9953945f7445048040f4521fc6329f16547bb90040c3d0b90c164a534488353a

General

Target
SONdpi-0.1.0-windows-x64.zip
Size 449KB
Sample261113-we4wcaet8v
SHA256 9953945f7445048040f4521fc6329f16547bb90040c3d0b90c164a534488353a
MD5 682a3e4d3ce3e40a82815de81260aae0
SHA1 0d9e93715b8f2a6121f384ad14a7a878a531233c
SHA512 2d5b1d50feec659c24d17dbb1485af9cd053c83112c584af9b805d67b476f26d4b7a94430701ba4384ff1204c5538fc2e23ef42a4110caec80e6ff459205defd
SSDEEP 12288:qbFPntuHccVbVK2Re1RPbEPlFLSOUCA9HvTv:8ufi2R4aDCNHLv
TLSH
T159A4230CE204EB8FC5566EA0DC8B6C3903231590E099F091ED6AFD9E3D366B4E26C5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence

Malware Config

Targets

- Target
  SONdpi-0.1.0\WinDivert.dll
- Size 46KB
- SHA256 6110bfa44667405179c3e15e12af1b62037e447ed59b054b19042032995e6c7e
- MD5 88e1c19b978436258f7c938013408a8a
- SHA1 09b77c8c85757e11667a7b83231598dd67fe0b8b
- SHA512 eaa0d8369b76fd9a4978f14702716ae31d801cd0dc36a86531f9320b4ddb683265c4f0e07af2b9d2e85f513270d98d1b11ae7d501d08287442bc505176d16e14
- SSDEEP 768:itSVluu2agCfRSB3QEw2VWHxWYuaO6JXtltdUUwhqWB8TicI:bUZWECHxWDABdIyTic
- TLSH
  T13E23C703F64251BBC568C27083AED3526E22FCC66354FADF829FF7952885F42DB1A509
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SONdpi-0.1.0\WinDivert64.sys
- Size 89KB
- SHA256 e69b5ba3f0cd6cfb2983e442636e7f0b342b61b15264b0328317d4559c82cf50
- MD5 6a33620de63bccaf5e5314ee49cd58fb
- SHA1 ac728b339681b2e27099fecc1419821f01d04b34
- SHA512 638d1b8aa4dc0e4ac504f51aaa3ec8375ccc3d69a4d36821f6bb98060b58586007f47966b9d58d222b9f067e12e80755f56559286cbabec8746146acaf24f945
- SSDEEP 1536:8ovgCRgYL/h//oJJw5AdPtey2AyWpdsihch9WXi2v6MuO2:84jmJJsKle9A5pdsiqg/vsO2
- TLSH
  T1D9934C46A2E201C5F9F6C97895B59213EF31FA81AB22D7DF11D0981E4F61BE0BD78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  SONdpi-0.1.0\sondpi.exe
- Size 858KB
- SHA256 dc872a9060f7259f9affc0d03fbf5c545643be1fedaee27c5432a6704c2aa2aa
- MD5 20de381c48e9f64ae424c3a99c6a690a
- SHA1 57b7392abf7347dd182f582a512478cf8ef45dc3
- SHA512 c345760b44a8f11c39cd8b55039c38589e504a429ee6674ce926f90e887bed58fa0bd12724152ab22194d0dac96f2b8b56b69970df93eb5e25f51c8ad3baca09
- SSDEEP 12288:9gcpg9UWWiX5SPbxE0qEQmRhN24XbJtHsX7xe3AghTk8sR1aQjYNNopmQH1:9gcpg9oY4XbjHsLizhozR1aQ8NNDQV
- TLSH
  T1ED1508257A5B99BDD84AC870834786B31E2130CB1B36BDEF40C596793FA9AF51B38314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral4 behavioral5