568e2591338d31c159c1ce15682d02bdcd862339215cffa729bd8636102fe012

Sharing

Copy URL Twitter E-mail

General

Target
SANE.zip
Size 3.2MB
Sample260622-km5xtsav8j
SHA256 568e2591338d31c159c1ce15682d02bdcd862339215cffa729bd8636102fe012
MD5 b8a8897e939e02a907243e540cb57870
SHA1 9155b8102ed8e3d83fe54ca893dcd014c474e9c9
SHA512 b40a86176a67278291a60925677d5f57362afb1c3b4dd5e2096a51b4567c5a8e8a26e7196655850056d3702cd7e466a549626ca4d7e149f2209b1e1b251680e6
SSDEEP 98304:c1MV0URxhi2eVyWE5TwuAZtUI/2xmzH2YpdfG05jd2/:c0Ns2eVVqTwuUtF2xmzH2YTOX
TLSH
T140F533719B49BA47C28EAD3F539DF5BC0C311DDC6B3488859BD46309973AEAB4A604CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  SANE.zip
- Size 3.2MB
- SHA256 568e2591338d31c159c1ce15682d02bdcd862339215cffa729bd8636102fe012
- MD5 b8a8897e939e02a907243e540cb57870
- SHA1 9155b8102ed8e3d83fe54ca893dcd014c474e9c9
- SHA512 b40a86176a67278291a60925677d5f57362afb1c3b4dd5e2096a51b4567c5a8e8a26e7196655850056d3702cd7e466a549626ca4d7e149f2209b1e1b251680e6
- SSDEEP 98304:c1MV0URxhi2eVyWE5TwuAZtUI/2xmzH2YpdfG05jd2/:c0Ns2eVVqTwuUtF2xmzH2YTOX
- TLSH
  T140F533719B49BA47C28EAD3F539DF5BC0C311DDC6B3488859BD46309973AEAB4A604CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SANE/26-010-04_I100SAN.pdf
- Size 250KB
- SHA256 1ba0dc93050748197d425f2c05a51055775cee72507b0ccf99111c57f44fd9cf
- MD5 5fd00ffb7bc8fe98d38f3aeb5262a233
- SHA1 328b0130ed97e35a1d692533f81122588b177e83
- SHA512 954d29d05af874d400170e5925c74d0168facb5b471411f2fc0078ed98e463ec6084d9314b54afb0a645ed9814ac14c9e992441110a28f144d8f399bfd617c8c
- SSDEEP 6144:LRco6dczmovTWqQ657YhhfhhDVYfpp321fG4H2j+jSXwx:p8czmohocfpae4HNjSAx
- TLSH
  T14544026660805CCEC0F74BF593467C36861E7AD752CE5C0274AD0AC69F81F5A4FB2A93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  SANE/MO/26-010-04_MD001.v00_I100SAN_N1 NL0.pdf
- Size 160KB
- SHA256 1a3e16c30e2bca15e4f67563b7b1a2ae1558e2c31a1e530a3751aff59cd135b6
- MD5 a5201a72f221888017269d02f323aed1
- SHA1 4303af02b34ac96fbacff8e7996a3911f0870f10
- SHA512 c76ac8eeb00e09540446a1efaf1c6d46362849d4acee9bd6c6765bd382218d0ef9f630bf579064307f16092df7263c86690129c8099db8431c1df60ce5794420
- SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmj+NbG2oBS8xnJ4InV1S6:MOoYu6jeGFQ8lJP5
- TLSH
  T1E5F3C008444DC34DFFE3A8F6EB6AE125F815A717C990D5212E15031D9EA3EA2B7C3729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  SANE/MO/26-010-04_MD001.v00_I100SAN_N1 NL0.xlsx
- Size 7KB
- SHA256 a7433099bad33d05dc9cdaa7e2074008e04c2214434a675395f3d20af49e7412
- MD5 b88e16f893c561fb581144021206d29a
- SHA1 343244f79fa8b9f2e62a332c0d4379654e833927
- SHA512 b34fbe329e113f23ba38a85f1078f38552f997b28e4071df34047a80cbf0bf282d63675bda03a3bc9f5b19534a2e4dc42cc505ebe4074b3c4b8b4ff6591e2897
- SSDEEP 192:mLIlc4egQ8iX/W1oT1D7pbJAgZhPAUOAml682+aRS2Ousjlp1oK:mLIlbegBgW1C/pbigjZjml68eoR
- TLSH
  T1A7F19D5A36551020C70EDD74A9898223C21FDC319D6125C26960B3FA2F61DAACFBF57C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8