d46ca5a629c67170a9690892e3167905c134894e56351e395a6729d699d0eacf

Sharing

Copy URL Twitter E-mail

General

Target
Archive_latest_9258.zip
Size 815.5MB
Sample260620-qgfnmsgv6w
SHA256 d46ca5a629c67170a9690892e3167905c134894e56351e395a6729d699d0eacf
MD5 e35bcdbcee5377b478314f8217aa4ec3
SHA1 04f9bd01d06949904261ede8fb1224a05157bddf
SHA512 ee599121109cee946f181310cc316419ed4e78be3bb4d5fe6d5a4256463b655640336445b0a3a6cc97a97006674c39624e6dc90e78a5b0de3402d28bcfa24daf
SSDEEP 393216:Y84UP9uo8poG2hQJWJQgYgOOiSH2tw+0rnZVjO57CUlJi/YX0RBtZWu3yilQrqIy:Y8Upo/PYz5SQH0TZVih5X0v5QXuujP6
TLSH
T1DF993314CE2DE2D6FB9776B4B8E09157D53B51B132CDA258789831F4AD8BF006F2890E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery ransomware

Malware Config

Targets

- Target
  Setup.exe
- Size 102KB
- SHA256 7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab
- MD5 0323998e0e85eca5fd90d9f8ecbbd6c2
- SHA1 56dc080f728d7a276495d6a4371670f9ea71519b
- SHA512 2b56c210d6c690cef89ca03563cec186576c50f6b1b60b287afd46a14cc5c9dfce31dd458066098951a79daf3b367fdb0787d3bdc74fbd8f69425877f263b0e5
- SSDEEP 3072:53Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:1Q+IFCumUGekHRvEuO3go9kfnQ
- TLSH
  T167A3F206BB1615BEE922803EEA970666D7B0FB6217514CC71211A2301FB7FC19E379E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery ransomware
behavioral1
- Target
  lib/python3.9/lib-dynload/empty.txt
- Size 676B
- SHA256 6367d9f287a7a39c51508bb94a0c52be869ef17ef212824a5f4ee6c34b798851
- MD5 0f073d3ea64f9b0564621e5a9bca8d54
- SHA1 734c111c4b00b07627cdf5891ceda4d69d7dbd90
- SHA512 d1ad2f4166b4640d798e3a9961b2ac97d76e1c2cf4d0b108c9113b3bd28f06dfecd36fcb996fae505fa8573a80af087ef7275ad444331b8356c56dc846ed7acd
- TLSH
  T19F01236125C8D57D2648E408DEFBE701791BAC19976B502C73C515275502A95903DBC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral2
- Target
  renpy/__pycache__/py2analysis.cpython-39.pyc
- Size 16KB
- SHA256 5db65dbd50bad96b962b68486cf41e2cd48d632de1057fd61d24a0fb8daf2db8
- MD5 9b9913ee5e4c257653ee3632e50df3d7
- SHA1 c51033bd974e937c9b788c4ff2d1b5270de8c4e5
- SHA512 485188f7c6b36c2a4ac24065abebd0b06198f3f2024ecff29372779fc2474a2f3672457c6796e47fd195970092d159297d179b7e175e89fc89c513e490b16ba8
- SSDEEP 384:SBUfeFtXZHbUv6y5L0zxj2J8/pmSLZebrzSCERoRxyiNVQA+i5f9YKtk9M:SBzFtXZHbUCyt0zxjaWpvIxyy29M
- TLSH
  T1BD72A48962A10E9BFE65F2F8655A03D1F36AD63732199383340DC41E3F463E45CB28E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  renpy/__pycache__/py3analysis.cpython-39.pyc
- Size 18KB
- SHA256 294e82f58c210c9dbe600a8c2d97f6e9347ea0fa3f3ca253babacd7ee8e5db6d
- MD5 7bdac082c321cc7fce7e6e289df87024
- SHA1 dde20f42fa376e725d048df30a8923816573877e
- SHA512 8f5ff9e158429606f2c90b0324ee4587312c4068289b4af098f76c27f0f471f8c0e93c8c7b1ef9a87ba76d75bb982fc6907e1490125f2efc5397decdccee95af
- SSDEEP 384:AKYy8JtntHOUvaj5L0yyFlg+pHTG1lq2Ji5VO18SY9w:Au8JtntHOUijt0tFlg+pHGc6iUQ9w
- TLSH
  T17D828189B2A14EDBFC55F1F526CE1251F234D73B622F5382370DC42A3F496E45CA18AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  renpy/py2analysis.py
- Size 21KB
- SHA256 2f8dddd10beb49e8a3e14e8d37f1608886521516a6319206c1dde291cffeda5e
- MD5 770336792b42a344cebc0f67ecfcf9a8
- SHA1 535d95f8ff4ca5291a9a566a9fdebc346981fb37
- SHA512 6c640101d49fd5d0d6356f74f12c256e364f4c5eafd97ac7893ac74beb71892190aab974ab0dbe5097b155c2ee2596aaea26a9348c7c3cdd20ae66d3329f9fd2
- SSDEEP 384:BK5H3kUt5FUvO6Xh5Lg3YjYycWbRzrMWKfn5NJHR0xjK:I5H3kUt5FU26XhtrptbRzrd8NJR0xjK
- TLSH
  T1B9A25226D6611B66921B88B519CBF003B71E7D43715CA1B579FC844C2F4AA2E80F3DED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5
- Target
  renpy/py3analysis.py
- Size 23KB
- SHA256 89b2a2e2adeaded60bc2567f196dd4d50cc2c75912c163f1d8cbc986e8521709
- MD5 1e49e5d50925ab9c0cab01dc70d9f2cf
- SHA1 4482dc339ba0888c30f345be833bf735d0256b6c
- SHA512 14aa7b3f1bc5b503801edba75639c6a5c58d1fbf56a533736e8447280b44ef2652bf7f5e3a114d0b950f98b76cf9b42d55f090776a7f34d1d9c8e3613794ee47
- SSDEEP 384:BKXkUt5FUvu6Xh5L4u3YjYycWbRzrMWtfTLwJQeBJqP5egt:IXkUt5FUm6XhtyptbRzrdJwieBJCXt
- TLSH
  T155B22016D2611B75920B88B529CBF0037B5EBD47B16CA0B979BC848C2F4662981F3DFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral6
- Target
  renpy/webloader.py
- Size 9KB
- SHA256 3b51404342abec20ad616e5e448dcfec71b54570552d0083d30792988bb27001
- MD5 c9260040c2057f8f909f0f299af595f8
- SHA1 ead87e9734e78c785c2dae2280029d5410e12e7f
- SHA512 379a0548eeea084899c8ee91889cd51cdb25a470f8d459e2c0b1274b1b6cde9ff4b10a7774ad3ba6faf04c789b29a41ccfe700de57dd21412347fe8561386a84
- SSDEEP 96:w1zPjdwQHj1+y3vZqGk4apLgCG9WTtX2u2OETxouJzxBb7chClqQ9iL2HoYLNoaF:w1dwQHj3Acap0CGYXGXBOW9oI7EJWv
- TLSH
  T1FA12190FAD679092C303A254EA1BE086B71918D7230CD97574BCE1A06F92570C4F7EFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7
- Target
  setup.py
- Size 8KB
- SHA256 5a2d8e648e3f4cbdcd32cbd2bb0ba48d10de32fe14042e201a8bb7088cefad79
- MD5 f82bfb01fa17b87134b14fc21ddacb74
- SHA1 7b2c9342a390253dd012d278a2b9ea83e1759827
- SHA512 ff3d5de26bf951e00cac2c8bc13fb015235de569c6edf95e8b2800ab3a4126c974d817dfbf475b4a9b57ff0b0306deb0e389411f43162fc7aeb8e970b50d8aa0
- SSDEEP 192:7X1dwQHjiJqdt2RqEq1ShhKBqMJx45KB/H/osX3qzbFsqLdx+aHv8UTri:7wKiwdtzvMhhVMJ2KNf9XatLn+A0H
- TLSH
  T10E029696B5D536918313AB58D8D6A0C82217E9E73EEF11783ADC33647F6091043F36AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8