3c61b40154c8a1c36705b56c9c09979b9301f738c23d293ab5b6f2886f645195

Sharing

Copy URL Twitter E-mail

General

Target
95_L4D2V Reborn V1506HF1_09.11.25.zip
Size 972KB
Sample260702-y3a92sd18x
SHA256 3c61b40154c8a1c36705b56c9c09979b9301f738c23d293ab5b6f2886f645195
MD5 dc30a2f60c696162a5fe9fa7ff64a96c
SHA1 81bb29f245a156b44e8c08857dea3654cdb0bb17
SHA512 0bdb0b22106a935f8351c58dfab32d3d38a34d7e1dc939f2640981111a69ce012391a7d978914e3c9ed3742cc40e6bd8faca7582c161598dc6a7b273949f0c6c
SSDEEP 24576:rcvQfom/6iN8XctH+kZlJbkQJ6TtCvtpBF87Jb+l:yQQAUmeklbkUtlIJb+l
TLSH
T1E32523CEDEB2DE17125EA9845AD1363D3BB2206EF921137DAE665C4108BCD45B4C223F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  95_L4D2V Reborn V1506HF1_09.11.25.zip
- Size 972KB
- SHA256 3c61b40154c8a1c36705b56c9c09979b9301f738c23d293ab5b6f2886f645195
- MD5 dc30a2f60c696162a5fe9fa7ff64a96c
- SHA1 81bb29f245a156b44e8c08857dea3654cdb0bb17
- SHA512 0bdb0b22106a935f8351c58dfab32d3d38a34d7e1dc939f2640981111a69ce012391a7d978914e3c9ed3742cc40e6bd8faca7582c161598dc6a7b273949f0c6c
- SSDEEP 24576:rcvQfom/6iN8XctH+kZlJbkQJ6TtCvtpBF87Jb+l:yQQAUmeklbkUtlIJb+l
- TLSH
  T1E32523CEDEB2DE17125EA9845AD1363D3BB2206EF921137DAE665C4108BCD45B4C223F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Injector.exe
- Size 17KB
- SHA256 a38112805f80f2302749b185e302224a3fdfbf137e745992aa559734a8517243
- MD5 bab5f107a90470a528fd738f295db88c
- SHA1 2e777ad2c0cfe178cc3d48bae6d39443b1717e1d
- SHA512 541b63248dc47fd1e3d4b7f4fd8503f3d13cd3ff8387137544192d98ac198454e56a6e99fa26c99506de3b98ce1a22b6053cca269bfcbc2a82666f4f6ab62c03
- SSDEEP 192:OplOFPwfNN6q6Bg2SJJrg6WJsujOIRfLfjYDx0nINHIHYm7uEJHgxF:wIFPwfT6BgJ3gvJVj3fD5nIN/8NgxF
- TLSH
  T16C822913AF434671DA5A423314365226CBFFA1A06B9555CB97C4DE280F763E4AC3D14F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  VR.dll
- Size 2.1MB
- SHA256 d804516ada50c7438612353df04a581ff63ae97a09bc5bebe27395a86cb5686c
- MD5 11a1bba7b406e5735731247c7f2fef9d
- SHA1 1b7fb440d6713e0b08cf5e7c134c8d405e3e858d
- SHA512 50cc4ba06d6f8f57f44ae9fa885d89be645c93704df76cf4c224b768b6d993d47134ac7dd0ee8e724c96c3ae5730243fb149ba2f5ad440e85282b57b6dad0512
- SSDEEP 49152:OMBP8aN1pJw1hypDqt7OcM50/zZRpKWYoJiKs:9N1U1opJ0/zZRpK
- TLSH
  T1FFA59D11B2628075E5862070B1BDBBBF8E2C550D132C98EBF7D46C98E9790E1A37719F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  readme.txt
- Size 814B
- SHA256 f4a2eb0c44ef20befe876777db8d2c239f8e721efecfc0519e4d4d489d57b586
- MD5 61bcb5340c5f1f0365d24bd35270e7bc
- SHA1 9dc1774c5b49fe4311367336e24be46a6b945932
- SHA512 b5fe11a76b43db67e8851d18cd33652938109e4ebde183a7974377951add70de1154d6c5f8a6d078de62efd0c0be424f20dddb6001f5f9b60477a0bf78cb03a9
- TLSH
  T12201127748A1F57314A240D6D35D34CBF90AED1AE1164B5038C3034E104AA85C3F4C77
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8