760c6b8067dacf2c3040b0e890a485b7548d4e9c4e7578cdf3388510a037ee9c

Sharing

Copy URL Twitter E-mail

General

Target
uNsVf690Wa6V.bat
Size 282KB
Sample260623-1c3mqagv5r
SHA256 760c6b8067dacf2c3040b0e890a485b7548d4e9c4e7578cdf3388510a037ee9c
MD5 53923cd4c89733378e2c536380cb6b13
SHA1 e30c165695fb3045c1fb153803cd9cd091723506
SHA512 683b318e7dc70585513d3d3913a2ec9c5a56c75ac6154fcd8c8a4b83606a3c21f7cf758b41b407f3326ba86914fc5fdce03750e94d1dbe65d3886a2e072e90e8
SSDEEP 6144:l7DZKJJT1oJQCtZvjvda6khOMz8OrC3P6HEycoomIOiFgdZouep8y:lpKP1oJQCzbvU6kIMzZ6fcDIOegdDep1
TLSH
T1A354237EDDBA1B2CBFA41D87A60266F34D843D2407068823D1D0BE167358B75F7C619A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Microsoft Edge Updates Helper.exe
- Size 51KB
- SHA256 8b94af60bb58bc1629edb3b4f6a86ccff5769bb9b96d8826f06686af2d7fc55f
- MD5 f5116556007dbf3fef5fb13f8a0ef18d
- SHA1 dae322d2c8675cb39fc96a44acf39d8f9445383c
- SHA512 3e8541586719ac7eb9b7cdb7f20ae78c9637031b717fb1ecf5fc50a02c0f636f015e70dedc2ed1a95fff9b0059063d4f0f19bfbc683dcf9d4d99a8c0c1039b3b
- SSDEEP 768:WnPj8ZtfjZ/26C/11BV4/eYiv37H/35o9lsEpYi6s4OYih2E4:WnQTjZI1P5LHBo9ll76sz7hO
- TLSH
  T1FE336C138BF40898E5AA9375AAF14D2AEEB178465B60D7CF0351C0290F717C07DBB7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  msvcp140.dll
- Size 872KB
- SHA256 4806999a3dd65abcfb2b2cb900a5dfa6e0c489b8589b2ca9d514aada0ae7c6e5
- MD5 33243779eb137a4fec38c48ec87a8916
- SHA1 9d0d88edda5dbdfffcacd9099bb9829c9bb1b735
- SHA512 b8fb04de211e562e5c0ec9dc9cf2c718f3c80d7344e8dc5c2051ebda9e456ba5ef194312242b97c69b28de98e63db1021afed16ee114ad91652b7227d9a7b4a2
- SSDEEP 24576:sCMm9pypG1bQEKZm+jWodEExJ5xrYpb2:sNm9pI+
- TLSH
  T1C5156D27678801E5E095E3B9D5864B1AE7F034864313E3CB62F3526AAF537F8E637640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  uNsVf690Wa6V.bat
- Size 440B
- SHA256 dff20059f161090c76f9f45ac2269f2965bdc96023c78c1072f8d1aa66b06919
- MD5 9cc33a79c15d69c7c1cc1c4b9cc1e410
- SHA1 fd0babe8aafa2f939b26f894f495da2141de534c
- SHA512 f54d1e32ac810f5fbc60f19f871cf3a6d10f2ccb726dc2d8faf950bf654488d2af6b728205478fbf9680d5469b49939a273ca3f976ce61c29aecc89ad3ebc063
- TLSH
  T17CF05512750C013A8570D221860A2A9AF58E038F1300AEAD340AA1613F2B282C8FA0C2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  vcruntime140.dll
- Size 99KB
- SHA256 ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
- MD5 8697c106593e93c11adc34faa483c4a0
- SHA1 cd080c51a97aa288ce6394d6c029c06ccb783790
- SHA512 724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987
- SSDEEP 1536:7y6+2mUD0uBFRXqYue/o+18iBH5T7heunxr98nZXR9xecbSQ2bIB0TO:7lXfRXqQw+PHLrCZh9xecbSt
- TLSH
  T147A36B4AB6A442B7D16AC174C4F39A47EB31B485873053CF03B58AA90F67BE15E3E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  vcruntime140_1.dll
- Size 43KB
- SHA256 7b8f70dd3bdae110e61823d1ca6fd8955a5617119f5405cdd6b14cad3656dfc7
- MD5 21ae0d0cfe9ab13f266ad7cd683296be
- SHA1 f13878738f2932c56e07aa3c6325e4e19d64ae9f
- SHA512 6b2c7ce0fe32faffb68510bf8ae1b61af79b2d8a2d1b633ceba3a8e6a668a4f5179bb836c550ecac495b0fc413df5fe706cd6f42e93eb082a6c68e770339a77c
- SSDEEP 768:uJnUUV7xPg4RdPvv1DHkhhFAWN6srByiYzC:uaY7XN7Ih4CIiYzC
- TLSH
  T1E4135A44977C8046E5AB85B0C4A2DF27FA38F6925B50938F0B65D29C2E637D0A73D31E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10