General

  • Target
    np2fmgen_260606.7z
  • Size 769KB
  • Sample260629-15f97agv2z
  • SHA256 f6f0c955551e239b7d91e0be73188a077234fbd1a863baa6f35b6a6a09a975ca
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      np2fmgen_260606.7z
    • Size 769KB
    • SHA256 f6f0c955551e239b7d91e0be73188a077234fbd1a863baa6f35b6a6a09a975ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      np2fmgen/ENHANCED.TXT
    • Size 1KB
    • SHA256 f4eb126031e6de0c4ca2a66bd16884698426ad2a043391d5aadd82b81c2ab8df
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      np2fmgen/Function.txt
    • Size 13KB
    • SHA256 cd7d9442357444afb8dccbafcd54a3a36a49f5764b1f1135640dfe322a02d278
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      np2fmgen/INI.txt
    • Size 2KB
    • SHA256 ea97dd1a24b3bf59667f16e90e5c4f62b526fba9b95c085847320c00a91f47e8
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      np2fmgen/faq.txt
    • Size 19KB
    • SHA256 f4bbe3466eecb84e33ff78b3fd0b625fa4a90fc958ef063b8546b0ec00b9740d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      np2fmgen/np2.exe
    • Size 856KB
    • SHA256 f0f8fddbf06b95c674ad66233932ebc5b0d6700861611a0b92ec212a4de871cd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      np2fmgen/np21.exe
    • Size 976KB
    • SHA256 e36881b27c39f166c0b736012bc37d2711d2dd9794531116758a86988d446978
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      np2fmgen/np21nt.exe
    • Size 992KB
    • SHA256 05c276133d8fdd693ef91524ae52a6c650487af06d185293a5bdeefdc6ddc892
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      np2fmgen/np2nt.exe
    • Size 884KB
    • SHA256 fc2d0b53525fe60fb6f8c3f7cc68e73e4dee6df325a38b26655735236b880d08
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      np2fmgen/np2sx.exe
    • Size 968KB
    • SHA256 67bb94a200c25d87c79be9b6d540057ea766d76cb54efa17c59c3e98e38e71aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      np2fmgen/np2sxnt.exe
    • Size 984KB
    • SHA256 7a42cc6ada3cdc600931781d1ec4b5ff57f1af20555a969d7ccb3543f5b73f52
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      np2fmgen/readme.txt
    • Size 54KB
    • SHA256 d89e3c141d50b7e956064a224e0b95ded3f0b6abf7e50f821b3b8d916d1dec56
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

adwarepersistencespyware
Score
8/10

behavioral3

ransomware
Score
1/10

behavioral4

ransomware
Score
1/10

behavioral5

ransomware
Score
1/10

behavioral6

ransomware
Score
1/10

behavioral7

ransomware
Score
1/10

behavioral8

ransomware
Score
1/10

behavioral9

ransomware
Score
1/10

behavioral10

ransomware
Score
1/10

behavioral11

discovery
Score
3/10

behavioral12

adwarediscoverypersistencespyware
Score
8/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

adwarediscoverypersistencespyware
Score
8/10

behavioral21

discovery
Score
3/10

behavioral22

adwarediscoverypersistencespyware
Score
8/10

behavioral23

ransomware
Score
1/10

behavioral24

adwarepersistenceransomwarespyware
Score
8/10