c7dbd71b100acc6e7a140ffc38c5dbeada123ea6fc1ac51c726aac3eefe77027

Sharing

Copy URL Twitter E-mail

General

Target
system 32 d.zip
Size 2.1MB
Sample261026-s6y8dsxwby
SHA256 c7dbd71b100acc6e7a140ffc38c5dbeada123ea6fc1ac51c726aac3eefe77027
MD5 814829f91635ec96ef7e674abfef789c
SHA1 2e7001fe1f81d674ebe977143e22a31bb2c2f546
SHA512 9e189d1b2695c10979d7cd5650178ac6b999e2b6603b86d23e7ca2d433639cd4df01b0ae924ca36bfdc4c565591962ade3b1b720575def168bba720a1874cb0a
SSDEEP 49152:49I4eHbtINXsomdR4bvHzFOvC8aVhxRI74TTHrMp:bfbSyr4brFn8aVO74TTA
TLSH
T15BA533C082CC719DC91BA9A4DB7A505B449A844C5C3C5F0371F99BEE34D85EEB327AE8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  system 32 d.zip
- Size 2.1MB
- SHA256 c7dbd71b100acc6e7a140ffc38c5dbeada123ea6fc1ac51c726aac3eefe77027
- MD5 814829f91635ec96ef7e674abfef789c
- SHA1 2e7001fe1f81d674ebe977143e22a31bb2c2f546
- SHA512 9e189d1b2695c10979d7cd5650178ac6b999e2b6603b86d23e7ca2d433639cd4df01b0ae924ca36bfdc4c565591962ade3b1b720575def168bba720a1874cb0a
- SSDEEP 49152:49I4eHbtINXsomdR4bvHzFOvC8aVhxRI74TTHrMp:bfbSyr4brFn8aVO74TTA
- TLSH
  T15BA533C082CC719DC91BA9A4DB7A505B449A844C5C3C5F0371F99BEE34D85EEB327AE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CustomInstallExec.exe
- Size 160KB
- SHA256 bd6f1d094d88f586fbb13d30fd5412759b3782d2e58a99d91729cb9d75c07a18
- MD5 f09fa2cd63629b28bdebfc80de3b7b47
- SHA1 a51c4b126c3e220e8768e9b36639de58a4ff23a1
- SHA512 3f3441088c60f6bdb87786e647860bd7dd5587874e4d1c4d208877e6b4ad4e53974d92e53d96c8f1a337c0d2fed5f01fa0d81429375f214ca00657336d4a904e
- SSDEEP 1536:EtRGD7su1GJXbShVNVbkkTwqrPHP6LIx9T9ShvO9BpVHNu6dbKmzIEVmnlc7DR/G:EtQXTxVb4q76LY8hMLk6JKmzIc0ODR/
- TLSH
  T13CF36B256BA654F9D439807CCA93810AE372747343264BEF5AD641EE0FA7AC01D3EBD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  DFDWiz.exe
- Size 76KB
- SHA256 211c577f2902087ad252982e90ac0f00c6712bd536fc99328e3572ae76263805
- MD5 5b264cec1d25fc6db61dd469eefacd52
- SHA1 e1e9da41b8f84a7ff3f1d4cf71bdb7c8fbc8d328
- SHA512 506e6662a02ec7478db92b897167fdba32979150e59fddfe558f6d5f405c1267e58eb296d1f16124e9ed6f560444501611970697b48cb10c750fc6ce82c19a73
- SSDEEP 768:0dPCcSBOoIBiRbxJLn8qy61HRO4uX18WYoLJuZUTopCj1MPWGNUbPGS:0dqJLh1xfkVspNS
- TLSH
  T12F73E86D92F830A9D4B68334857223659A31B4393F129AEF01F0C5396F16AF09F39F56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  DataExchangeHost.exe
- Size 291KB
- SHA256 37d9071564bffd911d8c6aba6b82b350005bccb848388b95ca87aeb13c7a9caa
- MD5 a35dcc33de9643dc74dbbb8e0532079f
- SHA1 575b8632b46654494a0e10f8ee62e78956f1edd9
- SHA512 6435d6c46241d8c0227514183174863ff4e071313cb4a5084245da1eb488b568ec5f944bab611987e1bcd8bfb0649bdd2e4e09be31b7ff959ba5fb85f128e3d6
- SSDEEP 3072:BnhYqEgnkFHnLizq9x6Cc7RcpKl9cix9DlmnIJLgUFao8FABI9i/AxLsfFLRbosw:h+qEgnkFHZ9URuifInIJLgcL8uw6josE
- TLSH
  T136544C6E27E80CE5E97BD17CC582860AF67178615322D2CF02E1426B4F27FE4AD39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5
- Target
  DataStoreCacheDumpTool.exe
- Size 196KB
- SHA256 1b45ae1ea4afaea82aa5046feb6c862ea3c70a31ebcd89ed5c1b2ea48dfbd6ce
- MD5 fdbb5c34de153033d92706330bd22c4a
- SHA1 0dd4c31f9ef76ba047bc5f04e0acb9ecc39c5f25
- SHA512 787d85664bee486694bf7bb4e3828fc94227522c01f71fa2f36d3d59c39f5e25a6b05f942e0c184d9965e2017c4366ef3f0418fa6472bb5d21e4b99557e5e664
- SSDEEP 3072:STpwdOHjRtwvfs++1vySyqtpmYIzR6W5TnRIXfxLpFdejsjTfgQmx:STO8DRtwXt+1vEqmmWlnqAjQ
- TLSH
  T13B142A1B37E800E5E177A17C99620606F6B37826133192DF0798817E1F67FE8AD39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  Defrag.exe
- Size 236KB
- SHA256 29f2edf4d25f3c14686e74d0189fe13b74e8cee3ae6d93394503ceb974dda30e
- MD5 07a82c856dfd8456f52ff5220dc92272
- SHA1 a13027994b82fcb95e609b43f0a1370e4fafd149
- SHA512 ecc9b56027e8ed5e5bc0f0a3bbb14d64464ec3e5535fa202b523aea5621813d10a1d7c46b85d673eb818094a132c9be468e1994b3924b3ee1bb5b7f09b2b20a2
- SSDEEP 6144:fSrUzouMbBGz0UF19wsfXC3lRGOUZGKc4YFnwjCpW:f+U80S3lRkRc4YFwjsW
- TLSH
  T1A834AE0532A862D4D2B2967981627A14D773B8300B3613EF0BDC94BF5F67AF19D39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral7
- Target
  DeviceCensus.exe
- Size 163KB
- SHA256 16d6f401c795a924cc44e161c05f9d0e5122488e98571f60c5b88ffca7d63419
- MD5 60691f29aab11acc5927d98bd189b702
- SHA1 4d6d5aeeeb1a941bacff3feda52973ba1b919140
- SHA512 b48d3e4dd1504646bc03d2fd9e677f1c17f31912b4ed265dce62030a03565e914a7d503a823d9117c20354e85f0e55132a0ed6a1cc7dca1e49cb9d3f7cbc837b
- SSDEEP 3072:dRfm7SGo6vLuFwMqs+ADGdb5CLFj65kXN:Lfm7XlvrABFjCg
- TLSH
  T101F36B1AB7A930FAF5628238D5A19822DB72B575071193DF45E4C03C1E1BBE4AE3CB85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence
- Checks for any installed AV software in registry
behavioral8
- Target
  DeviceCredentialDeployment.exe
- Size 120KB
- SHA256 6613b627fe4a34fa3f829729e56ad6f5110f91291993f8bc58ebd9940ef01106
- MD5 689c3c6599d442734453d742468179a3
- SHA1 9680f25d12487b59d4bc24a9ae4c03e0c47e843e
- SHA512 fcead3d7f3fbd45673d322fe56636427ee90b9be350097098de471ca9c58d2625532fffefb4e4f36db66ad225c3b5ac1266fc6dc4207bdfa67fe6df00882c1f5
- SSDEEP 3072:YIuKzOl+gG4dXB9gM+bBjzFqgCRzp/mDgs2HnU6tl:TPzq+gG4dXPgM+bBjzFqgCRzp/m87U6
- TLSH
  T1E6C3F92E61F510E4F679B53D88530929F771746213229BEF03A180BE1F6BAE06C3DB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral9
- Target
  DeviceEject.exe
- Size 48KB
- SHA256 5bc9a9c1153a37f239b8443fd264753a28093bd92455dbfb6deef4bdb17c393f
- MD5 9eb2fbc2d7f299c7e0acad945ad9620a
- SHA1 be3aa9784b22229db3e2fa55784f749955a446f5
- SHA512 58efd5c03975bb89bddcb1021152e4e73bafc0226fdeb367fd28edd3bce53c3ee6d4bf2baec16fae7afa7d1a5d99692216e38d4fd713a2f725f4317e52996be1
- SSDEEP 384:KdRx/uBpN9XmQ1nxMTIWywW5JY0ehA/9gnl0:KdeLNr1xMsbJYQ/9gnl0
- TLSH
  T144234A41A3A685D5F13202794473466016BCFD314BA20BEF35A4B52F1F32EC16A3BBD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  DeviceEnroller.exe
- Size 564KB
- SHA256 95b8040c1967d7d0c03441446b94c26289d5fb481501e378d396a60a97d50132
- MD5 5d282b40fb57db9e704232c1356065de
- SHA1 979e59138efd10ed7f447cb9c32d25391420e870
- SHA512 d8a9caa2173b20e1d22a6d3b8c599ab55296b4f77fabebc09ba5717bce63bdac81b2cb046bd1ae2624cbde9df4c3315b26c4bac6a642de3f421fd68960e33aeb
- SSDEEP 12288:Ue7i0PRr0fWfEYVaaa/N8B7qjAbPADdtFz0grZ:bt1sWqjNdtF0gr
- TLSH
  T140C4191E53F802D4F276E27899674509FA72386213328ADF1291817D1F7BEE49D36F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  DevicePairingWizard.exe
- Size 120KB
- SHA256 0ab9f2923dac072716a8380ec909ea9f74b9f1755f149c2a41f61b49d93633a2
- MD5 de6471e5de8b40227d9c3fa89c79c7d6
- SHA1 672a0b4bcabe6abb76aa9edb0e729bf38ed8ab15
- SHA512 f525a733539469801c1505ede2303b67329c15822799998087c15fc58f3a8eaf8be9b423f9170452cf0ee2e8fb673960ed78bde55055076175b8829a65fd9232
- SSDEEP 1536:eb9plgNEI8PhXSH6GAPUABA9vrAN0y1h9qZ3qOT8:s9IQMHeUABA9vENF1ro8
- TLSH
  T121C3D6D9B65814DBDDF4C3BCD17D8B15DB70B85003157ADBAE9043A94AAAACC3838F81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  DeviceProperties.exe
- Size 92KB
- SHA256 59c4bd37da9c5f1a52814e92adb22c5aeb3dc842a6fba683fb3abfab3485fc4a
- MD5 fd14bd910cd70fa00e0e16748bc14257
- SHA1 d798a1a9123bd9ba47cd76d652d67e2bbb30a513
- SHA512 40fad6f520a578ceb1468daf32961278fccce888cf726c18a6d93c2ae84be0d0fb12724a4496e0e162371b67fce11c23037c1f5d4b62d276c96a1b3cc0adcdae
- SSDEEP 768:59fswWkt3jWzV/0vM3EDs73D8hayJpVsQnhGc0bnH1CJv7VLjQAAAAAAe:51sM3jRM3EDs73YayJdnGbnH1Ch7
- TLSH
  T14A938D91B24485A6D8E8C7FDD4BE87058B246931435439E33D38E35A39BBBCC7936887
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  DiskSnapshot.exe
- Size 96KB
- SHA256 e3efc11f128f6e10eae8e15c9aa100201aa89631377b8c9e4db1314dd46659f0
- MD5 ab82d082274cb2c9f85fb96439229a15
- SHA1 46363807f9f1b1fb808391cbb2394e1b45b301c3
- SHA512 9eb11056274fe24a4bdc47d9f88cb7499b7ba7210840675e93d6d74c538b8eb75eb2310f22cf556d81708738f4449a5da95d0848fc499808c7051411217014f8
- SSDEEP 768:rGcI5oYFUm9UGUq18SSPgzzbfTcBa6zPNAVJskC93x/rNPO5ZDW1LKrHaHpHB77O:rm5orJIDwBa6zPWPchIL+0sHrwZ+iYe
- TLSH
  T1D4A33B3A76E811F5D1B691B88DE45A06FB72F4251B3047DF00D185A91F2AFE1DC3AB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Dism.exe
- Size 331KB
- SHA256 d0c6f65b0b7e0be7c659b382f635aec27080af2ae731d7b3b4011f05a51e6ac2
- MD5 84205b0abf76c59e5ca7035009e59540
- SHA1 1834d7b043076743c2e1bdf85c9d972dbd350af9
- SHA512 8fe5c68fb33215011cb27510bec3f3873f4f2ad2223bb5e052e13104ec3cf672ee37b4c0b9be81cebdce63fad142f3a2ba038001ee9893844fc67df68d4fc356
- SSDEEP 3072:WxLcV0EmfLQiCkeS7bpKoJFF69zeB4XeOXept5JZ+aD76WJrkQnDmSFwjntnNZmx:a00nLQmbc9zeBp5r+W6QfhDbLSr3Y
- TLSH
  T14774D90977FC0894F6B3B23589718645DAB2B8515B36C3DF5290823D1E37AEA9D34F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  ctfmon.exe
- Size 68KB
- SHA256 d72a59e34b0fe2e3e4939b54945a92cc43779a85ea59b72583ba0b128a5b3308
- MD5 fb95fea7acb50925e15416b593b556f3
- SHA1 2bcefe3b85a6aa0cf0bf64c1848e64e7ef6c0b86
- SHA512 63f9ade06960135f4ef2f9852db7c924f86e8a0f853af4046b1244a048618eb70ef21604333df97edf726539b67869c4a7e69c5abcfe29ad5c8fd4cf57ef9e3e
- SSDEEP 1536:BxPXOGBm+N7VMhNT2pQ5bfme8wac0uGGznJsX:nGGBn+f2Gj8wavcnJ8
- TLSH
  T1F863174E627830EAF167813CC8624619E1B1B435235126FF13E4D2BEEF63AE46539F91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  cttune.exe
- Size 152KB
- SHA256 49bd02ad9ac65fce885857900e30981f4550b8762c1d19f90ce246f0a8a812b9
- MD5 e6721a3067da44d2fc26bd0ab81f6066
- SHA1 afea1d057c2d899d64357ccdfad6fc727eee4060
- SHA512 241f0a78167027cc1119287487867599acd8f907ff3580d9a74f51bf392b73dff8d4a7fc59e3f2bcb84b6f1a3da61169cd52a2d6cddede5bb5117676ce19ffd3
- SSDEEP 3072:N96/GJ+qUG01Z+cZAa7ocvZI5Gb1ef3RoXpR7cuoOY56uc:NJ+fG+4EoeZI5Gb1ef3UAuoOY
- TLSH
  T114E3295D72BA31FAD566913CC5464659F6B3B830232262EF02D0C6BDDB23AD87939F01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  cttunesvr.exe
- Size 64KB
- SHA256 3ad27fc6d50f5ad75b0c3e0378c7a32d062d3e95fa5d7259c0601dfcada8d3f3
- MD5 1bfffd25a7434da255901a517c6113bf
- SHA1 71db67288667db5d7a1b4adc3b313c96797eb692
- SHA512 c362d776886aed9c74cea924011ad1e04004a966afe84c9cddb57e7067dde3fe27fd2c24d89a31c13bdca8afb2922726134901741ff91fd7465e2db9d981797b
- SSDEEP 768:UCVMj7MZ/OP+8JyEkBC0o2lnVjLMyGfhABL1GyEMz3RInolNX/f1HTG:Az1a/Tj/MyGf+0y9OnWDzG
- TLSH
  T10253084AB3DC60E9F1A6813945267645E572FC2157D116FF23A8B23D8F33BD1AE38A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  curl.exe
- Size 799KB
- SHA256 73d24149ff289afc49ec41f08918ef9faa727d39ad993e929757dc2ddafab805
- MD5 9cc9716a95325e70a9e95b9d07d127d5
- SHA1 7add347d181f52908c03b0ecede2d293fe01e112
- SHA512 47d7635582c2c41ad5a29a798790ddeef59cfda539e7a4455be78d3ad745a48800e4e8f25cb56a9aeb09de58744a3f14dda5089b1b730235dc86d736aaac5626
- SSDEEP 24576:NVrztILiwnJyqMOjkizxp2wbj4PDISdhcXTL:3rq7J9jkiNp2wbIcXH
- TLSH
  T183057D656BB400E6D0A7C275C6539A07EBF2F095276087CB47A5C96A3F536B22F3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  dasHost.exe
- Size 196KB
- SHA256 bf1d4f636556984af4b41084d8295ced9c99982b2229adc7d37039d678e79f4e
- MD5 2d1acbc2ef4845b5dabb378e729ee3e0
- SHA1 8ee97409ece9e937f0147ccd5eb7d81d03a84a2a
- SHA512 e75e824f34775b64f8e85790d4a1204c609fd7fe760487638545adcff709c6f07607b5ce3d81ca83700ab4309c2e008c1759a97cf609af0a47f82baced7a2347
- SSDEEP 3072:7wo4ERPM5KnaMNsVHFzIpWfBWCwP/dkBwbBOPag:7N4EtMknaMNsv0pPtOPa
- TLSH
  T1E214191E76B924E5E07A8239C9964216F3B2B065171217CF02E0C3799F57AEDBE39F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  dccw.exe
- Size 168KB
- SHA256 239de24f070cc6534c8e31985112a76a2e1290181aa854731db93cae27b71e00
- MD5 bdd8fe199f483a7914cfae3726b4e613
- SHA1 479a1d4b6540a74ee5126f321c7f38d418d7d318
- SHA512 50d905e2522f02ad9e58bee8ed0643ecf85b8f2a086824b1bca54f6e5e526ad9e1d31dbc6854eef12c167cf0242a067b299eba3ed18d461f3426fdb1e83fbdf1
- SSDEEP 3072:FE+ApC0VcFLkkoiWWzrA1FNcz8sDZRLHnrT3RaUv63JpKUeZ5r58Rm4VQOB2q+Aw:FE+CC0eFvg2z8qjRaUy3JpKUeZ5r58R+
- TLSH
  T102F3F98E32A930E5E166817CC9464545F7B2B431272166EF03E0C27D9F23AE9BD39F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  dcomcnfg.exe
- Size 32KB
- SHA256 d868f8a6c8f204e98adb95f5687a943e2ce8aed697c875116c7db223a198bab7
- MD5 f600a35a785aeb4be83d8a473c089ee5
- SHA1 3a795eaf8666b5bf4a95306c730b492d822050b2
- SHA512 5500c15fafac545961972127e3ccaa3915ac0cf05e0e257cc2b8384daabe3a6f3da4f1ff234a80b7e5d437f47ffe55d395acd7cebb5a1f3b7c6226ceb36fedc7
- SSDEEP 192:dpgw0qLNcK3Ex+wV8E4+f5RFPNcxlnc3dtIoeo0w7f6W0EW:b6qRcCyLaEPff6WdWoYW0EW
- TLSH
  T18FE2D705E7A414EAF03A437654B3130679B8F63147611BEF7458625A1F32BC1BB37AD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Drops file in System32 directory
behavioral23
- Target
  ddodiag.exe
- Size 68KB
- SHA256 644944880f24c344db8761f5aed47cdee582da5077ea6621445abf0cc9d19fe1
- MD5 aceacbea36379af386cbd632ff30c05a
- SHA1 bec1b30b6457f7eabaa66af900d9f468e74ed720
- SHA512 bc1f5a66be68ae7f6bebce8a96ea47dce9b770fdb7c6cafc8cf34ae7a6ab4bd35cd15559e3c458aaad4da82368b7af0d05081148d69b53874be20ce8d84347cd
- SSDEEP 1536:Y/HumujWSdGK/hc3aZkLmMgMaouZl6iw99FlY:Y/HumyWIr
- TLSH
  T10163305162D936EEF0B665F95F728709EA2EF4D0131286EF26F0422A0E32DC09F75635
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  deploymentcsphelper.exe
- Size 60KB
- SHA256 d2c9d5aa29814261dd625634c7e901a094e83d5c55cc3dda594cab4e7347c573
- MD5 8e64639cb729a0514878e9f456cd8f02
- SHA1 edd0ac21182bf46c151b09c4130fa01c963938b0
- SHA512 ede8250300fcfb957806c06ccb2f5c41d8daf0559303d764bffec7a683e8103c7a754d6fa0e2bcd3ef067f3b3f0e26bc1887780c995f1b0dd7c3228b4d0eebc2
- SSDEEP 768:WW666o1qOEY8jiK5xbJILWSR2PHoYKyl07AHZV5N9z:WvAqM6iK5xbJNSA+cHRNt
- TLSH
  T1B853196D769934EAE2B6823C86200285D772F17167432BFF14E0C17AAF577D1AE39E01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  desktopimgdownldr.exe
- Size 156KB
- SHA256 2e899ada672ecee67dacebf3d1f5ac80e2053ef4cac9e0e5325e408a8d6b6b31
- MD5 f94608aa14d53be658e277e3135af231
- SHA1 ce77edb60ed0305596e84e2cbab8c2b55393d93f
- SHA512 e9a1fc3e264b7f7da74290599bfbc9af2b5198e7d4a3809066a4d75cd0598ab1eb4ccf42f9ae846ccc89d343e8f3b8ddd9a7915e38f7bc51a9b6163f5dbaec56
- SSDEEP 3072:a26fOGXjjashQS5ZZ1ArKq9WMF4JPZAWuXuYD7W8FHq8Tz:YO4nast5MZfNFHq8T
- TLSH
  T1F5F35C2D32E910F5E576D17CC9A24919E3B2B061231267DF06E081BD5F53AE87C3DBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  dfrgui.exe
- Size 140KB
- SHA256 fb229970fedc678c81e139ecbfbf162a3399d33a0ced96ffb3f2eae8f86f3d97
- MD5 c16203fabc68b97efccf848a5174203f
- SHA1 65412ce7fb1fa741af473863d921329abf66a607
- SHA512 4c3f922891b7ca0d27aab705867ba779bd3c93039ed60ebd76715970d48ed5c35ed69c671be1ff5c7ddaf31e6dd75e07ad514900282ca8bb06db1ebaf716fc5a
- SSDEEP 3072:EgraAD7oaBSH1Zof8faAPisaU5xVGkJKk/xVrqoV+WgE:6taBSvpaWPaI7
- TLSH
  T151E3061932B922E8E2A2C57981662511CBB774311B3213EF1BD8C47E4F67EE1AD39F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  dialer.exe
- Size 68KB
- SHA256 4a1a2de5480477d6cbc5c9311fc9a85e9066718f1c25674f4adebc277f5b1765
- MD5 ebf736ca7926ceea07f3247e6ea7f408
- SHA1 6c79597f5a4daca123800414eb2a5794db40083a
- SHA512 c44d4eb74d3420d21c816e65672bce1cdf34c6c8621aa82d3a891dfaac02d14565f8d8b35b49a081de50fa058719a236f60c6de802de241e698123365b564b68
- SSDEEP 768:N1VtGAlo199sWFBW/vB16qYhBEGYz/KE56QEG/WNydbjNaiNY6/bko6Sd:bGSqXuvB16qYhBErzdrv9YsWSd
- TLSH
  T19463070E77E830EAD87A8279A6B20365D576B4302B115BFF26D4C07D9F23BC49935E06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  directxdatabaseupdater.exe
- Size 172KB
- SHA256 57e9245e979c23542c8a5459fb29583c83775733e6904ab1ccaabe1e8cbc537e
- MD5 87574c05b8b64c4a61857ad7cd9785f7
- SHA1 9ff13c8f0dec297c419d730d762212fbba201c07
- SHA512 7b41b7cc3ef02325951c8113b6dcbe5dfc68e73674c203839c2fcb222cbde23c47c38ffbe0e29543745effa367e5eae329db289ff036249848041b2310abb3bb
- SSDEEP 3072:lIrp5eEr5dUL9D8U8u13p2+Sy5MGRKyT0CHiLx:a5eo5dC9gI3p2mtftHi
- TLSH
  T18604397E32A910F5D5B7D17CC982060AF7B278615316A3EF06D282B80F57BD4793AB90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  diskpart.exe
- Size 172KB
- SHA256 a9882c2c19922af201780dbce7b2f8d41b0d4341784e63bf40baf3a986ca0c7b
- MD5 827fb5c9d45277cb36aef1cacaaca0f0
- SHA1 d089d8b5983bd13f04b434daeeedfe385dd45c5a
- SHA512 cdfef8568c91e00efd199ed5ca67d2e488e1a7ea7806bea187b16edc09d1d669419f60a042c41a10edc1743f183ceec90ac7d67b6cae75f7a98f3546624f93d2
- SSDEEP 3072:toUBw0TrydKPgSWBj91/xRTDywTnNXrChXxJ64+85aYPgaCg1Sr:toqTTry2gS+FVDJyBJ64x5aYPkg
- TLSH
  T1CF041A0B22D521E9D726F17CC987052AE6B2B026333316EF179085764F6BAF0BD36B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  diskperf.exe
- Size 48KB
- SHA256 c1acdd0625341f7034cf698237f13f42f78eda2fc32037babe44b7f05401687a
- MD5 79c3c1aba4a41528dbfc72b8c1e37466
- SHA1 b06da61a7b6fad9df57b93e00e6b80f60df2f2ef
- SHA512 6c761132fe57e425e8f42d41b39f31d152fc9ebb4fbfbfe69ed11a40e4a1f500e5f6610b8398fa88b9044eea98ab5e977e6b1dd7978d6e0cf09cbf8acd4ad15e
- SSDEEP 384:Vf2NQEGuD6pDwzhWXakU6WBPAUIl58OnTziOMD+5ecK9uFZZhhpINWYJWj:VOQCEDabkLL8gviOMDIhK2ZZhvI5E
- TLSH
  T126233C4567E510EDFA76577A89A25215D0B2BD302751C6EF17E0427E0F32BE0A838FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  diskraid.exe
- Size 348KB
- SHA256 8f84297a24e0addcbd785c4c4626aabbd134ee785975060301c3c571156eddbb
- MD5 26cd33c01408a78e7ff0f282ff0ba762
- SHA1 acb01af516796435f8becc35ee7efee180e94269
- SHA512 aacbc82f61d4b802288020def2fb528f96781d7bf94a294b4489812a3665af0d700dee73602874aa396a216dd8bdd8f561da57006781204c5b90560d321e7b00
- SSDEEP 6144:5VfUba6ZV199RKHiMVNzJ6/Wo4SPrXYu+o:5VfUba639RAVNzGXa
- TLSH
  T18974084507A323F9EF7ED0B4445EA10DFE223905C33EAAE79DB709154B63BD1983A249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks for any installed AV software in registry

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32