0496e69e98edfb3b70de8a69986e8dc75e1f6240eb513c6fd03069a902365920

Sharing

Copy URL Twitter E-mail

General

Target
Locally.Uncensored_3.0.8_x64-setup.exe
Size 20.2MB
Sample261029-vc94xaev7m
SHA256 0496e69e98edfb3b70de8a69986e8dc75e1f6240eb513c6fd03069a902365920
MD5 bf8d8d645d82d88df5a6b911a38ff788
SHA1 b6d8e7546afce961c76a52638400e9986499bd65
SHA512 bcc0eb20ee38ff61f39ec4162b8b2dab13eaea39ae14acf331bb0847ffcbcbcd164096e5a3c2ab4abb4dbb923f50fc2644c23d90b07795c31e919e51d384c2aa
SSDEEP 393216:9YRR9fWrcdoDfr6NTJjQhb8S0P7MpsUcli4OKsHzNLIbSAgAaf4xX0:9YRfyc62lJctnSMyU8sHzNLsSAgDf4N0
TLSH
T14527332427B6C886D1759E335D88BC5953958982BF3F5F2FFC449838BE01ED8EE4A604
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Locally.Uncensored_3.0.8_x64-setup.exe
- Size 20.2MB
- SHA256 0496e69e98edfb3b70de8a69986e8dc75e1f6240eb513c6fd03069a902365920
- MD5 bf8d8d645d82d88df5a6b911a38ff788
- SHA1 b6d8e7546afce961c76a52638400e9986499bd65
- SHA512 bcc0eb20ee38ff61f39ec4162b8b2dab13eaea39ae14acf331bb0847ffcbcbcd164096e5a3c2ab4abb4dbb923f50fc2644c23d90b07795c31e919e51d384c2aa
- SSDEEP 393216:9YRR9fWrcdoDfr6NTJjQhb8S0P7MpsUcli4OKsHzNLIbSAgAaf4xX0:9YRfyc62lJctnSMyU8sHzNLsSAgDf4N0
- TLSH
  T14527332427B6C886D1759E335D88BC5953958982BF3F5F2FFC449838BE01ED8EE4A604
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH
  T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH
  T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
- MD5 e6f30908abfc6f53b7c3c36daec4586d
- SHA1 a9ce4ceb9121c0f4375010438359f564f77506e3
- SHA512 0161f510d894d7a85c7cc160ef1cbb694cd30580ffe537f82096f4ce966cf3f6a9fec4929dd93ba2b133eb23a0230e53969792ad647c3b0f5f2e5517d9970a09
- TLSH
  T1A78173BB92E00CF3D0A44BB780A71CE362B5DD301752001F4A478AA92590B67EE7EB15
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
- MD5 8fe362ffdfa66269b8a64e3a87f68e52
- SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
- SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
- SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
- TLSH
  T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH
  T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  ggml-base.dll
- Size 645KB
- SHA256 ca88409bfc3da339566348ae7ce290b97afe3e095c8e3f4ad92096122712842a
- MD5 7522c22c305876df0d0dc975fa30d5b6
- SHA1 4c170d031df36169fba0ff1a603b60080c43a12a
- SHA512 5d4f0c242740fb16ad4a5c7a36a74407479560bfae71a1bf97b51f9ceb71b09bfccb9fd6f6e03468d374fcec16a950f2e6ce15873bd3429f528aa8702bbc9f58
- SSDEEP 12288:mJcSwt+G9Ig3+JW6vOXPqGzkmOFt/uOfDNA7k:mJcSFG9pOJWJHzkmOFUOfDN3
- TLSH
  T167E46D797298C4ECF47B80745A55B73BFA70789803205AEB4394856A2F7BAC05F7B306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  ggml-cpu-alderlake.dll
- Size 894KB
- SHA256 c5efeaaf214858c251b3369222eb6f4f382fd220dbd1b4ee2c4528e455658221
- MD5 378fd9b3271371f8338dafae28286f75
- SHA1 cb738b56bf936b47bdc3d8cf51c5e5b12a1e8e97
- SHA512 57aa03edb53296ae61fce6a8d8a5ef3573fcafe62a0601a3ffad0cb0b06496d2e172a39aa841e8f8d733a326cdef93e386d75ac5dbf770978c9ecf1c8f7c0966
- SSDEEP 12288:MFel8GzupIOxNIcmDHcF9e9XQVMtOyDasw2DOyPian8:MElLupt2HcF9e9XQVMtO0asnAH
- TLSH
  T1F9155B6AFB90804CD13B84B0D935A3B3EF907CEE4B107AE355A2C9522AB3ED57D35215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  ggml-cpu-cannonlake.dll
- Size 1002KB
- SHA256 846e98e209291009be23d9e9e30b332d0e2e7829237add0e998b55395a377bc5
- MD5 04feb533b6387ef41515e9139a889c69
- SHA1 d660552a987872c668692369863081430f987c97
- SHA512 d367c596b34a1de68f59e1fe6010c1947e49c6b8e07ca6bbeca1ddc2df8c0d7a987a9fdccf1325bdbdf502bc040f9cebb2a1710b66e3e4297a93c16f77f8e7af
- SSDEEP 24576:zGbJjtxupua3fEOs0NEkOe9tQVzgDhbXj4N+:zGbJjDupT3+rkOe9tQVibXc
- TLSH
  T1FA256B26F788C14DD23780B0DA2153F3EBA17CEA47106BE355D2C9A61EB7EE53939211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  ggml-cpu-cascadelake.dll
- Size 998KB
- SHA256 9b0fb5d9ffa723aa9a6244279ac0d028edd37092820bcb0bf59e3b3e1dbeda26
- MD5 2507a746c00c065a702957c3f0a13fe3
- SHA1 eaad6d5c2e8255434a07ef2faa18939951704cac
- SHA512 c44c5c52653922eca718e46177d3acc6c5bd1117ee370808d115809a83e61f51e0c5bba1b9373e3b3db82098ef55e8cefa62d79347774ce999d9fe92991bc355
- SSDEEP 24576:mzHZXupIgWsOQURJe9RQV/MniGPRNCg+S:mzHZXupItscJe9RQVBGPT5+
- TLSH
  T10C256C26F798C14DC63780B0DF2153F3EBA17CEA07106BE35592C9962AB7EE47939211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  ggml-cpu-haswell.dll
- Size 896KB
- SHA256 f3be8dc43f0cd8a31c3ffbe8260fff8748c6865033c791a8c8f613a64dee7481
- MD5 497ba6952c6de4aa678683aa21730e3c
- SHA1 efbf40c06e320808191e8ae711ab59ce979bc1fe
- SHA512 94beb33b56fc3d96333fc97e2782b13b8684ee003cf16ecdf518fba8b4b89a6cfd80fc1f3dfefd0c507fe2fb7cfd13916cae0541d66b2390ddc43d2cffd579b5
- SSDEEP 12288:60nlUPzupIWDoNvvZ7hEWUfe9AQVV/BEIPxJpmM2nSe:Dnl2upSf7hEWUfe9AQVV/BEIPxzC
- TLSH
  T1D6154B26FB90804CD13B84B0D935A3B3EF907CEE4B107AE355E2C9562AB3ED96D35215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  ggml-cpu-icelake.dll
- Size 998KB
- SHA256 f81e3b2d74144d8f97f6f1075b2fe403762f08c7ccb63d822cb393f3980d91cd
- MD5 75ae18ee252bfc9cb752cf508ace9f2d
- SHA1 94e5a6b515cb7b21af5d91aad58f75ff61cc2b13
- SHA512 72203261a1a3fa148174fffb0b5033d606d293d984df2537ce7469b194813f0cfa6492a1d0bbaf63acf839a366a8d17401454080cc0801fb3632159fbedae4fa
- SSDEEP 24576:jzHZXupIgWsOQkRJe9RQV/MniGPRNCN+S:jzHZXupItssJe9RQVBGPTM+
- TLSH
  T198256C26F798C14DC63780B0DF2153F3EBA17CEA07106BE35592C9962AB7EE47939211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  ggml-cpu-sandybridge.dll
- Size 859KB
- SHA256 e102cc90312a09535bf27dd9c29345364af26a30db131717898bf311dd86a64f
- MD5 2d037c5ce267cb3e09125040127daead
- SHA1 059a4f95a73f3dbf575db40ba1e71b5d88aefc73
- SHA512 c462fde891cb142bd4b15cd03417fbddc37617bfdbbbf1d0fda435e10bcb8df76596cb88bdfe6bd63471bf0d6a61d4d5b14ab6740284af9a7c0c4b4c97beacdb
- SSDEEP 24576:2F28LeTupf5oTezyHc++e9hQVBAesZg+w7:2A8LCupf5oT+e9hQVUZg
- TLSH
  T193155C6AF7408048D53B84B4CA6563B3EE913CEE8B007BE361E1D9623A73ED57D39215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  ggml-cpu-skylakex.dll
- Size 1002KB
- SHA256 a80f1d72a4e713548fad8435c5b1c18153f2730195598e881ae02340d9212ea9
- MD5 f2e1676557070c9a8656314ebcf63424
- SHA1 59cba4f7c04a64bf2524929bc1f9aa3f19b6b825
- SHA512 55f1f5e724ad53d3829e04a62a7a979211e56de56d20fee417c71eb0c7fb17a0c00b8b2c07a58390f3bdd5cc2850c141021c48d5e1c9639feb26dfbda5bfb123
- SSDEEP 24576:mGbJjtxupua3fEOs09EkOe9tQVzgDhbXj4N/:mGbJjDupT3+bkOe9tQVibXc
- TLSH
  T13C256B26F798C14DD23780B0DA2153F3EBA17CEA07106BE355D2C9A61EB7EE53939211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  ggml-cpu-sse42.dll
- Size 762KB
- SHA256 154f5df01a0ba08abfffb45ffc9d681a410c9b4a2fd5784e052c4675038393ef
- MD5 eb827c7b8fe5bf69848d35a5cfd868f3
- SHA1 a6a7a84c645a62f0928004c90cfb554e4c1403a7
- SHA512 6c47e13dbaa8ec8ca9b3c4943bf653ab9a765e83634c63db85ec0ece3a41f2a11bce34037abc05df7eaa487894297e6026be87a3471410081f09ab4008e1a16c
- SSDEEP 12288:uzy1w3BFiq02dUPYK1xmCcBgF3t6GCIe9oQVp/4JKDD21qFIC0vLrRtTxA0UGu:I3BzdocBgF3AGCIe9oQVp/4JKDD21zCM
- TLSH
  T1B1F44A6AF7558089D03B4074C91493BBEA913CED4B1077E3A2E1CA232EB7ED16D79316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  ggml-cpu-x64.dll
- Size 766KB
- SHA256 d52ce9bc673b22e78ffebbe59b107c24053214a5439d6eb541b0181e3f973369
- MD5 8fb4cc841f71c62010b98fab54c18ffc
- SHA1 c230848f5af84dad72564d9f0ef029f731275dba
- SHA512 a3f2f37aeb097ba48d789620fe0ca0340dbe29ab831490a2a9a761c2f7d5f1765929a7c2f5317681913f24f5bbef4d8b6a6225da9ba3008a077bb099516b126a
- SSDEEP 12288:QMLVl+w3BFHt7YrMgzW2zUMtVE0AlItlsFee9gQVjvhJgmNyqdqgDuc3/U4+5:DhZ3BhtYMgCS60AlIHsFee9gQVjvhJgm
- TLSH
  T190F43A6AF7548089D03B8074C95493BBEA913CED4B1077E366E1DA223EB7EC16D39316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  ggml-vulkan.dll
- Size 46.3MB
- SHA256 9df1795d7bdf0646bef4b14530cccc2055aae2748cfa9881934c82f6f28c3334
- MD5 51869af3738258dc2d2944f7d4693f41
- SHA1 6785b25246bb21c1e9614ac95ffbc1b08b0fb512
- SHA512 6d138ab01e5f788880c834c229586d128c0fc50379a988a679bc4c4d0222b8a18d5eb96e4e0771c269c2be42f154e2b3fc6a9633dd8f3e3a87631e498474e60f
- SSDEEP 98304:5lZ9C5QzWNxSG6pSNN21FFl6sMSnquAz:5lO52qELdnquAz
- TLSH
  T171B7D915EDF68F27EC2A473D82F76220B96DE15CA793CB17221CB63876523305A9721C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  ggml.dll
- Size 66KB
- SHA256 611b59d387193cf84e7cca37d9b0b7d9370eb400b6da1338d636ade55b69c0ba
- MD5 15d5aede40d587fc76ecf32a087c2304
- SHA1 6005ffb40eff381d32364e65022be278c87a5356
- SHA512 7033461c46ca9bc2f2cdaebc47710244fb985894e7d14a2817bd38580d4807a8d9839dde72c291ca19802917be1a4b1dfb505066f6694f990abc2faf6f879c71
- SSDEEP 1536:P5guE6eXzKyX5UWxXNdL8KTwMsgPvzoc4EX:P5guE6eXzKyVx9dLpTxRXE7EX
- TLSH
  T19D631929D959403FD259D8BCCA034D02DF73BC8B57A5ABCB67401EDA0D26AD85F3E202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  llama-common.dll
- Size 8.9MB
- SHA256 3e9bfa2f16b79aab4aab6735b45588d5f5e45784b48354dbb5858cda31e7c18b
- MD5 83ded2fd6ae8e3d4f3564267d710d97e
- SHA1 88396496eafe35ad0c3f1274d557ae9941c77edb
- SHA512 8bd2b667ec8384bc0a1a1992f47aa07908826900cfc9f0da887d18c3077a8898717ee4a1dc3a12628b0d8b6dad20c33e64814f2744ddfa00f78888aa0dabcdca
- SSDEEP 196608:W88pfSRAVHhnkvjVo7liKL8R57ctzNH0+tyK9TiI4:V8pfSRAVHhnkvjVo7liKQ57ctzNH0+tH
- TLSH
  T1A6967702229A6197C4EA73E59EE429216730AD53BF19F69740E7B0232FD32CC57F75A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  llama-server-impl.dll
- Size 3.9MB
- SHA256 0ed9c9bd0e8232db7480b50fe880935eab270e01195f2a87794ab3f66b9c67e6
- MD5 2e0e386aa5be4a14b1fd38d279ce3037
- SHA1 1a31579961e0869e62bba87984292c6d13a835c9
- SHA512 ff91b7c54ad9a3cbe74fbf4bedd0981d8996fe7edcd1d1b8631ea6bbbebbe27e7d4031345bb9c638250f6c8c7fdefe10712e90bcc807130e8fe3239341d75fea
- SSDEEP 49152:fUgvVJ0VHH7fDxOPXdALzJZe8KemdA6GZ:xEb5YO
- TLSH
  T136168416230E4297C4EBB3F9AED11522A3747C52BB29B6DB51D7A0230FA338C57B7560
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  llama.dll
- Size 2.1MB
- SHA256 9b766f428aef0c7aa664123997ffea56583fea913c00a95ddf0a709428c367b8
- MD5 1181873ca61477506b9d4c3b202464a3
- SHA1 96895b8fa8020abd12f43cec884e49d16057bc03
- SHA512 d0b89dbaaafafb53f31c656f44e526aa6068189b5c6853e07bd7996238cfe3e6aff42d299ac4fe524851886e088455c8de71c76d0bf65e10d421333729f7d5c6
- SSDEEP 49152:nLcJPUhuO6KfKIRjdpuZyMEd4iDVNLHexxHPZ89+iEDPpNEF5ON+x:hf/9gU+EiN+
- TLSH
  T196A57D12A17901A8C43BE0B8FB665D07FB71B045033879DB26604B666F77DE8A6FD321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  locally-uncensored.exe
- Size 22.2MB
- SHA256 27970f5789257fe0f229c51634c9f2d40ceb84b8dd8795a470e33665d9506c12
- MD5 ef70deb7e0008bb2e7addfa835e554d2
- SHA1 e6611ffd7224e70f2493c1468a0205875c63fcbf
- SHA512 c8c77990f4248aef239840eb216691788efc373f807f2ffd248cea54cfae63971ae009b82b0a953ee16e3499fbcf95b19e9035d79efda3152b97fc2713db5e2d
- SSDEEP 393216:iGto42gOKoUpm2QGK3EocKStOOYX95sa:iGG42h4BG7l92
- TLSH
  T14837AF03F66184E8D05EC1B8835BA233EB72B89D493472AF1BD45B213F6AF506B1D758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral24
- Target
  lu-llama-server.exe
- Size 10KB
- SHA256 14070b1ae15272a5225babe08e324706ab8e7321a7ca22e0fa90ecafbb04d3ef
- MD5 17b41c7a4033475a859c729a7085a28c
- SHA1 8616f5fd43a712a7d7e91c2eb3100f96484f4c18
- SHA512 d0ea79407d577f1d3d3c7d589d6fd0ef98c12a046a13e804f23f7d9baca4599ee914ef41e15940d1eeb575a21fe47fa829ffb52642e12b8083da20e433044033
- SSDEEP 96:j2WDGoirMW3N6ohD1YQkHcr2M3D9vhIczBf2eS+2CDEbmw3Q5tfBsU8S/0uxO:KXcohD1YGJxvhtdHS+2z3Q5tfWUv/
- TLSH
  T1A722098DFFB64CDAD521437EC576494AB066F3301B12B3CB17B4A02A1E173EAA433189
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  mtmd.dll
- Size 959KB
- SHA256 036fe4621501ad9545129940300d4f21e9f78a5388a4c9825bb6764dc34e62ac
- MD5 e81141eaf098784f283c6e5cfe310382
- SHA1 240e1e63f62604adcbb5ef88fc4236f8391d2dc5
- SHA512 6bf9ad229f3540b7c9000e4069229552b5080bd68d9147ef0bf81ee64252ca6f87bd5bc7c297ffcdb8ae9d6b2b0725d3489c4d16e2f48615a83b029f4721e073
- SSDEEP 24576:vL2ybTyHPmPHH3nYvsoCCKcjesFAPe9e4Ia7CfJxb6vrD2vUKDERb2OpverRzHi4:Nb6vrDMpgRbvper1Hi4
- TLSH
  T1FA258D29BE994129DD77F0B4EB8A5413C673348803361EFBA7D4C6791F1A9D86A39F00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  resources/abliterate/lu_abliterate.py
- Size 20KB
- SHA256 ec88f1c9a82ecb2567fcf2a9a4bce622565ece2bfaa774da45f6bef11b06b53e
- MD5 bd4916290a99b116a20f52f425bd0bce
- SHA1 59038877f2792288fbcffaa938e439d7ce5e2fe6
- SHA512 0a660e88430364939f96605c152924fe6945a47430104f5a6075d3474346b3582f1422137647ceeab87c74545c74b44af3efda83009b083c06d9c97076d99978
- SSDEEP 384:DNueCl41xQ3DKtFIvqqa1jeta4d6tGQeDXalxfM7EHaebUH5iZXmGV9/5x+qLJDS:Db1xQ3DK3FmaKFQkAxkYHaQ+ez4D
- TLSH
  T1EBA2F73290126972B683D02C1ADAE60173677887360564B8B5EC73A85FCDA3513F6BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  resources/voice_loop/lu_voice_loop/__init__.py
- Size 307B
- SHA256 c6ef13e8abf24bf958d972941d6fac60642b9a8b7292ed8b381fca1e457e5bac
- MD5 7494f6db2f51a17554d633f8fe0ffd54
- SHA1 a8d38aaf7e59757749faf59b0907ca16e34568f2
- SHA512 25cbae44adfbf4de11122abffefd89eb349bcc9b50e185dcb77d039048ee36665341cef0a23d9bed8665e7c1a92f260dd51e8d8f9f02d22d8d54a2f5694d2bbf
- TLSH
  T1E1E07D437E7E22321A0663BA9C0C03E68F35924CA6365925F7A4D00E37040AC9D9CACC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  resources/voice_loop/lu_voice_loop/__main__.py
- Size 9KB
- SHA256 47506817197a33f77b2b2ec51cfd935423aba99b64a6b03bbabb6549a1786fad
- MD5 7d3233b02d0dd116d7637e191fe76f45
- SHA1 f67d56f293fd20fdb6c2ce24516a9cb50edb0bc3
- SHA512 b086fea01f5346f2d8be8b3358a42e24125db9e693ca4c41eb6d9a4700e351803ae70de33ce4f606f13f6245d5cc67a4fad958c8eee290d22d655375a96be9f1
- SSDEEP 192:SCc1lL1ZeESU3kqDE/YMCqNs23vX92hCe4MXTHRqrHzo4u:pc1J1ZeESsgYXqzzMXoHBu
- TLSH
  T17C12E54AAD35166A83F2C288655BD5622327E46709114534BAFDC3B83F8A43DE0F23FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  resources/voice_loop/lu_voice_loop/auth.py
- Size 3KB
- SHA256 c0bf6a5bd66b25024cd329caceb6f9849411d6debacd4722453861355a598877
- MD5 6cc409859fd09ae4521a312a1ea2a7b4
- SHA1 c9684552b658683c3037e0c4c2ca938c6a59ad2e
- SHA512 b5f8a24de1f1737825749dd1dad466bc30d9a8c6021fa2b37387f1e4aef05399a53f2fcf5cbbc410377d52b89e5a53e987cf4e9e0758d08a2406168e6be7c654
- TLSH
  T16681B76FE780AA31C7A3895A5F15E463770A7A73351AC570B87CC1542F8627B81F19CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  resources/voice_loop/lu_voice_loop/commands.py
- Size 10KB
- SHA256 150efeeaf1756d5218b132902813c3af735c0e50efcc38f5c5f6d7e1bd846487
- MD5 b3db49173aa7f7ac4bc6168cc69914aa
- SHA1 5bab615b270f56fce5c13661e4c7319d559f08aa
- SHA512 ce14efcbb79561c8b63ff7efcaa35e7da4f2351301cdb276912abba5c7afb43a7a7fe64a0161d63431583494c9e4bf77befe9a1f9ec4e32981a29d3b1bd2121e
- SSDEEP 192:8aju3tjPd1lp5YClC06tJgK7ElHTfMzfmnJ3/JPL:8ajudjPd1FlCgKALVJD
- TLSH
  T1F6222EBBEE699F3300E7C51A048BB243D326A8573708007939BD96242F1953485FAFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  resources/voice_loop/lu_voice_loop/config.py
- Size 8KB
- SHA256 3fd85bf79414cb92a0671616e66ef98296a9374449c48e3288384529c21eee38
- MD5 ef24f2d238d1585bd1e262c9a30f0a58
- SHA1 669b28ec15529f43d38b442e153cf711067372de
- SHA512 5211bcb940abfc6d832951ade98f1d9d1028207449b98a275dae19cddc4936a7ed9bb7db2ee91beda038d1b8a69cbb817630cf2900a278afb6a9497972f5579f
- SSDEEP 192:tLG0OTBV92HGdE+avw7KwMTOGPNmwYzabxYmE+2QFKTx5x/yyHaNQ:tC0OlLO+avWKpTOn/z+xYvQ0Tx5x/yy3
- TLSH
  T13502D61BF3A565239BC354790D4BD2126764A8A3A2103879B9EDC0E13F0DDB697F22CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Network Share Discovery

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32