45dd29ed7631361a5a09622bfe01042b9dd5dda2ba31c85a0ab2298fb2c4f1db

Sharing

Copy URL Twitter E-mail

General

Target
45dd29ed7631361a5a09622bfe01042b9dd5dda2ba31c85a0ab2298fb2c4f1db
Size 1.3MB
Sample261113-emsdvafv3s
SHA256 45dd29ed7631361a5a09622bfe01042b9dd5dda2ba31c85a0ab2298fb2c4f1db
MD5 7053dae32fac5a84d84ebee9526e6bf7
SHA1 ff58c1b28e74bec6dfbabd952571126e09194ae3
SHA512 4452593ab367c051c5a5d1d62e203c25b62fd0fcd03258834c831cc588f381d996af91741ac571a5e7ae1fa2281dce9176f41292c89e780bc025024a79205092
SSDEEP 24576:ZdxjNrV48Nyw2G10tDrZaNHWCgGkuv27GupiCIlUIQVFs2QL:3xjFS8Nyw110VMNHWCvVvqGIiCIiIgFu
TLSH
T1B255235789552C2DFD07627768C6531EE379E44EB9D43FBAA042A074F8231532E822BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Language

Source

URLs

exe.dropper
https://github.com/YuJunZhiXue/dsh-purge/archive/refs/heads/master.tar.gz

Targets

- Target
  Dshpurge-master/README.md
- Size 38KB
- SHA256 4ba9e3e15a0caa73a958135919d64cb98471e34cc0200088b2be7c31550fcaee
- MD5 775d133724cabcc71e28999a84201fb8
- SHA1 194e199f1f5bb41a3755aa1753e69ffda4474ebb
- SHA512 b561ef649b594c53b3f89eef572180a75bcdc2a599dec518aa4d882cbf711bed672f9b2ca8c6d8fef57a2d8a4f4549d44dcd01a3d096425301c6eb06fb0e0cd8
- SSDEEP 768:UzkEXpTI5e/q2hCckhtIvZ3ZZLio44ZEw7ky/89ovcxh7cKorccGkwekcJ8MTFld:UzkEXRIhaCckhWUo4M7ky/89o0xhIskZ
- TLSH
  T1E903297F930953B21E3121DBF64E26D9EB1EED5973911914A0DDC02CE742A288277FE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Dshpurge-master/README.zh-CN.md
- Size 36KB
- SHA256 a22e224eb8312e66556dfbbd93dd82f3dee27e98d4e11a7ac13a0e5ab222f9e5
- MD5 6eef956dc43d2e028b0f350e48fd3026
- SHA1 754699f63a92f350a6e1c0879f4a1d8b37d3041a
- SHA512 2bbb15511dad1d9e0761d5026f1b6d903ce7f80c83b53612e3a966ee3aff1957ac1017dbb76f59ec069abc4467af997f9a45b68448f49548226c305364ffa0e0
- SSDEEP 768:YzkkY2niCq/rNb+uNHh9mZAn/wEe20WQCuBaaKPtqEHjxZlZPo4bZ0N3QCZxNQBp:YzkfSiCq/rNb+uNHHmZAn/wEbXQCuBaT
- TLSH
  T198F24BFB42591DEA0D3232DE32852649F45C8E477BB0F568E985C91DFBC1A34471BA0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Dshpurge-master/bin/dsh-purge.js
- Size 6KB
- SHA256 81e16b9c672c0dd8795cb74a1c55b14662dd84af73e444a67d8b44a8a8b38d22
- MD5 291c0d5e750d4302b7aba6ad932a8fdc
- SHA1 210ed23f0d5ddd2d6450b52f790875ab7da98e8a
- SHA512 7f36beb5399dc168335bc38580ed14bac360e706cd22967c43c62622077a65894baf548036c7371df551ad8f4563ebeca53639252158b459b2a7060d6caf18d6
- SSDEEP 96:d+cjXzcw++m45FIujU6pJ6QJ59EgOquMTaHtoeiZVjly1fxT:d+cEgB3TjRnFWXqHuNoeiZZ8zT
- TLSH
  T1B2D1435809FE00393C3F24B61B1B116676E8AF472455E8493BCC427A6F92C69C56F4EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution antivm
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  Dshpurge-master/client.js
- Size 443KB
- SHA256 e04357fc6508513e791b15451dfc4e74270a70c90d257c058fa8aa7b8859006f
- MD5 406b15843d9e74da18efb1aa9084a7c9
- SHA1 5917bf7dcc6e138d1e6a9e765f374da6aa62edf2
- SHA512 d8aca1a2c79b304fc64800147fd1a7477fc430f39b4ad4e1d91e7513100e948181412e8b5654f96fff8a3df776ac18d247879b598da0a0fd4efdec6e7323292c
- SSDEEP 6144:oYpQG5EdiDYtoBj2BKnvk0+rm3iWfYNLMQJu85v/NZwT26P4:Ftf3ndYLMQJu85v/gT2L
- TLSH
  T114A4F7D2F27D203B4A23D155943FB49FB42C942BFE4159B2FDAC71005FCA42DAE68698
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Dshpurge-master/docs/banner.svg
- Size 1KB
- SHA256 ca6af3628ecbab20bc1a9bc8b8baaf0d58b61b90d23444a4de5d9a1dab932bdc
- MD5 0f4b4893b64ccbafc912bcfa47b6c09d
- SHA1 20f26643f453eda79e8a6ed8d53e30f527b4adfd
- SHA512 a633d4c7bd688b89e36cd311075cd93a7ce322dc773ca2f59fc2008efde2682903223cf2cfc1fb3fd0e58cd93747a33e6221e19752827ecfad62e142e0c46a08
- TLSH
  T1E621BE57D6D8962AD208C659D346E036271C90CB9A82C210F57E9F9E0F958D70F4BBFC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  Dshpurge-master/docs/drill-auth-legal.html
- Size 11KB
- SHA256 75a3debe54da5f51fb4449720633e6a14a12ac47a0fa11a074091503fe0fc024
- MD5 26f4d072fd5812314e7991e9f997fc21
- SHA1 970ce23ef7cd2ae9de1cdfcca2a6402e5f9dc66f
- SHA512 243ad64da49abbe9447bea87d4b8c53ad85df668cb3c46efda7a63d92a2cc98ffe2aefc7a26ed57e40b9657d918e21d126c6a815d6b0858b168e7ac2d68a5399
- SSDEEP 192:AMf6nUVHVDgIH6tQXRoW8RDYpq/HVvkNTVodmnI81MTF6B86fIHt1WINDFbG5r3m:Nf60mtE8dYSC/1MTcB89XW2FbGp08wH
- TLSH
  T19942C86E12B7DDC6048A3796930CC61B7E4DA33B41AECBD3AFA250C45FD4E56178A017
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Dshpurge-master/lib/asset-table.js
- Size 20KB
- SHA256 11796940a2c724db8c4bbba1bd755276656bb33e8e0b526bc413f8e1aa4afa98
- MD5 1ed0b8a4683925d8a4cbd5a631d291f2
- SHA1 7a0f137b1a04c1a25c96ecc82e7b4801339e683f
- SHA512 91784eabed267c92d3ca56c30504d40b272350758b644fca00258c82e431fbf55cc8750d1c51197d2bf9ce19c08b13b2264afcb10dfd908e8d18f5eac704d4b7
- SSDEEP 384:0XK8ks5wgnDremiWeu38a31zk1lVjuHD7L3vcp6xtKnP4Q9O/p0Z7ayZJOxsrHAB:v8ks9Dremq031o1kD/vcgEAh+9Ubhkvq
- TLSH
  T175A2D029AA04CB5011C87B5421AD6976EDE00FE73491345BAF63723F82CF527A5F54CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Dshpurge-master/lib/continue-retry.js
- Size 11KB
- SHA256 a5736c784ad4279919370dbc72a0a94529a384461b1877e9fc3c44eec04d29f7
- MD5 74c88d52ec59b4651073a2e854467284
- SHA1 6efd41b3e38aae5ecb178ffdc131343357b8546c
- SHA512 a1b2dd957adf0186bd3748ee0c111d70feb0731e2296e98355bc21dccfa4deebecdd0d523703eec35384cc47adf0ca60e54c630d27a248fc4cb556015c553de4
- SSDEEP 192:eyjGCcaYv2ku/5fqb4KQ0tYypjJm91Spjhvkib7vOD9TmCEZhAPf6DeMWD3H6xtl:Fjav2H8b4evOESTfG7
- TLSH
  T1D332F28930F775754356A27C1A6BE01A7638DC43388CDA50B9BC4BA0BF960389272BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Dshpurge-master/lib/core.js
- Size 186KB
- SHA256 d4e22a430ecae535140a74b1d17c66f18c1cb3cfb6ff43222ded13cde796ad6a
- MD5 5c8f758dd49173ac25f3b0a4944b09a9
- SHA1 bd6dbfdace263fa279dca98a3a84856b9d5888cc
- SHA512 1f055ec7f7b0163c337b9465f854c45082c6b12658604961df5f6171bc5a92766738bd0c20fcc5ebbefbbb391f75e5108c97efe8b5e2cb2a15c61e10c1d20593
- SSDEEP 3072:pPRpLCLOLOpLQL4LR6U741X4F1QT3F6AZOSg4wMWP4UpKdz:pPRpLCLOLOpLQL4LAU741oIkAZOSg4w4
- TLSH
  T189142B56A8F65D320353E6A9A75F1001B679C093351ADE50BA9C43986FCE02D83F3AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Dshpurge-master/lib/desktop.js
- Size 32KB
- SHA256 cdd7c9b7fabdd2d03b83afc28529d62f3640c9393802247e3415d3da5b1f16f0
- MD5 a8b0b4e0794e4141f102d465ea333bd5
- SHA1 6b5f97183f9d5ee6de3c23d045bff160052f32cc
- SHA512 bc1c4e99f68749a9629a6fbe5a895a613389a755dc3bdb09e7c671b826abc027975e65622ccf0eee295631e91c733f1f42145dd054d6a602d82afc90292d8591
- SSDEEP 384:M69dPqWIRQG2wyHeHSTmqGHJHYtHDcOET7X5Mf9eLafXTQr4ORXs2vDD3irKCfW9:n401c1fX5MFe8SX/CnHfQEUUn+
- TLSH
  T194E2FA8BA4E2222596B3B76C245B905A764E8C033245E984F3CD41852FDE53EC377DCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Dshpurge-master/lib/dsha.js
- Size 1KB
- SHA256 f44e348a9f0cab09cbf19ee18757daa50349c9429dfed647bf7763e9a0c0311e
- MD5 a6334ea6af251ad582f8577131bea7ce
- SHA1 ba070e0cc4e457d12d02339a7b00dcf933b77fbe
- SHA512 51e50f8fd7b402e53363a0aab523fbc3b75a3ba848fc0b0c71a47b6a5b0c8b62ba2e92806957eb9602fdf3fef90b09a991f41f5908a08976db86de147da7c0a7
- TLSH
  T145211EF373D69570CB22A0D0A70F9344BE68F543366ACD74C45906E42A821788132AA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Dshpurge-master/lib/extract-asar.js
- Size 8KB
- SHA256 d4f25a67ac1e5e2ae162842b31230d3ab02f53626dfe7401f25023cd563f010c
- MD5 3f742dd511116052d5d597fb5b5706cf
- SHA1 ab1c5a7d941756db3870e68ccc1e4a3fe35c92a9
- SHA512 860518430d891417c122d5a11ea2f3d4938d726e4400556beb65439557a1ff88ad098a5aea3909a9714a3aecf48d3c02371502c09e58fa72f3c75a2820ca21df
- SSDEEP 192:hwqt+wFTOeevsibz88bkBWbj9TEULluMCwHIB6Zrnp6i8L8t6lPn:7tStvs6BsWVFg6Jpon
- TLSH
  T13A02988A21F373328A3321791A6F5455B62D9413310BFD9CF3AC83983F96125D6A39D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Dshpurge-master/lib/hide-console.js
- Size 11KB
- SHA256 93509f224c9884fa4483bbd47940fc18bb84060a7760315d1f64248ebb1d66f9
- MD5 4c3b7b9bab9380b4337679b561c41076
- SHA1 d350948b3d1bfa89d5f85dc05c43575cb0cca229
- SHA512 72c5d0c0a8ad8314b9247330ccb1f4229f1de78a3902ae50a21649617c11d86d6d4126133d2e35d2e2e1451e48040d792ed7a80c9bf31f21253b18c5ac7b251c
- SSDEEP 192:HX2QUCJQtaM3QwLQNkM4kwkTVB3r7BGjS3toEvSKcKaYJ7k7BGxcSTq9WzA1TYAG:9A7kkSZCocAB
- TLSH
  T1503242D526F6A7325AB3A1A4661F5518F2BD8A13310ED960FA4C86D43F91038C3E3BDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Dshpurge-master/lib/host.js
- Size 672B
- SHA256 e6827d9d723119aaa3dc6adee4b60ca456d74deacf2f6a3be27502a6b06e600b
- MD5 cd380686d1296fdf64bd0b4ce8c889fd
- SHA1 fbb1bb5f5ff6872a4e7c7cb39f6b7f33ee2aecba
- SHA512 0323bfa8090ef8b161750ebe6f1a579c6c22bb2ef08ec83eba38e41649c14561445f0ab23c73291067daf57a52787fa15e7dbef7bc5bf0ee64e028024b311d08
- TLSH
  T14D014EEF77D1ED60C827ACE8630BD111F7BC69503ADC1E2484CD269066960A4DF31D6C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Dshpurge-master/lib/identity.js
- Size 14KB
- SHA256 47673035095beb6adfb04eef13f119ca4d1363251b5c1909afe752295438b270
- MD5 87602392969514ba1f1f5adaff2d0b54
- SHA1 43a85b65b64c058d6f9db60d6f2e73c5aac51e9e
- SHA512 cec3addf27bdefd214117b5799440bf1efe940022418940d8938883ef29201674ef1ab387015aab83d4018a0a24bc771f8f71cd11cb984fda900e0b2bcf98db8
- SSDEEP 384:0xgIz+PvP05VNOSkTAUEJXvHbfcu+6jPQ5:0vCPvPIVNRxO6G
- TLSH
  T12D62628970DAB5248797926675076019FA3CA48375A9C090B1FC86BC2FF163883F779F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32