18ebd9b18169a44b962b85823ff8b3f0c89893124fef76d49a32d549ca87a6c3

General

Target

G_768916 (1).rar
Size

8.2MB
Sample

230522-tasw6shd57
MD5

e9775d944eddde92787307f5e2523c2c
SHA1

176b83a3a60615bb01914c60467839b50346636c
SHA256

18ebd9b18169a44b962b85823ff8b3f0c89893124fef76d49a32d549ca87a6c3
SHA512

01c40c4d2726778b5f76fb6d4a5bb18fc73da274d10213b389c9e5e5d6cfdb27596c009f1c1919c6d13f5ba9a783c322655cb9f921a89703b9c80af17dfb8130
SSDEEP

196608:lBJ/X/1ZpzHOrThHyst/6it2wNh5kwh+abz:lBZX/RgThYit2UIwvbz

Score

5^/10

Malware Config

Targets

- Target
  
  G_768916 (1).rar
- Size
  
  8.2MB
- MD5
  
  e9775d944eddde92787307f5e2523c2c
- SHA1
  
  176b83a3a60615bb01914c60467839b50346636c
- SHA256
  
  18ebd9b18169a44b962b85823ff8b3f0c89893124fef76d49a32d549ca87a6c3
- SHA512
  
  01c40c4d2726778b5f76fb6d4a5bb18fc73da274d10213b389c9e5e5d6cfdb27596c009f1c1919c6d13f5ba9a783c322655cb9f921a89703b9c80af17dfb8130
- SSDEEP
  
  196608:lBJ/X/1ZpzHOrThHyst/6it2wNh5kwh+abz:lBZX/RgThYit2UIwvbz
Score

4^/10
behavioral1
- Target
  
  G_768916/DVolPro.dll
- Size
  
  8.0MB
- MD5
  
  30e1d0c1941167612a1da0bb79a03be8
- SHA1
  
  705e76d20627f5b19d8c08cb7bcab0e04a962c8a
- SHA256
  
  01fd9d0fefc8a123f59347eb48de14336d641b22440ba20b6724f506b0a892ad
- SHA512
  
  8084e4e805e5b458d04e6e246a29b45478fde661c16a34a8f77846174b869e06df861b69a1c4a76b91c9e3c07842a21c0b21da7f9aa1e2952ec7b15a2886ad26
- SSDEEP
  
  196608:MqwXvaXu8N9GEFH20R85wLIhiNz6aWSzJUovW:6AH2I8czN+tSzJxW
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2
- Target
  
  G_768916/G_x64_x86_289399.exe
- Size
  
  1.3MB
- MD5
  
  80b65ccbf91375ed450dff25fc7b60e2
- SHA1
  
  cba29644ac48b7d53a90aaa3b000b771574b6995
- SHA256
  
  21fce3ca864600ea88548acaeea268c189ae9825acd0e3497f5a6242198f7354
- SHA512
  
  060c2d81a08107998599d396d9659ca4f56dc2b93e7622cbc88481488398316283b2121e9c3729370c4fbd525043aaf3f74ba422c0183ec6bd2f7ae834c812f3
- SSDEEP
  
  24576:ktdAm9DUi/CR3wCkCiRgoG7hBaHkbEXXeG/jFtCzi3ZAiSLxenD1op42GbaNDRHq:cqTytRFk6ek2zUZAiSLxenD1op42Gba6
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3