734b7581f6971fcb6360f0b6ee70970d3e72f833661e3c39d8ce5b1a71773549

Sharing

Copy URL Twitter E-mail

General

Target
net8.0-windows.rar
Size 92KB
Sample260619-2dcy5aby9n
SHA256 734b7581f6971fcb6360f0b6ee70970d3e72f833661e3c39d8ce5b1a71773549
MD5 8a8734acc152a8b243ad401bad01bc35
SHA1 4231bd9171bdfc99d6f0ab6a2deeba4309ccb384
SHA512 2380a8c016e507ef84a0eda7e610b9079ff02a25acbce0710fa9ab89c8960937ba9e9a8e682130b9fdf606656c2269a38a76b3c31d58ff03f3864a6f010cf62f
SSDEEP 1536:QCIvAatoU+P76yLX1sRvMKOQo2Hp/IZRr8O5b64Z7/EzE2fy1:gvAatz+eyr14M5Qo2HOZRgO24N/wFI
TLSH
T1029302D360520F2AFC74D67BB1E1B2A8CF775C40CBAF44866A384F05BB5E9A962047D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware

Malware Config

Targets

- Target
  net8.0-windows.rar
- Size 92KB
- SHA256 734b7581f6971fcb6360f0b6ee70970d3e72f833661e3c39d8ce5b1a71773549
- MD5 8a8734acc152a8b243ad401bad01bc35
- SHA1 4231bd9171bdfc99d6f0ab6a2deeba4309ccb384
- SHA512 2380a8c016e507ef84a0eda7e610b9079ff02a25acbce0710fa9ab89c8960937ba9e9a8e682130b9fdf606656c2269a38a76b3c31d58ff03f3864a6f010cf62f
- SSDEEP 1536:QCIvAatoU+P76yLX1sRvMKOQo2Hp/IZRr8O5b64Z7/EzE2fy1:gvAatz+eyr14M5Qo2HOZRgO24N/wFI
- TLSH
  T1029302D360520F2AFC74D67BB1E1B2A8CF775C40CBAF44866A384F05BB5E9A962047D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  net8.0-windows/BoosterPanel.deps.json
- Size 428B
- SHA256 5463737eed5e6f0ceab4da08fc03b228a2b5bcd99bd087f52f1f291f4d54ddaa
- MD5 6279f042e2cf597fb2476cbba1e8453e
- SHA1 864610e3425a5ac698f596b46584f39a9da7ddd0
- SHA512 a51d8dc580db3b81be3faf2a89a1a499ceeaff7d5a136b05d1716989702390ce1a742474a0cc3f6ad1533e3c85229eca08db1a40d1dab4f132012de88ef64dac
- TLSH
  T1AFE09A29E9D80CD744F233B254368392F5B257234422190ABABF851C8F77C3B5610F6A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  net8.0-windows/BoosterPanel.dll
- Size 28KB
- SHA256 394efcd6aa38d80725149aa6851cbe687ec10c0905a455f2ed6e4e2504339798
- MD5 c7319a9f0b4c7f6e605baa9569f81270
- SHA1 18dd7a0fa44b133042164aaab5aa487b7a84a512
- SHA512 30597ff5f7a068e1556dee2bb547968b952a4721ff7119ae936291c1f722353f0eb48bc0ad7a53ffadf972aa771d22b496289be9b9b3aa1cb6c89ce5a8bda21d
- SSDEEP 384:bWKKQQcaJQdov97jZ84+60ofbqDxZwIRA2UHgJGGvDkW2B2TysHyXPjID15tU7so:aPcu7L0IqdaGM1
- TLSH
  T1C0D2C504BBFC1507F5FF0FB8997655104F76B9626E3AC2AC299500991EB6F80CA11FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  net8.0-windows/BoosterPanel.exe
- Size 148KB
- SHA256 06ef96c53bcdcce8866b303a719b1dfb64c23476e627f27e0a3ec29a210bda53
- MD5 5aef72404b94bc88d4c7b93b73be80d5
- SHA1 1bf0ec5ab3dbf1066072020a757c39c043ed53ec
- SHA512 40a367d765663b74441b2655e4d190f711690c2aa15936fbd741c78ca3490e665e0c893f6662b4a96f9a593b8d205c5eea8382a6349b04273cc547d40377671d
- SSDEEP 3072:dqeXA/4yIg9vkNPNu6H6xCYOihUE265gJb:dvgvkNFNaxmpEAJ
- TLSH
  T1ABE33B07A2A851BDE1B7D679CD924D41FB7278598B71A7CF03504AB60E73BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8
- Target
  net8.0-windows/BoosterPanel.pdb
- Size 17KB
- SHA256 0181f431b28617f1e08db8af3b75aef774fb154b9a75c6acfe3db8448f196db1
- MD5 c4923df098d657b934b80f3f93cb7127
- SHA1 a87d763c1a1e5ed86092f9ee8eb1a66d1355d330
- SHA512 e2c360ac5eb03e76d8edee4d26299c59c375df95c85b8b7b7885a94b03c49fde03c8626a1fd67963d9beede5fe96513a9e82fa1e4582e861d1c4fa88515913d4
- SSDEEP 384:GNZ196XFENzQjOwuapYZ1ZPch12A9d92MvCP7+QmeKwPLdTHEflq9fxvjbimVlFY:U96Xi4J92tqeK4bimVlsd
- TLSH
  T16282C437838CC6A5C48129778672C68C3B34D311174AEF39F2E82646EEBF78903B5264
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  net8.0-windows/BoosterPanel.runtimeconfig.json
- Size 515B
- SHA256 89ad1ea5c9c20b6b266547ef27c0ae3840cab5642d3c2aedf06b7026245671dd
- MD5 e0f6f18f9b152bc2d8c710b0214805d6
- SHA1 ae3d39e59fd6edc05792a76cdf4f02a637f52e29
- SHA512 80a6a9ff925bd1ba6f57fa1f7dd40de962001af97f8c2477d0b502728e23b6f412c74134e33efb36ccfeb08bbbeb678beb7e2e52fad24a763967eba8cf09b29e
- TLSH
  T1BDF02069CA106DB708B937BEC62AD183EA30536B00041D96B9FC080C2F776A22112F89
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  net8.0-windows/BoosterPanel_Log.txt
- Size 17KB
- SHA256 fff8c83251d1b856fd112e698544a244582395bb76905ba0b8e9791fa9485bc1
- MD5 184d47e2939a22c789a2ec7835625b90
- SHA1 c293585d9895de34a7055baca63f3c41e2b354a0
- SHA512 9beed625a8f245f159aee44c091252c00262424d56e79cd79b9b171bb4f9e90144b92d944ed71e898f408c6d8ee9b807fa805b4a49eef3333c4e898a63d5e9f4
- SSDEEP 192:Pi/iIyiqyimqxiuyilyiQbpgV3J2sbNHSXdLv6VRg5NeL0tF:PePypyWxTyiyuxw
- TLSH
  T173829E577A6F31BFA5E54301D1BA2F8B0144342B0F97CEA622A455CA63A1F44ABDF703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral13 behavioral14
- Target
  net8.0-windows/dlls/Speedhack.dll
- Size 22KB
- SHA256 b41a0d6c241a2784aafe4564c1858d665f9375a19f3d86e047175e072a73f6ff
- MD5 ae180c4b14dcd5e8a5bf00afca131501
- SHA1 d0e0050f237167da42f703523f561a883a9bd12a
- SHA512 97c5e07dd10ce1f7a0d63d0329837576b2b94c4b55cd4bf139e778c623913c7386e45aa5296044b6cbad697af27a75e7f925bc3688386de26c02c6942e60e5ca
- SSDEEP 384:I+YgRx4s2Z4X2F/sR6oRXf9CKGRZr1NNckykcBPl7iU:Ijhs2ZmdRXf9mrUBB
- TLSH
  T1C5A26E6CBB5905EDC452A0B8C577AA27E3F238161B6253CF43A0A9391FB73D15D3AB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16