994e246662f064e66552ddc6ef6f3ce88be5e1faf3f3549f87714e67ebf66cff

General

Target
SecuriteInfo.com.FileRepMalware.18917165.exe
Size 560KB
Sample261102-188tlsdv9v
SHA256 994e246662f064e66552ddc6ef6f3ce88be5e1faf3f3549f87714e67ebf66cff
MD5 d490cb0da1bfe304dd4ccfbd7243da00
SHA1 43751bef800de152334ca2a21ec657346c2428b7
SHA512 7e6ed81c60235c748888981090331cea0733ff8437b83c3641ac9ada7449cb5d320b1f18db5d3b1f2742f720b7f78be10dfe571e7a591033713c60da34d2403e
SSDEEP 12288:J6qUue672UcvUUHPxnYo1kjM0yJ/URV+wJzP:w6aLUUHZYo1kjM0E/KV+SzP
TLSH
T151C40261D3D258E9C4F44A35A8B2DBA1D47B7E610024A20B2F197E7B7C746B08A7B187
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SecuriteInfo.com.FileRepMalware.18917165.exe
- Size 560KB
- SHA256 994e246662f064e66552ddc6ef6f3ce88be5e1faf3f3549f87714e67ebf66cff
- MD5 d490cb0da1bfe304dd4ccfbd7243da00
- SHA1 43751bef800de152334ca2a21ec657346c2428b7
- SHA512 7e6ed81c60235c748888981090331cea0733ff8437b83c3641ac9ada7449cb5d320b1f18db5d3b1f2742f720b7f78be10dfe571e7a591033713c60da34d2403e
- SSDEEP 12288:J6qUue672UcvUUHPxnYo1kjM0yJ/URV+wJzP:w6aLUUHZYo1kjM0E/KV+SzP
- TLSH
  T151C40261D3D258E9C4F44A35A8B2DBA1D47B7E610024A20B2F197E7B7C746B08A7B187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery privilege_escalation
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 27KB
- SHA256 d976014dab1c1ca93a8f94242a709fb16037f4b047d6ae51d56c9404544e8816
- MD5 c9b9b95558d7c44497637a376a3eb9e2
- SHA1 d3f988f792f5f80b551f9cef0ff3ad97a4712a30
- SHA512 8b615f38e740be03d0d1ed35e5268603efa428d26b56783ec88cf7f36f2f4f1e0f422fa1928abe677c72a78743cf3022040d157f46f7a980e9f330cc895cd0dd
- SSDEEP 768:xq2d6pSEIUzBHDG9iAZ/aR2RKKKKKKF91:F0D4S
- TLSH
  T160C2F8B7F7A2846DC087D278A6C6CBB2B4F1FC645430241E452176313F66AA49FBE2C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 854bdcbe48861b1805047d82044ca7fd656efa2bf16449d41b4cd8bd534db919
- MD5 fae5d0298c05898954dae4994a00e4a0
- SHA1 60ca4ca37c7922a81da2aac4fde17d35635969dd
- SHA512 01e080859c880ae11be6c19beea53f8c4d4b78e366cbf502496ddad588e73d4f0fc44a38fbd04ed45cb0704ec0026d845c969488294a98b94a0e3b72edb743ae
- SSDEEP 384:ziWFJNg4ZXTfsqMmBfdletUl9KKKKiTv2z/HpYpxl:zhJNBYq8GKKKKiTOzvi
- TLSH
  T19E52291B379656A9CC1EE338E4FF4B32A2F3746925207B1E03659A51BDD23A0C939188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6