f424faf6d69c0c60f02792431418b206f34a4497737f6bbeb157314479cdb0a6

General

Target
Venatic ERA.rar
Size 2.6MB
Sample260628-p1k7ssht8j
SHA256 f424faf6d69c0c60f02792431418b206f34a4497737f6bbeb157314479cdb0a6
MD5 5d15e4d38a23bd072ed5f9640e8e3e8f
SHA1 960846b5212d8751182c6b4c7eeec4e5d0cc39f8
SHA512 c8cb29e193e9db6de8ddc21d71479359cbf2484d0a8a73bd31451ca9f7f983b801a8d5bf922880a6554abf1cf00b91accdc563989d6d91d633d8b52b4edf0768
SSDEEP 49152:CGHzNxGvQZ2TGJzJ4c6vcmr9+RXMnO6kONidFYLOd+D4WyqLrEJih7x7R8:CAzNxKQETo94dMRXMO6kkiILOdq4WbrO
TLSH
T1B6C533471EC29DB37CE2CF79E1DDC060DC5336F6E8693B98BA05AB9D93690C4921D848
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Venatic ERA/Loader.exe
- Size 3.5MB
- SHA256 0899d49d3964478bd833bced56d0e0d6cd59546944694da40da3c0c577714938
- MD5 4ff23dc8b0020e3a411aa427bee930cb
- SHA1 eebbb400bb62f179c1841994f12bb1b003317179
- SHA512 c9299eb2c73e9ed738e55d9df938e415d7c034e27a4bdcd60ab275e55ba962b13ff73c95d23f8db473ba60a2e90ca6d2d5ff50aa4b352d8529ee488201fe6f94
- SSDEEP 49152:/7FulrtrrheoFnybmdQrWoK4M++94IDiWSN1W+GpdHf7krkbwWpo/U7wjgTm0Pxv:zY4fCvo/U7mgTm05AwJHE6h
- TLSH
  T175F5CF0DF6E646B9E2B2D17CC5A2A317F672740A53204BE73BCC05885F66BD4A63DB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery trojan adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  Venatic ERA/Venatic.dll
- Size 2.1MB
- SHA256 eb9275b9da541c00a8ffc018a3d0af597fa7e3ee99c35e514206c352823798fe
- MD5 1b8c2964cf4c321f99b4e02d494a72d2
- SHA1 587d111014e42f84734a710e2321caa4ad17b292
- SHA512 f3cf76e7947b09e2bf6b6e0f7533a140e1218a96dd924868f1da9ec63abc6fea4bb87e6daaf42d2d89e42f25d79aee5554355f5d969ded5e1bcbafc95df20ac9
- SSDEEP 49152:8WoK4M++94IDiWSN1W+GpdHf7krkbwWpo/U7wjgTm0PxAwJHE6h:n4fCvo/U7mgTm05AwJHE6h
- TLSH
  T195A5BE0DF2E74A6EE3A1917CD5769313F367740E13118AF73AD800986F66AD85B2DB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4