f144e66671fe6c767b6647bc308fd4ed5c25592443642b6f425639efb21ff287

Sharing

Copy URL Twitter E-mail

General

Target
at-link-console-programmer-master.zip
Size 2.4MB
Sample260623-akebzshw5x
SHA256 f144e66671fe6c767b6647bc308fd4ed5c25592443642b6f425639efb21ff287
MD5 7cfd4a2f901b4ca4aef0109789362adc
SHA1 9a36bc0f35e6a686452e8f7ba6ba3873d2b6021f
SHA512 fc52279f133a3c9e820bf6f8006cf332158ad9009fdca1e1adfc2233c69da3ccf250671e84630223f98667bdcdb374de47498503188feb15a35e3d72930b3da8
SSDEEP 49152:f7tKgBqkKx/vFNfGgKThZU2X3f/GXLZalmsqBLWj/8TWMOgpKrI:fBFPmFpGJhG2X3GVoqB6YHKrI
TLSH
T1C6C5333ACDB96750BC768833F1BCD557D12090A645021A4682E60F3B2ADB3D9EDEECC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  at-link-console-programmer/ATLINKLIB.dll
- Size 306KB
- SHA256 436ae4032b3b2f5e4684980f1ae877ef45795a23c6ad42bba47e61bb34f5fb92
- MD5 1c7f47d3b38dd624ddb1a81c717a7df8
- SHA1 da44da9e7842e5c92548b060efef88454f9f7293
- SHA512 7ec822913b821ad2c5c859757b3898ac3a07641b0af7967b7e775e48dbcffd5ea2535035b41357f1b9bd18758614c6d8e834eb777e61b224a938144a7bcaa04e
- SSDEEP 6144:KIv0LlRvaKjch/fvWjgbqawbbIijs1H0TDOr5AlZtmrx9zdiy:KIv0LLvrjMIgbq/IDR02r5AlZtml90y
- TLSH
  T115643B32F4015035D9FB0231ADB8B7D89EBF5920D7A095D7B7C84D390E680E66B3866E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  at-link-console-programmer/ATLink_Console.exe
- Size 524KB
- SHA256 08e1144b413db8bb748e4f27914c3e4346acfdde79dc302e54e30ebe1554eadb
- MD5 e7bac45912e58c3a3e3f664611684514
- SHA1 30b7f5d8f7b8b6d46b1a13e79019c5483d502eb7
- SHA512 5bdb30e37df4ab48d0632d957a40d919e50e3060942f62afc03acfe7aedd11bf4726dfcd3f5b8f57b1cbc55184a64ab9cebe774da139fd3a748a577960d19b1b
- SSDEEP 6144:6yvdMe/uA7e0yIsInW9/u4DUQGNNNNNNNiNNNNNVANySsu:JbTVW9wQGNNNNNNNiNNNNNVANOu
- TLSH
  T176B4081608624BE3F519C93640B7D830EDDAAF010DD67EE79A5CFA7213748C819EB47A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  at-link-console-programmer/Qt5Core.dll
- Size 4.5MB
- SHA256 01267fbc5c010e8c0267a7a88cb9ad08941749ef4be3517b40b4138c6d86cb19
- MD5 c7bbd21eb344195c44157fb63b72fb0b
- SHA1 cbc4d915894c91bfce05cfd845bc14b7a2bdbb8e
- SHA512 ed593f383529805100a39c4266e926b3ec511ff35e6b1b6b789662728541f015ae7dfd033a6a7ae6835112ece24c0bd7658f4f9c1ee126c438c1345ec638cbc3
- SSDEEP 49152:Vfn3ur+geTCJocsPDu7Zmp6n613fu4Jsv6tWKFdu9CsTa7aCT0AaasQLlRtgqEkf:Z+r6PdpD3ftJsv6tWKFdu9CTvp74S5
- TLSH
  T1DE269DB3B666C236E6A6967A4CBB972F0025BC014F1185D7F38C762958306E13F3B54B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  at-link-console-programmer/download.bat
- Size 372B
- SHA256 3e52cc4b4037e42503e6e028443a6c43bbd52da824f7814cff0d1fb81dab7a76
- MD5 b22f1994e0fa7df7e0c64d0a97204bd4
- SHA1 0b4c10948536f675064f2baaf1b78e652a27db85
- SHA512 1701f3e515559dca1357019de649919a9213231f4b461f13ec3873db536ab4ccb24761110d0efb8660fe980d3c3d85c31f6eafb63938a77fba7edf5d1fe33716
- TLSH
  T191E02B2034C5CC2380244671AE90DE85B53A64C65E42E58E338051B7FAFD7E7D58C482
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  at-link-console-programmer/libusb-1.0.dll
- Size 100KB
- SHA256 1269e6338da5ee738b4b4a24c091773a56559f0b515d002624e675e854c3ea3a
- MD5 5b605d105022c4424f22cc7df41d2a6d
- SHA1 a6c1b928b3f993a3a85f5c0fd3969d4b40517038
- SHA512 7d1862dd443aeabc7ef880f8efb191c5df6a443f23fd458cac13c96d26f871af1038ce294921237bd12d84d6167ebf7c4c7415059b025e8c1ac82d8daef73e89
- SSDEEP 1536:2yYy/EFczURz4/n8G1J6UBHvTTr30ftDCjyEBzy80:T86zmzcnbt3D0fseEBW80
- TLSH
  T1F2A35B6B39C8C938E4D230753A9C7232D7BEC6A0679A93CB471602D964D86C19F3DB47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9