8c4d9aeca3b601d27d4766f0f0638c61ddc7d6c4dd01282048b66a4de35715d4

General

Target
e689e668-8754-441f-bd7b-987651b83ca0.zip
Size 545B
Sample260620-vsj8esht6t
SHA256 8c4d9aeca3b601d27d4766f0f0638c61ddc7d6c4dd01282048b66a4de35715d4
MD5 d646119e011bcdbdf4d826c845ead23c
SHA1 7c53b7414201b788a691d4078ba61546873673ad
SHA512 9051444b244773ee7124baf6183cb3d41eb8e3686b0585002e7062af9f8f2a14311f81c6de0030f758aa11428d2bf3f2605aefe07939b6462d339fe87c335132
TLSH
T170F0C034AB2646A6D00E2230C00B5B01B73C7DB13A42B00F12D8F0DAAD050560F6F6F7
MD5 SHA1 SHA512 TLSH

Score

8^/10

Malware Config

Targets

- Target
  e689e668-8754-441f-bd7b-987651b83ca0.zip
- Size 545B
- SHA256 8c4d9aeca3b601d27d4766f0f0638c61ddc7d6c4dd01282048b66a4de35715d4
- MD5 d646119e011bcdbdf4d826c845ead23c
- SHA1 7c53b7414201b788a691d4078ba61546873673ad
- SHA512 9051444b244773ee7124baf6183cb3d41eb8e3686b0585002e7062af9f8f2a14311f81c6de0030f758aa11428d2bf3f2605aefe07939b6462d339fe87c335132
- TLSH
  T170F0C034AB2646A6D00E2230C00B5B01B73C7DB13A42B00F12D8F0DAAD050560F6F6F7
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  System/system_info.json
- Size 338B
- SHA256 247dca057ec7f73f7498202c7cdd8fe8aae6a6ab93565a230429330eb82a5f91
- MD5 46399e2ed58666c2ff08e4b0ffe740ec
- SHA1 4510f6ec400b5aaca8aad546620166105eae92f1
- SHA512 9e57a6d96df3aad53cff716d3564f30fc07656fea52c69865d27dcc776697a211f87864339994099b3e9a9ab425618636cfb17df2575efddd0e7041d7f7047ad
- TLSH
  T14CE026D0F3356E633EC856909859180D1B120293AE90709033212ABC9FAD94F573755D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  System/windows_product_key.txt
- Size 29B
- SHA256 e280813bb91c8c5f88e75fe9b49c2428859dc5e0f7eb833ce2e49f5171298754
- MD5 136d80f3512ff0db0db462269bceab4b
- SHA1 4cc39a86ff39ed563baffd639b9687a3ba9c67a1
- SHA512 38dfb038ee51c2792687c5198725dec70a9df97ff9886e71aed69c2d605e1b5f793d2e2458decb01c9e611b1be9b0268b04cd4ab179cb3b2766a0beae0d0b34c
- MD5 SHA1 SHA512
Score

8^/10

ransomware adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6