461370a8bfd961ce197f926e9675860a19c333082f39ac8153582734563a8d21

Sharing

Copy URL Twitter E-mail

General

Target
Portmaster_2.2.8_x64-setup.exe
Size 74.8MB
Sample261107-mvtkwabs3x
SHA256 461370a8bfd961ce197f926e9675860a19c333082f39ac8153582734563a8d21
MD5 c19cfe8b1d1166edc25f51eb08e42987
SHA1 b8bb41064628a50356ad0e533fdd5b9e1845edba
SHA512 7d639a6cebf760eb3a6af9766685f4a7f1c8f40203483bc15c26326bbde87085ce968a74b969be502d4c7facfedfca62ca7514b06b248745d0eeaf7ea80e5726
SSDEEP 1572864:IByQLtX2dQiWOtTwO2pUS/CO14i+qnU2NAlf+gViKPCt4TGGOlu0:IfN2tF2R4ihUt9iKPVT5mx
TLSH
T10308334899996A60DC975535BA2AFE309DF71C19F3A84EF949D2BE87F2F3F402052D00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Portmaster_2.2.8_x64-setup.exe
- Size 74.8MB
- SHA256 461370a8bfd961ce197f926e9675860a19c333082f39ac8153582734563a8d21
- MD5 c19cfe8b1d1166edc25f51eb08e42987
- SHA1 b8bb41064628a50356ad0e533fdd5b9e1845edba
- SHA512 7d639a6cebf760eb3a6af9766685f4a7f1c8f40203483bc15c26326bbde87085ce968a74b969be502d4c7facfedfca62ca7514b06b248745d0eeaf7ea80e5726
- SSDEEP 1572864:IByQLtX2dQiWOtTwO2pUS/CO14i+qnU2NAlf+gViKPCt4TGGOlu0:IfN2tF2R4ihUt9iKPVT5mx
- TLSH
  T10308334899996A60DC975535BA2AFE309DF71C19F3A84EF949D2BE87F2F3F402052D00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution persistence trojan
- Adds Run key to start application
  persistence
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1
- Target
  $APPDATA/Portmaster/intel/base.dsdl
- Size 11.9MB
- SHA256 dac30190d586bf0917728d3bd539258c479c278779e76b3f56d6f13992340a3d
- MD5 1801fcfb356d317ff404cbaf7043390c
- SHA1 bc9dc46b53a2381d8cdbbd01be9759582e4cf830
- SHA512 1749307cb54c132249a80952fd9561a768052e0aaed19716f4381ea9a1183f7f53d7a935d14038f49290743807db9e48763656d11536e86325b87ae35e5a6047
- SSDEEP 196608:xh3OMFPOS/QaaBjn8xiJiepDyLMxFDSyDtELea8qmDfLkL8AWSLJuGk128dMauf:xh3qS/QxwQBpm4xFuyZ2ebD/hihk12Xx
- TLSH
  T1CAC6337E8749B0F79C260244EC804A9EFC9F1599C71726A063CC4952FEB8F63937E496
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  $APPDATA/Portmaster/intel/geoipv4.mmdb
- Size 50.9MB
- SHA256 3ef4d2a20ef32d449ff8a64a4218b4a638e272e76576ea04b421964b4d19a203
- MD5 0afca27c401a156f3e47ae918de4142c
- SHA1 c34707bb8318b78d04fa6f98041c571301298ef2
- SHA512 4ece8e135eb316ea01e85a0f31622a3e54dd61733ac5385d31bc021a9c022eb32098b5e95de522a5c0970639500e5a232b354c97554710a94ffe72c53e67dbd2
- SSDEEP 786432:NwT+AwUgDPbAsaLVfXOQcZr6G4Idpyvj1Q:5AIDDxaLVmoG4upyvj1Q
- TLSH
  T171C7E09FDF9528EF71161A8B569220FBA1F7D11667D0F0C6E80CD23814F6DE11A2B287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral3
- Target
  $APPDATA/Portmaster/intel/geoipv6.mmdb
- Size 50.6MB
- SHA256 f800c3456fc9d26b62fd163a7a60143b82baad1efc21db189efe06d8c7163d00
- MD5 7c72a88e78f8f2e7f9192e703a4ee60b
- SHA1 2d0b7695fafdc7821d3de774147dc3d3838fa693
- SHA512 32fa43a49c3b9d6a0ef6b28a3d9fbf77c94a0f58eb3b776eb33d27eabd4a46b777e9b353ccc3698ab1c59f9a84c48837daab2fc1aefccf493d2fe3cfbdb926ff
- SSDEEP 786432:QM1hWnUpX+MedE7OC1VOuye10+fAifeg3pV/RctF9q89U+/V1om93j0iOSnRiBZU:Dc5o3Xy79quR/V1ocMP+
- TLSH
  T1E9C7BEF95E0CAAE08A3482F7C961DE43AF38F4A14904BD173E2710765785FC626DD3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  $APPDATA/Portmaster/intel/index.dsd
- Size 4KB
- SHA256 026325cc7af459251fb08dce0a6166aeece4c9b5a4b7d26e15f4f7d94e0e6e0e
- MD5 b5faa7d7a5aeddbaa0745cd62b18a4b1
- SHA1 3d94a5f99e7fdd3e8159bc03e42567b06cc70d2f
- SHA512 0e01cac618d62440d8cd3236b94bc108984ae023a1e8fab5d8e99d19f38e6964b6eb3c359faca13d6d9defd59f4fd5e3c93f84914dc7b2d2c29b2a15d70a05a0
- SSDEEP 96:JAAlALAc6zrU0x42TFqXB8uFu9pDAIkCBjW8ts1qGkFXhi:HUIrpxFTFCTiDE1qGms
- TLSH
  T18B915D3CB1CCEA4BD27F6858E27EDF02975B3930FC55142741ED76929AE68129360C24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  $APPDATA/Portmaster/intel/index.json
- Size 2KB
- SHA256 07414850351d1401da05836750bdf4f14247c67bf467bd8990df263003fb59a4
- MD5 1ee296c3bc2788547fe829c63138a951
- SHA1 6f04fd11a4aac6c8cd8970e4c204668c13cf7dac
- SHA512 db4d72fd06a62273f0a37b337907d40eefb9b32683cdc669509c076b47635df1209249186cfffba73aa4b71c3609048564c586e14b059a5e6de17c6630e08b2b
- TLSH
  T16E51DA85C2396DA262CD23B5449D21C9D66249CFBCE6AC08334D550C0FAE07F2A3F29D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  $APPDATA/Portmaster/intel/intermediate.dsdl
- Size 1.7MB
- SHA256 f063de7ae0a939628279b752d84bf18a7a97e9599fd375b33d4ccc6b23c2dfd0
- MD5 f5f3a8d7abe200a4bc32af416b8cc8e6
- SHA1 dc61dae7ed3e77cd148851000787196d005a3c5b
- SHA512 d38871cfcaef0bd703b20c5e4af9856752091f74288f3d625f3391fd01cd5e1680ac11fb4f971836e7061899639729583db6fbdd57301e53592c16282b52dadd
- SSDEEP 24576:e19PT7pJQwzILQFTmkDPc62lHGi6ZCas/9ZoKJpGYp2brH02Jc02a5yMgk0wrmGC:e19PZALQFe629GhZlsXoaGYEv02e02aC
- TLSH
  T1BF8533DC133886D820ACF25528996EEDB006FF90A1A97D30A8C3A0EF1FE7515EC49775
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  $APPDATA/Portmaster/intel/main-intel.yaml
- Size 14KB
- SHA256 c73be8f0600af4500f5d3e6f8e354f5d96dba2ce37d59aa976306a8ea9e5bc6d
- MD5 f6a3e1979bf4189a242208c20119c4fd
- SHA1 f15becdb33ae10c8898930eba7720e2e4bda5ac6
- SHA512 881ef1b5c23c2874592bd3c3e0c7ee3dd5cdaae8b9625c353ae3b7071ebafdbdb743bc93c49eeab3fa30ff4541248842004803fadf98be5175a7f4b8611a8d3c
- SSDEEP 192:HixmSUHIiRigYk4R9bG9/KmAcc83qSob4JE/RM5o9qLXVteDlP:+K31Yk4e9nUVJkJEZMK9j
- TLSH
  T139625456C72D1878F068D261E77BB6F1B32A8E039161141477AF93B91F4B34772E80CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  $APPDATA/Portmaster/intel/news.yaml
- Size 972B
- SHA256 fa64e8d0f2adc61093df516d4be68ad536c4de29fd9f7c2473311dbdaaa1f9c6
- MD5 f88861e9dba633b7ed2b8db750e9b586
- SHA1 fd6355f3d0c0ae83713d42d4c6650fe7b276ffea
- SHA512 e5b671bfece741ed5baa57514c366d7a9623b1e914e8fd10af19fd0f7454959357a91b284fac4a91a581e6d9013bbb6854ad5eb1b05bc84b261f60d8cb456fc4
- TLSH
  T17211E1671A146B0E4A5557DEA2DF215DD305E6EEAAE0E0B878CF8101130E86454BE05D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  $APPDATA/Portmaster/intel/notifications.yaml
- Size 6KB
- SHA256 8168f64860717712a9d0a00da876e84f03c34834b3a8e0e1dfa783a9c29f7235
- MD5 9f328dac539016f79a513f5b71517c29
- SHA1 b6b5d1a04eb8b6d0d88819e818d448b159a03381
- SHA512 0b3697a9b34ec142a9427e66c3f2e9f07aba92381c5bafc1111cc055f6e330f1a96ce08d13f4f9c5b8ca3dd3f3d7b1a37b9cb535ceec56e972a988d2f610b7d5
- SSDEEP 96:cUwvh6VR0ymBfRpXVNrnr/dqOZhXM4xKDqrFnn0ZEtn3FNT6RA+niFjRAEniFWct:cUI6H0ymbJrRqwrKDKAovK2vct
- TLSH
  T1C5D185D7B348A67ECD8A109BA4C251A18625F9EF937098BC70DD511C2F0B77081AFBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  $APPDATA/Portmaster/intel/urgent.dsdl
- Size 308KB
- SHA256 3189c406206925de9e6d63d402ccac801fdaf93c8d8fe70e74fe2f5a695a45c9
- MD5 3d0e36524ff27b465368c9c46178f484
- SHA1 abfaf9b83dcdacb28268e3019c0a8a9982234ed1
- SHA512 d20eed7aa372d68694b75e57c04f829658c6c79c92a0b609bc727a2445391bfb157f4edc33c8415c7c73ce45fd82f870a31eaf50337e4b1d6b0e38a8c94c7d33
- SSDEEP 6144:5TilZfwiXtI9vwOAFUT0LOO1qJZNu4VY9UcAykK0bnUK9y5bbjpm937:IHfFXG9yaU7MrNlYLAykK0TVy5bhmR
- TLSH
  T16264238D6C7DB716C4B25F49218CB3B7790B6A8303D64F22D4290724B2E4B79487B5EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 419485a096bc7d95f872ed1b9b7b5c537231183d710363beee4d235bb79dbe04
- MD5 ee68463fed225c5c98d800bdbd205598
- SHA1 306364af624de3028e2078c4d8c234fa497bd723
- SHA512 b14fb74cb76b8f4e80fdd75b44adac3605883e2dcdb06b870811759d82fa2ec732cd63301f20a2168d7ad74510f62572818f90038f5116fe19c899eba68a5107
- SSDEEP 384:7py18oahashajPmIYInUJggBOZgAHhUKijb:7py18oafmeggBOCAHpij
- TLSH
  T175622D45AA2084F1DBA2167034D73A7A67F18E752A2449C347F35D4EEE16307B33A986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  $PLUGINSDIR/SimpleSC.dll
- Size 1.1MB
- SHA256 1620cdf739f459d1d83411f93648f29dcf947a910cc761e85ac79a69639d127d
- MD5 7b89329c6d8693fb2f6a4330100490a0
- SHA1 851b605cdc1c390c4244db56659b6b9aa8abd22c
- SHA512 ac07972987ee610a677ea049a8ec521a720f7352d8b93411a95fd4b35ec29bfd1d6ccf55b48f32cc84c3dceef05855f723a88708eb4cf23caec77e7f6596786a
- SSDEEP 12288:fRdJsAp4dXFcLBz75cwoCmJKHwe6VuoH9v0D/LF5mM6:fBsmyVS151oCmJKE1dv0DX
- TLSH
  T12F354B2BF645693EC5AF063E4673E714993BBB726912CC1F56F0084CCE2A5406B3EA47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7
- MD5 d070f3275df715bf3708beff2c6c307d
- SHA1 93d3725801e07303e9727c4369e19fd139e69023
- SHA512 fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d
- SSDEEP 96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI
- TLSH
  T1CCF1C7B6F3D10673F9AB427428232F221B1AF5215765C1AB450316CE7661CE3FD34B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 30KB
- SHA256 7317e5508923f425bced2698bb89f79b00fcddcd1028f44b598732b2e3711464
- MD5 fc4691e51cdfac476b2fc63bbe951e82
- SHA1 6532da4545864c6ec95f62f27f2199bfd668560b
- SHA512 5b544832f1b1b8f2e1c6f8d61a839bea22c2c3d7e2a03671a12bab936e46a6f3fa3dd8aa53ec91157c1de08f0b349d6d2c1aec29385ad38cc0b2ab4c033c58ed
- SSDEEP 768:IMSeZbzz284uMJSmuGrAFKpnp0jdhK7R+qV0Z:IjKfAuXiMtXIV
- TLSH
  T16FD23918FCC56FB6E2DF1575240C596E429FC8180B14CE9BD7A25E22E9E63722EE500F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  WebView2Loader.dll
- Size 162KB
- SHA256 609c974a8cdd6a76a745b3d81b62f321d79f2dc8f4929e1eea8469d9d78baf79
- MD5 6842f2ebf863ab8ee1be470794d1f703
- SHA1 26242ced6ddf005e0ea1073409a058121636fc9b
- SHA512 339be4521b27e29e457e6d662a7ac98320729ad75df976ccdc9c83596c8b1bc7888ad465e7d38276fb5c0cfb597e7e6e9ba377c6f42db850c317f89e218ba5b9
- SSDEEP 3072:DrQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Ty+EtJfy2aQQtq:nMMTlTRTzWiThTNTFSzjiBM2h9P5oZaQ
- TLSH
  T18DF35B5772E4407BE16A8274C5A34A11E77778510B60ABEF03A4477A1F23BD4EE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  assets.zip
- Size 2.5MB
- SHA256 08fe60e9f456f97b4f35eee46eb716cf4826e727a36fa29e14369e1d6d1e1628
- MD5 6b22593173993c3080e7d08cf1c628b3
- SHA1 0f331877191bab9901820853d3002099c6731ccc
- SHA512 7ca41f655bdeb93b89ce130e6c4a494149fe66d20334276f29576471631ff1fba5996159cb5737b947c51568f41be8cae8c39a25c1797e6dae8c775f4ce89bb8
- SSDEEP 49152:61cLMI9ejtnWkCJUCY9Kwcj00F9m0sWdSuGO1gpS7B8JTKCOmXbZ7OAFr0:A/I9ejhYY5cIA9m0quGO1gpS7MtOafF4
- TLSH
  T193C523F2F3175CB4E7DA8136B189F402FDB884A08786A1141953E066F7B1DD98B22F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  favicons/head.html
- Size 1KB
- SHA256 13ccaab556d81a9148a7c98e093da4c95f84c6762a9e790665ee01a6a7229eb8
- MD5 92cf95bc22fbbabcf370817e99cade37
- SHA1 d7f616e344c56cefb9a51ca44936921e76f87855
- SHA512 5668a450dd49d198efefa1b349d1197e0efd493d10863555aed8eff128bda29c436275d151468124d0daeafdd6062d266aa4b560bd25cea4c906cc8d056d6d87
- TLSH
  T153210B431808CC063731765ED72B55DAC043A5A9CEE6FD6C98E3456260F0DA10DB3977
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21
- Target
  fonts/Roboto-300/Roboto-300.svg
- Size 48KB
- SHA256 bdc613d60655fab5e7f78d7a4b573e8a72cd3110176d4cb85ef0ebd7e658d211
- MD5 1edaa6e50c2302bf0221d252e1caebb4
- SHA1 abc9fdf63e51f3b26f13302ed14525f1bb052d73
- SHA512 86a15c30d94bbcb43711cbe4f9bfa114676a9fec08ee9102c6b1a4083341d19ba4aa8490c924cc70638c2e37ab65368628b1193b58dd313e2b66d54f260e3060
- SSDEEP 1536:r02QwKVLM4NyZdrlFIq/fAVkDHKOO9PXkfPjA:YjIbZtlQOEXkfk
- TLSH
  T14E23A4FAE10146C66E5FD3C0EBA0B5ED446EA17F50122C918D0A95F90C1E7ADEE0BCD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  fonts/Roboto-500/Roboto-500.svg
- Size 47KB
- SHA256 002be2764e0c7d4d12e0f5854da7b4f23ad584a519e6ab1b781815fd65d38120
- MD5 f1d811cdfaea49c969500d4bbe52251b
- SHA1 2920b9eb83fcf21d18001acf38fb74e0e3295121
- SHA512 08b935b6783f26d72e7b7b955943c63232ed776e20a1f48af2e815c4cf6701eb72c7460a68a5b9f8629f35f84aaf08d09feb6b56d6120c7a4bc9971b87446404
- SSDEEP 768:TlvQa2mHGVSeTz00O4GzSm3i2Iw8BDF7G7N+xl5N2A7U6:ZjASeXr7GzS9vg+xXN2A7U6
- TLSH
  T16E23A3FAF54045C16A9FD7C0DB9174ED402E527F25162CA58C4AE1FA481E7ADEE0BCC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  fonts/Roboto-500italic/Roboto-500italic.svg
- Size 52KB
- SHA256 9ae3e9709dcb42edc1fa758b7c9c512f9dc90a5a64db39a9757d531251e9ded2
- MD5 084d5c434250ba4b6aaa634908eb4b15
- SHA1 e9f40016b8290ab5ca6a7c1c2f7b7cfbdeca459f
- SHA512 48dfef49bcae1e9d5468348f389b5a59149965fdd49bed5c69d52af64eda696835dcf32ccbc8776c28660c6ad47fafde7e28509c74a68585b1cbb0282bd48639
- SSDEEP 768:TREbHnQIEP1ftknwLEdE4X1VesL6POaYjIypc7jJzDedUazNnuvv7QW:qta1TaT/L63WIV4fBuvv7QW
- TLSH
  T18E3395FAF50145C25A9FE3C0DB85A4EE446E827F625328A48D8DD5F5081E7ADEB0BCC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  fonts/Roboto-700/Roboto-700.svg
- Size 47KB
- SHA256 8af2654240dc0e632782a4f919c6fe5885c7b9e6b856efa0a7ea989a14fb56fe
- MD5 7f57c4c0f3b44acbe338d7ff6d6ee5b1
- SHA1 35101c237ad0763d1e552b2d414e022e1e2a279b
- SHA512 988b5138a8f55dc842b815e8b17bfa3707624f789364ede2ca78bf09ef44f78070fabc53f2fd7ab59be7a39000ee3b306ebba111b40fbb22a68482b18c463880
- SSDEEP 768:Ta2NZRuu3g1z/LoM8BQmNQEazgnOM9I2U1A64LmDf6vKLroUQ0QF9Q1qQRQkLo2x:bNFg1pnmiE/OM97U42Hro1VI1nWulX
- TLSH
  T12C2372F6E64185C12AAFD3C0D750B1ED443E827B621628A58D8EE5F50D1E76DEE0BCC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  fonts/Roboto-700italic/Roboto-700italic.svg
- Size 52KB
- SHA256 186567c03751c23366133102964442b995e209690f97d9763e83c36fb95cf76b
- MD5 bf39ef96a254805657605c016263db25
- SHA1 547bb7c6be969beecbf19040a6b31159895d9cc8
- SHA512 a7d80198a2b5a41dd894b21223b612df67e1ada9a023b80f6d4e9fe49c53cc10a5ac72e80a1bac97cc75deeb868cee0ea38a7d07ac2029b1d1a8b971f548fdd0
- SSDEEP 768:TE4f4d5tb4Sqk9WBBcZtX5UBs3BBKjeLIxnMltOMEfRakuZo9at+psC0dS:Yltbj9W85UBSf05xnMzOMEfRHOdCN
- TLSH
  T1773385FAF94180C61AAFD3C0D795B5ED406E527B551328648C5EE5F50C1EBACAF0B8C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  portmaster-core.dll
- Size 23KB
- SHA256 a0f7d615bdd58230e20fe66df6804fffc20a38bdae8b540780236f6b15dac580
- MD5 0f94aa3c904db33e99fc076223491719
- SHA1 5d24da70bd68610db4ba000aa22176aaa86a9872
- SHA512 8d8fdba2f1237072269ed1c2365ec2e5733010618a893b62a958ce38b31affc2aeb207be8afbc3fc189b5204a45ad518b6cdd98788235567b7651603b8a85124
- SSDEEP 384:+FBUmttyqVLSXCOrZrz61GaprQ2ADrrsMy8RbmL4nNyMuhqM:+FIqVLSRVMGy82ADrr5ALVhqM
- TLSH
  T1C6B29E83999448D1DC16ADB4E8F65E26F9FAB5102BD292CF037081A50FA33C13B7E49D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  portmaster-core.exe
- Size 41.5MB
- SHA256 9fdd10ee84b9448254b8a8aa2d2296cb0c2bfb55de051692eba2be77632eaf44
- MD5 b5814892871d5fb99c0458886ee32eba
- SHA1 3891288026a13efb4e20b5cd00668e111cbbe579
- SHA512 25645d281a13e88c6b0c026e9c48d818d963eaeace6718ce23b7ca3152d91c072d59ac25b967ae129ee55b70682d77d042d5028e44976ddbc9bc8d9c3d93290b
- SSDEEP 786432:xbu3VqoHGPw/SECnGSLWdCye5Kkh6anrGSsMLuT:NMqcCykn6e6sK
- TLSH
  T1DBA79E83FE2545D9CAADD635C6A642237B713C445B3223D72BA1B2206F77BD06DBA700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  portmaster-kext.sys
- Size 286KB
- SHA256 f05ebe81e799fd925a143c1ca44761275fef319c7b63fefb0c80f24101a6729c
- MD5 cbaee5f87734a8f3fc52a983bef276c6
- SHA1 a862d192c6b0b32c0231d5cac1a5795c45538680
- SHA512 1fce99ff1179d005d263af0d8e0da59ed7e4f5e691103b86307febcd04e347ed166bc21a5e33211ae184375fc1044ce22e7eea898b5a9fef01d5505af5c6b258
- SSDEEP 3072:Eeg1TkDCNTfh4UZ4bj4BEIfxSgFNt6r73j5Da2Woo9m4Gfv78+NC:O1TkDCNfhwbjCdUA61kGfvw5
- TLSH
  T11A5473A5ED94ADECE8C4C2F0417A5BF2B5933A1E0A151FE609F4B361E43C6646A3F1C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  portmaster.exe
- Size 33.0MB
- SHA256 8a629cf69de4bc581033f4631bf0200f5c99b4039ff0850b6187e69596472dc4
- MD5 3892a1c36b927475cc6552a50401fb91
- SHA1 2191bb5ccbbe7ca0c6ccadcd5a6675508caba5a5
- SHA512 ae43bcd30725a7e46c31a04e00caab3d4f032c57b480aea673d9588f0db6a15cb0604b7bf12201c5bc15bbb686ed7524d4bf14b81f5745ab0b23158aae4f1625
- SSDEEP 196608:ulByvYoXEN29rib3RR2vnz+itBAiOU5LL/mVsGQl:Py2yuB3OkLLGs
- TLSH
  T101777E03F5640A6CD99FD67486AEA336F7743C894531FBAB06B0BA322E36791971C704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral30
- Target
  portmaster.zip
- Size 1.9MB
- SHA256 afa0838115cdd3d9861be17f7a19360bbb9b506ab4eeed11be4ee3ad0d486790
- MD5 3b78f103d41430151e0390a38ccc60d4
- SHA1 e565d543a395843a4b71e9578b2d48add0236d58
- SHA512 6eed2aef7cea1c0cad655173b1bb95b0c9628450728604eff20dd5858fd76e1f390ef50dd28f2b9a4057c8cf7b39959b24bce15602ed9ba455e68fb67af9f7f3
- SSDEEP 49152:zqW/0GJwum+m8DgI27Ug8KsYpQ8No/TxCap:zqWJJwu8Qg57UjKsYpQkEdCS
- TLSH
  T13F95E176C3182AB2CA0FA679D9279B8F4AEFC10765353DAB5D60DA00BF4A0C16F70745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  uninstall.exe.nsis
- Size 321KB
- SHA256 f145c7c7ee4f51104a64204316011f7004f18ecb09c3f2e63f2e025d70b374c1
- MD5 9c7dd3ff051f9a98048f565e55cdc1d2
- SHA1 0c0657013b739a579fe00a67c8cdd8bc22e663f6
- SHA512 1c92e4010385a2a2d243e9e3545969440d109f2e43fec26dea95a65ef80420173b4b3ac1011300701899f4d6773791f72318b198aa5933cb70d8dfcad25c9000
- SSDEEP 6144:croMJlBThQqjYn8zKU08qaiazQg+C1h70wqPar4a5O3+ddcdXHFIPi+iG3:moMFSAEgf1xqEW++ud3
- TLSH
  T18064230F1DE9ACA5B9455F532292C2D0AD33A7806FF7322E0F47DAF1E252417A5A19C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32