836742275c5a31843312ba5983c7b2906603b7b121dd9e7e1d3f7cca5716bb95

Sharing

Copy URL Twitter E-mail

General

Target
Архив WinRAR.rar
Size 160.4MB
Sample260701-ymxhcady2k
SHA256 836742275c5a31843312ba5983c7b2906603b7b121dd9e7e1d3f7cca5716bb95
MD5 84f731f2043b2134722f0f93c134342b
SHA1 3343c45172ac6ec5434c74276f9e240e63c68f14
SHA512 4253c0869e6149284851e31e08a1a206a2ef0ee136702c11a078d37ba0ee24948977c3967067583ceb2cb5e7ab0699dea4bb8c7a385f1b85b9d0fd4aee937b9b
SSDEEP 3145728:hB4BssmDRTY4KmHvkqPEHDdzcfeRaqaWaEaoAh2gPo4:n6kY1mHvnPEjdzcjh2gPo4
TLSH
T1538833E9D580081F054F076A176B89068B2FD3D4925A7E0CDDEEC29FCA30A517E35B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  PVZ3 PAK V 1.0.25.2-modded-ver.exe
- Size 2.9MB
- SHA256 eae3e9fb08a9c70567064a594d172389620232dfc134987ca75b1ec97946fd4a
- MD5 7209387a60d9016dba3895f007a35858
- SHA1 71458d536a97bcd5c037c53d807e1bc1cf309333
- SHA512 1976ae4d99e785099e31d51424260dad8db8a0d4b9acc5611cf0315d488b534e84842c2b7b5f94f80c4a69e5fd0e785a2baee58f2c10baa1644676db7107f8bc
- SSDEEP 49152:Jsdk8eOsx3R+ijGgz4M25Zxv0SmaeeDRgh2xOfpDyYJNo/nRAMOghx96S7kIj+IV:L/f6ijFUtfeeD2hnYGMO8j+CR
- TLSH
  T143E59D51F7DB90E2D81B1A7541B5A73B84325F541338A6E3EBD42F2BA8303E2E837159
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  PVZ3 PAK V 1.0.25.2-modded-ver.exe.bak
- Size 2.9MB
- SHA256 10dd5d62b816999aa523577fc214279919e4dbec52472e60012f1fbdb36faad6
- MD5 f566562de4bd15c5f2def6716c304837
- SHA1 d0c703284776ce8d5c77043d1ea1d45bf1fedfb1
- SHA512 7250fec2f758ddef3205308630745605c8813a380d1c7eae5d5e323b1c6d7995c58fa5c6073cc150ad47d53226dc472dbd4fc21200b5dc75f77bfe683f035a3e
- SSDEEP 49152:Jsdk8eOsx3R+ijGgz4M25Zxv0SmaeeDRgh2xOfpDyYJNo/nRAMOghx96S7kI7+IV:L/f6ijFUtfeeD2hnYGMO87+CR
- TLSH
  T13DE59D51F7DB90E2D81B1A7541B5A73B84325F541338A6E3EBD42F2BA8303E2E837159
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  PVZ3 PAK V 1.0.25.2.exe
- Size 2.9MB
- SHA256 26f205390f0e23a9af2e3be8b481a4e259992615b33c3aff569702376bb22d60
- MD5 b358e6acbcb86a13b91f1e1c9ef50751
- SHA1 26a46c3450578cbcac5619fc319cbf178f8fb10a
- SHA512 3ebb7301ac7e3307096ff27655ff57fd753d27a75b2251d3eb8b95b4b75b2563b34348150d8a6e97917814fefa488296c25324cc0110465bc10054e6274bd547
- SSDEEP 49152:bsdjPeOsx3R+ijGgz4M25Zxv0SmaeeDRgh2xOfpDyYJNo/nRAMOghx96S7kIN+IV:e2f6ijFUtfeeD2hnYGMO8N+CR
- TLSH
  T1C9E59D51F7DB90E2D81B1A7541B5A73B84325F541338A6E3EBD42F2BA8303E2E837159
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  PVZ3 PAK V 1.0.25.2.exe.bak
- Size 2.9MB
- SHA256 b5b44c89ab7de5cb59e7f0e166deb94cc74bdeb9637a350a7e2409b6cea60f70
- MD5 89885cc16b60fb8f7ecc6846c6673f47
- SHA1 75800b016ddd598705c09cc491ea6e1a8fdea6f2
- SHA512 c67fcef15368861ab7729a988fb6ba8fcbee7630f0965c96efeac1490672403bfb59bd390e778d67f633676abcaccdf5f5fedf1506f9a6a7213d88e8f9189eed
- SSDEEP 49152:ysdjPeOsx3R+ijGgz4M25Zxv0SmaeeDRgh2xOfpDyYJNo/nRAMOghx96S7kIN+IV:72f6ijFUtfeeD2hnYGMO8N+CR
- TLSH
  T171E59D51F7DB90E2D81B1A7541B5A73B84325F541338A6E3EBD42F2BA8303E2E837159
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Patcher.bat
- Size 1KB
- SHA256 7600974a335e7b6af9100b7cd229754bfcec9c3f19f959559e31f633e63081ff
- MD5 d46b9aaa1f980a0fd00a218ea901a242
- SHA1 85a85e13d79d2c21320402d78f34ac3f2482dd65
- SHA512 a4fe3b305204e8db87d15324ddf94810b53c939be8809dfffc2b54b6e7b59bcdc67872adc5cf60e6ebe8dd687d539ede4c0959963589aed970c3ba3e1619c609
- TLSH
  T14B3110E2B99260F745F00B993F7E20777506B0E352A22E56F10B41FA1E032E1337985A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  bass.dll
- Size 90KB
- SHA256 3627adef7e04dd7aa9b8e116d0afc11dcee40d0e09d573210a4f86bdc81a80b6
- MD5 6731f160e001bb85ba930574b8d42776
- SHA1 aa2b48c55d9350be1ccf1dce921c33100e627378
- SHA512 07ae0cb85464b015b35e6157228775a6ac66e5e62a1b47f9395307b61176b6df835e00a1518846507718acffc271263008cc8a9b2c1e8a0192c5438774e12437
- SSDEEP 1536:lyKkZPP882+8hMJ8Y8bRVYvVqGWWkaloy4bFcx/Rus5Ay6X0T3VzkxH9J:NmNN8bRVYNqGzCy8RQwXQ3pKdJ
- TLSH
  T1EF930199F5D17627C41A713D6BF203F3D0DDEA88C42B9F8D4E055B8028E79D96988F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  bass_b_2.dll
- Size 90KB
- SHA256 3627adef7e04dd7aa9b8e116d0afc11dcee40d0e09d573210a4f86bdc81a80b6
- MD5 6731f160e001bb85ba930574b8d42776
- SHA1 aa2b48c55d9350be1ccf1dce921c33100e627378
- SHA512 07ae0cb85464b015b35e6157228775a6ac66e5e62a1b47f9395307b61176b6df835e00a1518846507718acffc271263008cc8a9b2c1e8a0192c5438774e12437
- SSDEEP 1536:lyKkZPP882+8hMJ8Y8bRVYvVqGWWkaloy4bFcx/Rus5Ay6X0T3VzkxH9J:NmNN8bRVYNqGzCy8RQwXQ3pKdJ
- TLSH
  T1EF930199F5D17627C41A713D6BF203F3D0DDEA88C42B9F8D4E055B8028E79D96988F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  reanim/AC_RunActiveContent.js
- Size 7KB
- SHA256 489440123686b5856d4f3fcc76b1b8c5f56c7183190ce243158855cecac04558
- MD5 3e038cea960c1b650442b85cea237053
- SHA1 dc05dad434c6e80b1ac3b0c4f5759917aa078dc8
- SHA512 65924a711055a2a8c08bec8719bd4496389147c2403be3ac496a9c23f2d311381715eb89a35622f589243a199688b7401b6bb26e677525f0cf8319a724d4d29d
- SSDEEP 96:E7Q69oEjyul/eWJy7L7eL6L3AJVMgJgx5HCxB2yL6Tg280epn0pCDyCyTwc:Q9o4l/eV7L7eL6L3JUKFTg280epn0XvD
- TLSH
  T1EFF14F18F4A9E83B95025324482BD5D53BBCA883A4599DEF38EDD5841F4212E033FEB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  samp.dll
- Size 1.4MB
- SHA256 6f9aa1b4cad74db09b6c348cb82fdb2586e01038c0aa421324af9d67f35ca3de
- MD5 8c26cb51bf79bcca22ac86f1179bf443
- SHA1 57b6bfa1aaf20a8168efaff5321f592b349151e2
- SHA512 f52a04894669deabb15dd84c15939e2b6b7f93d3045361e6894c62627641eb4deae1d8cb5b92af8907351e7031ef2d63cc0896b707549c3f46c0f34a5ea8ab6d
- SSDEEP 12288:qNEm6xJTA1Nyq7crkMZk3iMjD33YUopxi888888888888W88888888888ib:2EmwJk1Nyq7cRJGHYUk
- TLSH
  T1726519E6B2D4C433E01AE6354F7AC0987C167E256FD584D73EF9FB4D8A38A40253A192
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18