237c6ef1e03f99a60d6500a437fb7a28e450a28d02580c12e2d0c735f49b232b

General

Target
SMU-src-3.2.1.zip
Size 1.8MB
Sample260703-3epvrag17z
SHA256 237c6ef1e03f99a60d6500a437fb7a28e450a28d02580c12e2d0c735f49b232b
MD5 81dbf33332a903946454de550cf50379
SHA1 4ea9615c197d84dd4d6353c75e1d75e969dddc0b
SHA512 09b4378dc121023d673b6609e0b468d50a9c4d19abbd7d508910e1fc630b036d20071ecdfb4ebf68ba285f382d6b1359ec329718f8fbaaab47731bf4dd7cb70f
SSDEEP 24576:qD6a2XT+cXjEDrK5aQOQXJmA3hvQfJUjTGlEUHiVn7Rk6vfXUIxn0906OtNzjtMy:qoX1k8aEJmzEVn7RkQG903zjtb
TLSH
T12995AE57B2D401F8D0B6E234D946A907E672B8440F7096DF1BE04A9A2FF37E05A7E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SMU-src-3.2.1.zip
- Size 1.8MB
- SHA256 237c6ef1e03f99a60d6500a437fb7a28e450a28d02580c12e2d0c735f49b232b
- MD5 81dbf33332a903946454de550cf50379
- SHA1 4ea9615c197d84dd4d6353c75e1d75e969dddc0b
- SHA512 09b4378dc121023d673b6609e0b468d50a9c4d19abbd7d508910e1fc630b036d20071ecdfb4ebf68ba285f382d6b1359ec329718f8fbaaab47731bf4dd7cb70f
- SSDEEP 24576:qD6a2XT+cXjEDrK5aQOQXJmA3hvQfJUjTGlEUHiVn7Rk6vfXUIxn0906OtNzjtMy:qoX1k8aEJmzEVn7RkQG903zjtb
- TLSH
  T12995AE57B2D401F8D0B6E234D946A907E672B8440F7096DF1BE04A9A2FF37E05A7E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  suspend.exe
- Size 1.8MB
- SHA256 14ac0a5d6368ef22334696e7f1479442db29c9ee81498d291e8728ad9340a55b
- MD5 82b7bed3173a249d84355790a10c6013
- SHA1 205efbe2440e05217dad4e64bfb65f0a98f1fddb
- SHA512 b0a57281ee7af6c8fc9a8c415682f5a83aa89bfca117d9ee4630dd7d6b8875493f14ee1b3f27769a09eda09bef67d3ce9207c33d8436666f2861c016d6ed33b8
- SSDEEP 24576:0D6a2XT+cXjEDrK5aQOQXJmA3hvQfJUjTGlEUHiVn7Rk6vfXUIxn0906OtNzjtMH:0oX1k8aEJmzEVn7RkQG903zjta
- TLSH
  T13F95AE57B2D401F8D0B6E234D946A907E772B8440F7096DF1BE04A9A2FF37E05A7A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware defense_evasion persistence ransomware spyware
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  defense_evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral2