4c7c01d5888e0ac80190e503e76ffe8a55395af44d06c4dce81f7c0c5c2abf0a

Sharing

Copy URL Twitter E-mail

General

Target
u7unvp.rar
Size 87.2MB
Sample260702-kb5spaew4v
SHA256 4c7c01d5888e0ac80190e503e76ffe8a55395af44d06c4dce81f7c0c5c2abf0a
MD5 7d4f0d5bd8f62dd4bdb8ec5de32e3ce9
SHA1 bf7ced242760c0aeb793027cb70f69848026a640
SHA512 181481e589b44ce0c9c22e7c065d763d2356eb8229593dc9b9b18b29f188bb74d5260443203e8618d767c9a7fb7c139ecb64c6612ad82f4bf301afb36b0bc83f
SSDEEP 1572864:kTBJ5LviBGkvfK66RhMynT2K3zbJ2ph7DRmOuMFGzbqQfqHUC:a50PUJELDRXuBbb2UC
TLSH
T137183324975E9A124EA45439FE9B8B7A72873437CFC068325C227D68BE3D7744BCB241
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  u7unvp.rar
- Size 87.2MB
- SHA256 4c7c01d5888e0ac80190e503e76ffe8a55395af44d06c4dce81f7c0c5c2abf0a
- MD5 7d4f0d5bd8f62dd4bdb8ec5de32e3ce9
- SHA1 bf7ced242760c0aeb793027cb70f69848026a640
- SHA512 181481e589b44ce0c9c22e7c065d763d2356eb8229593dc9b9b18b29f188bb74d5260443203e8618d767c9a7fb7c139ecb64c6612ad82f4bf301afb36b0bc83f
- SSDEEP 1572864:kTBJ5LviBGkvfK66RhMynT2K3zbJ2ph7DRmOuMFGzbqQfqHUC:a50PUJELDRXuBbb2UC
- TLSH
  T137183324975E9A124EA45439FE9B8B7A72873437CFC068325C227D68BE3D7744BCB241
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  R SLASH MASSLEAKING/BEARCEL WINTERS.txt
- Size 54B
- SHA256 be0085611ff61ef58715f4759441f6a68cf3355095df8b454d74ffd0e1546e57
- MD5 eca5807741eaf298ff0049d043eb6a5d
- SHA1 ba7004a5cb823dd534586bd91847041d90c9f30c
- SHA512 3b433d673ad085460a84ffe5142eb9663d9929312e39a7a0951740cf8f2ae0d83b80342ec95a9bad1fecde0a4eb9a78df571030288c02fa52e576fc258079efa
- TLSH
  T192900451D35F4511531031FDF4041011C7D30F54455F47753414D445C0DF4C453C7314
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral2
- Target
  R SLASH MASSLEAKING/DARS PHOTOS/BATH.jpg
- Size 38KB
- SHA256 9aeb44b634affbda9b7138c2611cfe608b401718ceb3a3576ffad1f68fb3713c
- MD5 b009aca43ce72c87527882cc368e8b26
- SHA1 00c262021defe36ef73c937b81ce7b198c458e24
- SHA512 5157335b3226ad5d901ec9c925706b176eafad9cbf222a0dc99cf1eccdcdf573a4ec62fd48eb944a74129063ea62220383e731ea8a7a59a38a4a4ce71d8bb9a2
- SSDEEP 768:/3B7l5rIooq5nfju9Vvt1icjzrN8RVu4WpG3Y7HLNzcL+yH:/NlhtZ6TvmcjV8fu4EGIHhzcSyH
- TLSH
  T1A103E1A25320595DF50626B576FA27F4FF4FB47B90A3840B9CB07800A8666A0EF6DD03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  R SLASH MASSLEAKING/DARS PHOTOS/CUM.png
- Size 4.6MB
- SHA256 c2c93d0301833a162cf4b6410f65ecb24f6b36f7e7b53bf391134dd1c954e078
- MD5 226417369e611e5f5b180bba8be51dca
- SHA1 9cf1717f000cc825cca992bc373fa85de711fa45
- SHA512 62068a3b080387cef4dd27567864eaf5b830231b08dc058da33d753de61eb1a10888a13f2f050977c3bdb28ba7fad3626e40f06b21eb7c69f6ea5cb339057699
- SSDEEP 98304:TRZRlIxO/kSNi3fFSMTHknGZUh0Kq8+EGbvDCBeNJ8p2H1s2tBlNmCCx7avNMXyr:XIxYkS+SOkGZUh0KqxEGbvDvgMVs+tC0
- TLSH
  T1D92633BEE1EB1CA350A2185A528884287DF73D11DB784AC554478EDC939FF84AFD6331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  R SLASH MASSLEAKING/DARS PHOTOS/FACE.jpg
- Size 116KB
- SHA256 ccc4aa0308830bdccca599140fccbb09cb7e3ba01dae4fae7a4ad566649fa636
- MD5 a17baf78017e39fd9b11a8274bd5e782
- SHA1 d4adf438f732ef50208f62b81808bfd14c770868
- SHA512 b882c6eb82a67867df750dea5559d2c0e1fb256dbd5d4ec99579582278b0e85cb4f8f57e54674f5182ead0cc5c475f1a0efd30985250cf9b43e64beae9243427
- SSDEEP 3072:+BJ4f9o/trv5GpC/KAPGI8Jrw6fMPiEtflvJkMFQWy:k2fC9v5X/KAPWJrw60HtkwQJ
- TLSH
  T1DCC312ACDE2827A9E97A0A33606F57B3978033570CD5022DBF20EDD16713AE275D590B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  R SLASH MASSLEAKING/DARS PHOTOS/LITTLE 22LR.mp4
- Size 2.1MB
- SHA256 5347b444e6f8d0c00cd89b21a77a03b16045a623353512422711cb47611c05d2
- MD5 2ac01d647794ecae2428d8d230c4f362
- SHA1 afd59d36298f5f47c96e5b99d06bb059b5fcade4
- SHA512 78bcd7cd92ab8cfc96fc5b343d093d846735b53c65c52c02a97260eb9f17279b0e718950349f84ec06c1b4416f5fb826918bdc8084fcb64f89e9d686e4c43bb9
- SSDEEP 49152:ApV+hfBvN0CVzueHwrtUWK+lv7VDlFyXkncmc:yVWfBGWzuYwZUWKyn0mc
- TLSH
  T18DA533C58733303BDD03D6399D6947983EDBEB7A05DABEE050546D5398B6A8F00618B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral6
- Target
  R SLASH MASSLEAKING/DARS PHOTOS/RUSTY ASS GUN.jpg
- Size 144KB
- SHA256 16a0914386988f920af92e3c0466773b7c7f26e6c24669b5067a59d0dade222a
- MD5 318f8efa921537e7e311d7fbd39a7916
- SHA1 7ebd15cba25c8bf00537c2f30e67ec969bf12957
- SHA512 ed356093b1a44ffeff7ae4466b25cb48cb6994a08103a8d56469cbc9a536adac80119f15691270ccb8c4dfa011c12bec9cbb020062fa306345d0b8d5e91f24c6
- SSDEEP 3072:4mgrt5qgcRyixsMob1eW24qIl5iOeQv+O9uf6MrGFLOmrog2:4mcORFVBM579uSMwE5
- TLSH
  T1C3E32252E6BDC7B5E77017B231CAD8646D2E9690E3D23390AA6078F07323D144568DEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  R SLASH MASSLEAKING/DARS PHOTOS/SON.jpg
- Size 125KB
- SHA256 50d1f357d44f1541a9acf50a4f920933b7b5a25bc4a2595a8a251198f344db36
- MD5 17b42aa6b22422cb76b141912e4fbfc6
- SHA1 74efe8c8614dfa7011d6c91e253c2aeecfd31833
- SHA512 26b7680e6a90602ff99668324a12408df5fc16f29ab74185700cb3aba2e3a2cc12cbf0d648efada828b842d5b28d279fd96627469f6946d8bee9d29d0aa62e72
- SSDEEP 3072:murz6920URDJ4FVzLckLp4rYdHEO99uAkNX:murz0ps+TLrLp5d99ufX
- TLSH
  T1A4C312072324AA0AD12F2C3CF7656129DA16729F338DC87717BE0DB19D884B09B446BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  R SLASH MASSLEAKING/RBXL/Blable's FEDEX DELIVERY THANK YOU.rbxl
- Size 11.7MB
- SHA256 156e7928c56853c4ecf6894f53b1d4300f36ee4f2409520c12aaa6b703739c16
- MD5 9b25cf5ea6d2a7da89cefb7432682314
- SHA1 5fb9f8af967fcd7f1f591614718de948b181875e
- SHA512 2f38cbce0913986e85f6066e1003bc23a2a832300a101621eade6fd94ffefe834b7191ffeae3b07fd715018488f459faa57126f988c0faee24d54c027d0a10b5
- SSDEEP 196608:Xlcw/ZpwekOBam02y/p4TQ6pAreN1A79fOHPNApgTj:VF/Z7rBj0fR4PpASTA7kmpK
- TLSH
  T18BC6E0F5DE57CA77D06204B38DB18B66150A72C562A63787C9D4B23326FE27837E221C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  R SLASH MASSLEAKING/RBXL/Blable's KAZANV1.rbxl
- Size 2.3MB
- SHA256 780dd1bbcbb7c488c496f5ef115752fa1dc04b43d8d46eef8424e483045995de
- MD5 b2e60343807d7bdf7594c726dcdf6b34
- SHA1 cfbc615a3eb4ee2e87286888bf07cdb2281271a7
- SHA512 c0f0c2edb535cab3a876a926db2fefa3d9f8e16d374ffb24731be647dd43ee6e3355eb3153c4eeaa16fa5211d903896d3982726d58efbe1041b754c6d4e99aa1
- SSDEEP 49152:KhntJLqC5pulgCxM87zfM0WUEIQBXikJqPeImd:WtV/ilPfziUEtSHWImd
- TLSH
  T1ECB5E0F5EF55CA77C4B210B3A8F64666520275C892936787C5D4B6332AEE27C37E220C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10
- Target
  R SLASH MASSLEAKING/RBXL/Blable's sandy hook BEST.rbxl
- Size 16.5MB
- SHA256 49ee99b01461cce35883d2c8c8a28fed62011cd6e988d548e7aa42987016c50e
- MD5 d16c6f22becc29b4adee6dcd8c80a152
- SHA1 0f8751693e2510d8122d9372074f8dabceff8fce
- SHA512 d9ce2467c404b69026836ee63ce3991bb4e784ec0fbafda72d9d5035d634dd23e74fd6e679327adfc67cbf6242ea9dc982b0a188c963cf3641a23a26c6c61446
- SSDEEP 393216:SnV2fyuIRmwZPWNtT4a/E+Zh1969uNfA0lqbtsXG:SV2qziZ5No0lo1
- TLSH
  T17207E0F4EE56CB7AD16204B3CDB18B6A120676C552622687C5D4B33336FE27837E621C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11
- Target
  R SLASH MASSLEAKING/RBXL/Blable's sutherland.rbxl
- Size 19.4MB
- SHA256 4a83c1aab9bec006f32a7aa22a705db9288e1522db8f44c969a5a3c3a13f19b2
- MD5 211a0a27dd1e7e6f884963220a632ae3
- SHA1 56cc55bc83e05b168230ca25b52a98963e62b1e7
- SHA512 99b9ca6f41398c4201b1a4c8712ca4e1dbfdf3b9088e19fedb9c32ef41ce06c9188c63d7386d9f335058256c59ab2e9e66735adea4867cca7732290dfda513cf
- SSDEEP 393216:DiR3bAZyPw2hJJ5TkBbqwNInp6iT+wG5r4m86Z:+36b2X3Gneprle7z
- TLSH
  T19D27E0F4DE52CB7AD1B244B3C9B18B66520A72C552522687C5E4B63336FF27837E221C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral12
- Target
  R SLASH MASSLEAKING/RBXL/Dar's JIKY V2.rbxl
- Size 18.6MB
- SHA256 a338d60e6a241dd09d4064446232bb3bc2f18f586f4aa33a5d1e87c3150bdad6
- MD5 48abafc55732353f328774594353a7a6
- SHA1 181afab64c35b39af9094446cc8dd45fed9beda3
- SHA512 599dfad2ecfb3e84560e4775758fc85ff718e6035fdaa3884ea07fb97524b71fcc185b82ebb3039ef811dd36e83fa64db0121499a01209c67fe2a426830de161
- SSDEEP 393216:+lB1+RhJJ5TkBbtwN1qnidSpYAiT+YaC6+xw12m:2+RX3GybynYhbkNsm
- TLSH
  T1D317F0F4DE46CB7AD1B244B3C9B18B66520636C952522687C5E4B63336FF27837E221C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13
- Target
  R SLASH MASSLEAKING/RBXL/Dar's Jiky 2026.rbxlx
- Size 58.6MB
- SHA256 27407741cb6a7d05c6ade2e05290584a1f57970711901be2cdb647683c41f4ca
- MD5 1a2207dd2ac83b740e11740506c59d0a
- SHA1 cff599a5af8cea372f13298276c5aa864eb68715
- SHA512 1f86fb88fe0e40666c1115edfbd7e35e3675ba18af9cc3ad85a92106fae6dfa59e55345988773e5d439417cf0bb41d75f013ee5b0b752e051fb087012c505c50
- SSDEEP 49152:tagXNqJpQSZgd73bu0fR6L7QGGrG1hj+IniswtHEKAaba0zAc4qHku1kBX5mceX2:rA
- TLSH
  T1B9D72010904D2E6EC8562EB28E1979DDA89F7EFE21DD72F170FFF65018980A429317E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral14
- Target
  R SLASH MASSLEAKING/RBXL/MAS Port Arthur.rbxl
- Size 15.8MB
- SHA256 3ee257cd2e84f7d7b7dce306b67c11a2353cb316daaa3efb83f76924f20ba4b9
- MD5 322a019906bb2772ccdf4b5482ebcc65
- SHA1 3a8a5ccaf4050e90bed151355d576e4cf3506880
- SHA512 a24304cc41b765b4410c75a255de1ae3152a73c1dc8ef6cf9c9c85f1f001104b8171ed2869d61707f50fed35af0d7ef6f310c18309f508ea327e1ca0ba463480
- SSDEEP 196608:iPhmC4l1sapLPNFT93eTaCmEhtCQbVbGHStbQzRmwwrVlsuOFYJo9z920TWd8lD9:ipmd7NFT0GCmEPVb9Jwwku8L9p2F/VIj
- TLSH
  T17DF6E0F4EE56CB7AD1A244B3CDB2476616063EC552622687C4D4B23336FE27837E621C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15
- Target
  R SLASH MASSLEAKING/RBXL/MAS Vtech.rbxl
- Size 15.0MB
- SHA256 96b8046c0a309cc800dec85cad261e49b50cf896ea25a5f201c72898113e55ff
- MD5 117643a7be02629706c40401c04ea01e
- SHA1 a77133aa3fb904f549f607b6430757027fe8523a
- SHA512 fb5a999a662f5cd4984b38e9e5a60bf4a70bd3eda7c514c297935f507e4462fb0d33ca5ef13e0ab7994c49f8f6b129294caafecc7fc58a653836d6fd55ac4b8a
- SSDEEP 196608:tjllTQ5gC07vk3eTaCmEhtCsSYR/66IKR7cQr6NlL6qbTbJJP3XIS9DSr:thlTQ5b0rBGCmEIYR/ZcQOLNHPXISpSr
- TLSH
  T160F6E0F4EE56CB7AD1A204B3DDB1476652072EC552962687C4D4B2333AFE27837E221C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral16
- Target
  R SLASH MASSLEAKING/RBXL/Randy's Weis.rbxl
- Size 5.6MB
- SHA256 cdd39a81c19caada85bb36ac31fd5995107860bb3f7cc5279b80c3fc2dc04e6f
- MD5 c162c98ac89847594eb4010058532223
- SHA1 0e23431e7554a1dd3f769800204f3fc37c6a42cf
- SHA512 3d93d78d1cf1b033d77205752da3e919e4f468e1e0a34b32d4817573ca2d4cc24785bd99824ec266a52933a439e9dc1e2ad645f4285019eb1780902d92e90cbe
- SSDEEP 98304:Usl/YOUuk6pJLoHq/xsMhziUE0VN/nhI5+mIgs58y:UslAOUuPHo4xsYpHhIkmvy
- TLSH
  T19356E0F4DF52CA7AC1B204B3D8B1476656067EC592922687C5D4B6336AFE23C37E221C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17