2abd841d390b7cccf6aefe79741a0d6d0b1128cb0aebdc5d533ee055e2bb723c

Resubmissions

24/05/2026, 15:17

260524-spccasb13v7

09/05/2026, 17:33

260509-v5damsa16w8

Sharing

Copy URL Twitter E-mail

General

Target
Cute_Program_v2.zip
Size 609.8MB
Sample260509-v5damsa16w
SHA256 2abd841d390b7cccf6aefe79741a0d6d0b1128cb0aebdc5d533ee055e2bb723c
MD5 8886267fb78b4422fb496cb9602b7f65
SHA1 c9eb46f0e507b142b9239ed1d09b08d6a617d9d2
SHA512 8e736e861c76b5aa8b6fb3c0f50c857188becaa991fe692daaba4b09d32594a04ae3b71bf67355a84dc6870a6e7692d36ea1ffbf3437d42ed0ee732ae444d429
SSDEEP 12582912:Mij/SQEOUCzOeitS1cWcJyzuD8Hey8uXeZZvf71lTfvYXaMyCmb0:T/HAqcZ8SDCiCeZZvfgXai
TLSH
T1FF6933E17BCE83E3DC5F3A34621B2F6266686945D13FC62336B0D0CB7554AE0DA98346
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Cute_Program_v2/Click me.exe
- Size 291KB
- SHA256 d7d55f6cbd54dc9659a243072e680364a237e150e140e80d302116ae3dcad92f
- MD5 9852ea91fb255fdd3b05eb4ab2d626d8
- SHA1 9dc754feb7e5f3049cd548563d592e0ce0af78a9
- SHA512 a09da17aa5694fa85221b4b5453694f9f7133bc35e71ad943ccd1f8257bc4dcbd004effc37a873674b7f2d19b12fb31d48d45bebe96b4d80a6b9477c82cd8e4d
- SSDEEP 6144:ebJhs7QW69hd1MMdxPe9N9uA0hu9TBTYnhR1Rn+SozRS+LRT6yOgdD1vM6:ebjDhu9TlYhLhVyRlTxn7r
- TLSH
  T18054DE9BB2D01198DBF482F6D592174AEB7170761B15A3CB5BB853B21B1B4C68F3C3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution persistence ransomware adware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2
- Target
  Cute_Program_v2/Delete.exe
- Size 290KB
- SHA256 5670463ef3c3b6d8236e0724deec83119f0062310f49f4ef4e9b43b4cd8f229d
- MD5 dcedb7a8b3e609cf87f8d87e4d9f1ab5
- SHA1 68dc8c11c02ed2c75ca4e1133c4807b5eda71fa4
- SHA512 b1a1d3cf19a24b943f2e462a38b2348732dd421643532e5db858abf97ecf34bb4ee2d4255fc4bc453c435fe07dd79aabb1df90055c7e967ce826e1e486934f41
- SSDEEP 6144:mbJhs7QW69hd1MMdxPe9N9uA0hu9TBDJnhR1Rn+SozRS+LRT6yOgdD1vMm:mbjDhu9TdJhLhVyRlTxn7j
- TLSH
  T1D454DF5BB2D01198DBF542F6D592174AEB7170760B15A3CB6BB853B21B1B4C68F3C3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  Cute_Program_v2/_/DontOpenMe/1.exe
- Size 119KB
- SHA256 a007fbb7154129d26d9f723f9b65025e194a19ca461beb6778313d26dbbd1f1a
- MD5 f848fa38f32ec118b523559f204a9b55
- SHA1 d6fd63d55d4a42c5b4156166cc4d95c710d6d095
- SHA512 bb29163d9dc37522585171417ee2fa30b89f53cfee0865912583f1af52b1ab1bf5b95b545b4d620dfac5e392bdc0b904cc417124777dbe7f74a80c9191c774b6
- SSDEEP 3072:m2sMWkzbJh1qZ9QW69hd1MMdxPe9N9uA0hu9TBfcXNo:nbJhs7QW69hd1MMdxPe9N9uA0hu9TBMo
- TLSH
  T12AC33966B2E01198DBB581F6D9921706EB7074361B15A3DB6BB853B31B2B4C68F3C3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6
- Target
  Cute_Program_v2/_/DontOpenMe/after.exe
- Size 119KB
- SHA256 e543d3d6e6f4cb0168de26c7b4cb45bf1e781914fc897a5b001fb9101102a62f
- MD5 2fa3c2a389f5048eb6315a32699c2a87
- SHA1 7418d7f0cbb59b3e25564adf237cf7c5755804e2
- SHA512 8e1b95fb1dc760cdc076aae308ff4ff3456ac070271ea49d88ffcd8c59e5388c1516343219a153ec1194a3f44ef9512d76b3aee136fadac0b23b4037b1c3a092
- SSDEEP 3072:G2sMWkzbJh1qZ9QW69hd1MMdxPe9N9uA0hu9TBfcXWf:HbJhs7QW69hd1MMdxPe9N9uA0hu9TBHf
- TLSH
  T17CC33966B2E01198DBB581F6D9921706EB7074361B15A3DB6BB853B31B2B4C68F3C3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8
- Target
  Cute_Program_v2/_/DontOpenMe/comman.exe
- Size 123KB
- SHA256 80e5944be9628e0af298df6e5efe0312a171ead5f0de6ae81735adaf462461cc
- MD5 bce9d5fc8625e317295cd5d5ac0b956f
- SHA1 8fedaf052ee82357d250ab21166bff5764bd2d73
- SHA512 32b6cff8c64acadb13cfff0f1b5e4055cff993453a8d4311366e884dbe863a6e50c5f3340d951ad18e2c563596c7803f451127ab75e3a5ccc34a711f1fd5d3c0
- SSDEEP 3072:R82sMWkzbJh1qZ9QW69hd1MMdxPe9N9uA0hu9TBfcXFS:fbJhs7QW69hd1MMdxPe9N9uA0hu9TBYS
- TLSH
  T1B0C3496AB2E01198DBB581F6D9921706E77074760B15A3DB2BB853B71B2B4C68F3C3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  Cute_Program_v2/_/DontOpenMe/pic.exe
- Size 119KB
- SHA256 77df2f90404e046425399ed9ca3adb77048a6652e333b1b9ffda042c93765fe9
- MD5 f5ef9b38ca6484ee2c4523897fb26081
- SHA1 d1dac72c62c36e86ec4b8822c05530ee8cc93dbd
- SHA512 b491489e1fcffb15ba990895fcdccbb1ec38931a1b792e29892d4ce13f7df449d048ce2aab52b962803cc280bb9baa07221639c898a417c40a2224b4091a19e2
- SSDEEP 3072:C2sMWkzbJh1qZ9QW69hd1MMdxPe9N9uA0hu9TBfcXQB:jbJhs7QW69hd1MMdxPe9N9uA0hu9TBFB
- TLSH
  T11DC33966B2E01198DBB581F6D9921706EB7074361B15A3DB6BB853B31B2B4C68F3C3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  Cute_Program_v2/_/DontOpenMe/q.exe
- Size 1018KB
- SHA256 047a635416de6e9e5b9d413c34198273c1f1422aa91afcd49c6088f1c292bea4
- MD5 2497fad6e785dab21750e8ff1a79fa35
- SHA1 3e48725d70d3a61905290e5e6d77b75be87c5e9d
- SHA512 a3c97908301a5c575e85decd7f64980cc4afdc41e8235765b939366f1e7386e50ac5cf3dcb9aa9a217af0dba30a086347d04223bd7274a243ffd4ca14d2f9a7b
- SSDEEP 24576:Om5sulQV7Bf5eUHngzv3xynU96at5gxqSBdq7oHc:E8QV7RZov3xY5P47o8
- TLSH
  T1F6259EA4AA82C2F9C56034B231BA6F313AB69E5913300AD7B7743C751D937C22D7D64E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral13 behavioral14
- Target
  Cute_Program_v2/_/DontOpenMe/ran1.exe
- Size 931KB
- SHA256 8ed735a08863194e0448af6b8153f87813377bdb93770e7f83abaccef7af99ed
- MD5 eb4745967e1354047aaba74904443dca
- SHA1 67e25a258e09cfaf9dcd105b0509b8f6d26511a6
- SHA512 685694c841dbd94171da1169361766b364b8bb4329c45c9238bbbc3d67e78b75fdea8f38d102ae27dd1d30965bf7b486164a15d48a3e227038598f9aff0840cd
- SSDEEP 24576:Xm5sulQV7Bf5eUHngzv3xynU96at5gxq6hLWrTxO2:N8QV7RZov3xY5BhLW3
- TLSH
  T10915CF51F78580F6DD9130B221BEBB77693AA568033049C3B7A82D7D1E926C27D7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Cute_Program_v2/_/DontOpenMe/st.exe
- Size 931KB
- SHA256 d279a1eb183fefeeac683dbecaa3b7c677bcb15630e5567835fe4da3da2bbe4d
- MD5 0c631589439b40875dc30bd7c2f67047
- SHA1 1e3f92c1f2466b994048386ecb2689d4c60173e9
- SHA512 b94831e4acb1ce19496462ee84cde6da10c50e1579a88e63c9d213f0232723d74f0effe7abb7ca4588bd35d6faba9b80e3ee8f11b34fa563dc5b94911aeab036
- SSDEEP 24576:nm5sulQV7Bf5eUHngzv3xynU96at5gxqhhLWrTx0s:d8QV7RZov3xY5ahLWj
- TLSH
  T1B315CF51F78580F6DD9130B221BEBB77693AA568033049C3B7A82D7D1E926C27D7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Cute_Program_v2/_/DontOpenMe/wall.exe
- Size 931KB
- SHA256 54669a21dafbbddf6d668b79d94f9777ffe9df392c3b75a9cee7d171946da117
- MD5 92590e8a2c2a022426152a46ce939d26
- SHA1 da5f5501023cacd59f361a05dd074fb048d5782b
- SHA512 b6cf4516fe93f748878b49f413816be11073224f07ba3ebb29bc59a8fe90faf93fb9c5821977d078f6eff9ad56614e4dbca29a3392bd5e7435da3eb2526bbde0
- SSDEEP 24576:Xm5sulQV7Bf5eUHngzv3xynU96at5gxqchLWrTxBV:N8QV7RZov3xY53hLWx
- TLSH
  T1B215CF51F78580F6DD9130B221BEBB77693AA568033049C3B7A82D7D1E926C27D7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery ransomware
- Sets desktop wallpaper using registry
  ransomware
behavioral19 behavioral20