9ffd3fc71d1296ebebddf3fc92712d95697fb6029a5e69bd471b0edca4cb2d8c

General

Target
FZ1.2.4.7z
Size 28.8MB
Sample260507-db5pcses9v
SHA256 9ffd3fc71d1296ebebddf3fc92712d95697fb6029a5e69bd471b0edca4cb2d8c
MD5 07fc506fed593f2774cfd60b16e2bb68
SHA1 5e9611e635e844ffea821cab803a1492a87519e0
SHA512 a0121526053b6a0eb84ab0847e4e4af575263a450c6c1770b109d566b5683a48913c9843c9ee648b82d1e24785488bf3fa2e036fd538cf611b050badde3dbff3
SSDEEP 786432:qD75S4ZRYzqyjoJCcO7IpMMfIo8Q1eoZHTruWO:CS2ujjoJdO7IpzfP+
TLSH
T1476733BF66EFCC500B6590050D283201FD6296399E6DBCC8389377C5B5D0B8AE67ABD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Module.dll
- Size 33.8MB
- SHA256 e4cbfae16e0cff0463307d2ed74823989839dda98fa0d1a3c844a647eb451851
- MD5 b3b8074baa477b6e88d057414d1adb12
- SHA1 44f72540a319e130fa1c1b31b7d4f62831e97ac4
- SHA512 0e9409a99a3b2420745bf96730559f12f8896dd724682e6c83f534f094eb29058e7fb5e506c40d559131d029d648c4e06c5ca0b7cb4563c04f4c223e4fbf3302
- SSDEEP 786432:Jp8SCjHNu4ZXxm6OfufycdG+vkhWCIc3t6t:JuSKEQBm6OGfycuWy
- TLSH
  T1EB7723A799D562D0CBC30544638E17CA22D1A87AC5FD5C293AC73C03AA20FEB558DDB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  fluxusz.exe
- Size 3.8MB
- SHA256 7ae0856d6e13d019cf623c1208107f35497b2847cd06e9f6e55c7fdde16a97a9
- MD5 575ee2b849e5e6097aedd8f58a9d65a0
- SHA1 378ea69a0686b1141d3c15fa61d9ab99243688cb
- SHA512 60b82dec9c69631eea98837a3a0f10d0a22e1fb210ce7de446c00f3d550fd3e14fd75447a4dfbcf5198b069a603f9cf73cd35c131871936dc1a2a88e0af12111
- SSDEEP 98304:kIXSRhgO15R2vRdpiQivqNTqI6TruWA6BASz4:9XSTz4vRad
- TLSH
  T1E4166C07E29581F8C0AEC079C35BA637EA72B8C94534B29F5BE40B113F26F50AB1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence ransomware trojan
- Downloads MZ/PE file
- Checks whether UAC is enabled
  defense_evasion trojan
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral2
- Target
  scripts.lnk
- Size 1KB
- SHA256 6f3353354cff42e95ef8790577a95cda32533b382d8adf114e13822016d6e113
- MD5 c058a6177890b6c49b5a8e329396c72e
- SHA1 8e3db24aeff63d714d501154fbdc25f6583e08f0
- SHA512 430dcde2e8ac4cd77c28dcb365dcbdab9a19928dee4c15fbb75ab8c2933d83eb362311074770bc53a02859610afec1bf887cde656337843f22cb3935311c1742
- TLSH
  T1A531E0036E921715D3FBCD7096A672154E697E667D82AA4A5490810C2C3290AFD35F1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3