Overview

overview

7

Static

static

3

Diversion.exe

windows10-2004-x64

7

Diversion.exe

windows11-ltsc_2024-x64

7

main.pyc

windows10-2004-x64

3

main.pyc

windows11-ltsc_2024-x64

3

Resubmissions

30/06/2026, 12:44

260630-pyfvasft8p7

30/06/2026, 12:40

260630-pwfrhsft7z7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Diversion-v1.zip
  • Size 20.8MB
  • Sample260630-pyfvasft8p
  • SHA256 3bac7e7988d397f89f59669e092f3a630b76e1a22858103e9c72b7a23da6af2a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
ransomware

Malware Config

Targets

    • Target
      Diversion.exe
    • Size 21.1MB
    • SHA256 578278cecbb59ccf79f7f49481a5002902a6c6b491cc3148c2a658e52c93ba2b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1behavioral2
    • Target
      main.pyc
    • Size 27KB
    • SHA256 5a93fee59d4506ab16328b2242ca62ba9e087ff7dbb90d03b2a06c66427e5e75
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    ransomware
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks