3886dd521e122482d8239c8ab666b0ceb43d31a62d0fc79b542af5382ba61238

General

Target
mkopenborv1100.rar
Size 72.1MB
Sample260627-y97a3adv5v
SHA256 3886dd521e122482d8239c8ab666b0ceb43d31a62d0fc79b542af5382ba61238
MD5 e336864abd28dff4f41b3410be8bfe6b
SHA1 643de2227971e9f64ba03bb5de07aeb5f8539b0d
SHA512 7d3ca88b1b42025ade9ee37a1baf0e5e77394ea3039cb718339bc5af99150b4380333dda48160d26c8938081d0f0b5ca8cf5b35fcaa155eae92e06bd6f322788
SSDEEP 1572864:5vD8ZLH4+gxRGTGZyTVZmai4qBZMyN3q03Br9CCbhZr/bOyJG:J8Zr4nPGTGoTVZmaipZXNXRJbzr/bOGG
TLSH
T1C2F733FD79B84E7EF61C8035EF900225D022319C55FC14CA9A84EE7A2D9572E0D63AF9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery ransomware

Malware Config

Targets

- Target
  MKOpenbor/MK Openbor.exe
- Size 3.4MB
- SHA256 b3719f8ea0388ca032257f1f047861a13aef7f1aabc10b36c07b958362586d2e
- MD5 528ff896b78e86526bbcdac8175dcb25
- SHA1 1bd8f5e0bfda052b56d4a7f12a44efd651413a99
- SHA512 87a43068bc4dc32098dece623ee567d3340ae8bfea7d1c07681acbfa8674336bf3f1f179ee06e513574352b3beb1c53527cafb6862a81f40177195fe6788616d
- SSDEEP 49152:a2MX60+JyUswWcIwH3NGzIO6V/pqbk0iIrqseVMPrrJHIT7VfC:ax60QyUswfXNE6VKk0THrJ+VK
- TLSH
  T15DF58D44FB8754F4EDA74930825BF77F8B64AB058020DEB2FF9CAA5EE9337522415206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  MKOpenbor/Paks/MKDOTR.pak
- Size 101.1MB
- SHA256 914aa1b4a0ae9c7760d63f7f5de4cad71cd73b25167f5abd9e9a63e6fb499ac5
- MD5 7b3d487318f3ca8cf38ab2674498985c
- SHA1 073f1f41a7e1bf4778f57ef593a739b496296966
- SHA512 8c3700ee729348f1bae9aede2de477d104a820bab7f7ab624c7a116f1ce24f4a6b26b963b28b2b10a64292b4b50c7699430c8aabd1ab8baa993894e1ea7e8125
- SSDEEP 1572864:ktJCmHSwh/03hzxFPnkj9YI3GIGQ1bXJ1K+1SShGTBdVH:ktJCmHSuKFdnkjV3G61H9SYGtzH
- TLSH
  T18C381207E153441EC5059A34CC3A4DCD2BB5BC88EE56421B31ACFF5AE6B7385B0DB68A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

ransomware
behavioral2
- Target
  MKOpenbor/Saves/MKDOTR.cfg
- Size 352B
- SHA256 74877275a06590763fb61ce8a42020491d55215b5ffa6603aa862b3de8dda6d1
- MD5 f4b1a5c1c0bc4b948fba8f6017ec3bf1
- SHA1 ec730c4a418c473133131dcc47b3395cf9032506
- SHA512 1d53d048615566eccc648bde6e03bdd9e9b678fb272cfc14459a1f4bb3a5db4a04cf236ce518aa2b0541fc15468acff0bf0cc5a64836aaba33b310ea3c0db653
- TLSH
  T1CEE02224A3C85F73C86764F03BC28B8563B0C0240BBEF313056428390D8730E0809890
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral3
- Target
  MKOpenbor/Saves/MKDOTR.hi
- Size 544B
- SHA256 d5cafc95ed0cf18f8bc9f1bd5f34221205a6327c6315b196b610cdf30afcf15f
- MD5 f0ad7e17e94ea3304ea994719a830bae
- SHA1 9bed2691ae814c5151ce956a4e392eb637f3315b
- SHA512 9e66f688144180cf62ce34828776bf7bdd03a4150dfb3c1ba0ae3a621f20fe82a04b6987923cbc4a5fc2eb16f793fcac6a4615fce123d208e1898fb5d6201d9d
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4