0d60c970c4cf736838be31608aa854372f3ff0cf28e91f448bf5749af5f5f68a

General

Target
OpXOyuApWKTlFzrV.zip
Size 13.1MB
Sample261102-rdy69aaw6t
SHA256 0d60c970c4cf736838be31608aa854372f3ff0cf28e91f448bf5749af5f5f68a
MD5 2e7bef70df66fb543d915db31a3387f0
SHA1 d6215a6e0463e876a13e397925d070d03f5c89c5
SHA512 15f51ea7896dddc828f26bffb9188cec721fe1103d2d0f17042ea05b0d3a4a04bd41bd413291a82bf8aafc61e257c431758c95599cf85a3292cb44856387046a
SSDEEP 393216:qmPpdxy3xU+YQt0FM23pHvSXjipZ+z2uvej13XmjGn:qmPpdxyfYQWKKPSmbKrGj13XYo
TLSH
T1A1D633C014C6EC58EB579F252E2D7D7BD882A90802E3F567741CA2F78E168A06FB547C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Potassium.exe
- Size 27.0MB
- SHA256 045ddabe5cee2d12468ac179759559064e4c61af695396372973138611a6ee27
- MD5 d6f96ce56f29c0753e3cfb1efa3e427d
- SHA1 b35dc6ac222628e228a4d7a5df60fc49eb95869c
- SHA512 571a6f5bc61a6b073197d4cba173de6761f330e92f2cb67b46a40179679022b259a23acb8184767bc4ff636d6af760ec928c4d0fa8230d930c020bbfc2c8c5d2
- SSDEEP 196608:vcD9kVhaSQfqvpZZoTOKHBB30vVUkP0KJNTTH1/kapldwfS8ZBDPwdtiyB0nfIZC:3haSQIpZZkOKhOfMKfTyV6wDwdDB5C
- TLSH
  T1C1574A257A5A996CD05BC474838B4A738A7130CB0B35B9FF549492782F7EAF42F38358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1
- Target
  autoexec.lnk
- Size 1KB
- SHA256 006d6168d27c62c347d1b5c3c493f9d9f47d4f24998cd1ed4e6af55386d2a745
- MD5 a2f6abf50bc9a739d90905aa42153343
- SHA1 4bb0b291fd763628bc10770ed2ca015bae3d2380
- SHA512 d898517c1e201b2b32c2765aa4486bea8190275f12cefa2a93eb44658d693507ecc81f7e27450507e3b392c2f9640d63d3d341d5b1b20677d62ff68d8b172a3e
- TLSH
  T17B311F1D5ED51720CBB988B617AF2306E76324527BAA4D2606448A4E1A22542BE58F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH
  T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  scripts.lnk
- Size 1KB
- SHA256 00ee5ac203f530c285231a8d1055764ae6bc6056812b2ff6b2b400c13eedb4e1
- MD5 368718555cd69e85c33ab66442815cdb
- SHA1 8e2eda2fe3c0a6c853cd471e17a271883f87c42f
- SHA512 3e235efa55411fcb8aee573ea8a81298302ebb0003ba20a42e81cf2cb79d7969cd684e009ca2d4e03610225705c9f28e70933dc33c2be16a2683e2d92a536359
- TLSH
  T18131325D9DC80F31C5F58C7757AF2706DB6054627F9E9D260E94828D1E22A02EC54F1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  vcruntime140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  vcruntime140_1.dll
- Size 48KB
- SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
- MD5 cd1b08f4930b276ad78853580b76b5c6
- SHA1 a0330279d3d0d47f19ed984726e25260b547a228
- SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
- SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
- TLSH
  T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  workspace.lnk
- Size 1KB
- SHA256 24ab09465ffc09f89917a776325062f23b679456a0d36799b4cab65242f7dbd4
- MD5 4cf25c84d3e866e83709df8a6601df61
- SHA1 89258dd5f24a2d681702e950f491f200fe4d0941
- SHA512 760096b6983d8b9276398e216211b858835e016e7e348838cc59af4f1d3927652cc61d2fa96ca3847dc00b820888516ea76d4dfa7612cc426e14ff26f1e1fc83
- TLSH
  T1C231351E59C95E35C6F6C83527DF370AE73450A5BF894D01419081491D329C2F854F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7