f83b56cd20e8a9f5db7bc3b8bdff8b65d648e995a9e3d2d30702561c62aa4341

Sharing

Copy URL Twitter E-mail

General

Target
Spotify.zip
Size 1.3MB
Sample260502-tmp12sbz9v
SHA256 f83b56cd20e8a9f5db7bc3b8bdff8b65d648e995a9e3d2d30702561c62aa4341
MD5 e944a8dbc5f0112d65347678051e7fbe
SHA1 5c3edf52618986542368af7c3d18d97fcd20d5d2
SHA512 236403862510aff0935cbd635afd3a96fe9ed8fb56f4028e291299d1df0f273df962c5f55f1a12d8ecc34040301f155b40618ae67b7f36aeba4f625cf0572a49
SSDEEP 24576:uMCdOHVaVrBYO1farTgLf3r1b8JBwE7NBVDHy39CAFE+jbJwIJaJ23ybQ5H:HHGBYQfarML3r1grwE5rTA1jbJXenbQt
TLSH
T1AE55339972DCEFCED984243E61C1128780613A6A58C33C473839D929F6DBF76E678B44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery ransomware

Malware Config

Targets

- Target
  Spotify.zip
- Size 1.3MB
- SHA256 f83b56cd20e8a9f5db7bc3b8bdff8b65d648e995a9e3d2d30702561c62aa4341
- MD5 e944a8dbc5f0112d65347678051e7fbe
- SHA1 5c3edf52618986542368af7c3d18d97fcd20d5d2
- SHA512 236403862510aff0935cbd635afd3a96fe9ed8fb56f4028e291299d1df0f273df962c5f55f1a12d8ecc34040301f155b40618ae67b7f36aeba4f625cf0572a49
- SSDEEP 24576:uMCdOHVaVrBYO1farTgLf3r1b8JBwE7NBVDHy39CAFE+jbJwIJaJ23ybQ5H:HHGBYQfarML3r1grwE5rTA1jbJXenbQt
- TLSH
  T1AE55339972DCEFCED984243E61C1128780613A6A58C33C473839D929F6DBF76E678B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Spotify/Skbidiist.ini
- Size 59B
- SHA256 07b783c11f1ad5f560669ce9192352b4797bdf0b91ba9ac29cbd960e97d0d335
- MD5 05d12f75686c8463467b20aac27f1d66
- SHA1 670525365892906db31cfcf4a6fec73d60e365e2
- SHA512 dcf6270d3b22b405451068e4dcf7aa168219d823de4e5b76552325f0ee8aecbed9498491ca5028dae5224319a713a41a99eee25b97ae5dc65b479e772e420c48
- TLSH
  T13CA002CB4559018802D4420A4674699110C0790A02243028406B52921BE49D1247B357
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral3 behavioral4
- Target
  Spotify/Skibidi.ini
- Size 59B
- SHA256 bbe80b41484f53964fa5ffe3465d23228fddb4138364e291ed142642f1ef266d
- MD5 f9e40091643753fc101c0c36a1cb5ceb
- SHA1 9064f19c2648a546c23949b6740f9ac2b0bb8950
- SHA512 cd8ed5f8a2415e66ba892045bb416f7ea2229142c95ae23ce558f4ed511c05e5db2f5aa185113b03454ec84d1de3f53667b43892fcf8113a7576a69b2b9c9817
- TLSH
  T179A002CB4558418403D4420A4634699111C0790902643038406B52921BE49D1147B357
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral5 behavioral6
- Target
  Spotify/Spotify.exe
- Size 3.2MB
- SHA256 3779da625ecbf157a5509cc2215194c4bb1b88e2366b9f04983ae2b97a21186b
- MD5 55c74312894e30cc432dec6a2803e449
- SHA1 989594b7c75f7f4eb0b2a1f998c2259e816af1f4
- SHA512 ec17eea5b312d4464258a1e2d7ceb8b4a35da041b983b096fb4f6e18f1ab312d198522eaaedccbf1dabd87d5ccf1aefdc7e8b007b4a97582a624b7142dcba99a
- SSDEEP 49152:cBq+p99rLq7x9StOB8OFx/3dDKQ83/EndpKjR:cX3hmvvdDKQ83/mCl
- TLSH
  T1BEF57D13F2846D7ED05F1A761967E624983B7610672A8D3EB7F0084C8EE5F402E2E677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Spotify/only.this.ini
- Size 59B
- SHA256 07b783c11f1ad5f560669ce9192352b4797bdf0b91ba9ac29cbd960e97d0d335
- MD5 05d12f75686c8463467b20aac27f1d66
- SHA1 670525365892906db31cfcf4a6fec73d60e365e2
- SHA512 dcf6270d3b22b405451068e4dcf7aa168219d823de4e5b76552325f0ee8aecbed9498491ca5028dae5224319a713a41a99eee25b97ae5dc65b479e772e420c48
- TLSH
  T13CA002CB4559018802D4420A4674699110C0790A02243028406B52921BE49D1247B357
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral10 behavioral9
- Target
  Spotify/Новый документ.docx
- Size 6KB
- SHA256 827271412a146f6b3dbbe1023dab0ff1dac418fa880ab74fbccae199a0b63735
- MD5 ca0d9ef66e1268f5b6b539a3d25d843f
- SHA1 506b89c0e7e8a42a639abd1e66c03917b3fb269d
- SHA512 7946a5a0357f50051c498c304a72adccae2b32d01336bd8e8afad5fe782a04a9ab880366eab63c088e631653a2d440370cb6f838ebd5dab61276201b8771fbd8
- SSDEEP 192:PxzoWUqH2eL+skXGjWLUHg8xFc67+YyRb+Ac:PZUewGygA8p7hY+b
- TLSH
  T19CD16C38FA439295E307A8B25C97B687D60D6983EAB9354F0388F3C449E0C854767DDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12