Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

pacjsworker.exe

windows10-2004-x64

1

pcalua.exe

windows10-2004-x64

1

pcaui.exe

windows10-2004-x64

1

pcwrun.exe

windows10-2004-x64

1

perfmon.exe

windows10-2004-x64

1

phoneactivate.exe

windows10-2004-x64

1

plasrv.exe

windows10-2004-x64

1

pnputil.exe

windows10-2004-x64

1

pospaymentsworker.exe

windows10-2004-x64

1

powercfg.exe

windows10-2004-x64

6

prevhost.exe

windows10-2004-x64

1

print.exe

windows10-2004-x64

1

printfilte...vc.exe

windows10-2004-x64

1

printui.exe

windows10-2004-x64

1

proquota.exe

windows10-2004-x64

1

provlaunch.exe

windows10-2004-x64

1

provtool.exe

windows10-2004-x64

1

prproc.exe

windows10-2004-x64

1

psr.exe

windows10-2004-x64

1

pwlauncher.exe

windows10-2004-x64

6

rasautou.exe

windows10-2004-x64

1

rasdial.exe

windows10-2004-x64

1

raserver.exe

windows10-2004-x64

1

rasphone.exe

windows10-2004-x64

1

rdpclip.exe

windows10-2004-x64

1

rdpinput.exe

windows10-2004-x64

1

rdrleakdiag.exe

windows10-2004-x64

1

readCloudD...gs.exe

windows10-2004-x64

1

recdisc.exe

windows10-2004-x64

1

recover.exe

windows10-2004-x64

1

refsutil.exe

windows10-2004-x64

1

reg.exe

windows10-2004-x64

1

Resubmissions

23/08/2024, 16:00

240823-tf47dsteqe 6

23/08/2024, 15:32

240823-sy293sseld 4

23/08/2024, 15:18

240823-sp1d5athqk 8

23/08/2024, 14:12

240823-rjcv7sydnd 7

23/08/2024, 02:33

240823-c17dta1cpd 7

23/08/2024, 02:11

240823-cmbpzszelg 4

23/08/2024, 02:00

240823-ce59mazbnh 4

23/08/2024, 01:37

240823-b1992a1dmm 5

23/08/2024, 01:24

240823-bsm5jazhpp 5

23/08/2024, 00:51

240823-a7p21awhld 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Application Files - system32.zip

  • Size

    200.3MB

  • Sample

    240823-a7p21awhld

  • MD5

    9e13c0126b7f608956f951212b77efdb

  • SHA1

    7c486a0f69ad4f21be45954df7bdc2f4ce9b0dad

  • SHA256

    b9af69ac821a649f211c99e3edf32a76a213e9450b5e972a6cdda5758af530dd

  • SHA512

    15b133823bf17179d3f806893480c77082d8a6442d885cfd5f1c77d8fdd476cafe63201fa030d60dbc812d9c9be8e8db71d83a714a4c40d8f59dbf28b9528ab5

  • SSDEEP

    6291456:nENHZIGVuWulErUOn39qvc00IYv6EbEJY7CqQubcGX:qZRulE54vcbv6tluQGX

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      pacjsworker.exe

    • Size

      41KB

    • MD5

      93bb7fd221c8f130cd212d792ebe1e14

    • SHA1

      c1aefba09f8afc2264539567c4e34fe37b86c24e

    • SHA256

      e339daea239add9709782f6d75ab749bc0ed4e7fa456a0efe87cf4da73457805

    • SHA512

      4cdab9d45b4e1adfa21cc1c15aaed538eac0e01d6959e1da936dd9db68f28f4bde7d20a9c4ba4f27d30477d16a5b0dca55c766c1b069ebca427d848818b6a4bf

    • SSDEEP

      384:D43db6Je9FSqhcTbWaYAW00DBRJRBmo8R9zhyVfR:DJcg8cM+01PrmoQ9zSfR

    Score
    1/10
    behavioral1

    • Target

      pcalua.exe

    • Size

      116KB

    • MD5

      9b33aad21b1d2a8c117b599f3ebeadb5

    • SHA1

      2690d9f5ae1fbfa19c3fd66316e7b2abf65df831

    • SHA256

      c826bf1f231ac39bf5c2f083cab48f0a8769483824589e52c8035fc3aa0d4e37

    • SHA512

      d7ee1cb790d009c2cf2dbbd5d3548fa4ab04225e9edfdbee4957136b6c69b25f148bcd681f08574f9a75dbdd8c36a8f3a7603b98ce9b9be1e7fa4fa7d47ab4be

    • SSDEEP

      1536:sNYK8r1RJrIhJ2ao/UC8Qg7qHCxJm0e7lLV5AIp9w0PrQYFq73wN:syKluaZ8HCxJm0wLQITwzYc7U

    Score
    1/10
    behavioral2

    • Target

      pcaui.exe

    • Size

      208KB

    • MD5

      31d9da37f07d177a55e69e5875827c2b

    • SHA1

      7fa55b5bc8227da6ae40715dba1f7bdca42696cc

    • SHA256

      1726b01171ef0c2b3e330713cfa6684aa32c17ccca08233eff81d4abd39e8524

    • SHA512

      8399b70930c1c37c2a4c413e2b8e127aa0dc05d64107e840082f6f5aadb5d5fc6f9bdc86b2271d732b094c5674628794e74df192698d60bd69d89cbdcf96cab9

    • SSDEEP

      6144:gqCXlRyAljSOgHhRBwK1vBayi7OcC8ox+wZQ8:cXlRnlmtzBwU52cgmQ8

    Score
    1/10
    behavioral3

    • Target

      pcwrun.exe

    • Size

      36KB

    • MD5

      df06f3bdf78a2dfd1c7f48cd54f40ce4

    • SHA1

      bbd944620d432f6475c8451f00e1acb52051100f

    • SHA256

      60987848ced4817bfbcb69ae834a7df2101197e8ab3030d98c8ca8724cab4972

    • SHA512

      56b5f90a597147d5a9dfe52b33125481f3eff884d0473415afeb22be6b6bd66f82d7e202a4b3be7878d33a8d8323d081133c126dbfcbdc155d66ad1c3854f3ac

    • SSDEEP

      192:Wv/StLihJBB52cmh4qURp/atFwSeDbQ/FX1l3gY1CmHWpgW:WvatmLYhfURRowSegx1lrvHWpgW

    Score
    1/10
    behavioral4

    • Target

      perfmon.exe

    • Size

      176KB

    • MD5

      dc82b13ee9e63fdd16bc155397023d23

    • SHA1

      0330473b7db023ffbe70432d87d918b3057645a4

    • SHA256

      9655ed5c3c77eaaad4d063d2a821aac311a06513e8d0fcec7eaf2f412cd54af2

    • SHA512

      f5c4a941fcba3c98bcd324ca080557e3f89e775f57432c521255c3c102a2788f9142fc834702d300c2777fd919ecd6bb121d0b0d6399d862043eca2b7c220bec

    • SSDEEP

      3072:V7M3TjP0LT709dZBybTKT3Pgifo21ii39wB4BZwJdGghtYIo9piswTogiqQKy349:V78jP0LT709dZBybTKTIifo21ii39wO4

    Score
    1/10
    behavioral5

    • Target

      phoneactivate.exe

    • Size

      126KB

    • MD5

      a03a3a5a097e3a9eb8ae2743824cd172

    • SHA1

      f6bc4724600460712339580af253b90f9c981f03

    • SHA256

      8585164548237da64fda697126999f4da4c874b592ccbaf1cd9559004908573d

    • SHA512

      12fd557cce05b0dc9be85840f73714752d744a127b8e81b32994b1cbd16478e1b42de9c97f0b75ce9f329545dd271406c441d9f1cccc8d8a9a69d631c2ca5664

    • SSDEEP

      1536:M9acSEUarKbSCXK4DsypvXGPjzof5WwFek4sumWuzuuucq5ULg6n6Z9j/+2PUzse:qSdarHZ4DsmJ4k4Kga06nM5cge

    Score
    1/10
    behavioral6

    • Target

      plasrv.exe

    • Size

      28KB

    • MD5

      7135a5b1463fdac09659707c59dea1e0

    • SHA1

      eed40ef0cdf90c54c388d322491bc5d0cadb4e6e

    • SHA256

      aaef1b8870efd4dbbc79e416011a3363edcd58138904cc829f72ed4ca115871a

    • SHA512

      ddccd05bb7264f1f9e917e9e24d5bf1d6e1c4574e0e86c4d5a9a045922d6747675ea19d514e6472542a160365916fede9e9668ad2b389b427ce32731d5f3db01

    • SSDEEP

      192:BIwJn9jj8/kjTgWGnfDOnfpw3yOtH5WWeXW:ywrj2k/gWCWpwz4WeXW

    Score
    1/10
    behavioral7

    • Target

      pnputil.exe

    • Size

      200KB

    • MD5

      ad6157047805a6e9eb9345ae0c8760d6

    • SHA1

      3fa6dbf98a769ced269554c4fda0d9b1ebe4de28

    • SHA256

      8430676b4065855163239807c574b5bed86920f8fa97aef2017dab3420103bda

    • SHA512

      d8338d1067a5fc0c1e3d02cc78a7f44b2b0f967b5848a484ce026c69da8cfc96d8823a0927465637c1fcf8ce127a54d7413eedd7dd7627f1990f7881ca431efb

    • SSDEEP

      3072:kLilPTJupfI+IVQWPGHQVwmK+ky8dRXJsmWr:1TJut1/0odRXU

    Score
    1/10
    behavioral8

    • Target

      pospaymentsworker.exe

    • Size

      68KB

    • MD5

      9897e5abd7586ee41a3437e234a384d9

    • SHA1

      9298bf77c0c660b253d99933b99a9e745fdd23be

    • SHA256

      7e3f640ec938f52f209d61e10dfbc188ccede44e5bcfb2ee23fd3dfa712b3375

    • SHA512

      96df9d3c1acac07d10699db9a806f712921f4d30104497bff7f340702b15e21c3686c06ab6ac3965d5eedf7bc7a427327ee81af0c715c870d2450914493e486b

    • SSDEEP

      1536:8hs10h56bm6ChXY8FRSbAnNid8VIV1MBB1cJIexE:8SI5OY9nNmoIV1kB1cJRxE

    Score
    1/10
    behavioral9

    • Target

      powercfg.exe

    • Size

      116KB

    • MD5

      733c97e8ecf2ca6fefc2836cbecf64a5

    • SHA1

      f79e2c89d7f71712516ea7f70f684210e62c0b67

    • SHA256

      19e9870ccc87ddc696eac1a10979f7be15403cb884b7c2f604d4975d3cc1b887

    • SHA512

      25f7a7c963335c724d1d49316cc52312c6c3773905a274f57b3a048ff1b12e6a53d01dd57eca7fa177ea827404363dbee02a5c140330021eb3e357672bc37970

    • SSDEEP

      1536:CjcdiI1HJ5eXTwY7NHxAw81iMuuZl8sVRByoI3QwjHkGb698NM+GM4umkVNi+G:CZCr6NOw81iMuussrQoVGbG+rGMBu

    Score
    6/10
    persistence

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

      persistence
    behavioral10

    • Target

      prevhost.exe

    • Size

      52KB

    • MD5

      f4180a9c9a506036562698e7907976b3

    • SHA1

      54968048e81d47885ca95c39d08b4356f3256c21

    • SHA256

      38dc2f79eb4f6b7b7dfad2b7143cdc5ce0faafbb32b53f63f4d1f540d397cf34

    • SHA512

      04869be6c3c6ca4ee2ad45eb49ef1c4d9d74821dd85143eb2b6b3e2cfc6251a39269b18506ee88294cfeff226902086b254c4fd02193cccfa4aa3a843f9d2946

    • SSDEEP

      768:jmJf3dpaoUxZIg9cMkshRG1rF0XBZ4bATjLTDNsUNyxX:jmJlpa+/shRG9xbAL2UNyxX

    Score
    1/10
    behavioral11

    • Target

      print.exe

    • Size

      36KB

    • MD5

      b694d9d775ec5090aef1d6edb300260a

    • SHA1

      7e85a15853036c2cbe2c87eccda4fa9ebbb5b1aa

    • SHA256

      aeecaedeccc9dcb0a8d910503f876ef8b9a75f0f2dca1363992befa0f6d11c15

    • SHA512

      c387a9173d90f202ade7fbbe8c9ad045a1f81d3ddc03b059c11bd42b7ea75867159376cfb672ebee213a36a0a51182a062112e5aacda3a68faa30ef46e0fdd6d

    • SSDEEP

      192:iBjFGzw9Bq7O8jzCHXNij+iiv/hOHtinGE077m1WTUW:qCw7qNz8iAv/UHYn4q1WTUW

    Score
    1/10
    behavioral12

    • Target

      printfilterpipelinesvc.exe

    • Size

      620KB

    • MD5

      83ee9a84a06e7dfe217cd0b5fa8c0f9a

    • SHA1

      791025af80f4996dc233153ca470516f40b62f24

    • SHA256

      76cf6f235c87ff7f6df66b7751dd322c0e0939c586eec7f8bff4ebed64f1565f

    • SHA512

      ac7fb86706ae848dc7e3443766e9f9b099c39695c05282e05964cbfcd5e5f1f041c019b795bcfabe93085c7d84331d100458b73c731ad675dc0d3985efef8640

    • SSDEEP

      12288:N8hwOXFSchZ4nOnEsxpXoxQewWa9vVgku153/rS47T4KuCLWTV:ah9sc/4n+JpXOQxWa9vVgkaF57TfLW

    Score
    1/10
    behavioral13

    • Target

      printui.exe

    • Size

      80KB

    • MD5

      63ac3af5adde5bd3c82fc1e59b9bcf6f

    • SHA1

      24d46fcfd77e3b93a2db96582a5d117fd671ff3c

    • SHA256

      037389320fdb682f69bd7e6ab6230fe076f9d1d75545835afc8215af70daf3f2

    • SHA512

      7ed3053276f826e14ffb5e256e4c65297f410627ee8c8ae5307aeee0fcb5e84295d9807b23567685030f062fb36fb8b35db6198cf48a5e63afebbbca5adc668f

    • SSDEEP

      768:keiAnGad5vI1iQfCIWVM9G4qW4ne+S/ly+PKAoXRZX6fbX57UWkCRPPA7/Qn8:scGaVIPd4n+lbeRZIbSQPPA75

    Score
    1/10
    behavioral14

    • Target

      proquota.exe

    • Size

      68KB

    • MD5

      fb7ffaa07544ce2a7263aa1d0087ebb6

    • SHA1

      9840bef0289fef913e4f3c364dff751c359ef9fe

    • SHA256

      4c06554634e0019b258e564a365b8f564d88f41366497bc79b5627eeb8415e07

    • SHA512

      30967f3ec90d03f261581efb4441002750b6f9bfc38294640a7527b0abef00bf7d5284053a577dd51847a86260af0a2cdf3cee1b634007c704e765eaf85878bc

    • SSDEEP

      1536:Qps4VRz5zM6kOXch/vm4SbxmT8z851zGZJP3TN+6U:QpxFzM6HsFfTn4PDN+D

    Score
    1/10
    behavioral15

    • Target

      provlaunch.exe

    • Size

      80KB

    • MD5

      00851730b16ef74d7a9722c390bc8efc

    • SHA1

      08b32e6b9b8f58292fb80ff1c4fc1b5dea6dbb73

    • SHA256

      a73c99fc4ecb037092ca6cc21ae86e878bb0318c1d3c622f800dfd8f43b8c27b

    • SHA512

      ab44bea8a3d3cc2253f97a85302507d03f542887f1f5737a4b96f73f8cf58a86213b6ce98442574281dd23f899d05f58a57cc2abefcdadb6b7290306244c042d

    • SSDEEP

      1536:nS96XpuvKD77TCMKhXx9ht6DEf6WoCKLKguXJrySZ3+jcirrTnNJFDdF:nS96ZhHKzJCIQgi3TnfFhF

    Score
    1/10
    behavioral16

    • Target

      provtool.exe

    • Size

      112KB

    • MD5

      77fa181c7dd8904de95f6897f5360c59

    • SHA1

      c65a6b94bf82e36705c3e7ee47da2309b27a34f2

    • SHA256

      284a37478a48710da30d7421da1fc9207a81252d6180f23a75ff1e4050535df7

    • SHA512

      d769b769b6926c43f0d88401c113722c7ee8b13d9fafecc01ed5e0dc64d9a55c50b7577cb8d4a319c485ccd441ad70ded4be7afe560f18bf4dba563c86c40733

    • SSDEEP

      1536:M2J5iEabY2Jchm5d+6kPGrnHA3aJTMdBz0W9nEufAWdvhEgfm1QU3KMnnxvFY:lnwUyGPGz3NMdluozdZBf8T6MnnfY

    Score
    1/10
    behavioral17

    • Target

      prproc.exe

    • Size

      41KB

    • MD5

      4a47d2f3b06080a774c3348dde4d71c2

    • SHA1

      57e9b50d9d7a1c9088e73276093a8cd7448ceacd

    • SHA256

      551f4829ca2f52981e8e47f2021b5d7ab478060b4ed77563c3d410f36bcf14d6

    • SHA512

      cf6f1830f529ffb83fb4428703d8e6e4f0796b1a97a10693bab7b61028e31fc52983cd7e421810c33d3022a9c805edb0bea24ead613b5d37658bcde798f76d9b

    • SSDEEP

      384:/yQKdBZ143roDWSVwHWmaDYgWJYDBRJN/P/R9zfBP:ITAoDWSVw0f1PVPZ9zZP

    Score
    1/10
    behavioral18

    • Target

      psr.exe

    • Size

      404KB

    • MD5

      795a10e6c149ce11c7983c2e823317e1

    • SHA1

      f21dacef56a78d7ba757bb0108ce738c723bbe04

    • SHA256

      a5b37c6be43e7c026db6438da723e15af9dbba33efe70f20cb809ef7c1b28a36

    • SHA512

      fe3bce27f64d25316077e524b897147ac5a64baace661eb1c50af096b8c74796466b1270cabcee2966eb8121bb241a72fb0e387791baa6f5c67610dce7458998

    • SSDEEP

      12288:Y2jD9BvliNjdvi9md0Uo3jdyyGgtZ4+WEIB0hNqK:PDz6Ji9md0Uo3jdyyGgtZ4+WEIi

    Score
    1/10
    behavioral19

    • Target

      pwlauncher.exe

    • Size

      52KB

    • MD5

      d0743203ba4eb04ddffdae63c8d6ded7

    • SHA1

      117d5503b2bccf3c00623f5a6fd73213b871ad0e

    • SHA256

      4e8dbb3e89dfd69856c0cce34a6f5960aab1e8d0b42c9dc991accb249e8ec044

    • SHA512

      2bcf60617c5538b466b7263d8a175b9d5747c10126d1c62794b1330a4664885a28a0a1746da5ef26d0727b32bbb8b7b9d2515683e1efad036a1659b4eddb86d6

    • SSDEEP

      768:JRLAuL35vJLgZmdagPZxMGE/GIfUMF0T8QSoe4KG0srxOC2fc+:JRjL35xUcTxgnPF0T8G0srY5fc+

    Score
    6/10
    discovery

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery
    behavioral20

    • Target

      rasautou.exe

    • Size

      40KB

    • MD5

      b6793a2eb9e3a51851580f453de3bedc

    • SHA1

      ee2fbcd55aea116fe1dc6f0cc74e2e84a9e9b2a1

    • SHA256

      8bb21e664648e04a9355e9d6d816d79cf761ab714e0285fa241e3e08ff540fb4

    • SHA512

      ef11869b3a4e4e3e88cbd9a418bf120f48bcdeb2d38f5e2114d0d1d58db302e75349bea02654a9ee76a5564b346b0338bff555f6f19393aea50af54f8c6bd510

    • SSDEEP

      384:TiYtxw7F3MZ8Rn5I/7qu9YWbDkr8EWnBW:TiYy8Z8R56Yr8V

    Score
    1/10
    behavioral21

    • Target

      rasdial.exe

    • Size

      44KB

    • MD5

      9dd71cbb543e25c009d03bcb47db3e6a

    • SHA1

      e7b44f8a5a94b0eaa417a737dcaa44d51e7a4601

    • SHA256

      79f382f6394f12b720537acd3502c4b103a9e0fe4b9afaca0db1969491d407f3

    • SHA512

      6ca4571e9c40aeb6d3b8936501e4383dafab58a9d9ff5601d5d2f6ebdae4fd2da873cd8452cba769d4eb6544dada829d9b58261d77a57f79fdce4008e502b5f4

    • SSDEEP

      768:Zn2q2svRdkhMZ6qLiriUJRWBrNSYiqmtJX:Znb34hMUqLiriUJRWBJYtJX

    Score
    1/10
    behavioral22

    • Target

      raserver.exe

    • Size

      156KB

    • MD5

      f78767496d6c74fc666ff75eb7a690c5

    • SHA1

      c27ea3afb2675d6648f1c647fb6becf33516b286

    • SHA256

      af20453ae1334e4e504b16a6dcb09ad89616e789c97c9d3921e0eeca088f41f6

    • SHA512

      3e57b59e7464d8d8ce2a8cb0e47d4b53824a6490f1d48402e22f1fe8222457f5567d3df62342fb9210d57cf992702a4913c166bfde174b4fd99601dd158a408c

    • SSDEEP

      3072:RNjbYWVApJS7hxG+jZAO9Bjh8wq78yjiM4+BDnOXyLFCcLPxfkzH:RNjbYWVApJS73jZAG9hHqgyWM4gOXyLE

    Score
    1/10
    behavioral23

    • Target

      rasphone.exe

    • Size

      56KB

    • MD5

      eae5ab50b7fdc35fb957533aa069c67d

    • SHA1

      1f01548798d0949ab24487183b310e02ababcb70

    • SHA256

      c372369ede10c6ee658e1a941b884f62baf937d2b5fb0dc3b67b6f2d52ec9b45

    • SHA512

      568b1a81b06c0f566b8a60a3553ea7494e65b2a981007ef4dc3411ae773923d964a9d729bcd0eeade56776ff2b260b69c565929c162af60f83012e5b7ba04f5e

    • SSDEEP

      768:SC6LofmRo1L/486iljxtNGLI9wcRw7QtXHYlkd:SCBfwoqexfVbYud

    Score
    1/10
    behavioral24

    • Target

      rdpclip.exe

    • Size

      572KB

    • MD5

      bbc39c98725cccc907dece0735076ba4

    • SHA1

      ff7d85fd4db7a8341b7a36f545b6031adc8707f9

    • SHA256

      07f8d70c8306aaa12744519c58428bed4c6612d0af2afe75ac36dea92868b0e6

    • SHA512

      c867f3e3763ef76bdbe650a9ff7f5a0b20f9203b0900337def94b65696a6fab867cbbad68c48f41de083b814f353c3174095b1c70cc1850993e2114ca356a5ef

    • SSDEEP

      12288:liWUxs5QTlI4WyKtEQaNvQOph1lkSnv4xv8SomHAvQ1Awr4zZKcOG58pmSqzJkbc:G+5QTlzWyKtEQevQOpuSnv4d8SXHMJ2C

    Score
    1/10
    behavioral25

    • Target

      rdpinput.exe

    • Size

      208KB

    • MD5

      12d2b34edb06a69e80f0cb461420e9d1

    • SHA1

      12b8f92d315eac62d711d499673f8602bbddbc1a

    • SHA256

      6bd0f269bb5f3ad4bcbb47831a76007b05260df5dfd592648a2c7370285e7140

    • SHA512

      081e21a08e33ed112278ed8d2dbf37deb676e7d666aaf01631c6da079fe3d225c5bb452c3f2fc7b63dfb22da159260e6cd8b3a3e149eeac86ae3bf96675ec460

    • SSDEEP

      6144:osK7bxsv1A60XuOi1wOqNprZNpCWoe2/hzu1UMFf:osK7Nsv1R0eOi2OqNpfpCWV2/h61UMFf

    Score
    1/10
    behavioral26

    • Target

      rdrleakdiag.exe

    • Size

      72KB

    • MD5

      b3c8ccf3abc6ff9a3d11184cc327ccdf

    • SHA1

      5d989cf55724d1587c815bc311f1f34affe2bf35

    • SHA256

      277f93c69b3e1780d348eaa7ffaa88f7acae571726098b61cbf2530edb62dd2f

    • SHA512

      e05937f91615d4a290083181c8e2aa325aa2bdba76146c9ff4cd3a2b959e5087ad2feab5ebefc8e36adcb8e13bc5d539a50a8f6b90b1ef46d5266049a34261ad

    • SSDEEP

      768:wqWv0P8iCnNSY43Np0kLS8fjAkxbAIJslTToKz4cDko6TNDo2NWeufz:wvMvNykbfsB1GMQo6TNWeu

    Score
    1/10
    behavioral27

    • Target

      readCloudDataSettings.exe

    • Size

      84KB

    • MD5

      9d6a3131601d80985789c70ea86e17bc

    • SHA1

      8d756053f70a236999100680cce218330d655957

    • SHA256

      5a66c2405950721eacb91aeb322b1c3a7b50bb0c626c287ee3cfc6b8f7fb1410

    • SHA512

      f64245cb5ac33f039eba93f6a78aa5ac916e4d20a5099584de13833ae133fc512eb03ce1c9918d05964f9d2f73e2ac197a5f60dbac7a36183b1c076ef48ae26b

    • SSDEEP

      1536:wiPNY+MvHCKPr+pm9qh2rqsY2gTeWjUte0xZ4uqPlTkQH2RPrO3S:wiovbaRMGsQeWAguqtTkUXi

    Score
    1/10
    behavioral28

    • Target

      recdisc.exe

    • Size

      208KB

    • MD5

      d6c12f81fc5355de02f4daf1534bb266

    • SHA1

      9e20fec524be611a76e6bd3df09f525117cba893

    • SHA256

      f6a418f7e59c0a06080a1cc81ab11bbcd6d9b2b3e86492157a124ad008171522

    • SHA512

      883bbe2a67f572b4bd849ab4eaf0bc247ec9577a921a17c2aec68b82926e840b396f90b904f62a0a54c73d3f31620ca0e6025209fd5ddc1731510ad33d98ad1a

    • SSDEEP

      3072:hZlvcHvU+kITsxe18rJo4E1HlNVHXXBAtEAuegPO8evTq2VF:Z+kITsxearJo4E1Hl/HXXBZFegEv+2V

    Score
    1/10
    behavioral29

    • Target

      recover.exe

    • Size

      36KB

    • MD5

      622bbe68d0866f2869e8777a1e311268

    • SHA1

      d334876166e006f4abc821cd23adbfef98587dcf

    • SHA256

      215d8a1ee5c0da23c063e49ecc1304f9f8a6e3adc88f715f986dae9cb5ea72a9

    • SHA512

      41cec85cddb6ced90b2152b948dd9a327f3e3ba5f14c70447f005c20a2ddee0d28c9fb9fd139a03a763bf69bd8b633fb9aa11c2c71a3d072ac48441fe2425f3b

    • SSDEEP

      192:FR2j+5yz8lTFtZeSOy41OKdg4KtD4rJMm2jWUnWC:6+5e8tFWzf0JaR2jWUnW

    Score
    1/10
    behavioral30

    • Target

      refsutil.exe

    • Size

      1.7MB

    • MD5

      2d374432108c1972ad607835862acf9f

    • SHA1

      0c2aa2dcade3a3a75acedba9b6bf07bed32d05bc

    • SHA256

      0361b088b276ee91a6dcd701ab76b366330bf558b79abb2e3599d57115eba53f

    • SHA512

      8efd61a29f25c462be6314eca0ba08c3b48179859544f85573e841586daeee231293c2b55f553b5fdd825257bd9c73ad2d69c806176b272eb5e0969bdd4d08c9

    • SSDEEP

      49152:ZTnVzP7aHjBS/JxaRn7CCT6E+pNCJ+8aJ57NdF:zYjRnvT6Z

    Score
    1/10
    behavioral31

    • Target

      reg.exe

    • Size

      100KB

    • MD5

      cdb58d0bcabe76afc60428f364834463

    • SHA1

      979f280b1226e064cc79020b25fb8c40d9fb0008

    • SHA256

      411ae446fe37b30c0727888c7fa5e88994a46dafd41aa5b3b06c9e884549afde

    • SHA512

      9b0e87deb62b37dd3a4df8267beeb442cb0ffedeb810dde4929a44b4c16568d3491533c57b85eb3a0192116d285c5c35184f391c50b4ac6532132a6c1a6b9d50

    • SSDEEP

      1536:zb8oTLwn5PfXasYvo3GOKd/mjX7mxQKLqmKF/1qHYEZOk1Y6:kO85PC/o3GOO/MKrLq1cHYOO0

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

persistence
Score
6/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

discovery
Score
6/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10