1dc9f0f682d6d20c07ce50ad3e16e2f0c07ec309f96c008a8d4ebd7e4e5c2e5f

General

Target
SONdpi-0.1.1-windows-x64.zip
Size 715KB
Sample261113-we3y2set8t
SHA256 1dc9f0f682d6d20c07ce50ad3e16e2f0c07ec309f96c008a8d4ebd7e4e5c2e5f
MD5 9974c5df2d2eaa977d3d1ddaaeb6ed65
SHA1 57b808c6c98be0e0c7d0ac5ae8b58cdbe85878ca
SHA512 4c5da32e19289841d0db159e2d8fd8e43566b409d44ec8bda6952f115afa6067584bb52b25b4545802ec5b8f62c4be0a974bd2917b3da006eea1d5c3ef90e50b
SSDEEP 12288:kZJsy2hQcgfx02iARIlAKStsbwB/+JLYE2I8HxusmpS+aJvcXiLZ8+6bEeoi9Hve:WJJ2yFfxLLIlAxikB/M1kXmOvcyLZb6Q
TLSH
T118F423A2238973DCCB5749BBBAC17E10AD0810DCAD9948E19CFEBCE55F07A2434915DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence

Malware Config

Targets

- Target
  SONdpi-0.1.1\WinDivert.dll
- Size 46KB
- SHA256 6110bfa44667405179c3e15e12af1b62037e447ed59b054b19042032995e6c7e
- MD5 88e1c19b978436258f7c938013408a8a
- SHA1 09b77c8c85757e11667a7b83231598dd67fe0b8b
- SHA512 eaa0d8369b76fd9a4978f14702716ae31d801cd0dc36a86531f9320b4ddb683265c4f0e07af2b9d2e85f513270d98d1b11ae7d501d08287442bc505176d16e14
- SSDEEP 768:itSVluu2agCfRSB3QEw2VWHxWYuaO6JXtltdUUwhqWB8TicI:bUZWECHxWDABdIyTic
- TLSH
  T13E23C703F64251BBC568C27083AED3526E22FCC66354FADF829FF7952885F42DB1A509
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SONdpi-0.1.1\WinDivert64.sys
- Size 89KB
- SHA256 e69b5ba3f0cd6cfb2983e442636e7f0b342b61b15264b0328317d4559c82cf50
- MD5 6a33620de63bccaf5e5314ee49cd58fb
- SHA1 ac728b339681b2e27099fecc1419821f01d04b34
- SHA512 638d1b8aa4dc0e4ac504f51aaa3ec8375ccc3d69a4d36821f6bb98060b58586007f47966b9d58d222b9f067e12e80755f56559286cbabec8746146acaf24f945
- SSDEEP 1536:8ovgCRgYL/h//oJJw5AdPtey2AyWpdsihch9WXi2v6MuO2:84jmJJsKle9A5pdsiqg/vsO2
- TLSH
  T1D9934C46A2E201C5F9F6C97895B59213EF31FA81AB22D7DF11D0981E4F61BE0BD78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  SONdpi-0.1.1\sondpi.exe
- Size 1.3MB
- SHA256 c8fdfc28eef905ea46a167bc4b1e53bf9a010c8bcb0d5d0688c309294affc31c
- MD5 e62d93384d8a97f936c0cc3f86fd0dfe
- SHA1 5c5f2663e9e519b18c929b6b3127445d01b3a59d
- SHA512 c0290b1e4f343aa998027f52f0acd6af23dce4b47a9e796af9cedc31aca5db7262b3348424234777b25a42d3c32fc748bd804d24e2a7e26653bf7535db744c49
- SSDEEP 24576:7hJnE8H+cHzuGK6HNCExwV0MWzxQedCo6ths10iF/e0X:7nnE8HXuGhtXwqMGxQaCG10ik0X
- TLSH
  T1B3553A536E579978E45AE47082074A621E313CCF1B3778EB40A8B739BEB99F41B39314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral4 behavioral5