f7d990b46bc9c9aafdc827dd83241a38ca820a2eeaa6c2e6422e77fa15f5cd24

Sharing

Copy URL Twitter E-mail

General

Target
KonesAccessibility.zip
Size 3.7MB
Sample260623-acw7tsg13j
SHA256 f7d990b46bc9c9aafdc827dd83241a38ca820a2eeaa6c2e6422e77fa15f5cd24
MD5 b2aaf17b8782b73b7ee17631cc82297a
SHA1 784b873762dc8462abaa4c03983776dd70fb5d7e
SHA512 63bf2fc63cfc23b76bc69df41726512b612be54d04e8057bf0de6ddf6fa8d9e32600fe6ca5d66abc49f0c58acb2aa931b71a5864832446b97d7e87c42ec3412b
SSDEEP 98304:cB2VznxRHu5s5fI5y6n37/wKnBvkjSF9LL:K2XRHN5g5Tn37FRsML
TLSH
T1420633C6327B3897BD50DD4E97CF9CB59FCF961C8663AABF9D00094A58E4621C230627
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  KonesAccessibility.zip
- Size 3.7MB
- SHA256 f7d990b46bc9c9aafdc827dd83241a38ca820a2eeaa6c2e6422e77fa15f5cd24
- MD5 b2aaf17b8782b73b7ee17631cc82297a
- SHA1 784b873762dc8462abaa4c03983776dd70fb5d7e
- SHA512 63bf2fc63cfc23b76bc69df41726512b612be54d04e8057bf0de6ddf6fa8d9e32600fe6ca5d66abc49f0c58acb2aa931b71a5864832446b97d7e87c42ec3412b
- SSDEEP 98304:cB2VznxRHu5s5fI5y6n37/wKnBvkjSF9LL:K2XRHN5g5Tn37FRsML
- TLSH
  T1420633C6327B3897BD50DD4E97CF9CB59FCF961C8663AABF9D00094A58E4621C230627
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  KonesAccessibility.dll
- Size 399KB
- SHA256 3076a4af9a26641c8c34ea58dd48814b5c32382ef7f9e3555b317165f93722e5
- MD5 f64393c48f5f687d84525cd33b259dc5
- SHA1 b70695680bc9b91b9b905c7286d88b0920078a94
- SHA512 c9e43ffcf8f5a4fa136eb0b9ff3164d1f622dc89a137a9d42e3fb0564315534fd355ef046c4a29e5ab1f874a86454865f55b09ed4efb9f391a8b43695a9dc9e0
- SSDEEP 3072:RXa+p8zQYCLa5UFsRXZHy/l2m7RCZrc/QPo+8c+jJpz07QuHWi:RF7YC4rZFFrc/Q78c+jJRIQu5
- TLSH
  T12D943CD471D0ACD3EA7F833566C2F921A2B8F2808766CF0792404A385667BC67F67D46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  data.win
- Size 760KB
- SHA256 97fd26d8a964a44b31a86d2b3fc7d786586dfed153eb0c48c9805aa0186305f0
- MD5 74785993a54c4fc196526e72d3f3e771
- SHA1 2dbf80a91b2a31030a68242cadf9f7a925d97b82
- SHA512 fac69aba8ce5734795d5d66281db079e5b5c6b7e8b758989d9fc8ee3954178cbe7c6061a77acc498c8910988ad861b34cb6d45718c64e4f8813b4b518ce3b569
- SSDEEP 12288:31rQ3dAoJAiu2mVQZDk/V2Ev6hXGvtMfzHINYEVEtSyIWnplJO8bfGjG:3K1+92miDk92m6h2vk7CESdWnplJuS
- TLSH
  T173F423AD2B95CE1AD55D8D3149CF2F0ABB309AC9CB11327732A2B31D6C37B714A05257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  ohmiltufuckery.exe
- Size 7.4MB
- SHA256 6503ec8bc60661c782782a661b132b294296b1593f4c0dafda7fea8a9a14efb5
- MD5 2a735779e5538440b0af1d1f295c1f41
- SHA1 e979951778d08d31cd2d6bf35d1df55c791a7688
- SHA512 44d315b53bbaeec713372a8cf12dffb72c8007d1059dfbf0425c8e1bad515e2705ae7c5b69d37f0f25fb6963ed4aee2cdd02040aae26c7a0a929e24f6728dd31
- SSDEEP 196608:JZoiPiw7nUYxaZUXPONlQVsbd2jK0Yol:JZoiPVTkZ+Sol
- TLSH
  T12E764A4672A1C1D9D0278039C296A6FAE6723C44DFA087DB26A07F6D3F73AD44DB6311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8