6e4ae65993e3fbd86d9338130903111fe9691c192b7bb9b082ea6feecb893285

Target
NULLSCAPE DESKTOP ENEMIES-20260626T083724Z-3-001.zip
Size 32.2MB
Sample260626-krnt4sh12t
SHA256 6e4ae65993e3fbd86d9338130903111fe9691c192b7bb9b082ea6feecb893285
MD5 b89e3c73ca26904ab855507510e3bfc5
SHA1 b8f319082c2a4eb27fc5ee715e9146c9f272a364
SHA512 40ef3c31ce74068a8effb7300f7679df358040dab98c596ff3c30ac5787fff5b78d8d3bd65a087b0fcd9c44918ee07c86974f1355a6ca5c284a5f52deac0fa17
SSDEEP 786432:DBQk7ILnTDnPPmR3h3BcVkbQMJciUf3Ef6dGHPQ:D17Ir3PPohbATPPdGvQ
TLSH
T1C57733D020A7D25CC92DA27BD2F7EBC7EEBD90C4CB5D9DBA500863D848971933A46D90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  BellPetRelease/BellPet.exe
- Size 1.2MB
- SHA256 08df66ca92a11cebfdeef0e050fc190633cacb96f36da403755478d728198bc7
- MD5 ada2e7668e407da4b2d7ebda71d8a51f
- SHA1 a47b91f42966e31242fda746abef3c8fac364c88
- SHA512 fdba1cbf40764255733347442f687bfc06da432b5faea72eb21f9f39be13810574af824cdbf346f3ad756eb84a80245fe5c48bbbe3b5f328ae40546729827ade
- SSDEEP 24576:02ctIvKqwpMKvT7QvYMy91tA2DP2crkmQNHElqKlRRaBIA7X:pToMKvPQvOi8AmQNsrlLaLD
- TLSH
  T178459F0773E7C1E9DE7BC1F9C9614226EB31B8640B389ADB2590452EDF63AD04E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2