d5d129a9d1046c6f3342636f1f1eb1e52b491db206cfe2e938e0cb008f6d16dc

Sharing

Copy URL Twitter E-mail

General

Target
d5d129a9d1046c6f3342636f1f1eb1e52b491db206cfe2e938e0cb008f6d16dc
Size 9.3MB
Sample261027-tykkpsft4q
SHA256 d5d129a9d1046c6f3342636f1f1eb1e52b491db206cfe2e938e0cb008f6d16dc
MD5 8264dac43a206e487932933555a9bdee
SHA1 c03fdb123ff9d2330ec799c5c3da88bbf747f7bd
SHA512 d48ca515af41a7247d68f52639c9c14d5e008df8d47410fddf334a9671004ec36d9b612afcb8f053743595874422a8ed6961585de01fddadae097d47038eed20
SSDEEP 196608:sfYcLfGR1AXF4XLjsvgDxJZBQq9cgyjZonmdynAnPxS/j26onMpEjJh2o:swyfGR1UF4XLjsYDDZGq9Tyt3gAnJSrY
TLSH
T12FA63384B8F4C3FFC77A423EC6E796846B6AD53298FD95961A000D58BE1EAC0D04F476
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  d5d129a9d1046c6f3342636f1f1eb1e52b491db206cfe2e938e0cb008f6d16dc
- Size 9.3MB
- SHA256 d5d129a9d1046c6f3342636f1f1eb1e52b491db206cfe2e938e0cb008f6d16dc
- MD5 8264dac43a206e487932933555a9bdee
- SHA1 c03fdb123ff9d2330ec799c5c3da88bbf747f7bd
- SHA512 d48ca515af41a7247d68f52639c9c14d5e008df8d47410fddf334a9671004ec36d9b612afcb8f053743595874422a8ed6961585de01fddadae097d47038eed20
- SSDEEP 196608:sfYcLfGR1AXF4XLjsvgDxJZBQq9cgyjZonmdynAnPxS/j26onMpEjJh2o:swyfGR1UF4XLjsYDDZGq9Tyt3gAnJSrY
- TLSH
  T12FA63384B8F4C3FFC77A423EC6E796846B6AD53298FD95961A000D58BE1EAC0D04F476
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 89dd7d646278d8bfc41d5446bdc348b9a9afaa832abf02c1396272bb7ac7262a
- MD5 d1eefb07abc2577dfb92eb2e95a975e4
- SHA1 0584c2b1807bc3bd10d4b60d2d23eeb0e6832ca2
- SHA512 eaffd9940b1df59e95e2adb79b3b6415fff5bf196ebea5fe625a6c52e552a00b44d985a36a8dd9eb33eba2425ffea4244ed07a75d87284ff51ec9f9a5e1ac65e
- SSDEEP 192:E6GQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT311929WtshLAzgSrX8:E6Nt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T186624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E4678565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH
  T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  CrossDesk.exe
- Size 33.9MB
- SHA256 cfcbd2c280153775e275c7db0833493d038150b93a56547810ea1b344427ea3a
- MD5 d83d5b377d27e81c568cd23f5f8591c6
- SHA1 dd23cf64575087cd5185ea62b7c0d2e1a17ab09c
- SHA512 0d0a818cc1963e530c300cdb349fae4a2841f38c5c7bfa08e1b7a8672e857f1fd3b39c537c3b07b6d6d9130f498711ebf07f9e6d9ed2d1a2f3cd212fa16928b4
- SSDEEP 393216:QDY7kDfbs0ZNnR458D3Q5mqcR7GKLP3u2/h8yTgzx7JzyesMvgyr4/K85EEbgnF9:4DG4xwb3
- TLSH
  T1AA77BE0AB2A30CA5F776C074C6A74613E771743913721BDB1A9487662F6FAF01B7AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  crossdesk_privacy_cursor_helper.exe
- Size 115KB
- SHA256 872314b430cbb613426e31e0610df77b3c3959fa644cdc7e80c7a0e67d450cc2
- MD5 ded175c90118a01c5535044f2fa8b4cf
- SHA1 9a784c48e94fb349e20361fbbf0f886806b5dbaf
- SHA512 ca167c1bff9f9ab79a67b372c0b009a2828d277900dfb4dc487380a571d106676f944ceeb8d39aacf61da16ddd637bcd3f218ceb1cbfc891002713659f8bfcb1
- SSDEEP 1536:UMw1eDfLY4YR5qPGcZ3A1J3oTHSOZaXbyVzRzsntdsWJdA9dlHW5xcwS:UnervGUA1JkyOYXbyVVzspwVW5xc
- TLSH
  T1C3C3495773E530F8E0BBC139C8964A05EBB2B8755B609BEF0764469A5F236D08C3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  crossdesk_privacy_window.dll
- Size 225KB
- SHA256 e1257ca27afa3439c0e5784688b44a7332cf03c7ef8adb9c10ddfd38c120f856
- MD5 1df09120a1008858994ad10179ae5e72
- SHA1 c2614a6b462e3e654e3cd64ef123fef63e1fce5d
- SHA512 3adf7e6dbb55b11717c7a43cd0f3873bf9f309ab4c21ce36b82622cb1e81eac858b723ac9d273f1d600eddb7773dbdd9e21978f11cc7509659266f3b127c6214
- SSDEEP 3072:gECx/uhO1c3erREme1N7if3qX5pZGQ7fUcOBWyuiMaNm/TLa1+Q73DHa8+RZO:DC9cOl9Iif3k48f9OtuANmO+KD6
- TLSH
  T1C6349E57B6B5107BE16B8974C5530A02EB72BC519BA1ABDF07500AEA0F237D0DE3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  crossdesk_service.exe
- Size 717KB
- SHA256 6c20b6fbbe33826fa9042e940aee36871a26d63de13cb9d42565c87d0fe7e10e
- MD5 878832ff72725a49aed00065c4e63d16
- SHA1 f69f76127b2a9b89b046706a207c40c63b49ff58
- SHA512 cf378787a0cfaaaed29a29289fd7b01562dae655a6b6d7bb7f35c9553893602ab153523a1cdb4f190b03e8ecdaccf2d2ffb4ac12b9e70fb4691b807c3ee648d3
- SSDEEP 12288:wAXTwKUl5OUODq9/eqQY2rXft3RTdNAkofignnLkRS5:wwgkUODq92qjGXtdEkofxnLkI
- TLSH
  T177F47D26B79801F8D0B7C17ACE568916FBB178064761ABDF13D047A61F27AE44E3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  crossdesk_session_helper.exe
- Size 780KB
- SHA256 91d09a13a921c144a0791fd995473fe6afa95633be4fbf769831f4ebfcc1a4f4
- MD5 a3b9cb7f1eeec7989f43e148b3999fe5
- SHA1 ccc31020f13f345d4abee1aeb7dd7d40250cc4e4
- SHA512 ada3060c2ee9eb6457cba29aa10ea2a1056de633637c981b7cfe7bc34562940dc336e970139177b02f83eefb964d245e8f32bd2b154a9d76e9b5f3b8b7773ec4
- SSDEEP 12288:qYk0RZtCA17spRh/CGYLv0BGYhgWdF2aYVFT9PHDVgyP+:97t4pRh/bYgBHhgWdYa+CN
- TLSH
  T105057C26B79402FCD177C17AC9568912FB72780607A16BCF07D08B665F2BAE45E3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  usbmmidd_v2/Win32/usbmmIdd.dll
- Size 60KB
- SHA256 07ceebaecf203fef39117576d8b49d803c0fb1f6c7aa5175a6ebab110d54fed2
- MD5 35b4cd69a125d475a9456e0fe43b6514
- SHA1 71947900cf78c146a4cddd667bc3228390d429be
- SHA512 f02542203a5c992eabaf7cf6b706537128ffca85348f808bf6c897d8fba02087d7e8cdaf0a91329f8abde2148adf071eb967f47ececdb6a6f7c9f98fed11b730
- SSDEEP 768:cwVtOoQ+DUHe4TnqkgCQEpc6jpRaGRKgmU3deh9pKyRiopmilCjKfdsqQ2bx1CVu:ciZWqkg2cWsFRRRo4C74xk1t29
- TLSH
  T1DE538E22BEE044B3CF5A5A3074A6EE1B2E7D76815DF0C8676B6D830C1E75392771421B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  usbmmidd_v2/deviceinstaller.exe
- Size 139KB
- SHA256 918be90cccf70ccd20d42f564710335f1b6a7322ecef8e432737b6a4d2743a6c
- MD5 9dc576103b6c58580612c060310d5897
- SHA1 1f48037c5e17cb489a24221e3ba5a120d8a5850d
- SHA512 71cf06e711b3e408f599db3db9d795d4ebbf7d2d515fcc5f61bab97d9b54d4e7fead05ef247239d5bdab1dcbe180bb39ae7a6b08cab563bd54c13a81e07f1446
- SSDEEP 1536:5GSSEzaP6vDymVnGOBFmGRlxJjNJVCniTcjr/sWjcdc+hH7V1F7mF4O7WNI:oSSzP6bL7JjNJVLYrAc+dV1F7ARWNI
- TLSH
  T148D34F0273E58525F1F32A3069B456710E7BBCA1AE39CA4E6388515D0BF3E90DD74BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20 behavioral21
- Target
  usbmmidd_v2/deviceinstaller64.exe
- Size 158KB
- SHA256 e9baa02cdae921acf0aae4d8e8c29a4cdf4057ab61f9c60862b7cc439e2753f7
- MD5 41283e1240acfc163f0e697073f07413
- SHA1 a10cf33fbb23c4465921e6590c934873f3155317
- SHA512 d7361a1656c8a8bf0b2bb8fa332105912285d23933bbc37ebe955b36e3fc158472216757bd87638860542cefadbbc17d36d5ef16cbd910b64fc25a2d7f42cfaf
- SSDEEP 3072:MXiK11hTwS8XjJ3T/yub0koXAUthu3MA/KARW:MbillTK60koTQL
- TLSH
  T118F3810323E961A9F1F7BB3499B145219B777CA19A38D74D0298815E0FF3E809D39B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  usbmmidd_v2/usbmmidd.bat
- Size 306B
- SHA256 442f084b310de46ed9c70f64574fa79559554ea8931c92ee05f8ed7c8d8c0dfc
- MD5 bd43653a6ba586a0074798fc87238b71
- SHA1 62828f798cb57dfec4df99deda31d300a691de52
- SHA512 750c4ce9d2149e7aacb10e4ab06b62d03034c65b43da59536ac18f974763befa23dd38af74e5140ae8828c0df973c8e313143e30ec808da202f3ee331ab5e307
- TLSH
  T1BBE08616125F36BBBD43469B083D21658E1B984150BA17F123CF625A988305821636C5
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Drops file in Drivers directory
- Drops file in System32 directory
behavioral24 behavioral25
- Target
  usbmmidd_v2/x64/usbmmIdd.dll
- Size 69KB
- SHA256 dc135d675127113915a7e5aa9fe57c84edad6be41d0890b265ef124ab26ea9e3
- MD5 ee848c427145609d998725a38e7ad9af
- SHA1 6b97d9ab1c3978cdc2d6735c227adca8f0aabddb
- SHA512 5bd0eca69d16a6fe32856978047967e44f0d49c59cd611b02e9d24ca59c0d862ad5f8a4d50c6bed816fa11e2f4fee6fabbe3d6d735224084f47161693eee8007
- SSDEEP 1536:fNgohwVuXUd9g0TOHISWaxVTYwZVtDEWoG:f32eSNOoSWMVVZVFYG
- TLSH
  T11B638D597BE448A1E46B9470C4E29E4FFAB1F1422F31969F0374C21D2F637E0A62D366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  wgc_plugin.dll
- Size 574KB
- SHA256 905150fd0c49164b46a8b342d750625bc25816b36db68fcfb873c29b3465b4a9
- MD5 c9f3b5e2806cb9316919f098a0fc1274
- SHA1 71751b3eebfd52049a46e9a32734bb57b58b5ad3
- SHA512 22f5674716fd32bf014bfc43a559648d169d0d80cdc0243df34a6c767043fca06069c06da65250d8be0358a82fcc4a4e49b5b2fce8ef64a8f701056c5652d763
- SSDEEP 6144:tvCCCLdTFfldm9x0PNNa6g//IpaAIXqdU9sAe90DF4x/q3qCiO1jBncYSnR4SpXC:WdTFf7jg//Oi9NDKxfO1j5cYSnR4qR+
- TLSH
  T11CC46B26B6A803B8D16BC278CD578906EB727C454760AADF17D087A75E27BE05B3F301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Drops file in Drivers directory

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28