63ef21d91d53c4f6ce8cd7bb18c2d6cfbef8b7832940ce7aea41f20f9eff3732

Sharing

Copy URL Twitter E-mail

General

Target
resight-v1.3.zip
Size 107.4MB
Sample260703-q55mnsft5k
SHA256 63ef21d91d53c4f6ce8cd7bb18c2d6cfbef8b7832940ce7aea41f20f9eff3732
MD5 606da1c12c3a55783714026f18652476
SHA1 1de710a2b37689a5232c157ecf2d0e3b3a6b1061
SHA512 769a3e756d6b9bdeedfe9bc5fb37fc49ea385e628c04da1d6c3f7a0c67ecb77e052c195704fde6446ee64a656a4c8e11f93c86b524ebb914462d6312f909eb0a
SSDEEP 1572864:KPj6wzcHbV708BhnCDkcnAVNIoWzFvG21yeTdouZuP+FhKRTdVn3/gJgzy:KuwubV70QcnUN+FvzvTGz+eTfvJy
TLSH
T1613833A91FB49239B464AC8D0B853C54B83B9EACF3F6D1BD185020845DF6ECB71294E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  resight-v1.3.zip
- Size 107.4MB
- SHA256 63ef21d91d53c4f6ce8cd7bb18c2d6cfbef8b7832940ce7aea41f20f9eff3732
- MD5 606da1c12c3a55783714026f18652476
- SHA1 1de710a2b37689a5232c157ecf2d0e3b3a6b1061
- SHA512 769a3e756d6b9bdeedfe9bc5fb37fc49ea385e628c04da1d6c3f7a0c67ecb77e052c195704fde6446ee64a656a4c8e11f93c86b524ebb914462d6312f909eb0a
- SSDEEP 1572864:KPj6wzcHbV708BhnCDkcnAVNIoWzFvG21yeTdouZuP+FhKRTdVn3/gJgzy:KuwubV70QcnUN+FvzvTGz+eTfvJy
- TLSH
  T1613833A91FB49239B464AC8D0B853C54B83B9EACF3F6D1BD185020845DF6ECB71294E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  LICENSE.txt
- Size 9KB
- SHA256 7f6839a61ce892b79c6549e2dc5a81fdbd240a0b260f8881216b45b7fda8b45d
- MD5 31c5a77b3c57c8c2e82b9541b00bcd5a
- SHA1 153d4bc14e3a2c1485006f1752e797ca8684d06d
- SHA512 ad33e3c0c3b060ad44c5b1b712c991b2d7042f6a60dc691c014d977c922a7e3a783ba9bade1a34de853c271fde1fb75bc2c47869acd863a40be3a6c6d754c0a6
- SSDEEP 192:ydP0KvBLCqikR/EgGJLrlwD+eilNi5Py1SDeoDXDw9lF5OMz6Q:PWBuqikR/EDJLriwlNi5KI1Tw9lF5OjQ
- TLSH
  T1EC12B57D7284177109D207E16A0AB9D6F62A953C3117AA2438FDC15923AAF2CC37F3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  cfg
- Size 3KB
- SHA256 60099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5
- MD5 d9bc824737177af5792846f26507231c
- SHA1 c44835e4881d95a97b597bebff5deba0233a5887
- SHA512 f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8
- TLSH
  T114610CABF16C48F87171266692FFFBEC51B380A0DD3D2105AE11DA021927F67C853AC6
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  libs/base_93.002
- Size 714KB
- SHA256 dfc3100a7d72b3b0ac2b03f03d9d758a3fe00ae9dc5b0a33ffb2801c414026d7
- MD5 29bae72d3cc6bb267f74499a813af555
- SHA1 1018ccec200a900b5f9d96cce002bfcd51ee2c9d
- SHA512 b2dcef9771fd9cc4358d1c07d3e2bc260e71a023f03e7756452fe16d71bb88cad1332da219c0684c0bfe5df208ac6ad2907de129e287d46d75019771523b4251
- SSDEEP 12288:Ke4opyQTas2CshTL2ti7BsxW7VZPcOWdkxh64YZZ7TyfUkkyjNAYP:ee2nC+pFfW9O8XrvvpC
- TLSH
  T132F423830FFA0CADED882540DA53D8E8A815BA1CB977D8963D28E26715D4FAFD0F444C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  libs/build_117.002
- Size 663KB
- SHA256 ced7eac9bf6aab9007b6adf5050328410f2854d335371b95203d1fd3bde31ec8
- MD5 ba97d0725624b74c2e7421eff0dfdab9
- SHA1 0ae45a87355a9ebeadca03a63d2cb35e74fdc434
- SHA512 63b1ad7629f8c102ccfc902c9dc30ffb5b47b9d0baf84ea52c42d460e555d5c580cdb063375f165c4a584f783ca24720d71b72ad2de1b43fc1d67d6858346f71
- SSDEEP 12288:yJOvOGjq75WbOZyg7bvylXYn/sPpobkcRQ2DXvU1:4Omn7IJg7ml8lfN4
- TLSH
  T1C7E423592F5C6D7D05E58CD7124E3EA22185823D2AEB4163CC848EA9C4FD7B0FBF2265
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  libs/build_17.dat
- Size 676KB
- SHA256 b7cb77cbfa6061695e8a7fe5bf9570f10c6f3a50a25b044f651b61486e490558
- MD5 e022484069f9d71c340ae2f43ab2599f
- SHA1 d3d93e181b9dc3efbe0955060e90a57b3c950036
- SHA512 a554472cdb4ab3a1534fdced2cfe0fe27ea2c75274e2c7fc374b22f1f1ae241f3fea294fbaaaf0f6e4d261989ed4969ecd610a899e48b1fe3f2fe55f81751c3b
- SSDEEP 12288:CrO9bjZazuGPsPKkhFNTdt6cRvke8BS3O/Iiupu5TEN+HVw:+O9bVaiGP6hFVdt6ovktS3ESp2Vw
- TLSH
  T1B5E4238BCF455DFB12F24876A5997B9C7D3B1150C7AE2A14785931208E73938E223CEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  libs/build_50.sdata
- Size 655KB
- SHA256 8369dbee0f93437c78cfafd36d860d9816640c99af5f29382f5a3cae2fdb09d0
- MD5 2fafb5bd367bf03b3b689d5ca65c09a9
- SHA1 5ebb858936317848f276736579c55bfe424c1491
- SHA512 d6fe8c8a7b911262f58a81459b82c5ae3a3b2b6d9e7cba27caa868e879b131f6b5a99fb00a7d7b6007396f0b701456bd726bfffd63c725b8b5d31a3adf9d639a
- SSDEEP 12288:5atUbD/tItM5Tnl8JUwf0sjJJNDsH9unughCtzYR4OioPibxd/8OFMN:DLtItM5i8sjJTAH94hEt23PibxXFMN
- TLSH
  T128E433350661407D46D7168B1AA330FEB8424B6CDA0AEAE16FF4123962DDC25CB7DCDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  libs/cache_16.bin
- Size 725KB
- SHA256 735c64b371a2e4d3d1f09524a0630fe39578489ed7c0a98034664ac19adf430f
- MD5 7a4e2ff756d231bb3427cd7fa385e640
- SHA1 b46d7fab20055e0bd949194c5ef767b631a1be1f
- SHA512 fd7a7e7ab136a5790ff2412646eb1a721b267ade569fc997c130f78889d2d8ef7560ef56ec13318703949a9616d98d0556002024133c4b5fbd7e34111b1e11b1
- SSDEEP 12288:jmqgXSgcLCDgvWXLYhhEbUvwESp9XHSQgbswFotTdVBUD9s1Rbrs6RH3gwOykWO:Vb7u0hhEawE+EowFoRMe1RE6RHOy8
- TLSH
  T131F433F60671750C908A9EC7B7407CE34E2B2AD09559D1899E3473A28F21D6F097B47F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  libs/core_39.dll
- Size 710KB
- SHA256 b75f5d5c50fb74e5593ad93e0706ab07fbe0439658ebd758f1bdccabdd479001
- MD5 568245c343a7351c10cbf0505f4bff22
- SHA1 859a8af307f9a51e281e2caf56169b123253d359
- SHA512 a4adf6fe725a670b52975b721671923f9a3acb353316525e9c4ef7f1cfad7751bccbf566f610c8904fcaba00e97e0949a117c6aaaeb2e67f0031b2311e776737
- SSDEEP 12288:sDexs9rzEeCZ6sySytrJX/iiNyueg/z/P1USthoZPRewnF9EmvGQdyN8dcSpPGQN:s6xMzCZ65ZiayrgDPmXdbEmB08dcSgQN
- TLSH
  T163F423D4624C3A39FEEA352013A57715E727087E6CDD5C0941F5EE2AAAA5DC32B243C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  libs/core_81.dat
- Size 580KB
- SHA256 309157abcfd1d83c7a6522438cf862eec7e7e9c54d3cea18cd24123e211d7455
- MD5 edd82118be5df0ba4202d37fccb63cb4
- SHA1 65e67b84afd6b69bf3acd352c501ecbb6060fb0b
- SHA512 45b15e8efef9bbd20c05e0ea916ec29139afb760653d22397c5a44dba11a5858f401754e2869bbfceb4d5236c77eb280be55932885cd4dde1a46bd16d00f4940
- SSDEEP 12288:e/+nliqrnyhAH/sf0FsLBqPLyFCMy93M5M2hkVm+BreEAqlZY16kLzdy1aszriSU:MqlnrndUdLBqTycN9c5M2GLReQZb62p0
- TLSH
  T161C433CD707BB99791D98F42B6273C12EA3B3FF6D4E2C7A92D10D0950A5A13048AD877
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  libs/core_94.sdat
- Size 613KB
- SHA256 53877bdae0a172b2f4ebaccf01a94317825470d27dd5cbca40bc3d0c2347cb9e
- MD5 f85146a59078945fcb2166a709a83ba5
- SHA1 f6cb5b3697e32016b2d164ca5f537077253448be
- SHA512 d096f63e7ef2afde6cf9d95bd90ac31621eb888468f72dc7c9445275417658c4f3e1d33c92ad545162304e114aa5c358be77b04f263d13e310117c4715c6f0ae
- SSDEEP 12288:/bVafAkNoRY4bB8MM27PKq9KxTdDh29vC7PFeS4AwpRkFsVuOLE7:TVyAkN+5bBRMYL9ulh2NTQ1akd7
- TLSH
  T1E9D433225F45C28387D85A67F4D20E4B2C4AB0639EE377987953B748F4A8898750FC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  libs/output_127.dat
- Size 558KB
- SHA256 e0ea15feb8aa94371fdb3a317053b7937de8058dc66b8e267dfaf4b66a69579b
- MD5 ecd9a38d3f1242bd8d979c5cfe3f5ced
- SHA1 7eeadeafca1c853a74c5913ff6b6ef8fe1279946
- SHA512 4359864cd107c3f7355c7610757b6a604d621aa865a5c88642cf0dbafae954f16043d0a0604791ad1ea0d862ffd5f4cc67937616b104e04fce0bade316792865
- SSDEEP 12288:9YUyqt5nDnd9Jjniit2BsMR8XB5vZQEkit9iWMmMIF1RW:9YUyCzPVng8XB5v27iXifPIFXW
- TLSH
  T142C423A4ECE7299DED8EB1536A89157814A6DB7BB22083C45D9C702FB476C73D04BC23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  libs/proj_124.bin
- Size 562KB
- SHA256 937c83b9fa94303b9946ebb7562e7790405076b26459fe2cd1ffa6bc6279e903
- MD5 45613d1c16258f0e8f7b6e913479f993
- SHA1 3ea1d53d71d7e22a80f6d55324c479965cde870d
- SHA512 a79d726dafff2cf4dbcd78a3b0a60387c8d34a1d128a9ee40d6ce348bfec4efe8b5741c13c1caa043562b6780c7eada184efcaf413019578866206afd4b35e51
- SSDEEP 12288:YXXJCH6XlN3CCfcmvKW9hhWzBaHVEI9JV:OXY6XlxCC0mv0S6I/V
- TLSH
  T135C423DEAEAC8134B815FF9F321101911DDB62FA4463E178F52971782E39987BF18472
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  libs/record_49.bin
- Size 545KB
- SHA256 825b397bf406a10f74f8291c03b56971067ee171be673daa5cc828278905f1f2
- MD5 73bec073e09e733854bb733e0ed2eee6
- SHA1 32686d9ab4cfc3572c24b58fdeef830942c44fbd
- SHA512 d7ce52682d9275c6763912431a101fd631ea1641d12a7e813badcfb4e66a83af1066be8cf107d03b8522fcabb968fa235ca91c2f7dc4bcea1e4c8710f5879436
- SSDEEP 12288:OVXFlrczGihZBSN3l4+p84RCr1QQ8VXaFuGHdUcCR:OVFlrKGibBHmRHNVXaQzR
- TLSH
  T13EC423AB054992C59476D3F5035FEDD788283D082AA4B2D7EF1ACD04DF2275AFBA3610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  libs/record_69.000
- Size 586KB
- SHA256 4901241c72700174f4558460e1bbbc227fd1c0af2b461ba76ce9780937debcac
- MD5 4e1e3c6fbd7d9d1d4c04135f02f53bcd
- SHA1 774154665b911d509a397b720a52fd7f8a024379
- SHA512 bc37b3a40f1461e6a486198146baf0ee70645a86d8d20d0f956b77b3a33d96c76c53756b959e1cd085c29ea28167520f989ccdac89e5861fb0bfd410f2625440
- SSDEEP 12288:diAO0L5FI2TGEbPGWmzyFwssWa1Z1YtgXFjJ6hY8VLy9Nz4YbUf/9v:dvf6o44/+DdXFjJ6i8G09
- TLSH
  T1A6D423979EEB9A4C7861B7043C2D140EB1AF4AF4F6E4307244EF7A31191CD929747E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  libs/record_8.bin
- Size 557KB
- SHA256 3fd4c3ae26724cd7b2613c6af80f846385f735b010c814c4a9cdd2768cde674c
- MD5 10086ac27c890abc5c48c84498e9ce23
- SHA1 c597d6a9a368f37d4e2e03425c52c2a814e3a901
- SHA512 e1e327f707d95ba71fa6c4913ab5a60d2b9b986c75c6e7e61376b30127222299728143c44a21787ff941b6252719d32d96178ccab6f4c41b11a39ac50f2d917b
- SSDEEP 12288:Na9Ubq4ogbKN9CuhsrBPMd3sIiQ7QkH1sKEsh:IiKN9Cu+BPA8WQkHahQ
- TLSH
  T19AC4239197FC2F7B0AB880CAFF555E0A358FBD5625A8B29C5213D273052CD933B4B1A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32