0ba1e2469ceab7b56f95672f48cef5b6a1bc5d40556c4643fae8db3bdc39d69e

Sharing

Copy URL Twitter E-mail

General

Target
Release 2.zip
Size 67.3MB
Sample261102-prp5dswt4j
SHA256 0ba1e2469ceab7b56f95672f48cef5b6a1bc5d40556c4643fae8db3bdc39d69e
MD5 07ffde7c70b9756eacd86129690b957c
SHA1 d55cef31754d7986181b1457bb5d3850432216ab
SHA512 21a88e6f27dc128cfcbc081f425ee2b294e0063fa9ae5cbe91e7c412ee6b56cc0031e683d87c94c396e5e6e397e5631270f73d118d1351dc3e560c9d7c534186
SSDEEP 1572864:dBOB5yRSlThh1/mV/fsa6MO6y24zdkImGLJBw6cgXiDIrilTChxqgXiDIkelThhJ:d05ykHh1uh16MOrddI6cgXeAhxqgXf/P
TLSH
T187F7335867429E7EEB32F9B84C0CF441803BA69C37E7E124D84506DBD8A72C3DD3695A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Release/Setup.exe
- Size 1.1MB
- SHA256 a88d4acc7ce55b91e2aa7eb24eaf5e629f381556462843095b4dc3b0996eee4b
- MD5 16b6292e228e9cff9204ad182d5e8741
- SHA1 6a96eefbe71cb0c8fc3d16deb04c22eb2d340061
- SHA512 4ce536d2f419d340f8132d91f9e11a7f8d2bb754a8633409ee4efbd4a3a944a562d0b2ec6ad52cb58922cd6b59c3fd308f87b45e11d51ae6b17cf82faf812ffb
- SSDEEP 24576:CIhhWy4WRIQ27h8Fpb/4f3z6A3a16BLzw1a+x:CICyFgCr26Ma13
- TLSH
  T112457D666FF7257CE0E6E8728D8247F3CB92310982E5248795FD0E09C4054E2AAF75DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery spyware
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  Release/core/HostNetSvc.dll
- Size 4.1MB
- SHA256 3450fba37dfdd7d8921084c36359fa3e046e37b83d4bf29847f94e90b28f7ae3
- MD5 def44aacb3c6771ad7259a69d49474bf
- SHA1 c8e56898ab19126b5d46e7a6387c487726da7b28
- SHA512 bca28e77a1647afa15b4204435f2c16d49851ec67650440286ad9d894cf913349c1d3d48996a9256b19ba9bb1ec8fee7800a53d5dd9b86a24fcb2c75c89f8ed2
- SSDEEP 49152:vTRuHweW3tsQpr9rBgSOZPbzK1IVW0036xhgwid6+5ywAehp2W3C8rD+bSoZZvZN:8QeW3K0uywa7y7Zy
- TLSH
  T1DB165C2EAAA942A0C076C135CA97DB82F6B2315A4B3477EB44F0D51D1E3BBF4D63D610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Release/core/ipamapi.ni.dll
- Size 7.2MB
- SHA256 2f12910d03d8bbf60ea3e8eafafd5150f2b256ac03a548e70adda4da774de48b
- MD5 b21a165401a3bd206061595bca961db5
- SHA1 6a9b861727c110d40dafa4485720a88757b37cfa
- SHA512 b1fd6cf4a4a760210a03715b995c3cc5bcb1fac9d0681dacda41178b8607e8d5fdc2be4be3be36b983794face6b37233ed010b67b8cad560fe650260ff8ee88e
- SSDEEP 49152:niMDxH+3YB+uGRDVwOCxH6l8D5TXlspPzhmmosWVWPAxWejTDzjTePbKaq6KfOP:L+3FSdD5TXlsproWYU9
- TLSH
  T1FF768E0073E244B5F26F063469B99A362EBC72C50772E7DFA780D55AA8617DCC823793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4 behavioral5
- Target
  Release/core/lib/Windows.UI.Xaml.dll
- Size 14.1MB
- SHA256 ba856cc671a343370cec7852efced19216497fe78b219d44b6cd3820c90797e2
- MD5 9ccfc8013d72607478eb642994cb808e
- SHA1 4c5d92f56098285c4dfdc6de2e60ad4e5603d948
- SHA512 11787258d02c061f566797841695d361820fb603176bf6783aabcaeba3ce264c87e806c8b68e0bd3883cce6596e00494f9776daaccf8322199bc22afd2b786dd
- SSDEEP 196608:n2AsICbLYBCf3MbDpp5H7/Yu70LwFMzXDU78DJWcCeSE+l5Pw/zaGDI:2XICbLYj1TLQMFmg78D7CeS9l5PwraY
- TLSH
  T167E66B2EA1EA5015EFFA34F88C0D727A54BE5A94077C42FF43A1E6F459B23CA053161B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  Release/core/lib/edgehtml.dll
- Size 18.9MB
- SHA256 98fe0b7bd3adfea7ebee3183782fed3176927bad61a781fec6b1678acf3e3602
- MD5 911880e092642ace1b9f69739b13b1b6
- SHA1 7ac400908789cfdd399f0122f52f75c2100d6116
- SHA512 e4e60fe55e726f6dab4a7f4c61db2f10d9ae8a557dd5e8351ec9a68ea07197d4eeaabf55c80ac1ed2462328f14b4a097df627735418775f25423519202afe290
- SSDEEP 393216:gB/sMExSbhV79LBManq/IxjZpa/i/mA8rocmi+PJRhcP5HFmv:gxlbbhdMan4I598rJ+PJzcPi
- TLSH
  T1DC178C26F2DD8021D5F634F08B0EB73A68DD9950073C49E78311E8F5A9707C6AA7936B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  Release/core/lib/mshtml.dll
- Size 17.2MB
- SHA256 d3bad2d66f7ad2a51af540902cee14dcb6623c98dadd54f033f11d7d287a5e86
- MD5 c0bc1c37897cede0449eff108818b2c7
- SHA1 f3e6dd616327d18e524b2755bf4c781160961513
- SHA512 4828ab339a04cb75600ced7fd5b523e2775eddd91f3ed9b9b0294b2203043743c024ceb365a928e7aea25fe0f21dd25569e5bfefdcf71ed69ff3ede1cdb28058
- SSDEEP 393216:2le4lQjIT9JMbEbIgRrXDPbgDRIBi0e3h0:2AljITzEEbPTP8NIUJh
- TLSH
  T1EA075B17F34589A2D5F235F0821E7332D2AD5D24237088FB8363FAE929745C69B78276
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  Release/core/lib/nvcuvid.dll
- Size 16.9MB
- SHA256 7c96f131fc918b0a56b32ba9de79dacad4d80df3bdefcc60d46828b4bbb43ec1
- MD5 de7a8a88a67d16358694d5f095738520
- SHA1 10442c8784f06c261d8082f6f537272dc0b5e498
- SHA512 616d977e1c9a96b1000a595f056903471aec99c9f0f5cb6429c87f504418d97f3eecbd8a6faf49335681babd507e52e40081c3a24ea284db71515219b1408d9e
- SSDEEP 98304:+IZvdwE9MWLQq7NOp6ELVUlqhInGf+6C/a2:+IfwE9MWLh7gVUlfnQ+6C/a2
- TLSH
  T10507D7C9B09ADA57C609113CA4BFEBF4E93D394305258EC777D40AFB3DA6AF65021422
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Release/core/lib/pkg/System.Data.Services.Client.ni.dll
- Size 1.4MB
- SHA256 c86944ed2034c4afb5220b3c73fb9ef6245eedfe066401f83cb486ac89af0355
- MD5 ea3070fa885954b8ad0f09a2b74e7451
- SHA1 6d058126f7869d1d10ef9e7464b0cf9a74f3a346
- SHA512 432f8fa84514ee52f5a5eaa6a8e465fedc8fd480321e5c93430cee0484cd7275c76bf267de94aac062a6b126c317bde89e3fe33217684920f588f1ac6341a37e
- SSDEEP 24576:aHwaGGzn583ZsiWJPYyAYdYdS6V05n3QJM7xIUsTrvILatNkMYUgRaUFWQGvHgks:WLOkMYUNnLF3U9993xaD+j
- TLSH
  T1E9657C137BC56770E1AB47F489F9DBF6966EB6550B36C28F2958F97C0832274C821223
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Release/core/lib/pkg/System.Design.ni.dll
- Size 10.8MB
- SHA256 8da3eac14fa887cd1991e8ea6e0e996aeb9b3730a66cc1cc8f7b0c3960762573
- MD5 c9343e0fa9b0495d437627e704d85305
- SHA1 500c81aad7ec5418ba2c98739f4be11af89c0201
- SHA512 f83bb387a0714a67eff79fc3c87f2829d30192ac228562a93ef638e9a9f1f9638f28e7e27fd7d66fcd287955cba11b8eb3201b1649ab6c68557ce8001819e20a
- SSDEEP 98304:4FfHIA0u9I4nXmFJAxRxFWj7Tbj7zbjfcIF1F1Fs11H0IK4/reVjYqrUlELj0/zT:4h30Olnio11UtMiiqrUlELg3vKM
- TLSH
  T1E2B62A222FFF2224E0674BBA2932867476777E11B638D16F0408BD5E8E73781B941767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Release/src/components/InsertLinkModal.tsx
- Size 9KB
- SHA256 b05e48dd5621fadcf4d425486335d2b6d6072fe425a9e7062f64f7526a7e126f
- MD5 2390569e7f97526ad987e6a3f6a24ceb
- SHA1 125fac1c0e8cf389fc351aed098795be8644b10c
- SHA512 900139ee49b7eb4fb295cfb78b6edd7f078e54bfb36b025a367d9169ab5f54891d713c29e6733f258861a38a07b23471561eeefc070fcfca9da787d3c7b0df26
- SSDEEP 96:u3GPRFKBhMyutz0obwfzyJnBrkv6gz16BDXRmp0:uZGym0obwmXrkygzgDh5
- TLSH
  T1772235E856F53151F503C125BB27A9170F3A8D431688EAA8BE5C1A713FC6894EBD1BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Release/src/components/LeftSidebar.tsx
- Size 10KB
- SHA256 c5c9bc8e32192873bc2dc06705cca2c5fc51ba108c6bdf09ac55f57538226bd3
- MD5 24b9cee7c40bf8ac551ebd358460a110
- SHA1 de53c9e1a32d5a0c053129b8bf029cbe7d5a1aaa
- SHA512 aba04bccde445b723f420a4c5e80eea1295dac3ee8d86733319f5e480151baa5f94abe229a52bec655529b418a8bc66233bbee2816eaaa3c73da52c160944a0e
- SSDEEP 192:mYPKAUWgocEkmYuGaEocsvhrnGrOdNQA7EP1ESHAA:mYPKt2YipzhdtizAA
- TLSH
  T12632B6A562B234286003C17A975B990E4F39E483470FDAD83FAC1A201FDB994DDE27CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Release/src/components/PageRenderer.tsx
- Size 45KB
- SHA256 be091d131536857159b631dec7ae6914e59a99d7bc148c6e5f7c68abe80de144
- MD5 523a0beaf976689a994f94736ce0224f
- SHA1 f785446c5daa55b533d35f7b0410961ed427fcde
- SHA512 0375d19529a48aec5b52cd8d6c4e155ed639b15bc5a3dccae99a1b320ad7b5f675008ed9b39ed599af6829f8bd0bdcbc006c781de16ae0cb73583a1356598cfa
- SSDEEP 384:imKYQwTLt3zx3LQd8K8g8DPywZ7UkPn2A0BWHKSMjt71Rw2nSnGdnaFnWJZC8SC/:xTLYoVUg2AGLSwRw2S2mt8KY
- TLSH
  T1D423709816F721288843107BE78B684A9636B083374ADD987B5C33341FD946CD6FB7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Release/src/components/SettingsModal.tsx
- Size 17KB
- SHA256 33a14905043a2cd12e926b921b55df7cfcb1274361e2e0ace8c5d42f08629859
- MD5 56ac7ffa712f671ea3c3f6bdf54bd5a1
- SHA1 bf90b89b60c95dde23969d72c08abf08c5a823a0
- SHA512 832b48d50f9de33841e795b27d13e47f933a9eb02114ccba30dfbc247e946d00107057fd246e14b4ceb55715e17ecc82da80db05d1a692d3000395c678b25982
- SSDEEP 192:H4TVLJimYfNDFWEyETEQwEJEyNzQww/6npKxviPtZn9URJ5:YTVl6MEyETEnEJEyhQw/EItU75
- TLSH
  T10E8278E4E1F271193013C069EB17A80B8F36C8435A49E955BB5C1A743FDB868D6E7ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Release/src/components/SideBySideViewer.tsx
- Size 19KB
- SHA256 9a81e3c73c20fd0f1f23e895e62833d431619c2f2d7378dd390e512f32be7f04
- MD5 fff68c8fa6770901aa21b83758f9df97
- SHA1 fffdb091a814e590aa8f3fe242acf57ba58c79aa
- SHA512 f8854b86d231895cec831b78d4992c04fb7dfbe33bb30d0de45b64ab0adf357e4add76ddc0604b38991ec79be6276d14053f82fdb58970c1f5ec7b53597bdc18
- SSDEEP 192:hDMvDSOTWGToJfp6L8yXpJL3L+F0WJrLeaQDGoGZ4PZPB8C2lkp1+DNLdlyemAX5:hCjWYpZ7i0Km8nupE1d8ALFlsn0
- TLSH
  T19E92959646B12139D04B825F825F465D33367143734BE8883B6D6AA42FC90B8F5F2ADE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Release/src/components/Sidebar.tsx
- Size 13KB
- SHA256 ada59b0689bad0c4b921b1544bfa89948ca16d0620c3ee0889d1ce902ab0fce6
- MD5 63e81b0310082670362f6e528560770c
- SHA1 745584899b3cd35131e701e33af887e5a266ae72
- SHA512 bc1043338131062d184db948dcf17ee6c63eec9b0569594aa143bc936069bff6af0e3a36074526e5e25219c7b397b8ec74561441663105af549d4674619fc1ae
- SSDEEP 96:xIhiw8yHKPMW8e68vTFHqaxvQo0CQ3qr7Ew7140Te7pYHloo8U/gRjl9NuoqOTKr:mZa5Qo97Ew7140io8Xr5ZGEYt82
- TLSH
  T19E52A7E895E1241E30138065AB9FA94B5B31A5C7074CE64CBF9C2A701FC9E64E9F1BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Release/src/components/SignatureIndexFlags.tsx
- Size 16KB
- SHA256 74972c8c4ab5c7e3e0b00024e1c66e763093648019452b380a0c12e9107144b8
- MD5 91eed802f9f97668fe50995ef1d8c6a8
- SHA1 227346bc56f59ad182c9907d2c457c7d6831073b
- SHA512 6f713e9fdf5157fa3b1ab03d3cbe7485491f00ff56ed39f66cd9bb3ca60690f0abc738875ddc7279050d6aa1529108c83f1e7729a99927f8b43a8481d0253f10
- SSDEEP 192:zM8aeUaRdVzCT0SjS5rVRoQhDggZHKqYWwGGq4hVAAWKddcVqpdNwGYFOKrutJr8:46nVzCTbjmwnN3N4WTY9Nh9Yfs
- TLSH
  T1A87262AE51F22011540348BD6B4F55065B3581037EC4A988BBADA7393FCE83CD6F66DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Release/src/components/TeamSyncViewer.tsx
- Size 36KB
- SHA256 d6a251dc8c36db292f129a08257b3e041581fe820a4dd68c3aa3cef9c97c1d67
- MD5 808497a75b21f44c5071d1d4f25fcd00
- SHA1 9612314e74bcfbc9c34dd24818fe74b9d06b5f58
- SHA512 25773f69a44275e7ef0b2af4c158fec3109922fa769f6fdee8fa7ba118f127f3c8cdad274e21ecf2076324f9759254e7276c129dff0da020b13ca97fbab4ab84
- SSDEEP 768:xsCdp8X/fVgdUBwZqh2Q1apjEwSA7uosHRc7uoj33XcGKMT23RxBb:iz3VYUBwNp2A7uosHRc7uoj3383Rb
- TLSH
  T177F2C8173FB724368D67C0676BE7882AE73155C335C9D680794D42142F89628A2EF7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Release/src/components/TextSelectionTooltip.tsx
- Size 8KB
- SHA256 890df2c96556cd0b0e9db5fd8f22f70ec615cd7caeb99a4a0e463e2f2537ef9e
- MD5 f795480478bd97d0d4530bbed99480c8
- SHA1 c4027bb0610cbb9656d8518d3cf0aaf65e3bf2ac
- SHA512 b09f2e1e3c4f99c25f0aaa75824a535e39412c6d9a25624231cf01b4c688f10819c499498655acc6a3da943ff130209ef773a5b5e06e25564651ff786c5db127
- SSDEEP 192:GwzXtD2IpBJADiyMztMBzKVSt5cMUyLRMklDVPV1VVVq0:GgtqQBJ5zt/GlZ9Hnq0
- TLSH
  T1581297D575B322389017807F12E75819AB3ED087558C958CBB3E51A82FDA028D5B7BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Accesses cryptocurrency files/wallets, possible credential harvesting

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32