7bb0cecaca9d69493a730763c980471a8eadd0c5bf9bf5b20df2d090e3692819

Sharing

Copy URL Twitter E-mail

General

Target
SDIO_1.18.0.830 (1).zip
Size 6.5MB
Sample260701-clfbsaet4z
SHA256 7bb0cecaca9d69493a730763c980471a8eadd0c5bf9bf5b20df2d090e3692819
MD5 918d9eb09c4334f93a41c14d6aa2cafe
SHA1 2b80621480e3a3b94cbc1fd0c3abc5dcef347921
SHA512 ae9aad8a26168b38684edf433947474c9cd167a257899475864481915db040c05f8b477635294de88e12cb99e953b8d2c5ca6eb9357cf78da9d03282405da4cf
SSDEEP 98304:vmxVSvJ3g8HFnNmCjmp+Ga+vODcR2mY7v3QkhfXMJuPz9xYJjWC9svyXy0bhHmV:R3gCS3jOD0cLgHgrMlPs6XHQV
TLSH
T1C366333DF4A63558C435FFB8994F1676E3EB249183B2E12BCFB131901C9AE2A370551A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Malware Config

Targets

- Target
  SDIO_1.18.0.830 (1).zip
- Size 6.5MB
- SHA256 7bb0cecaca9d69493a730763c980471a8eadd0c5bf9bf5b20df2d090e3692819
- MD5 918d9eb09c4334f93a41c14d6aa2cafe
- SHA1 2b80621480e3a3b94cbc1fd0c3abc5dcef347921
- SHA512 ae9aad8a26168b38684edf433947474c9cd167a257899475864481915db040c05f8b477635294de88e12cb99e953b8d2c5ca6eb9357cf78da9d03282405da4cf
- SSDEEP 98304:vmxVSvJ3g8HFnNmCjmp+Ga+vODcR2mY7v3QkhfXMJuPz9xYJjWC9svyXy0bhHmV:R3gCS3jOD0cLgHgrMlPs6XHQV
- TLSH
  T1C366333DF4A63558C435FFB8994F1676E3EB249183B2E12BCFB131901C9AE2A370551A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  autorun.inf
- Size 70B
- SHA256 4bc24b0d86b75e60181af5ef4c64f9ffc4c1da0bd972a55ef4c35d7c5ccfea59
- MD5 43bd07f881946a43fd14ff4714247e51
- SHA1 58ae8289253daf6cbfe8eacf21109baa511cfc7d
- SHA512 45020122b728321dad37da0bace1e7b2da50fbcb8408833286aa4c08fe827a8827c6cd2cb87911c29c2e48f0ec27d132c64ebb56b231930a7bfd20e7053585bb
- TLSH
  T108A0222CE0032800220EB0280002A0B3B8AFC02888C000883EC003C88A00EC30B3880C
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral2
- Target
  docs/changelog.txt
- Size 21KB
- SHA256 da31a66637bd35ee7f1bc938a994986d9ada10fc84a50611654bdb0b36a01c6d
- MD5 ce5253d03eb5013668c429a8cf964800
- SHA1 9ac1ec94b605cbf392ff87b29f34646caf0f4794
- SHA512 eb46d43817f9e88d2cc2097aa4acc9a8cabab16935153418aace127e31501ddc28a6e351f5a82befd7328af9e2856db37c17f8bfcc4f3c3af0ec42685f165d8f
- SSDEEP 384:czyrTZk9FP2a/EGFvKzlLS2gke23EWIV1cW0kR:nIKY324l
- TLSH
  T1D3A24417D72B653414F18399621BA2E3F3ED525453FBA878B0DCD008B74AA7CA339476
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral3
- Target
  scripts/example-script.txt
- Size 1KB
- SHA256 928f4f24f63dfc86847d329c57c01c072989985449d0f8ef64ac1879f11bb507
- MD5 b7e03040b6cceddc628ff4faa729ba2b
- SHA1 8cbefac846f5127f8d7d4d849552310b0ea8e19a
- SHA512 942ccaa98ae654bc0611cce6e62b4c65e74d86f2d4215454c35f57ff2492cd681706d284bb37c67d2b2a02adab1d5049a5bc1676409a6e19b88211999dc0948a
- TLSH
  T1C1319D866941AC261AB2516346B162D6B321C50B436D3D2DB8CF7830570CFFCEB3A03A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4
- Target
  scripts/install.txt
- Size 536B
- SHA256 389e6c0f535341ea56922773b4adbb481fe9d1c4dffec0877e18f5b9dc8ec237
- MD5 402882e7c06fdad3f9eb3a5fdc827aec
- SHA1 8ad10083c0d75ac9658eb33cbbce91d7ecd0b632
- SHA512 22684722459eb733715c755512e71d599434efd982a3aa9558323e567121f08abdedbccd20e6f8d68490cdfc05836dafc911e185e71e603c58e9cb4b76c6e630
- TLSH
  T148F09E0EDB81A1FC2A9483B30F3BB526B761114B533B5C0978CF40326B0738C9921B07
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5
- Target
  scripts/mahalo-test.txt
- Size 523B
- SHA256 f82a508192820ee55ea0005e6d6f41ae9e0c12fa303e80f85e74b1ad752e8702
- MD5 0d3dacdbfefbccf574abc9468b4f6cbb
- SHA1 d887692dc30a5cd7cd78fca01859f9052966d592
- SHA512 3bb5f5e21c2bafe7a78c5b571a44fe28a0807731859a4fedf52c6f54887fe34b62fd1045f115f8712f04f18b47946b20d45aa25901ff361516f336e6a9dba4c0
- TLSH
  T132F09E48E7A2917436F0538A963EB150F775D14B863B3C2DB4CF013027007E4F55E216
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral6
- Target
  scripts/oakslabs-test.txt
- Size 689B
- SHA256 4cb226cf93d706345198f2e6da486509066a4229a44f6a4ffa68036cbe0302ba
- MD5 17c2a637df51fc6c067853fa01f69550
- SHA1 ff3dc2213cfa8bdcc49e6d203478886e55a500f2
- SHA512 a07d2e135fc237ab6096dc2d08bedfe7d7b69ca0b13cbaaab0d8797cb82ab8c43f4f716ea557703656f81468f7e7aa849a16c1a41fbae1770188abcec71825ed
- TLSH
  T1F201DD09D791E1BC2B91C3BB1A7A2B817B6345074B371C2CE8CF403A165679CA77E617
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7
- Target
  tools/SDIO/langs/arabic.txt
- Size 35KB
- SHA256 98e8334985ed2474d582dbe4d3a1bf68ccdc83b9a50fd7374cb954d5011fb9f2
- MD5 a3492a30ddbc8b8bbfaee9d82d970454
- SHA1 a0a1986193e747767af16ed662ea16faa8919225
- SHA512 440ab20d02df89055de9a5d332db5caacf24c52b09535be552a0abf1f96eaeefc4eccae312210a67bfcb986273f24f5d26bfe5d4fb026a0ad99d145d0ac6b480
- SSDEEP 384:VMxXwykimWxV1cDUnLIuGvrUaumio4BWaQudQ6dqqqq1Z40sIZRroFnQ/Df2hwfx:CnQudrq5aOpQCDgpgQsdwGAtj
- TLSH
  T106F2CB93DA1180B106539D09D4E33578DDB3BD23AA0AF82036DF56B883D6427D6EEB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral8
- Target
  tools/SDIO/langs/armenian.txt
- Size 40KB
- SHA256 5eca850e3eb8729c227a73ae8daf1140b85b05877f570b2567c02486435c1e4f
- MD5 599496889ceb1bd9b167fa2b9fc4e3de
- SHA1 e73698b9bc68020da39e20916733a14eaa8443ab
- SHA512 d1842416a0e9c9f33f6bc986df74d28e655d7c5a13fb534c32ca4e72e23c57440aed6a4d30fcbc1e407103b7922f69361a52030f85c828bfc280100e4981149d
- SSDEEP 384:VvWj+X0imoUprgjW6Gi8W7Qu9yLj8OrwEAkMlR+KGjdqsM8KtwyjAKwRU1GxwXLZ:QBkcB1pe6bmVi4iQhRHZ
- TLSH
  T147136BB6F600462F361AB1A8AFE67571C0FAF9952103550C726E35EC0F201F66FBB51A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral9
- Target
  tools/SDIO/langs/azerbaijan.txt
- Size 30KB
- SHA256 792cb3a8be3688a8d101220f350c4c5707b78e8fae21c01a558d2e7da9c2cf4a
- MD5 a0cd37fa99d4c9838eb1b4007ab43916
- SHA1 3bf81f07f3f238744dc2c52d1a9d325fa8103a1e
- SHA512 7624ac8bf08fa212bf49e7a6c3fe26e64d6893cd19d41ee60d0290aca4e67cf429928c092d32fc3a72b410a5f46a0d1ef9a83c89e2a9e72d6728273bfddca8f3
- SSDEEP 384:VMJFBImNI1AtimDMXp4zh2Db7/GKXAJNpwpQnS1dqCFWYKqjGN9qzK02B4/xeCSN:2LQiJi0MYQcbBulft4LIMJF
- TLSH
  T19AE29543E60B1A3442AB93C91C8A7A76A9CD7F09614A5085737CC1FCD3C960B9AFDB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral10
- Target
  tools/SDIO/langs/belarusian.txt
- Size 39KB
- SHA256 f91239ede5924af65194bf5b3539c7a8d6a1fd04aa0eba77775158f513dc40e9
- MD5 90d2bc5fede2c407397747a5f34e2b40
- SHA1 a902db906bdc63079bbff9f3217839424f48f861
- SHA512 60bb1b330dd53a901df64a1fa16d63806dab5c8d4fbb360d6be1ecd85a71bc7875617ec23cb749489247b75086e4b582eaa9bd225eab65398247495ebc2ca373
- SSDEEP 768:3S08M31dI01/MzjQDaK5vU6JFu/kCSqCFHJF:3SFM3sVzjlKiyzCwFpF
- TLSH
  T1FE038543D79A0AFF1203E1835D497A6E3CD629BD77AB7245327DB8BE23A102442BD714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral11
- Target
  tools/SDIO/langs/brazilian.txt
- Size 29KB
- SHA256 3b1b52396eefd3642bd88f3b2a9e92b5ae26205c37dd11c9a581acf42f5d6d86
- MD5 a1446cb5d23a50bdc765e593a6560c07
- SHA1 9b05759b3404797b9a63de4c4f0b7bf0bfa5e930
- SHA512 fbe122d28444c8a9c6ef54b99506721e48fb86ef3b81c175251d79ef42f70e8af0f5bd4c235ee691a027dcdecb64a6a13b964ba2644a9a5d8daadc34acd77b0d
- SSDEEP 384:VLrvJC+wimy1VBxe7yRIn8lTI91kJ4igsa5bgyxDT8BbafwEmdtfWGj2q5ADbRix:GMQKhCnlyz/dq1XKiV4mGPsW2lJ1S
- TLSH
  T1DED24C6FCF411A36496392C42D57BA2272C87E595A0FC259772F86EC83D840C81FEF69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral12
- Target
  tools/SDIO/langs/bulgarian.txt
- Size 39KB
- SHA256 175f9048e8a15a9b1d8efa9bcba761c9fc6670773d40d6d6d4a80719cdc6fba7
- MD5 53edcb3607a90df7ddb779d91642b082
- SHA1 72a5b34cbf7376b4ce23b964aff5da1c6d60c40f
- SHA512 e3d4207d4d3b3af944e92e96ecdd97f897da791f13b975d427a8de12d9fdd87b95a6c2844332aa31884a120d3845c5d3547654e641179e2b6308a8559ef158fa
- SSDEEP 384:VkkS0UIimW2WV+U3QIJWd4OSb8kyaSe3ihWgChuKXiZyAMqplT79U0UKRA1Zpkhp:kBH7EzQ3PKDIh7e
- TLSH
  T143035962D65619AA0243B58A9C053D163CCA64BE3FABD6C1727C69FD37E003886FD70D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral13
- Target
  tools/SDIO/langs/catalan.txt
- Size 29KB
- SHA256 0d3fef667ba32daa21efd6954b54e32e2080f0df3c48ddcb23456a4a5b9f1652
- MD5 5037deb4dd83ee7081aebcae0d0b8dbc
- SHA1 d9939885fbea98193782f1d17769b0491c076ce6
- SHA512 55bcac0fce416e366712e2d7006597b2f5976bd21373c4c2a0230a78a13710f7bd09389452788dd6c5d14289432a5898a05d2d50e8ac949eee1bd0e606e93c97
- SSDEEP 384:Vbr8vbGQSimb1wBfU8muTb/rluyYNvYrXg3ttVBNbUswk2Wra3FrG1Z4ftggQXZL:OiqAjd6pWr1FHaqZHSdAoLo9BJF
- TLSH
  T1F8D22D23CA4427355993358CBF83B9336188BE19691AC159B33E5AFC03C8548C5FFB6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral14
- Target
  tools/SDIO/langs/chinese_cn.txt
- Size 26KB
- SHA256 134209657b882bf97ede88dfb0c74275c68d3fb58dafefeddef403d4f6c0a099
- MD5 532bf8053f8e8478e7cba5efcea3a742
- SHA1 b3b947c805e0ca5ddb81a565ac59fd58d4833555
- SHA512 f0c9e70d2b250240bb5b5fd9891595cdb955727e6f46d2996890b85f9e936e226f31e8bea18b22eaf06d76ae0003b67cdfaaa4b04734c3710cc53a825e2fda01
- SSDEEP 384:V91e0RniNT9mWXwIq89ntEQ0Zual/DZ0NPzEc9aXxxXAn1b/XDbU8elYgD/YgUvj:z9YOYXASJR5F9VL
- TLSH
  T168C25D13D2420D7A1B0331802EA7317665847E58AFABC4E4BB6E45FC079CC2D99FDBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral15
- Target
  tools/SDIO/langs/chinese_tw.txt
- Size 25KB
- SHA256 cc84af8a4ba57b942ca3856469b20b825cdb8ac3d385ebe132fc8ec715a79013
- MD5 6886e0f764f8a74d5889f3a819ebe49c
- SHA1 d3b07b7718e28fe2df85502873c1d4f003f673b6
- SHA512 d171cab45a50a1330998ca3d95e1864e378034dd7431302b1aec14ed9612becde7066a0c39fc5bc92ac148df3975cd22decf2093944f8925397b52a6685bb0f1
- SSDEEP 384:VR701Sac9iNJTWHG3Wpc8RL3ow01/sKD71f2nMqXcV4LwhYFZXUlvvEgDva4LA8e:NavM/RRLDXko
- TLSH
  T171C2A527E2460EB91A0729D03ED330BB14C43E28595E90A47B3EA5FCAB4C42D95FD767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral16
- Target
  tools/SDIO/langs/croatian.txt
- Size 29KB
- SHA256 f27f62457e853118c6be12b01b7479be9e470f421a8254a2d8ce5e77030b3b33
- MD5 9a32e25dff6bd41a215bf9cd17219642
- SHA1 8d3b9e640f98faf38be4a86cdbd09961f4d786d2
- SHA512 112ec82ab49441fbaedfb3cd3ceb858a72d23779aa1f496aa159de2523cf038d45ce4c7e99bfeb35b10374a072ad90708394dc8932f2da3c68be979fea356697
- SSDEEP 384:VIMbjD7nimkJbBUYtkQ0drA/lpj9LRx10T1Y1c7ncHOd9eUDYPhsklEdxKvxnXIC:1ihELy18NF2I7HqBj
- TLSH
  T18DD2962BDE0262F51A8351841CAB3F323AACBD59751C89787B5ED2FD8381A1D41FE718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral17
- Target
  tools/SDIO/langs/czech.txt
- Size 29KB
- SHA256 fd405fa9cbfdb197ce39110fa46c0fe7358db70a6651c1f89eb2a229449ec8de
- MD5 3b787a6746f7a0e7f39e6f96f14c598d
- SHA1 9c3a1d2cc6b35a3d15d4790c0bd47fe1372c6067
- SHA512 d1ca2d91600605f44c04b2edfb1b8208fd56ff26c90ebdf65b96a4d1595f8aff1e6719fe17ca258b59fba1fa97a180d0b3466060e9cb9a8fb57532dbc1a22401
- SSDEEP 768:mVl8rfIGzwPORVY6iQ5YNNWEADLpRL0TdOVS+7YTWPquo+io0L+34kbA0:Q1WL4OVS+7tL0GbA0
- TLSH
  T159D2A51BE28212354AB724882D7F7A315FDE7E25091E9869B75F84FC03A114E84FEF18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral18
- Target
  tools/SDIO/langs/danish.txt
- Size 28KB
- SHA256 432240328d4934da219ad4d220d509e84639a9475ccf6233716b324c7e84786f
- MD5 5e9dea382e3f41f35ed66f308ad01b51
- SHA1 eec3f849f8e3a48082796a4092312e7e6048e124
- SHA512 d8e051e4b5b87ff9e077136b4e8bcc8d4ce5d9686ced51ab6db72a58b56cee0ec3aa09f06bea9f448df388c5f3348787afb583e71bfde27a12b1bcfe94137a08
- SSDEEP 384:VFq0xG9EUimZQcB3+qgCp1hvw45fzSsOpEcgJXmeMfKTIBaLSMVXK/YGqi+BTFsK:fHdK0X3dqn6rcQXd1nz7UOcgUOmf
- TLSH
  T123D28487CA02273596B35688AC177933B7CEBE0C865E8019B3AC81FCD39581D52FEB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral19
- Target
  tools/SDIO/langs/dutch.txt
- Size 29KB
- SHA256 20d486b2913ad4b2082116c45f7ec85c0f6de77fa8b5b0416555fdaff6024d23
- MD5 d69d3742bfbdfffd3929eb0ba5b092a6
- SHA1 b0a1fcdc38ee99bc84fc04389ed29820f073acfe
- SHA512 33ad141fe2619641a3dd4e4bd20f8afa1f026cedbb992ca8479e44e02eec75ca9889147087e82bcfbfc6fdcedb3774f66905709f428e69057962b808393609b8
- SSDEEP 384:V+zay0VHiimJv4j29ChDVoFXV0Xe1lxrN8qfeDsmZdNNVstLzhDvH0nvgbEgCX6o:LV3INh3yVRSMeT8UOVWmCbf/+
- TLSH
  T146D29213D601163944A3A9886C473973B78BFE1D8A1E846CB76DC0FC9391A1D80FDF9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral20
- Target
  tools/SDIO/langs/english.txt
- Size 25KB
- SHA256 468c10c4af3b7f05156f145d503517c1c1a5ef4f32119887832297d296254576
- MD5 7d4ecb4a2219db4dcae1eadb50f55272
- SHA1 57afc4414a83b659f2fdb2a2483a6802f560f9e8
- SHA512 12391484a5b159214e9f21cb8a836eea17cc9e6a9f7a36f9fc14f024d3a29280f2e44536b0f1f981ce2c56e4599f14faf4ae267a31311b2022c51c5bf8691c29
- SSDEEP 384:Vmh6336iu2YsKXlyEAtd4FJYrDhXN3IiL1yuYJpKWkNzF3K0z2qXPfB9ityybOh+:4JJZ2FC3KuNleU5F
- TLSH
  T105C2506BD7012B7644A3A6846C0B3972BB89BE4D025F8025736D84FC93D851D81FFFA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral21
- Target
  tools/SDIO/langs/estonian.txt
- Size 27KB
- SHA256 407559af6c3dea271f8385304b0407ee395412581d2b69507d67d63a4cb708ec
- MD5 0b8b394bc11999a6ad5ddad50bf9a592
- SHA1 743de334f149a5b6f9c545c2c22283375ca4588a
- SHA512 7fc626a29b9a553c53deb0a033f18f9a11668bdc7c577fa302f10c880817bd777606d42b2b88effeafee60a0d244e65ad5b35ced2fceff100a5b55eafeb51fe1
- SSDEEP 384:VcC6XGqDeimHeIDpBAZkWKBjpLcnzhj/b+jCDlYeXv4DfRgIxY3H+Q194PAwsWho:OWijX+jA7tHlMSBSXQ
- TLSH
  T103C29263D2151276546712D81CAB7B332ECEFF18250D9425B32D42FCD398A4EA4FEB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral22
- Target
  tools/SDIO/langs/farsi.txt
- Size 35KB
- SHA256 4983cb6b4abe3d59b236f8610d8b0da4048da12afd8078f48e0f16a32f0d9e94
- MD5 cd354fa6181292fbedbfc8eeb955a422
- SHA1 3fb6beabe9cc938a3bc06358f4aa9f081e03b6a5
- SHA512 50cf80c06b2de8c31b40f183922ede16f928bc06336a502a14c77c4955fda8423b3f28c7ef9619aaffd470d7e917a0d4002a10a5ad84637a04002909e7eb0358
- SSDEEP 384:VdUZWsziimdpR1FB8//gOl72LbZqlfgkSNpQUKhhyrtA+NieqpI/AYK/8X2jca7s:Czl8FVq8GTzSb/WZVxANFdJbTJF
- TLSH
  T103F2EC86D75966B14253C54214E33438CAA7FF019209E8407ABD06BD4BB4A1787FEF3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral23
- Target
  tools/SDIO/langs/french.txt
- Size 30KB
- SHA256 133f74687b702f9d2f0d5209c3d40b5e47e29ea48a4cc3e6bfb16d2e18a3e002
- MD5 9234e2869c96b442007d16aec17464a0
- SHA1 9708408706209f794f0d03f305046dfeedc30651
- SHA512 6826d7a7cf11f7f276e3ba9959971ff2a2cca2a2e33d5dfb34cb872ae1b7a3a349f485355ddd97138c3247c081f19a5e3c9d28f38b9933199bab4d485dd9e3a2
- SSDEEP 384:VyZUcD7im2DKxdItoBquy0SEsE0/lIFfbbIsQSvTsBERFJlggD4aBYTmt+A1I4JW:yjqu9whHq9j7iTEJm64lEel9
- TLSH
  T14BE2A52FE78053B215C326C1BD6379736958FE49690EE224B76E40EC039845C92FF7A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral24
- Target
  tools/SDIO/langs/georgian.txt
- Size 50KB
- SHA256 3aed7ffb54bc2a50373655ba7b323e578b783b86bb2467b9185dcf5fc83202c0
- MD5 a6c6af3b3628aea04dee881d1d3ebdf4
- SHA1 3c26669919df725064a2c6087a7afa709124069a
- SHA512 18625f65e4bf0cc1f98d3ce5d74aa828e574f285d49fbf16fc7f723ddc7a2154afab06445cb066cb119727491531e575a72b44205a75250cb9244d831f8a59d2
- SSDEEP 1536:QBMmu+KS7aYJ+Pg49yrHHM6N51sz1AbgrS0G1yubWwIlhgsK2r5D3v0l8hSQyg:sg
- TLSH
  T16833A192A5EA27309C5E10040673B79677999CCFE0C9803EF21DF9E57B52B041EBE396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral25
- Target
  tools/SDIO/langs/german.txt
- Size 30KB
- SHA256 7a9242bf5c520602f0a4f58350354f4282858ef2685b33c9e9decb70e6728c5f
- MD5 3bb8eff786a4f51f181e6d94fa39463d
- SHA1 96a7f3d57aff1558414189fcd7bfa2e06afffddb
- SHA512 f2b779250d0f86811cd3cc872f5d58807857325c9e606a3215f5d0a1ddda0380bd8de63b76b1b004776a87617ccf14ca72a15d8a5ea36b2a1d8913c143560024
- SSDEEP 384:Vrrhg5eiLXO6SOYNkaY/Y8nXPRVgReVzYmZ6l63Su/GIzcEx9LZlbV4Lkbxy46wE:GSTeFzgYJF1S6pFa
- TLSH
  T182D28323EB031779869767842C07BC76B5A9BF6A960EB01C739DC0FD939502981FDB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral26
- Target
  tools/SDIO/langs/greek.txt
- Size 43KB
- SHA256 b8c95d7c570e22df1fdaad1ed6e83fc873045dfbd08d7803ed74000b18fab0cc
- MD5 5ed707eac34ae05a480261779c8010c2
- SHA1 075502d5d8a7228e647552320f08c17385ff4463
- SHA512 8f074ea83ca3d6a7855f2934ed961fc06adb24931d475f7ab5f4f9d99a211853894180ee6c69febb8cd7543c409c14abf757842fb4236c92bdee641cc31d82a6
- SSDEEP 768:OcAM5DTkX8QsG6JnHeW5wZOYxTuNBLbwDNFW42pcmNRlTuPvUQ:NV/2O/GOYxTuNBPyNF3IcmNRlTsvUQ
- TLSH
  T18813D9CFF1692EBD4047A9464899703D2B863D18A71DC6D8B22DC7B87BF80618579E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral27
- Target
  tools/SDIO/langs/hebrew.txt
- Size 33KB
- SHA256 c86dbd886ae4540e6f8c5e0b4b475f00143f1ea9bfc50b9bd8e5eafea540cb43
- MD5 54549135bdd9cb168c81ad36f3f69849
- SHA1 a791a59839080dd3ac7b6c1dc95d0ff9f2b865c6
- SHA512 753cfdb1ea15a1f608350ac46d108f9244eb927a5dc019846a6746dccb0cdd0c1938340dfcb7ca4d2ef8b3915a04e50863b2c6f4a9de0cf50c3133cc76a17f80
- SSDEEP 384:V/CDp6xkimDNkNBlqC5idrJjP/nWJI87RZsEBiupWi2xgJBDEj86b62+slHLsWar:Ns/xwP3ft05+R6lWx
- TLSH
  T1EEF299CAE2C612359233A5C15E66F5355FE2AE7128166404F70C91FCBF230A7E8FB265
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral28
- Target
  tools/SDIO/langs/hungarian.txt
- Size 29KB
- SHA256 599c6f2c7cfa5347a1df898fb300582f0ba4301dc4f49da1479c6a07a6c05fa6
- MD5 a3548224ec2b2f035a8d32a7ed0e394c
- SHA1 4508af968302c6eb590c3707127c10a5c68878eb
- SHA512 8461bf2bcbdb99ebe6e2a781040eba29e901d5a2a456f94987415cb64304689e18125368bda00dadf745c66c0e869190aedc20b680a8e8cb766481a0eb5bd559
- SSDEEP 384:VPgHOoyiscdwb5wbJXHhgTl7G5mRmnKm/MKntqsz/U9gWJ2HausTCoXl/JtO82EN:cX+cON+mVLvGNxNU3j2/tpb0
- TLSH
  T12ED2A477C302127245639A863CA73932728ABE09962F4425336DA4FD435878E48FFB6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral29
- Target
  tools/SDIO/langs/indonesian.txt
- Size 28KB
- SHA256 b27d4bc9f9eeb8ffec944d7f6750c8f248fe411bcb03bd832bc426304e63a700
- MD5 92178248c7f2bd8e9b3a0d50f13a8711
- SHA1 7906ee41728d9fc72aee4f4a758884787680a75e
- SHA512 ac33aca66da4030358883d3fbca0f930387b8c6bffa7b1fd99f2735ea9bce1fca38ba3df8cd839df6569f69052134daf4e0b16c243db4337d89b00b97dc63fcb
- SSDEEP 384:Vh10IHQim8kkBeqE9KhNXlFyyelkBqP0hm5yCdk1xH9376FWp0oUSNYzSEJ6MVwY:DsbKC5u5ji+qcR/LwSgjRqE4Udam9
- TLSH
  T1CDD24F93C74A2A39886791D06CC73A322ACDBF155B4E5118B72CCAFC935460D82FEF59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral30
- Target
  tools/SDIO/langs/italian.txt
- Size 29KB
- SHA256 ecbf5d6b6654d9a1679bb6f1c6dbf7a9276d3a737a969cecc9f805f9052c7309
- MD5 570fe81ac697a6385898b48015a273b2
- SHA1 43c5db9cbd320c931f46670b0dfbc87baf00cf9d
- SHA512 be5bc6bd50ad4c07767f6fed6c419621818c556578ab35a70e3c1c21f6b75e41e1164ad0c28f1aae08225cd1cbb13e56595067dbc324222db7a6fd353147a4d0
- SSDEEP 384:VvhZuDsbnimfPnoRYy5lUeJoZkpgdPGTebrYqPA3bf6aeNf/t3fvz/Vqb8RFk8Kp:DAd15pqOVaXnusAf
- TLSH
  T1E7D2A67BD355063184A76288AC67757277CA7E896A1E4018732E82FC93C894CD1FEF1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral31
- Target
  tools/SDIO/langs/japanese.txt
- Size 32KB
- SHA256 c961e8659d7cb28d90e8b5180def7dda546e6247f20f91aec3b24b46e9ac9c61
- MD5 8522c768d25a5b8a54b62cfb326e6ec4
- SHA1 e6f6df1b6d60a23424c80e08fdc3f4fb0c40ea37
- SHA512 3342c0ec8ee0d2705fd0ace4e705ac173793fc379428af1af2e06248104f7f23007064eb7b1697be6808951ccd45579191ea660b12575384938ac097f2100160
- SSDEEP 384:VVmwW79imqR3cAFOPJC/TWnjHhub4xZw3mqBLiCCeDemicem6y8k38XNemU2wqXD:rmnG5n2OZtXzi
- TLSH
  T14EE2FE2ED38516754D27D1A51C4A3AF2268ABC4AED1B6638732DD4FC236448ED0FDB38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32