306ed1d17aae5a4dc2669e5f00b1ca3664fad4af2ac45297a57bd9d87b992c68

Sharing

Copy URL Twitter E-mail

General

Target
RiftManager-4.6.10.zip
Size 583.1MB
Sample261022-sqrtdaaf49
SHA256 306ed1d17aae5a4dc2669e5f00b1ca3664fad4af2ac45297a57bd9d87b992c68
MD5 5b8fd74f31fa4407a812584366299149
SHA1 5ad9189d28f016236ac8cb87968341dc399ef969
SHA512 245ad7bd373e6b1cc64e787c8036e55158787c73f5d88675937ed5355bdc46f74667264dbb5e5015281d7bb0c22745553b7574c0a2639ab3856dadd907fc0aac
SSDEEP 12582912:X3q+snrx45ZJy2yfhdkkd+oN7BW44w7uN1nbnuiMdX1ZTBv1PkP0xMq1Y9zaF:n1ux48TnTNVkiuzCiMdfNd20SbU
TLSH
T11C593364E3D205D770076E3292B4BE3EEC91283C3857F8D76B4EFB9650670582A7498B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  RiftManager.exe
- Size 333.8MB
- SHA256 e91f58281bc10df5a9d01f9c09583538c5425df3ab79b95e1c92d19cf05edc55
- MD5 2b376df163684bd3d156e64b51087dde
- SHA1 3d3f00e063ebab3d6a889b70dc813e5d9e5d4aee
- SHA512 f9f7327147e9806a627e5882b26b911a60ec4649b3915e7214a099c42dd65d1ce29ef755fab658aef15bed1412ab2a5e492d0cb5074c0117dee498b010c0394e
- SSDEEP 6291456:tjoVXDOoau6RkYsiabK5a5lQD85qRSxbbFuYAnHh3XFb4bAykNoRWORr7zJvNe:taXDOoarRkgabK5a5H5VxHkdhFb4bbVX
- TLSH
  T121F83339A76146CBF587B331D060B77DDC9239B8AE76D09BCD18B5A835373802D28E52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  ms-playwright/chromium-1179/chrome-win/D3DCompiler_47.dll
- Size 4.7MB
- SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
- MD5 1a7544f942a9a9de9354e7a0f9060e3a
- SHA1 fe86bc104eaaa01357d98db905711e9c73d437ce
- SHA512 c8edf94f58d8007472737351d697682cb74153455d3dbd5a529efc7eab3d862581d1a1eb22b4e5df5176d9952b6b056a720cc77225b5c5a83f2299d90453cbb0
- SSDEEP 49152:1CZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRNd:UG2QCwmHjnog/pzHAo/AyU
- TLSH
  T13A367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  ms-playwright/chromium-1179/chrome-win/chrome.dll
- Size 238.5MB
- SHA256 d641c88111d21c1a2ebb1c39c724f450466d64fab54e53d2791b61b2af7a238a
- MD5 22392cdb57dfdc539062ee4ed99bb53b
- SHA1 c4b28bd8f6e4329f099ac0fbe88cbc7089304745
- SHA512 9d9a3bcdb0285574af9fab3dce3631c93cd421095084ab742464f87bc54de1ce88e75e76b5dfb30a5ab91222d831b28c3551838def849c88dd8520a0a974dae3
- SSDEEP 1572864:e8UWEEaKfyFdu4DyoVxHfXwmK3QTXBCnyLuD3KwThebKgyc8PBj/h5vCcxMXYlkQ:InxBm7/L9Z
- TLSH
  T1E3C87C03F29A40D9E05DD1759B978633EAB1B8880724A2EF175447A23F77EE46B3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral4
- Target
  ms-playwright/chromium-1179/chrome-win/chrome.exe
- Size 2.8MB
- SHA256 28396844597ec1707de7d7efb515de3176bcfd78c12460a00a65fe75d495ebba
- MD5 2e698d7a51a48768aff0da1379075067
- SHA1 d7be267235fcd4a11d7275bfe7eaafe318cb7235
- SHA512 9c29e6b1d0fa7a591069a91ae70eee4be7c1a8517cb17b98aa65972b942441a6c5833cf9a1fa72ee6a520384f8ae8743793aaf09f65428f56212c8e760b25075
- SSDEEP 49152:gEEtcjW1kiM9iqa1rAZRO0kzfe+M8sJkEYvMlbtYVtbGregmH85Uw:07kivrAQ1s3U
- TLSH
  T190D57B03F29940D8D059D078875A9632EAB2BC89473076DF0690BB562F7BFE06B3D725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral5
- Target
  ms-playwright/chromium-1179/chrome-win/chrome_elf.dll
- Size 1.6MB
- SHA256 f45341bd27b9a11d762ccba3232e76fd413e5186545f30ee5737b00622cfb549
- MD5 46fcd3aea8da4a9e6aa405569925a7cb
- SHA1 629b3723b521769cc43b5b0afdc817b75a3f09ee
- SHA512 a4268e3c268c13528cd8629c7c63fad545c3c4f35b042ada816d337691d912307ff663d808d3595a8c7b3f8c7c6c645682d1ae1b74a22f1135ced81737a73cba
- SSDEEP 24576:NJ1PEKH5B79k9s8Ivm0xGgHCvt16aURrBhzbQ4uRPfxt1ag1t616EJkMW:NhZBRkK8n1DUFhzc4uV7sg1t6ha
- TLSH
  T1B1757A13F29900A8D059D2B8C7579632EAA2BC460B24B6DF0790B7552F7BFE4673E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  ms-playwright/chromium-1179/chrome-win/chrome_proxy.exe
- Size 1.4MB
- SHA256 fd458d0f934c6d4db143aa58005646982ec0ff152d96685e4da3d17049a41e6b
- MD5 c1c4a5ab3003a604cbadf555cf72185e
- SHA1 b58516283413c7f5b75165415959d7a8e147cb01
- SHA512 e070a0638e87de72286a175801347b2e4002adb21035720101478693746f0496c7ee4541f3c0cf84c7f413e17ef81e071d381cb32376dbec41228ef48c181426
- SSDEEP 24576:CFElycFW+ydqAwxSWH6PRPR6hAHhRif9rLhQnqi7OnjljMkO7:nycFW+yQCPRRRifdhzi7sBc
- TLSH
  T169657C13F29900E8D05AD1B9C7568632EAA2BC460B24B6EF0790B7161F7BFE45B3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  ms-playwright/chromium-1179/chrome-win/chrome_pwa_launcher.exe
- Size 1.7MB
- SHA256 0473939878e88e948769d433f2085f70b2e0c1f37fe809b3e0946f491b17c745
- MD5 62120d203726c16d7afc9485e653788f
- SHA1 5d4be8781338fccc059f5ed2b771f6e211f1da03
- SHA512 b276f0ed6d7439c2c87c40eca1674f7ae7270da698e2ec3552608e3f9811b506a217d5dd669991727ba4b84827fbcdc2dd0efae6252454c3d7607fe494f0f063
- SSDEEP 24576:L/EXMzn2L85mYiJu1qUsuSdn96gWJi4kttc2GhgkR/9WUPI:rz2Y5mwQdn9uiXYgkR1
- TLSH
  T11385C333B29AD0D4C40D94B0CF164BF195A17CA9C7D597DF02C87E25BB36AD07ABA209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  ms-playwright/chromium-1179/chrome-win/chrome_wer.dll
- Size 108KB
- SHA256 fb56f21b553fab46d35a5c5704111c124fbd1afc41007cf88fcf2c64328ae81a
- MD5 e60f55c9b6b1c5a960a75174993526ca
- SHA1 5e3fd18c5c7bd49bdb61fd5e262b8331248dc6d9
- SHA512 87b6a28f3de09ca22f94f11eec7644730fae31cb479c9baae231156ddaa3fc1cd4d97bcaccb4c18ebddb19d39c77d3b294e2e581babecbe63162820adad3146b
- SSDEEP 3072:8hF02ytWZxo9u8UetrMxAxc9SHgeYBsXb0mOn:mF0hUzJ85rMxAxsn
- TLSH
  T105B34A6B63A500BBE1B7427884634E45E773B8124761AFEF03A0465A2F677D09D3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  ms-playwright/chromium-1179/chrome-win/elevated_tracing_service.exe
- Size 3.4MB
- SHA256 f6ed155a18cd164453d2891ac247b9b4257d27eaf28dfebb6f75f38f9135c2dd
- MD5 ebd7694f687f00530e7aa17c0046d46e
- SHA1 c629b92d5fb02438e0c503cf9fe7f4263bfc236f
- SHA512 6709a2bfb75e1b5a5d872a32eda95ce997c9bb60245ebbc9c2a96d81ecc7cae4943c0bc494edbf0d52f86a7acf5b0b3c8c753c39945a0a8895ef0c9f6c007a68
- SSDEEP 49152:rjngESYG42NwWj4PLfOPpj3WEZklmGdZdZgCpmMoGg2umrD9/yEZ1H+qp1yPzL6w:teIDSC1Z+Xb2DKWI7Vv3
- TLSH
  T185F55A13F29900E8D04DD1B9C74A8622EAB2BC854B35B6DF0650B7562F7BED46B3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  ms-playwright/chromium-1179/chrome-win/elevation_service.exe
- Size 2.1MB
- SHA256 5a90e1f04d3d4e4525873ad1f2ac6eaaf838b846b7b79a57b5baa7caa67ec621
- MD5 ec65ec93faa97e849f640422a860e23f
- SHA1 281e6ab8cfbb38e4202ab9d3e869d1a84206938f
- SHA512 ac49f7d8a15c1e81af874512cc43be11cd88bf59387c26aa89c25b88f5436d06fd2d23019742f97b09266158c0491579a415422e389af1873862a80aca3b9cfe
- SSDEEP 49152:N+rGBzMIqJ/mRc8rx1F35uARmS5W5Vjng:RdgX
- TLSH
  T1DEA57B13F2D900E9D05DD179974A9133EAA2BC4A0B21B6DF0790B7562E7BEE09B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  ms-playwright/chromium-1179/chrome-win/eventlog_provider.dll
- Size 6KB
- SHA256 0cdd66d247c26c8d7485ac0d693caa8978149ea0c72bcd0c24e4fa5b63db52d0
- MD5 9f6ec72e919596601f9925e4ccf4f76a
- SHA1 b88ab44aaed497fb8ffe67e074014f8e7d8a312e
- SHA512 5e4aeaf0d9c5a65a83c5bf098c0fc43c0824d9ae17b829e854a13d63fa2761bd0f9168de8e450db43b640b067fe3432f4dde7311f1bd77b3738350e4ac6b8af4
- SSDEEP 48:vpgcxGPp4Apiqqt/nPIW8dz2OwylQ4a0:B4pUqq5L855Jn
- TLSH
  T104C1CB2757F80A69F0FA1B7426770B026639F8A19B2586CF46A1110D5CB0BC5EC70B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  ms-playwright/chromium-1179/chrome-win/libEGL.dll
- Size 492KB
- SHA256 60457f997250820dc6ea225fa001c4dfabc04bd532b9319dc759c9c8d1139900
- MD5 1a70f7aa3dd60b4a442e22c946b50e14
- SHA1 e17c61d1becdb77be536a0def98ece3b871be14e
- SHA512 491f22b1ff12fd2996969fd66be5a352a158474b3ea227f923543010b0c69034185795e39b184f23104a63073c29531834537df62efac5fbfbb5e16a1f38c183
- SSDEEP 6144:oTcdeV7zgtD3E9HnlCJc+iwuz5vLN2VBlc8nCPBt+/xKKg4Qb+DT8FBd:oAd2zgtMFCOwuxN2VBlc8nOBt+ZLT8F
- TLSH
  T173B46D15B3D886A8D42AC134CE534546E6B678461B70BADF03D0927A2F7BFE49B3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  ms-playwright/chromium-1179/chrome-win/libGLESv2.dll
- Size 7.5MB
- SHA256 390a3eee722a30058e17d1deb2ed0bf4cac54530ede926cd339eb018d3b4c48c
- MD5 21ae618642e016fb871ff6c7e2e0e9ec
- SHA1 86eb12a87fbe90443baf13e32c421394939e81aa
- SHA512 9a1a2aba0b77f996b6816a54a046700613c0952a3eb536a9486de00d6026f63655911425461e6ee8f9bd36fada1143fa1be2f2df64427989c58e781673213d6d
- SSDEEP 49152:7TZl/hlrxl6tY79pzOko4Hc+0qyMVWt0iuaiM503fkjXSAUidgCYU8ocBbIDwLkU:j99nqHushngZg23BAIQgxDDQydXnNf
- TLSH
  T1F3866B13F69980D9D00DE1B8CB5BA623F671B8850324B6CF2B9457192FA7FD0AB39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  ms-playwright/chromium-1179/chrome-win/notification_helper.exe
- Size 1.6MB
- SHA256 04ad2d93302f0a323e9c3ec8c99f590290e396b35265b5bfd7824de801e5e4b7
- MD5 0eec816b2be8433192b70a99cde2848f
- SHA1 64291b548ad4aab8149162d006c822465277a9c7
- SHA512 f22833390d69d484627c83946401d304717f509abc56f9a96c98b201e6a8a2fd2b5aa059c827636c04ff7ddc6e33af2263e689e2ce744836fa3a6af9a0477dcf
- SSDEEP 24576:/aEKokdBB9IEOscNke6FhQ1ypwyY16G8p65uTXgxAeG+7lATmvVrQHSj:6okB9I78wyY1Y65uTwXp7lAivQ
- TLSH
  T1F3757B13F29900E8D05ED178C7569232EAA2BC460B35B6DF0690B7962F7BEE45B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  ms-playwright/chromium-1179/chrome-win/vk_swiftshader.dll
- Size 5.1MB
- SHA256 8a1b64ac9bd115cefd9de187bea839b33bbc6a50361ae2bc29eed05891a8ad71
- MD5 24748bd46afe5b1edb8356b184f94861
- SHA1 8ac5d2577b09ab3ca7265b1836e1c2e6d8dcd195
- SHA512 1569e3c2b12513f67545bb430f6b6e94e04ee9eb4672dceb26afc0820a7af5783a50824c463597c70d6a85c9f1fa6a6aa9dfec21c23098783f4923deee85e9ad
- SSDEEP 49152:+mjNaEAuXSQrwWbnOHtB0LgYK5qp1mgS4syFHMJ11bGfCHmggZJGPTeRGKjL+7dc:+mjN4SNsxndHlCM7dg6Pu
- TLSH
  T11F462803F29980E9F05DD5798B5BA623E272B8810B6276DF12A01F192E77FE0673D705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  ms-playwright/chromium-1179/chrome-win/vulkan-1.dll
- Size 881KB
- SHA256 af135a4a366e5b9aa8ed9134b2b52d03e186d34a6568115a11c8f9c0fec90f9f
- MD5 4109fd8a95e8dce111d7ab40dd47c90e
- SHA1 9b8e75d27997ff81f4b94d766a0e51a3d19d3e0a
- SHA512 ba0251f8dd52d0f0a05d27bad3699830fc7837f96346c561125de27e71d0dcec08c76918cbc6264fe85ecd6ae1a59ef0e45c4313aba430ffe55cfc536cc632e6
- SSDEEP 24576:DMbv0X8OEUmNMVNY/17ME6tH6Z5WRDYsHm6g3P0zAk7c/Md:gbv0XInNMa1wE6tH6Z5WRDYsHm6g3P0K
- TLSH
  T158156D23A6948669D47AC034C9C28703D9F174825726B9CF02A85718BF6BFF47B3DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  ms-playwright/chromium_headless_shell-1179/chrome-win/headless_shell.exe
- Size 168.4MB
- SHA256 41436563cbf1efa45c408bd5c0abea94b36f32220ac98521426ad190001a0e3c
- MD5 30d628f8709f401e3aa2a32a7c1e78f8
- SHA1 9d6a664d7454a688f894219115e701f65cdb5253
- SHA512 61585420e55174855a53bd31a68ded7fb59e97e5da794d97215fc8184202f4762769a9f514bb9612bc4ea1320de5811141fa7f0d8c866f8219e3c6ae660197dc
- SSDEEP 1572864:fWtKEH7WS3IGrg37aaQ4zWvDyh9yRuu76miiMGNwXjRk7cGlIgXTqJMmu0MmhubY:O/HHpy2A9
- TLSH
  T156888C03F3DA40D9E00DD1758B969633EAB2B885472462DF175057A22F77EE86B3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral18
- Target
  ms-playwright/chromium_headless_shell-1179/chrome-win/libEGL.dll
- Size 492KB
- SHA256 60457f997250820dc6ea225fa001c4dfabc04bd532b9319dc759c9c8d1139900
- MD5 1a70f7aa3dd60b4a442e22c946b50e14
- SHA1 e17c61d1becdb77be536a0def98ece3b871be14e
- SHA512 491f22b1ff12fd2996969fd66be5a352a158474b3ea227f923543010b0c69034185795e39b184f23104a63073c29531834537df62efac5fbfbb5e16a1f38c183
- SSDEEP 6144:oTcdeV7zgtD3E9HnlCJc+iwuz5vLN2VBlc8nCPBt+/xKKg4Qb+DT8FBd:oAd2zgtMFCOwuxN2VBlc8nOBt+ZLT8F
- TLSH
  T173B46D15B3D886A8D42AC134CE534546E6B678461B70BADF03D0927A2F7BFE49B3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  ms-playwright/chromium_headless_shell-1179/chrome-win/libGLESv2.dll
- Size 7.5MB
- SHA256 390a3eee722a30058e17d1deb2ed0bf4cac54530ede926cd339eb018d3b4c48c
- MD5 21ae618642e016fb871ff6c7e2e0e9ec
- SHA1 86eb12a87fbe90443baf13e32c421394939e81aa
- SHA512 9a1a2aba0b77f996b6816a54a046700613c0952a3eb536a9486de00d6026f63655911425461e6ee8f9bd36fada1143fa1be2f2df64427989c58e781673213d6d
- SSDEEP 49152:7TZl/hlrxl6tY79pzOko4Hc+0qyMVWt0iuaiM503fkjXSAUidgCYU8ocBbIDwLkU:j99nqHushngZg23BAIQgxDDQydXnNf
- TLSH
  T1F3866B13F69980D9D00DE1B8CB5BA623F671B8850324B6CF2B9457192FA7FD0AB39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  ms-playwright/chromium_headless_shell-1179/chrome-win/resources/inspector_overlay/main.js
- Size 76KB
- SHA256 49d7cac5d14787f1509e326561b073e312fd5e575b4257574f06e464fb98d6fa
- MD5 81ade9a6a48a8b33dc3bd40565816d54
- SHA1 e7df6ead9d96b7a2541afee2b3e1a4993b4730d2
- SHA512 1a60659e34b2ab7d0f5b61913888fffd4df180b41ee4f0fc69e8f0ee3aec0c22d4e470c37415ae4fe6428d2cf942a8dd3a3a1a3f61b42fd12d03dd0d825b5c50
- SSDEEP 1536:qP9DDh2DUo4L6RsCHIeRdU76MuFPHdmGxrvH:qP9DDh2DvU76MuKGxrv
- TLSH
  T1FC735DB635012039A7538FE763E74554B33A2901B013DCA8B67C649B6DF6C4522BAFBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  ms-playwright/chromium_headless_shell-1179/chrome-win/vk_swiftshader.dll
- Size 5.1MB
- SHA256 8a1b64ac9bd115cefd9de187bea839b33bbc6a50361ae2bc29eed05891a8ad71
- MD5 24748bd46afe5b1edb8356b184f94861
- SHA1 8ac5d2577b09ab3ca7265b1836e1c2e6d8dcd195
- SHA512 1569e3c2b12513f67545bb430f6b6e94e04ee9eb4672dceb26afc0820a7af5783a50824c463597c70d6a85c9f1fa6a6aa9dfec21c23098783f4923deee85e9ad
- SSDEEP 49152:+mjNaEAuXSQrwWbnOHtB0LgYK5qp1mgS4syFHMJ11bGfCHmggZJGPTeRGKjL+7dc:+mjN4SNsxndHlCM7dg6Pu
- TLSH
  T11F462803F29980E9F05DD5798B5BA623E272B8810B6276DF12A01F192E77FE0673D705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  ms-playwright/chromium_headless_shell-1179/chrome-win/vulkan-1.dll
- Size 881KB
- SHA256 af135a4a366e5b9aa8ed9134b2b52d03e186d34a6568115a11c8f9c0fec90f9f
- MD5 4109fd8a95e8dce111d7ab40dd47c90e
- SHA1 9b8e75d27997ff81f4b94d766a0e51a3d19d3e0a
- SHA512 ba0251f8dd52d0f0a05d27bad3699830fc7837f96346c561125de27e71d0dcec08c76918cbc6264fe85ecd6ae1a59ef0e45c4313aba430ffe55cfc536cc632e6
- SSDEEP 24576:DMbv0X8OEUmNMVNY/17ME6tH6Z5WRDYsHm6g3P0zAk7c/Md:gbv0XInNMa1wE6tH6Z5WRDYsHm6g3P0K
- TLSH
  T158156D23A6948669D47AC034C9C28703D9F174825726B9CF02A85718BF6BFF47B3DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  ms-playwright/ffmpeg-1011/ffmpeg-win64.exe
- Size 3.3MB
- SHA256 5b8f3f59ba61685828939ff3c833109748adbdea2fff4b4ae570c9fc0fc1ff4d
- MD5 2836707eba4b1e7e18aea19ec835f2fd
- SHA1 c897302e976ada06869870e509ce9d8f417faf1f
- SHA512 a781906972a09b19aeb3b3dc1cf7c8fcfecbcc24ff7e25c354f9ffcc36693a8058da648d19d006dfeab7ee961c5b7c322e1d82f27d8d51254224e78331e121e7
- SSDEEP 49152:MPZyh/vGt57/lp50LmIwoiUnfmYINMXGubY0Rs6Nt2jDBAZ6NbIRqvFtJpDT0J:QMhHGrRXXJ0G0t2jDBAcbp/
- TLSH
  T1A9F56D4AE29360EDC56FD47043AEA723BA34782D41306E7E16C4DB742E62F405F2AF59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  ms-playwright/winldd-1007/PrintDeps.exe
- Size 252KB
- SHA256 020bac54c953c65a0940b314c8afadd2854de2d83125e7b1393054fafd21f330
- MD5 90b7f1109f14ca84d9f243bb263d98e9
- SHA1 444f78b9fb2d316242147f4c8c893d1a982c9a0c
- SHA512 9c7dd46d12e85bdfd59d4f6a640f91e77a1cb5142beda7856f8a59a8233b23907f7f9e942d6ae7191a94882d42de7071d8b38ebae0beee314d89a510436e85ac
- SSDEEP 3072:H4xigGEwEVCEzdbUAcVlwx3es3/Pk4XNKueowb97K5CWNpKZ5ULQeNc1B:Hz4hgEhAAcVlwcKkpbwIs/aB
- TLSH
  T1C0448C1977A40CF9EDA7823DCE465A06E672BC164760EACF03A047975F232E15D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

Network Share Discovery

Reads user/profile data of web browsers

Checks computer location settings

Reads ssh keys stored on the system

Reads user/profile data of web browsers

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28