cc3a21746132a54ee6e61939429589e31c51ea069eda6a4acb23ceeffe0ceb37

General

Target
Silent XIM Configs Setup 1.0.0.exe
Size 356KB
Sample261027-bfhpaaaw3l
SHA256 cc3a21746132a54ee6e61939429589e31c51ea069eda6a4acb23ceeffe0ceb37
MD5 1a9784489b6784cdd986be2443c89b87
SHA1 329f4b9dc309d749ac519f3e9c009bce9fc3b228
SHA512 2ddf237dec29ceb440d628d56c65c739cd730b1f63f202fcfa594c0d506217996660fbfa9e3af3ec2aaad4c9a8549acd052967025c9516cb78ee3af842ab5af5
SSDEEP 6144:Nlnhrwt9n1XaG8eh4aq4vmEn65m97hbJIz053mPA4OMeyoB7znT/uCwmtga6XePR:NlnKOlZ4mEnGmdQ05XpMaj2Cltg1XsPp
TLSH
T11D741249F190E52BD8A20E722C765FB5BEE5EF151459D70F67203FAEAA30F02C61D221
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Silent XIM Configs Setup 1.0.0.exe
- Size 356KB
- SHA256 cc3a21746132a54ee6e61939429589e31c51ea069eda6a4acb23ceeffe0ceb37
- MD5 1a9784489b6784cdd986be2443c89b87
- SHA1 329f4b9dc309d749ac519f3e9c009bce9fc3b228
- SHA512 2ddf237dec29ceb440d628d56c65c739cd730b1f63f202fcfa594c0d506217996660fbfa9e3af3ec2aaad4c9a8549acd052967025c9516cb78ee3af842ab5af5
- SSDEEP 6144:Nlnhrwt9n1XaG8eh4aq4vmEn65m97hbJIz053mPA4OMeyoB7znT/uCwmtga6XePR:NlnKOlZ4mEnGmdQ05XpMaj2Cltg1XsPp
- TLSH
  T11D741249F190E52BD8A20E722C765FB5BEE5EF151459D70F67203FAEAA30F02C61D221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Silent XIM Configs.exe
- Size 700KB
- SHA256 9d1581b50e6a6a739260dee5a22b18ae58980bf8b1b1804d2e1ae545017e88d9
- MD5 ea53c4f0d7727a5aa853706cb8b33a69
- SHA1 157ebdc31625171dcbb27523ed5fb3c6bf5239ef
- SHA512 dc1dc713ec91323a9dd9560198bec570802a0b550ab3a41208a34819686dd9a9b749681e24bc29d5e1cb5fa4fe84675a8d3010daf79a8b714e12c72c5b9e3042
- SSDEEP 12288:u2+4VzZ0gEP1Qu9V2WK7pnapootvXgEEZh:Z+470gEP99MNoVgh
- TLSH
  T1B2E46C53F68414EDD05AC03583569673B672BC860B31A6EF02D476283F3AAE6AF3D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral4