Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

1

IM NEVER LEAVING!.zip

windows11-21h2-x64

1

IM NEVER L..._store

windows11-21h2-x64

3

IM NEVER L...OS.txt

windows11-21h2-x64

3

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...1.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...1.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

IM NEVER L...0.webp

windows11-21h2-x64

5

__MACOSX/I..._store

windows11-21h2-x64

3

__MACOSX/I...OS.txt

windows11-21h2-x64

3

__MACOSX/I...0.webp

windows11-21h2-x64

5

__MACOSX/I...0.webp

windows11-21h2-x64

5

__MACOSX/I...1.webp

windows11-21h2-x64

5

__MACOSX/I...0.webp

windows11-21h2-x64

5

__MACOSX/I...0.webp

windows11-21h2-x64

5

__MACOSX/I...0.webp

windows11-21h2-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IM NEVER LEAVING!.zip

  • Size

    514KB

  • Sample

    240812-p9yjgswdqb

  • MD5

    fc94b520618819338e96e7a4ec8715e0

  • SHA1

    af3f893f0828b1cf1f8e76a9739c93c1bc32f5e3

  • SHA256

    f516ab25ca5ccedca8a8d95d7efa6e0984bdf41091a79097668462aee2d5bd9d

  • SHA512

    8d26a998d37a884d6932bd71b35d59a0eafb48ef96692104bc1465532bb67c5a84d67f941dcfe210bdd6dc6f30c47066578befc2b67441ff29ec24f534b9aba8

  • SSDEEP

    12288:5oUKpCPDiCtZWPiUh23HKlrO5gwxrIJ4rhrzw:5qpCPWCtYPiUh23HarOXrNtzw

Score
5/10
discovery

Malware Config

Targets

    • Target

      IM NEVER LEAVING!.zip

    • Size

      514KB

    • MD5

      fc94b520618819338e96e7a4ec8715e0

    • SHA1

      af3f893f0828b1cf1f8e76a9739c93c1bc32f5e3

    • SHA256

      f516ab25ca5ccedca8a8d95d7efa6e0984bdf41091a79097668462aee2d5bd9d

    • SHA512

      8d26a998d37a884d6932bd71b35d59a0eafb48ef96692104bc1465532bb67c5a84d67f941dcfe210bdd6dc6f30c47066578befc2b67441ff29ec24f534b9aba8

    • SSDEEP

      12288:5oUKpCPDiCtZWPiUh23HKlrO5gwxrIJ4rhrzw:5qpCPWCtYPiUh23HarOXrNtzw

    Score
    1/10
    behavioral1

    • Target

      IM NEVER LEAVING!/.DS_Store

    • Size

      10KB

    • MD5

      e4474931659a48cec11601e0596ddd84

    • SHA1

      1f2bbbe16830729360c5d240b5ba7f380c8c15d8

    • SHA256

      6cc4cfa54f92a0bb0cca90b6ffdce9e3c98e7e9aa70984e0898aabf5d6f4f207

    • SHA512

      7b186648fa0f1eb9e0d8e4ec5455888a04cc54e796e2bb287a4ccb281ede893be35c2d690b697886d1d77c5c552462a2b5b68f81ef76513ee6c85834e212f858

    • SSDEEP

      12:IGX9EEX/HnXw6XFlshf8XSWKt1Ql16GAgaCaOwXlDk4OmARwOmAhOmAPwOmAEOmy:ISfnVV2hf8vV0WrLDYvl+R75HVjvl+Rf

    Score
    3/10
    behavioral2

    • Target

      IM NEVER LEAVING!/ILL ALWAYS BE WITH YOU SOOS.txt

    • Size

      8KB

    • MD5

      560f4550bc61b25140140f6237085bb2

    • SHA1

      7d67adf95176d2edbce9c467ccaca32623093b58

    • SHA256

      0a9013c31b9aca53f4d2ae083d576a185dbd2e07b90b5aa9e6f83c13532a68b5

    • SHA512

      f1ace2bccf3cfb082b64f6bcab19c2c73756dde7f4332f8f30cad75343414b95ee2a399da06f3df8ca3bba98eac8af4dc8a32aa2f5aaefcff93d42e0407191d9

    • SSDEEP

      96:MemtRhYfRG5Qep+VMBlyeSVEgiwPNc+D+U4EfVYyStgNtxlwVD8:nmtRhYfRtVcoXHiWgUeKNPlwVY

    Score
    3/10
    behavioral3

    • Target

      IM NEVER LEAVING!/tumblr_8c696247ca8d924d040398c4be61115d_e369e403_400.webp

    • Size

      222KB

    • MD5

      66981a456fcc108de30b61d2a3d7ebcd

    • SHA1

      c221f6b606b9a921e5f74b90402a395386d3e13c

    • SHA256

      bb09fd70efa2503285b0e0922ffa6f5866e38ea4996dd4d59adfc5715f766274

    • SHA512

      8aaf7013e4c2109ebea0ca516810599d508a761c5ef136f2b6d23bf8c59446fd6b77cb83904f999615afef0b9af569c707fce01dcf5334efd03c1057c860c90c

    • SSDEEP

      6144:M1QT8kU8kU8kU8kU8kU3xxxxkrB+rCiXgB+rCiXgB+rCiXgB+rCi2:MePeeeeSxxxxkMCiXLCiXLCiXLCi2

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral4

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco10_250.webp

    • Size

      9KB

    • MD5

      ec038ffed0fe7e8d1b738efd0a5de861

    • SHA1

      eb75c4660fed65faeb9f4c8c732323e107d5a92b

    • SHA256

      03a9b6a64b049973c86d52271cc41f37d08aa51c1988e358697e8b2908f5f459

    • SHA512

      f62291c4cc662f43f0b32a4803c4c9757747adc74dcfe0e2147df850eef2ee70bcfb2d8847cee84f26b3b1fba2e4635604db1379998d32d7275e8158a3d0d3a2

    • SSDEEP

      192:Yc4S6mnM4KoWlv5YsLxjXKbrUbkPZcL38kK7v1bawo4Z:paz4KoAFLxrhIJaw7

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral5

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco1_250-1.webp

    • Size

      3KB

    • MD5

      096764276463de9484e49aa29426bb16

    • SHA1

      2a2ac081f3df58e1563fbb77c3e154f2480d3b96

    • SHA256

      d8fd7cd248a176af624acf32d7bcbc4b75d5a3ca4a9f3cf0ba99e2c3a8512dc5

    • SHA512

      dba498be58d8377c555c0cd68c5dc61c32f6779100decbfc45e4a05c055392fa9ca6b8239b099d5fc1c8666cdbd690e20bad7768c4727d53923beb1870ec59ae

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral6

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco1_250.webp

    • Size

      3KB

    • MD5

      096764276463de9484e49aa29426bb16

    • SHA1

      2a2ac081f3df58e1563fbb77c3e154f2480d3b96

    • SHA256

      d8fd7cd248a176af624acf32d7bcbc4b75d5a3ca4a9f3cf0ba99e2c3a8512dc5

    • SHA512

      dba498be58d8377c555c0cd68c5dc61c32f6779100decbfc45e4a05c055392fa9ca6b8239b099d5fc1c8666cdbd690e20bad7768c4727d53923beb1870ec59ae

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral7

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco2_250.webp

    • Size

      22KB

    • MD5

      d2dda0ba077ae573ef6f95cbd33b92e2

    • SHA1

      bd4306ed93cbce3cba5f59b171cf20124595c691

    • SHA256

      f232fd4e273fe109baa1a29ac458908573f13fed12f7e9a1b9622da19077b092

    • SHA512

      3d37f2e39ab2036b5ddba6d0ecdb548ab33a79d9ea19b7277d63b5494e2d5c29ae254314fa059f148299982a9d01ef45ab856ae1b71c9ed892b73ad074af2547

    • SSDEEP

      384:tu63emE8lY5sQjvtMdE35m+f2SXHmPoClrxYdvEVEkPdZjz7xDFp6siSbz:t75K5Tjvtg+/HmPoClVY4EqdR7xDC+z

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral8

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco3_250.webp

    • Size

      6KB

    • MD5

      0e99ab27f1b22eda376a34d776787e3e

    • SHA1

      94eccd10baddd1eeb8d3b072b0d09902f31275ea

    • SHA256

      760c6916ae5e3f660f1e7dae756b8bb5c031bdf507654c946c49f51aca3ec303

    • SHA512

      055244de259400b26610389d1b1e1cf237cbfff59a5c0050aeb04b96670a0c6c33f1c5df53877d0ff3d6125002d61de3c67bb882838e4379711e3ab330457b5f

    • SSDEEP

      192:oRnFkWgeE1bCMdbRqEQxtLyuLuXc715lu:oRnshql7RuX0zI

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral9

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco4_250.webp

    • Size

      14KB

    • MD5

      07996d7b860b3ef8aae23927e5b71966

    • SHA1

      2bb3575a35f5f438bee9af3363099c178b7800ee

    • SHA256

      af8c9256afa63fdd9ee6bab9ed7e07af40f260c0ebd60936e2ded283283b2850

    • SHA512

      279bc2b1f81003313b2bad566c0d0d13d98f03e4bc6d45a5da5462acde565f429e7244b798603bdef9dad347b62ee87b040c7ccb9274e684426f6ebc67d407cc

    • SSDEEP

      192:I9WUAYpWU6JSx7guDma5QQsJbSvbfs+NPbBToJRsWcsRKXm8mDYSsacdcTpiG72n:Y7AYp6C7v5zsJwbfP12Cvm1/iGiCe

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral10

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco6_250.webp

    • Size

      3KB

    • MD5

      b6066213861f37b86867d9bd2b621631

    • SHA1

      270e06450814b89beade53d1b618321e7f030c0e

    • SHA256

      22226d1af29ae04ff1c29f77243c24bc9400dfacd4d4c1b9ab30f611412e1af1

    • SHA512

      da03abfacb4b4e6ccd35ec10d882a5d3cc5fe19b7e279363a570328077c480ccc8167b35c427e1d8860e4d2dd05281a6adafd7e91fcd345fe0c053c6cb0e2db9

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral11

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco7_250.webp

    • Size

      4KB

    • MD5

      6e691d2566aa8f6d12116468824be918

    • SHA1

      dc4e36ebb7e65824524f2a1cc082c36fa7c0286f

    • SHA256

      b84427234d216758a4bb9d70382ae14ec6da2dc17204b7fada5dfb78c41e9f15

    • SHA512

      9e6d7126e179e6acd62b11356213846b2ef72e7155f315699443ed6f79079394857758fd9e6a3889dd4d20eb73ee35cd85d527062173aa82ae190679568377c6

    • SSDEEP

      96:fCcvxHfChprA4e00UHvhVOf/Cez8aNLApR6eWWbnCAWDcnO6iSd0:fCShIprq0RPTOXCK8aZE6eWWbnwIO6i7

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral12

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco8_250.webp

    • Size

      4KB

    • MD5

      3155fdef6d17b370a7b71d8b7d4ffc4f

    • SHA1

      1df2e7ba2d20d54a20cf2d777a0996fdf3c2a4d1

    • SHA256

      ff42be08778df8388f2cbffa6e24390f6928ed17de0a792384ba36dbc1acc06b

    • SHA512

      aef2c4c5abbbe5318cb00cb59d11039ee9048b83a51320abfa51bf4968015b31cfa1191b32e4144271c6eadcefbb32985ed23a4c00672a2b880f5c4e0847e0ea

    • SSDEEP

      96:0wfFEiiv33QknbKNydeOk2tk8KpbcZKstdQ+LsfXauOCyC:0qF63gknWz8KRGK4dZLsfX7P

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral13

    • Target

      IM NEVER LEAVING!/tumblr_ndbolzrktU1qhccbco9_250.webp

    • Size

      4KB

    • MD5

      e1abdb888780646affc88678aa416daa

    • SHA1

      4587fe998477577fae992e36e7bd1846b0be91f2

    • SHA256

      1b0d47a3db8418c7094ee21d8eb267735251e8cc3f573a77a8df214b6364ef73

    • SHA512

      4f065ff87b6fb8faa6e3562a2def3c986582495cfe38b8e72e886f76c0f87f63bda07246ee0eabc418a92f1b041af09b13c23481c50409e760285af81238a927

    • SSDEEP

      96:TTuDuMc6R48/XmvPeLSiqmdhjswxN1xw/uP+eSEfSKWtxvF7bt:XuDhc6CcQIbdx6/ogt1F7bt

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral14

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco10_400.webp

    • Size

      36KB

    • MD5

      bb9e1d92fc25605e12a62d9ad850c1db

    • SHA1

      306a96698d44f8815d2e4f231000f228305f0019

    • SHA256

      e81b2516bb8192c4d6e0de1f42f2d516cf8988d0e0b31eba24df15fd2000e2bd

    • SHA512

      4b5d64bb6ca5905a954e44e31bf51b62b49e195cb0429ef16529defc0baafff0168767a916eb34d8a60dee51f07b1c15e6f57d3f2fe09fd1021e885146714c6f

    • SSDEEP

      768:shY/hDYsf5n1X/Rc71gcOz0HWSNAEfUweo9CyYOZ4RUtX:Z6sfJ1PW71/1HWKIs9HYO4k

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral15

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco3_400-1.webp

    • Size

      10KB

    • MD5

      f533c58a2e13c05ded601ca454c486d3

    • SHA1

      9bda7dab938e244c251ac09dac2350706721a62e

    • SHA256

      0bd56fcb9b6f99382696bb6e3ac388de5a759ea902741e3d71d8eda37b995597

    • SHA512

      3a478bd3dbb06f6fe85e155a08e79392a6e0b87c3b3e75128762d69596331e9287f9e1fbd90ffa2af615f0bcf44d38b04ea26a1c99be6728ca0696055c23a7fc

    • SSDEEP

      192:7UULyDBbym0IANV/tcotwsSug7XULoVUWAGfwUFUG4TmLkkiunOQjweDS:oU+Dpym5OV1tNSB7XULoqRG3FUG8/k/U

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral16

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco3_400.webp

    • Size

      10KB

    • MD5

      f533c58a2e13c05ded601ca454c486d3

    • SHA1

      9bda7dab938e244c251ac09dac2350706721a62e

    • SHA256

      0bd56fcb9b6f99382696bb6e3ac388de5a759ea902741e3d71d8eda37b995597

    • SHA512

      3a478bd3dbb06f6fe85e155a08e79392a6e0b87c3b3e75128762d69596331e9287f9e1fbd90ffa2af615f0bcf44d38b04ea26a1c99be6728ca0696055c23a7fc

    • SSDEEP

      192:7UULyDBbym0IANV/tcotwsSug7XULoVUWAGfwUFUG4TmLkkiunOQjweDS:oU+Dpym5OV1tNSB7XULoqRG3FUG8/k/U

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral17

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco4_250.webp

    • Size

      30KB

    • MD5

      30fd71ed9782dcabde6858b6dc503ccd

    • SHA1

      0ea21318e9904ab3a40a131ec752f691e9d0f357

    • SHA256

      f16ca31c3044c07b62389b4c9285df45979f1345f0d5cbf08239f0bf810ae9e2

    • SHA512

      acc88e4f78af84d6daf5f0875ae6dc24b181e4bb98dbcd99cca4b8bd21f377891411e32717c0010e998100cb9e67294650a9c890215df268dc4a3e1ddb442135

    • SSDEEP

      768:4XHIyvMmYUdPAHYt2rfIitamK3ThLtY2Ss3/Hax+fdhw0XPM4TMaTgLPM6:4XH/vdYUdYHWUgitO3ThhYE3/HM+1ZXG

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral18

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco5_400.webp

    • Size

      19KB

    • MD5

      9a4a110918d8172303e73e0f246f1295

    • SHA1

      4ba843c5cdd163e9af94160976279ca87260d5e1

    • SHA256

      1373417df37b8f1b16c5acbd5bbc6fb8b63fa3dba9cd5695aef918f312725d6d

    • SHA512

      39256fa07cace8b9688bbe1bfe92b355498e22542b457b33aea04535398cbb5ae99f5dd85e0edfcb86abf11795629b5e6f0e4440f896f73172dfbdfd0fb3790f

    • SSDEEP

      384:8q7zIcR22Hey5JtMrJ78pZqc8X7iSRo3yXJ/Ce7QB7GIZAM7AK3YYO6On:8q7zd22Hey5UhGMoyZBscyvIYROn

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral19

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco6_250.webp

    • Size

      14KB

    • MD5

      418bb08934b31fb4cc6549e3ba4ce63c

    • SHA1

      207cd3e4ab335c18f3a7fe9bb4287c3040831bc7

    • SHA256

      3a572b59be75b3f4c1f84802996616aca86571a16ee74b46d45cd016a847d578

    • SHA512

      9a3b03d175d6a3e0a2aa69f82b7a1df128b52210a2242c22fae15a0b25689b87f0be511996fabddc8a641122d741f0091a39619e316b9a3b44e2cef5bb16ee69

    • SSDEEP

      384:4F9aNXMcon35j75kauilmUwBs/nqBdzutvbuG:4Fw+5nF5kNVUCs/nUzutvj

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral20

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco7_400.webp

    • Size

      4KB

    • MD5

      1b1f528aa6f5fedc602472240fe5ad9d

    • SHA1

      129320651fe9937ddcf5db938f03e4df3f87b6c7

    • SHA256

      d1820df3fc0ff12da47b9f9194e18a19bcf1731cefc0f1984d5619617d213f3f

    • SHA512

      882afc730e920cd2bd759d6bdc8d61087f5d771944a418e5ab2be263a110cee65f6ac49942da81ce9e09f277c089acb35df1d7c102e4ab34f61957eafbd545c8

    • SSDEEP

      96:3dGJA8M7nQE/+TsHtHfLCBGzdX7scEql6+oeWPOqTtKoI:3d/0E/+oAGzdLscEql6+SbRKx

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral21

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco8_250.webp

    • Size

      4KB

    • MD5

      21727c71f1baa55267b1c7df75ead66e

    • SHA1

      d3bc7b614dd1dc0b5d49cfa2ca271108e5039f51

    • SHA256

      ab02c2b801c850b961dbe31a2a91f40b148eb5a9b3df226092eb05344a91415c

    • SHA512

      b44ee3d4c44a26fd932b2a83e933a2625abe4dbde1cd4e1dcc66070f4c1ee7f1beaa4a9ce6cc7ea7aa61dc06e682e6cca693f5b0d00a5aeedc908a63f4c105ca

    • SSDEEP

      96:iDcP7w4L00IwoZOk5bW3L2Mza+WwYyLBYYgdoIjOXo:iDUznIwo63/ayLBdcoIjOXo

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral22

    • Target

      IM NEVER LEAVING!/tumblr_ndbos8REDU1qhccbco9_400.webp

    • Size

      5KB

    • MD5

      369fd3c4f73cdef98f41b3ebc9f9fac0

    • SHA1

      231110364295b25bb7ee577d99be695aa3d01601

    • SHA256

      34cf23dd7e902db7f3a0afd0c49fad466cd63099836ce4b2a8b6700e566c0158

    • SHA512

      eee1a0b9c18fc0fa0701ff850cdbaf1993d93ed34f6a3e0bac1ebfd29cd8acb19f6508007ca580d915509a9ace0d2352d6609914a751ef09099d273e00004fc1

    • SSDEEP

      96:UT7uiEPPrjIkWjSqtwbmdzypaPhVrnMqEzL/CQeoOTAX6gAzb5Y:gqiEKcb8hh0L/C6qgyb5Y

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral23

    • Target

      IM NEVER LEAVING!/tumblr_ndbp92G3n31qhccbco4_250.webp

    • Size

      303KB

    • MD5

      c47021c543ef84df5b441855787869da

    • SHA1

      f830917083e6150a347a5247429952e96e387146

    • SHA256

      bf29b431066714e7db147f47054327fe05996148128d64444ff5adcf89565b1c

    • SHA512

      e7b9e5014abc2ba5d399d310ab7249d54e848e8d719c5c0a84adc67509cb20109c37e2b0b3b22d4e13721e4278def1c47113f192335f1d904dbff0f42e3af285

    • SSDEEP

      6144:LLmZD52kR34DHSytcOpEJHLimIsq9YCQLsKtqmEJ:nTQWTcOpOKfQodJ

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral24

    • Target

      __MACOSX/IM NEVER LEAVING!/._.DS_Store

    • Size

      120B

    • MD5

      b9a94cc8f4aac450fb21641eaf065c6d

    • SHA1

      0bed7e90c2bade9763fa18f1fb4441d31f91c87c

    • SHA256

      2f380f4a3d05a8d90c2106f50da75064e9ce57a598599dc5404f8f69a0223aa9

    • SHA512

      f1e82573db1da08be076ab30e7d8cff350e15d06765e1bb74e313cf5f93e1df6921893a3589df51e6b18538c21a9df6d3f23fead170e9b3c02993f5b5d4a2f4d

    Score
    3/10
    behavioral25

    • Target

      __MACOSX/IM NEVER LEAVING!/._ILL ALWAYS BE WITH YOU SOOS.txt

    • Size

      574B

    • MD5

      99244baf0fb11f80c5055fc97304b34a

    • SHA1

      b837c50e411acb14c6d93c985ed564b3c45bdb73

    • SHA256

      4e862408c0ea0c86e79caf27ffb6cd7c37b5949ad69101b24762d05db3bc795d

    • SHA512

      21cb9ba72c952e019b27248b44b51c596d6479eaa65b57d6542c6038a4e5151d39e2e275546335e38fd3572828de1032969f2a4442ecef3a587a23d1c9190bda

    Score
    3/10
    behavioral26

    • Target

      __MACOSX/IM NEVER LEAVING!/._tumblr_8c696247ca8d924d040398c4be61115d_e369e403_400.webp

    • Size

      232B

    • MD5

      d9dff28e5e67eb33810acf7c022832bd

    • SHA1

      f4ba7b3dd8fd704a617c1578cf70f1f8ad031f99

    • SHA256

      2891160578aece315219856b51b9c28d0a40fa8f78945f8d42a459f1090e8b36

    • SHA512

      8a5b10412477652ffb030b8d2cc1a448a356ba763261facecf41ad015a682b2189285d41a3953d0f7b56ba00b4a3daa861dc26964241a4142dfa98824c9ef42a

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral27

    • Target

      __MACOSX/IM NEVER LEAVING!/._tumblr_ndbolzrktU1qhccbco10_250.webp

    • Size

      232B

    • MD5

      39a4480c4109f26b9ec9e5ec1b21cb98

    • SHA1

      2b8f8ca87285ca9df21821d71499d77f35c271a6

    • SHA256

      57f29b29130a26b7905180357296aa74c15c1f5e43b39ad2fa79d2fd59dd54a8

    • SHA512

      a3e0adba76fd4da77711f72bc8cec695f2f906c96908418b0fc92534e91e386022ce079c151e502bdbf44564dfa3f9c855ac681baf4fb14b33c916fd6a1e919d

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral28

    • Target

      __MACOSX/IM NEVER LEAVING!/._tumblr_ndbolzrktU1qhccbco1_250-1.webp

    • Size

      232B

    • MD5

      196c6b1e763b7150e6e5fad083833185

    • SHA1

      6736e58af9facc9b42d6f13f869b731426acf0ea

    • SHA256

      3f358235b18f09b21312eb555601bb868e3536bbe2a4a35f4fff22163ab80beb

    • SHA512

      1334278728ca24b5a118c7fb21de78124c6b7e870f7272643d510e1a8bfda4d54ad48dc97b85f86fed1aa4f4c18d6674278393462d43f81ee0de4844673ef48a

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral29

    • Target

      __MACOSX/IM NEVER LEAVING!/._tumblr_ndbolzrktU1qhccbco1_250.webp

    • Size

      232B

    • MD5

      03cde05230b02a9e42b0dcc8975365ea

    • SHA1

      f431281f74e2c43e95fd063f5b5786fd34328020

    • SHA256

      1096e691e41db04137012ae3b450c77ffa894db6d7fcfd6ebb9ec49017d9aaa0

    • SHA512

      6e224a6ca01554b1b439b746d11e235b7b9b61851677791c4b6588b1b4dd352e466a074aa3cf1ebe59af109a43ed713242da01729dfa76bd33f47362661e5b60

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral30

    • Target

      __MACOSX/IM NEVER LEAVING!/._tumblr_ndbolzrktU1qhccbco2_250.webp

    • Size

      232B

    • MD5

      910c5aaa16d4486dbcc3111e3d7b0db9

    • SHA1

      0a5e67a0e1d8b90c272b5c46df4c3d9806bfa782

    • SHA256

      d3743e3611a5d78e53e06ca7eaf4b45bd6d5de533c9586be477e847a5e3ee994

    • SHA512

      4fb64e6e45c432b205203d7f956db8052113023c37a51bb82b15bb8c838bf759be755d85a7ad8838be9bf10e7f10d39cd17d76c947fd275123d223921379994f

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral31

    • Target

      __MACOSX/IM NEVER LEAVING!/._tumblr_ndbolzrktU1qhccbco3_250.webp

    • Size

      232B

    • MD5

      0c1f81bde8548c0d78fef6b4a56653a4

    • SHA1

      4228974abc0748762e422dd4605cbd4d44345881

    • SHA256

      ae108e2e38a9ed7f997a07ede4ae19ac00b12e9e59495a70571b5bd6da98b407

    • SHA512

      4f3256b1d030544a3d67a7d98f3b8dabade66fddfb0e6308ae16a78ee065619116c0a641581eae955ee52596207bb7b89fe9f6ef6d695b1c3d11e5b10196c755

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
3/10

behavioral3

Score
3/10

behavioral4

discovery
Score
5/10

behavioral5

discovery
Score
5/10

behavioral6

discovery
Score
5/10

behavioral7

discovery
Score
5/10

behavioral8

discovery
Score
5/10

behavioral9

discovery
Score
5/10

behavioral10

discovery
Score
5/10

behavioral11

discovery
Score
5/10

behavioral12

discovery
Score
5/10

behavioral13

discovery
Score
5/10

behavioral14

discovery
Score
5/10

behavioral15

discovery
Score
5/10

behavioral16

discovery
Score
5/10

behavioral17

discovery
Score
5/10

behavioral18

discovery
Score
5/10

behavioral19

discovery
Score
5/10

behavioral20

discovery
Score
5/10

behavioral21

discovery
Score
5/10

behavioral22

discovery
Score
5/10

behavioral23

discovery
Score
5/10

behavioral24

discovery
Score
5/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

discovery
Score
5/10

behavioral28

discovery
Score
5/10

behavioral29

discovery
Score
5/10

behavioral30

discovery
Score
5/10

behavioral31

discovery
Score
5/10

behavioral32

discovery
Score
5/10