be4e7a1bc79d3188651f212a1732fed521858f1f1564b0eeb2506e7cc36d8e03

Sharing

Copy URL Twitter E-mail

General

Target
Ylide_0.1.6_x64-setup.exe
Size 22.9MB
Sample261017-nbtxzaee92
SHA256 be4e7a1bc79d3188651f212a1732fed521858f1f1564b0eeb2506e7cc36d8e03
MD5 2060a1e8c0caa7bc42442e001d79b986
SHA1 22deffb6a7a3486f2e45c1f0c58e4965ef2ea420
SHA512 e8db2d7ed5a939158b4b7875966c450662a6164a04948921d9f13f0513bdb472e83d8b7159b7b521da924ed6d847625b70c12f971a6513cc180a8715574be892
SSDEEP 393216:6ueVYfcoPXusj6CejxHHGpFmSG67juzbjS1676K9/mkVxxNyuz7wwG+/YakImyUN:69VYNPXuzxG3BujS16V/5NF7BQakImyS
TLSH
T1A537337110A0B5E3C5DD27B890ECDACEBC23F9882B4087E97471E4E1B7252791B6768D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Ylide_0.1.6_x64-setup.exe
- Size 22.9MB
- SHA256 be4e7a1bc79d3188651f212a1732fed521858f1f1564b0eeb2506e7cc36d8e03
- MD5 2060a1e8c0caa7bc42442e001d79b986
- SHA1 22deffb6a7a3486f2e45c1f0c58e4965ef2ea420
- SHA512 e8db2d7ed5a939158b4b7875966c450662a6164a04948921d9f13f0513bdb472e83d8b7159b7b521da924ed6d847625b70c12f971a6513cc180a8715574be892
- SSDEEP 393216:6ueVYfcoPXusj6CejxHHGpFmSG67juzbjS1676K9/mkVxxNyuz7wwG+/YakImyUN:69VYNPXuzxG3BujS16V/5NF7BQakImyS
- TLSH
  T1A537337110A0B5E3C5DD27B890ECDACEBC23F9882B4087E97471E4E1B7252791B6768D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 3c8b2629048c118e4fcf80188cbcdaad3a668270e49fd95d2809feccc98fe220
- MD5 1154b69dd61f3d5594ed9dd1710da622
- SHA1 0aa4fc77cb6221be0055836f922f769665cd87e9
- SHA512 ea36422f3d2c7a468fca405818a984817fae1a70d97697e86c5273d21f13e473d05f35f3dcd28db907b35072449970a324f6d2d3162155ff09ebb9e00c663f41
- SSDEEP 48:S46+/iTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8msofjLl:zkuPbO5tCZBVEAWyMEFv2Cm/L
- TLSH
  T1ABC1A470B3D248B9C591413778A733D36612AE747784504FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 d3e61c4df837625ac0503cea5b6765a04d37fc35399899a5503b53a3108bfbf6
- MD5 7c8182ee99c93fc3a1bc41a52f5007ca
- SHA1 05e9155694fcb8eb928632265199a4c8b315021f
- SHA512 c1d4e5f86656b945442bae1386081d8ed225b6cea8161e1d061382fff58fc77261b88fce74a4292269ee8ea5ef4c032eee700b0dce48bb35c419a5cb9317c79e
- SSDEEP 384:8rSQMCOUILnCaSPy/yhJzmGSMRWyOUKi0:8rSQMCOp0yamMRWysi0
- TLSH
  T14C623D16B62084F5CBB2167034D73B3E6BB28F6A292848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 39870682e7d1c026cd2b33ca25591db28250dde17de7eb1feec404222d534ffc
- MD5 128e19d3f6bc32de40ee88a431cd4a5b
- SHA1 44cdb6a3bb285d6502888bc4aaa6fa951b059d1c
- SHA512 109d164db47ae525ad9361a28e9b3265977cfefef6504d456c8e0272f4b2ff70c534bbb5404ba7048a6895441b7a49012ab82a62785ec9ac45c24c6f2acaa135
- SSDEEP 96:8It3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/d3lkCTcaqHCI:thE+A0+sF6piUFkABlncviI
- TLSH
  T1D8F1B776F3D20673F9AB437428632F231B2AF521576981A6490316CE7A61DA3FE34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
- MD5 564e01f2c6edfb8475573e1b809cb5eb
- SHA1 5d767e8f685449d86cd8d16c83a814ef8f7d6264
- SHA512 67486f8e996b29688cfb5a57ae4a7604fa0892ba0eeccdd55f514ca4bd9b79a6fe42bfab4fc85156c2258ae66539bdd9bb36a8b5f7f944f3007c2421f244c95c
- SSDEEP 192:rjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ80QPi:X/Qlt7wiij/lMRv/9V4b8r
- TLSH
  T1FD426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
- MD5 79c27de4d1c6d295fefaa70f608f1c67
- SHA1 feba90c93db3fedd450a81eb2603f793332d1a83
- SHA512 fbd79f3946032821584ea2fa4b559ac5809ab45fdc9107eb47c9ff3fa3229d7748a7b2ed588709e59cce16a4f8e58ed98b46cb061acf1080e78434d184f51ec7
- SSDEEP 96:oQEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YbNqkzfFc:oQEvCu5e81785qHFcU0PuAw0uyBIFc
- TLSH
  T1E612E892A2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH
  T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  runtime/cpu/ggml-base.dll
- Size 785KB
- SHA256 0a259689ea3c105a8122159eb97fb53733f2531fadd3e9739689961cdab27600
- MD5 386cb14ff334aeddfa2d62071b17f006
- SHA1 91dfbee1765a025ee7b1e6f16710789b196c2ff0
- SHA512 0199da3f19862521e983b74765b803f24823a925bf90c86b9ef9ed0c9aee4eac2a68ba0b7be38eb52d32ad4c2f8a7ea810dfdb6b782bb4a9d8b3ee2b1e40adc0
- SSDEEP 6144:gP6gpUtFjmAU4Iz6KYkoQUCEmhpFdgvjlxU4ekRZFQwcTpFM3j1e4WwkrbnB+KwR:TWwkrbnBOKnxJ9rP0+njuhB2tc/Ys/
- TLSH
  T16F056D9AB559D47CC163D031164AA637F851B8DA0B206DE713E0CA353FBAAD01F3AF16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  runtime/cpu/ggml-cpu-alderlake.dll
- Size 1.4MB
- SHA256 98b3bd12a84e848f57686f6d5f0969654ec79cda0c7636498933ea1063d14aa6
- MD5 e640d340edaed9bc633d35e63c7e2ee6
- SHA1 a565108add73ab5127c8fd814bb834a359ffd92d
- SHA512 7aa085c3603a7829936f9a8ff0a0a6825b3adb35071b86ca528dada30f02a99fa1d5c6a1102cd476976f1ae06f0767ce400144db246784acb75bd4dfd003009a
- SSDEEP 24576:4Wv3f3ojsuK8TFnwv/T1Ai0SQyAQvHSSc9Zl94hlBjlBkgB:THojsl8TFwv/T1syAQvHSSc9b94hlBj
- TLSH
  T1C8656CE7FA939098C1BB84708A1997B3B912BCD9C8143B7357A1C73636B5F90BC19724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  runtime/cpu/ggml-cpu-cannonlake.dll
- Size 1.5MB
- SHA256 fef636daea23b26f935cf5983be9a29b79f0541cd148b9d64a32bc9ea0cec704
- MD5 9c43a23765644409decb7c10a7676358
- SHA1 6fbedf79dff9ad6dd581cf733ba51a54fc49ee37
- SHA512 f1741a843c3fdb374d2edd7d669ce4a415e76ac5dcb5040b322fecf76743d78766368fca7d140fe7063ed80049670883c6deec9986dd3489f10c24d665f26ca3
- SSDEEP 49152:Z9VZVpOn/vmGynyxrb1QSHVIZYNcMa0VTxD5r:CnnBgQx9
- TLSH
  T104755CA7FA57D1DCC0B794708B19A3B37962BC9885207B7347A1C632367AF90BC19724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  runtime/cpu/ggml-cpu-cascadelake.dll
- Size 1.5MB
- SHA256 b32ee94fa0a366886cd03be48f80f1d8c1bbb338d71fc734a263753ec46aa8fd
- MD5 5dfc8e088ca0143d9251b46290b876cb
- SHA1 00c8ef4469316a3ec2247020fef999cea6939512
- SHA512 44664f927eb065bc84b5511d976a1bf85de5756d415e6f5e0b3ba46f66c0594affeb39bfcc730c3278cab5a6d8e304b4503abcde1672863be0ce325857ed53f3
- SSDEEP 49152:aolmJgW/CGdqCsUsbxZVh4AKxealIGHr:dWKBc
- TLSH
  T1C0755CE7FA5791DCC0B794708B19A3B37962BC9889107B734791C63236BAF90BC19724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  runtime/cpu/ggml-cpu-cooperlake.dll
- Size 1.5MB
- SHA256 e67357a558e71b834360b6f6d62abc6b9fe19930f6f7dd21ee0339e7b144306e
- MD5 f46d3ea04f4ef67d7834c526a61475da
- SHA1 7488c7dd796a2252ddf3e8cabf8b04d09d6b66fa
- SHA512 69c50830512a5b974ab9577c8492ebdb792eb53896f85604ba144695a012da29dcb306b457da330c1541488dd2f4bcb8bf5ea7ec44fc31f79cc77827df74e872
- SSDEEP 24576:fovS59wsY0+9uV9/C/eGCfEaigfVxtbxJ5jdQJnkm5milwskOIG:Ai7+9g9/CRCfnNxtbxJ5jdQJkQmilwd
- TLSH
  T1D7755BE7FA57919CC0B794708B19A3B37962BC98C5107B7347A1C63236BAF90BC19724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  runtime/cpu/ggml-cpu-haswell.dll
- Size 1.4MB
- SHA256 d33deb9bf3dd25427404f0f94a13c6b3da92b9b57b794199a9f354c3a327efb6
- MD5 dfefbf9e928c8491346cb431b20fc1db
- SHA1 27ff491a8b91aeb2fe62c62a208018eedf7e58b8
- SHA512 f0aedc2a14c8d0166bc815ace58dc00b954b333eaefc1fa77826adde576a47faf96efe171991811a1b9ec0f1fd30259a8071fd7e3e2942093b9bf2e817516b78
- SSDEEP 24576:20l/ue/HBSERWRjh+m/907zG9bYooJlv3tFhdvpF4T/mBbD5L:tnHBSW8jkm/90rooJlv3tFhdxF4T/mB5
- TLSH
  T14F655CE7FA939098C1BB84758A19A7B37812BCD9C9143B7347A1C73236B5F90BC19724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  runtime/cpu/ggml-cpu-icelake.dll
- Size 1.5MB
- SHA256 41abb00a64bbf099c137cdb3b9547c7eb90bcd9c1d7b83238cbf10a74f97addd
- MD5 399fe6112745204199d0903c8975ef3a
- SHA1 ca1f6c61e77c5277322b70ac3340e245d9082dfe
- SHA512 0725a89d58c9925a10418c1d387a6dfbae4a6d353769957485de651da6ceb9656b1121aadc926b28f66259b7fada4c5c9e3b8f4d4039f3a3b24d7c6fafb85f2c
- SSDEEP 49152:SSQclhJ/dz3nnVVNb0YjE3NNrT3QGMWKGP:bJF9wX
- TLSH
  T1B5754CEBFA57D1DCC0B694708B19A3B37962BC9889107B734791C63235BAF90BC19724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  runtime/cpu/ggml-cpu-ivybridge.dll
- Size 1.2MB
- SHA256 d674c12b3f40d657b0989801699560e68247dbe9509823651b055ac3816ba37c
- MD5 f9647048cfd15814ef5983e04d019287
- SHA1 eca57b8fa903fe7de3977cd5a938339f127f7aae
- SHA512 785495168cae83c1af96da5b14816099803820f0fc7bcf4a05678639955349b689b5720287ec361a31646215900038a8678da1ee379e1cd75ff63717e1c9458d
- SSDEEP 24576:00B96qvOtmf8DYojwkThGy45J/GdsrDV14JoAiAvgXZDyrj0FKV/nX9rfsgBh:hB96qvOtmf8DYojwkThGy2J/GdsXNAis
- TLSH
  T124553ADBFA93D098C1B684718A18A7B37D52BCD8C8143BB357A1C73236B6F90AC19715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  runtime/cpu/ggml-cpu-piledriver.dll
- Size 1.2MB
- SHA256 bb5215c806397adf56e986f52aa0c75b04b3b5b33203a722f647254eae2b94b2
- MD5 e6b6cc9885f617cdf9e7feccb600f63a
- SHA1 38183772bc49e6e128f2dac825f56264355f0204
- SHA512 eb64a6056de41abb4b6462d987051c7dbe5e58b6413a2fc752310c312a91fb2028066f51fecf54bbdbaa54318f72365cf03a2ab6fc50f3900932027c9298a85a
- SSDEEP 24576:6ssRarKsZZ1qrvvjRbF6z2N7/q0/8cQ+EVCxP1Uw1vWyRgX5gabtSwt924ep:bXrKsZZ8rHjRboz2N7S0/8cQxVQUw1vH
- TLSH
  T1EC553ADBFA83D09CC1BA84718A18A7B37952BCD8C8147B7357A1C73236B6F90AC19715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32