General

  • Target
    Four_Elements_Trainer_v.0.5.07c-pc.zip
  • Size 500.6MB
  • Sample260620-jnml7se16w
  • SHA256 873be2550e8bf18779c9ced750a8247c2b772436c5671f55aa2c55cd94cd52ed
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Four_Elements_Trainer_v.0.5.07c-pc.zip
    • Size 500.6MB
    • SHA256 873be2550e8bf18779c9ced750a8247c2b772436c5671f55aa2c55cd94cd52ed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/Four Elements Trainer
    • Size 10KB
    • SHA256 0af62786de3745c0e6778ce3984c92ea36cec57d547ccac68f5273259a5297ab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/eggs/rsa-3.1.4-py2.7.egg
    • Size 86KB
    • SHA256 9d4481794dbee236d0bd85368a7f809d4fb124cfcaa13b6e30437f4fec703395
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/_struct.so
    • Size 37KB
    • SHA256 0abe2501839ef0e50d8c0fdf853eed42dbe8e1a24a1de492ce089af2e1193d7c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/_weakrefset.pyo
    • Size 10KB
    • SHA256 5c643be196f863951f538c30b9624cb4f9b5ef90b5b246e91558b115c8dcf1e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/abc.pyo
    • Size 6KB
    • SHA256 4564342188edb8cc2d4b5c5f38e2768a292164d398cf45350832c682a9579942
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/array.so
    • Size 42KB
    • SHA256 af05ff937692a3020497fdd2463580b2bd7f0fd6f4120d09e2203b4a6e2d82d1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/binascii.so
    • Size 25KB
    • SHA256 45ceb21d67832d32098f4ed6a1380c579d77b5851d99671ab5f3c46b88e82eb9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/bz2.so
    • Size 106KB
    • SHA256 8b957d7964011d92de96051c5b67e58643e3b208387d810fb7b474c615a4c9e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/cPickle.so
    • Size 78KB
    • SHA256 0e6c7dcc154c4a2068596fe7f9f2eac4e646b03dd7419734d87469002c1e819b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/cStringIO.so
    • Size 21KB
    • SHA256 55053b69e766a4e2de3b8a77b5163b954b175877acfcdf4b382dc5930a911f63
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/copy_reg.pyo
    • Size 5KB
    • SHA256 9aee66209a8db41ac9a62dfbf8dded422f3389ddf5d6eb4082fc99ea230c1aed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/datetime.so
    • Size 78KB
    • SHA256 ee66e8bcf49fcf19a2a7e5d9bdb9521e5208c838099d09ec77c79b0bb8f447c5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/fcntl.so
    • Size 21KB
    • SHA256 d94a1a7da2d3327f804502ee002c369024ccdc590d7680d8625465bff400506a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/genericpath.pyo
    • Size 3KB
    • SHA256 e43a3b8e54334f9ab2cdd09e517a360a2edd33081d702f5ec63e5efe6d6b2d07
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/grp.so
    • Size 12KB
    • SHA256 302cd3d981479eef58502b1e0ac1c8c78264ea2a27dca609ec63c27d624b1f71
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/itertools.so
    • Size 53KB
    • SHA256 7568717b907f79e0ccd6f41586741576b3ef5241cd99d7769451412743fa37a7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-i686/lib/python2.7/lib-dynload/dynload.txt
    • Size 195B
    • SHA256 f3126a4f7674030ac1496ec7a32201798d14ecb8dd7f5276357a1056913d0a0d
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-x86_64/eggs/rsa-3.1.4-py2.7.egg
    • Size 86KB
    • SHA256 bc223f1b513a6dc06d204c67b6ba77de40c6b850bbf026751e52b300c0c65535
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-x86_64/lib/python2.7/_socket.so
    • Size 90KB
    • SHA256 62b50af80772e4f36caa9a5ee7b1a747bbb8302cd7286eee1fbedbca6318367b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/linux-x86_64/lib/python2.7/lib-dynload/dynload.txt
    • Size 195B
    • SHA256 f3126a4f7674030ac1496ec7a32201798d14ecb8dd7f5276357a1056913d0a0d
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Four_Elements_Trainer_v.0.5.07c-pc/lib/windows-i686/Lib/lib-dynload/dynload.txt
    • Size 198B
    • SHA256 2a5571cc21cf82294e43801f4f2b940300ad9b231799fead19f342614bb7e3f3
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

ransomware
Score
1/10

behavioral25

ransomware
Score
1/10

behavioral26

Score
1/10

behavioral27

adwarepersistenceransomwarespyware
Score
8/10

behavioral28

Score
1/10

behavioral29

ransomware
Score
1/10

behavioral30

ransomware
Score
1/10

behavioral31

ransomware
Score
1/10

behavioral32

ransomware
Score
1/10