d2ed4309a3646fdcd138aaf05835050db891d5823709273421b77677f244b5ec

General

Target
repository.arnoldvink-1.2.0.zip
Size 13KB
Sample260622-qccfescs7l
SHA256 d2ed4309a3646fdcd138aaf05835050db891d5823709273421b77677f244b5ec
MD5 1f6c633dc19753077ee91dbac5f3ac13
SHA1 f1ab1e0ff3ca04e297017a41c591171368a27605
SHA512 0e6b9173c0081f846f5ac66aeb065401bb235bd826d61580ef546c0c678f63e5d4a64d962a68e25e5251b85e35ae75ffe664c8f131c815549bd5c2f6766d5036
SSDEEP 384:GDcVFpRE50u8QPNhchLchTC5BeysvLKmH6wfKO0:GypRgLPPTcCxMevvLHx10
TLSH
T14D52D010BF66CD85D053F2B1BF4E4681DC53E9D8BEC211EB2E3560B605AB501EDAC22A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  repository.arnoldvink-1.2.0.zip
- Size 13KB
- SHA256 d2ed4309a3646fdcd138aaf05835050db891d5823709273421b77677f244b5ec
- MD5 1f6c633dc19753077ee91dbac5f3ac13
- SHA1 f1ab1e0ff3ca04e297017a41c591171368a27605
- SHA512 0e6b9173c0081f846f5ac66aeb065401bb235bd826d61580ef546c0c678f63e5d4a64d962a68e25e5251b85e35ae75ffe664c8f131c815549bd5c2f6766d5036
- SSDEEP 384:GDcVFpRE50u8QPNhchLchTC5BeysvLKmH6wfKO0:GypRgLPPTcCxMevvLHx10
- TLSH
  T14D52D010BF66CD85D053F2B1BF4E4681DC53E9D8BEC211EB2E3560B605AB501EDAC22A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  repository.arnoldvink/addon.xml
- Size 812B
- SHA256 b7138555506107720a435fb957c3477244f1037ae2a6bf4e7d49d58d3ba8f91c
- MD5 c67ccdf9e65728025cacda3c9b810919
- SHA1 e37661b3a5170d8a1cc2887aabe922e01b225141
- SHA512 d4c30fb75c1d6f15e6e16edbf731a2f6580e0b1109bfc0ce9d0fa17c7830fe8bbddf3d018ab3bfad97570ed409553e15511da5a33ffbb2fe2d2de669bf6c3a47
- TLSH
  T1D601B15110D94C220B3AF6C2F6136ACCF6BA12376244E846F5E9D6810F677739BD3365
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  repository.arnoldvink/icon.png
- Size 14KB
- SHA256 44d2345e6a31a3c4004268e25f9c74678ed5f0c6a6eed8366286f0b429a83435
- MD5 ab943b5cdb750cfb62660b4f3f868386
- SHA1 17bd1284e055867f9b0fdcfa703a731a0fc49354
- SHA512 2dfc6be7482e1515f2b37c94bacbac5974ef0169e63827ab1ecfdb2ae110e15d2fa5fe8920873853d4e936bd1154f74a637a9cf3ec724f3cc7494a93659889c9
- SSDEEP 384:IwtfETiUj+k+5Ff3E+zMZOihSEBlr0mpFmDq6VTzH07TLI0:IwtfEGUj+bfLBicEDgm0qO23N
- TLSH
  T1C252AFA6428D2EFCCA3084B38595C036416B355EF708557A6A09E937DADF4CC73C53E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6