cb4291a1154ceb7c3eac9bcbffdd909112076fdd25b3b7e5bdc1b3b334e3afa4

Sharing

Copy URL Twitter E-mail

General

Target
CurvaLauncher.zip
Size 3.0MB
Sample261102-fgclwazzew
SHA256 cb4291a1154ceb7c3eac9bcbffdd909112076fdd25b3b7e5bdc1b3b334e3afa4
MD5 b46764e8262197322bc8c27abcfd3224
SHA1 764df341ff076994fe84e8232dba35b4f48f3e57
SHA512 698d44e7038bde59eea578fe9740271e3bf1ad0ca3800cd5a1dd5e15c8ec900769da0b8250bbaf5b006ad769d1c36aaa54c74a35ba550b2f76b461f7654c7b45
SSDEEP 49152:mTujAZUPSnPA1qWYf31ksNyfpsGCrke8BKxlP55cdIxnVKVxT06Ujtmwh:mCjAWPr1ti1ks8xQIPBKxlh5cAKVhotP
TLSH
T167E5339D9CD8A9B3D4623032E60F1F02579B13886DFF5BB17A1878EB803EDDD49550A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  CurvaLauncher.exe
- Size 7.6MB
- SHA256 5ddbfe6052d54e6ad3796577d698a707995a8a3461aa062239b704ec5edb79be
- MD5 4cace73495c93b1a1a8ef03900542409
- SHA1 a5bc8d4f6e58fe8257c8ace18bbf8b695f83d8df
- SHA512 4a055bbda21e4da8c9d7a4fb7780d6c138d6a48999b2a74d33b3aa497f3c3bc50cfc9695ccbd943ae0c177a2accd884329af4f6b68727d0d764aaf66ac9139b1
- SSDEEP 98304:Rg1eAN2do5OYoddtd/KGCvSmaRZ+nceNhD94j0AHDfyJrelC:RgeAVORdtMvNhD9z
- TLSH
  T16B866D1D23EC6D32D3B74739DCB023215DB5AD561101EB4B2E89AE1D2A762C4CDE23A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  Plugins/CurvaLauncher.Plugins.Calculator.dll
- Size 54KB
- SHA256 763dee48a17d327313bd6dc61e462709d95e4ca50d3a9ae8c159cca90a9539ee
- MD5 2cc91ed2c47481e17dbba0ec6df02c92
- SHA1 00f7f6a58cb1e66f7a9ca5b07ab1352c22ce827d
- SHA512 4ee89d05413d19d8d8a27126eabbd73b53d789e42b0fd49ea582a7b326ab29205597a6be509ea22c6be9903fc55dd254633f7997ad659bc43ae57a9b3435007a
- SSDEEP 768:E41c4Xk2mePMvy6ExrWge4ZSPFvsA0HZZ:E4C4X0lExIiay
- TLSH
  T16A434B582B6C813FCA4BC73DC4B1593147FBA1B23701EB6B581C71999E13712AA0BA77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Plugins/CurvaLauncher.Plugins.Hashing.dll
- Size 22KB
- SHA256 ebd74b965a3e9e86d512cd64300d1288afbf483cd493019d8f020058e72b99c9
- MD5 3849f3e3f6d2a2901a3f14175cf84fff
- SHA1 77a1f5665e0f6a8f0ce032ebd58ba681da2cc2a3
- SHA512 ee4d3216606ecf6d3b4ae872f74f4eded2cb751781f271836092d6400b76a574402c4079fd6c589c6ec04be2cbfe9cf6e604158fd21cdcc9c0bb96236f307271
- SSDEEP 384:7HI0PSZKK3GCuHc0msgapABV5A2M+4YCOPBj4qyMESdutKkCkczwAhjMIJC:7orZirzDKelMEEwp
- TLSH
  T1E3A2D711565D6237CDFB0B3A147555E063B7ABA66A62CF1D98BC220CCC236074F22FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Plugins/CurvaLauncher.Plugins.OpenUrl.dll
- Size 19KB
- SHA256 4bab5ed90ebba5f3edf49711945d0fae7fee42766e05a06d7ec3c234042829f1
- MD5 36dfa03a52389c7371e60d80662a5909
- SHA1 a94c6bd53610507a50c5002abb44c5c8e3445903
- SHA512 82e0db4507bcd6bfae6ef9fb806e15f4e279b2076f8eafda241726e70c36bbecc2d940025836db87b5f99e42886549b108e706dd0212a35b15f4d8686ca02548
- SSDEEP 384:Jj9fg9f63SRCtHWhwnkhMOpA2M5IwePBj4qZVg7Ui7Cty6wfQchgNh:VW9c3tHG3UoI0z
- TLSH
  T1859208102B2C92BECDB70B35547950A0237B7B5AAB51CF7E5898220DEC635178F23EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Plugins/CurvaLauncher.Plugins.QuickWebSearch.dll
- Size 35KB
- SHA256 7514163803dbcba7577bd4dce8f73e4eb50514fa5539729a409f97d2736621e1
- MD5 2b902b01d6dce5ef82ec8e1499fcfe47
- SHA1 99761eda3fc151190bf41c7427dda9a70af246af
- SHA512 98f708b40b70f2699e5ee215829aa665cbe41196db722ddff169ba39a3efba3dcfa54313a4d2ff447ba4186833c150852b09074b5476ee44d8c9bd3427537b36
- SSDEEP 384:ew8fxVLuj4vVATprA2MKddAkPBjv4qxyh02Z9ZPMZdjZSZ+g+SJXVn681C2cI25:hGxBlDxNDPWzgh5Vn6qCMDl356W
- TLSH
  T125F23A50677C42BECDAB437AA57554E0337F26BEB722CD2C846C76049C82A4B4F41EB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Plugins/CurvaLauncher.Plugins.RunApplication.dll
- Size 46KB
- SHA256 b590aa534c454b36211d22a8d87240e5c061637ec412a8943eb18dfe5eaf1f66
- MD5 5f4c00675e0439c3f499d94ee6354965
- SHA1 e91619936177286c4726d38cd072b7d142bb1cc4
- SHA512 bc5698fc46aaf7efa7c42cf8b5c60e1eb69e73b8a05d84d694b2f0ce582156d92774862436ac6b728d8044de0dc877e747d983aae78c71eb4d03860ff014f2a4
- SSDEEP 768:z4o+BFePmt/FTl/ftbqc8EROBAMN9M8fKQfLVST9qBUOKY2LYBK8+2:znsFeK9l/rx89M8fKwLVST9fk2LYZ+2
- TLSH
  T1DC234A02666CC277CAFB0B3DA039819112BBDA4E7B42DB9D4DE85159EC177038F126B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Plugins/CurvaLauncher.Plugins.RunProgram.dll
- Size 21KB
- SHA256 4d6c0c63477ef6a6ff07d1154be01d6ae880064696be8c8af09fbf850f8893f5
- MD5 698b537b85ef2486aa2de986ae548d59
- SHA1 038bbff96d2dbeebc9e537ef62dfd48aa2c10f53
- SHA512 4f258919a5a3dc172da5466e6ede66400d5fe08aea90e01314333cb3bcfa4800fd19ba02a9b486a22a72837895e3581919e221c0d5eee3b50f755a7840cc6e8c
- SSDEEP 384:J+vxtYsThv8B2/5/PpPA2MDtXxlh6QPBj4qrKO/XYAA7xOm6HeDE0gN:MxBThv5hPODtXx8O/Xa7gN
- TLSH
  T15CA20911665C52BACD7B0B7954749091367BFF9A6B01CB2D58AC930CFC2621B4B23FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Plugins/CurvaLauncher.Plugins.Translator.dll
- Size 49KB
- SHA256 6fdaa46f640b840073b8f85f6a328a5b46ce44b91844a284d49f06a5a99c581b
- MD5 f6a0f1790171b3ee3460e5fb99d89e53
- SHA1 f2c9786cf08149a5ec25063bc8662e53a3999417
- SHA512 331b3bf47b9fb7213278ab4671daa37c76b1634d45eacbce890119e201b1400adaf2b13728dfb68543094e27356a6fd719dda1245a5ebb885be65f58bf047d05
- SSDEEP 768:1Ckd1TRdE2JwAeYH5eoSQg+OF5bQ4A0N4GdW:7vRS2DyoSQQD2E3dW
- TLSH
  T1FC334C90136C81BBCA5F0F39B434C5E02377A69B3B23DE5C9A9C6949AC177478B11E72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16