General

  • Target
    talktome_bridge_windows_x64_v1.6.2_setup.exe
  • Size 7.9MB
  • Sample261110-m6abdaas2v
  • SHA256 0730436ec02098badf8def3867f4a1e8369c4a0727affdc15ddff8573d057051
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      talktome_bridge_windows_x64_v1.6.2_setup.exe
    • Size 7.9MB
    • SHA256 0730436ec02098badf8def3867f4a1e8369c4a0727affdc15ddff8573d057051
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/NSISdl.dll
    • Size 15KB
    • SHA256 d3e61c4df837625ac0503cea5b6765a04d37fc35399899a5503b53a3108bfbf6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/StartMenu.dll
    • Size 7KB
    • SHA256 39870682e7d1c026cd2b33ca25591db28250dde17de7eb1feec404222d534ffc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsis_tauri_utils.dll
    • Size 33KB
    • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      ffmpeg.exe
    • Size 6.7MB
    • SHA256 548c629e9249a5d449b167836ad2bee1c6677879f3bdcfc3fa7da732cc9f2a4f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      omt/libomt.dll
    • Size 6.6MB
    • SHA256 83830687a9eb79630af16f8b1cb1cd5b2f6c36423fa0bdfd40ec7f5ed90a448d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      omt/libvmx.dll
    • Size 530KB
    • SHA256 a33167041939bce24729343963ca8fca373b5878a36ea475a76c2393c48b70ce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      talktome-bridge-client.exe
    • Size 13.0MB
    • SHA256 b4924035d5e6fd2e37063427c82b7b27b698cbfb5b51471898f4b8e360246931
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks