6ce209028518fafd990fe4aae1dd596d271ac60baf399b9a31a598d9b5fa83b2

General

Target
cosapack sound.rar
Size 47.6MB
Sample260622-3yffeshv61
SHA256 6ce209028518fafd990fe4aae1dd596d271ac60baf399b9a31a598d9b5fa83b2
MD5 79c3dde494e7dbadb72e9f9543dbdd80
SHA1 fce1f4a1070420ad2f78fb0df86aeec0b5797146
SHA512 a8cf338085e698a88ec50006e0652c5e2be84f29e1c805073a957f4c0dd2735504dc68a817110245333c0f7c4c323245ac195d9431631058eb88b0873ce06987
SSDEEP 786432:Cq0/aEw8cS93Y9f4SLNKqnqc921RnSbJpRPAaH8LBAp2uArWr6Sg3RZ:Sw8cO6XNKqp921MbJrPAaH8LuoWe3RZ
TLSH
T185B733E40A1071C9EA4535357D94031654A13BA7FC2BE97B94FC43A2CBEBE1CC6BB858
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery ransomware

Malware Config

Targets

- Target
  cosapack sound.rar
- Size 47.6MB
- SHA256 6ce209028518fafd990fe4aae1dd596d271ac60baf399b9a31a598d9b5fa83b2
- MD5 79c3dde494e7dbadb72e9f9543dbdd80
- SHA1 fce1f4a1070420ad2f78fb0df86aeec0b5797146
- SHA512 a8cf338085e698a88ec50006e0652c5e2be84f29e1c805073a957f4c0dd2735504dc68a817110245333c0f7c4c323245ac195d9431631058eb88b0873ce06987
- SSDEEP 786432:Cq0/aEw8cS93Y9f4SLNKqnqc921RnSbJpRPAaH8LBAp2uArWr6Sg3RZ:Sw8cO6XNKqp921MbJrPAaH8LuoWe3RZ
- TLSH
  T185B733E40A1071C9EA4535357D94031654A13BA7FC2BE97B94FC43A2CBEBE1CC6BB858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery ransomware
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  RESIDENT.rpf
- Size 157.4MB
- SHA256 1e09f3a8ed5add55ef2ac3622b6926e9c0ce51cdb9d44c39d48e5c4f2bd1eaea
- MD5 2fc3c508a4295c7ffdbe8c5277bad571
- SHA1 e9bce1448e3e2bf18d0790e060a02d4d99716d6f
- SHA512 93329dfb03d12c7a151009059d421ec5a28de1373777c8066c269808fc9f5bd622a15c4bbb76c9f45e46d8f01ba52e1f99aea125f6ad49c9241a4823d44f53f0
- SSDEEP 1572864:YXDZi84lF0lFqNG69oZ9SpfVBX/l1kXK9svEV3QbdAhImrLx:YXD8lF0lFkG62cLzuX9bdAh7/x
- TLSH
  T1CB78E491B382FD01C416B97E494AD6E45733BF845F05922730A2B7BF2FA9A405CDE6C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  WEAPONS_PLAYER.rpf
- Size 32.7MB
- SHA256 30cb65c051f60b258079a1a3be1cd0948553d725532510718384a2a142717588
- MD5 807fd06d404444ca1cd5bbadaa1e3c02
- SHA1 2ddd117608ba11efb9b263e2118f6262e803219f
- SHA512 b167a38d93e3f1ea8280b85210d2fdd07854722b16adb9cdc6fbeba7e6b42aa460afeb83aa448f357b64ebd943cabd3d80f0c2b61968ee94adc86f6aedbdc2cc
- SSDEEP 98304:7IYf9+8FjeQ22KGQ+q1wRpwyv9cHAdg6AOVyxb9I:19+8FjeQ22K9jSRppcA6OVyxb9I
- TLSH
  T148772392F0079508E8758D370ED2FC992E5A3909DF68857B9272CF9D3A713106CDBAE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6