90db47bf32c36257f62325205150b5bd63ffec0c23a572d733064563d80d7a5b

Sharing

Copy URL Twitter E-mail

General

Target
Bypass.rar
Size 344KB
Sample260626-d6e27ahv7p
SHA256 90db47bf32c36257f62325205150b5bd63ffec0c23a572d733064563d80d7a5b
MD5 914730240a7f22dbaa43cf33dd6b9915
SHA1 2765269828adb5e5952327b9d45de2358b5d4dae
SHA512 35541741e3669b8885aca44d14d933aff874f509c94268403882cd0a01f3fae1c9ab8f305dfff3133e4cdfee77cce74b80e58dfb43a4dfab1f45fd8fff5da602
SSDEEP 6144:ek69donSvCuHVeU5Mrtx6rL+6hIooFyCHvCiYhkWGmCbNoRkHTG+jDFcjD:unAA2tx6/+6hITHaEaCRoRETG+jC
TLSH
T17D74233A4AF43D30463AECF32B1BBE1156524829319EB606866C0F15CA8DDD466EF7C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Bypass.rar
- Size 344KB
- SHA256 90db47bf32c36257f62325205150b5bd63ffec0c23a572d733064563d80d7a5b
- MD5 914730240a7f22dbaa43cf33dd6b9915
- SHA1 2765269828adb5e5952327b9d45de2358b5d4dae
- SHA512 35541741e3669b8885aca44d14d933aff874f509c94268403882cd0a01f3fae1c9ab8f305dfff3133e4cdfee77cce74b80e58dfb43a4dfab1f45fd8fff5da602
- SSDEEP 6144:ek69donSvCuHVeU5Mrtx6rL+6hIooFyCHvCiYhkWGmCbNoRkHTG+jDFcjD:unAA2tx6/+6hITHaEaCRoRETG+jC
- TLSH
  T17D74233A4AF43D30463AECF32B1BBE1156524829319EB606866C0F15CA8DDD466EF7C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  ac_bridge.js
- Size 157KB
- SHA256 13b47de271ad900e70ded82bdb9af1ccd09937f0cbe74b78d99e42aca41ba8b9
- MD5 5c2aa8e4ff9c01f2f295a090bafad3d4
- SHA1 b4ec96603d9f1b87be0ad4757a53d99b5c1a9ba9
- SHA512 930cbc8caadeecd6da8b37bb98d64f70bf173f7babb5ff3b2a024a2408ed6564d37f4585c97641d5a09c267f503e3a3196667e8d32f31a2bf6b556309008b2c2
- SSDEEP 3072:5CKXZ8pvzYrcrcKgWAN9D+17Y6XpjALgO+nduY+phMW8CwVIai5ItKCjO53MW2SS:5xZ8pvzYrcrRmN0pY0pjtO+ndudheCwT
- TLSH
  T1C2F3844929E7D261813AF72C7B46D008F63A822361419694BCFCC3749F7792196B6FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  bypass.js
- Size 406KB
- SHA256 7886eca287f6854c7c763db3691b017258212ddd5cbab3aa24a5f260bbf1ff8f
- MD5 dfaedab8000210b203a78e82c4c6080b
- SHA1 70eead4663bcbc62f89f74deb3d5f3081404199a
- SHA512 f6672686141705d5de268d4618ebcecf48af13e92acec61bb1a2fe0a74b9debfaec36e0d14b03945fbe6982cc7a5fc2cb09054d987df883da74ff8d611e2c27d
- SSDEEP 12288:tBJTkRusPVNhX5jTy3Z3q6rw3q2fCFGrabPWM:LePXA3y6FFiabWM
- TLSH
  T13E94221B3D65D62B9648691F48051B0F1E7B4DE1B8D7F8EB2CEAE6C242C97976C0A013
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  bypass.py
- Size 7KB
- SHA256 1c64f419e901e064bd2bb9f4c64b9cb8274755f47da01d0b296ca819c6f23f16
- MD5 5b06988b74803926927b444300303d5e
- SHA1 ea1e76530fab8d0090c46b6a7fefa6b8b4173f73
- SHA512 d9ad9d5c4ef14837c3b7e9341821f2ef6c9ce9ae8f7f4d8f2e771e4763743a2f76224ee372e515b8c1c636e1d08b5cb92114b61bc4070feccbeec4ea0dce6eb7
- SSDEEP 192:ABYkvHuGEE/Q9/QNlYiOs/LmM/VJe/Q9BoD3C/UXQxuBO/V9193uNubig4y+P:AGk27beNlYivm819BoD3LXQwBO/V919a
- TLSH
  T19BF134B17C196A283272C91EC947C061EA6ABBD371B93916F0DC74D02FFC45486A1DF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14 behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16