61fda4a6b34df94bae9b353af76cdbf679e50084b1cedf23fa670c045f15ba49

Sharing

Copy URL Twitter E-mail

General

Target
06242c945e9e456b7ea4f7ea712d42ae18f107c582e201227f2e8959ec5f1224.zip
Size 15KB
Sample260604-rdeslsgy8n
SHA256 61fda4a6b34df94bae9b353af76cdbf679e50084b1cedf23fa670c045f15ba49
MD5 c6103edeecf2ba34788996370b42879d
SHA1 b2d8c06197e9475c2e3eaf66a4cf146f511a97b9
SHA512 7f98d39feb02d2553916839f86ae40963eb6fb9ff7a62e8bcc85bab06b0a6a20274b43526a03b03f4f8388d0d3e8f060986927bf2ee1ced65a50815c44472451
SSDEEP 384:7FzlswsaHD77TMQJncDUi7KyPP+Kw0IkhBqy2Ud:7nbwQN0+JOBqyd
TLSH
T15162D094FD7C683F676EF82231E48EF9B93F3985400F1450D6065A881A5186B22FF934
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  06242c945e9e456b7ea4f7ea712d42ae18f107c582e201227f2e8959ec5f1224.zip
- Size 15KB
- SHA256 61fda4a6b34df94bae9b353af76cdbf679e50084b1cedf23fa670c045f15ba49
- MD5 c6103edeecf2ba34788996370b42879d
- SHA1 b2d8c06197e9475c2e3eaf66a4cf146f511a97b9
- SHA512 7f98d39feb02d2553916839f86ae40963eb6fb9ff7a62e8bcc85bab06b0a6a20274b43526a03b03f4f8388d0d3e8f060986927bf2ee1ced65a50815c44472451
- SSDEEP 384:7FzlswsaHD77TMQJncDUi7KyPP+Kw0IkhBqy2Ud:7nbwQN0+JOBqyd
- TLSH
  T15162D094FD7C683F676EF82231E48EF9B93F3985400F1450D6065A881A5186B22FF934
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  06242c945e9e456b7ea4f7ea712d42ae18f107c582e201227f2e8959ec5f1224.zip
- Size 15KB
- SHA256 06242c945e9e456b7ea4f7ea712d42ae18f107c582e201227f2e8959ec5f1224
- MD5 74758738e33603fa96a3f00c934f68a6
- SHA1 70510cba7abcbb651de5d2f6d2d82197ccdd9017
- SHA512 e28aabbbf0dd434557cc8c66ca323eb75debb899d382436483e47eb62aa3cbbb3171301e639caff44a6c5a2dd715c402c5f40302d0da70985df1115c600af639
- SSDEEP 384:6x5vTEDVQOjwb8Bi44YEB+dHCFQTSSGb1DrdRL1+MTTVh3NS:IIhQOli45EsPGxDXRdVh3Y
- TLSH
  T18C62D106A14885BCD1B63EFBA457FC290E9BC09063D592E039B84D16881ED25DD07BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  PHOTO-558719252.png.lnk
- Size 2KB
- SHA256 60ba5d7103867026b0a36bb33d4d327f77b494f0541607ae8f6fa1ca0279d222
- MD5 23a385866c18d31118635dff38b1f630
- SHA1 cb1820283981c6f32db15d4220b8b8d39da5fc9a
- SHA512 e7a357a56e67a6bd0860eb97f84243836eb4d6ff85052991aacf84247605b3a69dd1044e7ca9f2a2b167744af9317e782c2b8f7746339bcb76d5284491e679bb
- TLSH
  T1F8410E2827E5032DE6B78B34C8FD232AA5297911DA26DF5F01C442994971111E967F3E
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6
- Target
  VIDEO-422225213.mp4
- Size 13KB
- SHA256 72fc429136beb6c8b9cc5ddd23d38efa02cee7eb26b85879cf27e716f925e50b
- MD5 2590e1529479fe84fe8e40d1f97d4fd6
- SHA1 08c0d9b864e38862f08ea24c73da3a7c1641d918
- SHA512 15419405e8b3b0b3878f987ea8a7b0dccac978e225b934f084b81d8447c40b3ad6ac5c3ca50abd2ae5ffdb16d89e884811d728a719886c512386ebe2df70570e
- SSDEEP 384:ox5vTEDVQOjwb8Bi44YEB+dHCFQTSSGb1DrdRL1+Mo:WIhQOli45EsPGxDXRu
- TLSH
  T1AF52D00AA14849EDD1B23DFB941BFC150E9BC0D057D5A5E478784D258C28D15EC07FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

Checks computer location settings

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8