0680d0e389203632372c714465b831aef749aa1c3b3ea5e85500ed92f79696df

Sharing

Copy URL Twitter E-mail

General

Target
dlss_5_swapper.rar
Size 93.2MB
Sample261027-ebvd3ax14k
SHA256 0680d0e389203632372c714465b831aef749aa1c3b3ea5e85500ed92f79696df
MD5 68d51c722baefe7d23acce5ef4edd64d
SHA1 86c1b8cd83c3ee3c778e11e76ac8a240daed3ed6
SHA512 8ccf60f0908e59b2a4227a98be9dc80632a264366ef4b79818f796e8b19ab1950a1c850422bb531d52a6301dc76efe8d9075ccc8c7b081327673e65a7d3affd2
SSDEEP 1572864:7zU9FViTkyki+eXXkGiVjxpYmce19cnrbOg5LCwY4QVjqIoHEqhsmuwaT/:XUpiT+i+e05xY3ucnPOeLzIjokc8F
TLSH
T1FD28339219557FBA1FDD507F52720363B8C2AF39966211998D887EF9F0B30F8E9B4024
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  dlss_5_swapper.rar
- Size 93.2MB
- SHA256 0680d0e389203632372c714465b831aef749aa1c3b3ea5e85500ed92f79696df
- MD5 68d51c722baefe7d23acce5ef4edd64d
- SHA1 86c1b8cd83c3ee3c778e11e76ac8a240daed3ed6
- SHA512 8ccf60f0908e59b2a4227a98be9dc80632a264366ef4b79818f796e8b19ab1950a1c850422bb531d52a6301dc76efe8d9075ccc8c7b081327673e65a7d3affd2
- SSDEEP 1572864:7zU9FViTkyki+eXXkGiVjxpYmce19cnrbOg5LCwY4QVjqIoHEqhsmuwaT/:XUpiT+i+e05xY3ucnPOeLzIjokc8F
- TLSH
  T1FD28339219557FBA1FDD507F52720363B8C2AF39966211998D887EF9F0B30F8E9B4024
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Installer/Celestrix.dll
- Size 85.0MB
- SHA256 e9584ff0395af982e2e1261c2c97c0a78c9acc3cc54fffeecced49b048bf9b1c
- MD5 02b06df545ae7b94ac5e9085e2d6c8ca
- SHA1 cbffda87046e5182444c69c413dee2a7eaec750e
- SHA512 7f0f8860380c28416303dcc312c44db64ed967328558501522f8b838180d62b71f9eec27d339bf64e6f27b16fbc94a395583192c33ccef30677356d412cef92c
- SSDEEP 1572864:g3S3z7aoyJ32Z7qg4gewwzZNz+5YNpg/yKRO2/lYnxgwp3rJ7mL+V:g3SXNG3OqRzZNy5Ei//nlSxgwdJ6M
- TLSH
  T1631833C28AAA3757C9D31129B7528B40B1DF7C92D3F2E0DDA2D93F1508985B4BDE860D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Installer/dlss_5_swapper.exe
- Size 2.4MB
- SHA256 580add05f3e580892a4ea98a3f405742d334266a173960595bd2ec19da2fc77f
- MD5 e9a83a48299e668484d35fc90175d518
- SHA1 fbf7a573e608327007fb594f475a71b75ddd1d56
- SHA512 7c4c8036216b0dda225ebe389d3e27cbc2c03dd9c1ba788b5f06a273d30771ef46dadf6c3373da551da2c857716a662d4f30204d869bf58e6c61edd3ed7ec9ea
- SSDEEP 24576:Qs4nlERS3nT5YB577icEhiF53LqZJpACH/g7foNY+DJMUCBDvU2Ih9M+:Q9EST5m7RcirLuPAS/WGd+w
- TLSH
  T1F8C55C03BEA941E8E8969B35D4764143F660BC8CCB36B3E35E84E5741F667C0BA76B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral5 behavioral6
- Target
  Installer/dvamarshal.dll
- Size 263KB
- SHA256 a1b53d73fe7db96ef6d3f40eccc848b5887c5c90ad4e251e9fd30cbfb16d43ae
- MD5 832f27c4e7152c8a8f7762f442de2e07
- SHA1 4edf20bbc92b8674925b5de7cc603d5d75c0ccf8
- SHA512 e8632db2b398c3f57580ac303dd6787b525afb40298a95827a772f28cd7e71f9c5bfdf34d15aaca701d61d966794587791894543e75cfe3b428066a2bd3c64d7
- SSDEEP 6144:JyYrTg5JTRbYQmF5JK52c5/utnQQoivvVy2:oiT0RbYQmko+/uhxzx
- TLSH
  T16A44E55ABB648D66D413C2BE99818A85FAB338414F32DBCB4151833F6F77AE5AC3C111
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Installer/freebl3.dll
- Size 977KB
- SHA256 826977fe4476062c842162406e0a4a2c5ade5b6ae5547afc75b427d34fcadfcd
- MD5 e7c5770ab12e521e1bb3d7eefc082c41
- SHA1 b69096aabdd4d64d6108469339f431295096fd7c
- SHA512 dc3e3c3b7c154af8d863fddc71f98c1f496a2983f04b2af1fdd218f62694cc5fe2fdefe8ecd6929d848a51e768d717f8d463156845d19532baca260124100e3f
- SSDEEP 24576:rfsmpoLdJ97xKqdmCcN9XBEmvFkKI+hG7:rEw0dJ9IqpmtkKrU
- TLSH
  T12B256B0BF6A65298C066C87D278FB6337A337C6D4B2136E75B8486513B60BF07239B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Installer/icuuc64.dll
- Size 2.3MB
- SHA256 65eb04cfa9ed2f5e4296234bdf2c9fd3b90dd335475bb2c336d769c228940559
- MD5 49aeef3e2a29c062765a747e8e227ee6
- SHA1 69498e9a4431390b6172aecc656590b4ad761265
- SHA512 4745e1c5d19ab3276cb7c832af544a412e242801b5d7d09976390ce39a41aa30f72c2e63eadb27005297e66de8ad9424f8af97ee707c072370999fa4a4dc2501
- SSDEEP 49152:+gtKs7mHw0MQL9MLiEGr0AuJZPHIJXBU8jQJ3:Os7mQZkK+sZPHCm
- TLSH
  T136B58C57F76A80A3D47BC13CC5A60BA6F6B27C014F21DADB069B83592F236D045BE391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  Installer/ipcclientcerts.dll
- Size 203KB
- SHA256 557905481764bbfb09e2c6610411dc65233fd5ad33c6d7a06e5b9c0843e722fb
- MD5 3a37090222bce3a31a78c88e9e7200cd
- SHA1 a992afdf0315b792db4a49344d026442a40c7f91
- SHA512 e571c237442351caa47c9b6cbec68872098518a40bee1d929b12e80b10a668b352d6eb586b9ff22c6b47de8409324347aa7efd52e3e58c0638bd3b473796d9d6
- SSDEEP 3072:yD6wUHryNo+6giQ0fJFu1cNGpUb8zIpFtIN:oZ6gGKccUbzi
- TLSH
  T18C144A23F68A15EDC85AC170C36BA633B93270C94B316AEB13A446356E7DFD0A63C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Installer/mozglue.dll
- Size 1001KB
- SHA256 30a42964ffc0ef3d86b96231ee59b1d0b706e0e72449aaa62a4ace21ae93cc4b
- MD5 1585506187ade02bddf457732ec2d333
- SHA1 00da4ef4ad23fd4dbd62d608a1518d24707a5aaf
- SHA512 68a8295f57b9b75458de3814e151d6a998a621b21531f72696682f43684b944f2f73013ba4399d9128c4f6511726788a83e6acacfc5f2fb16632d9f4cb7e9b20
- SSDEEP 24576:BzI8J6ANHNMQ8rI9EkTRWw9UIc5qemJSrL1R5372C:B9NHL9EkTRWbIc5LmJSrL1R537p
- TLSH
  T107257C13EAD900E9F85BC63497D6A133DA33B80517247ADB13A81B122EB5ED0537EB1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Installer/osclientcerts.dll
- Size 355KB
- SHA256 067057ab966050247628e91b8d2d702315bc6f14946d18cb86672b120fbc9858
- MD5 df72bf9194937b5a9d4b5908a0207b72
- SHA1 80317022c25c31afc40be049f567403c83b036a3
- SHA512 f2fa9cae34058e99e07df5531594387d5135e7482a665e1c10028966343d289021eb40c9c4271e236ad4c8138691662cc6d032e45f4339a67fbe5eb629a2d77e
- SSDEEP 3072:bS92PR/u/B5w6P+RhcyMgd8ndIbMqzxN85DAZQ30wvOb+l69uI1qMiTvTC/yrvTX:hPRCbaRhvd8dUtxN8KZEyu68TW/O1ec
- TLSH
  T133745D13FA4549ACD05AC07487779632FAB27C8A4B3576EF27E449212E39FD0A63C724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Installer/temp/PSCloud.dll
- Size 2.0MB
- SHA256 e4be076c9411cb0bdf530f50b84b19ce958acabd8edb40b3edfb9d8cdda6ce6c
- MD5 9a345b2c3b6f6e81ae4056036f5f5a63
- SHA1 b1b0b2fc956cf3a899320199eb0301fe5401c699
- SHA512 05c6581f830e6a7636f2e4ffff5f701d9d8f8b7a8a280db9db8ede89a29b49a52ba9502fb76f177854ca02668cd4bc1ddd0459f087afc77c4e34cbdfdfafeebc
- SSDEEP 24576:s5YID88h/L78oK1/aMIPY91xYxQjAQc07PAR:s5YI88FIoK1/aMIPYOxQcQDk
- TLSH
  T1C2A53A1196C94A5AC4F2EBF24D9F2B4667213A191D085A3F02743F5EBDB77C2892E30D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Installer/temp/UIAutomationClient.resources.dll
- Size 19KB
- SHA256 1cd49968e34222993029f2390524629dd66e12881a46e0b1c980790332b0dd39
- MD5 c8840419ab130ec57e931f33eeadaa9f
- SHA1 3f1a4d21bf178688b1f13e5ccd079a96643b7c5c
- SHA512 771df1baaae1f40ab97f69a67149388191c3f36d69760a95f4c9ca6fdf7c45ad0254c37a0e173893378bad22700acd9b54c71c08a6af4b6034d28a11fe2cc14f
- SSDEEP 384:F9fSv3yPYTz3rdWBWSXMofLXmztvGHRN7AAR7i1R9zAw:FdSv3K4A1fjQtaAAR7in9z5
- TLSH
  T1DE921896ABFC0109EEB76F7066B5E9573C3DBBD21910C42F0291E11D0863B94DA3873A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Installer/temp/UIAutomationClientSideProviders.resources.dll
- Size 20KB
- SHA256 576738d4837306a150bed450bbf2e56b7f5ea1c1cc5edff375ad479bdfccdfb2
- MD5 5840db58149e24773844e3a27eee6cfd
- SHA1 0bf24d8f68397a0ddd0ab2f0f86c63c703938c94
- SHA512 6c12c6bf7929c5d4a7d9fcb5f8db78660700cfade2210e01eee329507ce2591c7bc3f9ab7c18ecdf1a185983a62d89040831cd6aad7ea19964c854545ae7412b
- SSDEEP 384:HL795G+sQCfTW3LyfLXmztvGHRN75LkNviCksR9zGURTk:r795G+sQX2jQta5aio9zVRTk
- TLSH
  T167A20952D7FC211AFAF35E703AF5E9966C76BAA65910D16E0240E44E0D72B50CF2433B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Installer/temp/UIAutomationProvider.resources.dll
- Size 15KB
- SHA256 cec580752bb5cb225c6a51e98e522ed619ee43ae922915e95ecc3dd6a5ef864a
- MD5 4820d6f1ef2ff6ba8df1ffc126e3e276
- SHA1 2ff17fcba9656e7d54ec8782c2b41b5cb7daa184
- SHA512 e19d6bf10a735f8a122742eb84ed860df216d931296c0723692fd4c2b2addfd0fd8300ab690fb521e6a8564b0d22592e441c7a3c8358efb38608d9bda9e9dc53
- SSDEEP 384:Q03bJkjnWeKxfLXmztvGHRN7KAwp9R9zJEG:jEhQjQtaKt/9zh
- TLSH
  T120623A9687A80142FCAB597062F9ED533E3DB7C3A920A52F4592F5580CA37C4EB2063D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Installer/temp/UIAutomationTypes.resources.dll
- Size 18KB
- SHA256 e624e91059b65c84ca97814d3775d7b1457002cb2001518134e944e9da44e91f
- MD5 815930bd62a0ddb013457ac2224297b0
- SHA1 dc64eae7ef2d19dc6361bdf3eb14f85e809c5d22
- SHA512 5f207763588e877cf2b644767d688757f6025699237cab31a6c0b5cba3faec80266ba33dcbe4413f8485113b55e172e71a61285ba1240b929e5773fead3bf19d
- SSDEEP 384:1baJGPI2G66WhNtfLXmztvGHRN7nP3U0R9zcUNz3:1eJy3trjQtac49z13
- TLSH
  T1A982E842DBFC3106F9E76E747976EC962DBEFBA62800901E1054D14A0C72F849B50B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Installer/temp/lgpllibs.dll
- Size 151KB
- SHA256 015416a1f39dfe40a2f659f058c8b95bfed2ff1ff38fe8aa1cd02bcd8275c4e3
- MD5 89971e59cb27757a4c5e379a565e0aa9
- SHA1 acdc9f2fb1df0380c3a4471ed0e08be15100e45d
- SHA512 b7ed83c3e3febd3afaacbeb59b3a871870ff4238943becdcc8c5a680c785f43754907b57c23ba3cef939e4413faf5d34d88e34c1c0360527ec70cb170774c198
- SSDEEP 3072:AW2URaYbc7J4xSVns0G2L37K6q7DnBTc3TFPC2v/xWj+Xk:AMaDJ4UfrKxDnBTc3TRC2vUjf
- TLSH
  T1C1E38D6EE6448CBEE436497415B68B0B677E3C400B285FC797A09B146F5BBC03AF6391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Installer/temp/libnettle-7.dll
- Size 222KB
- SHA256 65ca3b1ba858007ee9a14608ead755676d259cac9430c1920a7b18b2f6af9932
- MD5 46e76a627a54affe8a26d0076fba31ac
- SHA1 85132d682d133802603009c14810115e8fa8365c
- SHA512 2ef2f8355fd30b766098b5eee27a9de962409acba238aa3829e33c425b88f8b1daee892eebdb680888daf0bc84a61b412bd28d4ccd6878a8b859a4935d6816bf
- SSDEEP 3072:76DHC42wlk9imse9Yf/tcIKM6C7SMqqDI/r7P3FhFA4WGLHY0v:7L4k9imseW/2IKMP7xqqDI/nFhe41L/
- TLSH
  T1AE24A01B7FDE6C9DF667C77081A9833369247C940870E9E61618F1B47E23BE0EE64498
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  Installer/temp/libsqlite3-0.dll
- Size 1.0MB
- SHA256 6e220d30894e6253fa5961ce6161d884998f739bbf1ca89c09d4fb0f9c027edd
- MD5 e1cb912347cd6302e012a4079afb78f1
- SHA1 8377e39f98ff8efbe02b885a59759b82573da7ab
- SHA512 42ff4966d51f22acbdb337dd79ffb79e868da27aa6377e2481f5a67f3be0344d0b7da3de839de00ef59e7314891dea0e16905d2ed4e55cc218ead1dcc8efd5fa
- SSDEEP 24576:bmsokxHNOmmexbosz/qllHgEdywT7HPujJNQFsQLtL0CgmonvTBbhS2:bmLkxHY3IosziDAEAwPHiiFs0qCgXvh/
- TLSH
  T1F5354B1BE2A360ECC57BC270876BA772B931F4151134BDBF9654CB312E11E509B6EB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  Installer/temp/svml_dispmd.dll
- Size 18.0MB
- SHA256 4a4e26055b333841407534cc11d852a1e358bf9289f89ba97f94a9d073ecefca
- MD5 35ee631a8cc3580e4d197c11d12f4ade
- SHA1 74b64f23b730d856e8647f9aaceaa5424a872891
- SHA512 d900433dd7a00256621293a9075b4284d82b950c15779d3ab8a9a3d8bdc7e146986756ba5f1c1380637bb3197e110108910217fe5ff9872c4a4927c6677a288f
- SSDEEP 98304:WLKaY/Ofme4k2LALs1Qw8CWhvfrcMMMMMMMA5cMMMMMMMG9MMMMMMM8jzv16bTEI:sY/Oj45/11CEM3jzCyS
- TLSH
  T184177B83F8619B9AC41074F404DBB99CE1162CA4403C0EB3A7646EEE1EFF75876179E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31