E4B303100BB5E589E56AEB4F599414E80C63309AD173AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Liberium 1.8/Plugin/BotKiller.dll
- Size 26KB
- SHA256 7bd4bfb321794ebbe6fee143fcae77e2b5f35d3d764573800eadaf1dc695e8b5
- MD5 b8a4fc3d5fc89408eafe329cfdf4eec3
- SHA1 6b3283f76d53b54d689c7ffb81dbd6297bff9f61
- SHA512 17dea0a08ae6f6cc7381317aefc90fa1ded9b8fdbef87db4962f41aa5a2b8c9b7e69dd9b1c57f9e062f46a756bd3d32b469bddcc4abe63c213b31babdb1aa6af
- SSDEEP 384:ecBitRM8UqlFY/dEMKix0GhmggD8bwKSs7fL1gFt9et/mR17WlvZma8IlJbt:eWitG8jFY/dEMKix0GoDk5d/817ID1
- TLSH
  T1F1C2B620B7D96234D7BE4F31283262114B71B5269C63CA9D3ECC51950B3A714EA35FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Liberium 1.8/Plugin/BotSpeaker.dll
- Size 14KB
- SHA256 3df26ae2d03f6cc7732fdc9d1498d8c26f84504327dd57178b778d43f7a1c20d
- MD5 4fb49f039d8c3bd89aeda2c63e233ccb
- SHA1 f70cecb45e08f82d8d9b71f39e1d0a708a0733ef
- SHA512 e3a2121f9dd0bd0efee4f999ede4fe87280206bfb9b896abb7d9b41a9f0748d89757228d702f2a71a720d805db7e78a0c4c97caee09268836bc375d321b6f429
- SSDEEP 192:2RlXXmgxQ8wbwlpaFuC+yYYJUT8kUD/4pHc2gPi57lL+ry0gOeMlvOv8RL:QXfQ7sp2Z+yYYJrkK/282giF6gbv8RL
- TLSH
  T18352C609EFC59B32DAA957BB45B28355CA34E5085C03DB1F7CCC21E5FC06BA92B601E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Liberium 1.8/Plugin/Camera.dll
- Size 98KB
- SHA256 8856c385a682e8ee00209b6c9814d977efa7c9ec8577d4d87c1c097ba510c7ec
- MD5 15fe64c0625fad772e585b6329da4c86
- SHA1 6ef0b30954cf9f8b9d6e5e461f61ba0ed905a552
- SHA512 83f25fe8a2a943ca4afc133e2b0727865d593494991957b5d4a0f990434353c621c04bc192ba94fd2a2ae08925b532399c17069adce7b3644b7f334fda8c71ee
- SSDEEP 3072:VCCQQCCc23F99bb99fLgUsOOMMOOQOfVkBmQEQIpZL+S+Y37ikFJo:VCCQQCCcw99bb99fkpOOMMOOQONcpIpH
- TLSH
  T1CEA34B9167B8C563D5AF57F5A0B74B164B70C203A603F7EB19B424F82CA37411E222EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Liberium 1.8/Plugin/Chat.dll
- Size 47KB
- SHA256 adc1426293f7d18f179b564cfa228cd7b7246580b24e6f6fc0eb18628dba9ebd
- MD5 5659d95536342389a8265d29b11fa0ea
- SHA1 e85d8f444564e2fa9d0b8fa29ad33c72eab59c09
- SHA512 ceeac539e9cb09a6b249f84b5ff139e43db6c8ea8dbceb24fd84bd5e1fd8d08c5f65821988fbee279631862226ab37740b406e3676f4d88f7179aaaddd4ff799
- SSDEEP 768:oqVJNCa72NLlpjnGFsT+5asw+rBdNZTgM/Bc6909D+ETzYwLgec1:hV2aWTiFw+LTc69UD9ztu1
- TLSH
  T162230910B318CE3BD6BE0BFEB465126103B5D316BA43DBDA5DD5109CACDB3868A141EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Liberium 1.8/Plugin/Clipboard.dll
- Size 13KB
- SHA256 9a5c5c1014b569ff92eac1f3a809559145095c8e83b22e53b9277676837499f0
- MD5 cb96674be57d0c8d38ac31d3550e73d1
- SHA1 e6f9429e1bd47bdd684ae06e24d83e451bb52f0f
- SHA512 2fd6c7c5864fb06dd3a717a1ec7f6a966bdd9675118e87d188d8f63fcc2780edb2815f7d19bb44d0ce6897a59bd1413df116f8a823b3a6e2b65606d82a7f0838
- SSDEEP 192:2pR8sh0G3FrPpaHHS+r+g9kA8nH/4KNl6mMBqAZ2YFVvYCDdEbCr:FsJPp+y+rVkA8H/LGfLvYyEOr
- TLSH
  T1F552D905DBA05F31DADF95B794639349C734B1116843EB0F2CCC44E0BD5BBA826326D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Liberium 1.8/Plugin/Clipper.dll
- Size 15KB
- SHA256 7e20a585733f71f441872c02ffd160e3484f1b9a60b2a07a886630dd7599b1c5
- MD5 b33db4b62a906fd1ad36c8238c19721e
- SHA1 c4cc18121c768d0249c8b6182d3568c35272cc8f
- SHA512 38a3b0240f2c3e47ac90badf9d8968b9dea4582d707b9d85e8ea1fb0b1f3e3ebb582693a26729814629744d0b45dae09549aa51d140f8289bcc78bc013bcf9b9
- SSDEEP 384:jN7IcTrT3d/c+I+c6kJ8ep/RItSOglOpg:jdIcTXNk+I/6ep/CJg
- TLSH
  T10B62FB449FD0DA32D5F903FAD8B3A3898634E5045C03DF1F2DDC08E86C5B7996AA25E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Liberium 1.8/Plugin/DDos.dll
- Size 113KB
- SHA256 d02b2d970960070ebd41f931767d50eb8e6fccbefcd35ede140b8c2ecff02522
- MD5 14c3eea78012239274b57df062d9afe4
- SHA1 01d17f22e71234a85f84558e177ac1766db4bb12
- SHA512 1ba35e03b543536b4b3a44d79309a010a6d8add5c6679baab9ef1f1587bdb460aaec9f726674529faceaf8e00981a993f6004f9329ab3ba7bfaaf734471969f1
- SSDEEP 3072:gshGcFjKyO+bwqlWj/RxfZwqWHDgAwlq:7pfHXwl
- TLSH
  T1B8B3A314B3F04319F2B7177DF8F55116AA79F645FC32EB8E2469031E08A2B009986B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Liberium 1.8/Plugin/Desktop.dll
- Size 778KB
- SHA256 44608a47639bab323d4011ca80eba806ecec75ad42f1122bd7969b520f94750e
- MD5 0691e527028bac9f5c145d73a708bfaf
- SHA1 39e420b3e9a3e71fc1123a190eec5549df3820f3
- SHA512 9e019fcab4116a9e03b88c16c5b1354328fe5fc1efa882e9bebd8c0ae46b56b889f5f8375fa03824a7860d75fad3bec10edd00c5cd8ba50bf312209f671b46a9
- SSDEEP 12288:eJqOo1aiGeJ0MRKI0xRt0HgmtI8pHuE4po8U5BAst:eJqOo1aizXRgxRtA5BA
- TLSH
  T1FC0529C6CE642F26DC0F6A7F74A2651382A1D0900345734B5BD117AE6ACB3A5CB1A7CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Liberium 1.8/Plugin/DeviceManager.dll
- Size 14KB
- SHA256 9b2d7839829e7181f7e99eb9f1aa88428f70840d57666be16974b32d525fcd27
- MD5 6aee6af63df9181248c6306a968bc41f
- SHA1 d361fc63141cf1ad88c7dd56cbb3527ec38c47bd
- SHA512 3643bffeb2a6b4dc6f63328fea885b3713d6fbbaf25448748ada8eedc6cb3db24df73d5b130828f37290de65cbade3871f34f9f72015d72764cbf202a26ee02d
- SSDEEP 384:s5yzPdtmpq1+C/OkP/1ksPnmOq/wWeaDD:s5qt6y+2P/zvgDD
- TLSH
  T1A262C545EBD49B71C6EC42BB98B243598635FA456803EF0F3CCC54E1FC12B9C6A216E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Liberium 1.8/Plugin/Explorer.dll
- Size 499KB
- SHA256 36fcc6ae1ef727bdd87fc9eda49459231c7d6e9fe8167adb01f9a5d63ff00483
- MD5 6b710265853aa59e53b57d1ee6865354
- SHA1 e728953fb7e3cb184277f6337f24b58452f9477a
- SHA512 9ee218cd38cc1153b936f2431c7d4ae2ef75ed2c4da9a7b6d688fc26e0e04d238fc0b17cfa747adabaae5f288baa280cbec289cdd91b7d73374576c2cb76ace6
- SSDEEP 6144:n4nSNHQs2dP5yGtSV41QJDsTDDtUMle6ZjxLV/m9HVJksDjJ5RIUGZ79:j8P5pS4YsVUCe65fm9EWTJGZ
- TLSH
  T128B48E006BD8CA5BF1EF67B6D0E39260CB71B423A97EEB4F5D8014EE1D1234099157AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Liberium 1.8/Plugin/FileSearcher.dll
- Size 15KB
- SHA256 a053ba1b74531161f49813c047c504741e7b64639e748958a98e71106a715757
- MD5 832afc9b5e77b9e58c138e0b3f606038
- SHA1 78a2676fd59ad00f854176a021e7e49c903fe65a
- SHA512 2eb3d1362fdc03fe2baa86b923c235eb8bb901826058fc1aa0c8c05344f6bce2f5b74fd86c4ad8ec9966205836e6a0f03b2b5aa4cdea0453d417773865143149
- SSDEEP 384:aoZuGc6BX1PIphh+5P9U9rkdg/22nGxfpGHzdqX:aoZuDiXVQz+52adg/+xcHzdqX
- TLSH
  T11E62E708BB81D730CA6E56BB9DA343454634E2099843DF0F6ED844E87C42BED5EB15EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Liberium 1.8/Plugin/Fun.dll
- Size 48KB
- SHA256 60375212374e77e54296e3d01432d75c2ca8c954a7a32c5b13ff510f4eb18f1b
- MD5 6b0e2e9ddb88342908ee1b6865a8f7db
- SHA1 14c8614576df69d3e84781614d3529bf91b45017
- SHA512 c4f0f37ed24536379d2c350c5e688436c2fbcd0957b69a601c3f651251ca26e28d8fb4dc7c3202e2dc4fb68c942b28d904b645fdc861f53dec9601040478a564
- SSDEEP 768:uzhlKS4g2amhVK/6cCGI0TYX/dj+fnIpX0/isVuhaY8XjCg6:elAh/c52X/x+fnogu58XJ6
- TLSH
  T114233A4273F78622C2BC12F6D4731315D63AF286B843FB6A1CCC25A648727C49A257DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32