Overview
overview
10Static
static
3Resource/A...me.xml
windows10-2004-x64
1Resource/A...gs.xml
windows10-2004-x64
1Resource/T...r.admx
windows10-2004-x64
3Resource/T...r.admx
windows10-2004-x64
3Resource/T...r.admx
windows10-2004-x64
3Resource/inetres.xml
windows10-2004-x64
1Resource/kdc.admx
windows10-2004-x64
3Resource/msched.xml
windows10-2004-x64
1Resource/nca.admx
windows10-2004-x64
3Resource/pca.admx
windows10-2004-x64
3Resource/s...g.admx
windows10-2004-x64
3Resource/srm-fci.admx
windows10-2004-x64
3Resource/tcpip.xml
windows10-2004-x64
1Resource/wlansvc.xml
windows10-2004-x64
1Resource/wwansvc.xml
windows10-2004-x64
1Setup.exe
windows10-2004-x64
10cufflink.vcf
windows10-2004-x64
3madbasic_.dll
windows10-2004-x64
1maddisAsm_.dll
windows10-2004-x64
1madexcept_.dll
windows10-2004-x64
1quin.doc
windows10-2004-x64
1resources.pak
windows10-2004-x64
3rtl120.dll
windows10-2004-x64
1vcl120.dll
windows10-2004-x64
1vclx120.dll
windows10-2004-x64
3x64/Templa...te.htm
windows10-2004-x64
1x64/plugin...ns.dll
windows10-2004-x64
1x64/ripp.exe
windows10-2004-x64
1x64/tipa.exe
windows10-2004-x64
1x64/upd.exe
windows10-2004-x64
8x64/zlib.exe
windows10-2004-x64
18866 Passwords.txt
windows10-2004-x64
1General
-
Target
2ba315ff4d5e4d85b85759fffad1152c3388a8e761c32dfde8c72fff1b96bfe5.zip
-
Size
23.4MB
-
Sample
240417-ha7jsahe7s
-
MD5
e4461e16ebd9b9c4a34a754c9962dc5e
-
SHA1
468a491e227d3ca2be95a0f37bc6a4f2a13c40b4
-
SHA256
2ba315ff4d5e4d85b85759fffad1152c3388a8e761c32dfde8c72fff1b96bfe5
-
SHA512
e1a8deadddb2664061be077fd1a7a45af19453e4ab07e2b3e69748355b881c285c46b98087b954abd5cf88f497bfe3fcbcd014f32c2c79062919b3ab63fde149
-
SSDEEP
393216:uD8VuUVsghRGviy2dAG8stFbrI8gxD9AfwBmJxzowCl7QkhHZtAOfaa6n3Jp+NCd:uDBIJ4iy2d3txrI93azanhQOun5T
Static task
static1
Behavioral task
behavioral1
Sample
Resource/AppXRuntime.xml
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
Resource/AuditSettings.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Resource/TaskScheduler.admx
Resource
win10v2004-20240412-en
Behavioral task
behavioral4
Sample
Resource/TerminalServer-Server.admx
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Resource/TerminalServer.admx
Resource
win10v2004-20240412-en
Behavioral task
behavioral6
Sample
Resource/inetres.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
Resource/kdc.admx
Resource
win10v2004-20240412-en
Behavioral task
behavioral8
Sample
Resource/msched.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
Resource/nca.admx
Resource
win10v2004-20240412-en
Behavioral task
behavioral10
Sample
Resource/pca.admx
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
Resource/sdiageng.admx
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
Resource/srm-fci.admx
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
Resource/tcpip.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral14
Sample
Resource/wlansvc.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
Resource/wwansvc.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral16
Sample
Setup.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
cufflink.vcf
Resource
win10v2004-20240412-en
Behavioral task
behavioral18
Sample
madbasic_.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
maddisAsm_.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral20
Sample
madexcept_.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
quin.doc
Resource
win10v2004-20240412-en
Behavioral task
behavioral22
Sample
resources.pak
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
rtl120.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral24
Sample
vcl120.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
vclx120.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral26
Sample
x64/Templates/TemplateCorreoCliente.htm
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
x64/plugins/MahApps.Metro.IconPacks.PixelartIcons.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral28
Sample
x64/ripp.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
x64/tipa.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral30
Sample
x64/upd.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
x64/zlib.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral32
Sample
8866 Passwords.txt
Resource
win10v2004-20240412-en
Malware Config
Extracted
lumma
https://explocommisiowsa.shop/api
https://entitlementappwo.shop/api
https://economicscreateojsu.shop/api
https://pushjellysingeywus.shop/api
https://absentconvicsjawun.shop/api
https://suitcaseacanehalk.shop/api
https://bordersoarmanusjuw.shop/api
https://mealplayerpreceodsju.shop/api
https://wifeplasterbakewis.shop/api
Targets
-
-
Target
Resource/AppXRuntime.admx
-
Size
3KB
-
MD5
88d794ea092ef395433cfa321d06e5e4
-
SHA1
f1f7c7dfbd04ac5a92cbde88bd4f087781d63c40
-
SHA256
5afc969e4212a6511f307385c99b8868e8c873183dc271bbb95ba571b24eb53e
-
SHA512
ebb770102b8202de4bb7319cbc2cda860e4de5d1e95f0fbef4d4890aa2b22cd48cf73909d028a37b507926b4fad573716fba16e50b8f9eca8d5feab00ac17cca
Score1/10 -
-
-
Target
Resource/AuditSettings.admx
-
Size
1KB
-
MD5
9a36a7410b4ef98b36da553e050b9788
-
SHA1
4ba6e5225a7c5daf30f4947b9288b708e8e557e8
-
SHA256
ebac316580540b7ee8e399f890470527e456f2c6a103fcc899f4b2442d8e69f7
-
SHA512
7cd81f2bedde51bca3a1f5a0889870be71ef521e5c331f1c8ba4ce97bf604adfff6cafa0fe707ed55df62bc340c45baa189e3d07f20a466ee7254f3c6abe6b74
Score1/10 -
-
-
Target
Resource/TaskScheduler.admx
-
Size
5KB
-
MD5
81f5d01fcc855eaa4e2195a41354cf43
-
SHA1
e671548f1be0e041848387e29c886df88dec47eb
-
SHA256
7d908e972efd3696084d60135a685b96553ef215a181db900b70a2a5320ddc22
-
SHA512
7c8573db0f1a821b642294a5848ba5ab67a71a7b944a19a9c79ac38782849e4e6b68c8036e01c9835ad931b79a268513fd662216689e39b321f956624bb14bdf
-
SSDEEP
96:QeD/mDm6ovKnKD5E/u8T/u8v/R8C/R8T/R82/R83/t8a/t8s/u8b/u8n/x8m/x8f:vYnuququURXRQRjR0tnt7uquuxFxtmEK
Score3/10 -
-
-
Target
Resource/TerminalServer-Server.admx
-
Size
18KB
-
MD5
ff63c2011f5455dfb88bf4e55e0c41bc
-
SHA1
1120c97538348f5f9eb49c055d83c6af77390c76
-
SHA256
975ce51517cd3ef6c7d8717f9966680bbc127efb3eb18d7f7f17e06855702fd5
-
SHA512
6799ec3efa857d9a88fc7479e7d1f6148304baab376e5e693bb9d9b44112fdf89d13e75d7becabf2efce978f77bb9206e8d09b65bf890a6d54680628acd8c0ef
-
SSDEEP
384:+QqnQsuy9CsODa4a4Ym79b+vYm79b+VLdHEEHMgec+8yTJh67m3exgb:+QqnFJzjwjRdHEEHMtHfv6auWb
Score3/10 -
-
-
Target
Resource/TerminalServer.admx
-
Size
91KB
-
MD5
eaa1a71d350b56d3edea127911adc959
-
SHA1
8d2a21120ac2b4a9eec8de3cb4531d3da9c123f0
-
SHA256
87e28f940d8868d0460fd3372cce184cf8145bcffa50f70b5b1c2713abb70c15
-
SHA512
8247a68b5a227170046b48f23f8980bd1ae96bd6143b72e2e77105c4f0b93c9efd4ebed2fd9d01f1f964f307aaa44d668b327fb1e1be255da78ed04566c401af
-
SSDEEP
1536:PsieUgOROb+/bjuAGxejp/ajqG5g7DgMK0KaKoWdW+Q5AYk66QhqyRpl8vmdeSv5:PsieUgO/5qyRpj3gY3vsw
Score3/10 -
-
-
Target
Resource/inetres.admx
-
Size
1.6MB
-
MD5
39f0d8dbbe07170c55ff82ff6e0f137e
-
SHA1
9968c17e869250de0bfb2353362ff981b1152b9c
-
SHA256
5b9d8f4735a3bfc022542f617c2fd77dbe4b0bfbb506d51e1ed0adf896155356
-
SHA512
9f27dd0e757cc4b8a6c3e83e4044068440547380fa91d1580b00f1b62f07822376744ee65bb5eafddc4a35b6048b8f32209d00766f88bf09df9847053c1df3c3
-
SSDEEP
3072:0wQADKm6VNTp6qpxFwFVSl9t4VpR+4Mlu8ROYg1V:eWPq3yrvMD8Yg1V
Score1/10 -
-
-
Target
Resource/kdc.admx
-
Size
4KB
-
MD5
2af259c23535c7d28fe3ddb905946f29
-
SHA1
e73fc86257a2cd49de99072d2eaa19f143854bde
-
SHA256
518b39ad75aec993b9e48733f1b3c38ef131c94b240abc2449c0573eddca5d2a
-
SHA512
c9828fb477511b6986a830cc7bcf1b2405ecb35970d5cc411ed558f1a300603bada8008f1a7cd2f55ebcef2dfa9b92f3204e5ca5827c68f585eb9573e63443d8
-
SSDEEP
96:QeD/mDQIovKnK75DmSxdIS9MGweOS11IS5Gw0/M1CScGwiSQo1P1SFAG:vYLAd3tCef1TP00J8jRyl
Score3/10 -
-
-
Target
Resource/msched.admx
-
Size
2KB
-
MD5
96d22e893dfb610e2fcbf06487747388
-
SHA1
99a792caa380276f43687b2ac36f42585d642c77
-
SHA256
295ed67096dff66228e1069fe6f6435f829a7172983c49906f7ffd4a3e210cc0
-
SHA512
2bf1485d0e5907eab1d472364c35ba7eaf51f4a9cd3ddae64770fdcc3c8b2729a5d2e0684d058df7f8b9c5015ebdf7ffbc65c1a7fd9f402615164f66a40ea27c
Score1/10 -
-
-
Target
Resource/nca.admx
-
Size
5KB
-
MD5
1b66bd19c277cdaba812478de7c0bab1
-
SHA1
95c48b9a1f7b3a91892a2d51ff912eab778d36f0
-
SHA256
3634538de95d6878f6022798836e0b04f4294812f8944c3ee615d38de01659cd
-
SHA512
e54dc3944a7baec47a99ea0969131b9c6107ca2a1f2b0d2529e2ce14df80ab051484bf2f0f029fd6f104ffc3de1f350db5ddb939f6a720716fa7afeeeca2e1cd
-
SSDEEP
96:QHHoWKnKKX2mewF99KQjews9ABKC9AyM9dSE91ysewt4xnOYgw5XEqaE87wICRl:QnYbD9BMkrSrn+xnzBEqtRl
Score3/10 -
-
-
Target
Resource/pca.admx
-
Size
9KB
-
MD5
0abfe09e86cbaf074c2a6efc603720eb
-
SHA1
9291fd7531e839342a0a010589e637b15d6c0ab6
-
SHA256
13a96dcba9cc049dbeeba890c8d4845cddf7d9307395ffc98f0c8a4faa0b9e71
-
SHA512
05132b9e0ffb36b9fd964a42878997953ebdb83d2357d5d9887992d4c5c445d4a4132d754f2820a336b48834c72b7c42af09be24e6be4e52db059464cf3dd074
-
SSDEEP
192:vYpu2Jx6X6jJLcVhkGLJVhwhLMVhcuufLKhcwryr4:AP6X6dLcVhvLJVhoLMVh4fLKhjryr4
Score3/10 -
-
-
Target
Resource/sdiageng.admx
-
Size
2KB
-
MD5
8bce4667d0c7ef7b8c2a67ad0c7cb0fb
-
SHA1
34b32874284f5b21e170053c609e6996b8f11896
-
SHA256
872a02debed178f5332f016c2dda59f92eb32b624264334c360fd996a21a5536
-
SHA512
b7006f163bcf35f04fd6cb19d2a62176130f4538e3bc33fde08738783c65e912b0f5dec2bf87bd8c1c1fdc9cf6b042dd8122250dfef5c2976372a3bc195d6be7
Score3/10 -
-
-
Target
Resource/srm-fci.admx
-
Size
3KB
-
MD5
b1433d2594dfaceb0231a7b0288176e9
-
SHA1
676d71632b5504364a46cde61f31580fe63086c5
-
SHA256
89a43bc6033180bef0e9c8a57b83182050ff2ef124713a9a00a187a5547233ff
-
SHA512
30ef93693179914bb116138d80768650d5fbb83e7c78ebb44aa3e533658427007c82338cf019fc5e2e2d96fa7a2a695a21dde6ba185f82c6ef419ac6af064c4e
Score3/10 -
-
-
Target
Resource/tcpip.admx
-
Size
10KB
-
MD5
27e7fa51d11cefb156fd72630a31fd9b
-
SHA1
ff4b5f9dd518380da96064d971b613c350c00698
-
SHA256
f5b4275e4adae51ead17b66f2bd72f661305d6965df25d29991d3710bd5c6b97
-
SHA512
24fc6febcb81b88f50e9ffee9b69f1f30a0fa3cc1b0e1c1d5c28e72b4804c9e55532d5550b4096a5c7772645b3c45fcadc3be3c352c2efee7d77b7cfcc13f6e6
-
SSDEEP
192:sYXWk9FwEvOkUFPEWFF6wkCdgTKUQuQXgfkm8kveXDXRNm:gk7wEvOkgPEWFF6wkmgTKUQuQXgfkm8+
Score1/10 -
-
-
Target
Resource/wlansvc.admx
-
Size
1KB
-
MD5
5e91ab87cfcfaff4ee2df1de9f56aec9
-
SHA1
5e1cc79f0c019a2707b0a8c71016a0a29c2e0bf6
-
SHA256
683522392f9efbf5aa9ec0d494cc77f3b430bcb2aa93cda36002368ba9744b30
-
SHA512
3a4aff0419f8a0b1a92170cfd71bc1d06d40b4410b350d4071aedcbf9bab095fe8d0ea0d83bfa821d8ee9649c22a3786e29e60f0b8ad363ad04fc6a8a721d23c
Score1/10 -
-
-
Target
Resource/wwansvc.admx
-
Size
2KB
-
MD5
d678fa20d6119e611d2866830fe02668
-
SHA1
93412a379b31d0b26a2a9fd3c2726ee42dc52ee3
-
SHA256
a9e3a282b770c3a69078f3f87ce3251aee637a6458874f0f813dbca51f35d70b
-
SHA512
f6133cac994b513ecb05c8cf8009d05b3c4163b08c9eeeea728a0634b3620085edd479be227b351e77249f7486079e445949c26b6f9e8577dcda8ef753c5ee0a
Score1/10 -
-
-
Target
Setup.exe
-
Size
2.3MB
-
MD5
5d52ef45b6e5bf144307a84c2af1581b
-
SHA1
414a899ec327d4a9daa53983544245b209f25142
-
SHA256
26a24d3b0206c6808615c7049859c2fe62c4dcd87e7858be40ae8112b0482616
-
SHA512
458f47c1e4ccf41edaacc57abb663ee77ca098fffc596fad941bbdea67653aeabc79b34d607078b9ee5adb45614e26f5c28a09e8faf9532081fdd5dec9ac3c48
-
SSDEEP
49152:DzO+g39FbI0eQf/Z3CarWedoYAmXviDTMtT2wkqN5K:DzO19Fnf/hdoYAm9ZkqN5K
-
Suspicious use of SetThreadContext
-
-
-
Target
cufflink.vcf
-
Size
65KB
-
MD5
18857476bff1ae29423ec3c8ae14f8ee
-
SHA1
b4bae6186d50bbd37d24846f12e6a9d323e1c11b
-
SHA256
01bafab73b1e16db84600aea8415391bd5acd9e36d683fa5eabcda9ed386d4d0
-
SHA512
f8fd5ef9884fbf819a8fab8f039487116586b4d0c6e0935cc5ed2bad10f124b40fcb1c5234961ef41cada5619124a4f6f3cfe43f60657224db8e0814e79a3594
-
SSDEEP
1536:lmu/ThG9QpG46sYBkdXlf5f+0bby4vOkkFR:kyhuQo46pBKf+0bbBvhkFR
Score3/10 -
-
-
Target
madbasic_.bpl
-
Size
210KB
-
MD5
e03a0056e75d3a5707ba199bc2ea701f
-
SHA1
bf40ab316e65eb17a58e70a3f0ca8426f44f5bef
-
SHA256
7826395127e791a883359ea81308174700da0af8052cc9853b19fd29c2e4badb
-
SHA512
b0a3cfb6b34832f048fe0fc70c6fa76ae16a2cacda930f6529a83a967d6e8de1c69b93e0de3dc2126c5385d85e814687e695a0a4131399a69633141cad98da2a
-
SSDEEP
6144:6N/kSQxE6qeM/k4qTl5L5e5+53WCG1CbF/FrfGx:JqeM/k4qR5L5e5+53WulZGx
Score1/10 -
-
-
Target
maddisAsm_.bpl
-
Size
63KB
-
MD5
ef3b47b2ea3884914c13c778ff29eb5b
-
SHA1
dc2b1fa7c7547d8f1ad3f20f9060f7bc686118e0
-
SHA256
475f7cdffd8ed4d6f52bd98ae2bb684f1c923a1be2a692757a9af788a39b1d87
-
SHA512
9648d951d8d3640436c8029fd0f06786f7ff8f52191cd6959569c87868bb6c40ac8c7e495c09377a8a5c85e8d3942551c37eb84e916b5c16327d8d43a167820e
-
SSDEEP
1536:eNy3eqMne0sXB0IWtCLwEJhY0w1K7fixStj7wyis:CqMnfIB04LwEJhY0w1K7zzj
Score1/10 -
-
-
Target
madexcept_.bpl
-
Size
436KB
-
MD5
08c34e7491d9fa27ef9e70d6f31934a8
-
SHA1
d2a7084f7108717102831190370d5052b519a2a9
-
SHA256
df97c577196106abb67e56a05db22731db51fc8cc86b90c0dd4b16e43ae97ce7
-
SHA512
2ef1882c5b638aa6b2882c313624d493cc3b7493622af16e91a113720eca4f4f24e8e378e6fa07b210e86896751ea14505b892d5042202adfc3374cd8636264e
-
SSDEEP
6144:vlA649EKhEV30F8sl88nTjQ4Q50gEcW/jd+o72niVUNpa4/n2g:vl74ut30F8slzYlQcW/jd++2nJ7R2g
Score1/10 -
-
-
Target
quin.doc
-
Size
779KB
-
MD5
d6e4657a83e3388fbd9b1b33e2aa868a
-
SHA1
87473eb0b2bfd1c84c8e605655a5d7e1b9861914
-
SHA256
4e5a146637b0bbb3ae7c6d24c2afe979e2cee2ae1df61ed6225d68cf7e4ac3ec
-
SHA512
30857ba44582505ef2b0909a476d2c51013066ea207b70a8b6f47e1a13459a69edcc02da2fb85e3034d01f38edf66f15fbf3056f2ac9ad93637bc081106dede8
-
SSDEEP
12288:/NGBdMAYY8b1JNKu17yD8T4Xf7gMH8k+7JP5Hmk8MBH5ldI6lwp63/zDGm5z:gHuB7yA4P7lcz7t9mk8MRacwUXF
Score1/10 -
-
-
Target
resources.pak
-
Size
4.9MB
-
MD5
df15387bf046715cc592a690da33e4b1
-
SHA1
ad93b08dff82cbd894f6a0a9733c70d7e564113d
-
SHA256
11d0f55c105883d203137a87a610ba793299dc4774fd6d8b3a86666a2c337041
-
SHA512
71244553d7b1b559fcaaa059622c340d22148bd5324fa3f6730d37322025dbfe5e853948b49b91db6022a25bca4ddbab8fe6ee1522a461963dfba04a7c93d69a
-
SSDEEP
98304:b6zN1Kt66I0+1Yk93pPVrXh188CYCUrwr1ISgMRQK8nXCpGm5vEybt:+zjKt66bGVrhm8hCUkrGsyCV5vXbt
Score3/10 -
-
-
Target
rtl120.bpl
-
Size
1.1MB
-
MD5
1681f93e11a7ed23612a55bcef7f1023
-
SHA1
9b378bbdb287ebd7596944bce36b6156caa9ff7d
-
SHA256
7ed5369fcf0283ea18974c43dbff80e6006b155b76da7c72fa9619eb03f54cef
-
SHA512
726e8f58648a6abaf1f2d5bebcf28c1d8320551a3b6e7eef0cf8d99f9ef941e30e7004c24c98e9b5e931a86128d26de7decba202390665a005e972dcbe87ab93
-
SSDEEP
24576:3bhz5FWbA1msvIRzM7Rk5JZzSQ4+Is2D9Tx0gboN:Q2hTKgboN
Score1/10 -
-
-
Target
vcl120.bpl
-
Size
1.9MB
-
MD5
13a2734bb2249010514386ebc856b8da
-
SHA1
8f6e3b30f30a5bba9bc6baaf8f440e085a6a568a
-
SHA256
713c21d009000d504d9bcf3ce95d50e74d3933083783de144db0a16e2425ebcc
-
SHA512
2f108436fc1a03591802ff6b8c6ac1de1c0388b2a2a6f8839c10b5f0ec06b66775f261da4ace05fa367eb46b5be533949c092e113fe1270adedb9cb8c34ba2dd
-
SSDEEP
24576:O2gt8PRUMggrgN/5tWw+eNVEXZB5SOCwhuuYY8RPyS9YEPI5yz6I:ORSf0Ww+NpPSyzYY8c8YEPI4+I
Score1/10 -
-
-
Target
vclx120.bpl
-
Size
222KB
-
MD5
3cb8f7606940c9b51c45ebaeb84af728
-
SHA1
7f33a8b5f8f7210bd93b330c5e27a1e70b22f57b
-
SHA256
2feec33d1e3f3d69c717f4528b8f7f5c030caae6fb37c2100cb0b5341367d053
-
SHA512
7559cdf6c8dbea052242f3b8129979f7d2d283f84040f1d68ae10438548072715a56a5af88b8562aeea7143194e7c5bddac3fdb01ded411a0b1cac9f0c6eef3f
-
SSDEEP
3072:K4af8kXL6nX0YXjvkWQ5vYhbNkWPFOEJ8YZbjeTl0Y25zFgYBzRKy6sB65avEtAA:baf8kLWL7Xov8bNxdOmrfgYmHA6h
Score3/10 -
-
-
Target
x64/Templates/TemplateCorreoCliente.htm
-
Size
2KB
-
MD5
ce4c1f3ba9e690c4119e8ed39aa8eb78
-
SHA1
dc2da00c92b51431c01c5e598de4665c9989e856
-
SHA256
e17621dc67919e53a0d1be6a03fa0d97f01c8932f8d8912d556327e620310432
-
SHA512
daf95e6329b060fe230096fc7a594cf0a13801e2dcf9869affa5530a2d03bf6c0dd2d9340be5c312b82d41dad48057f86811a23b23fba93b0dc9a478986ac4ef
Score1/10 -
-
-
Target
x64/plugins/MahApps.Metro.IconPacks.PixelartIcons.dll
-
Size
135KB
-
MD5
65e9ecaf0c66785a4b0b2147683d258b
-
SHA1
b718931af23a815acb1ab3ff72cccd5de7e40b21
-
SHA256
188f508445a69ddfcce1de0fcb1280bac9b2dcf49f9ae62ed31bee58947f0cab
-
SHA512
fe2866a6d25843ce60cb0898efb721485b7b0228c4525f7cca21f5d76bc08a76f5ceb0787535349e0a1fae8c5cd8374ef75066225b0122a446099dbf815b418c
-
SSDEEP
1536:MYFuVW7Yoq20bnSvvlzBjOJhueSKki6ZoDci0mLLVQSR8tF4HO:MYFug9wSnBQueSKki6ZoumfcF4HO
Score1/10 -
-
-
Target
x64/ripp.rf
-
Size
40KB
-
MD5
ca57ccdabc7df2e63aa1cb548c59686f
-
SHA1
1a4037a55b55b9df0e81e9f4a1ecc832aa721142
-
SHA256
8e7206850a4b3c6a3f53739c31e78f7916f3547f392f69e6b475e671244c437d
-
SHA512
1c514ffcf33c688802cd78997502e51c9551bee125f5dc1942803374b426476d11eec24086a718b81e7c3c4149a77a7a00f7ee5be944a780b58c9625f76824fd
-
SSDEEP
384:H3NXAdTmGbOiXQ/Y4GO70pzE2NeeamkdQPJ/q184kWojlWHl70GftpBjvlXM+Mcj:XAKGZXY7B2YmkyJ/M8wGijXRMBhtydr
Score1/10 -
-
-
Target
x64/tipa.png
-
Size
84KB
-
MD5
ca707040296e42063a7805e363b3e187
-
SHA1
734e24fe47e85b9e875adb152e7b721176bdfea6
-
SHA256
db21c3e3322133179a45375e74b41175bd34e54bec2ab96859194b58567adce9
-
SHA512
dfface550e45a5a09f5d90bd6c2d95ea25e50e588a20c72e058a40990041c3066626855c9c6636a134d9f6de9c72a89f6c7e16c5df7fae6436d9d62539ea3e9a
-
SSDEEP
1536:fGU7EasoTzjdljE5T48Kar+eEXBxKFZ9s8nsQBWvf5Lbz:r7LskdljgZx+ZXBA9XBWvf5/
Score1/10 -
-
-
Target
x64/upd.dll
-
Size
1.4MB
-
MD5
31fee2c73b8d2a8ec979775cd5f5ced7
-
SHA1
39182a68bc0c1c07d3ddc47cd69fe3692dbac834
-
SHA256
d26a7f2d4f3521827201e6cdcd296f132c7d18c3a1ce70c24b423300cff326fe
-
SHA512
db51b602a8675641bc3a0a980a197243787ed12f5e0619cb1d390c91193d7e3447e3e86e2321c3ea273c6732b356003a249241d7d8a5699931810e5a35d5c650
-
SSDEEP
24576:kL/7n6lbcC8oblv1zj1SqdAGFQZIxvC45UJoe1Z:E6+C8o5tzjYq+ZIxL5UJoeL
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
-
-
Target
x64/zlib.dll
-
Size
217KB
-
MD5
6b223738cd91701a30f579256fd06638
-
SHA1
4f334a19caabe13ccb270cf2fa7018b914c83647
-
SHA256
c0d4ca1f64d8b0420424f6ad03daa9a2843f3834e3a1fb1dbf2b55bcf9f58be8
-
SHA512
f037382569a9bcf0e188661d6e73e22a2ad59298f7c22c0f04b4a9daddc45c20f8da0304cdf37bb298e338dfc9d556495679e42b0a371b67f7c270df1869619b
-
SSDEEP
6144:U+bfb9iR9O1bzgQdR5cMCVFZSQVKWdF91xeuyJPAOtUsCU:Uou9O1bzgQdkTPlFwuyJPosCU
Score1/10 -
-
-
Target
8866 Passwords.txt
-
Size
39B
-
MD5
a9f0f60ccc841224d3ec9e595f6ca706
-
SHA1
8931d58f3fb4317c52907ee4f3309e79c876bf48
-
SHA256
79301f8f91cb01e28ae449ad90b080bba81fd1faaff1a31f713e32d221b011c8
-
SHA512
a6faf99c5002b6d8bdafefa9b2a33c3e900f377398dc540d0b3c389d06e381ce3de7fc6c7bccd335d92ee92b55bc96c071b35630298db53b9276ac518a1eab0d
Score1/10 -