1def54444cab1fd17fe5acb42dd0d2293bcb9ce72a8e955bf6796d10d662c4ff

Sharing

Copy URL Twitter E-mail

General

Target
Strategi_AS_Referensi_April2026.rar
Size 335KB
Sample260423-rbjc1set4l
SHA256 1def54444cab1fd17fe5acb42dd0d2293bcb9ce72a8e955bf6796d10d662c4ff
MD5 e21e44bb8ef5c019acfb226df78303ba
SHA1 2339d0d76172ee4c62aabda60423e289203b0b2e
SHA512 02adccbee96287bea3cf3d708cb8d64ba9d6c807501e36842b4f499a51b4e5d3df8c9f6a2330bf43e568699b0c085465b8425678800e2521210ad2e0929435f7
SSDEEP 6144:YNMzlNsZZW1A3wxs7fmw+PP2TMI+VnI2SQRfq4hjCexFOZwme8+ylFLns6pHmPi:YulNbyB7fmwA+TMxnI2SQVbjCmFOZwm5
TLSH
T1B374234F410F1A535C03D5167A93F2069D83674B0AA86A0769CE8F73FA437E4DBDA4E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  Strategi_AS_Referensi_April2026/Strategi_AS_Referensi_April2026.docx.lnk
- Size 737B
- SHA256 4c7ae604ad1af90ea155865cb28fd7ccd6371f5ac172de6014b328514d4618e7
- MD5 33cc27c7b4e2b2503d55c1ff5b1991a3
- SHA1 5672a9fcce3216834b5625bba4abafacc30e4e80
- SHA512 5d5bbba2e115ab80b9620003af027ba8a8e5cd28b7267c3d8b7ee96c4b8acb8de990a18aab810833dc7e9d2fb745010597fa0bc237a2b02f77696e51173af9c3
- TLSH
  T181014C010BD65715D3314E72447F9370C6B6F802FAA6879E818067958946600BD3AE3A
- MD5 SHA1 SHA512 TLSH
Score

9^/10

adware defense_evasion discovery spyware
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2
- Target
  MSVCR110.dll
- Size 91KB
- SHA256 c69534bb3e6d4e1c9b21f9e4745f6fb002cbcd3ab83f9ad208eb7bb135401062
- MD5 cf40dff69e108487781dde696e28a847
- SHA1 e9f6fdafe545b8ac43fc3c2c47fcf308c53d1711
- SHA512 b5794ac4942aecf29f469221fb8c216d518e39b76abcb2586a34091e83b41b5c8d913aa5381608077604ef5b20c1693396a3281e898baf1c1e49b80af2d98079
- SSDEEP 1536:DiEssvjKlHrJWhXgmqMcMpwoepcPUsnkemNtuXLBLBblKGmgBsWZuVZcdwYjck7y:DiE1KlHr82Mp/UsrmMLBLBtmau6wYjcx
- TLSH
  T1BD937C01B5C2C035D8BE19390868DA765B3D7950DFE09DEB375916BE8F302C0AE35E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  hhc.exe
- Size 49KB
- SHA256 fafb6ffd3ffcf414b702354f62a5216351af4566ed61ece7784846a6938bb8d9
- MD5 dd935626ca573d778a34d74281d9338f
- SHA1 37721f60a3e44972c5baef93cb152989ce0cabb3
- SHA512 788794b18e718c0fd208421fe9c1cc48c49ec491385f859fbbe15b349619e1add84bf7706e1b449368544a86e959eaea248c9637095e48dc9f8c54b62778831f
- SSDEEP 768:dfig6hSNmlRQvO/ynqVpWNskmjIKjMpQo8o3t8o:dfD9mlRMO/ynqVp87mj7QpF+o
- TLSH
  T157336B02BEE85161EDD2927065B8E61AC53F35314F6411F7E9500EEA2CB4BD16AFE03B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
behavioral5 behavioral6
- Target
  Strategi_AS_Referensi_April2026/_rels/info.dll
- Size 251B
- SHA256 39bdf92a70a1bb4f07e58cd1081f80fced85df01c1f14a56ed5783104c902439
- MD5 365d80130ec10f3d854eda5fbb592ef4
- SHA1 b8fadbdcc79837e31e924fcd8c9277b89d979e20
- SHA512 b9ffd3a4cb4fe85a51bd1419fa01da93969127735bd25d8047d8eecfa82f977e8eb2d4d3864fdb1e18976df94ee4e20231deb541506e06355cbe8852c6cae7da
- TLSH
  T18AD0920EA80D32740B0654FAE274760A4EF2D4052D295850DD4725AEEAED02567F70CC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8