9b8fc0f6dca4b30bdfbc22280a3890122cee024054de467a814b6832c65905ea

General

Target
Downloads.rar
Size 1.9MB
Sample260619-2anapacz81
SHA256 9b8fc0f6dca4b30bdfbc22280a3890122cee024054de467a814b6832c65905ea
MD5 429e51060f65146b87a1063982156624
SHA1 aec21609a9a4dea0fa5bf702855473033b8c583f
SHA512 2ed37296bdb92bcad69c4f135a730082e39b24d52a3e1d044ffed7c8d74744a68e68b250567ddec1e5e7c558045c7be155d491c2ef9b265d61c747511dc4e53c
SSDEEP 49152:GDxh8tQn0g0slhHMrttsl+552JF1trBYzG4wWacx7Se5:GDxPcwhHMxEy2ZVYzG4j3/5
TLSH
T1DD953378570005D1AABCED853B392A9271DDE667094F073FF24675B9A65B832C033CAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  InputSwitchToastHandler.exe
- Size 60KB
- SHA256 f3db25d88d1e673652c69fdb17d8caa75fdba8e5cfb44ed96cea08651f1ed10f
- MD5 5c2cbc9b245739e76d6e842ad68231ec
- SHA1 d543b7cac5c55aba02b93821012ff7757a9e9d55
- SHA512 54a0f3d0a89d5d30043f2cc701f0b36610c17c74ccbfd1b9269008bbcb9d98418cfb502ee4af2f229a5b3c5aef67b42bb2b578007cbb3e1a27d653e6109652f9
- SSDEEP 768:U9twN5KbdtVr8xefSw4wWqe94Wo2d2yrM0u3stSPeU0MRMe:etwNioxefSw4wWU2ZLeV
- TLSH
  T156532A58AFE35C99C45A8638CCB1C296737ABC084B30C1AF53D8795F6EF4AB03615993
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  mapper (1).exe
- Size 184KB
- SHA256 f5a490ccfe702064c6ab6d04b8e62d809dc356c8850eac0952b5e841d74feccb
- MD5 ff782abeac99f24d4d9f9f7c65cbc198
- SHA1 f5f02bd2bf90497a4581547b93ea3ff0b3f63d75
- SHA512 0e03ad4d6f2815d96a6b96af6492b9cd43218cf6fe3f413831778eb2e54e57feaeff81a3fad3e32b873e639e88c120d54e6ba523d511321a1e22962741ece4f3
- SSDEEP 3072:DozzD0PLd12D3H1M7CPizUVZ83+KU296TRn:Doz4LdQr1M7rUVZ83+r296Tl
- TLSH
  T199047C47932400BCD0E7D23EC9B75D95E6B2B8594B615BCF43A082660F737D06A3EB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Downloads MZ/PE file
- Executes dropped EXE
behavioral2
- Target
  nogibogi.exe
- Size 2.4MB
- SHA256 cd8280550f4384a0416135be36cf5451f3ab942983390fee260af8a043a5043a
- MD5 b91f4bdee3cde6b996d19918a3fe9fe0
- SHA1 c53fdc95887885a1cbbdd12669997377de0c510b
- SHA512 9879e1b5f7c36990be725850daf2a7ae93a5abe3d7e594336482491c14aa70a15b376e95a0c28262f744f030b2a85328a6b2847c13d3c45995f83090e8421d65
- SSDEEP 49152:sRJB0AExbkYsP2xaEJcOJ3d9AUgdPI/GoLd/HM8x7CF9EncErU:2Iu2xaacUviC/HL5HzCF
- TLSH
  T14DC5D0D2F3E88845E027753857416D0FE2363428031197E7BF99499E8BBE9E0CB7AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  rename (1).sys
- Size 25KB
- SHA256 35677b90f6e212bf3e953b7acf43b8f4696d940f2bc2713b75da228b8bef5fa8
- MD5 275ad0abae8300c4bcfeed9cf83e2b13
- SHA1 fbaac0ef36d27566554ec75102cba726a1e9b5d5
- SHA512 9217686b76b3e5f45608f15e0595dd8537b01dff991e288873211a051d980407ebd4782cafb7050a64b716f6c76bdd90bc7459fd369d0df230a01834f9bba597
- SSDEEP 384:wfhJqtCT9eOvwIM3hDeJDWsY/ouGQApg2xX/KA4IrNCWuAsuJVCMzwl0/g5rNocO:yMtCTnyxKC/oumxXyA4GCWu9eYSc6M2
- TLSH
  T117C22A2A6181A6FFFB67603A8373D2CFF9257041232698DF09B8DD1F234A9C52138D65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  static-spoofer.exe
- Size 115KB
- SHA256 d8d7fdb20fc7339db8b337c9b4c6ff89e884a240a09ed5a7f4ad6fc1f7a6dc3d
- MD5 e1b50a1e5fef2f7d4f008f09594a45dd
- SHA1 72ae4989735cb87f2078f931c59968c87695fa6b
- SHA512 54b5fc0d11017fdb3c87395fefbf8ad7d039cb82b212ced98de81ba08f0975ad0ccf2f492667a6e83b1c7c39fc7153dea1f99543eb49f63c085495e767f366a1
- SSDEEP 1536:oyNpiYTRpsG2zt2cclYUQ7ctEmiHpAuSggo+WDm15hoWiICo:oupiYtKId5tQ4WDm15piN
- TLSH
  T122C3D332F65D716AC21999B4FC8A8D42E712F88A93647FDB07840DA20FD5DA06F3E5C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Executes dropped EXE

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5