7ce3d6068d360a2d2173db518e7cf7b91438318c7f1caf7ce9765f43c772e777

Sharing

Copy URL Twitter E-mail

General

Target
deCONZ_Setup_Win64_V2_33_02.exe
Size 22.1MB
Sample261102-3wfy6sf14m
SHA256 7ce3d6068d360a2d2173db518e7cf7b91438318c7f1caf7ce9765f43c772e777
MD5 aab0c91465d6f15758080c475f9a1f54
SHA1 cbcee2899cd7103275fdde99874c0a4d46c5b84b
SHA512 875d5958b30c90915d84ac278f9ab129ef666c3dddbf1c6d10189dbc09f93dd0c2fa487b89529706fc20bf34a5ce538090e27dac2b3729722a4dd1f5bbfce60e
SSDEEP 393216:WQZWX9qmik1C/1Bxoy1OKu4wKrbxPw59u3BYRbKH/N37IZFbTcAl+Rv4E:NwMmik1+Dxoy12KrbZw59uxMKF3ynchN
TLSH
T1613733E39FF2C018D1B24F3A7BD7C0BFB6066EA77095454F9E164B1A04A79EA058234D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  deCONZ_Setup_Win64_V2_33_02.exe
- Size 22.1MB
- SHA256 7ce3d6068d360a2d2173db518e7cf7b91438318c7f1caf7ce9765f43c772e777
- MD5 aab0c91465d6f15758080c475f9a1f54
- SHA1 cbcee2899cd7103275fdde99874c0a4d46c5b84b
- SHA512 875d5958b30c90915d84ac278f9ab129ef666c3dddbf1c6d10189dbc09f93dd0c2fa487b89529706fc20bf34a5ce538090e27dac2b3729722a4dd1f5bbfce60e
- SSDEEP 393216:WQZWX9qmik1C/1Bxoy1OKu4wKrbxPw59u3BYRbKH/N37IZFbTcAl+Rv4E:NwMmik1+Dxoy12KrbZw59uxMKF3ynchN
- TLSH
  T1613733E39FF2C018D1B24F3A7BD7C0BFB6066EA77095454F9E164B1A04A79EA058234D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 12KB
- SHA256 3c15851ff5b57ea01212e2022fe1bad29ead024bd217488d82d8da303db3559c
- MD5 852d1cdb06ad4427c99ef43ceae96a26
- SHA1 2e617454fd0b6d91696e2eab99201c33f16107e7
- SHA512 a4baa60d06bace39d1d3be49ec6b617ff442cdb38e518d5c5f1edc52b8f443b7305c12a238f6fc775ee94a31413ab2ddc0cc248516a6492b5f920805ae8f3c00
- SSDEEP 96:n9usJVxtf5EVuKQdP8KHphFKADZcbDi3xFFE2gwRF/qGBCT2FZMD31169ID90VON:8sJVhEVtwRZIJ2le2FZE29owOi/SZ
- TLSH
  T10B42A519BF4680F6EDB28430485FFE5F465975A1CA2FCE0AFF190A0CF9735A0A949702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 29KB
- SHA256 fff2ab15e01e262f5ed526c43156c7113ba1a95e6fb9312f2e77a5aba453788b
- MD5 74f44636ed78aa0b2b28f06fab5c2f20
- SHA1 bc75f92fe53fc3fcf4459429c797d11ca9473020
- SHA512 40abfc7d514911b85279ec3ad6671195b163dca8e90c59c1c31530b9121c1a0de0e37a45585b28ccf373e56d9157b2f99e66ebda301a030fdb59f55b5d68c753
- SSDEEP 384:mGnUNLxCO4nbeJIgK7Iop5fdaSJsWv+wFFFFkFE6otsXtpjtnM10EZXBq:JUxzsbWIgKbrJv+wFFFFkFEfKXtCq
- TLSH
  T150D2F808FE87C4F3D162E2B0888BE737EB14AE65442655A3FF1FEA5CBC23651890D106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 7KB
- SHA256 2bb009a80aee23189b423be20e21d26857646610b64c65bafecbe10b0a7fbfa9
- MD5 eda8dcf04854f3cad506ada509d58dd7
- SHA1 952550f332c398120f75db849bf652bc147c4bed
- SHA512 fea7bd9e9e774d574543b685e439286a60fae9e3e907cb9e23ebe02bc7ad938c793c6d9ab504ef9ca860cf0ed926102e17423ed20487b8cd261f61337815029f
- SSDEEP 96:90gjw8LGJMnn6cGyHRF/qGysLFvSObzyI3:dw8LGJMnn6cGAFFvSObF
- TLSH
  T166E18509FA1940FBD4A3E53080EEE22BA999BD1056371915FF5B3F0A7C266741E5E30E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  bin/7za.exe
- Size 796KB
- SHA256 2ddff9f557aa3e403c6b65bd202948c67a577f333852b070aed47e2a90b1b6dc
- MD5 40d5484b9a9e657b0cf5c764f31c61f9
- SHA1 6f7ffbb3acb6423f9147b4754452fa6842e68d1b
- SHA512 9a647953b57caf07de18cca7792af174c4a5b03567f17be429a60f6b0d160a508c92cdc4044a8da419f33191c15b51bff765099b3fd8f01bf4f1f119f1dff84a
- SSDEEP 24576:fU/pXyflS6gm1wovCmbOYHdfdLgXLYhAQB:2pXF6gWumbnP8LY
- TLSH
  T194059E127AE5D07BC25211328A1C7BF691F9936C0B2448C363908F6DBB719D5DE3AD2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  bin/GCFFlasher.exe
- Size 26KB
- SHA256 abadc26a894b537498515f83a6c3f2e24d96aa87509b7df812794961795f4138
- MD5 3cf89b578aef95338500ad682f275962
- SHA1 3d7b39cf347bb572799d986e9a768f6535c6e5bb
- SHA512 d1dbadd8f7316a4fe623765fb28719fe652a65491104525ce56575afdaeec97e42b283f266ba8cd1323929040ab33a71e6598bae5e9bc99239e895e2d7fdbd76
- SSDEEP 768:3o3HRF66NHkXSgp1aZVnibpYnVFWGLRIomqO:Y+6aXJ+TnibpQeGVIomq
- TLSH
  T113C25C472B1142E9D962D279C0115707D7FA726602E5428E376CCBBB9F27321DD1AF0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  bin/GCFFlasherCommandline.bat
- Size 36B
- SHA256 38ee29c15fdf229e0dd095559a4cc9ac1b08c7d636aba3a7b7a75833ff127986
- MD5 5c4dab2e2a072fd23054273cab52ed13
- SHA1 64803cf33d43db2e426caf9ff7d6fdf9681618c3
- SHA512 130157c847dfb22905cc694fecad4d5cf4f2702ecb5f4157641c900ed171c68e8698878d60b847479f1fc4f10993fcca82c3001574627fb0f6e221d5f46506a3
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral13 behavioral14
- Target
  bin/Qt6Core.dll
- Size 10.6MB
- SHA256 96e502f8245cd32b0360017a78f766193b4600db2fc9f8d2e98906f52f517692
- MD5 8e11da0c662282aad590877070c3492c
- SHA1 a9802894103266af5a9b688606c4e7b8a677e934
- SHA512 4dc2d75327ec171e8986ab48fa7661e747a12f57896f904bb98607ea6d5bd21f7e4d9b7bf770dc64675a2f98c80925674889b5f10e4a7608ad6cf1810779ea06
- SSDEEP 196608:IVFGpZQS+V31ONlhjHcfi8VxypFE2dxwuhWCAV+2wFYWEo8Qae7cM8P2F55m1Ij7:IVFGpZQS+V31OXhjHcfi8VxypFE2dxwy
- TLSH
  T145B65D03E6F71059F5FFD63086B762726B327C4A56346A2F0244B6341E72F60AB36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  bin/Qt6Core5Compat.dll
- Size 821KB
- SHA256 39dcfb82117d777c0e9c54bc11d6f7f8fdc1cefc0a0877c8363f5b5a05729e28
- MD5 c46d5d0ff5a26f606fa8927353f256c8
- SHA1 fc60afe09aad64c0a98fc392df8c940e8c030674
- SHA512 3fe6426624adc99ffef23d0c4f8d99332beaed8397c7a5b3918e223814a32d92e73938234fba3b92d76b6650ab4d50a1787a1734498c34cf857197ae57c29533
- SSDEEP 12288:jbMFRcuyfVwQ8k8ot4gpJTryrErYwhz0Y/717qKIDTGEsbISuBDPzrqGSfgFHzag:HRtXpJTryrErYwhz0E7ql0iDPJSfw
- TLSH
  T10C05AF72F15225EDE13BC43C8797A633FA32B4691231687F6550D7323DA2EF016AC61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  bin/Qt6Gui.dll
- Size 10.9MB
- SHA256 f538e4db3790070f14ac473a8142c9780e923333e52efb84a0cc5a2634d7898b
- MD5 7318d5367aeb18251cfec3d8a78ee002
- SHA1 187a7affe6266b4330613798faa3a9c78b3cdd58
- SHA512 16a6372a430bf9501fd27a0270ae14e505e48f247a5c1c5e0a3841b0016e1f008d9075405bbd8d34d05d1f8f2b0d40d88d6b7da1fcded93fb8d93a851be047d6
- SSDEEP 196608:Ypc8ZJ8EqYWzIzesSpAc+NcAQK8T+5jhQABjCXzc72hDKTVJqeJFOUc45SM/TL/o:YpckJ8EqpzIzeD8NcAQK8T+5jhQABjCv
- TLSH
  T13DB65B57E26260ECC02FC135476BA633B931785912387E6F5290DB392FA2F50637EB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  bin/Qt6Network.dll
- Size 1.9MB
- SHA256 a6a8d347584f7f01c733ff7b97396754aa29d166b11007eef68053c3926f338b
- MD5 5c781757ad83dfd9d2dadf4a78c155fa
- SHA1 c4c7cf03d409a5888cfdc6ab29f71240b6278746
- SHA512 f20eac327175250d0ff337dc5eeb472af56f140f2a85b4fc69de8f3622d5738c876e382f6919bb2033f4ddb9e787e02cf851e8c5b6f1b2c9784df0693b711b9e
- SSDEEP 49152:2/gviaBB8npXRXqnrxVho+bYgSohwvhaaUEJEV6YUPHhPSEq/JxmDwbmfKDIAFLX:kPaB/nrxVho+bYlohwvhaaUEJEV6YUPe
- TLSH
  T182951863F26224ECC46BC1398657A233F831785912787E6F1654CB362FA1E6063BE75C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  bin/Qt6Qml.dll
- Size 5.8MB
- SHA256 56fc188b88e71165de6444356e88bbaf8e00e2753f6283e5b54762c539684417
- MD5 4b17f44e38a0de72e82f0dcddfd3c404
- SHA1 aa02506295c9535f390f335c48f3ee64b4b9b3d2
- SHA512 7d2152dcdd6c53ca5a174d089c4b7fde67947e56481105e25dd4cdc4bf506742973d04825989cd049e5005333e92538f81b8e493ceda6b3f25ef02424a774a1f
- SSDEEP 98304:3Vcmyu4QalNiMgYZYsavU7cE4NxFAZizz/XFqeeZWAT+IuIchbhS4iNOIFj0rggz:3VCoalNiMgYZYsavU7cE4NxFAZizz/Xx
- TLSH
  T146563B57E2A224ECC06FD139475BE233B932785913347E6B1258DA363F62E60237D798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  bin/Qt6SerialPort.dll
- Size 138KB
- SHA256 e3a4aa8a2cacb45d232b790ebab9cfdc83f92fa776017660c92c3277ab8b9323
- MD5 4b34ff0333d768e6ad8773896ca8d259
- SHA1 4b1f7f33697da35f92c0e3fc961b421713479036
- SHA512 223371fe71bd200f05d635e32d4efa51f4cf6cff5f8d56adca7030b0b4594230d54590a2d8d867c3765325330ce2ca1bfc4ded64924271b8272007b8415892a2
- SSDEEP 3072:HCu7mMatKFO9g/nLvTz+ZryMlHxS7IJ4av1Eh4JdyPHR24ST50A/88k:HVRCZLH+ISsEhCdyHRMT5S
- TLSH
  T1CED3F816B2E025ECC46FD4394597A272B832B49913706B6B1794CF362F60F613B3E35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  bin/Qt6WebSockets.dll
- Size 216KB
- SHA256 7aa9e8722f3ab72829877539f40b993193edeb4e91c7d2702392164f6e103e2e
- MD5 b693e51b40e979e7af73c8bf501a6877
- SHA1 d728c5e69944913511ecf8c6558acaef25e12b51
- SHA512 2ae6c695fdbcb18f0fcd27fe05aee2d8ccb56848efbac64d1d51321b10e82e75ad9ca797adf81deb9cd733f535e32680a2b8e225094939820cfc59f4bb3cc71d
- SSDEEP 3072:PYmgSReEsm45Zp2AmlqJSQFEwZQdweO4fm1TF2uCvi:PTrpstZsANOwZQyeO/TFv
- TLSH
  T19C24F863F2A12CECD86BC4394287E232B931786D4370A91B9390DF362E52F14767D799
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  bin/Qt6Widgets.dll
- Size 6.8MB
- SHA256 d2fc4c60c55612d34c0b563bdffa89f4cd59ef98e7f326103406d568bfb53d18
- MD5 311450b93f3739ff27fcd708bca13848
- SHA1 fe89b90a57ade28950963f59579dccf9dfe52b17
- SHA512 1a7a4eda590bd75fa0f0617df4c6f9099017c4fe2a6e4f3d4cb3ede022d33029a90b8a6030313f7dd3b6d391faad41895fb04427483d00dc59c25dae1547b3d4
- SSDEEP 196608:E73axGarqbOXZ2sBvHbVfRAcSIisk4IvLABHBBkI+SMHz/fA4eDSVVlIf98HicLi:1xGarq6XZ2sBvHbVfRAcSIisk4IvLABL
- TLSH
  T12E763953E2E224ECC06FC538475BE273B931785912347E2F5694CE362FA1EA0227E759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  bin/deCONZ.exe
- Size 2.4MB
- SHA256 c3ea52f62d1f23b46c01b073f7a2807f939deebd4a881a62da5096b1998ccf5e
- MD5 d22737918770d88fc4313670bbc98f9c
- SHA1 98e470a2b51bb4fce47bcc5d2f8957e29a16a30b
- SHA512 c5f1b6bdb720011ed372cfacbbc2edd0e8d794134954274c9a7d9308b23fcfa11ae65b390cfca9baabc31d7ef7994e7d2005a60f4958d64507bcc0d372b0fece
- SSDEEP 49152:ozGbjoe7OCHgWN6EgV9Dgw8Y4uzytS2h9+Saov7p7zEV8D+Fv3XkIunGCe7HfO:o6joe37Iz4amSA+xkqfO
- TLSH
  T1B1C53AA2B6C59CEADE75C63C8589E331763CBCC402269F1B92607A362F71BD239543C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32