361e9c3943900754dc1474cdd7e8b173a39579f028a31cb7828adc6c005ad953

Resubmissions

03/07/2026, 17:35

260703-v6d9bsas2r

03/07/2026, 17:23

260703-vyc2ashz6q8

Sharing

Copy URL Twitter E-mail

General

Target
HIT-SOUNDS.zip
Size 61KB
Sample260703-vyc2ashz6q
SHA256 361e9c3943900754dc1474cdd7e8b173a39579f028a31cb7828adc6c005ad953
MD5 84f4884d2f00f1a8ac8dad899830c462
SHA1 b1c47a17c6b85408d307f8e1620b896e214256b2
SHA512 5b160b00344cf91de2472dfbeaa4a92d724d186beda276163ba8d96e1e14c11d385f84b3cbc36b657edc13b5b7c9dc49cefe26174db24b728a855fd03ce9bfc3
SSDEEP 1536:0ReCvf7LeJ1uvyC8vn7//ulF+RoPWjQgEFS:0ReF6YvruT0PjR
TLSH
T187530299958E1DA0CB87EF339E4E7A604BC52DE053B0F993882C661A55F2311294EF4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  HIT-SOUNDS.zip
- Size 61KB
- SHA256 361e9c3943900754dc1474cdd7e8b173a39579f028a31cb7828adc6c005ad953
- MD5 84f4884d2f00f1a8ac8dad899830c462
- SHA1 b1c47a17c6b85408d307f8e1620b896e214256b2
- SHA512 5b160b00344cf91de2472dfbeaa4a92d724d186beda276163ba8d96e1e14c11d385f84b3cbc36b657edc13b5b7c9dc49cefe26174db24b728a855fd03ce9bfc3
- SSDEEP 1536:0ReCvf7LeJ1uvyC8vn7//ulF+RoPWjQgEFS:0ReF6YvruT0PjR
- TLSH
  T187530299958E1DA0CB87EF339E4E7A604BC52DE053B0F993882C661A55F2311294EF4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  808.wav
- Size 17KB
- SHA256 86fb9cb7d043d9b0e156bf516ab19df0562e341128948d21d1b6855a38dad532
- MD5 d819ee83630a8e56417ae6330cdaf1ae
- SHA1 7aa2b8df538c6d49bf79dabe292a844524125545
- SHA512 8ddf9908f139f92237bd084797a2132cf69f7466e5dbe619ec3830a6384e57d416fca74213716f7d25a99d3dfc9c676b504a98345a172f9d413e0bee68a86c2d
- SSDEEP 384:2pGQqQVLqGiWee3xyOye3jrWzISx0aABlcWWSFNbR59KE:VQqQVrreehy/way1vNbn9x
- TLSH
  T1E7722A9215B6EFB6800421E5505688EE1800CD35A91BF22FFD737EFFE0A167D473A192
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  bableki.wav
- Size 1KB
- SHA256 e6ac00e556886a9ea28c88dfbcda7c3fe4bfdbb275a3f9182b4d874bf0b18d21
- MD5 fe8b332db9779307a81ac95a69ace393
- SHA1 a3da76fbdb8581354456ef490d43750157b50f99
- SHA512 e8227ba3bc2324d0a5059cf64edf59efbd4c143c484aecb5b11d85d07881c78f06ef78e6fccc73e240fe6f069d6a957d2b6fed9ef28e0e8275fb4b182fc5d532
- TLSH
  T1D921AFA0DB79CAEBCB4E263266400E4D21685C3D75EBFE039A2A04AC7C133D0C31491F
- MD5 SHA1 SHA512 TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  blackops3.wav
- Size 6KB
- SHA256 3a23a97cd847327a42818e405e00388fa2abc693954e416dbd4706d2ce6f90c7
- MD5 4b2d8f7ef28aba144c794d27405c9ab4
- SHA1 9ffc1197ceb0e063943baf86fed773215a4273c9
- SHA512 0f913be33768aa7a0d28e77841eb443f1b0d5c8c3146e7cc2a58fe455871d6c47a20d8e1c50723cb4b7276841283f4feed1705fc3d95539bf360892c6dc11876
- SSDEEP 96:HrrgIYcs0kKaUJbr4LbcjUu0IMWjTEtYgy9hmQKDvT:HoIxR6kYu0FWjTEtYgssDb
- TLSH
  T198D181C5A6AAD66FC08921F5C444E4FE2508BD16075DAC57B0E3AF2FFC2E6B9013D560
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  cod.wav
- Size 1KB
- SHA256 54a1e06a6dd12b4d3887a082128c8b552b4e9660d6256d6dbe1593f32d3a2328
- MD5 6efc0e5de81c5be021a179e08a724577
- SHA1 3ff2a021b8bf1118f9b6ba2b7061c9eb51dc143c
- SHA512 1ad5dc77cf6ada25dc50826014d6f07980202a8fec6e11e2f7520e323d21fc702b43ac52ce6052d2472fad06bdd4bcb10e50d6eae9e03d7b44976e2a10620c28
- TLSH
  T1942170C3A66506BBE00FC87849A86B73292060A802C643C384648262CE900BB5FEFC42
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  cs2.wav
- Size 16KB
- SHA256 01b365c4113ec22d2b1e8a5ff1c9dd0112111474395ab25879b83a07923a1011
- MD5 0df83925d4228ee3187c8e960354fc7e
- SHA1 cb89f8983b4d5a2882e18bbd29e3df6cc713f76e
- SHA512 2d66d0599c3908a64e3ba55e374cf92281076626ffc67861c30b94e5dbb7ab31ff50c2dcdf121b8569f391c3349948bba5dca272393bd4fc0571fb2e1ce3ed87
- SSDEEP 384:Du5jqxG3WyLvaksL/mHAHMjynEOT7Aw591lEBAOG:DudoqnYugH2w5Dt
- TLSH
  T1E472C0431AF6D7BFD22BA77C184ECBB853419C8AA4FF48164AC1630BDC999D47848F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  drewno.wav
- Size 5KB
- SHA256 0ae5861eaeef3cec99605d8e721009fee19b8a8d1f27b279959c4f1df0548f25
- MD5 d7e0933303f153afc5177cd0cc521085
- SHA1 435e0e14a0abd1d46d4a7cf4215ee20095873cdd
- SHA512 415daec005b3b5096a0e0ef8bcb091d7aa0c258a35090ff099a1ba99a3bc588e6eda8763121b6bbc2c81bb94593e363f1bed9e2a6fb8e5cf2be5269ddba21605
- SSDEEP 48:bDR+UorKexazWhdYB/nhxw+NNzwe6oUf9n5lyatW0srpW+CNFCO9+bR1Fq:bsUCNUiYVnF7O9t7yacMNN9+bU
- TLSH
  T1C9B175957EB1CAA3C50C2174501548CC204CCD38BA92EB5B76632DDFB57778AC50A95B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  dustquork.wav
- Size 5KB
- SHA256 9286aafe1f1e81c40b7d4ae5cdbf5e6f6307cf4a1a291be9d6146ebad0d9a83e
- MD5 28f01144723440286f00e51c871bb2b3
- SHA1 4dc212baccd14535f1f11a9c0d4bd9bb394804e6
- SHA512 e6a35b058792fce74f3c6760fef22c9325546ec463737e09534c1e3f6b6c814e06ebe3c8d9010982f276882ae5410da42d46c3754e47583a28d75a26d6d51eb9
- SSDEEP 96:cXAtk7uPcagLsxbnmPT3lsK2jxhC+maJWkZWvtCIeJIHzS9Uq2:cEk78cagY1mPT3lBKc+/JWkZWU3J+3q
- TLSH
  T18BB10088DD68D98CC05BDE7462896CEC33D0B5A82FF5AC970354DDDF089A28439CCB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  rocks.wav
- Size 6KB
- SHA256 4f846e603170e4877caa2afcdb7cabb6cd98813011ba7b10ea46aca466afbd0c
- MD5 9ea34994b6202bfae3b295f6185b36c7
- SHA1 eda1945de4880104277f9d9fa4239717de69c8f3
- SHA512 f456bba1dee5ac79335aeb5b409bce92f6051b2f39740d47e2a25668511ba0681ada083877fe42a40ee6305bb79640a9991dc98cfea15d5dbadc9ec96982d183
- SSDEEP 96:HLRy2tSlJ22PiQwi8hwWnuMlRo87nImlZYoHNWIPEW96WUYgIDtfhY1mFg:HNyY2E26QwjRlt7flZfQgf7UYP5Fg
- TLSH
  T1CDD1A0354C2540671A7368F48B3D181658DFA31C828B8B26BCBC551BE4496FBD77D42A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  siekierakurwa.wav
- Size 18KB
- SHA256 a4c5dedb84c138aedfb2dd5845428a62017d367c062c5bec8074a053429c0ec8
- MD5 aa9041546174a79ad4335f92a57bb658
- SHA1 3664045cecdb51dc322bfd4bcfca20e516aa5f55
- SHA512 77ea1ca83e6e1f83d978e470074d2412ebcb4ba41086921894e03ee0a1f5140dcec3ae479a34bf244e239a9a6b6738730a67a2e89e8bc452c14d1d4dfa14afd6
- SSDEEP 192:gxz9Gkcep2PG2wl5uHJ4RgtOXa6hHlhJ/8kBE1Ah/CE0:cnhp6bOupLtQtTBlQn
- TLSH
  T11B82F8E2C704306FC05D3A7EA05157F13790EA6454C54FAB52C98BEF6C8E9C46DB8C5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  tyryryr.wav
- Size 7KB
- SHA256 8d744163eabb5476283ca91716f62837a43b61d32dbc3ba605e07a8b47c7ae3f
- MD5 4e072011c3c9c74198f59cf73cbb21bb
- SHA1 cbe0ea3a6389a546bb2eee9614a2071d9baffba7
- SHA512 4125fa5a6f39771a6b1e4378650a92237effcd3607686cdad12c4d82650c847a7da40165725e4bba0c0f9ff1b0dbf07c4de53a1fc70d21fcd688ac8a62205305
- SSDEEP 192:kSKKf63Q0MKrINSl9MchYSMZ8HBakKyGZcK5ou:03238mSMZWGzcb
- TLSH
  T18DE18E4A6981CA44C7F8A474415E559E52D35F323B88F5C70A57F4A57270FF27822F4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  villager.wav
- Size 31KB
- SHA256 a2a6010d0ce84243239bc51b1a5b2b0ac356edae0cb4cc4b773a24bcd5bca951
- MD5 178db41520c6c7b2c3459884dc64a4b4
- SHA1 b18abc6f94c4b6e806c4d0ce76d956ed6c978e1f
- SHA512 469a22388f4baa7b2b82eb06e1e2b6b2189927e8c5b35380d514422161759ab33e0b6e05353e2e083f989478e17aa7e226639e56346a2aab4a2620df51c94c3e
- SSDEEP 384:hATJEghgugZHTdMq+pnz5A3J7Y+oFF2ZWV3F3m8f6sSj9l:hATJEghgjzdS9Si+SFT3m8f6sSj9
- TLSH
  T144E224E235EBDAB2C8804178CA15D4AD40147D3B9A1EF517BAF72EDFE463249422F472
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Drops desktop.ini file(s)

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24